26:I[10321,["/_next/static/chunks/1nkjstpmp978x.js","/_next/static/chunks/2ysmnrb0knc4n.js","/_next/static/chunks/0i2jherxtxs7l.js","/_next/static/chunks/23qlsjvno4-wq.js","/_next/static/chunks/11pkz44bx8x1b.js","/_next/static/chunks/04k_7k5p4krw4.js"],"ReportDetailWrapper"] 3c:I[27201,["/_next/static/chunks/1nkjstpmp978x.js","/_next/static/chunks/2ysmnrb0knc4n.js","/_next/static/chunks/0i2jherxtxs7l.js"],"IconMark"] 25:T511,{"@context":"https://schema.org","@type":"TechArticle","headline":"Clean Trojan.DOMG — Falcon Sandbox Report — Score 100/100 — Sample 563bbf8d20ba…","description":"Clean verdict for sandbox report 5c9280140388…. Malware family: Trojan.DOMG. Threat score 100/100. 5 malicious and 22 suspicious behavioral indicators across 69 signatures. Detonated in Windows 7 64 bit. View behavioral indicators, network activity, dropped files, and MITRE ATT\u0026CK mappings.","url":"/sample/563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334/5c928014038838ca2336b70d","keywords":["Clean","Trojan.DOMG","sandbox report","malware analysis","MITRE ATT\u0026CK","563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334"],"about":{"@type":"SoftwareApplication","name":"bcs_service.exe","applicationCategory":"PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive","identifier":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334","additionalType":"Clean sample"},"threatScore":100,"malwareFamily":"Trojan.DOMG","sandboxEnvironment":"Windows 7 64 bit","behavioralIndicators":{"malicious":5,"suspicious":22,"totalSignatures":69},"publisher":{"@type":"Organization","name":"Hybrid Analysis","url":"https://www.hybrid-analysis.com"}}27:T400,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28:T400,AAABAAEAICAQAAAAAADoAgAAFgAAACgAAAAgAAAAQAAAAAEABAAAAAAAgAIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAAACAAAAAgIAAgAAAAIAAgACAgAAAgICAAMDAwAAAAP8AAP8AAAD//wD/AAAA/wD/AP//AAD///8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB3d3cAAAAAAAAAAAAAAAAHd3d3cAAAAAAAAAAAAAAAd3d3d3cAAAAAAAAAAAAAAHd3/3d3AAAAAAAAAAAAAAB3d/93dwAAAAAAAAAAAADu53d3d3d3AAAAAAAAAAAO7u53d3d3d3AAAAAAAAAA7u7u53d3d3d3AAAAAAAAAO7u7u7nd3d3dwAAAAAAAADu7u7u53d3d3cAAAAAAA7u7u7u7u53d3d3d3AAAA7u7u7u7u7ud3d3d3d3cAAO7u7u7u7gBxd3d3d3d3AADu7u7u7u7u7nd3d3d3dwDu7u7u7u7u7u7nd3d3d3d37u7u7u7u7u7u53d3d3d3d+7u7u7u7u7u7u53d3d3d3fu7u7u7u7u7u7ud3d3d3d37u7u7u7gAAAAB3d3d3d3d+7u7u7u7u4ADu7nd3d3d3cO7u7u7u7u7u7u7nd3d3cAAA7u7u7u7u7u7u53d3dwAAAADu7u7u7u7u7u53dwAAAAAAAO7u7u7u7u7nd3cAAAAAAAAAAO7u7u4AB3d3AAAAAAAAAAAAAAAAAAB3dwAAAAAAAAAAAAAAAAAAd3cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD//////////////////D////gf///wD///8A////AP///AA///gAH//wAA//8AAP//gAH/+MADH/AwBA/wD4AP8AAAD5gAABEMAABgBwABwAHAAQAAf/gAgAfAA+AAAAfwAAAf/AAAf/+AAn//+D4/////P////z///////////w==29:T441,SetUnhandledExceptionFilter@KERNEL32.DLL at 00034673-00003656-54281-27-0131866E SetUnhandledExceptionFilter@KERNEL32.DLL at 00034673-00003656-54281-414-01312B45 SetUnhandledExceptionFilter@KERNEL32.DLL at 00034673-00003656-54281-486-01312654 SetUnhandledExceptionFilter@KERNEL32.DLL at 00034673-00003656-54281-963-01312C60 SetUnhandledExceptionFilter@KERNEL32.DLL at 00034791-00001664-59001-27-0131866E SetUnhandledExceptionFilter@KERNEL32.DLL at 00034791-00001664-59001-414-01312B45 SetUnhandledExceptionFilter@KERNEL32.DLL at 00034791-00001664-59001-486-01312654 SetUnhandledExceptionFilter@KERNEL32.DLL at 00034791-00001664-59001-963-01312C60 SetUnhandledExceptionFilter@KERNEL32.DLL at 00034916-00002588-4946-74-01067EC7 SetUnhandledExceptionFilter@KERNEL32.DLL at 00034916-00002588-4946-409-0106331E SetUnhandledExceptionFilter@KERNEL32.DLL at 00034916-00002588-4946-1153-0106288A SetUnhandledExceptionFilter@KERNEL32.dll at 58493-4441-0051288A SetUnhandledExceptionFilter@KERNEL32.dll at 57725-622-00402654 SetUnhandledExceptionFilter@KERNEL32.dll at 57725-1139-00402C602a:T48a,"bcs_uninstall.exe" has type "PE32 executable (GUI) Intel 80386 for MS Windows" "SimpleSC.dll" has type "PE32 executable (DLL) (GUI) Intel 80386 for MS Windows" "bcs.exe" has type "PE32 executable (console) Intel 80386 for MS Windows" "NetQCheckHTML5Agent.exe" has type "PE32 executable (GUI) Intel 80386 for MS Windows" "thebcs.exe" has type "PE32 executable (GUI) Intel 80386 for MS Windows" "nsExec.dll" has type "PE32 executable (DLL) (GUI) Intel 80386 for MS Windows" "UserInfo.dll" has type "PE32 executable (DLL) (GUI) Intel 80386 for MS Windows" "log.txt" has type "ASCII text with CRLF line terminators" "bcshome.url" has type "MS Windows 95 Internet shortcut text (URL=) ASCII text with CRLF line terminators" "license.rtf" has type "Rich Text Format data version 1 unknown character set" "bcsicon.ico" has type "MS Windows icon resource - 9 icons 16x16" "MgrLog.txt" has type "ASCII text with CRLF line terminators" "favicon.ico" has type "MS Windows icon resource - 9 icons 16x16" "AppUpdaterLog.txt" has type "ASCII text with CRLF line terminators" "netqcheck.cfg" has type "data"2b:T445,"bcs_service.exe" touched file "C:\Windows\SysWOW64\oleaccrc.dll" "bcs_service.exe" touched file "C:\Windows\Globalization\Sorting\SortDefault.nls" "bcs_service.exe" touched file "C:\Users\%OSUSER%\AppData\Local\Microsoft\Windows\Caches" "bcs_service.exe" touched file "C:\Users\%OSUSER%\AppData\Local\Microsoft\Windows\Caches\cversions.1.db" "bcs_service.exe" touched file "C:\Users\%OSUSER%\AppData\Local\Microsoft\Windows\Caches\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x000000000000001b.db" "bcs_service.exe" touched file "C:\Windows\AppPatch\sysmain.sdb" "bcs_service.exe" touched file "%LOCALAPPDATA%\Microsoft\Windows\Caches" "bcs_service.exe" touched file "%LOCALAPPDATA%\Microsoft\Windows\Caches\cversions.1.db" "bcs_service.exe" touched file "%LOCALAPPDATA%\Microsoft\Windows\Caches\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x000000000000001b.db" "bcs.exe" touched file "C:\Windows\AppPatch\sysmain.sdb" "NetQCheckHTML5Agent.exe" touched file "C:\Windows\Globalization\Sorting\SortDefault.nls" "NetQCheckHTML5Agent.exe" touched file "C:\Windows\SysWOW64\rsaenh.dll"2c:T74c,Pattern match: "http://nsis.sf.net/NSIS_Error" Pattern match: "http://ocsp2.globalsign.com/rootr306" Pattern match: "http://crl.globalsign.com/root-r3.crl0c" Pattern match: "https://www.globalsign.com/repository/0" Pattern match: "http://secure.globalsign.com/cacert/gscodesignsha2g3ocsp.crt08" Pattern match: "http://ocsp2.globalsign.com/gscodesignsha2g30V" Pattern match: "http://crl.globalsign.com/gscodesignsha2g3.crl0" Pattern match: "http://www.visualware.com" Pattern match: "crl.globalsign.com/gs/gstimestampingsha2g2.crl0" Pattern match: "http://secure.globalsign.com/cacert/gstimestampingsha2g2.crt0" Pattern match: "ocsp2.globalsign.com/gstimestampingsha2g20" Pattern match: "https://www.globalsign.com/repository/06" Pattern match: "http://crl.globalsign.net/root-r3.crl0" Heuristic match: "updatebcs.visualware.com" Heuristic match: "GET /appupdates/NetQCheckHTML5Agent/windows/version.txt HTTP/1.1 Accept: */* Accept-Language: en-us User-Agent: Mozilla/4.0 Host: updatebcs.visualware.com" Pattern match: "http://www.myconnectionserver.com/support/v9/bcs.html" Pattern match: "updatebcs.visualware.com/appupdates/NetQCheckHTML5Agent/windows/version.txt" Pattern match: "https://www.openssl.org/docs/faq.html" Pattern match: "http://%s:%d%s" Pattern match: "http://www.visualware.com/bcs/support.html" Pattern match: "http://www.visualware.com/bcs/support/bind_error.html" Heuristic match: "mcssjc.visualware.com" Pattern match: "http://www.visualware.com/bcs/support/ec_515.html" Pattern match: "http://www.visualware.com/bcs/support/ec_503.html?file=" Pattern match: "http://www.visualware.com/bcs/support/ec_501.html" Pattern match: "http://www.visualware.com/bcs/support/ec_502.html?url=" Pattern match: "http://www.visualware.com/bcs/support/ec_511.html" Pattern match: "http://schemas.microsoft.com/office/word/2003/wordml"2d:T885,"Nullsoft Install System v3.0" (Indicator: "requestedExecutionLevel level="highestAvailable"") "Nullsoft Install System v3.0Nullsoft Install System v3.0" (Indicator: "requestedExecutionLevel level="highestAvailable"")2f:T441,"Nullsoft Install System v3.0Nullsoft Install System v3.0" (Indicator: "requestedExecutionLevel level="highestAvailable"")31:T441,"Nullsoft Install System v3.0 Microsoft Corporation","version_info":[],"file_sections":[{"name":".text","entropy":6.59199751092,"virtual_address":"0x1000","virtual_size":"0x13db3c","raw_size":"0x13dc00","md5":"ba7b037b97eaf07895ebf67b72562a08"},{"name":".rdata","entropy":6.22449986001,"virtual_address":"0x13f000","virtual_size":"0x7037e","raw_size":"0x70400","md5":"0597d1b6b1a38b2bfdc21e11dc319d6e"},{"name":".data","entropy":4.75268957914,"virtual_address":"0x1b0000","virtual_size":"0x1bfe8","raw_size":"0x9200","md5":"f1f125d8cf0167a1e5bf15c6806f6998"},{"name":".gfids","entropy":3.46962607364,"virtual_address":"0x1cc000","virtual_size":"0x1ac","raw_size":"0x200","md5":"080c6d38387425d5cfd44ec577c301ba"},{"name":".tls","entropy":0.0203931352361,"virtual_address":"0x1cd000","virtual_size":"0x9","raw_size":"0x200","md5":"1f354d76203061bfdd5a53dae48d5435"},{"name":".rsrc","entropy":2.70252781953,"virtual_address":"0x1ce000","virtual_size":"0x4b1d0","raw_size":"0x4b200","md5":"449432cfa31816a2aa16ad56ba59772e"},{"name":".reloc","entropy":6.62828308068,"virtual_address":"0x21a000","virtual_size":"0x10294","raw_size":"0x10400","md5":"c378bdb35542af3ea61c3c6a33730a86"}],"file_imports":[{"module":"ADVAPI32.dll","functions":["CloseServiceHandle","ControlService","CreateServiceA","CryptAcquireContextW","CryptCreateHash","CryptDecrypt","CryptDestroyHash","CryptDestroyKey","CryptEnumProvidersW","CryptExportKey","CryptGenRandom","CryptGetProvParam","CryptGetUserKey","CryptReleaseContext","CryptSetHashParam","CryptSignHashW","DeleteService","DeregisterEventSource","OpenSCManagerA","OpenServiceA","QueryServiceStatus","RegisterEventSourceW","RegisterServiceCtrlHandlerA","ReportEventW","SetServiceStatus","StartServiceA","StartServiceCtrlDispatcherA"]},{"module":"CRYPT32.dll","functions":["CertCloseStore","CertDuplicateCertificateContext","CertEnumCertificatesInStore","CertFindCertificateInStore","CertFreeCertificateContext","CertGetCertificateContextProperty","CertOpenStore"]},{"module":"GDI32.dll","functions":["TextOutA"]},{"module":"IPHLPAPI.DLL","functions":["GetBestRoute","GetIfEntry","IcmpCreateFile","IcmpSendEcho"]},{"module":"KERNEL32.dll","functions":["Beep","CloseHandle","CompareStringW","ConvertFiberToThread","ConvertThreadToFiber","CreateEventA","CreateEventW","CreateFiber","CreateFileW","CreateMutexA","CreateThread","DecodePointer","DeleteCriticalSection","DeleteFiber","EncodePointer","EnterCriticalSection","EnumSystemLocalesW","ExitProcess","ExitThread","FileTimeToSystemTime","FindClose","FindFirstFileExA","FindFirstFileW","FindNextFileA","FindNextFileW","FlushFileBuffers","FormatMessageA","FreeEnvironmentStringsW","FreeLibrary","FreeLibraryAndExitThread","GetACP","GetCommandLineA","GetCommandLineW","GetComputerNameA","GetConsoleCP","GetConsoleMode","GetCPInfo","GetCurrentDirectoryW","GetCurrentProcess","GetCurrentProcessId","GetCurrentThreadId","GetDateFormatW","GetDriveTypeW","GetEnvironmentStringsW","GetEnvironmentVariableW","GetFileType","GetFullPathNameW","GetLastError","GetLocaleInfoW","GetModuleFileNameA","GetModuleHandleExW","GetModuleHandleW","GetOEMCP","GetProcAddress","GetProcessHeap","GetStartupInfoW","GetStdHandle","GetStringTypeW","GetSystemTime","GetSystemTimeAsFileTime","GetTickCount","GetTimeFormatW","GetTimeZoneInformation","GetUserDefaultLCID","GetVolumeInformationA","GetWindowsDirectoryA","GlobalMemoryStatus","HeapAlloc","HeapFree","HeapReAlloc","HeapSize","InitializeCriticalSectionAndSpinCount","InitializeSListHead","IsDebuggerPresent","IsProcessorFeaturePresent","IsValidCodePage","IsValidLocale","LCMapStringW","LeaveCriticalSection","LoadLibraryExW","MultiByteToWideChar","PeekNamedPipe","QueryPerformanceCounter","QueryPerformanceFrequency","RaiseException","ReadConsoleA","ReadConsoleW","ReadFile","ReleaseMutex","ResetEvent","RtlUnwind","SetConsoleCtrlHandler","SetConsoleMode","SetEndOfFile","SetEnvironmentVariableA","SetEvent","SetFilePointerEx","SetLastError","SetStdHandle","SetUnhandledExceptionFilter","Sleep","SwitchToFiber","SystemTimeToFileTime","SystemTimeToTzSpecificLocalTime","TerminateProcess","TlsAlloc","TlsFree","TlsGetValue","TlsSetValue","UnhandledExceptionFilter","WaitForSingleObject","WaitForSingleObjectEx","WideCharToMultiByte","WriteConsoleW","WriteFile"]},{"module":"SHELL32.dll","functions":["ShellExecuteA"]},{"module":"USER32.dll","functions":["BeginPaint","CreateWindowExA","DefWindowProcA","DispatchMessageA","EndPaint","GetMessageA","GetProcessWindowStation","GetUserObjectInformationA","GetUserObjectInformationW","LoadCursorA","LoadIconA","MessageBoxA","MessageBoxW","PostQuitMessage","RegisterClassExA","SetTimer","ShowWindow","TranslateMessage","UpdateWindow"]},{"module":"WINMM.dll","functions":["timeBeginPeriod","timeGetDevCaps","timeGetTime"]},{"module":"WSOCK32.dll","functions":["__WSAFDIsSet","accept","bind","closesocket","connect","gethostbyname","getpeername","getsockname","getsockopt","htons","inet_addr","inet_ntoa","ioctlsocket","listen","ntohs","recv","recvfrom","select","send","sendto","setsockopt","socket","ws2_32.htonl","ws2_32.ntohl","ws2_32.shutdown","WSACleanup","WSAGetLastError","WSASetLastError","WSAStartup"]}],"file_exports":[]}},{"name":"bcs.exe","file_path":"%PROGRAMFILES%\\(x86)\\Visualware BCS\\bcs.exe","file_size":128856,"md5":"8faa68712f2319ea4f732bc777ecddae","sha1":"f9621223e376601c69398be7557c9219f2276393","sha256":"0a81d737877d13736301d894c7e7ca512f0fb2adf83a211d3dbb2af9b5482717","sha512":"cfa3acd556b1ad6c081abefe62d9f64377121062780217ae4eab463ea922d8a8e46363227270812dab85a618f6c66faab7a736b34e58f2754521b553be102bc1","type_tags":["peexe","executable"],"description":"PE32 executable (console) Intel 80386, for MS Windows","runtime_process":"bcs_service.exe (PID: 2748)","threat_level":0,"threat_level_readable":"no specific threat","group":"clean","av_label":null,"av_matched":0,"av_total":93,"file_available_to_download":true,"download_link":"/bff/report/5c928014038838ca2336b70d/download/dropped-file?key=ae2b9073b0faf9e0d3abc4efc219fbd3891f143cc78f14d74bb7d803e61449e6eb14a0121fc542ad174a0dddde37d0186be16d8680d2d82a064cfa1c13d796def6","submit_link":"/bff/report/5c928014038838ca2336b70d/submit/dropped-file?key=ae2b9073b0faf9e0d3abc4efc219fbd3891f143cc78f14d74bb7d803e61449e6eb14a0121fc542ad174a0dddde37d0186be16d8680d2d82a064cfa1c13d796def6","has_overview":true,"extended_details":{"filename":"bcs.exe","size":128856,"description":null,"architecture":"32 Bit","ssdeep":"3072:LpRVb2+lQpLuLWF90IyMNTRLkXfWgjVytYEx44cfVA5vMVLJt:M+ipLuyzLke2C5v0LJ","imphash":"400ea7e6e4c7636ccfba8c530ffa86b3","authentihash":"ff64ca7a837a472bb5bc890f6b9b8a322be8017dc05f16b88d286ca84be5681e","entrypoint_bytes":null,"packer":"VC8 -> Microsoft Corporation","version_info":[],"file_sections":[{"name":".text","entropy":6.62460348156,"virtual_address":"0x1000","virtual_size":"0x144b4","raw_size":"0x14600","md5":"3a0537e9b5b4f78aaab23b85357b9a3e"},{"name":".rdata","entropy":5.29946432386,"virtual_address":"0x16000","virtual_size":"0x6d80","raw_size":"0x6e00","md5":"2959acf85bcf939317b430040d005ddb"},{"name":".data","entropy":2.17600128016,"virtual_address":"0x1d000","virtual_size":"0x13fc","raw_size":"0xa00","md5":"2ef7258079afdbca0a6419110abe5125"},{"name":".gfids","entropy":1.7309245682,"virtual_address":"0x1f000","virtual_size":"0xe0","raw_size":"0x200","md5":"333f78a00728bdd02b562af142a286f8"},{"name":".rsrc","entropy":4.70150325825,"virtual_address":"0x20000","virtual_size":"0x1e0","raw_size":"0x200","md5":"045453f3484a5fb7bc6b7c8c2c73748f"},{"name":".reloc","entropy":6.36203309192,"virtual_address":"0x21000","virtual_size":"0x127c","raw_size":"0x1400","md5":"d420f8655f679d91d1f7837d93918472"}],"file_imports":[{"module":"ADVAPI32.dll","functions":["CloseServiceHandle","ControlService","CreateServiceA","DeleteService","OpenSCManagerA","OpenServiceA","QueryServiceStatus","RegisterServiceCtrlHandlerA","SetServiceStatus","StartServiceA","StartServiceCtrlDispatcherA"]},{"module":"KERNEL32.dll","functions":["Beep","CloseHandle","CompareStringW","CreateEventA","CreateFileW","CreateProcessA","CreateThread","DecodePointer","DeleteCriticalSection","EnterCriticalSection","ExitProcess","ExitThread","FindClose","FindFirstFileA","FindFirstFileExA","FindNextFileA","FlushFileBuffers","FreeEnvironmentStringsW","FreeLibrary","FreeLibraryAndExitThread","GetACP","GetCommandLineA","GetCommandLineW","GetConsoleCP","GetConsoleMode","GetCPInfo","GetCurrentProcess","GetCurrentProcessId","GetCurrentThreadId","GetEnvironmentStringsW","GetFileType","GetLastError","GetModuleFileNameA","GetModuleHandleExW","GetModuleHandleW","GetOEMCP","GetProcAddress","GetProcessHeap","GetStartupInfoW","GetStdHandle","GetStringTypeW","GetSystemTimeAsFileTime","HeapAlloc","HeapFree","HeapReAlloc","HeapSize","InitializeCriticalSectionAndSpinCount","InitializeSListHead","IsDebuggerPresent","IsProcessorFeaturePresent","IsValidCodePage","LCMapStringW","LeaveCriticalSection","LoadLibraryExW","MultiByteToWideChar","QueryPerformanceCounter","RaiseException","ReadConsoleW","ReadFile","ReplaceFileA","RtlUnwind","SetEndOfFile","SetEnvironmentVariableA","SetEvent","SetFilePointerEx","SetLastError","SetStdHandle","SetUnhandledExceptionFilter","Sleep","TerminateProcess","TlsAlloc","TlsFree","TlsGetValue","TlsSetValue","UnhandledExceptionFilter","WaitForSingleObject","WideCharToMultiByte","WriteConsoleW","WriteFile"]},{"module":"USER32.dll","functions":["GetProcessWindowStation","GetUserObjectInformationA"]}],"file_exports":[]}},{"name":"license.rtf","file_path":"%PROGRAMFILES%\\(x86)\\Visualware BCS\\license.rtf","file_size":50837,"md5":"beb84c5239d2d553dfc122ab9265a17c","sha1":"488b977ef8d6fc917fbd41cfd3cd02d83f3246d9","sha256":"f3448723722c30db499c1cefa02008dd6486a9372919ac08d6a27465d5607841","sha512":"823ea73993779b735c31317a8460bbf2a0b1484f914be42ca6a99d9a572839e7b86aefb91804083440f43204f4e215e680bcc8cb151e13a1ffbba9a69bc31b62","type_tags":["rtf"],"description":"Rich Text Format data, version 1, unknown character set","runtime_process":"bcs_service.exe (PID: 2748)","threat_level":0,"threat_level_readable":"no specific threat","group":"clean","av_label":null,"av_matched":0,"av_total":80,"file_available_to_download":true,"download_link":"/bff/report/5c928014038838ca2336b70d/download/dropped-file?key=ae4d9c88e434ebd16f6879e81af0fc700dbd9e47af7654246995858992b9f733ae4945741cf904e771cff440675fbf3a11124c571e66e741caf051051f3e9caa01e8586cd07c","submit_link":"/bff/report/5c928014038838ca2336b70d/submit/dropped-file?key=ae4d9c88e434ebd16f6879e81af0fc700dbd9e47af7654246995858992b9f733ae4945741cf904e771cff440675fbf3a11124c571e66e741caf051051f3e9caa01e8586cd07c","has_overview":true,"extended_details":null},{"name":"thebcs.exe","file_path":"%PROGRAMFILES%\\(x86)\\Visualware BCS\\thebcs.exe","file_size":2181320,"md5":"1dcf04b9318df6737fac4bcfb62d281b","sha1":"33adce43c571a76d9a55ddfad1f44f979b437ea3","sha256":"1a5e9fa5350cc221ac0c10653062468d8b8ed229d3fb0cf3ed407a096241811e","sha512":"3b953440844e67225a45778e93f502f65e718c368b01aae2fe57f33fa4f23e1199a55d75069bd8039e167935b98b3d30ac4c761e880b38c68d1330ede20a21dc","type_tags":["peexe","executable"],"description":"PE32 executable (GUI) Intel 80386, for MS Windows","runtime_process":"bcs_service.exe (PID: 2748)","threat_level":0,"threat_level_readable":"no specific threat","group":"clean","av_label":null,"av_matched":0,"av_total":90,"file_available_to_download":true,"download_link":"/bff/report/5c928014038838ca2336b70d/download/dropped-file?key=a11baa776cd72fc69c34e2083b0aeb56ff70503a2bef14dd8fff180300d77324ddc3483c21e2190347bc8119a9d2355f46d1e48eaded220049a42c480e03aa203e15051d","submit_link":"/bff/report/5c928014038838ca2336b70d/submit/dropped-file?key=a11baa776cd72fc69c34e2083b0aeb56ff70503a2bef14dd8fff180300d77324ddc3483c21e2190347bc8119a9d2355f46d1e48eaded220049a42c480e03aa203e15051d","has_overview":true,"extended_details":null},{"name":"SimpleSC.dll","file_path":"%TEMP%\\nsx42EE.tmp\\SimpleSC.dll","file_size":62976,"md5":"d63975ce28f801f236c4aca5af726961","sha1":"3d93ad9816d3b3dba1e63dfcbfa3bd05f787a8c9","sha256":"e0c580bbe48a483075c21277c6e0f23f3cbd6ce3eb2ccd3bf48cf68f05628f43","sha512":"8357e1955560bf0c42a8f4091550c87c19b4939bf1e6a53a54173d1c163b133b9c517014af6f7614eddc0c9bbf93b3b987c4977b024b10b05b3dc4eb20141810","type_tags":["pedll","executable"],"description":"PE32 executable (DLL) (GUI) Intel 80386, for MS Windows","runtime_process":"bcs_service.exe (PID: 2748)","threat_level":0,"threat_level_readable":"no specific threat","group":"clean","av_label":null,"av_matched":0,"av_total":92,"file_available_to_download":true,"download_link":"/bff/report/5c928014038838ca2336b70d/download/dropped-file?key=f5b23f99cb32e7ed9c242567a15a479a1d182916519913b3aaf03a83acef650d9f4e6aef27638b705204fdaa87976a5e9392c6c983323c1e813a40db1fbed0f0518f1424a859","submit_link":"/bff/report/5c928014038838ca2336b70d/submit/dropped-file?key=f5b23f99cb32e7ed9c242567a15a479a1d182916519913b3aaf03a83acef650d9f4e6aef27638b705204fdaa87976a5e9392c6c983323c1e813a40db1fbed0f0518f1424a859","has_overview":true,"extended_details":{"filename":"SimpleSC.dll","size":62976,"description":null,"architecture":"32 Bit","ssdeep":"1536:i/qXv1si+Xsp9MNptZ8KMT6+nMA4fx+kmA:Bv1EXZnLMT5M3x+km","imphash":"6bcc9394c0306bafe8d99409a6686418","authentihash":"2ad48731b061acc3c0e4d7825a1dcf7bffefbeb60d27133599e8087309d89372","entrypoint_bytes":null,"packer":"Borland Delphi 4.0","version_info":[],"file_sections":[{"name":"CODE","entropy":6.38281799724,"virtual_address":"0x1000","virtual_size":"0xbc78","raw_size":"0xbe00","md5":"c72c49725d4d8b5254515c8663a4bc27"},{"name":"DATA","entropy":3.06033917763,"virtual_address":"0xd000","virtual_size":"0x440","raw_size":"0x600","md5":"c2a23d0fd816de0696847211eb4461ca"},{"name":"BSS","entropy":0,"virtual_address":"0xe000","virtual_size":"0x879","raw_size":"0x0","md5":"d41d8cd98f00b204e9800998ecf8427e"},{"name":".idata","entropy":4.18165336319,"virtual_address":"0xf000","virtual_size":"0xa52","raw_size":"0xc00","md5":"79271ca5d7cbaf5d1075fb47be335a48"},{"name":".edata","entropy":4.79754689725,"virtual_address":"0x10000","virtual_size":"0x3b6","raw_size":"0x400","md5":"9d9659637638ae78b2f90e80c5712bd6"},{"name":".reloc","entropy":6.60262566753,"virtual_address":"0x11000","virtual_size":"0xdf4","raw_size":"0xe00","md5":"e050a92ebed619c1b4ff6ec4a3255a2c"},{"name":".rsrc","entropy":3.44206681556,"virtual_address":"0x12000","virtual_size":"0x1000","raw_size":"0x1000","md5":"c5eb483701f41527ddd5482a09e756d6"}],"file_imports":[{"module":"advapi32.dll","functions":["AdjustTokenPrivileges","ChangeServiceConfigA","CloseServiceHandle","ControlService","CreateServiceA","DeleteService","EnumDependentServicesA","GetServiceDisplayNameA","GetServiceKeyNameA","LockServiceDatabase","LookupAccountNameA","LookupPrivilegeValueA","LsaAddAccountRights","LsaClose","LsaOpenPolicy","LsaRemoveAccountRights","OpenProcessToken","OpenSCManagerA","OpenServiceA","QueryServiceConfigA","QueryServiceStatus","RegCloseKey","RegOpenKeyExA","RegQueryValueExA","StartServiceA","UnlockServiceDatabase"]},{"module":"kernel32.dll","functions":["CloseHandle","CreateFileA","DeleteCriticalSection","EnterCriticalSection","EnumCalendarInfoA","ExitProcess","FileTimeToDosDateTime","FileTimeToLocalFileTime","FindClose","FindFirstFileA","FormatMessageA","FreeLibrary","GetACP","GetCommandLineA","GetCPInfo","GetCurrentProcess","GetCurrentThreadId","GetDiskFreeSpaceA","GetLastError","GetLocaleInfoA","GetLocalTime","GetModuleFileNameA","GetModuleHandleA","GetProcAddress","GetStartupInfoA","GetStdHandle","GetStringTypeExA","GetThreadLocale","GetVersionExA","GlobalAlloc","GlobalFree","InitializeCriticalSection","LeaveCriticalSection","LoadLibraryExA","LocalAlloc","LocalFree","lstrcpynA","lstrlenA","MultiByteToWideChar","RaiseException","RtlUnwind","Sleep","TlsAlloc","TlsFree","TlsGetValue","TlsSetValue","UnhandledExceptionFilter","VirtualAlloc","VirtualFree","VirtualQuery","WideCharToMultiByte","WriteFile"]},{"module":"oleaut32.dll","functions":["SysAllocStringLen","SysFreeString","SysReAllocStringLen"]},{"module":"user32.dll","functions":["CharNextA","GetKeyboardType","GetSystemMetrics","LoadStringA","MessageBoxA"]}],"file_exports":[{"name":"GetErrorMessage","ordinal":1,"address":"0x40cb48"},{"name":"RemoveServiceLogonPrivilege","ordinal":2,"address":"0x40cab8"},{"name":"GrantServiceLogonPrivilege","ordinal":3,"address":"0x40ca28"},{"name":"ExistsService","ordinal":4,"address":"0x40c9b8"},{"name":"RestartService","ordinal":5,"address":"0x40c918"},{"name":"ServiceIsPaused","ordinal":6,"address":"0x40c888"},{"name":"ServiceIsStopped","ordinal":7,"address":"0x40c7f8"},{"name":"ServiceIsRunning","ordinal":8,"address":"0x40c768"},{"name":"SetServiceDelayedAutoStartInfo","ordinal":9,"address":"0x40c6d8"},{"name":"SetServiceFailureFlag","ordinal":10,"address":"0x40c648"},{"name":"SetServiceFailure","ordinal":11,"address":"0x40c468"},{"name":"SetServiceBinaryPath","ordinal":12,"address":"0x40c3ec"},{"name":"SetServiceLogon","ordinal":13,"address":"0x40c364"},{"name":"SetServiceStartType","ordinal":14,"address":"0x40c2d4"},{"name":"SetServiceDescription","ordinal":15,"address":"0x40c258"},{"name":"GetServiceDelayedAutoStartInfo","ordinal":16,"address":"0x40c1c8"},{"name":"GetServiceFailureFlag","ordinal":17,"address":"0x40c138"},{"name":"GetServiceFailure","ordinal":18,"address":"0x40bfe4"},{"name":"GetServiceLogon","ordinal":19,"address":"0x40bf68"},{"name":"GetServiceStartType","ordinal":20,"address":"0x40bed4"},{"name":"GetServiceDescription","ordinal":21,"address":"0x40be58"},{"name":"GetServiceBinaryPath","ordinal":22,"address":"0x40bddc"},{"name":"GetServiceStatus","ordinal":23,"address":"0x40bd48"},{"name":"GetServiceDisplayName","ordinal":24,"address":"0x40bccc"},{"name":"GetServiceName","ordinal":25,"address":"0x40bc50"},{"name":"ContinueService","ordinal":26,"address":"0x40bbc0"},{"name":"PauseService","ordinal":27,"address":"0x40bb30"},{"name":"StopService","ordinal":28,"address":"0x40ba88"},{"name":"StartService","ordinal":29,"address":"0x40b9e8"},{"name":"RemoveService","ordinal":30,"address":"0x40b978"},{"name":"InstallService","ordinal":31,"address":"0x40b88c"}]}},{"name":"UserInfo.dll","file_path":"%TEMP%\\nsx42EE.tmp\\UserInfo.dll","file_size":4096,"md5":"d1e37112390e6bcca8362788d61becf5","sha1":"d97888f0f69d34de202e7c68b8ff5b2c2fec4c5f","sha256":"77b40d42606d48f817b901f1e5abea114b4288b344b8c193bf3e3c52e469a926","sha512":"04121e5241ad14890095a6cf5e698979820fa97d911918b9b77f2064a713e20f4827f72c057d5da1789bc340d63f391872fe5dfbb79e6c33d3995f82c37fa51f","type_tags":["pedll","executable"],"description":"PE32 executable (DLL) (GUI) Intel 80386, for MS Windows","runtime_process":"bcs_service.exe (PID: 2748)","threat_level":0,"threat_level_readable":"no specific threat","group":"clean","av_label":null,"av_matched":0,"av_total":90,"file_available_to_download":true,"download_link":"/bff/report/5c928014038838ca2336b70d/download/dropped-file?key=f0a817ded7a04a267e82cfd05db82013ee196f63c70b86a543d3d184a632df2af3c66d2b80e6649a4be099aa39e20a0ad626a5fa85a5d9933ff9a97d1b0541adbbe85093d3d83a","submit_link":"/bff/report/5c928014038838ca2336b70d/submit/dropped-file?key=f0a817ded7a04a267e82cfd05db82013ee196f63c70b86a543d3d184a632df2af3c66d2b80e6649a4be099aa39e20a0ad626a5fa85a5d9933ff9a97d1b0541adbbe85093d3d83a","has_overview":true,"extended_details":{"filename":"UserInfo.dll","size":4096,"description":null,"architecture":"32 Bit","ssdeep":"48:qKpB4n2rZ4vuXXqQr1wH+zL/o0o/X/3MVyjlZS515gaoFU:5I4ZxKQruHkJwvcVy24FU","imphash":"cce05dea98cbac3a9d486b233588f528","authentihash":"8c7235e1cffa84921dea799553628e18a129404b6a01241b5c4afd2cb712ce42","entrypoint_bytes":null,"packer":null,"version_info":[],"file_sections":[{"name":".text","entropy":4.53637005309,"virtual_address":"0x1000","virtual_size":"0x2b4","raw_size":"0x400","md5":"48366df2cae916db3d4f2898ee86f7ef"},{"name":".rdata","entropy":3.45757314733,"virtual_address":"0x2000","virtual_size":"0x2a1","raw_size":"0x400","md5":"cd194ca8292b8a1e55b0fe3ac0595769"},{"name":".data","entropy":1.2021774093,"virtual_address":"0x3000","virtual_size":"0x78","raw_size":"0x200","md5":"d3090e4605bcd11457b32cc6e06cf736"},{"name":".reloc","entropy":1.60533729318,"virtual_address":"0x4000","virtual_size":"0xf0","raw_size":"0x200","md5":"7e94513f426d8f91435408acb252b2e9"}],"file_imports":[{"module":"ADVAPI32.dll","functions":["AllocateAndInitializeSid","EqualSid","FreeSid","GetTokenInformation","GetUserNameA","OpenProcessToken","OpenThreadToken"]},{"module":"KERNEL32.dll","functions":["CloseHandle","GetCurrentProcess","GetCurrentThread","GetLastError","GetModuleHandleA","GetProcAddress","GetVersion","GlobalAlloc","GlobalFree","lstrcpynA"]}],"file_exports":[{"name":"GetAccountType","ordinal":1,"address":"0x10001215"},{"name":"GetName","ordinal":2,"address":"0x10001000"},{"name":"GetOriginalAccountType","ordinal":3,"address":"0x1000123f"}]}},{"name":"nsExec.dll","file_path":"%TEMP%\\nsx42EE.tmp\\nsExec.dll","file_size":6656,"md5":"b648c78981c02c434d6a04d4422a6198","sha1":"74d99eed1eae76c7f43454c01cdb7030e5772fc2","sha256":"3e3d516d4f28948a474704d5dc9907dbe39e3b3f98e7299f536337278c59c5c9","sha512":"219c88c0ef9fd6e3be34c56d8458443e695badd27861d74c486143306a94b8318e6593bf4da81421e88e4539b238557dd4fe1f5bedf3ecec59727917099e90d2","type_tags":["pedll","executable"],"description":"PE32 executable (DLL) (GUI) Intel 80386, for MS Windows","runtime_process":"bcs_service.exe (PID: 2748)","threat_level":0,"threat_level_readable":"no specific threat","group":"clean","av_label":null,"av_matched":0,"av_total":92,"file_available_to_download":true,"download_link":"/bff/report/5c928014038838ca2336b70d/download/dropped-file?key=eef31c7987c8501e499df55878b293d01c3edfcbf0361d2fd7262a08636080fedb16d8774780b7c02a402583af10ceed97d57a5b623e2eada5050a338780b1a19ecc283cff","submit_link":"/bff/report/5c928014038838ca2336b70d/submit/dropped-file?key=eef31c7987c8501e499df55878b293d01c3edfcbf0361d2fd7262a08636080fedb16d8774780b7c02a402583af10ceed97d57a5b623e2eada5050a338780b1a19ecc283cff","has_overview":true,"extended_details":{"filename":"nsExec.dll","size":6656,"description":null,"architecture":"32 Bit","ssdeep":"96:U7GUxNkO6GR0t9GKKr1Zd8NHYVVHp4dEeY3kRnHdMqqyVgNN3e:mXhHR0aTQN4gRHdMqJVgNE","imphash":"46f8b6973f33717335c0f6d8087de67b","authentihash":"840e66c81121daa2ec1b8ad579e8f8b9da171f2f7a116b6779dff3b82488e8e6","entrypoint_bytes":null,"packer":null,"version_info":[],"file_sections":[{"name":".text","entropy":5.71687671495,"virtual_address":"0x1000","virtual_size":"0xa2e","raw_size":"0xc00","md5":"1a7e53a1cfbac6db2a983c56cd90b1ba"},{"name":".rdata","entropy":4.50206275942,"virtual_address":"0x2000","virtual_size":"0x52c","raw_size":"0x600","md5":"4121f0fa567640f085a36a0195b6768e"},{"name":".data","entropy":1.39499972378,"virtual_address":"0x3000","virtual_size":"0x494","raw_size":"0x200","md5":"96bbc2c81c2bbc6b1324ee00ca70e014"},{"name":".reloc","entropy":4.0648966569,"virtual_address":"0x4000","virtual_size":"0x1ca","raw_size":"0x200","md5":"ba2d92dd9bd11aecc9aa4f789f86c448"}],"file_imports":[{"module":"ADVAPI32.dll","functions":["InitializeSecurityDescriptor","SetSecurityDescriptorDacl"]},{"module":"KERNEL32.dll","functions":["CloseHandle","CopyFileA","CreateFileA","CreateFileMappingA","CreatePipe","CreateProcessA","DeleteFileA","ExitProcess","GetCommandLineA","GetCurrentProcess","GetExitCodeProcess","GetModuleFileNameA","GetModuleHandleA","GetProcAddress","GetStartupInfoA","GetTempFileNameA","GetTickCount","GetVersion","GlobalAlloc","GlobalFree","GlobalLock","GlobalReAlloc","GlobalSize","GlobalUnlock","lstrcatA","lstrcmpiA","lstrcpyA","lstrcpynA","lstrlenA","MapViewOfFile","PeekNamedPipe","ReadFile","Sleep","TerminateProcess","UnmapViewOfFile","WaitForSingleObject"]},{"module":"USER32.dll","functions":["CharNextA","CharPrevA","FindWindowExA","OemToCharBuffA","SendMessageA","wsprintfA"]}],"file_exports":[{"name":"Exec","ordinal":1,"address":"0x10001000"},{"name":"ExecToLog","ordinal":2,"address":"0x1000102d"},{"name":"ExecToStack","ordinal":3,"address":"0x1000105a"}]}},{"name":"AppUpdaterLog.txt","file_path":"%PROGRAMFILES%\\(x86)\\Visualware BCS\\AppUpdaterLog.txt","file_size":212,"md5":"905d3efaa06f91198675698254699756","sha1":"2e26ad67309e18877d15f77a9cf88c9212bb3a76","sha256":"615106efa1da7a0111c5466f9c2f9eb9e3df0e062ae206fc4e9d5eb17fdd6b93","sha512":"24f154a6b7337bbd8a9f4c6b375f956f0a6ae9d51669633c3dc5162b8524f1c0b508956c1d3f656dca00457faa6214c063102c356cfe285e8b81c16293fa75ce","type_tags":["text"],"description":"ASCII text, with CRLF line terminators","runtime_process":"NetQCheckHTML5Agent.exe (PID: 2588)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/5c928014038838ca2336b70d/download/dropped-file?key=12eb44caebd826b62a506fd7ba73e0e01a139c8a3e10af9ce31099e7d93685e3948d39d4f1c837c3e47299ed4276697b5540e1c9892900aed8c35b9522a394e1891518390f24fc3b45773f29","submit_link":"/bff/report/5c928014038838ca2336b70d/submit/dropped-file?key=12eb44caebd826b62a506fd7ba73e0e01a139c8a3e10af9ce31099e7d93685e3948d39d4f1c837c3e47299ed4276697b5540e1c9892900aed8c35b9522a394e1891518390f24fc3b45773f29","has_overview":false,"extended_details":null},{"name":"MgrLog.txt","file_path":"%PROGRAMFILES%\\(x86)\\Visualware BCS\\MgrLog.txt","file_size":329,"md5":"85e64b62927570da88757ef607d16d97","sha1":"fa8134bfef5268d0e18aece4e8d95ba2b06566f7","sha256":"d69c0a1e3193a537a1cf4fec0c2462b40b45e432d39e4059155095393a581dfe","sha512":"98f6065293dbf8d108467eede51739c25de78365b8b21f8cddadb5b44213ba9605e64da0b6f17ff1d7c5fc4d59ae9ee71fb1c9ae217dac66014177ef1b1c468c","type_tags":["text"],"description":"ASCII text, with CRLF line terminators","runtime_process":"bcs.exe (PID: 1664)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/5c928014038838ca2336b70d/download/dropped-file?key=31b052a220fe97e331c7dd8009ad573ac3590ed0f2d1a61f31b830f75c357ba37342fbeea9257850c0cad843d3af12c0ce06049542d4119b92eeaa29cccf5d41110f705e93","submit_link":"/bff/report/5c928014038838ca2336b70d/submit/dropped-file?key=31b052a220fe97e331c7dd8009ad573ac3590ed0f2d1a61f31b830f75c357ba37342fbeea9257850c0cad843d3af12c0ce06049542d4119b92eeaa29cccf5d41110f705e93","has_overview":false,"extended_details":null},{"name":"bcshome.url","file_path":"%PROGRAMFILES%\\(x86)\\Visualware BCS\\bcshome.url","file_size":208,"md5":"37ffedfd5d69aea210788eb68b5d9baa","sha1":"a89a206b0b699e37b933ad5034b8cf97a985ad73","sha256":"cf004d7d50ec6699933ea3c9c84d8ab57cc907867a03d60309c17604b9f93c78","sha512":"5e1b029bcd034ddd59bd47fd3f55836f8c33d97ad2dde473c21313d26742e731391706b7a404f0c662e394a44ea7523e884999240dd6b3b8eb45935295c3b4fe","type_tags":["url"],"description":"MS Windows 95 Internet shortcut text (URL=), ASCII text, with CRLF line terminators","runtime_process":"bcs_service.exe (PID: 2748)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/5c928014038838ca2336b70d/download/dropped-file?key=4d3020f806e9c4a26e64938bcdf7ee18b18ae7ebee0cb12b61c15769fbace5fe8a87d862ee484715829ff688022d05c5b7c32d673ec1cd040f403d206609f8f1b66892b6be91","submit_link":"/bff/report/5c928014038838ca2336b70d/submit/dropped-file?key=4d3020f806e9c4a26e64938bcdf7ee18b18ae7ebee0cb12b61c15769fbace5fe8a87d862ee484715829ff688022d05c5b7c32d673ec1cd040f403d206609f8f1b66892b6be91","has_overview":true,"extended_details":null},{"name":"bcsicon.ico","file_path":"%PROGRAMFILES%\\(x86)\\Visualware BCS\\bcsicon.ico","file_size":306669,"md5":"078538105b7766f8a63d2bc3b438703a","sha1":"8df6ba0551653117c4b6a9741449c0dc443cfaa7","sha256":"6bfe68e0f180c942d121ab35a17b0b671ef219ebc34d95e2f68dac000e94fb9c","sha512":"68f3f039a0deec69aad522080dcdc5545901dd5a390a9b8e90cbfd3c2beda1c037b66887c7091db8dd138f6e8cd3e2df6c3cb2b2f99d55dffdd4eb1e7bc93db1","type_tags":["unknown"],"description":"MS Windows icon resource - 9 icons, 16x16","runtime_process":"bcs_service.exe (PID: 2748)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/5c928014038838ca2336b70d/download/dropped-file?key=845b20b3d52e6674614d72280bd13b7818368d6e2cc72c88e8709edf0712765c7f41f34f66a6dbb8b460a1b1e53bc60f1a5f84330964cdcc998368ab96f7e79250ee0bff454a","submit_link":"/bff/report/5c928014038838ca2336b70d/submit/dropped-file?key=845b20b3d52e6674614d72280bd13b7818368d6e2cc72c88e8709edf0712765c7f41f34f66a6dbb8b460a1b1e53bc60f1a5f84330964cdcc998368ab96f7e79250ee0bff454a","has_overview":true,"extended_details":null},{"name":"favicon.ico","file_path":"%PROGRAMFILES%\\(x86)\\Visualware BCS\\favicon.ico","file_size":306669,"md5":"078538105b7766f8a63d2bc3b438703a","sha1":"8df6ba0551653117c4b6a9741449c0dc443cfaa7","sha256":"6bfe68e0f180c942d121ab35a17b0b671ef219ebc34d95e2f68dac000e94fb9c","sha512":"68f3f039a0deec69aad522080dcdc5545901dd5a390a9b8e90cbfd3c2beda1c037b66887c7091db8dd138f6e8cd3e2df6c3cb2b2f99d55dffdd4eb1e7bc93db1","type_tags":["unknown"],"description":"MS Windows icon resource - 9 icons, 16x16","runtime_process":"bcs_service.exe (PID: 2748)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/5c928014038838ca2336b70d/download/dropped-file?key=32d301bd9c05029e8c9a7ec092224c573ac225fcd4619538ec96e0bfb9d76bd69cd4f00fb5500a6fd477899a46de1ae571a7959ffce562778a505bd6a5d452d15a83d8acb04f","submit_link":"/bff/report/5c928014038838ca2336b70d/submit/dropped-file?key=32d301bd9c05029e8c9a7ec092224c573ac225fcd4619538ec96e0bfb9d76bd69cd4f00fb5500a6fd477899a46de1ae571a7959ffce562778a505bd6a5d452d15a83d8acb04f","has_overview":true,"extended_details":null},{"name":"log.txt","file_path":"%PROGRAMFILES%\\(x86)\\Visualware BCS\\log.txt","file_size":167,"md5":"711c38bddbfaec869d036a5649a72552","sha1":"70b670ee8a8025344260b295fc9d121d670482ec","sha256":"4b02a0edde9a8879cce95df8a577c2d0d5e9d8eba2f3a4dd7c73f9925177d336","sha512":"8c040e4d63d5e2a103435389f6760629893cf7f373d844022ea1eb75b5f132f612c6a6205ee8205e936200117b0acdb5c5899ca53b38a20b2c49e034904c567f","type_tags":["text"],"description":"ASCII text, with CRLF line terminators","runtime_process":"NetQCheckHTML5Agent.exe (PID: 2588)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/5c928014038838ca2336b70d/download/dropped-file?key=5a7c8cb8a3ae08c3b054af05cb1b1f4ca2775902af7f7e71ae144e901506c00743bcbbb589f3516c1eccec4d3bfc9f848f3f36ae31adf6a2911bf88899e5d147c5","submit_link":"/bff/report/5c928014038838ca2336b70d/submit/dropped-file?key=5a7c8cb8a3ae08c3b054af05cb1b1f4ca2775902af7f7e71ae144e901506c00743bcbbb589f3516c1eccec4d3bfc9f848f3f36ae31adf6a2911bf88899e5d147c5","has_overview":false,"extended_details":null},{"name":"netqcheck.cfg","file_path":"%PROGRAMFILES%\\(x86)\\Visualware BCS\\netqcheck.cfg","file_size":4100,"md5":"96237515a00e8542af58a40c0733e1c7","sha1":"2c66e50fffa089fda23f905cd18672f3e1b7b350","sha256":"cd7e3ed554384c2fd9e3a16b0f8ae145419598dd7780e8f7db3fd873cb649afe","sha512":"f815e91342351dcaba21903fd0930bbca576645f17e2d71815fc87363b7592e7b810be7ab185f1f62a882e1d1526db2431e76808a4e22b5261e2ceb7c6d481e4","type_tags":["data"],"description":"data","runtime_process":"NetQCheckHTML5Agent.exe (PID: 2588)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/5c928014038838ca2336b70d/download/dropped-file?key=5f8b48ed1fa1b0caee36aadd0c9879e7a0178b588cf366a1739b1940297c2ed14c485a5c7c2697085d69ca604c4e77cce2f23f2536c6134704c5f0f9508ad59924e4de9b3cfb25a7","submit_link":"/bff/report/5c928014038838ca2336b70d/submit/dropped-file?key=5f8b48ed1fa1b0caee36aadd0c9879e7a0178b588cf366a1739b1940297c2ed14c485a5c7c2697085d69ca604c4e77cce2f23f2536c6134704c5f0f9508ad59924e4de9b3cfb25a7","has_overview":false,"extended_details":null}],"file_metadata":{"file_compositions":["1 .RES Files linked with CVTRES.EXE 5.00 (Visual Studio 5) (build: 1735)","10 .C Files compiled with CL.EXE (Visual Studio 6 Processor Pack) (build: 9044)","15 .LIB Files generated with LIB.EXE 7.10 (Visual Studio .NET 2003) (build: 4035)"],"imported_objects":["2 .C Files compiled with CL.EXE 13.10 (Visual Studio .NET 2003) (build: 4035)"],"file_analysis":["File is the product of a small codebase (10 files)"],"total_file_compositions_imports":159},"processes":[{"uid":"00034508-00002748","parentuid":null,"name":"bcs_service.exe","normalized_path":"C:\\bcs_service.exe","command_line":null,"sha256":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334","av_label":"Trojan.DOMG","av_matched":1,"av_total":92,"pid":"2748","icon":"$27","process_flags":[{"name":"Extracted Streams","data":null},{"name":"Multiscan Match","data":"1/92"}]},{"uid":"00034673-00003656","parentuid":"00034508-00002748","name":"bcs.exe","normalized_path":"%PROGRAMFILES%\\(x86)\\Visualware BCS\\bcs.exe","command_line":"install","sha256":"0a81d737877d13736301d894c7e7ca512f0fb2adf83a211d3dbb2af9b5482717","av_label":null,"av_matched":0,"av_total":93,"pid":"3656","icon":null,"process_flags":[{"name":"Extracted Streams","data":null}]},{"uid":"00034791-00001664","parentuid":null,"name":"bcs.exe","normalized_path":"%PROGRAMFILES%\\(x86)\\Visualware BCS\\bcs.exe","command_line":null,"sha256":"0a81d737877d13736301d894c7e7ca512f0fb2adf83a211d3dbb2af9b5482717","av_label":null,"av_matched":0,"av_total":93,"pid":"1664","icon":"$28","process_flags":[{"name":"Extracted Streams","data":null}]},{"uid":"00034916-00002588","parentuid":"00034791-00001664","name":"NetQCheckHTML5Agent.exe","normalized_path":"%PROGRAMFILES%\\(x86)\\Visualware BCS\\NetQCheckHTML5Agent.exe","command_line":"managed","sha256":"1a5e9fa5350cc221ac0c10653062468d8b8ed229d3fb0cf3ed407a096241811e","av_label":null,"av_matched":0,"av_total":90,"pid":"2588","icon":null,"process_flags":[{"name":"Extracted Streams","data":null},{"name":"Network Activity","data":null}]}],"mitre_attcks":[{"tactic":"Execution","technique":"Service Execution","attck_id":"T1035","attck_id_wiki":"https://attack.mitre.org/wiki/Technique/T1035","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":2,"suspicious_identifiers":["Opened the service control manager","Contains ability to open/control a service"],"informative_identifiers_count":0,"informative_identifiers":[],"parent":null},{"tactic":"Persistence","technique":"New Service","attck_id":"T1050","attck_id_wiki":"https://attack.mitre.org/wiki/Technique/T1050","malicious_identifiers_count":1,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":0,"informative_identifiers":[],"parent":null},{"tactic":"Persistence","technique":"Hooking","attck_id":"T1179","attck_id_wiki":"https://attack.mitre.org/wiki/Technique/T1179","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":1,"suspicious_identifiers":["Installs hooks/patches the running process"],"informative_identifiers_count":0,"informative_identifiers":[],"parent":null},{"tactic":"Persistence","technique":"Kernel Modules and Extensions","attck_id":"T1215","attck_id_wiki":"https://attack.mitre.org/wiki/Technique/T1215","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Opens the Kernel Security Device Driver (KsecDD) of Windows"],"parent":null},{"tactic":"Privilege Escalation","technique":"New Service","attck_id":"T1050","attck_id_wiki":"https://attack.mitre.org/wiki/Technique/T1050","malicious_identifiers_count":1,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":0,"informative_identifiers":[],"parent":null},{"tactic":"Privilege Escalation","technique":"Process Injection","attck_id":"T1055","attck_id_wiki":"https://attack.mitre.org/wiki/Technique/T1055","malicious_identifiers_count":1,"malicious_identifiers":["Writes data to a remote process"],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":0,"informative_identifiers":[],"parent":null},{"tactic":"Privilege Escalation","technique":"Hooking","attck_id":"T1179","attck_id_wiki":"https://attack.mitre.org/wiki/Technique/T1179","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":1,"suspicious_identifiers":["Installs hooks/patches the running process"],"informative_identifiers_count":0,"informative_identifiers":[],"parent":null},{"tactic":"Privilege Escalation","technique":"Bypass User Account Control","attck_id":"T1088","attck_id_wiki":"https://attack.mitre.org/wiki/Technique/T1088","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":1,"suspicious_identifiers":["Tries to obtain the highest possible privilege level without UAC dialog"],"informative_identifiers_count":0,"informative_identifiers":[],"parent":null},{"tactic":"Defense Evasion","technique":"File Deletion","attck_id":"T1107","attck_id_wiki":"https://attack.mitre.org/wiki/Technique/T1107","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":1,"suspicious_identifiers":["Marks file for deletion"],"informative_identifiers_count":0,"informative_identifiers":[],"parent":null},{"tactic":"Defense Evasion","technique":"Process Injection","attck_id":"T1055","attck_id_wiki":"https://attack.mitre.org/wiki/Technique/T1055","malicious_identifiers_count":1,"malicious_identifiers":["Writes data to a remote process"],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":0,"informative_identifiers":[],"parent":null},{"tactic":"Defense Evasion","technique":"Code Signing","attck_id":"T1116","attck_id_wiki":"https://attack.mitre.org/wiki/Technique/T1116","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["The input sample is signed with a certificate"],"parent":null},{"tactic":"Defense Evasion","technique":"Bypass User Account Control","attck_id":"T1088","attck_id_wiki":"https://attack.mitre.org/wiki/Technique/T1088","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":1,"suspicious_identifiers":["Tries to obtain the highest possible privilege level without UAC dialog"],"informative_identifiers_count":0,"informative_identifiers":[],"parent":null},{"tactic":"Defense Evasion","technique":"Modify Registry","attck_id":"T1112","attck_id_wiki":"https://attack.mitre.org/wiki/Technique/T1112","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Creates or modifies windows services"],"parent":null},{"tactic":"Credential Access","technique":"Hooking","attck_id":"T1179","attck_id_wiki":"https://attack.mitre.org/wiki/Technique/T1179","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":1,"suspicious_identifiers":["Installs hooks/patches the running process"],"informative_identifiers_count":0,"informative_identifiers":[],"parent":null},{"tactic":"Discovery","technique":"System Time Discovery","attck_id":"T1124","attck_id_wiki":"https://attack.mitre.org/wiki/Technique/T1124","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":2,"informative_identifiers":["Contains ability to query machine time","Contains ability to query the machine timezone"],"parent":null},{"tactic":"Discovery","technique":"System Information Discovery","attck_id":"T1082","attck_id_wiki":"https://attack.mitre.org/wiki/Technique/T1082","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":1,"suspicious_identifiers":["Contains ability to query CPU information"],"informative_identifiers_count":0,"informative_identifiers":[],"parent":null},{"tactic":"Discovery","technique":"Query Registry","attck_id":"T1012","attck_id_wiki":"https://attack.mitre.org/wiki/Technique/T1012","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":3,"suspicious_identifiers":["Reads the active computer name","Reads the cryptographic machine GUID"],"informative_identifiers_count":1,"informative_identifiers":["Reads the registry for installed applications"],"parent":null},{"tactic":"Discovery","technique":"Peripheral Device Discovery","attck_id":"T1120","attck_id_wiki":"https://attack.mitre.org/wiki/Technique/T1120","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":2,"informative_identifiers":["Queries volume information of an entire harddrive","Queries volume information"],"parent":null},{"tactic":"Discovery","technique":"File and Directory Discovery","attck_id":"T1083","attck_id_wiki":"https://attack.mitre.org/wiki/Technique/T1083","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Contains ability to query volume size"],"parent":null},{"tactic":"Collection","technique":"Clipboard Data","attck_id":"T1115","attck_id_wiki":"https://attack.mitre.org/wiki/Technique/T1115","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":1,"suspicious_identifiers":["Contains ability to open the clipboard"],"informative_identifiers_count":0,"informative_identifiers":[],"parent":null},{"tactic":"Exfiltration","technique":"Data Compressed","attck_id":"T1002","attck_id_wiki":"https://attack.mitre.org/wiki/Technique/T1002","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Matched Compiler/Packer signature"],"parent":null}],"network_mode":"tor","signatures":[{"threat_level":0,"threat_level_human":"informative","category":"Anti-Reverse Engineering","identifier":"stream-4","type":1,"relevance":1,"name":"Contains ability to register a top-level exception handler (often used as anti-debugging trick)","description":"$29","description_v2":["SetUnhandledExceptionFilter@KERNEL32.DLL at 00034673-00003656-54281-27-0131866E","SetUnhandledExceptionFilter@KERNEL32.DLL at 00034673-00003656-54281-414-01312B45","SetUnhandledExceptionFilter@KERNEL32.DLL at 00034673-00003656-54281-486-01312654","SetUnhandledExceptionFilter@KERNEL32.DLL at 00034673-00003656-54281-963-01312C60","SetUnhandledExceptionFilter@KERNEL32.DLL at 00034791-00001664-59001-27-0131866E","SetUnhandledExceptionFilter@KERNEL32.DLL at 00034791-00001664-59001-414-01312B45","SetUnhandledExceptionFilter@KERNEL32.DLL at 00034791-00001664-59001-486-01312654","SetUnhandledExceptionFilter@KERNEL32.DLL at 00034791-00001664-59001-963-01312C60","SetUnhandledExceptionFilter@KERNEL32.DLL at 00034916-00002588-4946-74-01067EC7","SetUnhandledExceptionFilter@KERNEL32.DLL at 00034916-00002588-4946-409-0106331E","SetUnhandledExceptionFilter@KERNEL32.DLL at 00034916-00002588-4946-1153-0106288A","SetUnhandledExceptionFilter@KERNEL32.dll at 58493-4441-0051288A","SetUnhandledExceptionFilter@KERNEL32.dll at 57725-622-00402654","SetUnhandledExceptionFilter@KERNEL32.dll at 57725-1139-00402C60"],"description_v3":[{"type":"text","value":"SetUnhandledExceptionFilter@KERNEL32.DLL"},{"type":"stream","stream_uid":"00034673-00003656-54281-27-0131866E","modal_link":"/bff/report/5c928014038838ca2336b70d/processes/00034508-00002748/streams/0/00034673-00003656-54281-27-0131866E?childUid=00034673-00003656","process":{"name":"bcs.exe","process_uid":"00034673-00003656","pid":"3656"}},{"type":"linebreak"},{"type":"text","value":"SetUnhandledExceptionFilter@KERNEL32.DLL"},{"type":"stream","stream_uid":"00034673-00003656-54281-414-01312B45","modal_link":"/bff/report/5c928014038838ca2336b70d/processes/00034508-00002748/streams/0/00034673-00003656-54281-414-01312B45?childUid=00034673-00003656","process":{"name":"bcs.exe","process_uid":"00034673-00003656","pid":"3656"}},{"type":"linebreak"},{"type":"text","value":"SetUnhandledExceptionFilter@KERNEL32.DLL"},{"type":"stream","stream_uid":"00034673-00003656-54281-486-01312654","modal_link":"/bff/report/5c928014038838ca2336b70d/processes/00034508-00002748/streams/0/00034673-00003656-54281-486-01312654?childUid=00034673-00003656","process":{"name":"bcs.exe","process_uid":"00034673-00003656","pid":"3656"}},{"type":"linebreak"},{"type":"text","value":"SetUnhandledExceptionFilter@KERNEL32.DLL"},{"type":"stream","stream_uid":"00034673-00003656-54281-963-01312C60","modal_link":"/bff/report/5c928014038838ca2336b70d/processes/00034508-00002748/streams/0/00034673-00003656-54281-963-01312C60?childUid=00034673-00003656","process":{"name":"bcs.exe","process_uid":"00034673-00003656","pid":"3656"}},{"type":"linebreak"},{"type":"text","value":"SetUnhandledExceptionFilter@KERNEL32.DLL"},{"type":"stream","stream_uid":"00034791-00001664-59001-27-0131866E","modal_link":"/bff/report/5c928014038838ca2336b70d/processes/00034791-00001664/streams/0/00034791-00001664-59001-27-0131866E","process":{"name":"bcs.exe","process_uid":"00034791-00001664","pid":"1664"}},{"type":"linebreak"},{"type":"text","value":"SetUnhandledExceptionFilter@KERNEL32.DLL"},{"type":"stream","stream_uid":"00034791-00001664-59001-414-01312B45","modal_link":"/bff/report/5c928014038838ca2336b70d/processes/00034791-00001664/streams/0/00034791-00001664-59001-414-01312B45","process":{"name":"bcs.exe","process_uid":"00034791-00001664","pid":"1664"}},{"type":"linebreak"},{"type":"text","value":"SetUnhandledExceptionFilter@KERNEL32.DLL"},{"type":"stream","stream_uid":"00034791-00001664-59001-486-01312654","modal_link":"/bff/report/5c928014038838ca2336b70d/processes/00034791-00001664/streams/0/00034791-00001664-59001-486-01312654","process":{"name":"bcs.exe","process_uid":"00034791-00001664","pid":"1664"}},{"type":"linebreak"},{"type":"text","value":"SetUnhandledExceptionFilter@KERNEL32.DLL"},{"type":"stream","stream_uid":"00034791-00001664-59001-963-01312C60","modal_link":"/bff/report/5c928014038838ca2336b70d/processes/00034791-00001664/streams/0/00034791-00001664-59001-963-01312C60","process":{"name":"bcs.exe","process_uid":"00034791-00001664","pid":"1664"}},{"type":"linebreak"},{"type":"text","value":"SetUnhandledExceptionFilter@KERNEL32.DLL"},{"type":"stream","stream_uid":"00034916-00002588-4946-74-01067EC7","modal_link":"/bff/report/5c928014038838ca2336b70d/processes/00034791-00001664/streams/0/00034916-00002588-4946-74-01067EC7?childUid=00034916-00002588","process":{"name":"NetQCheckHTML5Agent.exe","process_uid":"00034916-00002588","pid":"2588"}},{"type":"linebreak"},{"type":"text","value":"SetUnhandledExceptionFilter@KERNEL32.DLL"},{"type":"stream","stream_uid":"00034916-00002588-4946-409-0106331E","modal_link":"/bff/report/5c928014038838ca2336b70d/processes/00034791-00001664/streams/0/00034916-00002588-4946-409-0106331E?childUid=00034916-00002588","process":{"name":"NetQCheckHTML5Agent.exe","process_uid":"00034916-00002588","pid":"2588"}},{"type":"linebreak"},{"type":"text","value":"SetUnhandledExceptionFilter@KERNEL32.DLL"},{"type":"stream","stream_uid":"00034916-00002588-4946-1153-0106288A","modal_link":"/bff/report/5c928014038838ca2336b70d/processes/00034791-00001664/streams/0/00034916-00002588-4946-1153-0106288A?childUid=00034916-00002588","process":{"name":"NetQCheckHTML5Agent.exe","process_uid":"00034916-00002588","pid":"2588"}},{"type":"linebreak"},{"type":"text","value":"SetUnhandledExceptionFilter@KERNEL32.dll at 58493-4441-0051288A"},{"type":"linebreak"},{"type":"text","value":"SetUnhandledExceptionFilter@KERNEL32.dll at 57725-622-00402654"},{"type":"linebreak"},{"type":"text","value":"SetUnhandledExceptionFilter@KERNEL32.dll at 57725-1139-00402C60"}],"origin":"Hybrid Analysis Technology","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":{"modal_link":"/bff/report/5c928014038838ca2336b70d/processes/00034508-00002748/streams/0/00034673-00003656-54281-27-0131866E?childUid=00034673-00003656","name":"bcs.exe","pid":3656}},{"threat_level":0,"threat_level_human":"informative","category":"Anti-Reverse Engineering","identifier":"static-5","type":0,"relevance":10,"name":"PE file contains zero-size sections","description":"Raw size of \".ndata\" is zero\n Raw size of \"BSS\" is zero","description_v2":["Raw size of \".ndata\" is zero","Raw size of \"BSS\" is zero"],"description_v3":[{"type":"text","value":"Raw size of \".ndata\" is zero"},{"type":"linebreak"},{"type":"text","value":"Raw size of \"BSS\" is zero"}],"origin":"Static Parser","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Environment Awareness","identifier":"stream-2","type":1,"relevance":1,"name":"Contains ability to query machine time","description":"GetSystemTimeAsFileTime@KERNEL32.DLL at 00034673-00003656-54281-427-01312A34\n GetSystemTimeAsFileTime@KERNEL32.DLL at 00034791-00001664-59001-427-01312A34\n GetSystemTimeAsFileTime@KERNEL32.DLL at 00034916-00002588-4946-21-01063556\n GetSystemTimeAsFileTime@KERNEL32.DLL at 00034916-00002588-4946-873-0107E0BF\n GetSystemTimeAsFileTime@KERNEL32.DLL at 00034916-00002588-4946-2464-00FFE110\n GetSystemTime@KERNEL32.DLL at 00034916-00002588-4946-3928-00FAACB0\n GetSystemTime@KERNEL32.DLL at 00034916-00002588-4946-3930-00FAA850\n GetSystemTimeAsFileTime@KERNEL32.dll at 58493-4161-0052E0BF","description_v2":["GetSystemTimeAsFileTime@KERNEL32.DLL at 00034673-00003656-54281-427-01312A34","GetSystemTimeAsFileTime@KERNEL32.DLL at 00034791-00001664-59001-427-01312A34","GetSystemTimeAsFileTime@KERNEL32.DLL at 00034916-00002588-4946-21-01063556","GetSystemTimeAsFileTime@KERNEL32.DLL at 00034916-00002588-4946-873-0107E0BF","GetSystemTimeAsFileTime@KERNEL32.DLL at 00034916-00002588-4946-2464-00FFE110","GetSystemTime@KERNEL32.DLL at 00034916-00002588-4946-3928-00FAACB0","GetSystemTime@KERNEL32.DLL at 00034916-00002588-4946-3930-00FAA850","GetSystemTimeAsFileTime@KERNEL32.dll at 58493-4161-0052E0BF"],"description_v3":[{"type":"text","value":"GetSystemTimeAsFileTime@KERNEL32.DLL"},{"type":"stream","stream_uid":"00034673-00003656-54281-427-01312A34","modal_link":"/bff/report/5c928014038838ca2336b70d/processes/00034508-00002748/streams/0/00034673-00003656-54281-427-01312A34?childUid=00034673-00003656","process":{"name":"bcs.exe","process_uid":"00034673-00003656","pid":"3656"}},{"type":"linebreak"},{"type":"text","value":"GetSystemTimeAsFileTime@KERNEL32.DLL"},{"type":"stream","stream_uid":"00034791-00001664-59001-427-01312A34","modal_link":"/bff/report/5c928014038838ca2336b70d/processes/00034791-00001664/streams/0/00034791-00001664-59001-427-01312A34","process":{"name":"bcs.exe","process_uid":"00034791-00001664","pid":"1664"}},{"type":"linebreak"},{"type":"text","value":"GetSystemTimeAsFileTime@KERNEL32.DLL"},{"type":"stream","stream_uid":"00034916-00002588-4946-21-01063556","modal_link":"/bff/report/5c928014038838ca2336b70d/processes/00034791-00001664/streams/0/00034916-00002588-4946-21-01063556?childUid=00034916-00002588","process":{"name":"NetQCheckHTML5Agent.exe","process_uid":"00034916-00002588","pid":"2588"}},{"type":"linebreak"},{"type":"text","value":"GetSystemTimeAsFileTime@KERNEL32.DLL"},{"type":"stream","stream_uid":"00034916-00002588-4946-873-0107E0BF","modal_link":"/bff/report/5c928014038838ca2336b70d/processes/00034791-00001664/streams/0/00034916-00002588-4946-873-0107E0BF?childUid=00034916-00002588","process":{"name":"NetQCheckHTML5Agent.exe","process_uid":"00034916-00002588","pid":"2588"}},{"type":"linebreak"},{"type":"text","value":"GetSystemTimeAsFileTime@KERNEL32.DLL"},{"type":"stream","stream_uid":"00034916-00002588-4946-2464-00FFE110","modal_link":"/bff/report/5c928014038838ca2336b70d/processes/00034791-00001664/streams/0/00034916-00002588-4946-2464-00FFE110?childUid=00034916-00002588","process":{"name":"NetQCheckHTML5Agent.exe","process_uid":"00034916-00002588","pid":"2588"}},{"type":"linebreak"},{"type":"text","value":"GetSystemTime@KERNEL32.DLL"},{"type":"stream","stream_uid":"00034916-00002588-4946-3928-00FAACB0","modal_link":"/bff/report/5c928014038838ca2336b70d/processes/00034791-00001664/streams/0/00034916-00002588-4946-3928-00FAACB0?childUid=00034916-00002588","process":{"name":"NetQCheckHTML5Agent.exe","process_uid":"00034916-00002588","pid":"2588"}},{"type":"linebreak"},{"type":"text","value":"GetSystemTime@KERNEL32.DLL"},{"type":"stream","stream_uid":"00034916-00002588-4946-3930-00FAA850","modal_link":"/bff/report/5c928014038838ca2336b70d/processes/00034791-00001664/streams/0/00034916-00002588-4946-3930-00FAA850?childUid=00034916-00002588","process":{"name":"NetQCheckHTML5Agent.exe","process_uid":"00034916-00002588","pid":"2588"}},{"type":"linebreak"},{"type":"text","value":"GetSystemTimeAsFileTime@KERNEL32.dll at 58493-4161-0052E0BF"}],"origin":"Hybrid Analysis Technology","attck_id":"T1124","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/wiki/Technique/T1124","stream_data":{"modal_link":"/bff/report/5c928014038838ca2336b70d/processes/00034508-00002748/streams/0/00034673-00003656-54281-427-01312A34?childUid=00034673-00003656","name":"bcs.exe","pid":3656}},{"threat_level":0,"threat_level_human":"informative","category":"Environment Awareness","identifier":"stream-48","type":1,"relevance":1,"name":"Contains ability to query the machine timezone","description":"GetTimeZoneInformation@KERNEL32.DLL at 00034916-00002588-4946-3411-01080241","description_v2":["GetTimeZoneInformation@KERNEL32.DLL at 00034916-00002588-4946-3411-01080241"],"description_v3":[{"type":"text","value":"GetTimeZoneInformation@KERNEL32.DLL"},{"type":"stream","stream_uid":"00034916-00002588-4946-3411-01080241","modal_link":"/bff/report/5c928014038838ca2336b70d/processes/00034791-00001664/streams/0/00034916-00002588-4946-3411-01080241?childUid=00034916-00002588","process":{"name":"NetQCheckHTML5Agent.exe","process_uid":"00034916-00002588","pid":"2588"}}],"origin":"Hybrid Analysis Technology","attck_id":"T1124","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/wiki/Technique/T1124","stream_data":{"modal_link":"/bff/report/5c928014038838ca2336b70d/processes/00034791-00001664/streams/0/00034916-00002588-4946-3411-01080241?childUid=00034916-00002588","name":"NetQCheckHTML5Agent.exe","pid":2588}},{"threat_level":0,"threat_level_human":"informative","category":"Environment Awareness","identifier":"stream-3","type":1,"relevance":1,"name":"Contains ability to query the machine version","description":"GetVersion@KERNEL32.DLL at 00034508-00002748-48436-1-0040310F\n GetVersion@KERNEL32.DLL at 00034508-00002748-48436-9-00405D51\n GetVersion@KERNEL32.DLL at 00034508-00002748-51604-1-0040310F\n GetVersion@KERNEL32.DLL at 00034508-00002748-51604-9-00405D51","description_v2":["GetVersion@KERNEL32.DLL at 00034508-00002748-48436-1-0040310F","GetVersion@KERNEL32.DLL at 00034508-00002748-48436-9-00405D51","GetVersion@KERNEL32.DLL at 00034508-00002748-51604-1-0040310F","GetVersion@KERNEL32.DLL at 00034508-00002748-51604-9-00405D51"],"description_v3":[{"type":"text","value":"GetVersion@KERNEL32.DLL"},{"type":"stream","stream_uid":"00034508-00002748-48436-1-0040310F","modal_link":"/bff/report/5c928014038838ca2336b70d/processes/00034508-00002748/streams/0/00034508-00002748-48436-1-0040310F","process":{"name":"bcs_service.exe","process_uid":"00034508-00002748","pid":"2748"}},{"type":"linebreak"},{"type":"text","value":"GetVersion@KERNEL32.DLL"},{"type":"stream","stream_uid":"00034508-00002748-48436-9-00405D51","modal_link":"/bff/report/5c928014038838ca2336b70d/processes/00034508-00002748/streams/0/00034508-00002748-48436-9-00405D51","process":{"name":"bcs_service.exe","process_uid":"00034508-00002748","pid":"2748"}},{"type":"linebreak"},{"type":"text","value":"GetVersion@KERNEL32.DLL"},{"type":"stream","stream_uid":"00034508-00002748-51604-1-0040310F","modal_link":"/bff/report/5c928014038838ca2336b70d/processes/00034508-00002748/streams/0/00034508-00002748-51604-1-0040310F","process":{"name":"bcs_service.exe","process_uid":"00034508-00002748","pid":"2748"}},{"type":"linebreak"},{"type":"text","value":"GetVersion@KERNEL32.DLL"},{"type":"stream","stream_uid":"00034508-00002748-51604-9-00405D51","modal_link":"/bff/report/5c928014038838ca2336b70d/processes/00034508-00002748/streams/0/00034508-00002748-51604-9-00405D51","process":{"name":"bcs_service.exe","process_uid":"00034508-00002748","pid":"2748"}}],"origin":"Hybrid Analysis Technology","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":{"modal_link":"/bff/report/5c928014038838ca2336b70d/processes/00034508-00002748/streams/0/00034508-00002748-48436-1-0040310F","name":"bcs_service.exe","pid":2748}},{"threat_level":0,"threat_level_human":"informative","category":"Environment Awareness","identifier":"stream-49","type":1,"relevance":1,"name":"Contains ability to query the system locale","description":"GetUserDefaultLCID@KERNEL32.DLL at 00034916-00002588-4946-4926-0107E185\n EnumSystemLocalesW@KERNEL32.DLL at 00034916-00002588-4946-4932-0107DB09\n GetUserDefaultLCID@KERNEL32.DLL at 00034916-00002588-4946-4948-01085C01\n EnumSystemLocalesW@KERNEL32.DLL at 00034916-00002588-4946-4949-01085541\n EnumSystemLocalesW@KERNEL32.DLL at 00034916-00002588-4946-4950-01085627","description_v2":["GetUserDefaultLCID@KERNEL32.DLL at 00034916-00002588-4946-4926-0107E185","EnumSystemLocalesW@KERNEL32.DLL at 00034916-00002588-4946-4932-0107DB09","GetUserDefaultLCID@KERNEL32.DLL at 00034916-00002588-4946-4948-01085C01","EnumSystemLocalesW@KERNEL32.DLL at 00034916-00002588-4946-4949-01085541","EnumSystemLocalesW@KERNEL32.DLL at 00034916-00002588-4946-4950-01085627"],"description_v3":[{"type":"text","value":"GetUserDefaultLCID@KERNEL32.DLL"},{"type":"stream","stream_uid":"00034916-00002588-4946-4926-0107E185","modal_link":"/bff/report/5c928014038838ca2336b70d/processes/00034791-00001664/streams/0/00034916-00002588-4946-4926-0107E185?childUid=00034916-00002588","process":{"name":"NetQCheckHTML5Agent.exe","process_uid":"00034916-00002588","pid":"2588"}},{"type":"linebreak"},{"type":"text","value":"EnumSystemLocalesW@KERNEL32.DLL"},{"type":"pid","pid":"00002588"},{"type":"linebreak"},{"type":"text","value":"GetUserDefaultLCID@KERNEL32.DLL"},{"type":"stream","stream_uid":"00034916-00002588-4946-4948-01085C01","modal_link":"/bff/report/5c928014038838ca2336b70d/processes/00034791-00001664/streams/0/00034916-00002588-4946-4948-01085C01?childUid=00034916-00002588","process":{"name":"NetQCheckHTML5Agent.exe","process_uid":"00034916-00002588","pid":"2588"}},{"type":"linebreak"},{"type":"text","value":"EnumSystemLocalesW@KERNEL32.DLL"},{"type":"pid","pid":"00002588"},{"type":"linebreak"},{"type":"text","value":"EnumSystemLocalesW@KERNEL32.DLL"},{"type":"pid","pid":"00002588"}],"origin":"Hybrid Analysis Technology","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":{"modal_link":"/bff/report/5c928014038838ca2336b70d/processes/00034791-00001664/streams/0/00034916-00002588-4946-4926-0107E185?childUid=00034916-00002588","name":"NetQCheckHTML5Agent.exe","pid":2588}},{"threat_level":0,"threat_level_human":"informative","category":"Environment Awareness","identifier":"stream-37","type":1,"relevance":3,"name":"Contains ability to query volume size","description":"GetDiskFreeSpaceA@KERNEL32.DLL at 00034508-00002748-48436-80-00404352\n GetDiskFreeSpaceA@KERNEL32.DLL at 00034508-00002748-51604-80-00404352","description_v2":["GetDiskFreeSpaceA@KERNEL32.DLL at 00034508-00002748-48436-80-00404352","GetDiskFreeSpaceA@KERNEL32.DLL at 00034508-00002748-51604-80-00404352"],"description_v3":[{"type":"text","value":"GetDiskFreeSpaceA@KERNEL32.DLL"},{"type":"stream","stream_uid":"00034508-00002748-48436-80-00404352","modal_link":"/bff/report/5c928014038838ca2336b70d/processes/00034508-00002748/streams/0/00034508-00002748-48436-80-00404352","process":{"name":"bcs_service.exe","process_uid":"00034508-00002748","pid":"2748"}},{"type":"linebreak"},{"type":"text","value":"GetDiskFreeSpaceA@KERNEL32.DLL"},{"type":"stream","stream_uid":"00034508-00002748-51604-80-00404352","modal_link":"/bff/report/5c928014038838ca2336b70d/processes/00034508-00002748/streams/0/00034508-00002748-51604-80-00404352","process":{"name":"bcs_service.exe","process_uid":"00034508-00002748","pid":"2748"}}],"origin":"Hybrid Analysis Technology","attck_id":"T1083","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/wiki/Technique/T1083","stream_data":{"modal_link":"/bff/report/5c928014038838ca2336b70d/processes/00034508-00002748/streams/0/00034508-00002748-48436-80-00404352","name":"bcs_service.exe","pid":2748}},{"threat_level":0,"threat_level_human":"informative","category":"Environment Awareness","identifier":"stream-39","type":1,"relevance":10,"name":"Makes a code branch decision directly after an API that is environment aware","description":"Found API call GetVersion@KERNEL32.DLL directly followed by \"cmp ax, 00000006h\" and \"je 00403157h\" at 00034508-00002748-48436-1-0040310F\n Found API call GetVersion@KERNEL32.DLL directly followed by \"cmp ax, 00000006h\" and \"je 00403157h\" at 00034508-00002748-51604-1-0040310F\n Found API call GetTimeZoneInformation@KERNEL32.DLL directly followed by \"cmp eax, FFFFFFFFh\" and \"je 0108036Dh\" at 00034916-00002588-4946-3411-01080241","description_v2":["Found API call GetVersion@KERNEL32.DLL directly followed by \"cmp ax, 00000006h\" and \"je 00403157h\" at 00034508-00002748-48436-1-0040310F","Found API call GetVersion@KERNEL32.DLL directly followed by \"cmp ax, 00000006h\" and \"je 00403157h\" at 00034508-00002748-51604-1-0040310F","Found API call GetTimeZoneInformation@KERNEL32.DLL directly followed by \"cmp eax, FFFFFFFFh\" and \"je 0108036Dh\" at 00034916-00002588-4946-3411-01080241"],"description_v3":[{"type":"text","value":"Found API call GetVersion@KERNEL32.DLL directly followed by \"cmp ax, 00000006h\" and \"je 00403157h\""},{"type":"stream","stream_uid":"00034508-00002748-48436-1-0040310F","modal_link":"/bff/report/5c928014038838ca2336b70d/processes/00034508-00002748/streams/0/00034508-00002748-48436-1-0040310F","process":{"name":"bcs_service.exe","process_uid":"00034508-00002748","pid":"2748"}},{"type":"linebreak"},{"type":"text","value":"Found API call GetVersion@KERNEL32.DLL directly followed by \"cmp ax, 00000006h\" and \"je 00403157h\""},{"type":"stream","stream_uid":"00034508-00002748-51604-1-0040310F","modal_link":"/bff/report/5c928014038838ca2336b70d/processes/00034508-00002748/streams/0/00034508-00002748-51604-1-0040310F","process":{"name":"bcs_service.exe","process_uid":"00034508-00002748","pid":"2748"}},{"type":"linebreak"},{"type":"text","value":"Found API call GetTimeZoneInformation@KERNEL32.DLL directly followed by \"cmp eax, FFFFFFFFh\" and \"je 0108036Dh\""},{"type":"stream","stream_uid":"00034916-00002588-4946-3411-01080241","modal_link":"/bff/report/5c928014038838ca2336b70d/processes/00034791-00001664/streams/0/00034916-00002588-4946-3411-01080241?childUid=00034916-00002588","process":{"name":"NetQCheckHTML5Agent.exe","process_uid":"00034916-00002588","pid":"2588"}}],"origin":"Hybrid Analysis Technology","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":{"modal_link":"/bff/report/5c928014038838ca2336b70d/processes/00034508-00002748/streams/0/00034508-00002748-48436-1-0040310F","name":"bcs_service.exe","pid":2748}},{"threat_level":0,"threat_level_human":"informative","category":"Environment Awareness","identifier":"stream-31","type":1,"relevance":1,"name":"Possibly tries to detect the presence of a debugger","description":"GetProcessHeap@KERNEL32.DLL at 00034673-00003656-54281-961-0131E6DF\n GetProcessHeap@KERNEL32.DLL at 00034791-00001664-59001-961-0131E6DF\n GetProcessHeap@KERNEL32.dll at 57725-1186-0040E6DF","description_v2":["GetProcessHeap@KERNEL32.DLL at 00034673-00003656-54281-961-0131E6DF","GetProcessHeap@KERNEL32.DLL at 00034791-00001664-59001-961-0131E6DF","GetProcessHeap@KERNEL32.dll at 57725-1186-0040E6DF"],"description_v3":[{"type":"text","value":"GetProcessHeap@KERNEL32.DLL"},{"type":"stream","stream_uid":"00034673-00003656-54281-961-0131E6DF","modal_link":"/bff/report/5c928014038838ca2336b70d/processes/00034508-00002748/streams/0/00034673-00003656-54281-961-0131E6DF?childUid=00034673-00003656","process":{"name":"bcs.exe","process_uid":"00034673-00003656","pid":"3656"}},{"type":"linebreak"},{"type":"text","value":"GetProcessHeap@KERNEL32.DLL"},{"type":"stream","stream_uid":"00034791-00001664-59001-961-0131E6DF","modal_link":"/bff/report/5c928014038838ca2336b70d/processes/00034791-00001664/streams/0/00034791-00001664-59001-961-0131E6DF","process":{"name":"bcs.exe","process_uid":"00034791-00001664","pid":"1664"}},{"type":"linebreak"},{"type":"text","value":"GetProcessHeap@KERNEL32.dll at 57725-1186-0040E6DF"}],"origin":"Hybrid Analysis Technology","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":{"modal_link":"/bff/report/5c928014038838ca2336b70d/processes/00034508-00002748/streams/0/00034673-00003656-54281-961-0131E6DF?childUid=00034673-00003656","name":"bcs.exe","pid":3656}},{"threat_level":0,"threat_level_human":"informative","category":"Environment Awareness","identifier":"api-11","type":6,"relevance":2,"name":"Queries volume information","description":"\"NetQCheckHTML5Agent.exe\" queries volume information of \"C:\\\" at 00034916-00002588-00000046-23320684119","description_v2":["\"NetQCheckHTML5Agent.exe\" queries volume information of \"C:\\\" at 00034916-00002588-00000046-23320684119"],"description_v3":[{"type":"text","value":"\"NetQCheckHTML5Agent.exe\" queries volume information of \"C:\\\" at 00034916-00002588-00000046-23320684119"}],"origin":"API Call","attck_id":"T1120","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/wiki/Technique/T1120","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Environment Awareness","identifier":"api-39","type":6,"relevance":8,"name":"Queries volume information of an entire harddrive","description":"\"NetQCheckHTML5Agent.exe\" queries volume information of \"C:\\\" at 00034916-00002588-00000046-23320684119","description_v2":["\"NetQCheckHTML5Agent.exe\" queries volume information of \"C:\\\" at 00034916-00002588-00000046-23320684119"],"description_v3":[{"type":"text","value":"\"NetQCheckHTML5Agent.exe\" queries volume information of \"C:\\\" at 00034916-00002588-00000046-23320684119"}],"origin":"API Call","attck_id":"T1120","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/wiki/Technique/T1120","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Environment Awareness","identifier":"registry-55","type":3,"relevance":10,"name":"Reads the registry for installed applications","description":"\"bcs_service.exe\" (Path: \"HKLM\\SOFTWARE\\WOW6432NODE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\UNINSTALL\\VISUALWARE BCS\")","description_v2":["\"bcs_service.exe\" (Path: \"HKLM\\SOFTWARE\\WOW6432NODE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\UNINSTALL\\VISUALWARE BCS\")"],"description_v3":[{"type":"text","value":"\"bcs_service.exe\" (Path: \"HKLM\\SOFTWARE\\WOW6432NODE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\UNINSTALL\\VISUALWARE BCS\")"}],"origin":"Registry Access","attck_id":"T1012","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/wiki/Technique/T1012","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"External Systems","identifier":"avtest-1","type":12,"relevance":10,"name":"Sample was identified as clean by Antivirus engines","description":"0/69 Antivirus vendors marked sample as malicious (0% detection rate)","description_v2":["0/69 Antivirus vendors marked sample as malicious (0% detection rate)"],"description_v3":[{"type":"text","value":"0/69 Antivirus vendors marked sample as malicious (0% detection rate)"}],"origin":"External System","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"General","identifier":"network-0","type":7,"relevance":1,"name":"Contacts domains","description":"\"updatebcs.visualware.com\"","description_v2":["\"updatebcs.visualware.com\""],"description_v3":[{"type":"text","value":"\"updatebcs.visualware.com\""}],"origin":"Network Traffic","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"General","identifier":"network-1","type":7,"relevance":1,"name":"Contacts server","description":"\"38.100.141.76:80\"","description_v2":["\"38.100.141.76:80\""],"description_v3":[{"type":"text","value":"\"38.100.141.76:80\""}],"origin":"Network Traffic","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"General","identifier":"string-7","type":2,"relevance":1,"name":"Contains PDB pathways","description":"\"%USERPROFILE%\\Documents\\Visualware\\NetQCheck\\WindowsDesktop\\NQCAppMgr\\Release\\NQCAppMgr.pdb\"","description_v2":["\"%USERPROFILE%\\Documents\\Visualware\\NetQCheck\\WindowsDesktop\\NQCAppMgr\\Release\\NQCAppMgr.pdb\""],"description_v3":[{"type":"text","value":"\"%USERPROFILE%\\Documents\\Visualware\\NetQCheck\\WindowsDesktop\\NQCAppMgr\\Release\\NQCAppMgr.pdb\""}],"origin":"File/Memory","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"General","identifier":"api-4","type":6,"relevance":1,"name":"Creates a writable file in a temporary directory","description":"\"bcs_service.exe\" created file \"%TEMP%\\nsx42EE.tmp\\UserInfo.dll\"\n \"bcs_service.exe\" created file \"%TEMP%\\nsx42EE.tmp\\nsExec.dll\"\n \"bcs_service.exe\" created file \"%TEMP%\\nsx42EE.tmp\\SimpleSC.dll\"","description_v2":["\"bcs_service.exe\" created file \"%TEMP%\\nsx42EE.tmp\\UserInfo.dll\"","\"bcs_service.exe\" created file \"%TEMP%\\nsx42EE.tmp\\nsExec.dll\"","\"bcs_service.exe\" created file \"%TEMP%\\nsx42EE.tmp\\SimpleSC.dll\""],"description_v3":[{"type":"text","value":"\"bcs_service.exe\" created file \"%TEMP%\\nsx42EE.tmp\\UserInfo.dll\""},{"type":"linebreak"},{"type":"text","value":"\"bcs_service.exe\" created file \"%TEMP%\\nsx42EE.tmp\\nsExec.dll\""},{"type":"linebreak"},{"type":"text","value":"\"bcs_service.exe\" created file \"%TEMP%\\nsx42EE.tmp\\SimpleSC.dll\""}],"origin":"API Call","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"General","identifier":"mutant-0","type":4,"relevance":3,"name":"Creates mutants","description":"\"\\BaseNamedObjects\\Global\\BCSMutex\"","description_v2":["\"\\BaseNamedObjects\\Global\\BCSMutex\""],"description_v3":[{"type":"text","value":"\"\\BaseNamedObjects\\Global\\BCSMutex\""}],"origin":"Created Mutant","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"General","identifier":"binary-16","type":8,"relevance":10,"name":"Drops files marked as clean","description":"Antivirus vendors marked dropped file \"SimpleSC.dll\" as clean (type is \"PE32 executable (DLL) (GUI) Intel 80386 for MS Windows\"), Antivirus vendors marked dropped file \"bcs.exe\" as clean (type is \"PE32 executable (console) Intel 80386 for MS Windows\"), Antivirus vendors marked dropped file \"NetQCheckHTML5Agent.exe\" as clean (type is \"PE32 executable (GUI) Intel 80386 for MS Windows\"), Antivirus vendors marked dropped file \"thebcs.exe\" as clean (type is \"PE32 executable (GUI) Intel 80386 for MS Windows\"), Antivirus vendors marked dropped file \"nsExec.dll\" as clean (type is \"PE32 executable (DLL) (GUI) Intel 80386 for MS Windows\"), Antivirus vendors marked dropped file \"UserInfo.dll\" as clean (type is \"PE32 executable (DLL) (GUI) Intel 80386 for MS Windows\"), Antivirus vendors marked dropped file \"license.rtf\" as clean (type is \"Rich Text Format data version 1 unknown character set\")","description_v2":["Antivirus vendors marked dropped file \"SimpleSC.dll\" as clean (type is \"PE32 executable (DLL) (GUI) Intel 80386 for MS Windows\"), Antivirus vendors marked dropped file \"bcs.exe\" as clean (type is \"PE32 executable (console) Intel 80386 for MS Windows\"), Antivirus vendors marked dropped file \"NetQCheckHTML5Agent.exe\" as clean (type is \"PE32 executable (GUI) Intel 80386 for MS Windows\"), Antivirus vendors marked dropped file \"thebcs.exe\" as clean (type is \"PE32 executable (GUI) Intel 80386 for MS Windows\"), Antivirus vendors marked dropped file \"nsExec.dll\" as clean (type is \"PE32 executable (DLL) (GUI) Intel 80386 for MS Windows\"), Antivirus vendors marked dropped file \"UserInfo.dll\" as clean (type is \"PE32 executable (DLL) (GUI) Intel 80386 for MS Windows\"), Antivirus vendors marked dropped file \"license.rtf\" as clean (type is \"Rich Text Format data version 1 unknown character set\")"],"description_v3":[{"type":"text","value":"Antivirus vendors marked dropped file \"SimpleSC.dll\" as clean (type is \"PE32 executable (DLL) (GUI) Intel 80386 for MS Windows\"), Antivirus vendors marked dropped file \"bcs.exe\" as clean (type is \"PE32 executable (console) Intel 80386 for MS Windows\"), Antivirus vendors marked dropped file \"NetQCheckHTML5Agent.exe\" as clean (type is \"PE32 executable (GUI) Intel 80386 for MS Windows\"), Antivirus vendors marked dropped file \"thebcs.exe\" as clean (type is \"PE32 executable (GUI) Intel 80386 for MS Windows\"), Antivirus vendors marked dropped file \"nsExec.dll\" as clean (type is \"PE32 executable (DLL) (GUI) Intel 80386 for MS Windows\"), Antivirus vendors marked dropped file \"UserInfo.dll\" as clean (type is \"PE32 executable (DLL) (GUI) Intel 80386 for MS Windows\"), Antivirus vendors marked dropped file \"license.rtf\" as clean (type is \"Rich Text Format data version 1 unknown character set\")"}],"origin":"Binary File","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"General","identifier":"network-2","type":7,"relevance":5,"name":"GETs files from a webserver","description":"\"GET /appupdates/NetQCheckHTML5Agent/windows/version.txt HTTP/1.1\nAccept: */*\nAccept-Language: en-us\nUser-Agent: Mozilla/4.0\nHost: updatebcs.visualware.com\"","description_v2":["\"GET /appupdates/NetQCheckHTML5Agent/windows/version.txt HTTP/1.1","Accept: */*","Accept-Language: en-us","User-Agent: Mozilla/4.0","Host: updatebcs.visualware.com\""],"description_v3":[{"type":"text","value":"\"GET /appupdates/NetQCheckHTML5Agent/windows/version.txt HTTP/1.1"},{"type":"linebreak"},{"type":"text","value":"Accept: */*"},{"type":"linebreak"},{"type":"text","value":"Accept-Language: en-us"},{"type":"linebreak"},{"type":"text","value":"User-Agent: Mozilla/4.0"},{"type":"linebreak"},{"type":"text","value":"Host: updatebcs.visualware.com\""}],"origin":"Network Traffic","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"General","identifier":"registry-72","type":3,"relevance":3,"name":"Overview of unique CLSIDs touched in registry","description":"\"bcs_service.exe\" touched \"Computer\" (Path: \"HKCU\\WOW6432NODE\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\SHELLFOLDER\")\n \"bcs_service.exe\" touched \"Memory Mapped Cache Mgr\" (Path: \"HKCU\\WOW6432NODE\\CLSID\\{1F486A52-3CB1-48FD-8F50-B8DC300D9F9D}\")","description_v2":["\"bcs_service.exe\" touched \"Computer\" (Path: \"HKCU\\WOW6432NODE\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\SHELLFOLDER\")","\"bcs_service.exe\" touched \"Memory Mapped Cache Mgr\" (Path: \"HKCU\\WOW6432NODE\\CLSID\\{1F486A52-3CB1-48FD-8F50-B8DC300D9F9D}\")"],"description_v3":[{"type":"text","value":"\"bcs_service.exe\" touched \"Computer\" (Path: \"HKCU\\WOW6432NODE\\CLSID\\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\\SHELLFOLDER\")"},{"type":"linebreak"},{"type":"text","value":"\"bcs_service.exe\" touched \"Memory Mapped Cache Mgr\" (Path: \"HKCU\\WOW6432NODE\\CLSID\\{1F486A52-3CB1-48FD-8F50-B8DC300D9F9D}\")"}],"origin":"Registry Access","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"General","identifier":"target-67","type":9,"relevance":10,"name":"Process launched with changed environment","description":"Process \"bcs.exe\" (UID: 00034791-00001664) was launched with modified environment variables: \"CommonProgramFiles, Path, LOCALAPPDATA, USERDOMAIN, PROCESSOR_ARCHITECTURE, TEMP, APPDATA, USERPROFILE, TMP, ProgramFiles\"\n Process \"bcs.exe\" (UID: 00034791-00001664) was launched with missing environment variables: \"PROCESSOR_ARCHITEW6432, LOGONSERVER, PROMPT, VXDIR, HOMEPATH, HOMEDRIVE\"\n Process \"NetQCheckHTML5Agent.exe\" (UID: 00034916-00002588) was launched with new environment variables: \"PROCESSOR_ARCHITEW6432=\"AMD64\"\"\n Process \"NetQCheckHTML5Agent.exe\" (UID: 00034916-00002588) was launched with modified environment variables: \"CommonProgramFiles, PROCESSOR_ARCHITECTURE, ProgramFiles\"","description_v2":["Process \"bcs.exe\" (UID: 00034791-00001664) was launched with modified environment variables: \"CommonProgramFiles, Path, LOCALAPPDATA, USERDOMAIN, PROCESSOR_ARCHITECTURE, TEMP, APPDATA, USERPROFILE, TMP, ProgramFiles\"","Process \"bcs.exe\" (UID: 00034791-00001664) was launched with missing environment variables: \"PROCESSOR_ARCHITEW6432, LOGONSERVER, PROMPT, VXDIR, HOMEPATH, HOMEDRIVE\"","Process \"NetQCheckHTML5Agent.exe\" (UID: 00034916-00002588) was launched with new environment variables: \"PROCESSOR_ARCHITEW6432=\"AMD64\"\"","Process \"NetQCheckHTML5Agent.exe\" (UID: 00034916-00002588) was launched with modified environment variables: \"CommonProgramFiles, PROCESSOR_ARCHITECTURE, ProgramFiles\""],"description_v3":[{"type":"text","value":"Process \"bcs.exe\""},{"type":"process","process_uid":"00034791-00001664","label":"Show Process"},{"type":"text","value":"was launched with modified environment variables: \"CommonProgramFiles, Path, LOCALAPPDATA, USERDOMAIN, PROCESSOR_ARCHITECTURE, TEMP, APPDATA, USERPROFILE, TMP, ProgramFiles\""},{"type":"linebreak"},{"type":"text","value":"Process \"bcs.exe\""},{"type":"process","process_uid":"00034791-00001664","label":"Show Process"},{"type":"text","value":"was launched with missing environment variables: \"PROCESSOR_ARCHITEW6432, LOGONSERVER, PROMPT, VXDIR, HOMEPATH, HOMEDRIVE\""},{"type":"linebreak"},{"type":"text","value":"Process \"NetQCheckHTML5Agent.exe\""},{"type":"process","process_uid":"00034916-00002588","label":"Show Process"},{"type":"text","value":"was launched with new environment variables: \"PROCESSOR_ARCHITEW6432=\"AMD64\"\""},{"type":"linebreak"},{"type":"text","value":"Process \"NetQCheckHTML5Agent.exe\""},{"type":"process","process_uid":"00034916-00002588","label":"Show Process"},{"type":"text","value":"was launched with modified environment variables: \"CommonProgramFiles, PROCESSOR_ARCHITECTURE, ProgramFiles\""}],"origin":"Monitored Target","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"General","identifier":"target-25","type":9,"relevance":3,"name":"Spawns new processes","description":"Spawned process \"bcs.exe\" with commandline \"install\" (UID: 00034673-00003656)\n Spawned process \"bcs.exe\" (UID: 00034791-00001664)\n Spawned process \"NetQCheckHTML5Agent.exe\" with commandline \"managed\" (UID: 00034916-00002588)","description_v2":["Spawned process \"bcs.exe\" with commandline \"install\" (UID: 00034673-00003656)","Spawned process \"bcs.exe\" (UID: 00034791-00001664)","Spawned process \"NetQCheckHTML5Agent.exe\" with commandline \"managed\" (UID: 00034916-00002588)"],"description_v3":[{"type":"text","value":"Spawned process \"bcs.exe\" with commandline \"install\""},{"type":"process","process_uid":"00034673-00003656","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"bcs.exe\""},{"type":"process","process_uid":"00034791-00001664","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"NetQCheckHTML5Agent.exe\" with commandline \"managed\""},{"type":"process","process_uid":"00034916-00002588","label":"Show Process"}],"origin":"Monitored Target","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"General","identifier":"target-103","type":9,"relevance":3,"name":"Spawns new processes that are not known child processes","description":"Spawned process \"bcs.exe\" with commandline \"install\" (UID: 00034673-00003656)\n Spawned process \"bcs.exe\" (UID: 00034791-00001664)\n Spawned process \"NetQCheckHTML5Agent.exe\" with commandline \"managed\" (UID: 00034916-00002588)","description_v2":["Spawned process \"bcs.exe\" with commandline \"install\" (UID: 00034673-00003656)","Spawned process \"bcs.exe\" (UID: 00034791-00001664)","Spawned process \"NetQCheckHTML5Agent.exe\" with commandline \"managed\" (UID: 00034916-00002588)"],"description_v3":[{"type":"text","value":"Spawned process \"bcs.exe\" with commandline \"install\""},{"type":"process","process_uid":"00034673-00003656","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"bcs.exe\""},{"type":"process","process_uid":"00034791-00001664","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"NetQCheckHTML5Agent.exe\" with commandline \"managed\""},{"type":"process","process_uid":"00034916-00002588","label":"Show Process"}],"origin":"Monitored Target","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"General","identifier":"certificate-0","type":17,"relevance":10,"name":"The input sample is signed with a certificate","description":"The input sample is signed with a certificate issued by \"CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R3\" (SHA1: 09:0D:03:43:5E:B2:A8:36:4F:79:B7:8C:B1:73:D3:5E:8E:B6:35:58; see report for more information)\n The input sample is signed with a certificate issued by \"CN=GlobalSign CodeSigning CA - SHA256 - G3, O=GlobalSign nv-sa, C=BE\" (SHA1: 08:88:86:82:7D:94:B0:10:A2:31:9A:50:33:D8:FB:26:20:58:73:FB; see report for more information)","description_v2":["The input sample is signed with a certificate issued by \"CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R3\" (SHA1: 09:0D:03:43:5E:B2:A8:36:4F:79:B7:8C:B1:73:D3:5E:8E:B6:35:58; see report for more information)","The input sample is signed with a certificate issued by \"CN=GlobalSign CodeSigning CA - SHA256 - G3, O=GlobalSign nv-sa, C=BE\" (SHA1: 08:88:86:82:7D:94:B0:10:A2:31:9A:50:33:D8:FB:26:20:58:73:FB; see report for more information)"],"description_v3":[{"type":"text","value":"The input sample is signed with a certificate issued by \"CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R3\" (SHA1: 09:0D:03:43:5E:B2:A8:36:4F:79:B7:8C:B1:73:D3:5E:8E:B6:35:58; see report for more information)"},{"type":"linebreak"},{"type":"text","value":"The input sample is signed with a certificate issued by \"CN=GlobalSign CodeSigning CA - SHA256 - G3, O=GlobalSign nv-sa, C=BE\" (SHA1: 08:88:86:82:7D:94:B0:10:A2:31:9A:50:33:D8:FB:26:20:58:73:FB; see report for more information)"}],"origin":"Certificate Data","attck_id":"T1116","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/wiki/Technique/T1116","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"General","identifier":"certificate-2","type":17,"relevance":10,"name":"The input sample is signed with a valid certificate","description":"The entire certificate chain of the input sample was validated successfully.","description_v2":["The entire certificate chain of the input sample was validated successfully."],"description_v3":[{"type":"text","value":"The entire certificate chain of the input sample was validated successfully."}],"origin":"Certificate Data","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Installation/Persistance","identifier":"api-16","type":6,"relevance":1,"name":"Connects to LPC ports","description":"\"bcs_service.exe\" connecting to \"\\ThemeApiPort\"","description_v2":["\"bcs_service.exe\" connecting to \"\\ThemeApiPort\""],"description_v3":[{"type":"text","value":"\"bcs_service.exe\" connecting to \"\\ThemeApiPort\""}],"origin":"API Call","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Installation/Persistance","identifier":"binary-0","type":8,"relevance":3,"name":"Dropped files","description":"$2a","description_v2":["\"bcs_uninstall.exe\" has type \"PE32 executable (GUI) Intel 80386 for MS Windows\"","\"SimpleSC.dll\" has type \"PE32 executable (DLL) (GUI) Intel 80386 for MS Windows\"","\"bcs.exe\" has type \"PE32 executable (console) Intel 80386 for MS Windows\"","\"NetQCheckHTML5Agent.exe\" has type \"PE32 executable (GUI) Intel 80386 for MS Windows\"","\"thebcs.exe\" has type \"PE32 executable (GUI) Intel 80386 for MS Windows\"","\"nsExec.dll\" has type \"PE32 executable (DLL) (GUI) Intel 80386 for MS Windows\"","\"UserInfo.dll\" has type \"PE32 executable (DLL) (GUI) Intel 80386 for MS Windows\"","\"log.txt\" has type \"ASCII text with CRLF line terminators\"","\"bcshome.url\" has type \"MS Windows 95 Internet shortcut text (URL=) ASCII text with CRLF line terminators\"","\"license.rtf\" has type \"Rich Text Format data version 1 unknown character set\"","\"bcsicon.ico\" has type \"MS Windows icon resource - 9 icons 16x16\"","\"MgrLog.txt\" has type \"ASCII text with CRLF line terminators\"","\"favicon.ico\" has type \"MS Windows icon resource - 9 icons 16x16\"","\"AppUpdaterLog.txt\" has type \"ASCII text with CRLF line terminators\"","\"netqcheck.cfg\" has type \"data\""],"description_v3":[{"type":"text","value":"\"bcs_uninstall.exe\" has type \"PE32 executable (GUI) Intel 80386 for MS Windows\""},{"type":"linebreak"},{"type":"text","value":"\"SimpleSC.dll\" has type \"PE32 executable (DLL) (GUI) Intel 80386 for MS Windows\""},{"type":"linebreak"},{"type":"text","value":"\"bcs.exe\" has type \"PE32 executable (console) Intel 80386 for MS Windows\""},{"type":"linebreak"},{"type":"text","value":"\"NetQCheckHTML5Agent.exe\" has type \"PE32 executable (GUI) Intel 80386 for MS Windows\""},{"type":"linebreak"},{"type":"text","value":"\"thebcs.exe\" has type \"PE32 executable (GUI) Intel 80386 for MS Windows\""},{"type":"linebreak"},{"type":"text","value":"\"nsExec.dll\" has type \"PE32 executable (DLL) (GUI) Intel 80386 for MS Windows\""},{"type":"linebreak"},{"type":"text","value":"\"UserInfo.dll\" has type \"PE32 executable (DLL) (GUI) Intel 80386 for MS Windows\""},{"type":"linebreak"},{"type":"text","value":"\"log.txt\" has type \"ASCII text with CRLF line terminators\""},{"type":"linebreak"},{"type":"text","value":"\"bcshome.url\" has type \"MS Windows 95 Internet shortcut text (URL=) ASCII text with CRLF line terminators\""},{"type":"linebreak"},{"type":"text","value":"\"license.rtf\" has type \"Rich Text Format data version 1 unknown character set\""},{"type":"linebreak"},{"type":"text","value":"\"bcsicon.ico\" has type \"MS Windows icon resource - 9 icons 16x16\""},{"type":"linebreak"},{"type":"text","value":"\"MgrLog.txt\" has type \"ASCII text with CRLF line terminators\""},{"type":"linebreak"},{"type":"text","value":"\"favicon.ico\" has type \"MS Windows icon resource - 9 icons 16x16\""},{"type":"linebreak"},{"type":"text","value":"\"AppUpdaterLog.txt\" has type \"ASCII text with CRLF line terminators\""},{"type":"linebreak"},{"type":"text","value":"\"netqcheck.cfg\" has type \"data\""}],"origin":"Binary File","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Installation/Persistance","identifier":"api-55","type":6,"relevance":7,"name":"Touches files in the Windows directory","description":"$2b","description_v2":["\"bcs_service.exe\" touched file \"C:\\Windows\\SysWOW64\\oleaccrc.dll\"","\"bcs_service.exe\" touched file \"C:\\Windows\\Globalization\\Sorting\\SortDefault.nls\"","\"bcs_service.exe\" touched file \"C:\\Users\\%OSUSER%\\AppData\\Local\\Microsoft\\Windows\\Caches\"","\"bcs_service.exe\" touched file \"C:\\Users\\%OSUSER%\\AppData\\Local\\Microsoft\\Windows\\Caches\\cversions.1.db\"","\"bcs_service.exe\" touched file \"C:\\Users\\%OSUSER%\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x000000000000001b.db\"","\"bcs_service.exe\" touched file \"C:\\Windows\\AppPatch\\sysmain.sdb\"","\"bcs_service.exe\" touched file \"%LOCALAPPDATA%\\Microsoft\\Windows\\Caches\"","\"bcs_service.exe\" touched file \"%LOCALAPPDATA%\\Microsoft\\Windows\\Caches\\cversions.1.db\"","\"bcs_service.exe\" touched file \"%LOCALAPPDATA%\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x000000000000001b.db\"","\"bcs.exe\" touched file \"C:\\Windows\\AppPatch\\sysmain.sdb\"","\"NetQCheckHTML5Agent.exe\" touched file \"C:\\Windows\\Globalization\\Sorting\\SortDefault.nls\"","\"NetQCheckHTML5Agent.exe\" touched file \"C:\\Windows\\SysWOW64\\rsaenh.dll\""],"description_v3":[{"type":"text","value":"\"bcs_service.exe\" touched file \"C:\\Windows\\SysWOW64\\oleaccrc.dll\""},{"type":"linebreak"},{"type":"text","value":"\"bcs_service.exe\" touched file \"C:\\Windows\\Globalization\\Sorting\\SortDefault.nls\""},{"type":"linebreak"},{"type":"text","value":"\"bcs_service.exe\" touched file \"%LOCALAPPDATA%\\Microsoft\\Windows\\Caches\""},{"type":"linebreak"},{"type":"text","value":"\"bcs_service.exe\" touched file \"C:\\Users\\%USERNAME%\\AppData\\Local\\Microsoft\\Windows\\Caches\\cversions.1.db\""},{"type":"linebreak"},{"type":"text","value":"\"bcs_service.exe\" touched file \"C:\\Users\\%USERNAME%\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x000000000000001b.db\""},{"type":"linebreak"},{"type":"text","value":"\"bcs_service.exe\" touched file \"C:\\Windows\\AppPatch\\sysmain.sdb\""},{"type":"linebreak"},{"type":"text","value":"\"bcs_service.exe\" touched file \"%LOCALAPPDATA%\\Microsoft\\Windows\\Caches\""},{"type":"linebreak"},{"type":"text","value":"\"bcs_service.exe\" touched file \"%LOCALAPPDATA%\\Microsoft\\Windows\\Caches\\cversions.1.db\""},{"type":"linebreak"},{"type":"text","value":"\"bcs_service.exe\" touched file \"%LOCALAPPDATA%\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x000000000000001b.db\""},{"type":"linebreak"},{"type":"text","value":"\"bcs.exe\" touched file \"C:\\Windows\\AppPatch\\sysmain.sdb\""},{"type":"linebreak"},{"type":"text","value":"\"NetQCheckHTML5Agent.exe\" touched file \"C:\\Windows\\Globalization\\Sorting\\SortDefault.nls\""},{"type":"linebreak"},{"type":"text","value":"\"NetQCheckHTML5Agent.exe\" touched file \"C:\\Windows\\SysWOW64\\rsaenh.dll\""}],"origin":"API Call","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Network Related","identifier":"string-3","type":2,"relevance":10,"name":"Found potential URL in binary/memory","description":"$2c","description_v2":["Pattern match: \"http://nsis.sf.net/NSIS_Error\"","Pattern match: \"http://ocsp2.globalsign.com/rootr306\"","Pattern match: \"http://crl.globalsign.com/root-r3.crl0c\"","Pattern match: \"https://www.globalsign.com/repository/0\"","Pattern match: \"http://secure.globalsign.com/cacert/gscodesignsha2g3ocsp.crt08\"","Pattern match: \"http://ocsp2.globalsign.com/gscodesignsha2g30V\"","Pattern match: \"http://crl.globalsign.com/gscodesignsha2g3.crl0\"","Pattern match: \"http://www.visualware.com\"","Pattern match: \"crl.globalsign.com/gs/gstimestampingsha2g2.crl0\"","Pattern match: \"http://secure.globalsign.com/cacert/gstimestampingsha2g2.crt0\"","Pattern match: \"ocsp2.globalsign.com/gstimestampingsha2g20\"","Pattern match: \"https://www.globalsign.com/repository/06\"","Pattern match: \"http://crl.globalsign.net/root-r3.crl0\"","Heuristic match: \"updatebcs.visualware.com\"","Heuristic match: \"GET /appupdates/NetQCheckHTML5Agent/windows/version.txt HTTP/1.1","Accept: */*","Accept-Language: en-us","User-Agent: Mozilla/4.0","Host: updatebcs.visualware.com\"","Pattern match: \"http://www.myconnectionserver.com/support/v9/bcs.html\"","Pattern match: \"updatebcs.visualware.com/appupdates/NetQCheckHTML5Agent/windows/version.txt\"","Pattern match: \"https://www.openssl.org/docs/faq.html\"","Pattern match: \"http://%s:%d%s\"","Pattern match: \"http://www.visualware.com/bcs/support.html\"","Pattern match: \"http://www.visualware.com/bcs/support/bind_error.html\"","Heuristic match: \"mcssjc.visualware.com\"","Pattern match: \"http://www.visualware.com/bcs/support/ec_515.html\"","Pattern match: \"http://www.visualware.com/bcs/support/ec_503.html?file=\"","Pattern match: \"http://www.visualware.com/bcs/support/ec_501.html\"","Pattern match: \"http://www.visualware.com/bcs/support/ec_502.html?url=\"","Pattern match: \"http://www.visualware.com/bcs/support/ec_511.html\"","Pattern match: \"http://schemas.microsoft.com/office/word/2003/wordml\""],"description_v3":[{"type":"text","value":"Pattern match: \"http://nsis.sf.net/NSIS_Error\""},{"type":"linebreak"},{"type":"text","value":"Pattern match: \"http://ocsp2.globalsign.com/rootr306\""},{"type":"linebreak"},{"type":"text","value":"Pattern match: \"http://crl.globalsign.com/root-r3.crl0c\""},{"type":"linebreak"},{"type":"text","value":"Pattern match: \"https://www.globalsign.com/repository/0\""},{"type":"linebreak"},{"type":"text","value":"Pattern match: \"http://secure.globalsign.com/cacert/gscodesignsha2g3ocsp.crt08\""},{"type":"linebreak"},{"type":"text","value":"Pattern match: \"http://ocsp2.globalsign.com/gscodesignsha2g30V\""},{"type":"linebreak"},{"type":"text","value":"Pattern match: \"http://crl.globalsign.com/gscodesignsha2g3.crl0\""},{"type":"linebreak"},{"type":"text","value":"Pattern match: \"http://www.visualware.com\""},{"type":"linebreak"},{"type":"text","value":"Pattern match: \"crl.globalsign.com/gs/gstimestampingsha2g2.crl0\""},{"type":"linebreak"},{"type":"text","value":"Pattern match: \"http://secure.globalsign.com/cacert/gstimestampingsha2g2.crt0\""},{"type":"linebreak"},{"type":"text","value":"Pattern match: \"ocsp2.globalsign.com/gstimestampingsha2g20\""},{"type":"linebreak"},{"type":"text","value":"Pattern match: \"https://www.globalsign.com/repository/06\""},{"type":"linebreak"},{"type":"text","value":"Pattern match: \"http://crl.globalsign.net/root-r3.crl0\""},{"type":"linebreak"},{"type":"text","value":"Heuristic match: \"updatebcs.visualware.com\""},{"type":"linebreak"},{"type":"text","value":"Heuristic match: \"GET /appupdates/NetQCheckHTML5Agent/windows/version.txt HTTP/1.1"},{"type":"linebreak"},{"type":"text","value":"Accept: */*"},{"type":"linebreak"},{"type":"text","value":"Accept-Language: en-us"},{"type":"linebreak"},{"type":"text","value":"User-Agent: Mozilla/4.0"},{"type":"linebreak"},{"type":"text","value":"Host: updatebcs.visualware.com\""},{"type":"linebreak"},{"type":"text","value":"Pattern match: \"http://www.myconnectionserver.com/support/v9/bcs.html\""},{"type":"linebreak"},{"type":"text","value":"Pattern match: \"updatebcs.visualware.com/appupdates/NetQCheckHTML5Agent/windows/version.txt\""},{"type":"linebreak"},{"type":"text","value":"Pattern match: \"https://www.openssl.org/docs/faq.html\""},{"type":"linebreak"},{"type":"text","value":"Pattern match: \"http://%s:%d%s\""},{"type":"linebreak"},{"type":"text","value":"Pattern match: \"http://www.visualware.com/bcs/support.html\""},{"type":"linebreak"},{"type":"text","value":"Pattern match: \"http://www.visualware.com/bcs/support/bind_error.html\""},{"type":"linebreak"},{"type":"text","value":"Heuristic match: \"mcssjc.visualware.com\""},{"type":"linebreak"},{"type":"text","value":"Pattern match: \"http://www.visualware.com/bcs/support/ec_515.html\""},{"type":"linebreak"},{"type":"text","value":"Pattern match: \"http://www.visualware.com/bcs/support/ec_503.html?file=\""},{"type":"linebreak"},{"type":"text","value":"Pattern match: \"http://www.visualware.com/bcs/support/ec_501.html\""},{"type":"linebreak"},{"type":"text","value":"Pattern match: \"http://www.visualware.com/bcs/support/ec_502.html?url=\""},{"type":"linebreak"},{"type":"text","value":"Pattern match: \"http://www.visualware.com/bcs/support/ec_511.html\""},{"type":"linebreak"},{"type":"text","value":"Pattern match: \"http://schemas.microsoft.com/office/word/2003/wordml\""}],"origin":"File/Memory","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"System Security","identifier":"registry-67","type":3,"relevance":10,"name":"Creates or modifies windows services","description":"\"NetQCheckHTML5Agent.exe\" (Access type: \"CREATE\"; Path: \"HKLM\\SYSTEM\\CURRENTCONTROLSET\\SERVICES\\TCPIP\\PARAMETERS\")","description_v2":["\"NetQCheckHTML5Agent.exe\" (Access type: \"CREATE\"; Path: \"HKLM\\SYSTEM\\CURRENTCONTROLSET\\SERVICES\\TCPIP\\PARAMETERS\")"],"description_v3":[{"type":"text","value":"\"NetQCheckHTML5Agent.exe\" (Access type: \"CREATE\"; Path: \"HKLM\\SYSTEM\\CURRENTCONTROLSET\\SERVICES\\TCPIP\\PARAMETERS\")"}],"origin":"Registry Access","attck_id":"T1112","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/wiki/Technique/T1112","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"System Security","identifier":"api-37","type":6,"relevance":10,"name":"Opens the Kernel Security Device Driver (KsecDD) of Windows","description":"\"bcs_service.exe\" opened \"\\Device\\KsecDD\"\n \"NetQCheckHTML5Agent.exe\" opened \"\\Device\\KsecDD\"","description_v2":["\"bcs_service.exe\" opened \"\\Device\\KsecDD\"","\"NetQCheckHTML5Agent.exe\" opened \"\\Device\\KsecDD\""],"description_v3":[{"type":"text","value":"\"bcs_service.exe\" opened \"\\Device\\KsecDD\""},{"type":"linebreak"},{"type":"text","value":"\"NetQCheckHTML5Agent.exe\" opened \"\\Device\\KsecDD\""}],"origin":"API Call","attck_id":"T1215","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/wiki/Technique/T1215","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Unusual Characteristics","identifier":"static-19","type":0,"relevance":10,"name":"Found Delphi 4 - Delphi 2006 artifact","description":"\"SimpleSC.dll\" has a PE timestamp using the buggy magic timestamp 0x2A425E19. The real compilation date is probably Thu Jan 1 00:00:00 1970","description_v2":["\"SimpleSC.dll\" has a PE timestamp using the buggy magic timestamp 0x2A425E19. The real compilation date is probably Thu Jan 1 00:00:00 1970"],"description_v3":[{"type":"text","value":"\"SimpleSC.dll\" has a PE timestamp using the buggy magic timestamp 0x2A425E19. The real compilation date is probably Thu Jan 1 00:00:00 1970"}],"origin":"Static Parser","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Unusual Characteristics","identifier":"static-18","type":0,"relevance":10,"name":"Matched Compiler/Packer signature","description":"\"SimpleSC.dll\" was detected as \"Borland Delphi 4.0\"\n \"bcs.exe\" was detected as \"VC8 -> Microsoft Corporation\"\n \"NetQCheckHTML5Agent.exe\" was detected as \"VC8 -> Microsoft Corporation\"","description_v2":["\"SimpleSC.dll\" was detected as \"Borland Delphi 4.0\"","\"bcs.exe\" was detected as \"VC8 -> Microsoft Corporation\"","\"NetQCheckHTML5Agent.exe\" was detected as \"VC8 -> Microsoft Corporation\""],"description_v3":[{"type":"text","value":"\"SimpleSC.dll\" was detected as \"Borland Delphi 4.0\""},{"type":"linebreak"},{"type":"text","value":"\"bcs.exe\" was detected as \"VC8 -> Microsoft Corporation\""},{"type":"linebreak"},{"type":"text","value":"\"NetQCheckHTML5Agent.exe\" was detected as \"VC8 -> Microsoft Corporation\""}],"origin":"Static Parser","attck_id":"T1002","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/wiki/Technique/T1002","stream_data":null},{"threat_level":1,"threat_level_human":"suspicious","category":"Anti-Detection/Stealthyness","identifier":"stream-14","type":1,"relevance":8,"name":"Contains ability to open/control a service","description":"OpenServiceA@ADVAPI32.DLL at 00034673-00003656-54281-75-013122A0\n ControlService@ADVAPI32.DLL at 00034673-00003656-54281-342-01311220\n OpenServiceA@ADVAPI32.DLL at 00034791-00001664-59001-75-013122A0\n ControlService@ADVAPI32.DLL at 00034791-00001664-59001-342-01311220\n ControlService@ADVAPI32.DLL at 00034916-00002588-4946-4569-00F8CF20","description_v2":["OpenServiceA@ADVAPI32.DLL at 00034673-00003656-54281-75-013122A0","ControlService@ADVAPI32.DLL at 00034673-00003656-54281-342-01311220","OpenServiceA@ADVAPI32.DLL at 00034791-00001664-59001-75-013122A0","ControlService@ADVAPI32.DLL at 00034791-00001664-59001-342-01311220","ControlService@ADVAPI32.DLL at 00034916-00002588-4946-4569-00F8CF20"],"description_v3":[{"type":"text","value":"OpenServiceA@ADVAPI32.DLL"},{"type":"stream","stream_uid":"00034673-00003656-54281-75-013122A0","modal_link":"/bff/report/5c928014038838ca2336b70d/processes/00034508-00002748/streams/0/00034673-00003656-54281-75-013122A0?childUid=00034673-00003656","process":{"name":"bcs.exe","process_uid":"00034673-00003656","pid":"3656"}},{"type":"linebreak"},{"type":"text","value":"ControlService@ADVAPI32.DLL"},{"type":"stream","stream_uid":"00034673-00003656-54281-342-01311220","modal_link":"/bff/report/5c928014038838ca2336b70d/processes/00034508-00002748/streams/0/00034673-00003656-54281-342-01311220?childUid=00034673-00003656","process":{"name":"bcs.exe","process_uid":"00034673-00003656","pid":"3656"}},{"type":"linebreak"},{"type":"text","value":"OpenServiceA@ADVAPI32.DLL"},{"type":"stream","stream_uid":"00034791-00001664-59001-75-013122A0","modal_link":"/bff/report/5c928014038838ca2336b70d/processes/00034791-00001664/streams/0/00034791-00001664-59001-75-013122A0","process":{"name":"bcs.exe","process_uid":"00034791-00001664","pid":"1664"}},{"type":"linebreak"},{"type":"text","value":"ControlService@ADVAPI32.DLL"},{"type":"stream","stream_uid":"00034791-00001664-59001-342-01311220","modal_link":"/bff/report/5c928014038838ca2336b70d/processes/00034791-00001664/streams/0/00034791-00001664-59001-342-01311220","process":{"name":"bcs.exe","process_uid":"00034791-00001664","pid":"1664"}},{"type":"linebreak"},{"type":"text","value":"ControlService@ADVAPI32.DLL"},{"type":"stream","stream_uid":"00034916-00002588-4946-4569-00F8CF20","modal_link":"/bff/report/5c928014038838ca2336b70d/processes/00034791-00001664/streams/0/00034916-00002588-4946-4569-00F8CF20?childUid=00034916-00002588","process":{"name":"NetQCheckHTML5Agent.exe","process_uid":"00034916-00002588","pid":"2588"}}],"origin":"Hybrid Analysis Technology","attck_id":"T1035","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/wiki/Technique/T1035","stream_data":{"modal_link":"/bff/report/5c928014038838ca2336b70d/processes/00034508-00002748/streams/0/00034673-00003656-54281-75-013122A0?childUid=00034673-00003656","name":"bcs.exe","pid":3656}},{"threat_level":1,"threat_level_human":"suspicious","category":"Anti-Detection/Stealthyness","identifier":"api-10","type":6,"relevance":6,"name":"Queries kernel debugger information","description":"\"NetQCheckHTML5Agent.exe\" at 00034916-00002588-00000033-23562949105","description_v2":["\"NetQCheckHTML5Agent.exe\" at 00034916-00002588-00000033-23562949105"],"description_v3":[{"type":"text","value":"\"NetQCheckHTML5Agent.exe\" at 00034916-00002588-00000033-23562949105"}],"origin":"API Call","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":1,"threat_level_human":"suspicious","category":"Cryptographic Related","identifier":"string-57","type":2,"relevance":10,"name":"Found a cryptographic related string","description":"\"ECDSA\" (Indicator: \"ecdsa\"; File: \"00034916-00002588.00000002.39079.00F50000.00000002.mdmp\")","description_v2":["\"ECDSA\" (Indicator: \"ecdsa\"; File: \"00034916-00002588.00000002.39079.00F50000.00000002.mdmp\")"],"description_v3":[{"type":"text","value":"\"ECDSA\" (Indicator: \"ecdsa\"; File: \"00034916-00002588.00000002.39079.00F50000.00000002.mdmp\")"}],"origin":"File/Memory","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":1,"threat_level_human":"suspicious","category":"Environment Awareness","identifier":"stream-6","type":1,"relevance":10,"name":"Contains ability to measure performance","description":"rdtsc at 00034673-00003656-54281-426-01312E92\n rdtsc at 00034791-00001664-59001-426-01312E92\n rdtsc at 00034916-00002588-4946-421-01062E7D","description_v2":["rdtsc at 00034673-00003656-54281-426-01312E92","rdtsc at 00034791-00001664-59001-426-01312E92","rdtsc at 00034916-00002588-4946-421-01062E7D"],"description_v3":[{"type":"text","value":"rdtsc"},{"type":"stream","stream_uid":"00034673-00003656-54281-426-01312E92","modal_link":"/bff/report/5c928014038838ca2336b70d/processes/00034508-00002748/streams/0/00034673-00003656-54281-426-01312E92?childUid=00034673-00003656","process":{"name":"bcs.exe","process_uid":"00034673-00003656","pid":"3656"}},{"type":"linebreak"},{"type":"text","value":"rdtsc"},{"type":"stream","stream_uid":"00034791-00001664-59001-426-01312E92","modal_link":"/bff/report/5c928014038838ca2336b70d/processes/00034791-00001664/streams/0/00034791-00001664-59001-426-01312E92","process":{"name":"bcs.exe","process_uid":"00034791-00001664","pid":"1664"}},{"type":"linebreak"},{"type":"text","value":"rdtsc"},{"type":"pid","pid":"00002588"}],"origin":"Hybrid Analysis Technology","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":{"modal_link":"/bff/report/5c928014038838ca2336b70d/processes/00034508-00002748/streams/0/00034673-00003656-54281-426-01312E92?childUid=00034673-00003656","name":"bcs.exe","pid":3656}},{"threat_level":1,"threat_level_human":"suspicious","category":"Environment Awareness","identifier":"stream-13","type":1,"relevance":10,"name":"Contains ability to query CPU information","description":"cpuid at 58493-422-00512E7D\n cpuid at 57725-427-00402E92","description_v2":["cpuid at 58493-422-00512E7D","cpuid at 57725-427-00402E92"],"description_v3":[{"type":"text","value":"cpuid at 58493-422-00512E7D"},{"type":"linebreak"},{"type":"text","value":"cpuid at 57725-427-00402E92"}],"origin":"Hybrid Analysis Technology","attck_id":"T1082","capec_id":"CAPEC-311","attck_id_wiki":"https://attack.mitre.org/wiki/Technique/T1082","stream_data":null},{"threat_level":1,"threat_level_human":"suspicious","category":"Environment Awareness","identifier":"registry-35","type":3,"relevance":5,"name":"Reads the active computer name","description":"\"bcs_service.exe\" (Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\COMPUTERNAME\\ACTIVECOMPUTERNAME\"; Key: \"COMPUTERNAME\")\n \"bcs.exe\" (Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\COMPUTERNAME\\ACTIVECOMPUTERNAME\"; Key: \"COMPUTERNAME\")\n \"NetQCheckHTML5Agent.exe\" (Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\COMPUTERNAME\\ACTIVECOMPUTERNAME\"; Key: \"COMPUTERNAME\")","description_v2":["\"bcs_service.exe\" (Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\COMPUTERNAME\\ACTIVECOMPUTERNAME\"; Key: \"COMPUTERNAME\")","\"bcs.exe\" (Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\COMPUTERNAME\\ACTIVECOMPUTERNAME\"; Key: \"COMPUTERNAME\")","\"NetQCheckHTML5Agent.exe\" (Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\COMPUTERNAME\\ACTIVECOMPUTERNAME\"; Key: \"COMPUTERNAME\")"],"description_v3":[{"type":"text","value":"\"bcs_service.exe\" (Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\COMPUTERNAME\\ACTIVECOMPUTERNAME\"; Key: \"COMPUTERNAME\")"},{"type":"linebreak"},{"type":"text","value":"\"bcs.exe\" (Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\COMPUTERNAME\\ACTIVECOMPUTERNAME\"; Key: \"COMPUTERNAME\")"},{"type":"linebreak"},{"type":"text","value":"\"NetQCheckHTML5Agent.exe\" (Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\COMPUTERNAME\\ACTIVECOMPUTERNAME\"; Key: \"COMPUTERNAME\")"}],"origin":"Registry Access","attck_id":"T1012","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/wiki/Technique/T1012","stream_data":null},{"threat_level":1,"threat_level_human":"suspicious","category":"Environment Awareness","identifier":"registry-1","type":3,"relevance":10,"name":"Reads the cryptographic machine GUID","description":"\"NetQCheckHTML5Agent.exe\" (Path: \"HKLM\\SOFTWARE\\MICROSOFT\\CRYPTOGRAPHY\"; Key: \"MACHINEGUID\")","description_v2":["\"NetQCheckHTML5Agent.exe\" (Path: \"HKLM\\SOFTWARE\\MICROSOFT\\CRYPTOGRAPHY\"; Key: \"MACHINEGUID\")"],"description_v3":[{"type":"text","value":"\"NetQCheckHTML5Agent.exe\" (Path: \"HKLM\\SOFTWARE\\MICROSOFT\\CRYPTOGRAPHY\"; Key: \"MACHINEGUID\")"}],"origin":"Registry Access","attck_id":"T1012","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/wiki/Technique/T1012","stream_data":null},{"threat_level":1,"threat_level_human":"suspicious","category":"External Systems","identifier":"avtest-6","type":12,"relevance":10,"name":"Found an IP/URL artifact that was identified as malicious by at least one reputation engine","description":"1/66 reputation engines marked \"http://nsis.sf.net\" as malicious (1% detection rate)","description_v2":["1/66 reputation engines marked \"http://nsis.sf.net\" as malicious (1% detection rate)"],"description_v3":[{"type":"text","value":"1/66 reputation engines marked \"http://nsis.sf.net\" as malicious (1% detection rate)"}],"origin":"External System","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":1,"threat_level_human":"suspicious","category":"General","identifier":"api-77","type":6,"relevance":10,"name":"Opened the service control manager","description":"\"bcs.exe\" called \"OpenSCManager\" requesting access rights \"SC_MANAGER_CONNECT\" (0x1)\n \"bcs.exe\" called \"OpenSCManager\" requesting access rights \"SC_MANAGER_CREATE_SERVICE\" (0x2)","description_v2":["\"bcs.exe\" called \"OpenSCManager\" requesting access rights \"SC_MANAGER_CONNECT\" (0x1)","\"bcs.exe\" called \"OpenSCManager\" requesting access rights \"SC_MANAGER_CREATE_SERVICE\" (0x2)"],"description_v3":[{"type":"text","value":"\"bcs.exe\" called \"OpenSCManager\" requesting access rights \"SC_MANAGER_CONNECT\" (0x1)"},{"type":"linebreak"},{"type":"text","value":"\"bcs.exe\" called \"OpenSCManager\" requesting access rights \"SC_MANAGER_CREATE_SERVICE\" (0x2)"}],"origin":"API Call","attck_id":"T1035","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/wiki/Technique/T1035","stream_data":null},{"threat_level":1,"threat_level_human":"suspicious","category":"General","identifier":"api-6","type":6,"relevance":4,"name":"Reads configuration files","description":"\"bcs_service.exe\" read file \"%USERPROFILE%\\Desktop\\desktop.ini\"","description_v2":["\"bcs_service.exe\" read file \"%USERPROFILE%\\Desktop\\desktop.ini\""],"description_v3":[{"type":"text","value":"\"bcs_service.exe\" read file \"%USERPROFILE%\\Desktop\\desktop.ini\""}],"origin":"API Call","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":1,"threat_level_human":"suspicious","category":"Installation/Persistance","identifier":"binary-1","type":8,"relevance":10,"name":"Drops executable files","description":"\"bcs_uninstall.exe\" has type \"PE32 executable (GUI) Intel 80386 for MS Windows\"\n \"SimpleSC.dll\" has type \"PE32 executable (DLL) (GUI) Intel 80386 for MS Windows\"\n \"bcs.exe\" has type \"PE32 executable (console) Intel 80386 for MS Windows\"\n \"NetQCheckHTML5Agent.exe\" has type \"PE32 executable (GUI) Intel 80386 for MS Windows\"\n \"thebcs.exe\" has type \"PE32 executable (GUI) Intel 80386 for MS Windows\"\n \"nsExec.dll\" has type \"PE32 executable (DLL) (GUI) Intel 80386 for MS Windows\"\n \"UserInfo.dll\" has type \"PE32 executable (DLL) (GUI) Intel 80386 for MS Windows\"","description_v2":["\"bcs_uninstall.exe\" has type \"PE32 executable (GUI) Intel 80386 for MS Windows\"","\"SimpleSC.dll\" has type \"PE32 executable (DLL) (GUI) Intel 80386 for MS Windows\"","\"bcs.exe\" has type \"PE32 executable (console) Intel 80386 for MS Windows\"","\"NetQCheckHTML5Agent.exe\" has type \"PE32 executable (GUI) Intel 80386 for MS Windows\"","\"thebcs.exe\" has type \"PE32 executable (GUI) Intel 80386 for MS Windows\"","\"nsExec.dll\" has type \"PE32 executable (DLL) (GUI) Intel 80386 for MS Windows\"","\"UserInfo.dll\" has type \"PE32 executable (DLL) (GUI) Intel 80386 for MS Windows\""],"description_v3":[{"type":"text","value":"\"bcs_uninstall.exe\" has type \"PE32 executable (GUI) Intel 80386 for MS Windows\""},{"type":"linebreak"},{"type":"text","value":"\"SimpleSC.dll\" has type \"PE32 executable (DLL) (GUI) Intel 80386 for MS Windows\""},{"type":"linebreak"},{"type":"text","value":"\"bcs.exe\" has type \"PE32 executable (console) Intel 80386 for MS Windows\""},{"type":"linebreak"},{"type":"text","value":"\"NetQCheckHTML5Agent.exe\" has type \"PE32 executable (GUI) Intel 80386 for MS Windows\""},{"type":"linebreak"},{"type":"text","value":"\"thebcs.exe\" has type \"PE32 executable (GUI) Intel 80386 for MS Windows\""},{"type":"linebreak"},{"type":"text","value":"\"nsExec.dll\" has type \"PE32 executable (DLL) (GUI) Intel 80386 for MS Windows\""},{"type":"linebreak"},{"type":"text","value":"\"UserInfo.dll\" has type \"PE32 executable (DLL) (GUI) Intel 80386 for MS Windows\""}],"origin":"Binary File","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":1,"threat_level_human":"suspicious","category":"Network Related","identifier":"string-14","type":2,"relevance":3,"name":"Found potential IP address in binary/memory","description":"\"192.168.0.98\"\n \"255.255.255.0\"\n \"192.168.0.1\"\n \"255.255.255.255\"\n \"4.16.214.16\"","description_v2":["\"192.168.0.98\"","\"255.255.255.0\"","\"192.168.0.1\"","\"255.255.255.255\"","\"4.16.214.16\""],"description_v3":[{"type":"text","value":"\"192.168.0.98\""},{"type":"linebreak"},{"type":"text","value":"\"255.255.255.0\""},{"type":"linebreak"},{"type":"text","value":"\"192.168.0.1\""},{"type":"linebreak"},{"type":"text","value":"\"255.255.255.255\""},{"type":"linebreak"},{"type":"text","value":"\"4.16.214.16\""}],"origin":"File/Memory","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":1,"threat_level_human":"suspicious","category":"Network Related","identifier":"network-23","type":7,"relevance":5,"name":"Sends traffic on typical HTTP outbound port, but without HTTP header","description":"TCP traffic to 38.100.141.76 on port 80 is sent without HTTP header","description_v2":["TCP traffic to 38.100.141.76 on port 80 is sent without HTTP header"],"description_v3":[{"type":"text","value":"TCP traffic to 38.100.141.76 on port 80 is sent without HTTP header"}],"origin":"Network Traffic","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":1,"threat_level_human":"suspicious","category":"Network Related","identifier":"network-22","type":7,"relevance":10,"name":"Uses a User Agent typical for browsers, although no browser was ever launched","description":"Found user agent(s): Mozilla/4.0","description_v2":["Found user agent(s): Mozilla/4.0"],"description_v3":[{"type":"text","value":"Found user agent(s): Mozilla/4.0"}],"origin":"Network Traffic","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":1,"threat_level_human":"suspicious","category":"Pattern Matching","identifier":"stream-17","type":1,"relevance":10,"name":"Contains ability to download files from the internet","description":"recvfrom@WSOCK32.DLL at 00034916-00002588-4946-4348-00F8B300","description_v2":["recvfrom@WSOCK32.DLL at 00034916-00002588-4946-4348-00F8B300"],"description_v3":[{"type":"text","value":"recvfrom@WSOCK32.DLL"},{"type":"stream","stream_uid":"00034916-00002588-4946-4348-00F8B300","modal_link":"/bff/report/5c928014038838ca2336b70d/processes/00034791-00001664/streams/0/00034916-00002588-4946-4348-00F8B300?childUid=00034916-00002588","process":{"name":"NetQCheckHTML5Agent.exe","process_uid":"00034916-00002588","pid":"2588"}}],"origin":"Hybrid Analysis Technology","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":{"modal_link":"/bff/report/5c928014038838ca2336b70d/processes/00034791-00001664/streams/0/00034916-00002588-4946-4348-00F8B300?childUid=00034916-00002588","name":"NetQCheckHTML5Agent.exe","pid":2588}},{"threat_level":1,"threat_level_human":"suspicious","category":"Spyware/Information Retrieval","identifier":"stream-0","type":1,"relevance":10,"name":"Contains ability to open the clipboard","description":"OpenClipboard@USER32.DLL at 00034508-00002748-48436-90-00405086","description_v2":["OpenClipboard@USER32.DLL at 00034508-00002748-48436-90-00405086"],"description_v3":[{"type":"text","value":"OpenClipboard@USER32.DLL"},{"type":"stream","stream_uid":"00034508-00002748-48436-90-00405086","modal_link":"/bff/report/5c928014038838ca2336b70d/processes/00034508-00002748/streams/0/00034508-00002748-48436-90-00405086","process":{"name":"bcs_service.exe","process_uid":"00034508-00002748","pid":"2748"}}],"origin":"Hybrid Analysis Technology","attck_id":"T1115","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/wiki/Technique/T1115","stream_data":{"modal_link":"/bff/report/5c928014038838ca2336b70d/processes/00034508-00002748/streams/0/00034508-00002748-48436-90-00405086","name":"bcs_service.exe","pid":2748}},{"threat_level":1,"threat_level_human":"suspicious","category":"System Destruction","identifier":"api-26","type":6,"relevance":10,"name":"Marks file for deletion","description":"\"C:\\bcs_service.exe\" marked \"%TEMP%\\nsn4261.tmp\" for deletion\n \"C:\\bcs_service.exe\" marked \"%TEMP%\\nsx42EE.tmp\" for deletion\n \"C:\\bcs_service.exe\" marked \"%TEMP%\\nsx42EE.tmp\\nsExec.dll\" for deletion\n \"C:\\bcs_service.exe\" marked \"%TEMP%\\nsx42EE.tmp\\SimpleSC.dll\" for deletion\n \"C:\\bcs_service.exe\" marked \"%TEMP%\\nsx42EE.tmp\\UserInfo.dll\" for deletion","description_v2":["\"C:\\bcs_service.exe\" marked \"%TEMP%\\nsn4261.tmp\" for deletion","\"C:\\bcs_service.exe\" marked \"%TEMP%\\nsx42EE.tmp\" for deletion","\"C:\\bcs_service.exe\" marked \"%TEMP%\\nsx42EE.tmp\\nsExec.dll\" for deletion","\"C:\\bcs_service.exe\" marked \"%TEMP%\\nsx42EE.tmp\\SimpleSC.dll\" for deletion","\"C:\\bcs_service.exe\" marked \"%TEMP%\\nsx42EE.tmp\\UserInfo.dll\" for deletion"],"description_v3":[{"type":"text","value":"\"C:\\bcs_service.exe\" marked \"%TEMP%\\nsn4261.tmp\" for deletion"},{"type":"linebreak"},{"type":"text","value":"\"C:\\bcs_service.exe\" marked \"%TEMP%\\nsx42EE.tmp\" for deletion"},{"type":"linebreak"},{"type":"text","value":"\"C:\\bcs_service.exe\" marked \"%TEMP%\\nsx42EE.tmp\\nsExec.dll\" for deletion"},{"type":"linebreak"},{"type":"text","value":"\"C:\\bcs_service.exe\" marked \"%TEMP%\\nsx42EE.tmp\\SimpleSC.dll\" for deletion"},{"type":"linebreak"},{"type":"text","value":"\"C:\\bcs_service.exe\" marked \"%TEMP%\\nsx42EE.tmp\\UserInfo.dll\" for deletion"}],"origin":"API Call","attck_id":"T1107","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/wiki/Technique/T1107","stream_data":null},{"threat_level":1,"threat_level_human":"suspicious","category":"System Destruction","identifier":"api-25","type":6,"relevance":7,"name":"Opens file with deletion access rights","description":"\"bcs_service.exe\" opened \"%TEMP%\\nsn4261.tmp\" with delete access\n \"bcs_service.exe\" opened \"%TEMP%\\nsx42EE.tmp\" with delete access\n \"bcs_service.exe\" opened \"%TEMP%\\nsx42EE.tmp\\nsExec.dll\" with delete access\n \"bcs_service.exe\" opened \"%TEMP%\\nsx42EE.tmp\\SimpleSC.dll\" with delete access\n \"bcs_service.exe\" opened \"%TEMP%\\nsx42EE.tmp\\UserInfo.dll\" with delete access\n \"bcs_service.exe\" opened \"%TEMP%\\nsx42EE.tmp\\\" with delete access","description_v2":["\"bcs_service.exe\" opened \"%TEMP%\\nsn4261.tmp\" with delete access","\"bcs_service.exe\" opened \"%TEMP%\\nsx42EE.tmp\" with delete access","\"bcs_service.exe\" opened \"%TEMP%\\nsx42EE.tmp\\nsExec.dll\" with delete access","\"bcs_service.exe\" opened \"%TEMP%\\nsx42EE.tmp\\SimpleSC.dll\" with delete access","\"bcs_service.exe\" opened \"%TEMP%\\nsx42EE.tmp\\UserInfo.dll\" with delete access","\"bcs_service.exe\" opened \"%TEMP%\\nsx42EE.tmp\\\" with delete access"],"description_v3":[{"type":"text","value":"\"bcs_service.exe\" opened \"%TEMP%\\nsn4261.tmp\" with delete access"},{"type":"linebreak"},{"type":"text","value":"\"bcs_service.exe\" opened \"%TEMP%\\nsx42EE.tmp\" with delete access"},{"type":"linebreak"},{"type":"text","value":"\"bcs_service.exe\" opened \"%TEMP%\\nsx42EE.tmp\\nsExec.dll\" with delete access"},{"type":"linebreak"},{"type":"text","value":"\"bcs_service.exe\" opened \"%TEMP%\\nsx42EE.tmp\\SimpleSC.dll\" with delete access"},{"type":"linebreak"},{"type":"text","value":"\"bcs_service.exe\" opened \"%TEMP%\\nsx42EE.tmp\\UserInfo.dll\" with delete access"},{"type":"linebreak"},{"type":"text","value":"\"bcs_service.exe\" opened \"%TEMP%\\nsx42EE.tmp\\\" with delete access"}],"origin":"API Call","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":1,"threat_level_human":"suspicious","category":"System Security","identifier":"string-31","type":2,"relevance":7,"name":"Tries to obtain the highest possible privilege level without UAC dialog","description":"$2d","description_v2":["$2e","$2f"],"description_v3":[{"type":"text","value":"$30"},{"type":"linebreak"},{"type":"text","value":"$31"}],"origin":"File/Memory","attck_id":"T1088","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/wiki/Technique/T1088","stream_data":null},{"threat_level":1,"threat_level_human":"suspicious","category":"Unusual Characteristics","identifier":"static-0","type":0,"relevance":10,"name":"CRC value set in PE header does not match actual value","description":"\"bcs_uninstall.exe\" claimed CRC 1580962 while the actual is CRC 391661\n \"bcs.exe\" claimed CRC 133913 while the actual is CRC 91137\n \"NetQCheckHTML5Agent.exe\" claimed CRC 2217160 while the actual is CRC 133913","description_v2":["\"bcs_uninstall.exe\" claimed CRC 1580962 while the actual is CRC 391661","\"bcs.exe\" claimed CRC 133913 while the actual is CRC 91137","\"NetQCheckHTML5Agent.exe\" claimed CRC 2217160 while the actual is CRC 133913"],"description_v3":[{"type":"text","value":"\"bcs_uninstall.exe\" claimed CRC 1580962 while the actual is CRC 391661"},{"type":"linebreak"},{"type":"text","value":"\"bcs.exe\" claimed CRC 133913 while the actual is CRC 91137"},{"type":"linebreak"},{"type":"text","value":"\"NetQCheckHTML5Agent.exe\" claimed CRC 2217160 while the actual is CRC 133913"}],"origin":"Static Parser","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":1,"threat_level_human":"suspicious","category":"Unusual Characteristics","identifier":"static-1","type":0,"relevance":1,"name":"Imports suspicious APIs","description":"RegDeleteKeyA\n RegCloseKey\n OpenProcessToken\n RegDeleteValueA\n RegCreateKeyExA\n RegOpenKeyExA\n RegEnumKeyA\n GetFileAttributesA\n CopyFileA\n GetModuleFileNameA\n LoadLibraryExA\n GetFileSize\n CreateDirectoryA\n DeleteFileA\n GetCommandLineA\n GetProcAddress\n GetTempPathA\n CreateThread\n GetModuleHandleA\n FindFirstFileA\n WriteFile\n GetTempFileNameA\n FindNextFileA\n CreateProcessA\n Sleep\n CreateFileA\n GetTickCount\n ShellExecuteA\n FindWindowExA\n StartServiceA\n LookupAccountNameA\n CreateServiceA\n GetStartupInfoA\n GetVersionExA\n UnhandledExceptionFilter\n VirtualAlloc\n StartServiceCtrlDispatcherA\n IsDebuggerPresent\n GetCommandLineW\n LoadLibraryExW\n GetStartupInfoW\n FindFirstFileExA\n ExitThread\n GetModuleHandleW\n TerminateProcess\n CreateFileW\n GetModuleHandleExW\n IcmpSendEcho\n GetDriveTypeW\n FindFirstFileW\n FindNextFileW\n GetComputerNameA\n accept\n WSAStartup\n connect\n closesocket\n send\n listen\n recv\n socket\n bind\n recvfrom\n sendto\n SetSecurityDescriptorDacl\n MapViewOfFile\n CreateFileMappingA\n GetUserNameA","description_v2":["RegDeleteKeyA","RegCloseKey","OpenProcessToken","RegDeleteValueA","RegCreateKeyExA","RegOpenKeyExA","RegEnumKeyA","GetFileAttributesA","CopyFileA","GetModuleFileNameA","LoadLibraryExA","GetFileSize","CreateDirectoryA","DeleteFileA","GetCommandLineA","GetProcAddress","GetTempPathA","CreateThread","GetModuleHandleA","FindFirstFileA","WriteFile","GetTempFileNameA","FindNextFileA","CreateProcessA","Sleep","CreateFileA","GetTickCount","ShellExecuteA","FindWindowExA","StartServiceA","LookupAccountNameA","CreateServiceA","GetStartupInfoA","GetVersionExA","UnhandledExceptionFilter","VirtualAlloc","StartServiceCtrlDispatcherA","IsDebuggerPresent","GetCommandLineW","LoadLibraryExW","GetStartupInfoW","FindFirstFileExA","ExitThread","GetModuleHandleW","TerminateProcess","CreateFileW","GetModuleHandleExW","IcmpSendEcho","GetDriveTypeW","FindFirstFileW","FindNextFileW","GetComputerNameA","accept","WSAStartup","connect","closesocket","send","listen","recv","socket","bind","recvfrom","sendto","SetSecurityDescriptorDacl","MapViewOfFile","CreateFileMappingA","GetUserNameA"],"description_v3":[{"type":"text","value":"RegDeleteKeyA"},{"type":"linebreak"},{"type":"text","value":"RegCloseKey"},{"type":"linebreak"},{"type":"text","value":"OpenProcessToken"},{"type":"linebreak"},{"type":"text","value":"RegDeleteValueA"},{"type":"linebreak"},{"type":"text","value":"RegCreateKeyExA"},{"type":"linebreak"},{"type":"text","value":"RegOpenKeyExA"},{"type":"linebreak"},{"type":"text","value":"RegEnumKeyA"},{"type":"linebreak"},{"type":"text","value":"GetFileAttributesA"},{"type":"linebreak"},{"type":"text","value":"CopyFileA"},{"type":"linebreak"},{"type":"text","value":"GetModuleFileNameA"},{"type":"linebreak"},{"type":"text","value":"LoadLibraryExA"},{"type":"linebreak"},{"type":"text","value":"GetFileSize"},{"type":"linebreak"},{"type":"text","value":"CreateDirectoryA"},{"type":"linebreak"},{"type":"text","value":"DeleteFileA"},{"type":"linebreak"},{"type":"text","value":"GetCommandLineA"},{"type":"linebreak"},{"type":"text","value":"GetProcAddress"},{"type":"linebreak"},{"type":"text","value":"GetTempPathA"},{"type":"linebreak"},{"type":"text","value":"CreateThread"},{"type":"linebreak"},{"type":"text","value":"GetModuleHandleA"},{"type":"linebreak"},{"type":"text","value":"FindFirstFileA"},{"type":"linebreak"},{"type":"text","value":"WriteFile"},{"type":"linebreak"},{"type":"text","value":"GetTempFileNameA"},{"type":"linebreak"},{"type":"text","value":"FindNextFileA"},{"type":"linebreak"},{"type":"text","value":"CreateProcessA"},{"type":"linebreak"},{"type":"text","value":"Sleep"},{"type":"linebreak"},{"type":"text","value":"CreateFileA"},{"type":"linebreak"},{"type":"text","value":"GetTickCount"},{"type":"linebreak"},{"type":"text","value":"ShellExecuteA"},{"type":"linebreak"},{"type":"text","value":"FindWindowExA"},{"type":"linebreak"},{"type":"text","value":"StartServiceA"},{"type":"linebreak"},{"type":"text","value":"LookupAccountNameA"},{"type":"linebreak"},{"type":"text","value":"CreateServiceA"},{"type":"linebreak"},{"type":"text","value":"GetStartupInfoA"},{"type":"linebreak"},{"type":"text","value":"GetVersionExA"},{"type":"linebreak"},{"type":"text","value":"UnhandledExceptionFilter"},{"type":"linebreak"},{"type":"text","value":"VirtualAlloc"},{"type":"linebreak"},{"type":"text","value":"StartServiceCtrlDispatcherA"},{"type":"linebreak"},{"type":"text","value":"IsDebuggerPresent"},{"type":"linebreak"},{"type":"text","value":"GetCommandLineW"},{"type":"linebreak"},{"type":"text","value":"LoadLibraryExW"},{"type":"linebreak"},{"type":"text","value":"GetStartupInfoW"},{"type":"linebreak"},{"type":"text","value":"FindFirstFileExA"},{"type":"linebreak"},{"type":"text","value":"ExitThread"},{"type":"linebreak"},{"type":"text","value":"GetModuleHandleW"},{"type":"linebreak"},{"type":"text","value":"TerminateProcess"},{"type":"linebreak"},{"type":"text","value":"CreateFileW"},{"type":"linebreak"},{"type":"text","value":"GetModuleHandleExW"},{"type":"linebreak"},{"type":"text","value":"IcmpSendEcho"},{"type":"linebreak"},{"type":"text","value":"GetDriveTypeW"},{"type":"linebreak"},{"type":"text","value":"FindFirstFileW"},{"type":"linebreak"},{"type":"text","value":"FindNextFileW"},{"type":"linebreak"},{"type":"text","value":"GetComputerNameA"},{"type":"linebreak"},{"type":"text","value":"accept"},{"type":"linebreak"},{"type":"text","value":"WSAStartup"},{"type":"linebreak"},{"type":"text","value":"connect"},{"type":"linebreak"},{"type":"text","value":"closesocket"},{"type":"linebreak"},{"type":"text","value":"send"},{"type":"linebreak"},{"type":"text","value":"listen"},{"type":"linebreak"},{"type":"text","value":"recv"},{"type":"linebreak"},{"type":"text","value":"socket"},{"type":"linebreak"},{"type":"text","value":"bind"},{"type":"linebreak"},{"type":"text","value":"recvfrom"},{"type":"linebreak"},{"type":"text","value":"sendto"},{"type":"linebreak"},{"type":"text","value":"SetSecurityDescriptorDacl"},{"type":"linebreak"},{"type":"text","value":"MapViewOfFile"},{"type":"linebreak"},{"type":"text","value":"CreateFileMappingA"},{"type":"linebreak"},{"type":"text","value":"GetUserNameA"}],"origin":"Static Parser","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":1,"threat_level_human":"suspicious","category":"Unusual Characteristics","identifier":"hooks-8","type":11,"relevance":10,"name":"Installs hooks/patches the running process","description":"$32","description_v2":["\"bcs_service.exe\" wrote bytes \"d0554975647352750000000051c1137794981377ee9c137775dc1577273e15770fb319770000000085483a7769873a770f773c77d9173a77ead73b77a9343a77f8113a7720143a770c113a77f5163a7754143a77ff103a7732143a7700000000\" to virtual address \"0x74B91000\" (part of module \"SHFOLDER.DLL\")","\"bcs_service.exe\" wrote bytes \"71116a007a3b6900ab8b02007f950200fc8c0200729602006cc805001ecd66007d266600\" to virtual address \"0x774B07E4\" (part of module \"USER32.DLL\")","\"bcs.exe\" wrote bytes \"71116a007a3b6900ab8b02007f950200fc8c0200729602006cc805001ecd66007d266600\" to virtual address \"0x774B07E4\" (part of module \"USER32.DLL\")","\"NetQCheckHTML5Agent.exe\" wrote bytes \"7d07b37781edb177ae86b077c6e0af77effdb2772d16b1776014b377478db077a8e2af776089b07700000000ad3707768b2d0776b641077600000000\" to virtual address \"0x74B91000\" (part of module \"WSHTCPIP.DLL\")","\"NetQCheckHTML5Agent.exe\" wrote bytes \"c0dfaf771cf9ae77ccf8ae770d64b07700000000c0113a7700000000fc3e3a7700000000e0133a770000000094574a7625e0af77c6e0af7700000000bc6a497600000000cf313a770000000093194a76000000002c323a7700000000\" to virtual address \"0x764E1000\" (part of module \"NSI.DLL\")","\"NetQCheckHTML5Agent.exe\" wrote bytes \"71116a007a3b6900ab8b02007f950200fc8c0200729602006cc805001ecd66007d266600\" to virtual address \"0x774B07E4\" (part of module \"USER32.DLL\")"],"description_v3":[{"type":"text","value":"\"bcs_service.exe\" wrote bytes \"d0554975647352750000000051c1137794981377ee9c137775dc1577273e15770fb319770000000085483a7769873a770f773c77d9173a77ead73b77a9343a77f8113a7720143a770c113a77f5163a7754143a77ff103a7732143a7700000000\" to virtual address \"0x74B91000\" (part of module \"SHFOLDER.DLL\")"},{"type":"linebreak"},{"type":"text","value":"\"bcs_service.exe\" wrote bytes \"71116a007a3b6900ab8b02007f950200fc8c0200729602006cc805001ecd66007d266600\" to virtual address \"0x774B07E4\" (part of module \"USER32.DLL\")"},{"type":"linebreak"},{"type":"text","value":"\"bcs.exe\" wrote bytes \"71116a007a3b6900ab8b02007f950200fc8c0200729602006cc805001ecd66007d266600\" to virtual address \"0x774B07E4\" (part of module \"USER32.DLL\")"},{"type":"linebreak"},{"type":"text","value":"\"NetQCheckHTML5Agent.exe\" wrote bytes \"7d07b37781edb177ae86b077c6e0af77effdb2772d16b1776014b377478db077a8e2af776089b07700000000ad3707768b2d0776b641077600000000\" to virtual address \"0x74B91000\" (part of module \"WSHTCPIP.DLL\")"},{"type":"linebreak"},{"type":"text","value":"\"NetQCheckHTML5Agent.exe\" wrote bytes \"c0dfaf771cf9ae77ccf8ae770d64b07700000000c0113a7700000000fc3e3a7700000000e0133a770000000094574a7625e0af77c6e0af7700000000bc6a497600000000cf313a770000000093194a76000000002c323a7700000000\" to virtual address \"0x764E1000\" (part of module \"NSI.DLL\")"},{"type":"linebreak"},{"type":"text","value":"\"NetQCheckHTML5Agent.exe\" wrote bytes \"71116a007a3b6900ab8b02007f950200fc8c0200729602006cc805001ecd66007d266600\" to virtual address \"0x774B07E4\" (part of module \"USER32.DLL\")"}],"origin":"Hook Detection","attck_id":"T1179","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/wiki/Technique/T1179","stream_data":null},{"threat_level":2,"threat_level_human":"malicious","category":"External Systems","identifier":"avtest-0","type":12,"relevance":8,"name":"Sample was identified as malicious by at least one Antivirus engine","description":"1/37 Antivirus vendors marked sample as malicious (2% detection rate)","description_v2":["1/37 Antivirus vendors marked sample as malicious (2% detection rate)"],"description_v3":[{"type":"text","value":"1/37 Antivirus vendors marked sample as malicious (2% detection rate)"}],"origin":"External System","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":2,"threat_level_human":"malicious","category":"General","identifier":"binary-11","type":8,"relevance":10,"name":"The analysis extracted a file that was identified as malicious","description":"2/91 Antivirus vendors marked dropped file \"bcs_uninstall.exe\" as malicious (classified as \"BehavesLike.Generic\" with 2% detection rate)","description_v2":["2/91 Antivirus vendors marked dropped file \"bcs_uninstall.exe\" as malicious (classified as \"BehavesLike.Generic\" with 2% detection rate)"],"description_v3":[{"type":"text","value":"2/91 Antivirus vendors marked dropped file \"bcs_uninstall.exe\" as malicious (classified as \"BehavesLike.Generic\" with 2% detection rate)"}],"origin":"Binary File","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":2,"threat_level_human":"malicious","category":"Installation/Persistance","identifier":"api-0","type":6,"relevance":6,"name":"Writes data to a remote process","description":"\"bcs_service.exe\" wrote 32 bytes to a remote process \"%PROGRAMFILES%\\(x86)\\Visualware BCS\\bcs.exe\" (Handle: 456)\n \"bcs_service.exe\" wrote 52 bytes to a remote process \"%PROGRAMFILES%\\(x86)\\Visualware BCS\\bcs.exe\" (Handle: 456)\n \"bcs_service.exe\" wrote 4 bytes to a remote process \"%PROGRAMFILES%\\(x86)\\Visualware BCS\\bcs.exe\" (Handle: 456)\n \"bcs_service.exe\" wrote 8 bytes to a remote process \"%PROGRAMFILES%\\(x86)\\Visualware BCS\\bcs.exe\" (Handle: 456)\n \"bcs.exe\" wrote 32 bytes to a remote process \"%PROGRAMFILES%\\(x86)\\Visualware BCS\\NetQCheckHTML5Agent.exe\" (Handle: 172)\n \"bcs.exe\" wrote 52 bytes to a remote process \"%PROGRAMFILES%\\(x86)\\Visualware BCS\\NetQCheckHTML5Agent.exe\" (Handle: 172)\n \"bcs.exe\" wrote 4 bytes to a remote process \"%PROGRAMFILES%\\(x86)\\Visualware BCS\\NetQCheckHTML5Agent.exe\" (Handle: 172)\n \"bcs.exe\" wrote 8 bytes to a remote process \"%PROGRAMFILES%\\(x86)\\Visualware BCS\\NetQCheckHTML5Agent.exe\" (Handle: 172)","description_v2":["\"bcs_service.exe\" wrote 32 bytes to a remote process \"%PROGRAMFILES%\\(x86)\\Visualware BCS\\bcs.exe\" (Handle: 456)","\"bcs_service.exe\" wrote 52 bytes to a remote process \"%PROGRAMFILES%\\(x86)\\Visualware BCS\\bcs.exe\" (Handle: 456)","\"bcs_service.exe\" wrote 4 bytes to a remote process \"%PROGRAMFILES%\\(x86)\\Visualware BCS\\bcs.exe\" (Handle: 456)","\"bcs_service.exe\" wrote 8 bytes to a remote process \"%PROGRAMFILES%\\(x86)\\Visualware BCS\\bcs.exe\" (Handle: 456)","\"bcs.exe\" wrote 32 bytes to a remote process \"%PROGRAMFILES%\\(x86)\\Visualware BCS\\NetQCheckHTML5Agent.exe\" (Handle: 172)","\"bcs.exe\" wrote 52 bytes to a remote process \"%PROGRAMFILES%\\(x86)\\Visualware BCS\\NetQCheckHTML5Agent.exe\" (Handle: 172)","\"bcs.exe\" wrote 4 bytes to a remote process \"%PROGRAMFILES%\\(x86)\\Visualware BCS\\NetQCheckHTML5Agent.exe\" (Handle: 172)","\"bcs.exe\" wrote 8 bytes to a remote process \"%PROGRAMFILES%\\(x86)\\Visualware BCS\\NetQCheckHTML5Agent.exe\" (Handle: 172)"],"description_v3":[{"type":"text","value":"\"bcs_service.exe\" wrote 32 bytes to a remote process \"%PROGRAMFILES%\\(x86)\\Visualware BCS\\bcs.exe\" (Handle: 456)"},{"type":"linebreak"},{"type":"text","value":"\"bcs_service.exe\" wrote 52 bytes to a remote process \"%PROGRAMFILES%\\(x86)\\Visualware BCS\\bcs.exe\" (Handle: 456)"},{"type":"linebreak"},{"type":"text","value":"\"bcs_service.exe\" wrote 4 bytes to a remote process \"%PROGRAMFILES%\\(x86)\\Visualware BCS\\bcs.exe\" (Handle: 456)"},{"type":"linebreak"},{"type":"text","value":"\"bcs_service.exe\" wrote 8 bytes to a remote process \"%PROGRAMFILES%\\(x86)\\Visualware BCS\\bcs.exe\" (Handle: 456)"},{"type":"linebreak"},{"type":"text","value":"\"bcs.exe\" wrote 32 bytes to a remote process \"%PROGRAMFILES%\\(x86)\\Visualware BCS\\NetQCheckHTML5Agent.exe\" (Handle: 172)"},{"type":"linebreak"},{"type":"text","value":"\"bcs.exe\" wrote 52 bytes to a remote process \"%PROGRAMFILES%\\(x86)\\Visualware BCS\\NetQCheckHTML5Agent.exe\" (Handle: 172)"},{"type":"linebreak"},{"type":"text","value":"\"bcs.exe\" wrote 4 bytes to a remote process \"%PROGRAMFILES%\\(x86)\\Visualware BCS\\NetQCheckHTML5Agent.exe\" (Handle: 172)"},{"type":"linebreak"},{"type":"text","value":"\"bcs.exe\" wrote 8 bytes to a remote process \"%PROGRAMFILES%\\(x86)\\Visualware BCS\\NetQCheckHTML5Agent.exe\" (Handle: 172)"}],"origin":"API Call","attck_id":"T1055","capec_id":"CAPEC-242","attck_id_wiki":"https://attack.mitre.org/wiki/Technique/T1055","stream_data":null},{"threat_level":2,"threat_level_human":"malicious","category":"Unusual Characteristics","identifier":"stream-23","type":1,"relevance":5,"name":"Contains ability to reboot/shutdown the operating system","description":"ExitWindowsEx@USER32.DLL at 00034508-00002748-48436-1-0040310F\n ExitWindowsEx@USER32.DLL at 00034508-00002748-51604-1-0040310F","description_v2":["ExitWindowsEx@USER32.DLL at 00034508-00002748-48436-1-0040310F","ExitWindowsEx@USER32.DLL at 00034508-00002748-51604-1-0040310F"],"description_v3":[{"type":"text","value":"ExitWindowsEx@USER32.DLL"},{"type":"stream","stream_uid":"00034508-00002748-48436-1-0040310F","modal_link":"/bff/report/5c928014038838ca2336b70d/processes/00034508-00002748/streams/0/00034508-00002748-48436-1-0040310F","process":{"name":"bcs_service.exe","process_uid":"00034508-00002748","pid":"2748"}},{"type":"linebreak"},{"type":"text","value":"ExitWindowsEx@USER32.DLL"},{"type":"stream","stream_uid":"00034508-00002748-51604-1-0040310F","modal_link":"/bff/report/5c928014038838ca2336b70d/processes/00034508-00002748/streams/0/00034508-00002748-51604-1-0040310F","process":{"name":"bcs_service.exe","process_uid":"00034508-00002748","pid":"2748"}}],"origin":"Hybrid Analysis Technology","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":{"modal_link":"/bff/report/5c928014038838ca2336b70d/processes/00034508-00002748/streams/0/00034508-00002748-48436-1-0040310F","name":"bcs_service.exe","pid":2748}},{"threat_level":2,"threat_level_human":"malicious","category":"Unusual Characteristics","identifier":"stream-22","type":1,"relevance":5,"name":"Contains native function calls","description":"NtdllDefWindowProc_A@NTDLL.DLL at 00034508-00002748-48436-69-00401000","description_v2":["NtdllDefWindowProc_A@NTDLL.DLL at 00034508-00002748-48436-69-00401000"],"description_v3":[{"type":"text","value":"NtdllDefWindowProc_A@NTDLL.DLL"},{"type":"stream","stream_uid":"00034508-00002748-48436-69-00401000","modal_link":"/bff/report/5c928014038838ca2336b70d/processes/00034508-00002748/streams/0/00034508-00002748-48436-69-00401000","process":{"name":"bcs_service.exe","process_uid":"00034508-00002748","pid":"2748"}}],"origin":"Hybrid Analysis Technology","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":{"modal_link":"/bff/report/5c928014038838ca2336b70d/processes/00034508-00002748/streams/0/00034508-00002748-48436-69-00401000","name":"bcs_service.exe","pid":2748}}],"detonation_parameters":{"action_script":"default_maxantievasion","experimental_anti_evasion":true,"script_logging":true,"allow_sample_tampering":true,"network_mode":"tor","custom_system_date_time":null,"custom_commandline":null,"document_password":null,"document_password_exists":false,"environment_variable":null,"dynamic_analysis_time":180,"comment":null},"falcon_mal_query_results":[],"falcon_intelligence_data":null,"search_tags":[],"execution_mode":"KERNELMODE","monitor_script":"default_maxantievasion.au3","monitor_script_description":"Heavy Anti-Evasion","windows_version_name":"Windows 7","windows_version_edition":"Professional","windows_version_service_pack":"Service Pack 1","windows_version_version":"6.1 (build 7601)","windows_version_bitness":"64","custom_date_time":null,"sandbox_version":"8.30","report_generator_version":null,"signature_engine_version":null,"mitre_version":null,"office_analysis":false,"office_version":null,"incidents":[{"name":"Remote Access","details":["Contains ability to listen for incoming connections"]},{"name":"Spyware","details":["Contains ability to open the clipboard"]},{"name":"Persistence","details":["Writes data to a remote process"]},{"name":"Fingerprint","details":["Queries kernel debugger information","Reads the cryptographic machine GUID","Reads the active computer name"]},{"name":"Evasive","details":["Marks file for deletion"]},{"name":"Network Behavior","details":["Contacts 1 domain and 1 host"]}],"icon":"$33","visualization":"$34","classification":["64.5% (.EXE) Win32 Executable MS Visual C++ (generic)","13.6% (.DLL) Win32 Dynamic Link Library (generic)","9.3% (.EXE) Win32 Executable (generic)","4.1% (.EXE) OS/2 Executable (generic)","4.1% (.EXE) Generic Win/DOS Executable"],"dns_requests":[{"compromised":false,"domain":"updatebcs.visualware.com","address":"38.100.141.76","ttl":20977,"country":"United States","registrar_name":"Register.com, Inc.","registrar_organization":"Visualware, Inc","registrar_name_servers":null,"registrar_creation_date":"2000-02-12T02:39:46+00:00","who_is":[{"key":"Address","value":"937 Sierra Drive"},{"key":"City","value":"Turlock"},{"key":"Country","value":"US"},{"key":"Creation Date","value":"Sat, 12 Feb 2000 02:39:46 GMT"},{"key":"DNSSEC","value":"unsigned"},{"key":"Domain Name","value":"VISUALWARE.COM"},{"key":"EMail","value":"abuse@web.com"},{"key":"EMail","value":"hank.harris@visualware.com"},{"key":"Expiration Date","value":"Tue, 12 Feb 2019 02:39:46 GMT"},{"key":"name","value":"Visualware Inc."},{"key":"Name Server","value":"ns2.easydns.com"},{"key":"Organization","value":"Visualware, Inc"},{"key":"Reigstrar","value":"Register.com, Inc."},{"key":"State","value":"CA"},{"key":"Status","value":"ok https://icann.org/epp#ok"},{"key":"Status","value":"ok http://icann.org/epp#OK"},{"key":"Last Update","value":"Thu, 29 Jan 2015 21:29:16 GMT"},{"key":"Last Update","value":"Wed, 23 Apr 2008 14:31:50 GMT"},{"key":"Whois Server","value":"whois.register.com"},{"key":"Zip Code","value":"95380"}],"associated_sha256s":[{"sha256":"3b72a31b543acf544672834a5eba4d39e256288dd903ce620672744bc60682ec","verdict":"no verdict","positives":null,"total":null,"scan_date":"2018-09-27T16:45:08+00:00","reference":{"name":"AlienVault","url":"https://otx.alienvault.com/indicator/file/3b72a31b543acf544672834a5eba4d39e256288dd903ce620672744bc60682ec/"}}]}],"contacted_hosts":[{"compromised":false,"address":"38.100.141.76","port":80,"protocol":"TCP","associated_runtime":[{"name":"netqcheckhtml5agent.exe","pid":"2588"}],"country":"United States","associated_sha256s":[{"sha256":"3b72a31b543acf544672834a5eba4d39e256288dd903ce620672744bc60682ec","verdict":"no verdict","positives":null,"total":null,"scan_date":"2018-09-27T16:45:08+00:00","reference":{"name":"AlienVault","url":"https://otx.alienvault.com/indicator/file/3b72a31b543acf544672834a5eba4d39e256288dd903ce620672744bc60682ec/"}}]}],"contacted_countries":{"countries":["USA"],"coordinates":[{"origin":{"latitude":"36.8102","longitude":"-119.382"},"destination":{"latitude":"38.9172","longitude":"-77.0709"}}]},"port_infos":[{"port":80,"description":"Hypertext Transfer Protocol (HTTP)"}],"extracted_strings":{"all":[{"value":"ISIjJCUmJygpKissLS4vMDEyM0BAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBBQkNERUZHSElKS0xNTk9QUVJTVFVWV1hZWmFiY2RlZmdoaWprbG1ub3BxcnN0dXZ3eHl6MDEyMzQ1Njc4OSsv","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"ISonKCk7OkAmPSskLC8/JSNbXQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"IV5hIWFoMDtG","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"IV9pc19kb3VibGU=","type":"Unicode","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"IVRoaXMgcHJvZ3JhbSBjYW5ub3QgYmUgcnVuIGluIERPUyBtb2RlLiQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"IiBhbHQ9IiI+IDwvZGl2PjxkaXYgaWQ9ImhlcmVtZW51Ij48dGFibGUgY2VsbHBhZGRpbmc9MCBjZWxsc3BhY2luZz0wIHdpZHRoPSIxMDAlIj48dHI+PHRkIHdpZHRoPSI0MDAiIHZhbGlnbj1taWRkbGU+IGhlcmUtLT48L3RkPjx0ZCB3aWR0aD0xPjwvdGQ+PC90cj48L3RhYmxlPjwvZGl2PjwvZGl2PjxpbWcgc3JjPSJzZXBiYWNrLmdpZiIgYWx0PSIiPjxkaXY+PC9kaXY+IGluc2lkZS0tPjxk","type":"Ansi","source":"Dropped File","process":null,"filename":"thebcs.exe.930316402","compromised":null,"detection_total":null,"total":null},{"value":"IiBtYW5hZ2Vk","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"IiVQUk9HUkFNRklMRVMlXCh4ODYpXFZpc3VhbHdhcmUgQkNTXGJjc191bmluc3RhbGwuZXhlIg==","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"IkM6XGJjc19zZXJ2aWNlLmV4ZSI=","type":"Ansi","source":"Hybrid Analysis","process":"bcs_service.exe","filename":"00034508-00002748.00000001.35008.00401000.00000020.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"ImQnSnkuP1F6","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Imh0dHA6Ly9vY3NwMi5nbG9iYWxzaWduLmNvbS9yb290cjMwNg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":0,"total":67},{"value":"ImpRaDgkS3IyfA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"InRxNjB+Ym8/XmI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"IzV2RHtaKndEO1o=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"I1JtK15uIUc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"JDJWbV86e1dG","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"JD07KSU2eXFm","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"JFJZOGkrfGw2PW4=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"JSUwMTAxMDAw","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JSUwMTAxMDAwMTAxMDAwMDAwMDA=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JSUwMTAxMDAwMTAxMDAwMjAwMDA=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JSUwMTAxMDAwMTAxMDEwMjAwMDA=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JSUwMTAxMDAwMTAyMDAwMDAwMDA=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JSUwMTAxMDAwMTAzMDAwMDAwMDA=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JSUwMTAxMDAwMTA0MDEwMjAwMjM=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JSUwMTAxMDAwMTA0MDEwMjAwMjMxMDA=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JSUwMTAxMDAwMTA0MDEwMjAwMjV0dD1jcGQ9","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JSUwMTAxMDAwMTA3MDEwMjAwMDA=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JSUwMTAxMDAwMTA3MDEwMjAwMDAxMDA=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JSUwMTAxMDAwMTUwMDEwMjAwMDAmYWQ9","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JSUwMTAxMDAwMTUwMDEwMjAwMDAmYWQ9LTE=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JSUwMTAxMDAwMTUwMDEwMjAwMDAmYWQ9YXVkaXQgZXJyb3I=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JSUwMTAxMDAwMjAwMDEwMjAwMDB2PTUxNg==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JSUwMTAxMDAwMjAwMjEwMjA=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JSUwMTAxMDAwMjAxMDEwMjAwMDB2PTUxNg==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JSUwMTAxMDAwMjUwMDEwMjAwMDBBIG5lY2Vzc2FyeSB0ZXN0IGVudmlyb25tZW50IHVwZGF0ZSBpcyBhdmFpbGFibGUsIHdvdWxkIHlvdSBsaWtlIHRvIHVwZGF0ZT8=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JSUwMTAxMDAwNDAwMDEwMjAwMDA=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JSUwMTAxMDAwNDAwMDEwMjAwMDBEb3duc3RyZWFtIEluaXRpYWxpc2F0aW9uIEZhaWxlZA==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JSUwMTAxMDAwNDAwMDEwMjAwMDBUaGUgRmlyZXdhbGwgdGVzdCBmYWlsZWQgdG8gaW5pdGlhbGl6ZQ==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JSUwMTAxMDAwNTAwMDEwMjAwMDA=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JSUwMTAxMDAwNTAxMDEwMjAxNjVUaGUgbGljZW5zZSBoYXMgZXhwaXJlZCBmb3IgdGhlIHRlc3QgZW52aXJvbm1lbnQuIFBsZWFzZSBub3RpZnkgdGhlIHByb3ZpZGVyIG9mIHRoZSB0ZXN0IHNvIHRoZXkgY2FuIHJlY3RpZnkgdGhlIGlzc3VlLiBUbyBjb250YWN0IHVzIGNsaWNrIGhlcmUuaHR0cDovL3d3dy52aXN1YWx3YXJlLmNvbS9iY3Mvc3VwcG9ydC9lY181MDEuaHRtbA==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JSUwMTAxMDAwNTAyMDEwMjAxNjdUaGUgZG9tYWluIHRoZSB0ZXN0IGVudmlyb25tZW50IGlzIHJ1bm5pbmcgb24gaXNuJ3QgcGVybWl0dGVkLiBQbGVhc2UgY29udGFjdCB0aGUgdGVzdCBwcm92aWRlci4gRm9yIG1vcmUgaW5mb3JtYXRpb24sIG9yIHRvIGNvbnRhY3QgdXMgY2xpY2sgaGVyZS5odHRwOi8vd3d3LnZpc3VhbHdhcmUuY29tL2Jjcy9zdXBwb3J0L2VjXzUwMi5odG1sP3VybD0=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JSUwMTAxMDAwNTAzMDEwMjAxNDNZb3UgaGF2ZSByZWFjaGVkIHRoZSB0ZXN0IGxpbWl0IHNldCBieSB0aGUgc2VydmVyLiBDb250YWN0IHlvdXIgcHJvdmlkZXIgdG8gbGVhcm4gbW9yZS4gVG8gcmVhZCBtb3JlIGFib3V0IHRoaXMgY2xpY2sgaGVyZS5odHRwOi8vd3d3LnZpc3VhbHdhcmUuY29tL2Jjcy9zdXBwb3J0L2VjXzUxMS5odG1s","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JSUwMTAxMDAwNTA0MDEwMjAwMDBVbmtub3duIE1heWhvc3QgUmVzcG9uc2U=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JSUwMTAxMDAwNTA0MDEwMjAxNTVXZWIgdGVzdHMgZm9yIHB1YmxpYyB1c2VycyBoYXZlIG5vdCBiZWVuIHBlcm1pdHRlZC4gVG8gbGVhcm4gd2h5IHBsZWFzZSBjb250YWN0IHRoZSB0ZXN0IHByb3ZpZGVyLiBUbyBsZWFybiBtb3JlIGFib3V0IHRoaXMgY2xpY2sgaGVyZS5odHRwOi8vd3d3LnZpc3VhbHdhcmUuY29tL2Jjcy9zdXBwb3J0L2VjXzUxNS5odG1s","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JSUwMTAxMDAwNTA1MDEwMjAxNTVXZWIgdGVzdHMgZm9yIHB1YmxpYyB1c2VycyBoYXZlIG5vdCBiZWVuIHBlcm1pdHRlZC4gVG8gbGVhcm4gd2h5IHBsZWFzZSBjb250YWN0IHRoZSB0ZXN0IHByb3ZpZGVyLiBUbyBsZWFybiBtb3JlIGFib3V0IHRoaXMgY2xpY2sgaGVyZS5odHRwOi8vd3d3LnZpc3VhbHdhcmUuY29tL2Jjcy9zdXBwb3J0L2VjXzUxNS5odG1s","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JSUwMTAxMDAwNTEwMDEwMjA=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JSUwMjAxMDAwMTIwMDEwMjAwMDAmcmVwaWQ9","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JSUwMzAxMDAwMTIwMDEwMjAwMDAmcmVwaWQ9","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JSUwMzAxMDAwMTIwMDEwMjAwMDAmcmVwaWQ9LTEmdG90PQ==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JSUwMzAxMDAwMTIwMDEwMjAwMDByZXBpZD0=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JSpzJXM6JSpz","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JSpzPEVNUFRZPg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JSpzPElOVkFMSUQgUFJJVkFURSBLRVk+","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JSpzPElOVkFMSUQgUFVCTElDIEtFWT4=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JSpzPE5vdCBTdXBwb3J0ZWQ+","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JSpzPFBhcnNlIEVycm9yPg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JSpzQWxpYXM6ICVz","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JSpzY3JsTnVtOg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JSpzY3JsVGltZTo=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JSpzY3JsVXJsOg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JSpzRXh0ZW5zaW9uczo=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JSpzRnVsbCBOYW1lOg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JSpzSW5kaXJlY3QgQ1JM","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JSpzaW5oZXJpdA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JSpzSXNzdWVyOg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JSpzS2V5IElkOg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JSpzTG9nICAgICAgIDogJXM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JSpzTG9nIElEICAgIDo=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JSpzTm8gUmVqZWN0ZWQgVXNlcy4=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JSpzTm8gVHJ1c3RlZCBVc2VzLg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JSpzT25seSBBdHRyaWJ1dGUgQ2VydGlmaWNhdGVz","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JSpzT25seSBDQSBDZXJ0aWZpY2F0ZXM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JSpzT25seSBVc2VyIENlcnRpZmljYXRlcw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JSpzUGF0aCBMZW5ndGggQ29uc3RyYWludDo=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JSpzUG9saWN5IExhbmd1YWdlOg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JSpzUG9saWN5IFRleHQ6ICVz","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JSpzcHJpdjo=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JSpzUmVqZWN0ZWQgVXNlczolKnM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JSpzUmVsYXRpdmUgTmFtZTolKnM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JSpzU2lnbmF0dXJlIDo=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JSpzU2lnbmVkIENlcnRpZmljYXRlIFRpbWVzdGFtcDo=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JSpzVGltZXN0YW1wIDo=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JSpzVHJ1c3RlZCBVc2VzOiUqcw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JSpzVmVyc2lvbiAgIDo=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JSpzVmVyc2lvbjogJWxkICgweCVsWCk=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JSpzWDI1NTE5IFByaXZhdGUtS2V5Og==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JSpzWDI1NTE5IFB1YmxpYy1LZXk6","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JSpzWm9uZTogJXMsIFVzZXI6","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JS4xNHMuJTAzZFo=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JTAyZCUwMmQlMDJkJTAyZCUwMmQlMDJkWg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JTA0ZCUwMmQlMDJkJTAyZCUwMmQlMDJkWg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JTA4WCUwOFglMDhYJTA4WCUwOFg=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JTEyc1B1YmxpYyBLZXkgQWxnb3JpdGhtOg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JTEyc1VuYWJsZSB0byBsb2FkIFB1YmxpYyBLZXk=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JTRkbXMgfCAlM2QgfCAoJTZkYnl0ZXMp","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JThzSXNzdWVyIFVuaXF1ZSBJRDo=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JThzU3ViamVjdCBVbmlxdWUgSUQ6","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JThzVmVyc2lvbjogJWx1ICgweCVseCk=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JWIgJWQgJVkgJUg6JU06JVM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JWQgYnl0ZXMgKCVkIHBhY2tldHMpIHJlY2VpdmVkIGluICVkbXMgKCVkLiVkIFBrdHNQZXJTZWMp","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JWQgcGFja2V0cyBkaXNjYXJkZWQgYXQgJXVtcw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JWQgcGFja2V0cyBzZW50IGluICVkbXM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JWQuJWQuJWQuJWQ=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JWQuJWQuJWQuJWQvJWQuJWQuJWQuJWQ=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JUdVSUQ6IkNvbXB1dGVyIiU=","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"JWh0dHA6Ly9jcmwuZ2xvYmFsc2lnbi5jb20vcm9vdC1yMy5jcmwwYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":0,"total":67},{"value":"JWh0dHA6Ly9jcmwuZ2xvYmFsc2lnbi5uZXQvcm9vdC1yMy5jcmww","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"JWk6JWk6IFNldHRpbmcgdGltZW91dCB0byAlaSBhbmQgdGltZW91dCBjaGVjayB0byAlaQ==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JWx1OiVzOiVzOiVkOiVz","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JVBST0dSQU1GSUxFUyVcKHg4NilcVmlzdWFsd2FyZSBCQ1NcTmV0UUNoZWNrSFRNTDVBZ2VudC5leGUgc3VjY2Vzc2Z1bGx5IHN0YXJ0ZWQ=","type":"Ansi","source":"Runtime Data","process":"bcs.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"JXMgIEJ1aWx0Og==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JXMgJTJkICUwMmQ6JTAyZDolMDJkICVkJXM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JXMgJTJkICUwMmQ6JTAyZDolMDJkJS4qcyAlZCVz","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JXMgJXMlbHUgKCVzMHglbHgp","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JXMgYWxnb3JpdGhtICIlcyIgdW5zdXBwb3J0ZWQ=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JXMgZmFpbGVk","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JXMgTGljZW5zaW5nOiB1c2luZyB0cmlhbCBsaWNlbmNl","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JXMgUmVzdWx0IENvZGU6ICVkLiVz","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JXMgc2VydmljZSBmYWlsZWQgdG8gaW5zdGFsbC4gRXJyb3IgJWQ=","type":"Ansi","source":"Hybrid Analysis","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01311000.00000020.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JXMgc2VydmljZSBpbnN0YWxsZWQgT0s=","type":"Ansi","source":"Hybrid Analysis","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01311000.00000020.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JXMgc3VjY2Vzc2Z1bGx5IHN0YXJ0ZWQ=","type":"Ansi","source":"Hybrid Analysis","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01311000.00000020.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JXMgVm9pcCBwYWNrZXQgZGV0YWlsW0lkLCB0U2VudCwgdFJlY2Rd","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JXMlMDR4IC0gPFNQQUNFUy9OVUxTPg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JXMlYyUwOGx4LiVzJWQ=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JXMlbHUgKCVzMHglbHgp","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JXM6ICglZCBiaXQp","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JXM6IEVycm9yICVk","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JXM6JWQ6IE9wZW5TU0wgaW50ZXJuYWwgZXJyb3I6ICVz","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JXUgZGF5cywgJXUgaG91cnMsICV1IG1pbnM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JXUuJXUlcyVz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"JXklbSVkICVIJU0lUw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JXklbSVkJUglTSVT","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JiVzbmV0ZG93bnNlYz0lZCYlc25ldHVwc2VjPSVkJiVzbmV0ZG93bnBjPSVkLiVkJiVzaHR0cDN4eHNlYz0lZCYlc2h0dHA0eHhzZWM9JWQmJXNodHRwNXh4c2VjPSVkJiVzaHR0cHF4eHNlYz0lZA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JiVzcnVudGltZT0ldSYlc2ZyZWVxPSV1JiVzdmVyc2lvbj0=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JiVzdGNwcnhwb29vPSV1JiVzdGNwcnhib29vPSV1JiVzdGNwcnhwb3c9JXUmJXN0Y3ByeGJvdz0ldSYlc3RjcHJ4ZG9wPSV1JiVzdGNwcnhkb2I9JXUmJXN0Y3ByeHBkcD0ldSYlc3RjcHJ4cGRiPSV1JiVzdGNwcnhjcmNlcnI9JXUmJXN0Y3ByeGJvZmY9JXUmJXN0Y3ByeHRzPSV1JiVzdGNwcnhwcm9iZT0ldSYlc3RjcHJ4d2luemVyb3VwPSV1JiVzdGNwYnl0ZXNsb3N0PSV1JiVzdGNwbXR1PSV1","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JiVzdGNwdHhydHh0bW89JXUmJXN0Y3B0eHJ0eGZhc3Q9JXUmJXN0Y3B0eHByZXR4PSV1JiVzdGNwdHhicmV0eD0ldSYlc3RjcHR4c25kd2luY2xvc2U9JXUmJXN0Y3B0eHJjdndpbnVwZD0ldSYlc3RjcHR4cmN2YWNrdG9vbXVjaD0ldSYlc3RjcHR4cmN2ZHVwYWNrPSV1JiVzdGNwdHhzbmRwcm9iZT0ldSYlc3RjcHR4cGVyc2lzdHRpbWVvPSV1JiVzdGNwbXR1PSV1","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JiZBTy9BKDxR","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"JmFjdC5kc3BlZWQ9JWQmYWN0LnVzcGVlZD0lZCZhY3QucW9zPSVkJmFjdC51cW9zPSVkJmFjdC5ydHQ9JWQmYWN0LnJ0dG1heD0lZCZhY3QucnR0YXZnPSVkJmFjdC5tYXhwYXVzZT0lZCZhY3QudW1heHBhdXNlPSVkJmFjdC5kdGVzdHR5cGU9JWMlZCAlcyZhY3QudXRlc3R0eXBlPSVjJWQgJXMmYWN0LnRjcG10dT0lZA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JmFjdC5tYXhyb3V0ZXNwZWVkPSVkJmFjdC5tYXhsaW5lc3BlZWQ9JWQmYWN0LmNvbmN1cnJlbnR0Y3A9JWQuJWQmYWN0LnRjcGZvcmNlZGlkbGU9JWQuJWQmYWN0LnVtYXhsaW5lc3BlZWQ9JWQmYWN0LnVjb25jdXJyZW50dGNwPSVkLiVkJmFjdC51dGNwZm9yY2VkaWRsZT0lZC4lZA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JmFjdC5ydW50aW1lPSV1","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JmFjdC52ZXJzaW9uPSVkLiVkLiVkLiVk","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JmJsaz1jb21w","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JmJ3PWVycm9yJnFvcz1lcnJvcg==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JmNhcGFjaXR5LmRjYXBhY2l0eT0ldSZjYXBhY2l0eS5kcGFja2V0cz0ldSZjYXBhY2l0eS5kbWF4YmFuZHdpZHRoPSV1","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JmNhcGFjaXR5LnBhY2tldHNpemU9JXUmY2FwYWNpdHkucW9zPSVk","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JmNhcGFjaXR5LnVjYXBhY2l0eT0ldSZjYXBhY2l0eS51cGFja2V0cz0ldSZjYXBhY2l0eS51bWF4YmFuZHdpZHRoPSV1","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JmNodW5rc2l6ZT0=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JmNodW5rc3RhcnQ9","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JmNvbm5lY3Rpb249JXM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JmRldGFpbC4lYyVzPQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JmRldGFpbC4lcz0=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JmRldGFpbC5jb25zb2xlPQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JmRldGFpbC5kYnk9","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JmRldGFpbC5ob3BzPQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JmRldGFpbC5pcHM9","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JmRldGFpbC5sb3NzPQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JmRldGFpbC5tYXhtcz0=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JmRldGFpbC5taW5tcz0=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JmRldGFpbC5tcz0=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JmRldGFpbC5ubmFtZT0=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JmRldGFpbC5vZmZlcj0lYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JmRldGFpbC5vcHRzcmVjdmQ9JXM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JmRldGFpbC5vcHRzcmVxPSVz","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JmRldGFpbC5wYWNrZXRzaXplPSVk","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JmRoY3Aub2ZmZXI9JWM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JmRoY3Aub3B0c3JlY3ZkPSVz","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JmRoY3Aub3B0c3JlcT0lcw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JmZpPWVycm9y","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JmZvcm1hdD0=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JmZwcz1lcnJvcg==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Jmh0dHBzOi8vd3d3Lmdsb2JhbHNpZ24uY29tL3JlcG9zaXRvcnkvMA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":0,"total":66},{"value":"Jmh0dHBzOi8vd3d3Lmdsb2JhbHNpZ24uY29tL3JlcG9zaXRvcnkvMDY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"JmxhdD0lMC43ZiZsb249JTAuN2Ymcm91PSUwLjFm","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Jmxlbmd0aD0=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JmxpbmU9ZXJyb3ImbXA9ZXJyb3ImYXA9ZXJyb3I=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Jm11Yz1lcnJvcg==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Jm9wdHJlYz0=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Jm9wdHJlYz0tMQ==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Jm9wdHJlcT0=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Jm9wdHJlcT0tMQ==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JnBiPWVycm9y","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JnBibG9jaz0=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JnBwaD0lZCZwdD0lZCZuaD0lZCZuaHI9JWQmcHBuPSVkJm50PSVkJmFsPXRydWUmb21uaT1mYWxzZSZ0c3BlYz0lZA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JnBwcz1lcnJvcg==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JnJtaW49ZXJyb3ImcmF2Zz1lcnJvciZybWF4PWVycm9yJnJudW09ZXJyb3ImcnNhbT1lcnJvcg==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JnJvdXRlPWVycm9y","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JnNpZF94PXJ0YS4lcw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JnRlc3RpZD0lZA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JnR5cGU9ZXJyb3I=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JnR5cGU9aHR0cA==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JnR5cGU9c29ja2V0","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JykuZm9jdXMoKSI+","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"J0dsb2JhbFNpZ24gQ29kZVNpZ25pbmcgQ0EgLSBTSEEyNTYgLSBHMw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"J0dsb2JhbFNpZ24gQ29kZVNpZ25pbmcgQ0EgLSBTSEEyNTYgLSBHMzA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"KCY5RzlHVTRv","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"KGFwcCA9IGFwcGxpY2F0aW9uLCBlbmQgPSBjYXBhY2l0eSk=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"KEdsb2JhbFNpZ24gVGltZXN0YW1waW5nIENBIC0gU0hBMjU2IC0gRzI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"KEdsb2JhbFNpZ24gVGltZXN0YW1waW5nIENBIC0gU0hBMjU2IC0gRzIw","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"KGhgbidsYmFz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"KElOVkFMSUQgUFNTIFBBUkFNRVRFUlMp","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"KE5lZ2F0aXZlKQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"KFRFU1RfRU5HX09QRU5TU0xfUEtFWSlMb2FkaW5nIFByaXZhdGUga2V5ICVz","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"KFRFU1RfRU5HX09QRU5TU0xfUkM0KSB0ZXN0X2luaXRfa2V5KCkgY2FsbGVk","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"KHp3fClVTyIr","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"KS0tLS0tLS0tLS0tLS0t","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"KS4gQ2xpY2sgZm9yIGZ1cnRoZXIgaGVscC4=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"KS9OZFpvMnxLaQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"KUBpeDZ1NXlEP1o=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"KiogTm8gcmVzcG9uc2UgZnJvbSBzZXJ2ZXIgKio=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"KipURVNUTEVOR1RIPSVkKio=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Kj98PD4vIjo=","type":"Ansi","source":"Hybrid Analysis","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Kk8qLytvKiNlag==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"K0BfdnxmRUo5","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"K2lYWEJcezZ7Yg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"K2svRD55QTVdRA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"LCBhc3NvY2lhdGVzLCBhZmZpbGlhdGVzLCBvciBzdXBwbGllcnMgYmUgbGlhYmxlIGZvciBhbnkgc3BlY2lhbCwgaW5jaWRlbnRhbCwgaW5kaXJlY3QsIG9yIGNvbnNlcXVlbnRpYWwgZGFtYWdlcyB3aGF0c29ldmVyIChpbmNsdWRpbmcsIHdpdGhvdXQgbGltaXRhdGlvbiwgZGFtYWdlcyBmb3IgbG9zcyBvZiBidXNpbmVzcyBwcm9maXRzLCBidXNpbmVzcyBpbnRlcnJ1cHRpb24sIGxvc3Mgb2YgYnVzaW5lc3MgaW5mb3JtYXRpb24sIG9yIGFueSBv","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"LCByZXRjb2RlPQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"LCB2YWx1ZT0=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"LGh0dHA6Ly9vY3NwMi5nbG9iYWxzaWduLmNvbS9nc2NvZGVzaWduc2hhMmczMFY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":0,"total":67},{"value":"LSBhbiBpbnZhbGlkIHZhbHVlIHdhcyBzdWJtaXR0ZWQuIEFsbCBjaGFuZ2VzIGRpc2NhcmRlZC48L2ZvbnQ+","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"LS0tLS0tLS0tLS0tLS0tLQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"LS0tLS1CRUdJTg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"LWU4TSZLY1hqKHs=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"LWtlcm5lbDMyLXBhY2thZ2UtY3VycmVudC1sMS0xLTA=","type":"Unicode","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"LXdpbi1jb3JlLWZpYmVycy1sMS0xLTE=","type":"Unicode","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"LXdpbi1ydGNvcmUtbnR1c2VyLXdpbmRvdy1sMS0xLTA=","type":"Unicode","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Li4uLi4uLi4uLi4uLi4uLi4uLi4=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVmJhZF9hbGxvY0BzdGRAQA==","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.0132D000.00000004.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVmJhZF9hcnJheV9uZXdfbGVuZ3RoQHN0ZEBA","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.0132D000.00000004.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVmV4Y2VwdGlvbkBzdGRAQA==","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.0132D000.00000004.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVnR5cGVfaW5mb0BA","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.0132D000.00000004.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"LkNSVCRYQ0FB","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"LkNSVCRYSUE=","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"LkNSVCRYSUFB","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"LkNSVCRYSUFD","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"LkNSVCRYSVo=","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"LkNSVCRYUEE=","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"LkNSVCRYUFhB","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"LkNSVCRYUFo=","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"LkRFRkFVTFRcQ29udHJvbCBQYW5lbFxJbnRlcm5hdGlvbmFs","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"LmdmaWRzJHg=","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"LmdmaWRzJHk=","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lmh0dHA6Ly9jcmwuZ2xvYmFsc2lnbi5jb20vZ3Njb2Rlc2lnbnNoYTJnMy5jcmww","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":0,"total":66},{"value":"LnJkYXRhJHN4ZGF0YQ==","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"LnJkYXRhJHp6emRiZw==","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"LndqKFsoKmRL","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"LywyKzA0SUVv","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Lz02TVRKJmpj","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"L2FwcHVwZGF0ZXMvTmV0UUNoZWNrSFRNTDVBZ2VudC93aW5kb3dzL3ZlcnNpb24udHh0","type":"Ansi","source":"PCAP Processing","process":null,"filename":"PCAP","compromised":null,"detection_total":null,"total":null},{"value":"L0tKSXg2Oy41","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"L215c3BlZWQv","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"L215c3BlZWQvYWRtaW4=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"L215c3BlZWQvYmNzbG9nPw==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"L215c3BlZWQvYmNzbG9nP0JpbiBGaWxlIFNlbnQ=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"L215c3BlZWQvZGF0YS5iaW4=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"L215c3BlZWQvbGxwbHVnaW4vc3BlZWQvdXBsb2FkdGVzdD91cGxvYWRpZD0lcyZ0bz0lZA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"L215c3BlZWQvTXlTcGVlZFNlcnZlci9ydGFwYXNz","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"L215c3BlZWQvcGx1Z2luL3JvdXRlL2FwcGxldC90cmFjZT9wcm90bz0yJnVybD0lcyZkaD0lcw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"L215c3BlZWQvcGx1Z2luL3NwZWVkL2NyZWF0ZXVwbG9hZA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"L215c3BlZWQvcnRhL25xY2xpY2VuY2U/dWlkMj0lcyYlcz0lcyVz","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"L215c3BlZWQvcnRhL25xY2xpY2Vuc2U/dWlkMj0lcyYlcz0lcyVz","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"L25Db24gVHlwZSA9ICVz","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"L1FMSFo2Z1Ficg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"L1RJTUVPVVQ9","type":"Ansi","source":"Dropped File","process":null,"filename":"nsExec.dll.2021186361","compromised":null,"detection_total":null,"total":null},{"value":"MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDBmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmYwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDEwNTAwMDAwMDAwMDAwMH19","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"MDAwNjAxMDEuMDAwNjAxMDE=","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"MDEwMjAwMDAxMDA=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"MDEyMzQ1Njc4OQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"MDEyMzQ1Njc4OS4=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"MDEyMzQ1Njc4OS46YWJjZGVmQUJDREVG","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"MDEyMzQ1Njc4OUFCQ0RFRg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"MDEyMzQ1Njc4OWFiY2RlZg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"MDEyMzQ1Njc4OUFCQ0RFRkdISUpLTE1OT1BRUlNUVVZXWFlaYWJjZGVmZ2hpamtsbW5vcHFyc3R1dnd4eXouLw==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.01100000.00000004.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"MDNqdHVOdWJN","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"MDgwNzEzZDk2MGY1YTAxYWRkMzRlYjFhMjk4N2FkNWRmNzc0MjMxOTM5NGQzNDU3M2RkMzUwMTVkOTM1ZWQyYTY2Y2NiMDZjMDM2YmIxM2M1ZjkzZDc1ODJkNDMwYzlhYTY3N2Y4NTRiYWQ3MjViN2JlZDRiYWI1N2Q0MmQ2MjU=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"MGM4OTVmY2Y2NzIwMTkyZGU2YmYzYjllODllY2RiZDY1OTZjYmNkZDhlYjI4ZTdjMzY1ZWNjNGVjMWZmMTQ2MGY1M2ZlODEzZDNjYzdmNWI3ZjAyMDAwMGZmZmYwMzAwNTA0YjAzMDQxNDAwMDYwMDA4MDAwMDAwMjEwMGE1ZDY=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"MGUyNTUxYzM5NWNiY2ZkMjQwNjNhNTIxOGE1YmIxMDQ4MjcwNjFjOWQ1NDE1NjJlMWEzOTQ4YmE5OTY0M2MxZWUzYTFkMGQzYWU4ZGM4NDhhN2E3YTBmMGE5NTY1OGFmMmFmM2YzODNhNTI1OWI0MWJhN2JlMWU4ZDgxOWQwNTk=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"MGY4OGQ5NGZiYzUyYWU0MjY0ZDFjOTEwZDI0YTQ1ZGIzNDYyMjQ3ZmE3OTE3MTVmZDcxZjk4OWUxOWUwMzY0Y2QzZjUxNjUyZDczNzYwYWU4ZmE4YzlmZmIzYzMzMGNjOWU0ZmMxN2ZhZjJjZTU0NTA0NmUzNzk0NGM2OWU0NjI=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"MGh0dHA6Ly9vY3NwMi5nbG9iYWxzaWduLmNvbS9nc3RpbWVzdGFtcGluZ3NoYTJnMjA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"MEp4VXpqIzsubA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"MHpSekZ6VnpBemF6WXp5en16Q3o=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"MSAxJDEoMSwxMDE0MTgx","type":"Ansi","source":"Memory/File Scan","process":"bcs_service.exe","filename":"00034508-00002748.00000001.35008.00409000.00000004.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"MSAxJDEoMSwxNDE8MUQxSDFUMVgx","type":"Ansi","source":"Memory/File Scan","process":"bcs_service.exe","filename":"00034508-00002748.00000001.35008.00409000.00000004.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"MTEwODAyMTAwMDAwWg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"MTIzNDU2Nzg5MA==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"MTQgKGRlZmF1bHQp","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"MTYwNjE1MDAwMDAwWg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"MTcwMTI0MTYxMzU3Wg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"MTgwMDAwMDA0ZDczNzg2ZDZjMzIyZTUzNDE1ODU4NGQ0YzUyNjU2MTY0NjU3MjJlMzYyZTMwMDAwMDAwMDAwMDAwMDAwMDAwMDAwNjAwMDA=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"MTgwMjE5MDAwMDAwWg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"MTkwMzE5MTYwNzQzWjAv","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"MTkyLjE2OC4wLjE=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"MTkyLjE2OC4wLjk4","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"MTxBXUg+eHE9LQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"MUM5MyRZXSdWXw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"MXtvRzk8cyd8","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"MiY2Lj4hMSk5JTUtPSMzKzsnNy8=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"MjAwMjI0MTYxMzU3WjBeMQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"MjAxOTAzMTkxNjA3NDNa","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"MjBlMDU5ZmMyYzVkZjcwYzBkNDFhM2I2OWFjY2EwMjYxOTZmY2FiMGQ0ZWNjNWE4ZDkzYjk2MGIzYzg1ZGE1OTlhODRhNmZhOTVhNWRiYjViODY1M2RjMjNhMWQwYzllYWJmMzgzZGQ3YWQ1YzJkMDc4YjlhZjU0OTE1NmRmM2Q=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"MjQwNjE1MDAwMDAwWjBaMQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"MjU1LjI1NS4yNTUuMA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"MjU1LjI1NS4yNTUuMjU1","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"MjU4RUFGQTUtRTkxNC00N0RBLTk1Q0EtQzVBQjBEQzg1QjEx","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"MjkwMzE4MTAwMDAwWjArMSkwJw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"MjkwMzI5MTAwMDAwWjBbMQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"MmI1MDQ4NDk3Y2I4ODEyZWY4OTU3MmIwNWM2ZDA2MTkzM2JhNjc4NWQ3N2RhZjViMmQyZDljYWY1MDUwMGQ1OTc1YzkyOWM2MmMxNmRiNmEyZDQyZjc1OGQyMDU4MDA0NTIyNDQ4ZWM4OGY5MTQ4ZmQxMTBhYTM4NDA5NDBjMTI=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"MmU3MjY1NmM3MzUwNGIwMTAyMmQwMDE0MDAwNjAwMDgwMDAwMDAyMTAwNmI3OTk2MTY4MzAwMDAwMDhhMDAwMDAwMWMwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDE5MDIwMDAwNzQ2ODY1NmQ2NTJmNzQ2ODY1NmQ2NTJmNzQ=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"MksyUDJUMlgyXDI=","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.0132F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"MlM9OCooJ3dKTw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"MypYMScxakNB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"M3JkIHBvc2l0aW9uIE1icHMgbWF0Y2hlcyB0aGUgbG93ZXN0IE1icHMgcmVjb3JkZWQ=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"M1M0WDQrNU41JTg=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0111E000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"NCA0JDQoNCw0MDQ0NDg0PDQ=","type":"Ansi","source":"Dropped File","process":null,"filename":"SimpleSC.dll.328895541","compromised":null,"detection_total":null,"total":null},{"value":"NCFodlBuUEFQUQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"NC4xNi4yMTQuMTY=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"NDM2OTFiNDhhMDJmZTlhZmQ5MzZhNTRkMjE3ZmExNzc0NmI2M2M2MzhmYmI5YjI1ODVhNTY0MGQ4YjM0M2FmN2NlOTk3YmFmY2UxZDQ5OTdhZmRjOGZhODczODQxMzRlNThkYzcwOGI5NzBhYWU4M2UzMjExYjkxNzhkMjcwNmY=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"NDc1N2U4ZDNmNzI5ZTI0NWViMmIyNjBhMDIzOGZkMDEwMDAwZmZmZjAzMDA1MDRiMDMwNDE0MDAwNjAwMDgwMDAwMDAyMTAwYWE1MjI1ZGZjNjA2MDAwMDhiMWEwMDAwMTYwMDAwMDA3NDY4NjU2ZDY1MmY3NDY4NjU2ZDY1MmY=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"NGIwZDU5MmM5YzA3MGQ4YTY1Y2QyZTg4YjdmMDdjMmNhNzFiYThkYTQ4MWNjNTJjNmNlMWM3MTVlNmU5NzgxOGM5YjQ4ZDEzZGY0OWM4NzM1MTdkMjNkNTkwODVhZGI1ZGQyMGQ2YjUyYmQ1MjFlZjJjZGQ1ZWI5MjQ2YTNkOGI=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"NGYxNWY3MzU1OWY3ZmY1YjU5MDcyMTdkZjVlZDUzY2JhYTJlYWFhMDM3MTM2MmJkYTNmNmQ2NjQ3YzFiNmU1ZGJjMDM5NjhjYzhjNWQ3ZWUzNjlhYzUzNzMxZGMyZTliMGRlY2JkNzRiZjk3NmVmNzdmMmZkZGRiZWVlNzc3MmY=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"NHJsKyMxT2tz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"NFYtekVjLXcz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"NSQ1LDU0NTw1RA==","type":"Ansi","source":"Memory/File Scan","process":"bcs_service.exe","filename":"00034508-00002748.00000001.35008.00409000.00000004.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"NTY4OTgxMWExODNjNjFhNTBmOThmNGJhYmViYzI4Mzc4NzgwNDk4OTlhNTJhNTdiZTY3MDY3NGNiMjNkOGU5MDcyMWY5MGE0ZDJmYTM4MDJjYjM1NzYyNjgwZmQ4MDBlY2Q3NTUxZGMxOGViODk5MTM4ZTNjOTQzZDdlNTAzYjY=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"NTcyZjM3YmIzOWFmZGRhYWU1ZWE0MWE1OTU2YjU3ODI2YWJiZGIwZWZjNWFiZGZiZDA3NThlMTRkODZiOTYwM2FmZDJhOWU1MmFjNTIwYzg3OTk1ODJhNDVmYWJlN2FhNWVhOWQ0ZjRhYWNkNWFjNzZiM2U1YzZjNjM2MGU1YTk=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"NWh0dHA6Ly9jcmwuZ2xvYmFsc2lnbi5jb20vZ3MvZ3N0aW1lc3RhbXBpbmdzaGEyZzIuY3JsMA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"NUw1VDVcNWQ1bDV0NcOvwr/CvQ==","type":"Ansi","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Ni4gTk8gTElBQklMSVRZIEZPUiBDT05TRVFVRU5USUFMIERBTUFHRVMufXtccnRsY2hcZmNzMSBcYWYyXGFmczIwIFxsdHJjaFxmY3MwIFxmMlxmczIwXGxhbmcyMDU3XGxhbmdmZTIwNTdcbGFuZ2ZlbnAyMDU3XGluc3JzaWQxMzA1MDcyMlxjaGFycnNpZDEzMDUwNzIy","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"NjE3MDIwNzg2ZDZjNmU3MzNhNjEzZDIyNjg3NDc0NzAzYTJmMmY3MzYzNjg2NTZkNjE3MzJlNmY3MDY1NmU3ODZkNmM2NjZmNzI2ZDYxNzQ3MzJlNmY3MjY3MmY2NDcyNjE3NzY5NmU2NzZkNmMyZjMyMzAzMDM2MmY2ZDYxNjk=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"NjU2ZTc0MzIzZDIyNjE2MzYzNjU2ZTc0MzIyMjIwNjE2MzYzNjU2ZTc0MzMzZDIyNjE2MzYzNjU2ZTc0MzMyMjIwNjE2MzYzNjU2ZTc0MzQzZDIyNjE2MzYzNjU2ZTc0MzQyMjIwNjE2MzYzNjU2ZTc0MzUzZDIyNjE2MzYzNjU2ZTc0MzUyMjIwNjE2MzYzNjU2ZTc0MzYzZDIyNjE2MzYzNjU2ZTc0MzYyMjIwNjg2YzY5NmU2YjNkMjI2ODZjNjk2ZTZiMjIyMDY2NmY2YzQ4NmM2OTZlNmIzZDIyNjY2ZjZjNDg2YzY5NmU2YjIyMmYzZX0=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"NjU3NTc3MDkzMWUyN2E0MDg2MDllMzZjMmM5Y2JiYzQ2OTIxNjIwZDQ5OWYwYzhjNmE1YTE5ZWQ5MTA4ZjIzMmI3MTE4NDdjMWJiMTM5YjhlM2I0MThiNWFkYmE4ZDhmNGMyNGRjMTU4ODVhYzhmNzMxMzVjMjc4MTVjZDA0OGE=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"NjY2NjY2NjY2NjY2NjY2NjY2NjY2NjY2NjY2NjY2NjY2NjY2NjY2NjY2NjY2NjY2XFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcc3NsXHJlY29yZFxzc2wzX3JlY29yZC5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Njg2NTZkNjU0ZDYxNmU2MTY3NjU3MjJlNzg2ZDZjNTA0YjAxMDIyZDAwMTQwMDA2MDAwODAwMDAwMDIxMDBhYTUyMjVkZmM2MDYwMDAwOGIxYTAwMDAxNjAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwZDYwMjAwMDA3NDY4NjU=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"NmMyZWZiMjhhMjdhYzBmNzkxMDg2ZDI0N2JmMzY0YThlMzNhNWM0MGE2Mjc5ODMyYTczM2MyOWNkYjZjNmUyNGIwNWUyZGU5ZDc0MDVlZWM2OTNmYTBmM2M4NDQyNjgyMWNkYTdjZWUyM2M2NzQ2NDliMWQwNjIxOGFhNjM2NmM=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"NmQzMjkzNDRkOTQyYTJiYTFjOTQ0MTUyMGZlNjEwMzQwYjA5YjViMjc3YzJhMjZlNjE1MTkzZWU5N2E5ZGE2MDAxZDRiMmFjYzBkNmM5ODEwZDU3YzNmNTNkMzAwMTIzNzhhMjQyMTQ4ZjY0OWVkMjU0MmZiM2FiOTJmOTJlMzM=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"NmQ2NTJmNzQ2ODY1NmQ2NTJmNzQ2ODY1NmQ2NTMxMmU3ODZkNmM1MDRiMDEwMjJkMDAxNDAwMDYwMDA4MDAwMDAwMjEwMDBkZDE5MDlmYjYwMDAwMDAxYjAxMDAwMDI3MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDBkMDA5MDAwMDc0Njg2NTZkNjUyZjc0Njg2NTZkNjUyZjVmNzI2NTZjNzMyZjc0Njg2NTZkNjU0ZDYxNmU2MTY3NjU3MjJlNzg2ZDZjMmU3MjY1NmM3MzUwNGIwNTA2MDAwMDAwMDAwNTAwMDUwMDVkMDEwMDAwY2IwYTAwMDAwMDAwfQ==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"NmQ2NTJmNzQ2ODY1NmQ2NTRkNjE2ZTYxNjc2NTcyMmU3ODZkNmMwY2NjNGQwYWMzMjAxMDQwZTE3ZGExNzc5MGQ5Mzc2M2JiMjg0NTYyYjJjYmFlYmJmNjAwNDM5YzFhNDFjN2EwZDI5ZmRiZDdlNWUzODMzN2NlZGYxNGQ1OWI=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"NmUyMjIwNjI2NzMxM2QyMjZjNzQzMTIyMjA3NDc4MzEzZDIyNjQ2YjMxMjIyMDYyNjczMjNkMjI2Yzc0MzIyMjIwNzQ3ODMyM2QyMjY0NmIzMjIyMjA2MTYzNjM2NTZlNzQzMTNkMjI2MTYzNjM2NTZlNzQzMTIyMjA2MTYzNjM=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"NzEwMTE3MWE2ZTQxZmRiOWY5ZGRjYjc5YjRiMzMwYTI2MjhiYWQ2NmQ3NTU3ZjBiYmI4NWMxZThiMGE0ZTY0YzI2ODM2YzUyY2ZmM2JkNGEzM2YzYWYwMDU0NmNlMjNhZDU0ZWE1NTNjOWZjMjkwMDFhMGU2MWE1MjkxN2RkYTc=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"NzIwYjQxODlmOWQ1YTIwY2UwODg3MDc4ZmI1MzRjYTMzOTIyZjAzYTMzMTNiMjU1ZmRhZDM1YTY4NWVjZWFlZjEzNTUwZGE1ZTM4ODRlNDNiNGU4MjhiYTk4YTc3MDI1ZTUxOTFkNzU5NmM1NDAzYjViYWMxOTAyYWE4NTY0ZDE=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"NzQ1ZjU0Nzk3MDY1NzM1ZDJlNzg2ZDZjNTA0YjAxMDIyZDAwMTQwMDA2MDAwODAwMDAwMDIxMDBhNWQ2YTdlN2MwMDAwMDAwMzYwMTAwMDAwYjAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMzAwMTAwMDA1ZjcyNjU2YzczMmY=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"NzQ2ODY1NmQ2NTMxMmU3ODZkNmNlYzU5NWQ4YmRiNDYxNDdkMmZmNDNmMDhiZDNiZmU5MmZjYjFjNDFiNmNkOWNlYjZkOTRkNDJlY2E0ZTQ3MTZjOGZhZGM5OGUzNDQ2MzNkZThkMDk4MTkyM2MxNjBhYTU2OWU5NDMwMzdkZWI=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"NzQ2ODY1NmQ2NTRkNjE2ZTYxNjc2NTcyMmU3ODZkNmMyZTcyNjU2YzczODQ4ZjRkMGFjMjMwMTQ4NGY3ODI3NzA4NmY2ZmQzYmExMDkxMjZkZDg4ZDBhZGQ0MDM4NGU0MzUwZDM2M2YyNDUxZWNlZDBkYWUyYzA4MmU4NzYxYmU=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"NzwqSW4hR3grQSQ5WQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"N2MyYzYyMDFlMTU1YmM3NmZmMDEwMDAwZmZmZjAzMDA1MDRiMDMwNDE0MDAwNjAwMDgwMDAwMDAyMTAwMGRkMTkwOWZiNjAwMDAwMDFiMDEwMDAwMjcwMDAwMDA3NDY4NjU2ZDY1MmY3NDY4NjU2ZDY1MmY1ZjcyNjU2YzczMmY=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"OCl5WiNcXURK","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"OCp0QmBIaHhoVA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"OCspfEYhL3x0IDE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"OC4gVEhJUkQgUEFSVFkgUFJPRFVDVC59e1xydGxjaFxmY3MxIFxhZjJcYWZzMjAgXGx0cmNoXGZjczAgXGYyXGZzMjBcbGFuZzIwNTdcbGFuZ2ZlMjA1N1xsYW5nZmVucDIwNTdcaW5zcnNpZDEzMDUwNzIyXGNoYXJyc2lkMTMwNTA3MjI=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"ODM8M0AzRDNIM0wzUDNUM1gzXDNgM2QzaDNsM3AzdDN4M3wzKDUsNTA1NDU4NTw1QDVENUg1TDVQNSg4LDg4ODw4","type":"Ansi","source":"Memory/File Scan","process":"bcs_service.exe","filename":"00034508-00002748.00000001.35008.00409000.00000004.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"ODg0MDg1N2NkMTAxZmVmZmZmZmYwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMGZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZjAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"OGZjNGExOGVmZDg4MWY0Mjg5MjJlNzI2MTMzNmY4MDEzM2VmMTA3OTBlNzk0MGYxZDY3NGRmMjFkODQ4ZjdlOTZhNzAxYjk0NTVhN2I0MmExMDc5NjU5NjU4NzI3OTE1MzNhMzdlN2I3MzNhNDY1ODQ5MGQwOGJmYTFlNzExODk=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"OSpySnp5RXpAaQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"OTQ8ODw8PEA8RDxIPEw8UDxUPFs+YT9xPw==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0111E000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"OTZCOyFLeEJ4Vw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"OTkyMDE2OGZkN2MyYzgwMDFlMzA0NjViMmNiMTQ2ZTE5YTljNGIwYjczN2YxNjRmZWM5MzI3MzMxZDc3MGJhMTIzZGJkYzAxOGE4ZGZjNzY2NjUzZDA1NjYyNzMxOTg0ZDhhMDc5OTNhMjU4YTAwOThlYjE3MGU0MzU3Njg4YjE=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"OTk2OWJiOTc5ZGM5MTM2MzMyZGUzMTY4YWExYTA4M2FlOTk1NzE5YWMxNmRiOGVjOGU0MDUyMTY0ZTg5ZDkzYjY0YjA2MDgyOGU2ZjM3ZWQxNTY3OTE0YjI4NGQyNjI0NTIyODJlMzE5ODcyMGUyNzRhOTM5Y2QwOGE1NGY5ODA=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"OT4lLENFWEl5","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"OT5naXlPJz5Z","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"OVs5ezh7OUc5","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"OWNiMjQwMDgyNWU5ODJjNzhlYzdhMjdjYzBjODk5MjQxNmM5ZDhiMmE3NTVmYmY3NGNkMjU0NDJhODIwMTY2YzJjZDkzM2Y3OWUzYmUzNzJiZDFmMDdiNWMzOTg5Y2E3NGFhZmYyNDIyYjI0ZWIxYjQ3NWRhNWRmMzc0ZmQ5YWQ=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"OUpnTlhkKlVdYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"OXInXkdOa35+RWs=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"OiAlZCBzYW1wbGVz","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Oi80KTQ1ND00Kw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"OkBYIkNsVW9NTg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"OlxVc2Vyc1xIQVBVQldTXEFwcERhdGFcTG9jYWxcVGVtcFxuc3g0MkVFLnRtcA==","type":"Ansi","source":"Memory/File Scan","process":"bcs_service.exe","filename":"00034508-00002748.00000001.35008.00409000.00000004.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"OkJBRCBCT09MRUFO","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"OkJBRCBFTlVNRVJBVEVE","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"OkJBRCBJTlRFR0VS","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"OkJBRCBPQkpFQ1Q=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"OyA7JDsoOyw7","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0111E000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"OzlKTTpyX0V1","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"O0dsb2JhbFxCQ1NNdXRleA==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.01100000.00000004.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"PCA8JDwoPCw8MDw0PDg8PDxAPEQ8SDxMPFA8VDxcPGc8","type":"Ansi","source":"Dropped File","process":null,"filename":"SimpleSC.dll.328895541","compromised":null,"detection_total":null,"total":null},{"value":"PCo8NDxXPGE8","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.0132F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"PC9hcHBsaWNhdGlvbj48L2NvbXBhdGliaWxpdHk+PC9hc3NlbWJseT4=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"PC9wPjwvY2VudGVyPg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"PC9wPjwvdGQ+","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"PC9zcGFuPjwvdGQ+","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"PC9zdHJvbmc+PC9wPg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"PC9zdHJvbmc+PC9wPjwvdGQ+PC90cj48dHI+PHRkIGNvbHNwYW49IjQiIGFsaWduPSJyaWdodCI+Jm5ic3A7PC90ZD48L3RyPg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"PC90YWJsZT4=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"PDYqc0psZnxhYHQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"PDw8PDxMT0cgQlJFQUs+Pj4+Pg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"$35","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"$36","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"PD94bWwgdmVyc2lvbj0nMS4wJyBlbmNvZGluZz0nVVRGLTgnIHN0YW5kYWxvbmU9J3llcyc/Pjxhc3NlbWJseSB4bWxucz0ndXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTphc20udjEnIG1hbmlmZXN0VmVyc2lvbj0nMS4wJz4gIDx0cnVzdEluZm8geG1sbnM9InVybjpzY2hlbWFzLW1pY3Jvc29mdC1jb206YXNtLnYzIj4gICAgPHNlY3VyaXR5PiAgICAgIDxyZXF1ZXN0ZWRQcml2aWxlZ2VzPiAgICAgICAgPHJlcXVlc3RlZEV4ZWN1dGlvbkxldmVsIGxldmVsPSdhc0ludm9rZXInIHVpQWNjZXNzPSdmYWxzZScgLz4gICAgICA8L3JlcXVlc3RlZFByaXZpbGVnZXM+ICAgIDwvc2VjdXJpdHk+ICA8L3RydXN0SW5mbz48L2Fzc2VtYmx5Pg==","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.0132F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"PGEgaHJlZj0=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"PEFTTjEgJWQ+","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"PGJvZHkgb25Mb2FkPSJkb2N1bWVudC5nZXRFbGVtZW50QnlJZCgn","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"PENhbid0IHBhcnNlIGNlcnRpZmljYXRlPg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"PGNlbnRlcj48cD4=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"PGRpdiBhbGlnbj1jZW50ZXIgY2xhc3M9ImMxIj4=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"PGZvbnQgY29sb3I9IiNmZjAwMDAiPg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"PGZvcm0gbWV0aG9kPXBvc3QgYWN0aW9uPSIiPg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"PGh0bWw+PGhlYWQ+","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"PGh0dHA6Ly9zZWN1cmUuZ2xvYmFsc2lnbi5jb20vY2FjZXJ0L2dzY29kZXNpZ25zaGEyZzNvY3NwLmNydDA4","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":0,"total":67},{"value":"PGh0dHA6Ly9zZWN1cmUuZ2xvYmFsc2lnbi5jb20vY2FjZXJ0L2dzdGltZXN0YW1waW5nc2hhMmcyLmNydDA8","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"PElOVkFMSUQ+","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"PGludmFsaWQ+","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"PG1ldGEgaHR0cC1lcXVpdj0icmVmcmVzaCIgY29udGVudD0=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"PG1ldGEgaHR0cC1lcXVpdj0icmVmcmVzaCIgY29udGVudD0iNTtVUkw9aHR0cDovLw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"PE5vIEZyaWVuZGx5IE5hbWU+","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"PHA+PGlucHV0IHR5cGU9InN1Ym1pdCIgbmFtZT0iYnV0dG9uIiBpZD0iYnV0dG9uIiB2YWx1ZT0=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"PHA+PHN0cm9uZz5OZXRRQ2hlY2sgLQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"PHRhYmxlIHdpZHRoPSIxMDAlIj4=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"PHRkIGFsaWduPSJsZWZ0Ij48cD4=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"PHRkIGFsaWduPSJsZWZ0Ij48cD48aW5wdXQgdHlwZT0icGFzc3dvcmQiIG5hbWU9","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"PHRkIGFsaWduPSJsZWZ0Ij48cD48aW5wdXQgdHlwZT0idGV4dCIgbmFtZT0=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"PHRkIGhlaWdodD0iMTAiPjxwPiA8L3A+PC90ZD4=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"PHRkIHdpZHRoPSIyMDAiIGFsaWduPSJyaWdodCI+PHA+","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"PHRkPiA8c3BhbiBzdHlsZT0iZm9udC1zaXplOjhwdCI+Ww==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"PHRyPjx0ZCBoZWlnaHQ9IjEwIiBhbGlnbj0ibGVmdCIgY29sc3Bhbj0iNCIgY2xhc3M9InByb3h5bGluZSI+PHA+PHN0cm9uZz4=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"PFU9XD1GPk0+","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0111E000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"PHVuc3VwcG9ydGVkPg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"PSA+Zj44P34/","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0111E000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"PSI9OD1OPVY9","type":"Ansi","source":"Memory/File Scan","process":"bcs_service.exe","filename":"00034508-00002748.00000001.35008.00409000.00000004.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"PUJFL3xXNU4=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"PWJSVWdXV31Bcw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"PiA+JD4oPiw+MD40Pjg+PD5APkQ+","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.0132F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"PiA+JD4oPiw+MD40Pjg+PD5APkQ+SD5MPlA+VD4=","type":"Ansi","source":"Memory/File Scan","process":"bcs_service.exe","filename":"00034508-00002748.00000001.35008.00409000.00000004.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Pik/Nz9JP1w/","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0111E000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"PjA+ND5EPkg+WD5cPmg+cD54Pg==","type":"Ansi","source":"Memory/File Scan","process":"bcs_service.exe","filename":"00034508-00002748.00000001.35008.00409000.00000004.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"PjwvcD48L3RkPg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Pj8lP0A/ST9lPw==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0111E000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"PkR1Mk91LlBj","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"PyA/JD8oPyw/MD80Pzg/PD9AP0Q/SD9MP1A/VD9YP1w/YD9kP2g/","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0111E000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"PyA/KD8wPzg/QD9IP1A/WD9gPw==","type":"Ansi","source":"Memory/File Scan","process":"bcs_service.exe","filename":"00034508-00002748.00000001.35008.00409000.00000004.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"PyE/MD9tP3g/","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0111E000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"PyQ/ND9EP0g/VD9kPw==","type":"Ansi","source":"Memory/File Scan","process":"bcs_service.exe","filename":"00034508-00002748.00000001.35008.00409000.00000004.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Pyw/MD80Pzg/PD9EP0g/UD8=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0111E000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"P2F6NiIkMjxy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"P054LDc/MWpCaHs=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"P3IgYEhlcGFEeA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"P3Y3PD40O3l7Q0l7Mg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"QDNAK0BLQFtA","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"QEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQD5AQEA/NDU2Nzg5Ojs8PUBAQEBAQEA=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"WyU0ZCwlNGRdID0gJWQgYnl0ZXMgKCVkS2Jwcyk=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"W0FQQVxBXkFVQVNBWw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"W0hFWCBEVU1QXTo=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"W0ludGVybmV0U2hvcnRjdXRdVVJMPWh0dHA6Ly93d3cubXljb25uZWN0aW9uc2VydmVyLmNvbS9zdXBwb3J0L3Y5L2Jjcy5odG1sSURMaXN0PUljb25GaWxlPSVXSU5ESVIlXHN5c3RlbTMyXFNIRUxMMzIuZGxsSWNvbkluZGV4PTE3SG90S2V5PTBbezAwMDIxNEEwLTAwMDAtMDAwMC1DMDAwLTAwMDAwMDAwMDA0Nn1dUHJvcDM9MTksMg==","type":"Ansi","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"W3FdX3tkajRfeQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"XCcwMVx1LTM5MTMgPzt9e1xsZXZlbG51bWJlcnM7fVxmM1xmczIwXGZiaWFzMFxocmVzMFxjaGhyZXMwIFxmaS0zNjBcbGkzNjAwXGpjbGlzdHRhYlx0eDM2MDBcbGluMzYwMCB9e1xsaXN0bGV2ZWxcbGV2ZWxuZmMyM1xsZXZlbG5mY24yM1xsZXZlbGpjMFxsZXZlbGpjbjBcbGV2ZWxmb2xsb3cwXGxldmVsc3RhcnRhdDFcbHZsdGVudGF0aXZlXGxldmVsc3BhY2UwXGxldmVsaW5kZW50MHtcbGV2ZWx0ZXh0","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XCcwMVx1LTM5MTMgPzt9e1xsZXZlbG51bWJlcnM7fVxmM1xmczIwXGZiaWFzMFxocmVzMFxjaGhyZXMwIFxmaS0zNjBcbGk0MzIwXGpjbGlzdHRhYlx0eDQzMjBcbGluNDMyMCB9e1xsaXN0bGV2ZWxcbGV2ZWxuZmMyM1xsZXZlbG5mY24yM1xsZXZlbGpjMFxsZXZlbGpjbjBcbGV2ZWxmb2xsb3cwXGxldmVsc3RhcnRhdDFcbHZsdGVudGF0aXZlXGxldmVsc3BhY2UwXGxldmVsaW5kZW50MHtcbGV2ZWx0ZXh0","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XCcwMVx1LTM5MTMgPzt9e1xsZXZlbG51bWJlcnM7fVxmM1xmczIwXGZiaWFzMFxocmVzMFxjaGhyZXMwIFxmaS0zNjBcbGk1MDQwXGpjbGlzdHRhYlx0eDUwNDBcbGluNTA0MCB9e1xsaXN0bGV2ZWxcbGV2ZWxuZmMyM1xsZXZlbG5mY24yM1xsZXZlbGpjMFxsZXZlbGpjbjBcbGV2ZWxmb2xsb3cwXGxldmVsc3RhcnRhdDFcbHZsdGVudGF0aXZlXGxldmVsc3BhY2UwXGxldmVsaW5kZW50MHtcbGV2ZWx0ZXh0","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XCcwMVx1LTM5MTMgPzt9e1xsZXZlbG51bWJlcnM7fVxmM1xmczIwXGZiaWFzMFxocmVzMFxjaGhyZXMwIFxmaS0zNjBcbGk1NzYwXGpjbGlzdHRhYlx0eDU3NjBcbGluNTc2MCB9e1xsaXN0bGV2ZWxcbGV2ZWxuZmMyM1xsZXZlbG5mY24yM1xsZXZlbGpjMFxsZXZlbGpjbjBcbGV2ZWxmb2xsb3cwXGxldmVsc3RhcnRhdDFcbHZsdGVudGF0aXZlXGxldmVsc3BhY2UwXGxldmVsaW5kZW50MHtcbGV2ZWx0ZXh0","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XCcwMVx1LTM5MTMgPzt9e1xsZXZlbG51bWJlcnM7fVxmM1xmczIwXGZiaWFzMFxocmVzMFxjaGhyZXMwIFxmaS0zNjBcbGk2NDgwXGpjbGlzdHRhYlx0eDY0ODBcbGluNjQ4MCB9e1xsaXN0bmFtZSA7fVxsaXN0aWQ3Mjg5NjMwN319e1wqXGxpc3RvdmVycmlkZXRhYmxle1xsaXN0b3ZlcnJpZGVcbGlzdGlkNzI4OTYzMDdcbGlzdG92ZXJyaWRlY291bnQwXGxzMX19e1wqXHBncHRibCB7XHBncFxpcGdwMFxpdGFwMFxsaTBccmkwXHNiMFxzYTB9fQ==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcc3NsXHJlY29yZFxzc2wzX3JlY29yZC5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"XGFiXGFmMlxhZnMyMCBcbHRyY2hcZmNzMCBcYlxmMlxmczIwXGxhbmcyMDU3XGxhbmdmZTIwNTdcbGFuZ2ZlbnAyMDU3XGluc3JzaWQxMzA1MDcyMlxjaGFycnNpZDEzMDUwNzIyIDEuIEdSQU5UIE9GIExJQ0VOU0UufXtccnRsY2hcZmNzMSBcYWYyXGFmczIwIFxsdHJjaFxmY3MwIFxmMlxmczIwXGxhbmcyMDU3XGxhbmdmZTIwNTdcbGFuZ2ZlbnAyMDU3XGluc3JzaWQxMzA1MDcyMlxjaGFycnNpZDEzMDUwNzIyICBWaXN1YWx3YQ==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGFiXGFmMlxhZnMyMCBcbHRyY2hcZmNzMCBcYlxmMlxmczIwXGxhbmcyMDU3XGxhbmdmZTIwNTdcbGFuZ2ZlbnAyMDU3XGluc3JzaWQxMzA1MDcyMlxjaGFycnNpZDEzMDUwNzIyIDcuIExJTUlUQVRJT04gT0YgTElBQklMSVRZLn17XHJ0bGNoXGZjczEgXGFmMlxhZnMyMCBcbHRyY2hcZmNzMCBcZjJcZnMyMFxsYW5nMjA1N1xsYW5nZmUyMDU3XGxhbmdmZW5wMjA1N1xpbnNyc2lkMTMwNTA3MjJcY2hhcnJzaWQxMzA1MDcyMiAgVmlzdWFsd2Fy","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGFmMFxhZnMyNFxhbGFuZzEwMjUgXGx0cmNoXGZjczAgXGZzMjRcbGFuZzIwNTdcbGFuZ2ZlMjA1N1xjZ3JpZFxsYW5nbnAyMDU3XGxhbmdmZW5wMjA1NyBcc2Jhc2Vkb24wIFxzbmV4dDE2IFxzc2VtaWhpZGRlbiBcc3VuaGlkZXVzZWQgXHN0eXJzaWQxMzA1MDcyMiBOb3JtYWwgKFdlYik7fX17XCpcbGlzdHRhYmxle1xsaXN0XGxpc3R0ZW1wbGF0ZWlkMTI3MDI4MzUzMntcbGlzdGxldmVsXGxldmVsbmZjMjNcbGV2ZWxuZmNuMjNcbGV2ZWxqYzA=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGFmMlxhZnMyMCBcbHRyY2hcZmNzMCBcZjJcZnMyMFxsYW5nMjA1N1xsYW5nZmUyMDU3XGxhbmdmZW5wMjA1N1xpbnNyc2lkMTMwNTA3MjJcY2hhcnJzaWQxMzA1MDcyMg==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGFzaWFuYnJrcnVsZVxyc2lkcm9vdDEzMDUwNzIyXG5ld3RibHN0eXJ1bHNcbm9ncm93YXV0b2ZpdFx1c2Vub3Jtc3R5Zm9ybGlzdFxub2luZG5tYnJ0c1xmZWxuYnJlbGV2XG5vY3hzcHRhYmxlXGluZHJsc3dlbGV2ZW5cbm9hZmNuc3R0YmxcYWZlbGV2XHV0aW5sXGh3ZWxldlxzcGx0cGdwYXJcbm90Y3Zhc3Bcbm90YnJrY25zdGZyY3RibFxub3R2YXR4Ynhca3JucHJzbmV0XGNhY2hlZGNvbGJhbCBcbm91aWNvbXBhdCBcZmV0MA==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGJcZjJcZnMyMFxsYW5nMjA1N1xsYW5nZmUyMDU3XGxhbmdmZW5wMjA1N1xpbnNyc2lkMTMwNTA3MjJcY2hhcnJzaWQxMzA1MDcyMiAzLiBBVURJVElORy59e1xydGxjaFxmY3MxIFxhZjJcYWZzMjAgXGx0cmNoXGZjczAgXGYyXGZzMjBcbGFuZzIwNTdcbGFuZ2ZlMjA1N1xsYW5nZmVucDIwNTdcaW5zcnNpZDEzMDUwNzIyXGNoYXJyc2lkMTMwNTA3MjI=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGJcZjJcZnMyMFxsYW5nMjA1N1xsYW5nZmUyMDU3XGxhbmdmZW5wMjA1N1xpbnNyc2lkMTMwNTA3MjJcY2hhcnJzaWQxMzA1MDcyMiA0LiBURVJNSU5BVElPTi59e1xydGxjaFxmY3MxIFxhZjJcYWZzMjAgXGx0cmNoXGZjczAgXGYyXGZzMjBcbGFuZzIwNTdcbGFuZ2ZlMjA1N1xsYW5nZmVucDIwNTdcaW5zcnNpZDEzMDUwNzIyXGNoYXJyc2lkMTMwNTA3MjI=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGJcZjJcZnMyMFxsYW5nMjA1N1xsYW5nZmUyMDU3XGxhbmdmZW5wMjA1N1xpbnNyc2lkMTMwNTA3MjJcY2hhcnJzaWQxMzA1MDcyMiBNeUNvbm5lY3Rpb24gU2VydmVyIH17XHJ0bGNoXGZjczEgXGFiXGFmMlxhZnMyMCBcbHRyY2hcZmNzMCBcYlxmMlxmczIwXGxhbmcyMDU3XGxhbmdmZTIwNTdcbGFuZ2ZlbnAyMDU3XGluc3JzaWQxMjk4ODU1NyBCcm93c2VyIENvbXBhdGliaWxpdHkgU2VydmljZX17XHJ0bGNoXGZjczEgXGFiXGFmMlxhZnMyMA==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGV4cHNocnRuXG5vdWx0cmxzcGNcZG50Ymxuc2JkYlxub3NwYWNlZm9ydWxcZm9ybXNoYWRlXGhvcnpkb2NcZGdtYXJnaW5cZGdoc3BhY2UxODBcZGd2c3BhY2UxODBcZGdob3JpZ2luMTQ0MFxkZ3ZvcmlnaW4xNDQwXGRnaHNob3cxXGRndnNob3cx","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGYwXGZzMjRcbGFuZzIwNTdcbGFuZ2ZlMjA1N1xsYW5nZmVucDIwNTdcaW5zcnNpZDEzMDUwNzIyXGNoYXJyc2lkMTMwNTA3MjI=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGYyXGZzMjBcbGFuZzIwNTdcbGFuZ2ZlMjA1N1xsYW5nZmVucDIwNTdcaW5zcnNpZDEyOTk2NTM4IGltcGxpZWQgb3IgfXtccnRsY2hcZmNzMSBcYWYyXGFmczIwIFxsdHJjaFxmY3MwIFxmMlxmczIwXGxhbmcyMDU3XGxhbmdmZTIwNTdcbGFuZ2ZlbnAyMDU3XGluc3JzaWQyNTA1NDkxIHByb3ZpZGVkIHVuZGVyIHRoaXMgbGljZW5zZSBhZ3JlZW1lbnQuIH17XHJ0bGNoXGZjczEgXGFmMFxhZnMyNCBcbHRyY2hcZmNzMA==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGYyXGZzMjBcbGFuZzIwNTdcbGFuZ2ZlMjA1N1xsYW5nZmVucDIwNTdcaW5zcnNpZDEyOTk2NTM4IHN9e1xydGxjaFxmY3MxIFxhZjJcYWZzMjAgXGx0cmNoXGZjczAgXGYyXGZzMjBcbGFuZzIwNTdcbGFuZ2ZlMjA1N1xsYW5nZmVucDIwNTdcaW5zcnNpZDI1MDU0OTEgIG9ubHkgYW5kIG5vIHdhcnJhbnR5IGlzIH17XHJ0bGNoXGZjczEgXGFmMlxhZnMyMCBcbHRyY2hcZmNzMA==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGYyXGZzMjBcbGFuZzIwNTdcbGFuZ2ZlMjA1N1xsYW5nZmVucDIwNTdcaW5zcnNpZDEzMDUwNzIyXGNoYXJyc2lkMTMwNTA3MjI=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGYyXGZzMjBcbGFuZzIwNTdcbGFuZ2ZlMjA1N1xsYW5nZmVucDIwNTdcaW5zcnNpZDEzMDUwNzIyXGNoYXJyc2lkMTMwNTA3MjIgIChBKSBZb3UgbXVzdCBjb21wbHkgd2l0aCBhbGwgYXBwbGljYWJsZSBsYXdzIHJlZ2FyZGluZyB0aGUgdXNlIG9mIHRoZSBTT0ZUV0FSRSBQUk9EVUNULiAoQikgWW91IG1heSBub3QgcmV2ZXJzZSBlbmdpbmVlciw=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGYyXGZzMjBcbGFuZzIwNTdcbGFuZ2ZlMjA1N1xsYW5nZmVucDIwNTdcaW5zcnNpZDEzMDUwNzIyXGNoYXJyc2lkMTMwNTA3MjIgIEluc3RhbGwgYW5kIHVzZSB0aGUgTmV0UUNoZWNrIG9uIGEgc2luZ2xlIHNlcnZlciwgb3IgbXVsdGlwbGUgZG9tYWlucyBhbmQgc2VydmVycyBjb3JyZXNwb25kaW5nIHRvIHRoZSBsaWNlbnNlIHB1cmNoYXNlZC4gfXtccnRsY2hcZmNzMSBcYWYyXGFmczIwIFxsdHJjaFxmY3Mw","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGYyXGZzMjBcbGFuZzIwNTdcbGFuZ2ZlMjA1N1xsYW5nZmVucDIwNTdcaW5zcnNpZDI1MDU0OTEgQ2xpZW50IHByb2dyYW0gYW5kIHNvdXJjZSBmaWxlcyBtYXkgYmUgaW5zdGFsbGVkIG9uIG11bHRpcGxlIGNsaWVudCBwbGF0Zm9ybXMgY29ycmVzcG9uZGluZyB0byB0aGUgbGljZW5zZWQgcHVyY2hhc2VkLiBTb3VyY2UgZmlsZXMgYXJlIHByb3ZpZGVkIGFzIGV4YW1wbGV9e1xydGxjaFxmY3MxIFxhZjJcYWZzMjAgXGx0cmNoXGZjczA=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGYzMTUwNlxmczIyXGxhbmcyMDU3XGxhbmdmZTEwMzNcbGFuZ25wMjA1NyB9e1wqXGRlZnBhcCBccWwgXGxpMFxyaTBcc2ExNjBcc2wyNTlcc2xtdWx0MVx3aWRjdGxwYXJcd3JhcGRlZmF1bHRcYXNwYWxwaGFcYXNwbnVtXGZhYXV0b1xhZGp1c3RyaWdodFxyaW4wXGxpbjBcaXRhcDAgfVxub3FmcHJvbW90ZSB7XHN0eWxlc2hlZXR7XHFsIFxsaTBccmkwXHNhMTYwXHNsMjU5XHNsbXVsdDE=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGpleHBhbmRcdmlld2tpbmQxXHZpZXdzY2FsZTEwMFxwZ2JyZHJoZWFkXHBnYnJkcmZvb3Rcc3BseXR3bmluZVxmdG5seXR3bmluZVxodG1hdXRzcFxub2xuaHRhZGp0YmxcdXNlbHRiYWxuXGFsbnRibGluZFxseXRjYWxjdGJsd2RcbHl0dGJscnRnclxsbmJya3J1bGVcbm9icmt3cnB0Ymxcc25hcHRvZ3JpZGluY2VsbFxhbGxvd2ZpZWxkZW5kc2VsXHdycHB1bmN0","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxldmVsaW5kZW50MHtcbGV2ZWx0ZXh0XCcwMVx1LTM5MTMgPzt9e1xsZXZlbG51bWJlcnM7fVxmM1xmczIwXGZiaWFzMFxocmVzMFxjaGhyZXMwIFxmaS0zNjBcbGkyODgwXGpjbGlzdHRhYlx0eDI4ODBcbGluMjg4MCB9e1xsaXN0bGV2ZWxcbGV2ZWxuZmMyM1xsZXZlbG5mY24yM1xsZXZlbGpjMFxsZXZlbGpjbjBcbGV2ZWxmb2xsb3cwXGxldmVsc3RhcnRhdDFcbHZsdGVudGF0aXZlXGxldmVsc3BhY2UwXGxldmVsaW5kZW50MHtcbGV2ZWx0ZXh0","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxldmVsamNuMFxsZXZlbGZvbGxvdzBcbGV2ZWxzdGFydGF0MVxsZXZlbHNwYWNlMFxsZXZlbGluZGVudDB7XGxldmVsdGV4dFwnMDFcdS0zOTEzID87fXtcbGV2ZWxudW1iZXJzO31cZjNcZnMyMFxmYmlhczBcaHJlczBcY2hocmVzMCBcZmktMzYwXGxpNzIwXGpjbGlzdHRhYlx0eDcyMFxsaW43MjAgfXtcbGlzdGxldmVsXGxldmVsbmZjMjNcbGV2ZWxuZmNuMjNcbGV2ZWxqYzBcbGV2ZWxqY24wXGxldmVsZm9sbG93MFxsZXZlbHN0YXJ0YXQx","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxldmVsc3BhY2UwXGxldmVsaW5kZW50MHtcbGV2ZWx0ZXh0XCcwMVx1LTM5MTMgPzt9e1xsZXZlbG51bWJlcnM7fVxmM1xmczIwXGZiaWFzMFxocmVzMFxjaGhyZXMwIFxmaS0zNjBcbGkyMTYwXGpjbGlzdHRhYlx0eDIxNjBcbGluMjE2MCB9e1xsaXN0bGV2ZWxcbGV2ZWxuZmMyM1xsZXZlbG5mY24yM1xsZXZlbGpjMFxsZXZlbGpjbjBcbGV2ZWxmb2xsb3cwXGxldmVsc3RhcnRhdDFcbHZsdGVudGF0aXZlXGxldmVsc3BhY2Uw","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHByaW9yaXR5NDUgXGxzZGxvY2tlZDAgUGxhaW4gVGFibGUgNTtcbHNkcHJpb3JpdHk0MCBcbHNkbG9ja2VkMCBHcmlkIFRhYmxlIExpZ2h0O1xsc2Rwcmlvcml0eTQ2IFxsc2Rsb2NrZWQwIEdyaWQgVGFibGUgMSBMaWdodDtcbHNkcHJpb3JpdHk0NyBcbHNkbG9ja2VkMCBHcmlkIFRhYmxlIDI7XGxzZHByaW9yaXR5NDggXGxzZGxvY2tlZDAgR3JpZCBUYWJsZSAzO1xsc2Rwcmlvcml0eTQ5IFxsc2Rsb2NrZWQwIEdyaWQgVGFibGUgNDs=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHByaW9yaXR5NDYgXGxzZGxvY2tlZDAgR3JpZCBUYWJsZSAxIExpZ2h0IEFjY2VudCAzO1xsc2Rwcmlvcml0eTQ3IFxsc2Rsb2NrZWQwIEdyaWQgVGFibGUgMiBBY2NlbnQgMztcbHNkcHJpb3JpdHk0OCBcbHNkbG9ja2VkMCBHcmlkIFRhYmxlIDMgQWNjZW50IDM7XGxzZHByaW9yaXR5NDkgXGxzZGxvY2tlZDAgR3JpZCBUYWJsZSA0IEFjY2VudCAzOw==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHByaW9yaXR5NDYgXGxzZGxvY2tlZDAgTGlzdCBUYWJsZSAxIExpZ2h0IEFjY2VudCAyO1xsc2Rwcmlvcml0eTQ3IFxsc2Rsb2NrZWQwIExpc3QgVGFibGUgMiBBY2NlbnQgMjtcbHNkcHJpb3JpdHk0OCBcbHNkbG9ja2VkMCBMaXN0IFRhYmxlIDMgQWNjZW50IDI7XGxzZHByaW9yaXR5NDkgXGxzZGxvY2tlZDAgTGlzdCBUYWJsZSA0IEFjY2VudCAyOw==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHByaW9yaXR5NDYgXGxzZGxvY2tlZDAgTGlzdCBUYWJsZSAxIExpZ2h0IEFjY2VudCA2O1xsc2Rwcmlvcml0eTQ3IFxsc2Rsb2NrZWQwIExpc3QgVGFibGUgMiBBY2NlbnQgNjtcbHNkcHJpb3JpdHk0OCBcbHNkbG9ja2VkMCBMaXN0IFRhYmxlIDMgQWNjZW50IDY7XGxzZHByaW9yaXR5NDkgXGxzZGxvY2tlZDAgTGlzdCBUYWJsZSA0IEFjY2VudCA2Ow==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHByaW9yaXR5NDYgXGxzZGxvY2tlZDAgTGlzdCBUYWJsZSAxIExpZ2h0O1xsc2Rwcmlvcml0eTQ3IFxsc2Rsb2NrZWQwIExpc3QgVGFibGUgMjtcbHNkcHJpb3JpdHk0OCBcbHNkbG9ja2VkMCBMaXN0IFRhYmxlIDM7XGxzZHByaW9yaXR5NDkgXGxzZGxvY2tlZDAgTGlzdCBUYWJsZSA0O1xsc2Rwcmlvcml0eTUwIFxsc2Rsb2NrZWQwIExpc3QgVGFibGUgNSBEYXJrOw==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHByaW9yaXR5NDcgXGxzZGxvY2tlZDAgR3JpZCBUYWJsZSAyIEFjY2VudCA0O1xsc2Rwcmlvcml0eTQ4IFxsc2Rsb2NrZWQwIEdyaWQgVGFibGUgMyBBY2NlbnQgNDtcbHNkcHJpb3JpdHk0OSBcbHNkbG9ja2VkMCBHcmlkIFRhYmxlIDQgQWNjZW50IDQ7XGxzZHByaW9yaXR5NTAgXGxzZGxvY2tlZDAgR3JpZCBUYWJsZSA1IERhcmsgQWNjZW50IDQ7","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHByaW9yaXR5NDcgXGxzZGxvY2tlZDAgTGlzdCBUYWJsZSAyIEFjY2VudCAzO1xsc2Rwcmlvcml0eTQ4IFxsc2Rsb2NrZWQwIExpc3QgVGFibGUgMyBBY2NlbnQgMztcbHNkcHJpb3JpdHk0OSBcbHNkbG9ja2VkMCBMaXN0IFRhYmxlIDQgQWNjZW50IDM7XGxzZHByaW9yaXR5NTAgXGxzZGxvY2tlZDAgTGlzdCBUYWJsZSA1IERhcmsgQWNjZW50IDM7","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHByaW9yaXR5NDggXGxzZGxvY2tlZDAgR3JpZCBUYWJsZSAzIEFjY2VudCAxO1xsc2Rwcmlvcml0eTQ5IFxsc2Rsb2NrZWQwIEdyaWQgVGFibGUgNCBBY2NlbnQgMTtcbHNkcHJpb3JpdHk1MCBcbHNkbG9ja2VkMCBHcmlkIFRhYmxlIDUgRGFyayBBY2NlbnQgMTtcbHNkcHJpb3JpdHk1MSBcbHNkbG9ja2VkMCBHcmlkIFRhYmxlIDYgQ29sb3JmdWwgQWNjZW50IDE7","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHByaW9yaXR5NDggXGxzZGxvY2tlZDAgR3JpZCBUYWJsZSAzIEFjY2VudCA1O1xsc2Rwcmlvcml0eTQ5IFxsc2Rsb2NrZWQwIEdyaWQgVGFibGUgNCBBY2NlbnQgNTtcbHNkcHJpb3JpdHk1MCBcbHNkbG9ja2VkMCBHcmlkIFRhYmxlIDUgRGFyayBBY2NlbnQgNTtcbHNkcHJpb3JpdHk1MSBcbHNkbG9ja2VkMCBHcmlkIFRhYmxlIDYgQ29sb3JmdWwgQWNjZW50IDU7","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHByaW9yaXR5NDggXGxzZGxvY2tlZDAgTGlzdCBUYWJsZSAzIEFjY2VudCA0O1xsc2Rwcmlvcml0eTQ5IFxsc2Rsb2NrZWQwIExpc3QgVGFibGUgNCBBY2NlbnQgNDtcbHNkcHJpb3JpdHk1MCBcbHNkbG9ja2VkMCBMaXN0IFRhYmxlIDUgRGFyayBBY2NlbnQgNDtcbHNkcHJpb3JpdHk1MSBcbHNkbG9ja2VkMCBMaXN0IFRhYmxlIDYgQ29sb3JmdWwgQWNjZW50IDQ7","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHByaW9yaXR5NDkgXGxzZGxvY2tlZDAgR3JpZCBUYWJsZSA0IEFjY2VudCAyO1xsc2Rwcmlvcml0eTUwIFxsc2Rsb2NrZWQwIEdyaWQgVGFibGUgNSBEYXJrIEFjY2VudCAyO1xsc2Rwcmlvcml0eTUxIFxsc2Rsb2NrZWQwIEdyaWQgVGFibGUgNiBDb2xvcmZ1bCBBY2NlbnQgMjtcbHNkcHJpb3JpdHk1MiBcbHNkbG9ja2VkMCBHcmlkIFRhYmxlIDcgQ29sb3JmdWwgQWNjZW50IDI7","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHByaW9yaXR5NDkgXGxzZGxvY2tlZDAgR3JpZCBUYWJsZSA0IEFjY2VudCA2O1xsc2Rwcmlvcml0eTUwIFxsc2Rsb2NrZWQwIEdyaWQgVGFibGUgNSBEYXJrIEFjY2VudCA2O1xsc2Rwcmlvcml0eTUxIFxsc2Rsb2NrZWQwIEdyaWQgVGFibGUgNiBDb2xvcmZ1bCBBY2NlbnQgNjtcbHNkcHJpb3JpdHk1MiBcbHNkbG9ja2VkMCBHcmlkIFRhYmxlIDcgQ29sb3JmdWwgQWNjZW50IDY7","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHByaW9yaXR5NDkgXGxzZGxvY2tlZDAgTGlzdCBUYWJsZSA0IEFjY2VudCAxO1xsc2Rwcmlvcml0eTUwIFxsc2Rsb2NrZWQwIExpc3QgVGFibGUgNSBEYXJrIEFjY2VudCAxO1xsc2Rwcmlvcml0eTUxIFxsc2Rsb2NrZWQwIExpc3QgVGFibGUgNiBDb2xvcmZ1bCBBY2NlbnQgMTtcbHNkcHJpb3JpdHk1MiBcbHNkbG9ja2VkMCBMaXN0IFRhYmxlIDcgQ29sb3JmdWwgQWNjZW50IDE7","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHByaW9yaXR5NDkgXGxzZGxvY2tlZDAgTGlzdCBUYWJsZSA0IEFjY2VudCA1O1xsc2Rwcmlvcml0eTUwIFxsc2Rsb2NrZWQwIExpc3QgVGFibGUgNSBEYXJrIEFjY2VudCA1O1xsc2Rwcmlvcml0eTUxIFxsc2Rsb2NrZWQwIExpc3QgVGFibGUgNiBDb2xvcmZ1bCBBY2NlbnQgNTtcbHNkcHJpb3JpdHk1MiBcbHNkbG9ja2VkMCBMaXN0IFRhYmxlIDcgQ29sb3JmdWwgQWNjZW50IDU7","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHByaW9yaXR5NTAgXGxzZGxvY2tlZDAgR3JpZCBUYWJsZSA1IERhcmsgQWNjZW50IDM7XGxzZHByaW9yaXR5NTEgXGxzZGxvY2tlZDAgR3JpZCBUYWJsZSA2IENvbG9yZnVsIEFjY2VudCAzO1xsc2Rwcmlvcml0eTUyIFxsc2Rsb2NrZWQwIEdyaWQgVGFibGUgNyBDb2xvcmZ1bCBBY2NlbnQgMztcbHNkcHJpb3JpdHk0NiBcbHNkbG9ja2VkMCBHcmlkIFRhYmxlIDEgTGlnaHQgQWNjZW50IDQ7","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHByaW9yaXR5NTAgXGxzZGxvY2tlZDAgR3JpZCBUYWJsZSA1IERhcms7XGxzZHByaW9yaXR5NTEgXGxzZGxvY2tlZDAgR3JpZCBUYWJsZSA2IENvbG9yZnVsO1xsc2Rwcmlvcml0eTUyIFxsc2Rsb2NrZWQwIEdyaWQgVGFibGUgNyBDb2xvcmZ1bDtcbHNkcHJpb3JpdHk0NiBcbHNkbG9ja2VkMCBHcmlkIFRhYmxlIDEgTGlnaHQgQWNjZW50IDE7XGxzZHByaW9yaXR5NDcgXGxzZGxvY2tlZDAgR3JpZCBUYWJsZSAyIEFjY2VudCAxOw==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHByaW9yaXR5NTAgXGxzZGxvY2tlZDAgTGlzdCBUYWJsZSA1IERhcmsgQWNjZW50IDI7XGxzZHByaW9yaXR5NTEgXGxzZGxvY2tlZDAgTGlzdCBUYWJsZSA2IENvbG9yZnVsIEFjY2VudCAyO1xsc2Rwcmlvcml0eTUyIFxsc2Rsb2NrZWQwIExpc3QgVGFibGUgNyBDb2xvcmZ1bCBBY2NlbnQgMjtcbHNkcHJpb3JpdHk0NiBcbHNkbG9ja2VkMCBMaXN0IFRhYmxlIDEgTGlnaHQgQWNjZW50IDM7","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHByaW9yaXR5NTAgXGxzZGxvY2tlZDAgTGlzdCBUYWJsZSA1IERhcmsgQWNjZW50IDY7XGxzZHByaW9yaXR5NTEgXGxzZGxvY2tlZDAgTGlzdCBUYWJsZSA2IENvbG9yZnVsIEFjY2VudCA2O1xsc2Rwcmlvcml0eTUyIFxsc2Rsb2NrZWQwIExpc3QgVGFibGUgNyBDb2xvcmZ1bCBBY2NlbnQgNjtcbHNkc2VtaWhpZGRlbjEgXGxzZHVuaGlkZXVzZWQxIFxsc2Rsb2NrZWQwIE1lbnRpb247fX17XCpcZGF0YXN0b3JlIDAxMDUwMDAwMDIwMDAwMDA=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHByaW9yaXR5NTEgXGxzZGxvY2tlZDAgR3JpZCBUYWJsZSA2IENvbG9yZnVsIEFjY2VudCA0O1xsc2Rwcmlvcml0eTUyIFxsc2Rsb2NrZWQwIEdyaWQgVGFibGUgNyBDb2xvcmZ1bCBBY2NlbnQgNDtcbHNkcHJpb3JpdHk0NiBcbHNkbG9ja2VkMCBHcmlkIFRhYmxlIDEgTGlnaHQgQWNjZW50IDU7XGxzZHByaW9yaXR5NDcgXGxzZGxvY2tlZDAgR3JpZCBUYWJsZSAyIEFjY2VudCA1Ow==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHByaW9yaXR5NTEgXGxzZGxvY2tlZDAgTGlzdCBUYWJsZSA2IENvbG9yZnVsIEFjY2VudCAzO1xsc2Rwcmlvcml0eTUyIFxsc2Rsb2NrZWQwIExpc3QgVGFibGUgNyBDb2xvcmZ1bCBBY2NlbnQgMztcbHNkcHJpb3JpdHk0NiBcbHNkbG9ja2VkMCBMaXN0IFRhYmxlIDEgTGlnaHQgQWNjZW50IDQ7XGxzZHByaW9yaXR5NDcgXGxzZGxvY2tlZDAgTGlzdCBUYWJsZSAyIEFjY2VudCA0Ow==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHByaW9yaXR5NTEgXGxzZGxvY2tlZDAgTGlzdCBUYWJsZSA2IENvbG9yZnVsO1xsc2Rwcmlvcml0eTUyIFxsc2Rsb2NrZWQwIExpc3QgVGFibGUgNyBDb2xvcmZ1bDtcbHNkcHJpb3JpdHk0NiBcbHNkbG9ja2VkMCBMaXN0IFRhYmxlIDEgTGlnaHQgQWNjZW50IDE7XGxzZHByaW9yaXR5NDcgXGxzZGxvY2tlZDAgTGlzdCBUYWJsZSAyIEFjY2VudCAxO1xsc2Rwcmlvcml0eTQ4IFxsc2Rsb2NrZWQwIExpc3QgVGFibGUgMyBBY2NlbnQgMTs=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHByaW9yaXR5NTIgXGxzZGxvY2tlZDAgR3JpZCBUYWJsZSA3IENvbG9yZnVsIEFjY2VudCAxO1xsc2Rwcmlvcml0eTQ2IFxsc2Rsb2NrZWQwIEdyaWQgVGFibGUgMSBMaWdodCBBY2NlbnQgMjtcbHNkcHJpb3JpdHk0NyBcbHNkbG9ja2VkMCBHcmlkIFRhYmxlIDIgQWNjZW50IDI7XGxzZHByaW9yaXR5NDggXGxzZGxvY2tlZDAgR3JpZCBUYWJsZSAzIEFjY2VudCAyOw==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHByaW9yaXR5NTIgXGxzZGxvY2tlZDAgR3JpZCBUYWJsZSA3IENvbG9yZnVsIEFjY2VudCA1O1xsc2Rwcmlvcml0eTQ2IFxsc2Rsb2NrZWQwIEdyaWQgVGFibGUgMSBMaWdodCBBY2NlbnQgNjtcbHNkcHJpb3JpdHk0NyBcbHNkbG9ja2VkMCBHcmlkIFRhYmxlIDIgQWNjZW50IDY7XGxzZHByaW9yaXR5NDggXGxzZGxvY2tlZDAgR3JpZCBUYWJsZSAzIEFjY2VudCA2Ow==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHByaW9yaXR5NTIgXGxzZGxvY2tlZDAgTGlzdCBUYWJsZSA3IENvbG9yZnVsIEFjY2VudCA0O1xsc2Rwcmlvcml0eTQ2IFxsc2Rsb2NrZWQwIExpc3QgVGFibGUgMSBMaWdodCBBY2NlbnQgNTtcbHNkcHJpb3JpdHk0NyBcbHNkbG9ja2VkMCBMaXN0IFRhYmxlIDIgQWNjZW50IDU7XGxzZHByaW9yaXR5NDggXGxzZGxvY2tlZDAgTGlzdCBUYWJsZSAzIEFjY2VudCA1Ow==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHByaW9yaXR5NjEgXGxzZGxvY2tlZDAgTGlnaHQgTGlzdCBBY2NlbnQgMTtcbHNkcHJpb3JpdHk2MiBcbHNkbG9ja2VkMCBMaWdodCBHcmlkIEFjY2VudCAxO1xsc2Rwcmlvcml0eTYzIFxsc2Rsb2NrZWQwIE1lZGl1bSBTaGFkaW5nIDEgQWNjZW50IDE7XGxzZHByaW9yaXR5NjQgXGxzZGxvY2tlZDAgTWVkaXVtIFNoYWRpbmcgMiBBY2NlbnQgMTtcbHNkcHJpb3JpdHk2NSBcbHNkbG9ja2VkMCBNZWRpdW0gTGlzdCAxIEFjY2VudCAxOw==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHByaW9yaXR5NjMgXGxzZGxvY2tlZDAgTWVkaXVtIFNoYWRpbmcgMSBBY2NlbnQgMjtcbHNkcHJpb3JpdHk2NCBcbHNkbG9ja2VkMCBNZWRpdW0gU2hhZGluZyAyIEFjY2VudCAyO1xsc2Rwcmlvcml0eTY1IFxsc2Rsb2NrZWQwIE1lZGl1bSBMaXN0IDEgQWNjZW50IDI7XGxzZHByaW9yaXR5NjYgXGxzZGxvY2tlZDAgTWVkaXVtIExpc3QgMiBBY2NlbnQgMjs=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHByaW9yaXR5NjMgXGxzZGxvY2tlZDAgTWVkaXVtIFNoYWRpbmcgMSBBY2NlbnQgMztcbHNkcHJpb3JpdHk2NCBcbHNkbG9ja2VkMCBNZWRpdW0gU2hhZGluZyAyIEFjY2VudCAzO1xsc2Rwcmlvcml0eTY1IFxsc2Rsb2NrZWQwIE1lZGl1bSBMaXN0IDEgQWNjZW50IDM7XGxzZHByaW9yaXR5NjYgXGxzZGxvY2tlZDAgTWVkaXVtIExpc3QgMiBBY2NlbnQgMzs=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHByaW9yaXR5NjMgXGxzZGxvY2tlZDAgTWVkaXVtIFNoYWRpbmcgMSBBY2NlbnQgNDtcbHNkcHJpb3JpdHk2NCBcbHNkbG9ja2VkMCBNZWRpdW0gU2hhZGluZyAyIEFjY2VudCA0O1xsc2Rwcmlvcml0eTY1IFxsc2Rsb2NrZWQwIE1lZGl1bSBMaXN0IDEgQWNjZW50IDQ7XGxzZHByaW9yaXR5NjYgXGxzZGxvY2tlZDAgTWVkaXVtIExpc3QgMiBBY2NlbnQgNDs=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHByaW9yaXR5NjMgXGxzZGxvY2tlZDAgTWVkaXVtIFNoYWRpbmcgMSBBY2NlbnQgNTtcbHNkcHJpb3JpdHk2NCBcbHNkbG9ja2VkMCBNZWRpdW0gU2hhZGluZyAyIEFjY2VudCA1O1xsc2Rwcmlvcml0eTY1IFxsc2Rsb2NrZWQwIE1lZGl1bSBMaXN0IDEgQWNjZW50IDU7XGxzZHByaW9yaXR5NjYgXGxzZGxvY2tlZDAgTWVkaXVtIExpc3QgMiBBY2NlbnQgNTs=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHByaW9yaXR5NjMgXGxzZGxvY2tlZDAgTWVkaXVtIFNoYWRpbmcgMSBBY2NlbnQgNjtcbHNkcHJpb3JpdHk2NCBcbHNkbG9ja2VkMCBNZWRpdW0gU2hhZGluZyAyIEFjY2VudCA2O1xsc2Rwcmlvcml0eTY1IFxsc2Rsb2NrZWQwIE1lZGl1bSBMaXN0IDEgQWNjZW50IDY7XGxzZHByaW9yaXR5NjYgXGxzZGxvY2tlZDAgTWVkaXVtIExpc3QgMiBBY2NlbnQgNjs=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHByaW9yaXR5NjMgXGxzZGxvY2tlZDAgTWVkaXVtIFNoYWRpbmcgMTtcbHNkcHJpb3JpdHk2NCBcbHNkbG9ja2VkMCBNZWRpdW0gU2hhZGluZyAyO1xsc2Rwcmlvcml0eTY1IFxsc2Rsb2NrZWQwIE1lZGl1bSBMaXN0IDE7XGxzZHByaW9yaXR5NjYgXGxzZGxvY2tlZDAgTWVkaXVtIExpc3QgMjtcbHNkcHJpb3JpdHk2NyBcbHNkbG9ja2VkMCBNZWRpdW0gR3JpZCAxO1xsc2Rwcmlvcml0eTY4IFxsc2Rsb2NrZWQwIE1lZGl1bSBHcmlkIDI7","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHByaW9yaXR5NjcgXGxzZGxvY2tlZDAgTWVkaXVtIEdyaWQgMSBBY2NlbnQgMTtcbHNkcHJpb3JpdHk2OCBcbHNkbG9ja2VkMCBNZWRpdW0gR3JpZCAyIEFjY2VudCAxO1xsc2Rwcmlvcml0eTY5IFxsc2Rsb2NrZWQwIE1lZGl1bSBHcmlkIDMgQWNjZW50IDE7XGxzZHByaW9yaXR5NzAgXGxzZGxvY2tlZDAgRGFyayBMaXN0IEFjY2VudCAxO1xsc2Rwcmlvcml0eTcxIFxsc2Rsb2NrZWQwIENvbG9yZnVsIFNoYWRpbmcgQWNjZW50IDE7","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHByaW9yaXR5NjcgXGxzZGxvY2tlZDAgTWVkaXVtIEdyaWQgMSBBY2NlbnQgMjtcbHNkcHJpb3JpdHk2OCBcbHNkbG9ja2VkMCBNZWRpdW0gR3JpZCAyIEFjY2VudCAyO1xsc2Rwcmlvcml0eTY5IFxsc2Rsb2NrZWQwIE1lZGl1bSBHcmlkIDMgQWNjZW50IDI7XGxzZHByaW9yaXR5NzAgXGxzZGxvY2tlZDAgRGFyayBMaXN0IEFjY2VudCAyO1xsc2Rwcmlvcml0eTcxIFxsc2Rsb2NrZWQwIENvbG9yZnVsIFNoYWRpbmcgQWNjZW50IDI7","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHByaW9yaXR5NjcgXGxzZGxvY2tlZDAgTWVkaXVtIEdyaWQgMSBBY2NlbnQgMztcbHNkcHJpb3JpdHk2OCBcbHNkbG9ja2VkMCBNZWRpdW0gR3JpZCAyIEFjY2VudCAzO1xsc2Rwcmlvcml0eTY5IFxsc2Rsb2NrZWQwIE1lZGl1bSBHcmlkIDMgQWNjZW50IDM7XGxzZHByaW9yaXR5NzAgXGxzZGxvY2tlZDAgRGFyayBMaXN0IEFjY2VudCAzO1xsc2Rwcmlvcml0eTcxIFxsc2Rsb2NrZWQwIENvbG9yZnVsIFNoYWRpbmcgQWNjZW50IDM7","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHByaW9yaXR5NjcgXGxzZGxvY2tlZDAgTWVkaXVtIEdyaWQgMSBBY2NlbnQgNDtcbHNkcHJpb3JpdHk2OCBcbHNkbG9ja2VkMCBNZWRpdW0gR3JpZCAyIEFjY2VudCA0O1xsc2Rwcmlvcml0eTY5IFxsc2Rsb2NrZWQwIE1lZGl1bSBHcmlkIDMgQWNjZW50IDQ7XGxzZHByaW9yaXR5NzAgXGxzZGxvY2tlZDAgRGFyayBMaXN0IEFjY2VudCA0O1xsc2Rwcmlvcml0eTcxIFxsc2Rsb2NrZWQwIENvbG9yZnVsIFNoYWRpbmcgQWNjZW50IDQ7","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHByaW9yaXR5NjcgXGxzZGxvY2tlZDAgTWVkaXVtIEdyaWQgMSBBY2NlbnQgNTtcbHNkcHJpb3JpdHk2OCBcbHNkbG9ja2VkMCBNZWRpdW0gR3JpZCAyIEFjY2VudCA1O1xsc2Rwcmlvcml0eTY5IFxsc2Rsb2NrZWQwIE1lZGl1bSBHcmlkIDMgQWNjZW50IDU7XGxzZHByaW9yaXR5NzAgXGxzZGxvY2tlZDAgRGFyayBMaXN0IEFjY2VudCA1O1xsc2Rwcmlvcml0eTcxIFxsc2Rsb2NrZWQwIENvbG9yZnVsIFNoYWRpbmcgQWNjZW50IDU7","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHByaW9yaXR5NjcgXGxzZGxvY2tlZDAgTWVkaXVtIEdyaWQgMSBBY2NlbnQgNjtcbHNkcHJpb3JpdHk2OCBcbHNkbG9ja2VkMCBNZWRpdW0gR3JpZCAyIEFjY2VudCA2O1xsc2Rwcmlvcml0eTY5IFxsc2Rsb2NrZWQwIE1lZGl1bSBHcmlkIDMgQWNjZW50IDY7XGxzZHByaW9yaXR5NzAgXGxzZGxvY2tlZDAgRGFyayBMaXN0IEFjY2VudCA2O1xsc2Rwcmlvcml0eTcxIFxsc2Rsb2NrZWQwIENvbG9yZnVsIFNoYWRpbmcgQWNjZW50IDY7","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHByaW9yaXR5NjkgXGxzZGxvY2tlZDAgTWVkaXVtIEdyaWQgMztcbHNkcHJpb3JpdHk3MCBcbHNkbG9ja2VkMCBEYXJrIExpc3Q7XGxzZHByaW9yaXR5NzEgXGxzZGxvY2tlZDAgQ29sb3JmdWwgU2hhZGluZztcbHNkcHJpb3JpdHk3MiBcbHNkbG9ja2VkMCBDb2xvcmZ1bCBMaXN0O1xsc2Rwcmlvcml0eTczIFxsc2Rsb2NrZWQwIENvbG9yZnVsIEdyaWQ7XGxzZHByaW9yaXR5NjAgXGxzZGxvY2tlZDAgTGlnaHQgU2hhZGluZyBBY2NlbnQgMTs=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHByaW9yaXR5NzIgXGxzZGxvY2tlZDAgQ29sb3JmdWwgTGlzdCBBY2NlbnQgMTtcbHNkcHJpb3JpdHk3MyBcbHNkbG9ja2VkMCBDb2xvcmZ1bCBHcmlkIEFjY2VudCAxO1xsc2Rwcmlvcml0eTYwIFxsc2Rsb2NrZWQwIExpZ2h0IFNoYWRpbmcgQWNjZW50IDI7XGxzZHByaW9yaXR5NjEgXGxzZGxvY2tlZDAgTGlnaHQgTGlzdCBBY2NlbnQgMjtcbHNkcHJpb3JpdHk2MiBcbHNkbG9ja2VkMCBMaWdodCBHcmlkIEFjY2VudCAyOw==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHByaW9yaXR5NzIgXGxzZGxvY2tlZDAgQ29sb3JmdWwgTGlzdCBBY2NlbnQgMjtcbHNkcHJpb3JpdHk3MyBcbHNkbG9ja2VkMCBDb2xvcmZ1bCBHcmlkIEFjY2VudCAyO1xsc2Rwcmlvcml0eTYwIFxsc2Rsb2NrZWQwIExpZ2h0IFNoYWRpbmcgQWNjZW50IDM7XGxzZHByaW9yaXR5NjEgXGxzZGxvY2tlZDAgTGlnaHQgTGlzdCBBY2NlbnQgMztcbHNkcHJpb3JpdHk2MiBcbHNkbG9ja2VkMCBMaWdodCBHcmlkIEFjY2VudCAzOw==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHByaW9yaXR5NzIgXGxzZGxvY2tlZDAgQ29sb3JmdWwgTGlzdCBBY2NlbnQgMztcbHNkcHJpb3JpdHk3MyBcbHNkbG9ja2VkMCBDb2xvcmZ1bCBHcmlkIEFjY2VudCAzO1xsc2Rwcmlvcml0eTYwIFxsc2Rsb2NrZWQwIExpZ2h0IFNoYWRpbmcgQWNjZW50IDQ7XGxzZHByaW9yaXR5NjEgXGxzZGxvY2tlZDAgTGlnaHQgTGlzdCBBY2NlbnQgNDtcbHNkcHJpb3JpdHk2MiBcbHNkbG9ja2VkMCBMaWdodCBHcmlkIEFjY2VudCA0Ow==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHByaW9yaXR5NzIgXGxzZGxvY2tlZDAgQ29sb3JmdWwgTGlzdCBBY2NlbnQgNDtcbHNkcHJpb3JpdHk3MyBcbHNkbG9ja2VkMCBDb2xvcmZ1bCBHcmlkIEFjY2VudCA0O1xsc2Rwcmlvcml0eTYwIFxsc2Rsb2NrZWQwIExpZ2h0IFNoYWRpbmcgQWNjZW50IDU7XGxzZHByaW9yaXR5NjEgXGxzZGxvY2tlZDAgTGlnaHQgTGlzdCBBY2NlbnQgNTtcbHNkcHJpb3JpdHk2MiBcbHNkbG9ja2VkMCBMaWdodCBHcmlkIEFjY2VudCA1Ow==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHByaW9yaXR5NzIgXGxzZGxvY2tlZDAgQ29sb3JmdWwgTGlzdCBBY2NlbnQgNTtcbHNkcHJpb3JpdHk3MyBcbHNkbG9ja2VkMCBDb2xvcmZ1bCBHcmlkIEFjY2VudCA1O1xsc2Rwcmlvcml0eTYwIFxsc2Rsb2NrZWQwIExpZ2h0IFNoYWRpbmcgQWNjZW50IDY7XGxzZHByaW9yaXR5NjEgXGxzZGxvY2tlZDAgTGlnaHQgTGlzdCBBY2NlbnQgNjtcbHNkcHJpb3JpdHk2MiBcbHNkbG9ja2VkMCBMaWdodCBHcmlkIEFjY2VudCA2Ow==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHByaW9yaXR5NzIgXGxzZGxvY2tlZDAgQ29sb3JmdWwgTGlzdCBBY2NlbnQgNjtcbHNkcHJpb3JpdHk3MyBcbHNkbG9ja2VkMCBDb2xvcmZ1bCBHcmlkIEFjY2VudCA2O1xsc2RxZm9ybWF0MSBcbHNkcHJpb3JpdHkxOSBcbHNkbG9ja2VkMCBTdWJ0bGUgRW1waGFzaXM7XGxzZHFmb3JtYXQxIFxsc2Rwcmlvcml0eTIxIFxsc2Rsb2NrZWQwIEludGVuc2UgRW1waGFzaXM7","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHFmb3JtYXQxIFxsc2Rwcmlvcml0eTIwIFxsc2Rsb2NrZWQwIEVtcGhhc2lzO1xsc2RzZW1paGlkZGVuMSBcbHNkdW5oaWRldXNlZDEgXGxzZGxvY2tlZDAgRG9jdW1lbnQgTWFwO1xsc2RzZW1paGlkZGVuMSBcbHNkdW5oaWRldXNlZDEgXGxzZGxvY2tlZDAgUGxhaW4gVGV4dDtcbHNkc2VtaWhpZGRlbjEgXGxzZHVuaGlkZXVzZWQxIFxsc2Rsb2NrZWQwIEUtbWFpbCBTaWduYXR1cmU7","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHFmb3JtYXQxIFxsc2Rwcmlvcml0eTMxIFxsc2Rsb2NrZWQwIFN1YnRsZSBSZWZlcmVuY2U7XGxzZHFmb3JtYXQxIFxsc2Rwcmlvcml0eTMyIFxsc2Rsb2NrZWQwIEludGVuc2UgUmVmZXJlbmNlO1xsc2RxZm9ybWF0MSBcbHNkcHJpb3JpdHkzMyBcbHNkbG9ja2VkMCBCb29rIFRpdGxlO1xsc2RzZW1paGlkZGVuMSBcbHNkdW5oaWRldXNlZDEgXGxzZHByaW9yaXR5MzcgXGxzZGxvY2tlZDAgQmlibGlvZ3JhcGh5Ow==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHNlbWloaWRkZW4xIFxsc2Rsb2NrZWQwIFBsYWNlaG9sZGVyIFRleHQ7XGxzZHFmb3JtYXQxIFxsc2Rwcmlvcml0eTEgXGxzZGxvY2tlZDAgTm8gU3BhY2luZztcbHNkcHJpb3JpdHk2MCBcbHNkbG9ja2VkMCBMaWdodCBTaGFkaW5nO1xsc2Rwcmlvcml0eTYxIFxsc2Rsb2NrZWQwIExpZ2h0IExpc3Q7XGxzZHByaW9yaXR5NjIgXGxzZGxvY2tlZDAgTGlnaHQgR3JpZDs=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHNlbWloaWRkZW4xIFxsc2Rsb2NrZWQwIFJldmlzaW9uO1xsc2RxZm9ybWF0MSBcbHNkcHJpb3JpdHkzNCBcbHNkbG9ja2VkMCBMaXN0IFBhcmFncmFwaDtcbHNkcWZvcm1hdDEgXGxzZHByaW9yaXR5MjkgXGxzZGxvY2tlZDAgUXVvdGU7XGxzZHFmb3JtYXQxIFxsc2Rwcmlvcml0eTMwIFxsc2Rsb2NrZWQwIEludGVuc2UgUXVvdGU7XGxzZHByaW9yaXR5NjYgXGxzZGxvY2tlZDAgTWVkaXVtIExpc3QgMiBBY2NlbnQgMTs=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHNlbWloaWRkZW4xIFxsc2R1bmhpZGV1c2VkMSBcbHNkbG9ja2VkMCBCbG9jayBUZXh0O1xsc2RzZW1paGlkZGVuMSBcbHNkdW5oaWRldXNlZDEgXGxzZGxvY2tlZDAgSHlwZXJsaW5rO1xsc2RzZW1paGlkZGVuMSBcbHNkdW5oaWRldXNlZDEgXGxzZGxvY2tlZDAgRm9sbG93ZWRIeXBlcmxpbms7XGxzZHFmb3JtYXQxIFxsc2Rwcmlvcml0eTIyIFxsc2Rsb2NrZWQwIFN0cm9uZzs=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHNlbWloaWRkZW4xIFxsc2R1bmhpZGV1c2VkMSBcbHNkbG9ja2VkMCBCb2R5IFRleHQgMjtcbHNkc2VtaWhpZGRlbjEgXGxzZHVuaGlkZXVzZWQxIFxsc2Rsb2NrZWQwIEJvZHkgVGV4dCAzO1xsc2RzZW1paGlkZGVuMSBcbHNkdW5oaWRldXNlZDEgXGxzZGxvY2tlZDAgQm9keSBUZXh0IEluZGVudCAyO1xsc2RzZW1paGlkZGVuMSBcbHNkdW5oaWRldXNlZDEgXGxzZGxvY2tlZDAgQm9keSBUZXh0IEluZGVudCAzOw==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHNlbWloaWRkZW4xIFxsc2R1bmhpZGV1c2VkMSBcbHNkbG9ja2VkMCBEYXRlO1xsc2RzZW1paGlkZGVuMSBcbHNkdW5oaWRldXNlZDEgXGxzZGxvY2tlZDAgQm9keSBUZXh0IEZpcnN0IEluZGVudDtcbHNkc2VtaWhpZGRlbjEgXGxzZHVuaGlkZXVzZWQxIFxsc2Rsb2NrZWQwIEJvZHkgVGV4dCBGaXJzdCBJbmRlbnQgMjtcbHNkc2VtaWhpZGRlbjEgXGxzZHVuaGlkZXVzZWQxIFxsc2Rsb2NrZWQwIE5vdGUgSGVhZGluZzs=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHNlbWloaWRkZW4xIFxsc2R1bmhpZGV1c2VkMSBcbHNkbG9ja2VkMCBlbnZlbG9wZSBhZGRyZXNzO1xsc2RzZW1paGlkZGVuMSBcbHNkdW5oaWRldXNlZDEgXGxzZGxvY2tlZDAgZW52ZWxvcGUgcmV0dXJuO1xsc2RzZW1paGlkZGVuMSBcbHNkdW5oaWRldXNlZDEgXGxzZGxvY2tlZDAgZm9vdG5vdGUgcmVmZXJlbmNlO1xsc2RzZW1paGlkZGVuMSBcbHNkdW5oaWRldXNlZDEgXGxzZGxvY2tlZDAgYW5ub3RhdGlvbiByZWZlcmVuY2U7","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHNlbWloaWRkZW4xIFxsc2R1bmhpZGV1c2VkMSBcbHNkbG9ja2VkMCBmb290bm90ZSB0ZXh0O1xsc2RzZW1paGlkZGVuMSBcbHNkdW5oaWRldXNlZDEgXGxzZGxvY2tlZDAgYW5ub3RhdGlvbiB0ZXh0O1xsc2RzZW1paGlkZGVuMSBcbHNkdW5oaWRldXNlZDEgXGxzZGxvY2tlZDAgaGVhZGVyO1xsc2RzZW1paGlkZGVuMSBcbHNkdW5oaWRldXNlZDEgXGxzZGxvY2tlZDAgZm9vdGVyOw==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHNlbWloaWRkZW4xIFxsc2R1bmhpZGV1c2VkMSBcbHNkbG9ja2VkMCBIVE1MIEFkZHJlc3M7XGxzZHNlbWloaWRkZW4xIFxsc2R1bmhpZGV1c2VkMSBcbHNkbG9ja2VkMCBIVE1MIENpdGU7XGxzZHNlbWloaWRkZW4xIFxsc2R1bmhpZGV1c2VkMSBcbHNkbG9ja2VkMCBIVE1MIENvZGU7XGxzZHNlbWloaWRkZW4xIFxsc2R1bmhpZGV1c2VkMSBcbHNkbG9ja2VkMCBIVE1MIERlZmluaXRpb247","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHNlbWloaWRkZW4xIFxsc2R1bmhpZGV1c2VkMSBcbHNkbG9ja2VkMCBIVE1MIEtleWJvYXJkO1xsc2RzZW1paGlkZGVuMSBcbHNkdW5oaWRldXNlZDEgXGxzZGxvY2tlZDAgSFRNTCBQcmVmb3JtYXR0ZWQ7XGxzZHNlbWloaWRkZW4xIFxsc2R1bmhpZGV1c2VkMSBcbHNkbG9ja2VkMCBIVE1MIFNhbXBsZTtcbHNkc2VtaWhpZGRlbjEgXGxzZHVuaGlkZXVzZWQxIFxsc2Rsb2NrZWQwIEhUTUwgVHlwZXdyaXRlcjs=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHNlbWloaWRkZW4xIFxsc2R1bmhpZGV1c2VkMSBcbHNkbG9ja2VkMCBIVE1MIFRvcCBvZiBGb3JtO1xsc2RzZW1paGlkZGVuMSBcbHNkdW5oaWRldXNlZDEgXGxzZGxvY2tlZDAgSFRNTCBCb3R0b20gb2YgRm9ybTtcbHNkc2VtaWhpZGRlbjEgXGxzZHVuaGlkZXVzZWQxIFxsc2Rsb2NrZWQwIE5vcm1hbCAoV2ViKTtcbHNkc2VtaWhpZGRlbjEgXGxzZHVuaGlkZXVzZWQxIFxsc2Rsb2NrZWQwIEhUTUwgQWNyb255bTs=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHNlbWloaWRkZW4xIFxsc2R1bmhpZGV1c2VkMSBcbHNkbG9ja2VkMCBIVE1MIFZhcmlhYmxlO1xsc2RzZW1paGlkZGVuMSBcbHNkdW5oaWRldXNlZDEgXGxzZGxvY2tlZDAgYW5ub3RhdGlvbiBzdWJqZWN0O1xsc2RzZW1paGlkZGVuMSBcbHNkdW5oaWRldXNlZDEgXGxzZGxvY2tlZDAgTm8gTGlzdDtcbHNkc2VtaWhpZGRlbjEgXGxzZHVuaGlkZXVzZWQxIFxsc2Rsb2NrZWQwIE91dGxpbmUgTGlzdCAxOw==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHNlbWloaWRkZW4xIFxsc2R1bmhpZGV1c2VkMSBcbHNkbG9ja2VkMCBpbmRleCAyO1xsc2RzZW1paGlkZGVuMSBcbHNkdW5oaWRldXNlZDEgXGxzZGxvY2tlZDAgaW5kZXggMztcbHNkc2VtaWhpZGRlbjEgXGxzZHVuaGlkZXVzZWQxIFxsc2Rsb2NrZWQwIGluZGV4IDQ7XGxzZHNlbWloaWRkZW4xIFxsc2R1bmhpZGV1c2VkMSBcbHNkbG9ja2VkMCBpbmRleCA1Ow==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHNlbWloaWRkZW4xIFxsc2R1bmhpZGV1c2VkMSBcbHNkbG9ja2VkMCBpbmRleCA2O1xsc2RzZW1paGlkZGVuMSBcbHNkdW5oaWRldXNlZDEgXGxzZGxvY2tlZDAgaW5kZXggNztcbHNkc2VtaWhpZGRlbjEgXGxzZHVuaGlkZXVzZWQxIFxsc2Rsb2NrZWQwIGluZGV4IDg7XGxzZHNlbWloaWRkZW4xIFxsc2R1bmhpZGV1c2VkMSBcbHNkbG9ja2VkMCBpbmRleCA5Ow==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHNlbWloaWRkZW4xIFxsc2R1bmhpZGV1c2VkMSBcbHNkbG9ja2VkMCBpbmRleCBoZWFkaW5nO1xsc2RzZW1paGlkZGVuMSBcbHNkdW5oaWRldXNlZDEgXGxzZHFmb3JtYXQxIFxsc2Rwcmlvcml0eTM1IFxsc2Rsb2NrZWQwIGNhcHRpb247XGxzZHNlbWloaWRkZW4xIFxsc2R1bmhpZGV1c2VkMSBcbHNkbG9ja2VkMCB0YWJsZSBvZiBmaWd1cmVzOw==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHNlbWloaWRkZW4xIFxsc2R1bmhpZGV1c2VkMSBcbHNkbG9ja2VkMCBsaW5lIG51bWJlcjtcbHNkc2VtaWhpZGRlbjEgXGxzZHVuaGlkZXVzZWQxIFxsc2Rsb2NrZWQwIHBhZ2UgbnVtYmVyO1xsc2RzZW1paGlkZGVuMSBcbHNkdW5oaWRldXNlZDEgXGxzZGxvY2tlZDAgZW5kbm90ZSByZWZlcmVuY2U7XGxzZHNlbWloaWRkZW4xIFxsc2R1bmhpZGV1c2VkMSBcbHNkbG9ja2VkMCBlbmRub3RlIHRleHQ7","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHNlbWloaWRkZW4xIFxsc2R1bmhpZGV1c2VkMSBcbHNkbG9ja2VkMCBMaXN0IDQ7XGxzZHNlbWloaWRkZW4xIFxsc2R1bmhpZGV1c2VkMSBcbHNkbG9ja2VkMCBMaXN0IDU7XGxzZHNlbWloaWRkZW4xIFxsc2R1bmhpZGV1c2VkMSBcbHNkbG9ja2VkMCBMaXN0IEJ1bGxldCAyO1xsc2RzZW1paGlkZGVuMSBcbHNkdW5oaWRldXNlZDEgXGxzZGxvY2tlZDAgTGlzdCBCdWxsZXQgMzs=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHNlbWloaWRkZW4xIFxsc2R1bmhpZGV1c2VkMSBcbHNkbG9ja2VkMCBMaXN0IEJ1bGxldCA0O1xsc2RzZW1paGlkZGVuMSBcbHNkdW5oaWRldXNlZDEgXGxzZGxvY2tlZDAgTGlzdCBCdWxsZXQgNTtcbHNkc2VtaWhpZGRlbjEgXGxzZHVuaGlkZXVzZWQxIFxsc2Rsb2NrZWQwIExpc3QgTnVtYmVyIDI7XGxzZHNlbWloaWRkZW4xIFxsc2R1bmhpZGV1c2VkMSBcbHNkbG9ja2VkMCBMaXN0IE51bWJlciAzOw==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHNlbWloaWRkZW4xIFxsc2R1bmhpZGV1c2VkMSBcbHNkbG9ja2VkMCBMaXN0IEJ1bGxldDtcbHNkc2VtaWhpZGRlbjEgXGxzZHVuaGlkZXVzZWQxIFxsc2Rsb2NrZWQwIExpc3QgTnVtYmVyO1xsc2RzZW1paGlkZGVuMSBcbHNkdW5oaWRldXNlZDEgXGxzZGxvY2tlZDAgTGlzdCAyO1xsc2RzZW1paGlkZGVuMSBcbHNkdW5oaWRldXNlZDEgXGxzZGxvY2tlZDAgTGlzdCAzOw==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHNlbWloaWRkZW4xIFxsc2R1bmhpZGV1c2VkMSBcbHNkbG9ja2VkMCBMaXN0IENvbnRpbnVlIDU7XGxzZHNlbWloaWRkZW4xIFxsc2R1bmhpZGV1c2VkMSBcbHNkbG9ja2VkMCBNZXNzYWdlIEhlYWRlcjtcbHNkcWZvcm1hdDEgXGxzZHByaW9yaXR5MTEgXGxzZGxvY2tlZDAgU3VidGl0bGU7XGxzZHNlbWloaWRkZW4xIFxsc2R1bmhpZGV1c2VkMSBcbHNkbG9ja2VkMCBTYWx1dGF0aW9uOw==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHNlbWloaWRkZW4xIFxsc2R1bmhpZGV1c2VkMSBcbHNkbG9ja2VkMCBMaXN0IENvbnRpbnVlO1xsc2RzZW1paGlkZGVuMSBcbHNkdW5oaWRldXNlZDEgXGxzZGxvY2tlZDAgTGlzdCBDb250aW51ZSAyO1xsc2RzZW1paGlkZGVuMSBcbHNkdW5oaWRldXNlZDEgXGxzZGxvY2tlZDAgTGlzdCBDb250aW51ZSAzO1xsc2RzZW1paGlkZGVuMSBcbHNkdW5oaWRldXNlZDEgXGxzZGxvY2tlZDAgTGlzdCBDb250aW51ZSA0Ow==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHNlbWloaWRkZW4xIFxsc2R1bmhpZGV1c2VkMSBcbHNkbG9ja2VkMCBMaXN0IE51bWJlciA0O1xsc2RzZW1paGlkZGVuMSBcbHNkdW5oaWRldXNlZDEgXGxzZGxvY2tlZDAgTGlzdCBOdW1iZXIgNTtcbHNkcWZvcm1hdDEgXGxzZHByaW9yaXR5MTAgXGxzZGxvY2tlZDAgVGl0bGU7XGxzZHNlbWloaWRkZW4xIFxsc2R1bmhpZGV1c2VkMSBcbHNkbG9ja2VkMCBDbG9zaW5nOw==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHNlbWloaWRkZW4xIFxsc2R1bmhpZGV1c2VkMSBcbHNkbG9ja2VkMCBPdXRsaW5lIExpc3QgMjtcbHNkc2VtaWhpZGRlbjEgXGxzZHVuaGlkZXVzZWQxIFxsc2Rsb2NrZWQwIE91dGxpbmUgTGlzdCAzO1xsc2RzZW1paGlkZGVuMSBcbHNkdW5oaWRldXNlZDEgXGxzZGxvY2tlZDAgQmFsbG9vbiBUZXh0O1xsc2Rwcmlvcml0eTM5IFxsc2Rsb2NrZWQwIFRhYmxlIEdyaWQ7","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHNlbWloaWRkZW4xIFxsc2R1bmhpZGV1c2VkMSBcbHNkbG9ja2VkMCBTaWduYXR1cmU7XGxzZHNlbWloaWRkZW4xIFxsc2R1bmhpZGV1c2VkMSBcbHNkcHJpb3JpdHkxIFxsc2Rsb2NrZWQwIERlZmF1bHQgUGFyYWdyYXBoIEZvbnQ7XGxzZHNlbWloaWRkZW4xIFxsc2R1bmhpZGV1c2VkMSBcbHNkbG9ja2VkMCBCb2R5IFRleHQ7XGxzZHNlbWloaWRkZW4xIFxsc2R1bmhpZGV1c2VkMSBcbHNkbG9ja2VkMCBCb2R5IFRleHQgSW5kZW50Ow==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHNlbWloaWRkZW4xIFxsc2R1bmhpZGV1c2VkMSBcbHNkbG9ja2VkMCB0YWJsZSBvZiBhdXRob3JpdGllcztcbHNkc2VtaWhpZGRlbjEgXGxzZHVuaGlkZXVzZWQxIFxsc2Rsb2NrZWQwIG1hY3JvO1xsc2RzZW1paGlkZGVuMSBcbHNkdW5oaWRldXNlZDEgXGxzZGxvY2tlZDAgdG9hIGhlYWRpbmc7XGxzZHNlbWloaWRkZW4xIFxsc2R1bmhpZGV1c2VkMSBcbHNkbG9ja2VkMCBMaXN0Ow==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHNlbWloaWRkZW4xIFxsc2R1bmhpZGV1c2VkMSBcbHNkcHJpb3JpdHkzOSBcbHNkbG9ja2VkMCB0b2MgMTtcbHNkc2VtaWhpZGRlbjEgXGxzZHVuaGlkZXVzZWQxIFxsc2Rwcmlvcml0eTM5IFxsc2Rsb2NrZWQwIHRvYyAyO1xsc2RzZW1paGlkZGVuMSBcbHNkdW5oaWRldXNlZDEgXGxzZHByaW9yaXR5MzkgXGxzZGxvY2tlZDAgdG9jIDM7","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHNlbWloaWRkZW4xIFxsc2R1bmhpZGV1c2VkMSBcbHNkcHJpb3JpdHkzOSBcbHNkbG9ja2VkMCB0b2MgNDtcbHNkc2VtaWhpZGRlbjEgXGxzZHVuaGlkZXVzZWQxIFxsc2Rwcmlvcml0eTM5IFxsc2Rsb2NrZWQwIHRvYyA1O1xsc2RzZW1paGlkZGVuMSBcbHNkdW5oaWRldXNlZDEgXGxzZHByaW9yaXR5MzkgXGxzZGxvY2tlZDAgdG9jIDY7","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHNlbWloaWRkZW4xIFxsc2R1bmhpZGV1c2VkMSBcbHNkcHJpb3JpdHkzOSBcbHNkbG9ja2VkMCB0b2MgNztcbHNkc2VtaWhpZGRlbjEgXGxzZHVuaGlkZXVzZWQxIFxsc2Rwcmlvcml0eTM5IFxsc2Rsb2NrZWQwIHRvYyA4O1xsc2RzZW1paGlkZGVuMSBcbHNkdW5oaWRldXNlZDEgXGxzZHByaW9yaXR5MzkgXGxzZGxvY2tlZDAgdG9jIDk7XGxzZHNlbWloaWRkZW4xIFxsc2R1bmhpZGV1c2VkMSBcbHNkbG9ja2VkMCBOb3JtYWwgSW5kZW50Ow==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHNlbWloaWRkZW4xIFxsc2R1bmhpZGV1c2VkMSBcbHNkcWZvcm1hdDEgXGxzZHByaW9yaXR5MzkgXGxzZGxvY2tlZDAgVE9DIEhlYWRpbmc7XGxzZHByaW9yaXR5NDEgXGxzZGxvY2tlZDAgUGxhaW4gVGFibGUgMTtcbHNkcHJpb3JpdHk0MiBcbHNkbG9ja2VkMCBQbGFpbiBUYWJsZSAyO1xsc2Rwcmlvcml0eTQzIFxsc2Rsb2NrZWQwIFBsYWluIFRhYmxlIDM7XGxzZHByaW9yaXR5NDQgXGxzZGxvY2tlZDAgUGxhaW4gVGFibGUgNDs=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHNlbWloaWRkZW4xIFxsc2R1bmhpZGV1c2VkMSBcbHNkcWZvcm1hdDEgXGxzZHByaW9yaXR5OSBcbHNkbG9ja2VkMCBoZWFkaW5nIDI7XGxzZHNlbWloaWRkZW4xIFxsc2R1bmhpZGV1c2VkMSBcbHNkcWZvcm1hdDEgXGxzZHByaW9yaXR5OSBcbHNkbG9ja2VkMCBoZWFkaW5nIDM7XGxzZHNlbWloaWRkZW4xIFxsc2R1bmhpZGV1c2VkMSBcbHNkcWZvcm1hdDEgXGxzZHByaW9yaXR5OSBcbHNkbG9ja2VkMCBoZWFkaW5nIDQ7","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHNlbWloaWRkZW4xIFxsc2R1bmhpZGV1c2VkMSBcbHNkcWZvcm1hdDEgXGxzZHByaW9yaXR5OSBcbHNkbG9ja2VkMCBoZWFkaW5nIDU7XGxzZHNlbWloaWRkZW4xIFxsc2R1bmhpZGV1c2VkMSBcbHNkcWZvcm1hdDEgXGxzZHByaW9yaXR5OSBcbHNkbG9ja2VkMCBoZWFkaW5nIDY7XGxzZHNlbWloaWRkZW4xIFxsc2R1bmhpZGV1c2VkMSBcbHNkcWZvcm1hdDEgXGxzZHByaW9yaXR5OSBcbHNkbG9ja2VkMCBoZWFkaW5nIDc7","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHNlbWloaWRkZW4xIFxsc2R1bmhpZGV1c2VkMSBcbHNkcWZvcm1hdDEgXGxzZHByaW9yaXR5OSBcbHNkbG9ja2VkMCBoZWFkaW5nIDg7XGxzZHNlbWloaWRkZW4xIFxsc2R1bmhpZGV1c2VkMSBcbHNkcWZvcm1hdDEgXGxzZHByaW9yaXR5OSBcbHNkbG9ja2VkMCBoZWFkaW5nIDk7XGxzZHNlbWloaWRkZW4xIFxsc2R1bmhpZGV1c2VkMSBcbHNkbG9ja2VkMCBpbmRleCAxOw==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGx0cmNoXGZjczAgXGJcZjJcZnMyMFxsYW5nMjA1N1xsYW5nZmUyMDU3XGxhbmdmZW5wMjA1N1xpbnNyc2lkMTMwNTA3MjJcY2hhcnJzaWQxMzA1MDcyMiAgYW5kIGFzc29jaWF0ZWQgZXhhbXBsZSB1c2UgcHJvZ3JhbXN9e1xydGxjaFxmY3MxIFxhYlxhZjJcYWZzMjAgXGx0cmNoXGZjczAgXGJcZjJcZnMyMFxsYW5nMjA1N1xsYW5nZmUyMDU3XGxhbmdmZW5wMjA1N1xpbnNyc2lkMjUwNTQ5MQ==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGx0cmNoXGZjczAgXGJcZjJcZnMyMFxsYW5nMjA1N1xsYW5nZmUyMDU3XGxhbmdmZW5wMjA1N1xpbnNyc2lkMTMwNTA3MjJcY2hhcnJzaWQxMzA1MDcyMiA1LiBOTyBXQVJSQU5UWS59e1xydGxjaFxmY3MxIFxhZjJcYWZzMjAgXGx0cmNoXGZjczAgXGYyXGZzMjBcbGFuZzIwNTdcbGFuZ2ZlMjA1N1xsYW5nZmVucDIwNTdcaW5zcnNpZDEzMDUwNzIyXGNoYXJyc2lkMTMwNTA3MjIgIEFueSB1c2Ugb2YgdGhlIFNPRlRXQVJFIFA=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGx2bHRlbnRhdGl2ZVxsZXZlbHNwYWNlMFxsZXZlbGluZGVudDB7XGxldmVsdGV4dFwnMDFcdS0zOTEzID87fXtcbGV2ZWxudW1iZXJzO31cZjNcZnMyMFxmYmlhczBcaHJlczBcY2hocmVzMCBcZmktMzYwXGxpMTQ0MFxqY2xpc3R0YWJcdHgxNDQwXGxpbjE0NDAgfXtcbGlzdGxldmVsXGxldmVsbmZjMjNcbGV2ZWxuZmNuMjNcbGV2ZWxqYzBcbGV2ZWxqY24wXGxldmVsZm9sbG93MFxsZXZlbHN0YXJ0YXQxXGx2bHRlbnRhdGl2ZQ==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XG1cXVxDXGNc","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"XE1pY3Jvc29mdFxJbnRlcm5ldCBFeHBsb3JlclxRdWljayBMYXVuY2g=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"XHBhcGVydzExOTA2XHBhcGVyaDE2ODM4XG1hcmdsMTQ0MFxtYXJncjE0NDBcbWFyZ3QxNDQwXG1hcmdiMTQ0MFxndXR0ZXIwXGx0cnNlY3Q=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XHBhciB7XGxpc3R0ZXh0XHBhcmRccGxhaW5cbHRycGFyIFxydGxjaFxmY3MxIFxhYlxhZjJcYWZzMjAgXGx0cmNoXGZjczAgXGYzXGZzMjBcbGFuZzIwNTdcbGFuZ2ZlMjA1N1xsYW5nbnAyMDU3XGxhbmdmZW5wMjA1N1xpbnNyc2lkMTMwNTA3MjJcY2hhcnJzaWQxMzA1MDcyMiBcbG9jaFxhZjNcZGJjaFxhZjBcaGljaFxmMyBcJ2I3XHRhYn19XHBhcmQgXGx0cnBhcg==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XHBhciB9XHBhcmQgXGx0cnBhclxxYyBcbGkwXHJpMFx3aWRjdGxwYXJcd3JhcGRlZmF1bHRcYXNwYWxwaGFcYXNwbnVtXGZhYXV0b1xhZGp1c3RyaWdodFxyaW4wXGxpbjBcaXRhcDBccGFyYXJzaWQxMzA1MDcyMiB7XHJ0bGNoXGZjczEgXGFmMlxhZnMxNSBcbHRyY2hcZmNzMCBcZjJcZnMxNVxsYW5nMjA1N1xsYW5nZmUyMDU3XGxhbmdmZW5wMjA1N1xpbnNyc2lkMTMwNTA3MjJcY2hhcnJzaWQxMzA1MDcyMiAyMDA2MDIyMn17XHJ0bGNoXGZjczE=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XHBhciB9XHBhcmQgXGx0cnBhclxxbCBcbGkwXHJpMFxzYTE2MFxzbDI1OVxzbG11bHQxXHdpZGN0bHBhclx3cmFwZGVmYXVsdFxhc3BhbHBoYVxhc3BudW1cZmFhdXRvXGFkanVzdHJpZ2h0XHJpbjBcbGluMFxpdGFwMCB7XHJ0bGNoXGZjczEgXGFmMCBcbHRyY2hcZmNzMCBcaW5zcnNpZDE2MDY3MDUx","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XHBhciB9XHBhcmQgXGx0cnBhclxxbCBcbGkwXHJpMFxzYjEwMFxzYTI0MFxzYmF1dG8xXHdpZGN0bHBhclx3cmFwZGVmYXVsdFxhc3BhbHBoYVxhc3BudW1cZmFhdXRvXGFkanVzdHJpZ2h0XHJpbjBcbGluMFxpdGFwMFxwYXJhcnNpZDEzMDUwNzIyIHtccnRsY2hcZmNzMSBcYWYyXGFmczIwIFxsdHJjaFxmY3MwIFxmMlxmczIwXGxhbmcyMDU3XGxhbmdmZTIwNTdcbGFuZ2ZlbnAyMDU3XGluc3JzaWQxMzA1MDcyMlxjaGFycnNpZDEzMDUwNzIy","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XHBhciB9XHBhcmQgXGx0cnBhclxxbCBcbGkwXHJpMFx3aWRjdGxwYXJcd3JhcGRlZmF1bHRcYXNwYWxwaGFcYXNwbnVtXGZhYXV0b1xhZGp1c3RyaWdodFxyaW4wXGxpbjBcaXRhcDBccGFyYXJzaWQxMzA1MDcyMiB7XHJ0bGNoXGZjczEgXGFmMlxhZnMyMCBcbHRyY2hcZmNzMCBcZjJcZnMyMFxsYW5nMjA1N1xsYW5nZmUyMDU3XGxhbmdmZW5wMjA1N1xpbnNyc2lkMTMwNTA3MjJcY2hhcnJzaWQxMzA1MDcyMiBcbGluZQ==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XHBhciB9e1wqXHRoZW1lZGF0YSA1MDRiMDMwNDE0MDAwNjAwMDgwMDAwMDAyMTAwZTlkZTBmYmZmZjAwMDAwMDFjMDIwMDAwMTMwMDAwMDA1YjQzNmY2ZTc0NjU2ZTc0NWY1NDc5NzA2NTczNWQyZTc4NmQ2Y2FjOTFjYjRlYzMzMDEwNDVmNzQ4ZmM4M2U1MmQ0YQ==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XHBubGNsdHJccG5zdGFydDFccG5pbmRlbnQ3MjBccG5oYW5nIHtccG50eHRiICh9e1xwbnR4dGEgKX19e1wqXHBuc2VjbHZsN1xwbmxjcm1ccG5zdGFydDFccG5pbmRlbnQ3MjBccG5oYW5nIHtccG50eHRiICh9e1xwbnR4dGEgKX19e1wqXHBuc2VjbHZsOFxwbmxjbHRyXHBuc3RhcnQxXHBuaW5kZW50NzIwXHBuaGFuZyB7XHBudHh0YiAofXtccG50eHRhICl9fXtcKlxwbnNlY2x2bDlccG5sY3JtXHBuc3RhcnQxXHBuaW5kZW50NzIwXHBuaGFuZw==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XHBudWNsdHJccG5zdGFydDFccG5pbmRlbnQ3MjBccG5oYW5nIHtccG50eHRhIC59fXtcKlxwbnNlY2x2bDNccG5kZWNccG5zdGFydDFccG5pbmRlbnQ3MjBccG5oYW5nIHtccG50eHRhIC59fXtcKlxwbnNlY2x2bDRccG5sY2x0clxwbnN0YXJ0MVxwbmluZGVudDcyMFxwbmhhbmcge1xwbnR4dGEgKX19e1wqXHBuc2VjbHZsNVxwbmRlY1xwbnN0YXJ0MVxwbmluZGVudDcyMFxwbmhhbmcge1xwbnR4dGIgKH17XHBudHh0YSApfX17XCpccG5zZWNsdmw2","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XHFsIFxmaS0zNjBcbGk3MjBccmkwXHNiMTAwXHNhMTAwXHNiYXV0bzFcc2FhdXRvMVx3aWRjdGxwYXJcamNsaXN0dGFiXHR4NzIwXHdyYXBkZWZhdWx0XGFzcGFscGhhXGFzcG51bVxmYWF1dG9cbHMxXGFkanVzdHJpZ2h0XHJpbjBcbGluNzIwXGl0YXAwXHBhcmFyc2lkMTMwNTA3MjIge1xydGxjaFxmY3MxIFxhYlxhZjJcYWZzMjAgXGx0cmNoXGZjczA=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XHJlZDI1NVxncmVlbjI1NVxibHVlMjU1O1xyZWQwXGdyZWVuMFxibHVlMTI4O1xyZWQwXGdyZWVuMTI4XGJsdWUxMjg7XHJlZDBcZ3JlZW4xMjhcYmx1ZTA7XHJlZDEyOFxncmVlbjBcYmx1ZTEyODtccmVkMTI4XGdyZWVuMFxibHVlMDtccmVkMTI4XGdyZWVuMTI4XGJsdWUwO1xyZWQxMjhcZ3JlZW4xMjhcYmx1ZTEyODtccmVkMTkyXGdyZWVuMTkyXGJsdWUxOTI7fXtcKlxkZWZjaHA=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XFJQQyBDb250cm9sXENvbnNvbGVMUEMtMHgwMDAwMDAwMDAwMDAwQzZDLS0xNDA3Mzg3NjIxLTIyNzkwMjYxODg1MTEzNjEwMS01NDk5ODk2MTI4Mjc0NTA1MzktMTExODAwMjk2OC01NTQ2MjA5MTI4NjkwODI0Njg=","type":"Unicode","source":"Runtime Data","process":"bcs.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XHJ0bGNoXGZjczEgXGFiXGFmMlxhZnMyNCBcbHRyY2hcZmNzMCBcYlxmMlxmczI0XGxhbmcyMDU3XGxhbmdmZTIwNTdcbGFuZ2ZlbnAyMDU3XGluc3JzaWQxMzA1MDcyMlxjaGFycnNpZDEzMDUwNzIyIFNPRlRXQVJFIFBST0RVQ1QgTElDRU5TRSBBR1JFRU1FTlR9e1xydGxjaFxmY3MxIFxhZjJcYWZzMjAgXGx0cmNoXGZjczA=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XHJ0bGNoXGZjczEgXGFmMlxhZnMyMCBcbHRyY2hcZmNzMCBcZjJcZnMyMCBcc2Jhc2Vkb24xMCBcc3NlbWloaWRkZW4gXHN1bmhpZGV1c2VkIFxzdHlyc2lkMTMwNTA3MjIgSFRNTCBUeXBld3JpdGVyO317XHMxNlxxbCBcbGkwXHJpMFxzYjEwMFxzYTEwMFxzYmF1dG8xXHNhYXV0bzFcd2lkY3RscGFyXHdyYXBkZWZhdWx0XGFzcGFscGhhXGFzcG51bVxmYWF1dG9cYWRqdXN0cmlnaHRccmluMFxsaW4wXGl0YXAwIFxydGxjaFxmY3Mx","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XFNlc3Npb25zXDFcV2luZG93c1xBcGlQb3J0","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XHNzZW1paGlkZGVuIFxzdW5oaWRldXNlZCBcc3ByaW9yaXR5MSBEZWZhdWx0IFBhcmFncmFwaCBGb250O317XCo=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XFRoZW1lQXBpUG9ydA==","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XHRzMTFcdHNyb3dkXHRyZnRzV2lkdGhCM1x0cnBhZGRsMTA4XHRycGFkZHIxMDhcdHJwYWRkZmwzXHRycGFkZGZ0M1x0cnBhZGRmYjNcdHJwYWRkZnIzXHRyY2JwYXQxXHRyY2ZwYXQxXHRibGluZDBcdGJsaW5kdHlwZTNcdHN2ZXJ0YWx0XHRzYnJkcnRcdHNicmRybFx0c2JyZHJiXHRzYnJkcnJcdHNicmRyZGdsXHRzYnJkcmRnclx0c2JyZHJoXHRzYnJkcnYgXHFsIFxsaTBccmkwXHNhMTYwXHNsMjU5XHNsbXVsdDE=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XHdpZGN0bHBhclx3cmFwZGVmYXVsdFxhc3BhbHBoYVxhc3BudW1cZmFhdXRvXGFkanVzdHJpZ2h0XHJpbjBcbGluMFxpdGFwMCBccnRsY2hcZmNzMSBcYWYwXGFmczIyXGFsYW5nMTAyNSBcbHRyY2hcZmNzMCBcZjMxNTA2XGZzMjJcbGFuZzIwNTdcbGFuZ2ZlMTAzM1xjZ3JpZFxsYW5nbnAyMDU3XGxhbmdmZW5wMTAzMyBcc25leHQwIFxzcWZvcm1hdCBcc3ByaW9yaXR5MCBOb3JtYWw7fXtcKlxjczEwIFxhZGRpdGl2ZQ==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XHdpZGN0bHBhclx3cmFwZGVmYXVsdFxhc3BhbHBoYVxhc3BudW1cZmFhdXRvXGFkanVzdHJpZ2h0XHJpbjBcbGluMFxpdGFwMCBccnRsY2hcZmNzMSBcYWYzMTUwNlxhZnMyMlxhbGFuZzEwMjUgXGx0cmNoXGZjczAgXGYzMTUwNlxmczIyXGxhbmcyMDU3XGxhbmdmZTEwMzNcY2dyaWRcbGFuZ25wMjA1N1xsYW5nZmVucDEwMzMgXHNuZXh0MTEgXHNzZW1paGlkZGVuIFxzdW5oaWRldXNlZCBOb3JtYWwgVGFibGU7fXtcKlxjczE1IFxhZGRpdGl2ZQ==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XHdpZG93Y3RybFxmdG5ialxhZW5kZG9jXHRyYWNrbW92ZXMwXHRyYWNrZm9ybWF0dGluZzFcZG9ub3RlbWJlZHN5c2ZvbnQxXHJlbHlvbnZtbDBcZG9ub3RlbWJlZGxpbmdkYXRhMFxncmZkb2NldmVudHMwXHZhbGlkYXRleG1sMVxzaG93cGxhY2Vob2xkdGV4dDBcaWdub3JlbWl4ZWRjb250ZW50MFxzYXZlaW52YWxpZHhtbDBcc2hvd3htbGVycm9yczFcbm94bGF0dG95ZW4=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XFdpbmRvd3NcQXBpUG9ydA==","type":"Unicode","source":"Runtime Data","process":"bcs.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XUdQR1JHVkdZZw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"XUxjOztPZjVu","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Xz9fX19fX18wXz9fX2xfX19fX19xX18/P19f","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_0.png","compromised":null,"detection_total":null,"total":null},{"value":"X19jbHJjYWxs","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"X19jcnRfc3RydG94OjpmbG9hdGluZ19wb2ludF92YWx1ZTo6YXNfZG91Ymxl","type":"Unicode","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"X19jcnRfc3RydG94OjpmbG9hdGluZ19wb2ludF92YWx1ZTo6YXNfZmxvYXQ=","type":"Unicode","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"X19mYXN0Y2FsbA==","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"X19yZXN0cmljdA==","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"X19zdGRjYWxs","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"X190aGlzY2FsbA==","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"X191bmFsaWduZWQ=","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"X192ZWN0b3JjYWxs","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"X2J6Tms9eHY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"X2hsX0xZX0lf","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_0.png","compromised":null,"detection_total":null,"total":null},{"value":"X2lzX2RvdWJsZQ==","type":"Unicode","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"X0paXU16XVUz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"X25leHRhZnRlcg==","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"X09QRU5TU0xfaXNzZXJ2aWNl","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"X3RAIFpHQUBr","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"X1hPJEhqJExH","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"YFw/P1xWb2x1bWV7ZTQ3ZjRmNDMtZDg2My0xMWU3LTlkOGYtODA2ZTZmNmU2OTYzfQ==","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"YFw/P1xWb2x1bWV7ZTQ3ZjRmNDQtZDg2My0xMWU3LTlkOGYtODA2ZTZmNmU2OTYzfQ==","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"YFw/P1xWb2x1bWV7ZTQ3ZjRmNDctZDg2My0xMWU3LTlkOGYtODA2ZTZmNmU2OTYzfQ==","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"YGNvcHkgY29uc3RydWN0b3IgY2xvc3VyZSc=","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YGRlZmF1bHQgY29uc3RydWN0b3IgY2xvc3VyZSc=","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YGR5bmFtaWMgYXRleGl0IGRlc3RydWN0b3IgZm9yICc=","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YGR5bmFtaWMgaW5pdGlhbGl6ZXIgZm9yICc=","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YGVoIHZlY3RvciBjb25zdHJ1Y3RvciBpdGVyYXRvcic=","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YGVoIHZlY3RvciBjb3B5IGNvbnN0cnVjdG9yIGl0ZXJhdG9yJw==","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YGVoIHZlY3RvciBkZXN0cnVjdG9yIGl0ZXJhdG9yJw==","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YGVoIHZlY3RvciB2YmFzZSBjb25zdHJ1Y3RvciBpdGVyYXRvcic=","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YGVoIHZlY3RvciB2YmFzZSBjb3B5IGNvbnN0cnVjdG9yIGl0ZXJhdG9yJw==","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YGxvY2FsIHN0YXRpYyBndWFyZCc=","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YGxvY2FsIHN0YXRpYyB0aHJlYWQgZ3VhcmQn","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YGxvY2FsIHZmdGFibGUgY29uc3RydWN0b3IgY2xvc3VyZSc=","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YGxvY2FsIHZmdGFibGUn","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YG1hbmFnZWQgdmVjdG9yIGNvbnN0cnVjdG9yIGl0ZXJhdG9yJw==","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YG1hbmFnZWQgdmVjdG9yIGNvcHkgY29uc3RydWN0b3IgaXRlcmF0b3In","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YG1hbmFnZWQgdmVjdG9yIGRlc3RydWN0b3IgaXRlcmF0b3In","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YG9tbmkgY2FsbHNpZyc=","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YHBsYWNlbWVudCBkZWxldGUgY2xvc3VyZSc=","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YHBsYWNlbWVudCBkZWxldGVbXSBjbG9zdXJlJw==","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YHNjYWxhciBkZWxldGluZyBkZXN0cnVjdG9yJw==","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YHN0cmluZyc=","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YHR5cGVvZic=","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YHVkdCByZXR1cm5pbmcn","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YHZcPTwsIWxHWFNY","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"YHZiYXNlIGRlc3RydWN0b3In","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YHZidGFibGUn","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YHZlY3RvciBjb25zdHJ1Y3RvciBpdGVyYXRvcic=","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YHZlY3RvciBjb3B5IGNvbnN0cnVjdG9yIGl0ZXJhdG9yJw==","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YHZlY3RvciBkZWxldGluZyBkZXN0cnVjdG9yJw==","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YHZlY3RvciBkZXN0cnVjdG9yIGl0ZXJhdG9yJw==","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YHZlY3RvciB2YmFzZSBjb25zdHJ1Y3RvciBpdGVyYXRvcic=","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YHZlY3RvciB2YmFzZSBjb3B5IGNvbnN0cnVjdG9yIGl0ZXJhdG9yJw==","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YHZmdGFibGUn","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YHZJJGBzVy9g","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"YHZpcnR1YWwgZGlzcGxhY2VtZW50IG1hcCc=","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YHspWHtBeyg2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"QSBmaWxlIG5lZWRlZCBmb3IgdGhlIHRlc3QgY291bGRuJ3QgYmUgcmV0cmlldmVkLiBQbGVhc2UgY29udGFjdCB0aGUgdGVzdCBwcm92aWRlciBhbmQgcmVwb3J0IHRoZSBpc3N1ZS4=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YTA4MTBlZWY5MzA4NzNlNzNhM2U3NjZlYjEwODE2YTY0MjYwMzJjNzgzZTRlZDJjZmEyMTIyYmE0NTMzOWU3MDE0MjMzOThiYzU3ZjQ3ODQwNmZhZmExYzUxNjRjMWI1YjAxOWMxM2IwOTQ4OGMwZDc4NzU3NmNmMjBkYzBiOTM=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"YTFhODJmZTM1M2JkOTBhODY1YWFkNDFlZDBiNWI4ZjlkNmZkMDEwMDAwZmZmZjAzMDA1MDRiMDMwNDE0MDAwNjAwMDgwMDAwMDAyMTAwNmI3OTk2MTY4MzAwMDAwMDhhMDAwMDAwMWMwMDAwMDA3NDY4NjU2ZDY1MmY3NDY4NjU=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"YTdlN2MwMDAwMDAwMzYwMTAwMDAwYjAwMDAwMDVmNzI2NTZjNzMyZjJlNzI2NTZjNzM4NDhmY2Y2YWMzMzAwYzg3ZWY4NWJkODNkMTdkNTFkMmMzMTgyNTc2MmZhNTkwNDMyZmEzN2QwMGUxMjg3ZjY4MjIxYmRiMWJlYmRiNGY=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"QUJDREVGR0hJSktMTU5PUFFSU1RVVldYWVo=","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.0132D000.00000004.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YWJjZGVmZ2hpamtsbW5vcHFyc3R1dnd4eXo=","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.0132D000.00000004.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"QWNoIEJXOiAlaQ==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"QWNoaWV2ZWQgJWRrYnBzIHdpdGggbG9zcz0lZC4lMDJkJSU=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"QWNoaWV2ZWQgYmFuZHdpZHRoIGlzICVkS2Jwcw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"QUNNIGhhcyBiZWVuIGRldGVjdGVkIGFuZCBTZW5kUXVhbGl0eVRlc3RSZXBvcnQgaGFzIGJlZW4gdXNlZCB0byBzdWJtaXQgcmVwb3J0","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"QUNNIGhhcyBOT1QgYmVlbiBkZXRlY3RlZCBhbmQgU2VuZFNwZWVkVGVzdFJlcG9ydCBoYXMgYmVlbiB1c2VkIHRvIHN1Ym1pdCByZXBvcnQ=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"QURDQjc0REI0Njc4REY3NERDQjI5RkQzQjA2NzJBRjdEMTU4RUIwMw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YWRkX3NlcnZlcmhlbGxvX3JlbmVnb3RpYXRlX2V4dA==","type":"Ansi","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"QWRkcmVzc0ZhbWlseQ==","type":"Unicode","source":"Runtime Data","process":"NetQCheckHTML5Agent.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"QWRqdXN0VG9rZW5Qcml2aWxlZ2Vz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"YWR2YXBpMzIuZGxs","type":"Ansi","source":"Dropped File","process":null,"filename":"SimpleSC.dll.328895541","compromised":null,"detection_total":null,"total":null},{"value":"QURWQVBJMzIuZGxs","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"YWUzOGEzOGY1NmU0MjJhM2E2NDFjOGJiZDA0OGY3NzU3ZGEwZjE5YjAxN2NjNTI0YmQ2MjEwN2JkNTAwMTk5NjUwOWFmZmIzZmQzODFhODk2NzJmMWYxNjVkZmU1MTQxNzNkOTg1MDUyOGEyYzZjY2UwMjM5YmFhNGMwNGNhNWI=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"QWdlbnQgTmFtZQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"QWdlbnQgcGFja2V0IGxpbWl0IHJlYWNoZWQ=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YWdlbnRuYW1l","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YWlLZXlBbGc9MHg=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YWxnX3NlY3Rpb24=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"QUxMOiFDT01QTEVNRU5UT0ZERUZBVUxUOiFlTlVMTA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"QWxsb2NhdGVBbmRJbml0aWFsaXplU2lk","type":"Ansi","source":"Dropped File","process":null,"filename":"UserInfo.dll.2533488085","compromised":null,"detection_total":null,"total":null},{"value":"QWx0ZXJuYXRlQ29kZVBhZ2U=","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"YW5kIGNvbmRpdGlvbnMgYmVmb3JlIHVzaW5nIHRoZSBTT0ZUV0FSRSBQUk9EVUNULiBcbGluZSBcbGluZQ==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"YW5kIHNvdXJjZSBmaWxlcyB3aGVyZSBwcm92aWRlZH17XHJ0bGNoXGZjczEgXGFiXGFmMlxhZnMyMCBcbHRyY2hcZmNzMCBcYlxmMlxmczIwXGxhbmcyMDU3XGxhbmdmZTIwNTdcbGFuZ2ZlbnAyMDU3XGluc3JzaWQxMzA1MDcyMlxjaGFycnNpZDEzMDUwNzIyIDp9e1xydGxjaFxmY3MxIFxhZjJcYWZzMjAgXGx0cmNoXGZjczA=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"QU5ZIFBSSVZBVEUgS0VZ","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"QVBJIHZlcnNpb24gaXM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXBpLW1zLXdpbi1hcHBtb2RlbC1ydW50aW1lLWwxLTEtMQ==","type":"Unicode","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXBpLW1zLXdpbi1jb3JlLWZpbGUtbDItMS0x","type":"Unicode","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"QXBwIG9yIENhcDo=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"QXBwZW5kTWVudUE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"YXBwbCBbICVkIF0=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXBwbGljYXRpb24gdmVyaWZpY2F0aW9uIGZhaWx1cmU=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXBwdXBkYXRl","type":"Unicode","source":"Runtime Data","process":"bcs.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"QXBwVXBkYXRlckxvZy50eHQ=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"QXBwVXBkYXRlclRocmVhZCBydW5uaW5n","type":"Ansi","source":"Dropped File","process":null,"filename":"AppUpdaterLog.txt","compromised":null,"detection_total":null,"total":null},{"value":"QXBwVXBkYXRlclRocmVhZCBydW5uaW5nQ3VycmVudCB2ZXJzaW9uIG9mIGFwcCBpcyA1LjQ0","type":"Ansi","source":"Runtime Data","process":"NetQCheckHTML5Agent.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"QXBwVXBkYXRlclRocmVhZCBydW5uaW5nQ3VycmVudCB2ZXJzaW9uIG9mIGFwcCBpcyA1LjQ0Q2hlY2tpbmcgdmVyc2lvbiBvbiBzZXJ2ZXIuIHVwZGF0ZWJjcy52aXN1YWx3YXJlLmNvbS9hcHB1cGRhdGVzL05ldFFDaGVja0hUTUw1QWdlbnQvd2luZG93cy92ZXJzaW9uLnR4dEh0dHBHZXQgcmV0dXJuZWQgMjAwLiBWZXJzaW9uIG9uIHNlcnZlciBpcyA1LjQ0","type":"Ansi","source":"Dropped File","process":null,"filename":"AppUpdaterLog.txt","compromised":null,"detection_total":null,"total":null},{"value":"YXBwdXBkYXRlcw==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"QXJlRmlsZUFwaXNBTlNJ","type":"Ansi","source":"Hybrid Analysis","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01311000.00000020.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"QVNOMSBPSUQ6ICVz","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogIShtZXRoLT5leHRfZmxhZ3MgJiBTU0xfRVhUX0ZMQUdfU0VOVCk=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogIWV4cGVjdGVkX2xlbiB8fCBzLT5zMy0+cHJldmlvdXNfY2xpZW50X2ZpbmlzaGVkX2xlbg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogIWV4cGVjdGVkX2xlbiB8fCBzLT5zMy0+cHJldmlvdXNfc2VydmVyX2ZpbmlzaGVkX2xlbg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogKChsb25nKW1zZ19oZHItPm1zZ19sZW4pID4gMA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogKCpjaG9pY2UpLT51LmFzSWRzT3JSYW5nZXMgPT0gTlVMTA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogKCpjaG9pY2UpLT51LmluaGVyaXQgPT0gTlVMTA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogKih1bnNpZ25lZCBpbnQgKilsb2NrID09IDE=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogKmN1cnJsZW4gPD0gKm1heGxlbg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogKnNidWZmZXIgIT0gTlVMTA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogKnNidWZmZXIgIT0gTlVMTCB8fCBidWZmZXIgIT0gTlVMTA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogMA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogYW9yICE9IE5VTEwgJiYgbWluICE9IE5VTEwgJiYgbWF4ICE9IE5VTEw=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogYW9yLT51LmFkZHJlc3NSYW5nZSA9PSBOVUxM","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogQVNJZGVudGlmaWVyQ2hvaWNlX2lzX2Nhbm9uaWNhbChjaG9pY2Up","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogYiA8PSBzaXplb2YgY3R4LT5idWY=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogYiA8PSBzaXplb2YgY3R4LT5maW5hbA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogYmwgPD0gKGludClzaXplb2YoY3R4LT5idWYp","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogY2hhaW4gIT0gTlVMTCAmJiBza19YNTA5X251bShjaGFpbikgPiAw","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogY2h1bmsgPj0gMA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogY3R4ICE9IE5VTEwgfHwgZXh0ICE9IE5VTEw=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogY3R4ID09IE5VTEwgfHwgY3R4LT52ZXJpZnlfY2IgIT0gTlVMTA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogY3R4LT5idWZfbGVuIDw9IChpbnQpc2l6ZW9mKGN0eC0+YnVmKQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogY3R4LT5idWZfbGVuID49IGN0eC0+YnVmX29mZg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogY3R4LT5idWZfb2ZmICsgaSA8IChpbnQpc2l6ZW9mKGN0eC0+YnVmKQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogY3R4LT5idWZfb2ZmIDwgKGludClzaXplb2YoY3R4LT5idWYp","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogY3R4LT5idWZfb2ZmIDw9IChpbnQpc2l6ZW9mKGN0eC0+YnVmKQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogY3R4LT5idWZsZW4gPD0gY3R4LT5idWZzaXpl","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogY3R4LT5jaXBoZXItPmJsb2NrX3NpemUgPT0gMSB8fCBjdHgtPmNpcGhlci0+YmxvY2tfc2l6ZSA9PSA4IHx8IGN0eC0+Y2lwaGVyLT5ibG9ja19zaXplID09IDE2","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogY3R4LT5kaWdlc3QtPm1kX3NpemUgPD0gRVZQX01BWF9NRF9TSVpF","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogY3R4LT5sZW5ndGggPD0gKGludClzaXplb2YoY3R4LT5lbmNfZGF0YSk=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogY3R4LT5udW1fdW50cnVzdGVkIDw9IG51bQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogY3R4LT50bXBfbGVuIDw9IDM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogZGF0YV9wbHVzX21hY19wbHVzX3BhZGRpbmdfc2l6ZSA8IDEwMjQgKiAxMDI0","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogZWNrZXktPmdyb3VwLT5tZXRoLT5rZXlnZW4gIT0gTlVMTA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogRVZQX0NJUEhFUl9DVFhfaXZfbGVuZ3RoKGN0eCkgPD0gKGludClzaXplb2YoY3R4LT5pdik=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogRVZQX0NJUEhFUl9pdl9sZW5ndGgoZW5jKSA8PSAoaW50KXNpemVvZihpdik=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogZi0+YWRkcmVzc0ZhbWlseS0+ZGF0YSAhPSBOVUxM","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogZ3JvdXAtPm1ldGgtPmdyb3VwX29yZGVyX2JpdHMgIT0gTlVMTA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogaSAhPSAw","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogaSA8PSBFVlBfTUFYX01EX1NJWkU=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogaSA8PSBu","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogaXRlbSAhPSBOVUxM","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogaiA8PSAoaW50KXNpemVvZihjdHgtPmtleSk=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogaiA8PSBzaXplb2YoYy0+aXYp","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDoga2V5bGVuIDw9IHNpemVvZiBrZXk=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogbCA8PSBzaXplb2YoYy0+aXYp","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogbCA8PSBzaXplb2YoaXYp","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogbGVuIDw9IFNTTDNfUlRfTUFYX1BMQUlOX0xFTkdUSA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogbGVuID09ICh1bnNpZ25lZCBpbnQpcmV0","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogbQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogbWFjX3NlY3JldF9sZW5ndGggPD0gc2l6ZW9mKGhtYWNfcGFkKQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogbWFjX3NpemUgPD0gRVZQX01BWF9NRF9TSVpF","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogbWRfc2l6ZSA8PSBFVlBfTUFYX01EX1NJWkU=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogbWVtY21wKG1pbiwgbWF4LCBsZW5ndGgpIDw9IDA=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogbiA+PSAw","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogbml2IDw9IEVWUF9NQVhfSVZfTEVOR1RI","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogbmtleSA8PSBFVlBfTUFYX0tFWV9MRU5HVEg=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogbnVtID09IDEgJiYgY3R4LT5udW1fdW50cnVzdGVkID09IG51bQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogbnVtID09IGN0eC0+bnVtX3VudHJ1c3RlZA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogbnVtID4gaSAmJiBpID4gMCAmJiBzcyA9PSAw","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogcmVjLT5vcmlnX2xlbiA+PSBtZF9zaXpl","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogcy0+ZDEtPndfbXNnX2hkci5tc2dfbGVuICsgKChzLT52ZXJzaW9uID09IERUTFMxX0JBRF9WRVIpID8gMyA6IERUTFMxX0NDU19IRUFERVJfTEVOR1RIKSA9PSAodW5zaWduZWQgaW50KXMtPmluaXRfbnVt","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogcy0+ZDEtPndfbXNnX2hkci5tc2dfbGVuICsgRFRMUzFfSE1fSEVBREVSX0xFTkdUSCA9PSAodW5zaWduZWQgaW50KXMtPmluaXRfbnVt","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogcy0+aW5pdF9udW0gPT0gKGludClzLT5kMS0+d19tc2dfaGRyLm1zZ19sZW4gKyBEVExTMV9ITV9IRUFERVJfTEVOR1RI","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogcy0+aW5pdF9vZmYgPT0gMA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogcy0+c2lkX2N0eF9sZW5ndGggPD0gc2l6ZW9mIHMtPnNpZF9jdHg=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogc3RybGVuKG9ianN0cikgKyAyMyArIDIgKiBFVlBfQ0lQSEVSX2l2X2xlbmd0aChlbmMpICsgMTMgPD0gc2l6ZW9mIGJ1Zg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogdnYgPT0gTlVMTA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogeCAhPSBOVUxM","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogWDUwOXYzX2FkZHJfaXNfY2Fub25pY2FsKGFkZHIp","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"QVRlc3QgUGFyYW1zOg==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"QXR0cmlidXRlcw==","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"QXVkaXQgUG9zdGVk","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"QXV0aGVudGljYXRpb24gdXNlcm5hbWU=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"QXV0aGVudGljb2RlRW5hYmxlZA==","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"YXV0aGdyYW50ZWQ=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXV0aG9yaXR5IGFuZCBpc3N1ZXIgc2VyaWFsIG51bWJlciBtaXNtYXRjaA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXV0aG9yaXR5IGFuZCBzdWJqZWN0IGtleSBpZGVudGlmaWVyIG1pc21hdGNo","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"QXV0b2RpYWxETEw=","type":"Unicode","source":"Runtime Data","process":"NetQCheckHTML5Agent.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"QXV0b25vbW91cyBTeXN0ZW0gTnVtYmVycw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"QXdhaXRpbmcgdXBsb2FkIHJlcG9ydC4=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXotQVotQ3lybA==","type":"Unicode","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXotQVotTGF0bg==","type":"Unicode","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Yi9bbnMia18oVSov","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"YjAxZDU4M2RlZWU1Zjk5ODI0ZTI5MGI0YmEzZjM2NGVhYzRhNDMwODgzYjNjMDkyZDRlY2E4Zjk0NmM5MTY0MjJlY2FiOTI3ZjUyZWE0MmI4OWExY2Q1OWMyNTRmOTE5YjBlODVlNjUzNWQxMzVhOGRlMjBmMjBiOGMxMmMzYjA=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"YmFiYWM0ZGYwMDAwMDBmZmZmMDMwMDUwNGIwMTAyMmQwMDE0MDAwNjAwMDgwMDAwMDAyMTAwZTlkZTBmYmZmZjAwMDAwMDFjMDIwMDAwMTMwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwNWI0MzZmNmU3NDY1NmU=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"YmFkIGFsbG9jYXRpb24=","type":"Ansi","source":"Hybrid Analysis","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01311000.00000020.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YmFkIGFycmF5IG5ldyBsZW5ndGg=","type":"Ansi","source":"Hybrid Analysis","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01311000.00000020.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"QmFkIERIQ1AgY29va2ll","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YmFkIGxvY2FsZSBuYW1l","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"QkFEIFJFQ1VSU0lPTiBERVBUSA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"QmFkIHRpbWUgdmFsdWU=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"QkFELVRZUEU=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"QmFuZHdpZHRoIGxpbWl0IHJlYWNoZWQgKCVkYnBzKQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"QmFzZSBDbGFzcyBBcnJheSc=","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"QmFzZSBDbGFzcyBEZXNjcmlwdG9yIGF0ICg=","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"QmFzaXMgVHlwZTogJXM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"QkMgKGRlZmF1bHQp","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"QkNTIGlzIGFscmVhZHkgcnVubmluZw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F51000.00000020.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"QkNTIGlzIG5vdyBydW5uaW5nIGluIHRoZSBiYWNrZ3JvdW5k","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"QkNTIFYlZC4lZE9wdGlvbnM6ICAgICAgIC1wID0gU2V0cyBXZWJzb2NrZXQgc2VydmVyIHBvcnQgKGRlZmF1bHQ9JWQp","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F51000.00000020.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"QkNTIFZlcnNpb24gJWkuJWk=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"QkNTIFZlcnNpb24gNS40NA==","type":"Ansi","source":"Runtime Data","process":"NetQCheckHTML5Agent.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"QkNTIFZlcnNpb246","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YmQyZDk4NDYwNWMwM2U2MjU5MDFhYjRjZDcyNWQ3YWRjYjkzYWI0YjRiZWQwYzk5MzY0ODY4ZTU2NjkyNTA5MTUxM2Q4Yzg3Njg4NDE3ZDUyOTQ3Y2Y0MmUzNmQ3MzVkNWZhNWQ0YTAyNzQzYTFlNjgzZDI1YWQxYThkNmZlOGQ=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"QmVnaW4gZG93bnN0cmVhbSB0ZXN0OiBQa3RzUGVyU2VjPSVkLCBUb3RQa3RzPSVkLCBQa3RTej0lZA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YmVnaW4gcGFja2V0IG9rLCBzZW5kaW5nIHVwc3RyZWFtLi4u","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"QmVnaW4gdXBzdHJlYW0gdGVzdDogUGt0c1BlclNlYz0lZCwgVG90UGt0cz0lZCwgUGt0U3o9JWQ=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"QmVnaW5QYWludA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"YmV0d2VlbiB5b3UgKGFuIGluZGl2aWR1YWwgb3IgYW4gZW50aXR5KSBhbmQgVmlzdWFsd2FyZSBJbmMuIGZvciBzb21lIG9yIGFsbCBvZiB0aGUgc29mdHdhcmUgcHJvZHVjdHMgaWRlbnRpZmllZCBiZWxvdyAoZWFjaCwgYSBTT0ZUV0FSRSBQUk9EVUNUKSwgd2hpY2ggaW5jbHVkZXMgY29tcHV0ZXIgc29mdHdhcmUgYW5kIGVsZWN0cm9uaWMgZG9jdW1lbnRhdGlvbi4gWW91IHNob3VsZCBjYXJlZnVsbHkgcmVhZCB0aGUgZm9sbG93aW5nIHRlcm1z","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"QmluZCBmYWlsZWQ=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YmluZF9lbmdpbmU=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"QmluZGluZyB0byBsb2NhbCBlbmRwb2ludCAlcw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YkxtKkZcSF9xOg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"QlFfWVFfRVFf","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"QnFiUC10Iy80","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"YlJYTkFePy4=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"YnMtYmEtbGF0bg==","type":"Unicode","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YlU5PU10MkA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"QnVmZmVyaW5nIG9yIGRldmljZSBsaW1pdCBkZXRlY3RlZC4gRWxhcHNlZCBzdHJlYW0gdGltZSAoJWRtcykgZXhjZWVkcyBtYXggc3RyZWFtIHRpbWUgKCVkbXMp","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"QlZCdkJuQl5CPkI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Ynl0ZXNwZXJwYWNrZXQ=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YzBmMGkwbTBv","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"YzU3OTczMGQ3NmViZGE0MDYzNWQyOTY4ZWMxYzM3ZGM0YWQ5ODc5MjE5YTI2OWMzMWRjMzYzM2YxYzQ2NTNhODFkMmViN2JjODg0ZWUwZGRkOTUwMjRlOTBkN2YxZTY1OTkyNjVjYjQxMTBmZDM4MDJiZDE0OWQ1MjAyMjAyMjc=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"YzcwNjBhYmIwODg0YTRlZmY3YTkzZGZlYWU4YmY5ZTE5NGU3MjAxNjlhYWEwNmMzZTI0MzNmY2I2OGUxNzYzZGJmN2Y4MmM5ODVhNGE3MjUwODViNzg3MDg2YTM3YmRiYjU1ZmJjNTBkMWEzM2NjZDMxMWJhNTQ4YjYzMDk1MTI=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"Yzc4ZjRmMWVmZDljM2EzMmFjZjY1MDNjZDFhZDVlN2ZmZmM1ZGY0ZjNmNzVmZTdhZmVkZGViMjc1ZmQ5ZjE1Y2M3ZmZmZWQzNjdiZmZkZmFhNTFkMDgyYjVkODVlMGQ1ZDdjZmZlNzhmMWVjZDUzNzlmZmZmOWMzMTMwYmJjOTk=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"QzdJJWp0bW50bU50bTY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"QzpcYmNzX3NlcnZpY2UuZXhl","type":"Ansi","source":"Hybrid Analysis","process":"bcs_service.exe","filename":"00034508-00002748.00000001.35008.00401000.00000020.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JVBST0dSQU1GSUxFUyVcKHg4NilcVmlzdWFsd2FyZSBCQ1M=","type":"Ansi","source":"Hybrid Analysis","process":"bcs_service.exe","filename":"00034508-00002748.00000001.35008.00401000.00000020.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JVBST0dSQU1GSUxFUyVcKHg4NilcVmlzdWFsd2FyZSBCQ1NcYmNzLmV4ZQ==","type":"Ansi","source":"Hybrid Analysis","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01311000.00000020.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"QzpcUHJvZ3JhbV9GaWxlc18oeDg2KVxWaXN1YWx3YXJlX0JDU1xWaXN1YWx3YXJlX2FwcGxpY2F0aW9uX21hbmFnZXJfLV9OZXRRQ2hlY2tIVE1MNUFnZW50LmV4ZS5hcmc=","type":"Ansi","source":"Runtime Data","process":"bcs.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"JVRFTVAlXA==","type":"Ansi","source":"Hybrid Analysis","process":"bcs_service.exe","filename":"00034508-00002748.00000001.35008.00401000.00000020.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JVRFTVAlXG5zeDQyRUUudG1w","type":"Ansi","source":"Hybrid Analysis","process":"bcs_service.exe","filename":"00034508-00002748.00000000.34829.00401000.00000020.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JVRFTVAlXG5zeDQyRUUudG1wXA==","type":"Ansi","source":"Hybrid Analysis","process":"bcs_service.exe","filename":"00034508-00002748.00000001.35008.00401000.00000020.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JVRFTVAlXG5zeDQyRUUudG1wXCouKg==","type":"Ansi","source":"Hybrid Analysis","process":"bcs_service.exe","filename":"00034508-00002748.00000001.35008.00401000.00000020.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JVRFTVAlXG5zeDQyRUUudG1wXG5zRXhlYy5kbGw=","type":"Ansi","source":"Hybrid Analysis","process":"bcs_service.exe","filename":"00034508-00002748.00000001.35008.00401000.00000020.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JVVTRVJQUk9GSUxFJVxEb2N1bWVudHNcVmlzdWFsd2FyZVxOZXRRQ2hlY2tcV2luZG93c0Rlc2t0b3BcTlFDQXBwTWdyXFJlbGVhc2VcTlFDQXBwTWdyLnBkYg==","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q0EgY2VydGlmaWNhdGUga2V5IHRvbyB3ZWFr","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q0Egc2lnbmF0dXJlIGRpZ2VzdCBhbGdvcml0aG0gdG9vIHdlYWs=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q2FsY3VsYXRpbmcgQWNoaWV2ZWQgYmFuZHdpZHRoIGZyb20gRGF0YVRpbWVz","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q2FsY3VsYXRpbmcgUW9TIGZyb20gRGF0YVRpbWVz","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q2FsbCB0byBDcmVhdGVXaW5kb3cgZmFpbGVkIQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F51000.00000020.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q2FsbCB0byBSZWdpc3RlckNsYXNzRXggZmFpbGVkIQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F51000.00000020.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q2FsbGVkIENBUElfZHNhX2RvX3NpZ24oKQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q2FsbGVkIGNhcGlfcnNhX3ByaXZfZGVjKCk=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q2FsbEZvckF0dHJpYnV0ZXM=","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q2FsbGluZyBjYXBpX2N0eF9mcmVlIHdpdGggJWx4","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q2FsbFdpbmRvd1Byb2NB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Y2Fubm90IGNyZWF0ZSBzb2NrZXQ=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q2Fubm90IG1lYXN1cmUgYmFuZHdpZHRoIC0gdGhlIHNlcnZlciBkb2VzIG5vdCBzdXBwb3J0IHRlc3RpbmcgdGhpcyBmYXN0","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q2Fubm90IHJlZGlyZWN0IHRvICVzLiBIVFRQUyBub3Qgc3VwcG9ydGVk","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q2FwIHRlc3QgY3JlYXRlZA==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q2FwIFRlc3QgVGhyZWFk","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q2FwYWNpdHkgcHJlLXRlc3QgZmFpbGVk","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q2FwYWNpdHkgUHJlLXRlc3QgaXRlcmF0aW9uIGxpbWl0IHJlYWNoZWQuIENoZWNrIGluaXRpYWwgYmFuZHdpZHRo","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q2FwYWNpdHkgcHJlLXRlc3QgcmVzdWx0IGlzICVkYnBz","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q2FwYWNpdHkgVGVzdCBBdWRpdA==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y2FwYWNpdHku","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y2FwaV9jZXJ0X2dldF9mbmFtZQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y2FwaV9jdHhfc2V0X3Byb3ZuYW1lLCBuYW1lPSVzLCB0eXBlPSVk","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y2FwaV9nZXRfa2V5LCBjb250bmFtZT0lcywgcHJvdm5hbWU9JXMsIHR5cGU9JWQ=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y2FwaV9nZXRfa2V5LCBjb250bmFtZT0lcywgUlNBX0FFU19DU1A=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y2FwaV9nZXRfcHJvdm5hbWUsIGluZGV4PSVk","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y2FwaV9nZXRfcHJvdm5hbWUsIHJldHVybmVkIG5hbWU9JXMsIHR5cGU9JWQ=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q2F0ZWdvcnk=","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q0R+N0FAfiVBQG5P","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q0VJUEVuYWJsZQ==","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q0VSVElGSUNBVEU=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q2VydGlmaWNhdGUgJWQ=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y2VydGlmaWNhdGUgY2hhaW4gdG9vIGxvbmc=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y2VydGlmaWNhdGUgaGFzIGV4cGlyZWQ=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y2VydGlmaWNhdGUgaXMgbm90IHlldCB2YWxpZA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y2VydGlmaWNhdGUgbm90IHRydXN0ZWQ=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y2VydGlmaWNhdGUgcmVqZWN0ZWQ=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y2VydGlmaWNhdGUgcmV2b2tlZA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y2VydGlmaWNhdGUgc2lnbmF0dXJlIGZhaWx1cmU=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q2VydGlmaWNhdGUgVHJhbnNwYXJlbmN5IHJlcXVpcmVkLCBidXQgbm8gdmFsaWQgU0NUcyBmb3VuZA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q2VydGlmaWNhdGU6","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q2hhbmdlU2VydmljZUNvbmZpZzJB","type":"Ansi","source":"Dropped File","process":null,"filename":"SimpleSC.dll.328895541","compromised":null,"detection_total":null,"total":null},{"value":"Y2hhcmFjdGVycw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q2hhck5leHRB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2hhclByZXZB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2hlY2tEbGdCdXR0b24=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2hlY2tpbmcgdmVyc2lvbiBvbiBzZXJ2ZXIuIHVwZGF0ZWJjcy52aXN1YWx3YXJlLmNvbS9hcHB1cGRhdGVzL05ldFFDaGVja0hUTUw1QWdlbnQvd2luZG93cy92ZXJzaW9uLnR4dA==","type":"Ansi","source":"Runtime Data","process":"NetQCheckHTML5Agent.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q2hlY2tUb2tlbk1lbWJlcnNoaXA=","type":"Ansi","source":"Dropped File","process":null,"filename":"UserInfo.dll.2533488085","compromised":null,"detection_total":null,"total":null},{"value":"Q2hvc2VuICVkIERhdGFUaW1lcyBiZXR3ZWVuICVkIGFuZCAlZA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q2xhc3MgSGllcmFyY2h5IERlc2NyaXB0b3In","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y2xpZW50IGZpbmlzaGVk","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y2xpZW50aXA9","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q2xvc2VDbGlwYm9hcmQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2xvc2VIYW5kbGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2xvc2VTZXJ2aWNlSGFuZGxl","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q29DcmVhdGVJbnN0YW5jZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Y29lZmZpY2llbnQ6","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q29mYWN0b3I6","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q29tK0VuYWJsZWQ=","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q09NQ1RMMzIuZGxs","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q29tbWFuZHM6IHEgPSBxdWl0","type":"Ansi","source":"Hybrid Analysis","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01311000.00000020.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q29tbWFuZHM6IHEgPSBxdWl0IHMgPSBzdXBwb3J0IGIgPSBiaW5kIGVycm9yIGhlbHA=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q29tcGFyZUZpbGVUaW1l","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q29tcGFyZVN0cmluZ0V4","type":"Ansi","source":"Hybrid Analysis","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01311000.00000020.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q29tcGFyZVN0cmluZ1c=","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q29tcGF0RGxs","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29tcGxldGUgT2JqZWN0IExvY2F0b3In","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q29tcHV0ZXJOYW1l","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Y29tcHV0ZXJuYW1l","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q29uZmlybSBhbnkgY2hhbmdlIGhlcmU=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q29uZmlybSBQYXNzd29yZA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y29uZmlybWF0aW9ucw==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q29ubmVjdCBmYWlsZWQgWyVzOiVkXQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q29ubmVjdGlvbiBjbG9zZWQgYnkgcmVtb3Rl","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q29ubmVjdGlvbiB0eXBlOi0tLS0tLS0tLS0tLS0tLS0tLS0tLS0gJXM=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q29ubmVjdGlvbjogS2VlcC1BbGl2ZQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q29ubmVjdGlvbjogVXBncmFkZQ==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q29uc2lkZXJpbmcgcGF1c2VzIGJldHdlZW4gJWRtcyBhbmQgJWRtcy4uLg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y29udCBbICVkIF0=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q29udGFjdGluZyB0aGUgdXBkYXRlIHNlcnZlciB3YXMgc3VjY2Vzc2Z1bA==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q29udGFpbmVyIE5hbWU6ICVzLCBLZXkgVHlwZSAlbHU=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q29udGVudCBsZW5ndGggZXhjZWVkcyBIVE1MIGJ1ZmZlcg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q29udGVudC1MZW5ndGg6","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q29udGVudC1UeXBlOg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q29udGludWVTZXJ2aWNl","type":"Ansi","source":"Dropped File","process":null,"filename":"SimpleSC.dll.328895541","compromised":null,"detection_total":null,"total":null},{"value":"Q29udHJvbCBQYW5lbFxEZXNrdG9wXFJlc291cmNlTG9jYWxl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q29udHJvbFNlcnZpY2U=","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q29weUZpbGVB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q29yRXhpdFByb2Nlc3M=","type":"Ansi","source":"Hybrid Analysis","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01311000.00000020.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q29UYXNrTWVtRnJlZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q291bGQgbm90IGVzdGFibGlzaCBtb3N0IGxpa2VseSBwYXVzZQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y291bnRlcjo=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q3BGRmd8UGo2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlQnJ1c2hJbmRpcmVjdA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlRGlhbG9nUGFyYW1B","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlRGlyZWN0b3J5QQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlRXZlbnRB","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlRmlsZUE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlRmlsZU1hcHBpbmdB","type":"Ansi","source":"Dropped File","process":null,"filename":"nsExec.dll.2021186361","compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlRmlsZVc=","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlRm9udEluZGlyZWN0QQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlUGlwZQ==","type":"Ansi","source":"Dropped File","process":null,"filename":"nsExec.dll.2021186361","compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlUG9wdXBNZW51","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlUHJvY2Vzc0E=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlU2VydmljZUE=","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlVGhyZWFk","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlVm9pcFRlc3Q6IFBhY2tldHMgcGVyIHRlc3QgbGltaXRlZCB0byAlZA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlV2luZG93RXhB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q1JMIGhhcyBleHBpcmVk","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q1JMIGlzIG5vdCB5ZXQgdmFsaWQ=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q1JMIHBhdGggdmFsaWRhdGlvbiBlcnJvcg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q1JMIHNpZ25hdHVyZSBmYWlsdXJl","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q1JMaXNzdWVy","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q1JZUFRCQVNF","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGFzbjFcYV9iaXRzdHIuYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGFzbjFcYV9kMmlfZnAuYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGFzbjFcYV9kaWdlc3QuYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGFzbjFcYV9kdXAuYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGFzbjFcYV9nZW50bS5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGFzbjFcYV9pbnQuYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGFzbjFcYV9tYnN0ci5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGFzbjFcYV9vYmplY3QuYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGFzbjFcYV9zdHJleC5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGFzbjFcYV9zdHJuaWQuYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGFzbjFcYV90aW1lLmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGFzbjFcYV91dGN0bS5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGFzbjFcYV92ZXJpZnkuYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGFzbjFcYW1ldGhfbGliLmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGFzbjFcYXNuMV9nZW4uYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGFzbjFcYXNuMV9saWIuYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGFzbjFcYXNuX21vaWQuYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGFzbjFcYXNuX21zdGJsLmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGFzbjFcYXNuX3BhY2suYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGFzbjFcYmlvX2FzbjEuYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGFzbjFcZDJpX3ByLmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGFzbjFcZXZwX2FzbjEuYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGFzbjFccDVfc2NyeXB0LmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGFzbjFcdF9wa2V5LmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGFzbjFcdGFzbl9kZWMuYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGFzbjFcdGFzbl9lbmMuYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGFzbjFcdGFzbl9mcmUuYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGFzbjFcdGFzbl9uZXcuYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGFzbjFcdGFzbl91dGwuYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGFzbjFceF9pbmZvLmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGFzbjFceF9wa2V5LmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGFzeW5jXGFzeW5jLmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGFzeW5jXGFzeW5jX3dhaXQuYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGJpb1xiX3ByaW50LmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGJpb1xiZl9idWZmLmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGJpb1xiaW9fbGliLmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGJpb1xic3NfZmlsZS5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGJpb1xic3NfbWVtLmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGJuXGJuX2FkZC5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGJuXGJuX2JsaW5kLmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGJuXGJuX2N0eC5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGJuXGJuX2Rpdi5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGJuXGJuX2V4cC5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGJuXGJuX2djZC5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGJuXGJuX2dmMm0uYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGJuXGJuX2ludGVybi5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGJuXGJuX2xpYi5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGJuXGJuX21vbnQuYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGJuXGJuX3ByaW1lLmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGJuXGJuX3ByaW50LmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGJuXGJuX3JhbmQuYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGJuXGJuX3JlY3AuYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGJuXGJuX3NoaWZ0LmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGJuXGJuX3NxcnQuYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGJ1ZmZlclxidWZmZXIuYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGNtYWNcY21hYy5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGNtc1xjbXNfYXNuMS5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGNtc1xjbXNfZGQuYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGNtc1xjbXNfZW5jLmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGNtc1xjbXNfZW52LmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGNtc1xjbXNfaW8uYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGNtc1xjbXNfa2FyaS5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGNtc1xjbXNfbGliLmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGNtc1xjbXNfcHdyaS5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGNtc1xjbXNfc2QuYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGNvbXBcY29tcF9saWIuYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGNvbmZcY29uZl9hcGkuYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGNvbmZcY29uZl9kZWYuYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGNvbmZcY29uZl9saWIuYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGNvbmZcY29uZl9tb2QuYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGN0XGN0X2xvZy5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGN0XGN0X29jdC5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGN0XGN0X3BvbGljeS5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGN0XGN0X3NjdC5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGN0XGN0X3NjdF9jdHguYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGN0XGN0X3ZmeS5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGN0XGN0X3g1MDl2My5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGRoXGRoX2FtZXRoLmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGRoXGRoX2FzbjEuYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGRoXGRoX2dlbi5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGRoXGRoX2tkZi5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGRoXGRoX2tleS5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGRoXGRoX2xpYi5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGRoXGRoX3BtZXRoLmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGRzYVxkc2FfYW1ldGguYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGRzYVxkc2FfYXNuMS5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGRzYVxkc2FfZ2VuLmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGRzYVxkc2FfbGliLmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGRzYVxkc2FfbWV0aC5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGRzYVxkc2Ffb3NzbC5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGRzYVxkc2FfcG1ldGguYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGRzb1xkc29fbGliLmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGVjXGVjMl9tdWx0LmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGVjXGVjMl9vY3QuYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGVjXGVjMl9zbXBsLmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGVjXGVjX2FtZXRoLmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGVjXGVjX2FzbjEuYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGVjXGVjX2tleS5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGVjXGVjX2ttZXRoLmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGVjXGVjX2xpYi5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGVjXGVjX211bHQuYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGVjXGVjX29jdC5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGVjXGVjX3BtZXRoLmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGVjXGVjX3ByaW50LmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGVjXGVjZGhfb3NzbC5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGVjXGVjZHNhX29zc2wuYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGVjXGVjZHNhX3NpZ24uYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGVjXGVjZHNhX3ZyZi5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGVjXGVja19wcm4uYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGVjXGVjcF9tb250LmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGVjXGVjcF9uaXN0LmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGVjXGVjcF9vY3QuYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGVjXGVjcF9zbXBsLmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGVjXGVjeF9tZXRoLmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGVuZ2luZVxlbmdfY25mLmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGVuZ2luZVxlbmdfY3RybC5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGVuZ2luZVxlbmdfZHluLmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGVuZ2luZVxlbmdfZmF0LmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGVuZ2luZVxlbmdfaW5pdC5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGVuZ2luZVxlbmdfbGliLmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGVuZ2luZVxlbmdfbGlzdC5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGVuZ2luZVxlbmdfcGtleS5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGVuZ2luZVxlbmdfdGFibGUuYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGVuZ2luZVx0Yl9hc25tdGguYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGVuZ2luZVx0Yl9jaXBoZXIuYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGVuZ2luZVx0Yl9kaWdlc3QuYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGVuZ2luZVx0Yl9wa21ldGguYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGVyclxlcnIuYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGV2cFxiaW9fYjY0LmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGV2cFxiaW9fZW5jLmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGV2cFxjbWV0aF9saWIuYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGV2cFxkaWdlc3QuYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGV2cFxlX2NhbWVsbGlhLmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGV2cFxlX2NoYWNoYTIwX3BvbHkxMzA1LmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGV2cFxlX3JjMi5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGV2cFxlbmNvZGUuYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGV2cFxldnBfY25mLmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGV2cFxldnBfZW5jLmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGV2cFxldnBfa2V5LmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGV2cFxldnBfbGliLmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGV2cFxldnBfcGJlLmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGV2cFxldnBfcGtleS5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGV2cFxtX3NpZ3Zlci5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGV2cFxwNV9jcnB0Mi5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGV2cFxwX2xpYi5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGV2cFxwX3NpZ24uYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGV2cFxwX3ZlcmlmeS5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGV2cFxwbWV0aF9mbi5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGV2cFxwbWV0aF9nbi5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGV2cFxwbWV0aF9saWIuYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGV2cFxzY3J5cHQuYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGV4X2RhdGEuYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGhtYWNcaG1fcG1ldGguYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGhtYWNcaG1hYy5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGluaXQuYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGtkZlxoa2RmLmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGtkZlx0bHMxX3ByZi5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGxoYXNoXGxoYXNoLmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXG1vZGVzXG9jYjEyOC5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXG9fc3RyLmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXG9iamVjdHNcb19uYW1lcy5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXG9iamVjdHNcb2JqX2RhdC5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXG9iamVjdHNcb2JqX2xpYi5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXG9iamVjdHNcb2JqX3hyZWYuYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXG9jc3Bcb2NzcF9jbC5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXHBlbVxwZW1faW5mby5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXHBlbVxwZW1fbGliLmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXHBlbVxwZW1fb3RoLmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXHBlbVxwZW1fcGtleS5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXHBrY3MxMlxwMTJfY3JwdC5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXHBrY3MxMlxwMTJfZGVjci5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXHBrY3MxMlxwMTJfa2V5LmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXHBrY3MxMlxwMTJfdXRsLmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXHBrY3M3XHBrN19hdHRyLmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXHBrY3M3XHBrN19kb2l0LmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXHBrY3M3XHBrN19saWIuYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXHJhbmRcbWRfcmFuZC5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXHJzYVxyc2FfYW1ldGguYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXHJzYVxyc2FfY3JwdC5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXHJzYVxyc2FfZ2VuLmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXHJzYVxyc2FfbGliLmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXHJzYVxyc2FfbWV0aC5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXHJzYVxyc2Ffbm9uZS5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXHJzYVxyc2Ffb2FlcC5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXHJzYVxyc2Ffb3NzbC5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXHJzYVxyc2FfcGsxLmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXHJzYVxyc2FfcG1ldGguYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXHJzYVxyc2FfcHNzLmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXHJzYVxyc2Ffc2Fvcy5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXHJzYVxyc2Ffc2lnbi5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXHJzYVxyc2Ffc3NsLmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXHJzYVxyc2FfeDkzMS5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXHNycFxzcnBfbGliLmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXHN0YWNrXHN0YWNrLmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXHRocmVhZHNfbm9uZS5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXHVpXHVpX2xpYi5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXHg1MDlcYnlfZGlyLmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXHg1MDlcYnlfZmlsZS5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXHg1MDlcdF94NTA5LmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXHg1MDlceDUwOV9hdHQuYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXHg1MDlceDUwOV9jbXAuYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXHg1MDlceDUwOV9sdS5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXHg1MDlceDUwOV9vYmouYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXHg1MDlceDUwOV92ZnkuYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXHg1MDlceDUwOV92cG0uYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXHg1MDlceDUwOW5hbWUuYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXHg1MDlceF9uYW1lLmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXHg1MDlceF9wdWJrZXkuYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXHg1MDl2M1xwY3lfY2FjaGUuYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXHg1MDl2M1xwY3lfZGF0YS5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXHg1MDl2M1xwY3lfbm9kZS5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXHg1MDl2M1xwY3lfdHJlZS5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXHg1MDl2M1x2M19hZGRyLmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXHg1MDl2M1x2M19ha2V5LmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXHg1MDl2M1x2M19hbHQuYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXHg1MDl2M1x2M19hc2lkLmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXHg1MDl2M1x2M19iY29ucy5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXHg1MDl2M1x2M19jb25mLmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXHg1MDl2M1x2M19jcG9scy5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXHg1MDl2M1x2M19jcmxkLmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXHg1MDl2M1x2M19lbnVtLmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXHg1MDl2M1x2M19leHRrdS5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXHg1MDl2M1x2M19pYTUuYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXHg1MDl2M1x2M19pbmZvLmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXHg1MDl2M1x2M19uY29ucy5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXHg1MDl2M1x2M19wY2kuYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXHg1MDl2M1x2M19wY29ucy5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXHg1MDl2M1x2M19wbWFwcy5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXHg1MDl2M1x2M19wcm4uYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXHg1MDl2M1x2M19za2V5LmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXHg1MDl2M1x2M19zeG5ldC5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXHg1MDl2M1x2M191dGwuYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q3J5cHRvQVBJIERTQSBtZXRob2Q=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q3J5cHRvQVBJIFJTQSBtZXRob2Q=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q3VycmVudCBWZXJzaW9uIE5vdCBDb21wYXRpYmxl","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q3VycmVudCB2ZXJzaW9uIG9mIGFwcCBpcyA1LjQ0","type":"Ansi","source":"Dropped File","process":null,"filename":"AppUpdaterLog.txt","compromised":null,"detection_total":null,"total":null},{"value":"Q1dESWxsZWdhbEluRExMU2VhcmNo","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Y1hfLmM4Ql8uZzhJTw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q3ljbGUgJWRBdHRlbXB0IHRvIHN0cmVhbSBiYW5kd2lkdGg6ICV1YnBzICglZCBwa3RzL3NlYywgJWQgYnl0ZXMvcGt0KS4uLg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"ZCB0bywgaW1wbGllZCB3YXJyYW50aWVzIG9mIG1lcmNoYW50YWJpbGl0eSwgZml0bmVzcyBmb3IgYSBwYXJ0aWN1bGFyIHB1cnBvc2UsIGFuZCBub25pbmZyaW5nZW1lbnQuIFxsaW5lIFxsaW5lIH17XHJ0bGNoXGZjczEgXGFiXGFmMlxhZnMyMCBcbHRyY2hcZmNzMCBcYlxmMlxmczIwXGxhbmcyMDU3XGxhbmdmZTIwNTdcbGFuZ2ZlbnAyMDU3XGluc3JzaWQxMzA1MDcyMlxjaGFycnNpZDEzMDUwNzIy","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"RCxCSW9sIUV5","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"ZDBjZjExZTBhMWIxMWFlMTAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwM2UwMDAzMDBmZWZmMDkwMDA2MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAxMDAwMDAwMDEwMDAwMDAwMDAwMDAwMDAwMTAwMDAwZmVmZmZmZmYwMDAwMDAwMGZlZmZmZmZmMDAwMDAwMDAwMDAwMDAwMGZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZm","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"ZDgyYjhkMDZmOTk2NWJjNTc0YWJhZTM2ZWVkMWQ2N2RmYjk4NTBkYTEzNzM4YWY3YjlkYWJhNzNlODRjYTMyZTBjNGEzYmY1Y2M4YWIzZTdiODY5MDg4N2YyNGU4NjA5MGNkYzI0NDFjYWM2NDk5OGY4ODQ4OGIwMTdhMjI5ZWM=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"ZDpcb3BlbnNvdXJjZVxvcGVuc3NsLTEuMS4wYlxzc2xccGFja2V0X2xvY2wuaA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RDpcb3BlbnNvdXJjZVxvcGVuc3NsLWRpc3QtMS4xLjBiLXZzMjAxNVxvcGVuc3NsLXg4Ni1zdGF0aWMtcmVsZWFzZS12czIwMTVcbGliXGVuZ2luZXMtMV8x","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"ZD0lLTJkIGhsPSVsZCBsPSU0bGQ=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"ZD0lLTJkIGhsPSVsZCBsPWluZg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RGF0YSBjb3VudCAlZCBpbiAldW1zICglZEticHMpLCB0b3RhbCAlZCglZEticHMp","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"ZGRkZCwgTU1NTSBkZCwgeXl5eQ==","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RGVidWdIZWFwRmxhZ3M=","type":"Unicode","source":"Runtime Data","process":"NetQCheckHTML5Agent.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGVjb2RlUG9pbnRlcg==","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RGVjb2RlU2VydmljZUFyZ3M=","type":"Ansi","source":"Hybrid Analysis","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01310000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RGVjb2RlU2VydmljZUFyZ3MgT25JbnN0YWxs","type":"Ansi","source":"Runtime Data","process":"bcs.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"ZGVjb21waWxlLCBvciBkaXNhc3NlbWJsZSB0aGUgU09GVFdBUkUgUFJPRFVDVC4gKEMpIFlvdSBtYXkgbm90IHJlbnQgb3IgbGVhc2UgdGhlIFNPRlRXQVJFIFBST0RVQ1QuIChEKSBZb3UgbWF5IG5vdCBkaXN0cmlidXRlIGNvcGllcyBvZiB0aGUgYWN0aXZhdGVkIFNPRlRXQVJFIFBST0RVQ1Qgb3IgbGljZW5zZSBrZXlzIHRvIHRoaXJkIHBhcnRpZXMuIChFKSBZb3UgbWF5IG5vdCBleGNlZWQgdGhlIHNjb3BlIG9mIHlvdXIgbGljZW5zZWQgU09G","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"ZGVmYXVsdF9hbGdvcml0aG1z","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RGVmV2luZG93UHJvY0E=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"REVLLUluZm86","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RGVsYXkgYWZ0ZXIgbG9zcyBpcyAlZG1z","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RGVsYXkgQXZlLiAgID0gJWQuJWRtcw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RGVsZXRlQ3JpdGljYWxTZWN0aW9u","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RGVsZXRlRmlsZUE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"RGVsZXRlT2JqZWN0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"RGVsZXRlU2VydmljZQ==","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RGVzY3JpcHRpb24=","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGVzdHJveWluZyBIdHRwU2VydmVyU2Vzc2lvbiBvbiBzb2NrZXQgJWQ=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RGVzdHJveVdpbmRvdw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"RGV2aWNlUGF0aA==","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"ZGZhYWI3ZGFmZTAyYWI4MWQyNDM4YmVmNzZiNTVkMmUxYTc4Y2Q3Zjc5ODM3M2QzOTczZjAzYWY0MGE5N2Y2ZjAzZGZlZDA2MTA0NTAzYWY0MDI5ZGVkZmMwN2I1ZWI1MTQ3ODA2NWU4MTUyN2M2NTAzNWYyZDM0ZGI1ZWQ1YzA=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"REggUGFyYW1ldGVycw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"REggUEFSQU1FVEVSUw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"REggUHJpdmF0ZS1LZXk=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"REggUHVibGljLUtleQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"REhDUCBkaXNjb3ZlciBzZW50IC0gd2FpdGluZyBmb3Igb2ZmZXIuLi4=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"REhDUCBzZXJ2ZXIgbm90IGRldGVjdGVk","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"REhDUCBUZXN0IEF1ZGl0","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"REhDUCB0ZXN0IGNvbXBsZXRl","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"ZGhjcG9wdGlvbnM6ICVz","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"REhDUFNlcnZlcg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"REhDUHNlcnZlcnM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RGlhbG9nQm94UGFyYW1B","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"RGlmZmVyZW50IENSTCBzY29wZQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RGlyZWN0aW9uIHNldCB0byBEb3du","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RGlyZWN0aW9uIHNldCB0byBVcA==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RGlyTmFtZTo=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RGlzYWJsZUVuZ2luZQ==","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGlzYWJsZUxvY2FsT3ZlcnJpZGU=","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGlzYWJsZU1ldGFGaWxlcw==","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGlzYWJsZVVzZXJNb2RlQ2FsbGJhY2tGaWx0ZXI=","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"ZGlzY2FyZG1z","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RGlzY2FyZHMgICAgID0gJTAyZC4lMDJkJSU=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RGlzcGF0Y2hNZXNzYWdlQQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"RGlzcGxheU5hbWU=","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"ZGlzcGxheXNwZWVk","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RGlzcGxheVN0cmluZw==","type":"Unicode","source":"Runtime Data","process":"NetQCheckHTML5Agent.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"ZGxvY2tlZDAgdGFibGUgb2YgYXV0aG9yaXRpZXM7XGxzZHNlbWloaWRkZW4xIFxsc2R1bmhpZGV1c2VkMSBcbHNkbG9ja2VkMCBtYWNybztcbHNkc2VtaWhpZGRlbjEgXGxzZHVuaGlkZXVzZWQxIFxsc2Rsb2NrZWQwIHRvYSBoZWFkaW5nO1xsc2RzZW1paGlkZGVuMSBcbHNkdW5oaWRldXNlZDEgXGxzZGxvY2tlZDAgTGlzdDtcbHNkc2VtaWhpZGRlbjEgXGxzZHVuaGlkZXVzZWQxIFxsc2Rsb2NrZWQwIExpc3QgQnVsbGV0O1xsc2RzZW1paGlkZGVuMSBc","type":"Ansi","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RE5TIGxvb2t1cCBmYWlsZWQ=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"ZG5zdGltZT0=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"ZG9kb3dubG9hZA==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RG93biBIYW5kbGUgRGVsZXRlZA==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RG93biBTZXNzaW9uczo=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RG93biBUZXN0IFR5cGU6","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RG93bmxvYWQgcGFja2V0IGRldGFpbA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"ZG93bmxvYWQucG9ydD0=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RG93bnN0cmVhbQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"ZG93bnN0cmVhbQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RG93bnN0cmVhbSBSZXN1bHRzIHNlbnQgdG8gc2VydmVy","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RG93bnN0cmVhbSB0ZXN0OiBubyByZXNwb25zZSBmcm9tIHNlcnZlcg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RG93bnN0cmVhbSB0ZXN0OiBubyByZXNwb25zZSBmcm9tIHNlcnZlci4gJXM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RG93bnN0cmVhbSB0ZXN0OiBzdGFydGVkIG9r","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"ZG93bnR5cGU=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RHJhd1RleHRB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"RHJpdmVNYXNr","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"ZFJWLj1xTmZm","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"RFNBLVBhcmFtZXRlcnM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"ZHNhX3BhcmFtZ2VuX2JpdHM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"ZHNhX3BhcmFtZ2VuX21k","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"ZHNhX3BhcmFtZ2VuX3FfYml0cw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RHVyYXRpb246","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RHVyYXRpb249JWRzLCBwcHM9JWQsIHBwdD0lZCwgYnBwPSVk","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"ZHluYW1pY19wYXRo","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"ZSBldmVuIGlmIHZlcnNpb24gY2hlY2tpbmcgZmFpbHMgKGJvb2xlYW4p","type":"Ansi","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RSFEIVYhUSFFIUchTw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"ZSdzIGVudGlyZSBsaWFiaWxpdHkgYW5kIHlvdXIgZXhjbHVzaXZlIHJlbWVkeSB1bmRlciB0aGlzIEFncmVlbWVudCBzaGFsbCBub3QgZXhjZWVkIHlvdXIgcHVyY2hhc2UgcHJpY2UuIFxsaW5lIFxsaW5lIH17XHJ0bGNoXGZjczEgXGFiXGFmMlxhZnMyMCBcbHRyY2hcZmNzMCBcYlxmMlxmczIwXGxhbmcyMDU3XGxhbmdmZTIwNTdcbGFuZ2ZlbnAyMDU3XGluc3JzaWQxMzA1MDcyMlxjaGFycnNpZDEzMDUwNzIy","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"ZTJlYzkzNDkwODg1Mzc0NTMxZTMzMDVjMjgxNWJhODUzMmZjOTczZjRmMWRhOTg4YTAxZDhjMzQ2YmM5MGI5OGYwOGQyMWM5YzdlMWMzODQ0YzQ1YzNmZDE4YmNiYTFhZTRjZGNiMWZkZmJjN2NlZTljM2M3YTcxZjJlODk3OTM=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"ZTN7YkU8cylkN18=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"ZTU2MmM3MmYxNmRhYWRkMjQzNjgyYzIyOGM4YTdlZmFjZGE1MGJhZmEyZTg3Y2YxZTU0NThkNmY3YzdkODk5NjZmZGIyZTBkNTk5NDY3ZWFlYjRhNWUxMTU3NWY1ZjhhYTVlZDVmNWYxYzAyYTJmM2EwNTJlYWQ2Y2JmNTU2MjU=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"ZWFzZSB3YWl0IHdoaWxlIFNldHVwIGlzIGxvYWRpbmcuLi4=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"RUNESEUtRUNEU0EtQUVTMTI4LUdDTS1TSEEyNTY=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RUNESEUtRUNEU0EtQUVTMTI4LUdDTS1TSEEyNTY6RUNESEUtRUNEU0EtQUVTMjU2LUdDTS1TSEEzODQ=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RUNESEUtRUNEU0EtQUVTMjU2LUdDTS1TSEEzODQ=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RUNEU0E=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RUNEU0EtUGFyYW1ldGVycw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RWRpUGFydHlOYW1l","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RWRpUGFydHlOYW1lOjx1bnN1cHBvcnRlZD4=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RUUgY2VydGlmaWNhdGUga2V5IHRvbyB3ZWFr","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"ZWY4YmFlNzQzMmUxMGJkNzEzZWU0YzE5ODc2ZGJmMWFiNmZhOTY3ODNhOGIwZWQ4Mjg3ZDVjMmQxNmU1YTM2OTJhMWUxYzg5ZDU3OGMxY2ZjNmUxNTE0M2E0ZTg0YTc1ZjUwODk2Yjk1NzZjMjdlYTUxNzk0OTQwZGFiZTBkMDk=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"RWZmaWNpZW5jeSBUZXN0IEluaXQ=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RWZmaWNpZW5jeSBUZXN0IFRocmVhZA==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RUd2dVV3JkBeLQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"RUluT3V0RXJyb3IsVEA=","type":"Ansi","source":"Dropped File","process":null,"filename":"SimpleSC.dll.328895541","compromised":null,"detection_total":null,"total":null},{"value":"RUludmFsaWRQb2ludGVyXFhA","type":"Ansi","source":"Dropped File","process":null,"filename":"SimpleSC.dll.328895541","compromised":null,"detection_total":null,"total":null},{"value":"ZWwoP3VUIyN9","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"RW1haWwgYWRkcmVzcyBtaXNtYXRjaA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"ZW1haWw6JXM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RW1wdHlDbGlwYm9hcmQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"RW5hYmxlTWVudUl0ZW0=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"RW5hYmxlV2luZG93","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"RU5DUllQVEVE","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RU5DUllQVEVEIFBSSVZBVEUgS0VZ","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RW5kRGlhbG9n","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"RW5kTG9zcyA9ICVkLiVkJSU=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RW5kTXMgPSAlZA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RW5kVm9JUFRlc3RTZXNzaW9uIGF0ICVz","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"ZW5naW5lX2lk","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"ZW5naW5lc1xlX2NhcGkuYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RW50ZXIgUGFzc3dvcmQ=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RW50ZXIgUEVNIHBhc3MgcGhyYXNlOg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RW50ZXIgVXNlcm5hbWU=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RW50ZXJDcml0aWNhbFNlY3Rpb24=","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RW51bVN5c3RlbUxvY2FsZXNFeA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RVErJ31cPnRvZTU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"ZXFBR3w2In5M","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVFNJ2U3bVhhVw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"RXF1YWxTaWQ=","type":"Ansi","source":"Dropped File","process":null,"filename":"UserInfo.dll.2533488085","compromised":null,"detection_total":null,"total":null},{"value":"RXJyb3IgJWQgZ2V0dGluZyBzb2NrZXQgYnVmZmVyIHNpemU=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RXJyb3IgJWQgZ2V0dGluZyBzb2NrZXQgZXJyb3I=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RXJyb3IgJWQgc2V0dGluZyBzb2NrZXQgYnVmZmVyIHNpemU=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RXJyb3IgYWNjZXNzaW5nIHRoZSBzcGVjaWZpZWQgZmlsZQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RXJyb3IgY29kZT0gMHg=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RXJyb3IgY3JlYXRpbmcgRGF0YU91dHB1dFN0cmVhbQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RXJyb3IgaW4gZW5jb2Rpbmc=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RXJyb3IgbGF1bmNoaW5nIGluc3RhbGxlcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"RXJyb3IgTG9n","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RXJyb3Igd3JpdGluZyB0ZW1wb3JhcnkgZmlsZS4gTWFrZSBzdXJlIHlvdXIgdGVtcCBmb2xkZXIgaXMgdmFsaWQu","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"ZXJyb3I6JTA4bFg6JXM6JXM6JXM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"ZXJzXEhBUFVCV1NcQXBwRGF0YVxMb2NhbFxUZW1wXG5zeDQyRUUudG1w","type":"Ansi","source":"Memory/File Scan","process":"bcs_service.exe","filename":"00034508-00002748.00000001.35008.00409000.00000004.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"ZXJzXEhBUFVCV1NcQXBwRGF0YVxMb2NhbFxUZW1wXG5zeDQyRUUudG1wXG5zRXhlYy5kbGw=","type":"Ansi","source":"Memory/File Scan","process":"bcs_service.exe","filename":"00034508-00002748.00000001.35008.00409000.00000004.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"ZVJzWTdzWXdz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"RXN0aW1hdGluZyBsaW5lIHNwZWVkIGZyb20gYXZlcmFnZSBwYXVzZSBbJWRd","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RXN0aW1hdGluZyBNVFU=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RXZhbHVhdGlvbiBleHBpcmVk","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"ZXhjbHVkZWQgc3VidHJlZSB2aW9sYXRpb24=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RXhlY1RvTG9n","type":"Ansi","source":"Dropped File","process":null,"filename":"nsExec.dll.2021186361","compromised":null,"detection_total":null,"total":null},{"value":"RXhlY1RvU3RhY2s=","type":"Ansi","source":"Dropped File","process":null,"filename":"nsExec.dll.2021186361","compromised":null,"detection_total":null,"total":null},{"value":"RXhpc3RzU2VydmljZQ==","type":"Ansi","source":"Dropped File","process":null,"filename":"SimpleSC.dll.328895541","compromised":null,"detection_total":null,"total":null},{"value":"RXhpdFByb2Nlc3M=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"RXhpdFRocmVhZA==","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RXhpdFdpbmRvd3NFeA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"RXhwYW5kRW52aXJvbm1lbnRTdHJpbmdzQQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"RXhwZWN0aW5nOg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"ZXhwbGljaXRUZXh0","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"ZXhwb25lbnQxOg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"ZXhwb25lbnQyOg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RXhwb25lbnQ6","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"ZXh0ZW5kZWQgbWFzdGVyIHNlY3JldA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RVplcm9EaXZpZGVQV0A=","type":"Ansi","source":"Dropped File","process":null,"filename":"SimpleSC.dll.328895541","compromised":null,"detection_total":null,"total":null},{"value":"ZjNhNTQyYTE5MjhmMTA4OTVkMjc0NjExYjhiZDMxMWU5MzIxNzZmYWQyYTViYmJiNzRkZWExNzAxYTBiMmUwNzg2MzRlOTQ5ZDdkOGIwNTBkOGQxNjE1MTIyZjg5YzA3MzQ3MThlMTA2ZGI4MzBjZjg4MWRmN2YxN2RlMTNhMTQ=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"ZjQ0ZjEzNmM3MDBmYzRhMzBkMmY4MTY3NTQ3MDk1NGFmOGYwOTAyMGQ4MTBmNWQ0OWUyNDk1MGRiODQ1ZWU4YmM1YWQwMTQ3Y2UyYzIxMGRmNzQxYzE2ZjdhNDFjOTBmNzI4NTlhZGZjOTc5NjVhZjkwYWJmOWNkNzJhZWU5ZmI=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"ZjdiYmI5OWFlYjcwODFlMjExYTIyY2M2MGQ3NzhlYjk3YjY1ZjdjMzBmMmVhMzFkMTFlMjA4M2I2MDFmZjMxZGQ0NzA0MzIxYTYzYmY5M2MxZmMyMzBlMjk3ZDgxNGM3NzA2ZGNjOTIwODA5Mzg0ZDI2Zjk1MTgyOGVjMTZmNDQ=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"RjxCPEk8UzxHPE8=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"RmFpbGVkIGdldHRpbmcgY29uZmlndXJhdGlvbiBvZiBzZXJ2ZXIgJyVzJw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RmFpbGVkIHRvIGFsbG9jYXRlIHJlc291cmNl","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RmFpbGVkIHRvIGFwcGx5IHVwZGF0ZQ==","type":"Ansi","source":"Hybrid Analysis","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01310000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RmFpbGVkIHRvIGJpbmQgdG8gbG9jYWwgcG9ydC9pbnRlcmZhY2U=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RmFpbGVkIHRvIGNhbGN1bGF0ZSBiYW5kd2lkdGg=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RmFpbGVkIHRvIGNoYW5nZSB0aW1lciByZXNvbHV0aW9u","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RmFpbGVkIHRvIGNvbm5lY3QgdG8gU0lQIHNvY2tldA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RmFpbGVkIHRvIGNyZWF0ZSBsaW5lIGJ1ZmZlcg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RmFpbGVkIHRvIGNyZWF0ZSBSZWNlaXZlZCBUaW1lcyBhcnJheQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RmFpbGVkIHRvIGNyZWF0ZSBTZW50IFRpbWVzIGFycmF5","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RmFpbGVkIHRvIGNyZWF0ZSBzb2NrZXQ=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RmFpbGVkIHRvIGNyZWF0ZSB0ZXN0IHRocmVhZA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RmFpbGVkIHRvIGNyZWF0ZSB1ZHAgc29ja2V0","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RmFpbGVkIHRvIGNyZWF0ZSBVRFAgc29ja2V0","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RmFpbGVkIHRvIGNyZWF0ZSBVRFAgc29ja2V0IGZvciBTSVAgdGVzdA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RmFpbGVkIHRvIGRvd25sb2FkZWQgcmVzdWx0cw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RmFpbGVkIHRvIGdldCBjb21wdXRlciBuYW1lLiBFcnJvciAldSBbJXNd","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RmFpbGVkIHRvIGdldCBzZXJ2ZXIgY29uZmln","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RmFpbGVkIHRvIGdldCBzZXJ2ZXIgY29uZmlnLg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RmFpbGVkIHRvIGdldCBzZXJ2ZXIgdGlja2V0Lg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RmFpbGVkIHRvIGdldCB1cGxvYWQgcmVzdWx0IHNldC4=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RmFpbGVkIHRvIGxvZyByZXBvcnQgc2VjdGlvbg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RmFpbGVkIHRvIG1lYXN1cmUgbGluZSBjYXBhY2l0eQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RmFpbGVkIHRvIG9idGFpbiBjYXBhY2l0eSB0ZXN0IHNlcnZlciBpbmZv","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RmFpbGVkIHRvIG9wZW4gY29uZmlndXJhdGlvbiBmaWxl","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RmFpbGVkIHRvIG9wZW4gU0NNYW5hZ2Vy","type":"Ansi","source":"Hybrid Analysis","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01311000.00000020.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RmFpbGVkIHRvIG9wZW4gc29ja2V0","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RmFpbGVkIHRvIHJlY2VpdmUgdXBsb2FkIHNwZWVkIHRpbWVzIFslZCBvZiAlZCByZWNlaXZlZF0=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"ZmFpbGVkIHRvIHJlc29sdmUgKA==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RmFpbGVkIHRvIHJlc29sdmUgbmFtZSAoZ2V0aG9zdGJ5bmFtZSgpKQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RmFpbGVkIHRvIHNlbmQgY29udGVudCBbJWQgb2YgJWRd","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RmFpbGVkIHRvIHNldCBicm9hZGNhc3Qgb3B0aW9u","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RmFpbGVkIHRvIHNldCBkZWZhdWx0IGNvbmZpZ3VyYXRpb24=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RmFpbGVkIHRvIHNldCByZXVzZSBhZGRyZXNzIG9wdGlvbg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RmFpbGVkIHRvIHNldCBzb2NrZXQgYnVmZmVyIHNpemU=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RmFpbGVkIHRvIHN0YXJ0ICVz","type":"Ansi","source":"Hybrid Analysis","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01311000.00000020.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RmFpbGVkIHRvIHN0YXJ0IHRoZSBUZXN0IGFnZW50","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RmFpbGVkIHRvIHRlcm1pbmF0ZSBwcm9jZXNzIFslZF0=","type":"Ansi","source":"Hybrid Analysis","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01311000.00000020.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RmF0YWwgRXJyb3IsIGFiYW5kb25pbmcgdGVzdA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"ZmZmZmZmZmZmZmZmZmZmZmZkZmZmZmZmZmVmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZm","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"ZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmY1MjAwNmYwMDZmMDA3NDAwMjAwMDQ1MDA2ZTAwNzQwMDcyMDA3OTAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDE2MDAwNTAwZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmMGM2YWQ5ODg5MmYxZDQxMWE2NWYwMDQwOTYzMjUxZTUwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDA0MDhi","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"ZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZm","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"RmllbGQgVHlwZTogJXM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RmluYWwgcmVhZGluZzogQWNoaWV2ZWQgJXVLYnBzIHdpdGggbG9zcz0lMC4zZiUl","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RmluYWwgdGVzdCBmYWlsZWQgdG8gbWVhc3VyZSBiYW5kd2lkdGg=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RmluYWwgdGVzdCB3aXRoIGJhbmR3aWR0aCA9ICV1YnBz","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"ZmluYWxyZXBvcnQ=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RmluZENsb3Nl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"RmluZEZpcnN0RmlsZUE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"RmluZEZpcnN0RmlsZUV4QQ==","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RmluZE5leHRGaWxlQQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"RmluZFdpbmRvd0V4QQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Zmlwc19tb2Rl","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Rmlwc0FsZ29yaXRobVBvbGljeQ==","type":"Unicode","source":"Runtime Data","process":"NetQCheckHTML5Agent.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RmlyZXdhbGwgVGVzdCBBdWRpdA==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RmlyZXdhbGwgdGVzdCBjcmVhdGVk","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RmlyZXdhbGxUZXN0OiB0byBUQ1AgcG9ydCAlZA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RmlyZXdhbGxUZXN0OiB0byBVRFAgcG9ydCAlZA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RmlybXdhcmUgdmVyc2lvbjogJXMgKCVzKQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RmxzR2V0VmFsdWU=","type":"Ansi","source":"Hybrid Analysis","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01311000.00000020.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RmxzU2V0VmFsdWU=","type":"Ansi","source":"Hybrid Analysis","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01311000.00000020.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Rmx1c2hGaWxlQnVmZmVycw==","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Zk1fcX5oWSx8SCg=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Rm1KZkpTZlFTYDEk","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Rm9sZGVyVHlwZUlE","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Zm9ybWF0IGVycm9yIGluIGNlcnRpZmljYXRlJ3Mgbm90QWZ0ZXIgZmllbGQ=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Zm9ybWF0IGVycm9yIGluIGNlcnRpZmljYXRlJ3Mgbm90QmVmb3JlIGZpZWxk","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Zm9ybWF0IGVycm9yIGluIENSTCdzIGxhc3RVcGRhdGUgZmllbGQ=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Zm9ybWF0IGVycm9yIGluIENSTCdzIG5leHRVcGRhdGUgZmllbGQ=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Rm91bmQgQUNNIG1ldHJpY3M=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RlBVTWFza1ZhbHVl","type":"Ansi","source":"Dropped File","process":null,"filename":"SimpleSC.dll.328895541","compromised":null,"detection_total":null,"total":null},{"value":"RnJlZUVudmlyb25tZW50U3RyaW5nc1c=","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RnJlZUxpYnJhcnk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"RnJlZUxpYnJhcnlBbmRFeGl0VGhyZWFk","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RnJpZW5kbHkgTmFtZSAiJXMi","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"ZnVuYyglbHUp","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RyZAJkgmQiZZJl0mQyZP","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"ZywgY29weWluZywgb3Igb3RoZXJ3aXNlIHVzaW5nIHRoZSBTT0ZUV0FSRSBQUk9EVUNULCB5b3UgYXJlIGFncmVlaW5nIHRvIGJlIGJvdW5kIGJ5IHRoZSB0ZXJtcyBvZiB0aGlzIEFncmVlbWVudC4gSWYgeW91IGRvIG5vdCBhZ3JlZSB0byBhbGwgb2YgdGhlIHRlcm1zIG9mIHRoaXMgQWdyZWVtZW50LCB5b3UgYXJlIG5vdCBhdXRob3JpemVkIHRvIHVzZSB0aGUgU09GVFdBUkUgUFJPRFVDVC4gXGxpbmUgXGxpbmUgfXtccnRsY2hcZmNzMQ==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"RzhoQlxseXM7XlZ2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Rz1EPUw9Rj1OPV49ST1TPUs9Xw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"R10yXmY5clF1Zw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Z0J6XklOaHN4","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"R0RJMzIuZGxs","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2VuZXJhbEVycm9y","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2VuZXJhdGlvbg==","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Z2VuZXJhdG9yOg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R0VUIC9hcHB1cGRhdGVzL05ldFFDaGVja0hUTUw1QWdlbnQvd2luZG93cy92ZXJzaW9uLnR4dCBIVFRQLzEuMUFjY2VwdDogKi8qQWNjZXB0LUxhbmd1YWdlOiBlbi11c1VzZXItQWdlbnQ6IE1vemlsbGEvNC4wSG9zdDogdXBkYXRlYmNzLnZpc3VhbHdhcmUuY29t","type":"Ansi","source":"PCAP Processing","process":null,"filename":"PCAP","compromised":null,"detection_total":null,"total":null},{"value":"R0VUIC9teXNwZWVkL3BsdWdpbi9yb3V0ZS9hcHBsZXQvcmVsb29rdXA/JmRldGFpbC5pcHM9","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0QWNjb3VudFR5cGU=","type":"Ansi","source":"Dropped File","process":null,"filename":"UserInfo.dll.2533488085","compromised":null,"detection_total":null,"total":null},{"value":"R2V0Q2xhc3NJbmZvQQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0Q2xpZW50UmVjdA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0Q29tbWFuZExpbmVB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0Q29tbWFuZExpbmVX","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0Q29uc29sZUNQ","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0Q29uc29sZU1vZGU=","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0Q1BJbmZv","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0Q3VycmVudFBhY2thZ2VJZA==","type":"Ansi","source":"Hybrid Analysis","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01311000.00000020.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0Q3VycmVudFByb2Nlc3M=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0Q3VycmVudFByb2Nlc3NJZA==","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0Q3VycmVudFRocmVhZA==","type":"Ansi","source":"Dropped File","process":null,"filename":"UserInfo.dll.2533488085","compromised":null,"detection_total":null,"total":null},{"value":"R2V0Q3VycmVudFRocmVhZElk","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RGF0ZUZvcm1hdEV4","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RGV2aWNlQ2Fwcw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RGlza0ZyZWVTcGFjZUE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RGlza0ZyZWVTcGFjZUV4QQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RGxnSXRlbQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RGxnSXRlbVRleHRB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RW52aXJvbm1lbnRTdHJpbmdzVw==","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RXJyb3JNZXNzYWdl","type":"Ansi","source":"Dropped File","process":null,"filename":"SimpleSC.dll.328895541","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RXhpdENvZGVQcm9jZXNz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RmlsZUF0dHJpYnV0ZXNB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RmlsZUluZm9ybWF0aW9uQnlIYW5kbGVFeA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RmlsZVNpemU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RmlsZVRocmVhZCB3aXRob3V0IFdlYnNvY2tldCBzZXNzaW9u","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RmlsZVR5cGU=","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RmlsZVZlcnNpb25JbmZvQQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RmlsZVZlcnNpb25JbmZvU2l6ZUE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RnVsbFBhdGhOYW1lQQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Z2V0aG9zdGJ5bmFtZTogZmFpbGVkIHRvIHJlc29sdmUgaXAgYWRkcmVzcyBmcm9tICclcyc=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0TGFzdEVycm9y","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0TG9jYWxlSW5mb0V4","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0TG9uZ1BhdGhOYW1lQQ==","type":"Ansi","source":"Dropped File","process":null,"filename":"SimpleSC.dll.328895541","compromised":null,"detection_total":null,"total":null},{"value":"R2V0TWVzc2FnZVBvcw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0TW9kdWxlRmlsZU5hbWVB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0TW9kdWxlSGFuZGxlQQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0TW9kdWxlSGFuZGxlRXhX","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0TW9kdWxlSGFuZGxlVw==","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0T0VNQ1A=","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0T3JpZ2luYWxBY2NvdW50VHlwZQ==","type":"Ansi","source":"Dropped File","process":null,"filename":"UserInfo.dll.2533488085","compromised":null,"detection_total":null,"total":null},{"value":"R2V0UHJpdmF0ZVByb2ZpbGVTdHJpbmdB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0UHJvY0FkZHJlc3M=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0UHJvY2Vzc0hlYXA=","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0UHJvY2Vzc1dpbmRvd1N0YXRpb24=","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0U2VydmljZUFyZ3NQYXRoOg==","type":"Ansi","source":"Runtime Data","process":"bcs.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"R2V0U2VydmljZUFyZ3NQYXRoOiBDOlxQcm9ncmFtX0ZpbGVzXyh4ODYpXFZpc3VhbHdhcmVfQkNTXFZpc3VhbHdhcmVfYXBwbGljYXRpb25fbWFuYWdlcl8tX05ldFFDaGVja0hUTUw1QWdlbnQuZXhlLmFyZw==","type":"Ansi","source":"Dropped File","process":null,"filename":"MgrLog.txt","compromised":null,"detection_total":null,"total":null},{"value":"R2V0U2VydmljZUFyZ3NQYXRoOiBDOlxQcm9ncmFtX0ZpbGVzXyh4ODYpXFZpc3VhbHdhcmVfQkNTXFZpc3VhbHdhcmVfYXBwbGljYXRpb25fbWFuYWdlcl8tX05ldFFDaGVja0hUTUw1QWdlbnQuZXhlLmFyZ0RlY29kZVNlcnZpY2VBcmdzIE9uSW5zdGFsbFNlcnZpY2UgTWFpbk5RQ0FwcE1ncjogUnVubmluZyAlUFJPR1JBTUZJTEVTJVwoeDg2KVxWaXN1YWx3YXJlIEJDU1xOZXRRQ2hlY2tIVE1MNUFnZW50LmV4ZUM6XFByb2dyYW0gRmlsZXMgKHg4NilcVmlzdWFsd2FyZSBCQ1NcTmV0UUNoZWNrSFRNTDVBZ2VudC5leGUgc3VjY2Vzc2Z1bGx5IHN0YXJ0ZWQ=","type":"Ansi","source":"Dropped File","process":null,"filename":"MgrLog.txt","compromised":null,"detection_total":null,"total":null},{"value":"R2V0U2VydmljZUJpbmFyeVBhdGg=","type":"Ansi","source":"Dropped File","process":null,"filename":"SimpleSC.dll.328895541","compromised":null,"detection_total":null,"total":null},{"value":"R2V0U2VydmljZURlbGF5ZWRBdXRvU3RhcnRJbmZv","type":"Ansi","source":"Dropped File","process":null,"filename":"SimpleSC.dll.328895541","compromised":null,"detection_total":null,"total":null},{"value":"R2V0U2VydmljZURlc2NyaXB0aW9u","type":"Ansi","source":"Dropped File","process":null,"filename":"SimpleSC.dll.328895541","compromised":null,"detection_total":null,"total":null},{"value":"R2V0U2VydmljZURpc3BsYXlOYW1l","type":"Ansi","source":"Dropped File","process":null,"filename":"SimpleSC.dll.328895541","compromised":null,"detection_total":null,"total":null},{"value":"R2V0U2VydmljZUZhaWx1cmU=","type":"Ansi","source":"Dropped File","process":null,"filename":"SimpleSC.dll.328895541","compromised":null,"detection_total":null,"total":null},{"value":"R2V0U2VydmljZUZhaWx1cmVGbGFn","type":"Ansi","source":"Dropped File","process":null,"filename":"SimpleSC.dll.328895541","compromised":null,"detection_total":null,"total":null},{"value":"R2V0U2VydmljZUxvZ29u","type":"Ansi","source":"Dropped File","process":null,"filename":"SimpleSC.dll.328895541","compromised":null,"detection_total":null,"total":null},{"value":"R2V0U2VydmljZU5hbWU=","type":"Ansi","source":"Dropped File","process":null,"filename":"SimpleSC.dll.328895541","compromised":null,"detection_total":null,"total":null},{"value":"R2V0U2VydmljZVN0YXJ0VHlwZQ==","type":"Ansi","source":"Dropped File","process":null,"filename":"SimpleSC.dll.328895541","compromised":null,"detection_total":null,"total":null},{"value":"R2V0U2VydmljZVN0YXR1cw==","type":"Ansi","source":"Dropped File","process":null,"filename":"SimpleSC.dll.328895541","compromised":null,"detection_total":null,"total":null},{"value":"R2V0U2hvcnRQYXRoTmFtZUE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0U3RhcnR1cEluZm9B","type":"Ansi","source":"Dropped File","process":null,"filename":"nsExec.dll.2021186361","compromised":null,"detection_total":null,"total":null},{"value":"R2V0U3RhcnR1cEluZm9X","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0U3RkSGFuZGxl","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0U3RyaW5nVHlwZVc=","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0U3lzQ29sb3I=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0U3lzdGVtRGlyZWN0b3J5QQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0U3lzdGVtTWVudQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0U3lzdGVtTWV0cmljcw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0U3lzdGVtVGltZUFzRmlsZVRpbWU=","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0U3lzdGVtVGltZVByZWNpc2VBc0ZpbGVUaW1l","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0VGVtcEZpbGVOYW1lQQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0VGVtcFBhdGhB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0VGlja0NvdW50","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0VGltZUZvcm1hdEV4","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0dGluZyBDb25maWd1cmF0aW9uIG9mIHNlcnZlciAnJXMn","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0VG9rZW5JbmZvcm1hdGlvbg==","type":"Ansi","source":"Dropped File","process":null,"filename":"UserInfo.dll.2533488085","compromised":null,"detection_total":null,"total":null},{"value":"R2V0VXNlckRlZmF1bHRMb2NhbGVOYW1l","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0VXNlckRlZmF1bHRVSUxhbmd1YWdl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0VXNlck5hbWVB","type":"Ansi","source":"Dropped File","process":null,"filename":"UserInfo.dll.2533488085","compromised":null,"detection_total":null,"total":null},{"value":"R2V0VXNlck9iamVjdEluZm9ybWF0aW9uQQ==","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0VmVyc2lvbg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0V2luZG93TG9uZ0E=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0V2luZG93UmVjdA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0V2luZG93c0RpcmVjdG9yeUE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Z2dlbmNyeXB0b1xkc2FcZHNhX2dlbi5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2l2aW5nIHVw","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2xvYmFsXEJDU011dGV4","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F51000.00000020.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2xvYmFsQWxsb2M=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2xvYmFsRnJlZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2xvYmFsTG9jaw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2xvYmFsUmVBbGxvYw==","type":"Ansi","source":"Dropped File","process":null,"filename":"nsExec.dll.2021186361","compromised":null,"detection_total":null,"total":null},{"value":"R2xvYmFsU2lnbiBudi1zYTEwMC4=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2xvYmFsU2lnbiBudi1zYTExMC8=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2xvYmFsU2lnbiBSb290IENBIC0gUjMx","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2xvYmFsU2lnbiBUU0EgZm9yIEFkdmFuY2VkIC0gRzI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2xvYmFsU2lnbiBUU0EgZm9yIEFkdmFuY2VkIC0gRzIw","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2xvYmFsU2lnbjA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2xvYmFsU2lnbjE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2xvYmFsU2l6ZQ==","type":"Ansi","source":"Dropped File","process":null,"filename":"nsExec.dll.2021186361","compromised":null,"detection_total":null,"total":null},{"value":"R2xvYmFsVW5sb2Nr","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"R3JhbnRTZXJ2aWNlTG9nb25Qcml2aWxlZ2U=","type":"Ansi","source":"Dropped File","process":null,"filename":"SimpleSC.dll.328895541","compromised":null,"detection_total":null,"total":null},{"value":"R3JvdXAgSUQgRmV0Y2hlZCAlaQ==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R3JvdXAgSUQgU2V0ICVp","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R3JvdXBJZCA8IDA=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R3JvdXBJZCA+IC0x","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Z3JvdXBpZDogJWk=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R3NUc0pzVXNNc1M=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"R1lZXDNbXXFi","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"aCUuLntncHpc","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"SEFQVUJXU1xBcHBEYXRhXExvY2FsXFRlbXBcbnN4NDJFRS50bXBcbnNFeGVjLmRsbA==","type":"Ansi","source":"Memory/File Scan","process":"bcs_service.exe","filename":"00034508-00002748.00000001.35008.00409000.00000004.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SGFzaCBBbGdvcml0aG06","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SGFzTmF2aWdhdGlvbkVudW0=","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SEJSQVZhbGlkYXRlQ2ZnOiBDcmMgZmFpbCBzdG9yZWQ9JTA4eCwgYWN0dWFsPSUwOHg=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SEJSQVdyaXRlQ2ZnIGVycm9yOiB3cm90ZSAlZCBvZiAlZCBieXRlcw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SEJSQVdyaXRlQ2ZnOiBPSw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SGVhZGVyOiAlcw==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SGVhcEFsbG9j","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SGVhcFJlQWxsb2M=","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SGVscGVyRGxsTmFtZQ==","type":"Unicode","source":"Runtime Data","process":"NetQCheckHTML5Agent.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"aGV4c2VjcmV0","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"aGlkZGVuPjwvcD48L3RkPg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SGlkZUZvbGRlclZlcmJz","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SGlkZUluV2ViVmlldw==","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SGlkZU9uRGVza3RvcFBlclVzZXI=","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SGlnaCBNYnBzICogSGlnaCBQY3Q6ICVm","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SGlnaCBNYnBzIEhpZ2g6ICVm","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SGlnaCBNYnBzIExvdzogJWY=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SGlnaCBNYnBzIE1pZGRsZTogJWY=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SGlnaCBQY3QgSGlnaDogJWY=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SGlnaCBQY3QgTG93OiAlZg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SGlnaCBQY3QgTWlkZGxlOiAlZg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SGlnaDogJWY=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SGlnaGVzdCBhY2hpZXZlZCA9ICUwLjFm","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"aEtwYlB0ZVpqcmBNfHFo","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"SG9wcyA9ICVk","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SG9zdG5hbWU=","type":"Unicode","source":"Runtime Data","process":"NetQCheckHTML5Agent.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SG9zdG5hbWUgbWlzbWF0Y2g=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SHR0cCBQcm94eSBTZXR0aW5ncw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SFRUUCBzZXJ2ZXIgcnVubmluZyBPSw==","type":"Ansi","source":"Runtime Data","process":"NetQCheckHTML5Agent.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SFRUUC8xLjEgMTAxIFN3aXRjaGluZyBQcm90b2NvbHM=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SFRUUC8xLjEgMjAwIE9LU2VydmVyOiBOZXRRQ2hlY2tDYWNoZS1jb250cm9sOiBuby1jYWNoZUNvbnRlbnQtdHlwZTogdGV4dC9odG1sQ29udGVudC1sZW5ndGg6IDM1MjwvZGl2PjwvdGQ+IDwvdHI+PC90YWJsZT48L2Rpdj4gYm90dG9tLS0+PGRpdiBzdHlsZT0iYmFja2dyb3VuZDp1cmwoJ2JvdHRvbWJhY2suZ2lmJykgbm8tcmVwZWF0IHRvcCBsZWZ0Ij48Y2VudGVyPjxiaWc+Jm5ic3A7PC8=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SFRUUC8xLjEgMjAwIE9LU2VydmVyOiBOZXRRQ2hlY2tDYWNoZS1jb250cm9sOiBuby1jYWNoZUNvbnRlbnQtdHlwZTogdGV4dC9odG1sQ29udGVudC1sZW5ndGg6IDU0MzxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIgY29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij48dGl0bGU+QWNjZXNzIENUIGFuZCBNeUNvbm5lY3Rpb24gU2VydmVyIG5ldHdvcmsgYXNzZXNzbWVudCB0ZXN0aW5nLCBuZXR3b3Jr","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SFRUUC8xLjEgMjAwIE9LU2VydmVyOiBOZXRRQ2hlY2tDYWNoZS1jb250cm9sOiBuby1jYWNoZUNvbnRlbnQtdHlwZTogdGV4dC9odG1sQ29udGVudC1sZW5ndGg6IDcxMyBvdXRzaWRlLS0+PGJyPjxjZW50ZXI+PHRhYmxlIHdpZHRoPTgwMCBjZWxscGFkZGluZz0wIGNlbGxzcGFjaW5nPTAgYm9yZGVyPTA+PHRyPjx0ZD4gdG9wLS0+PGRpdiBpZD0idG9wIj48ZGl2IGlkPSJ0b3BiYWNrIj48aQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SFRUUC8xLjFBY2NlcHQ6IHRleHQ=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"aHR0cDovLyVzOiVkJXM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"aHR0cDovL3d3dy52aXN1YWx3YXJlLmNvbSAwLw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":0,"total":66},{"value":"aHR0cDovL3d3dy52aXN1YWx3YXJlLmNvbS9iY3Mvc3VwcG9ydC5odG1s","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"aHR0cDovL3d3dy52aXN1YWx3YXJlLmNvbS9iY3Mvc3VwcG9ydC9iaW5kX2Vycm9yLmh0bWw=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"aHR0cDovL3d3dy52aXN1YWx3YXJlLmNvbS9iY3Mvc3VwcG9ydC9lY181MDMuaHRtbD9maWxlPQ==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SHR0cEdldCByZXR1cm5lZCAyMDAuIFZlcnNpb24gb24gc2VydmVyIGlzIDUuNDQ=","type":"Ansi","source":"Runtime Data","process":"NetQCheckHTML5Agent.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"aHR0cHByb3h5","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SHR0cFNlcnZlclNlc3Npb24gZW5kIHRocmVhZA==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SHR0cFNlc3Npb25SdW4gbm8gbWVtb3J5IGZvciBzb2NrZXQgJXU=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"STNvR31XLm9YZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"SWRlbnRpZmllcyB0aGlzIGRldmljZSB3aGVuIHZpZXdpbmcgcmVzdWx0cw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SWYgcHVyY2hhc2luZyBhIHRoaXJkIHBhcnR5IHByb2R1Y3QsIHRoZSB1c2Ugb2Ygc3VjaCB0aGlyZCBwYXJ0eSBwcm9kdWN0IHNoYWxsIGJlIGdvdmVybmVkIGJ5IHRoZSB0aGlyZCBwYXJ0eSdzIGxpY2Vuc2UgYWdyZWVtZW50LCB3aGljaCBtdXN0IGJlIGFwcHJvdmVkIHdpdGggZmlyc3QgdXNlIG9mIHRoZSBwcm9kdWN0Lg==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"SWsuYFQjLEM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"aUw+IkxfOkNi","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"SWxYa2hfRUEk","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"SW1hZ2UgUGF0aA==","type":"Unicode","source":"Runtime Data","process":"NetQCheckHTML5Agent.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SW1hZ2VMaXN0X0FkZE1hc2tlZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"SW1hZ2VMaXN0X0NyZWF0ZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"SW1hZ2VMaXN0X0Rlc3Ryb3k=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"aW4tY29yZS1sb2NhbGl6YXRpb24tb2Jzb2xldGUtbDEtMi0w","type":"Unicode","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"aW5kZXguaHRtbA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SW5oaWJpdCBQb2xpY3kgTWFwcGluZw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"aW5oaWJpdFBvbGljeU1hcHBpbmc=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SW5pdEZvbGRlckhhbmRsZXI=","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SW5pdGlhbCBiYW5kd2lkdGggPSAgJWRrYnBz","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SW5pdGlhbCBiYW5kd2lkdGggbGltaXRlZCB0byAlZGticHMgYnkgZGF0YSByYXRlIGxpbWl0","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SW5pdGlhbGl6ZUNyaXRpY2FsU2VjdGlvbkFuZFNwaW5Db3VudA==","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SW5pdGlhbGl6ZUNyaXRpY2FsU2VjdGlvbkV4","type":"Ansi","source":"Hybrid Analysis","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01311000.00000020.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SW5pdGlhbGl6ZVNlY3VyaXR5RGVzY3JpcHRvcg==","type":"Ansi","source":"Dropped File","process":null,"filename":"nsExec.dll.2021186361","compromised":null,"detection_total":null,"total":null},{"value":"SW5pdGlhbGl6ZVNMaXN0SGVhZA==","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"aW5pdGlhdGUuanM=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SW5pdGlhdGVTaHV0ZG93bkE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"SW5pdFNlcnZlckNUWA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SW5wcm9jU2VydmVyMzI=","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SW5zdGFsbERpcg==","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SW5zdGFsbGVyIGludGVncml0eSBjaGVjayBoYXMgZmFpbGVkLiBDb21tb24gY2F1c2VzIGluY2x1ZGVpbmNvbXBsZXRlIGRvd25sb2FkIGFuZCBkYW1hZ2VkIG1lZGlhLiBDb250YWN0IHRoZWluc3RhbGxlcidzIGF1dGhvciB0byBvYnRhaW4gYSBuZXcgY29weS5Nb3JlIGluZm9ybWF0aW9uIGF0Omh0dHA6Ly9uc2lzLnNmLm5ldC9OU0lTX0Vycm9y","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":1,"total":133},{"value":"SW5zdGFsbExhbmd1YWdlRmFsbGJhY2s=","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SW5zdGFsbFNlcnZpY2U=","type":"Ansi","source":"Dropped File","process":null,"filename":"SimpleSC.dll.328895541","compromised":null,"detection_total":null,"total":null},{"value":"SW5zdWZmaWNpZW50IGJhbmR3aWR0aCBmcm9tIHNlcnZlcg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SW5zdWZmaWNpZW50IGRhdGEgdG8gZXN0aW1hdGUgbGluZSBzcGVlZA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SW5zdWZmaWNpZW50IHZhbGlkIHNhbXBsZXMgKCVkIG9mICVkKQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SW50ZWwgSGFyZHdhcmUgQ3J5cHRvZ3JhcGhpYyBTZXJ2aWNlIFByb3ZpZGVy","type":"Unicode","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJmYWNlVHlwZTolcw==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"aW52YWxpZCBDQSBjZXJ0aWZpY2F0ZQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SW52YWxpZCBjZXJ0aWZpY2F0ZSB2ZXJpZmljYXRpb24gY29udGV4dA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SW52YWxpZCBIYW5kbGU=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SW52YWxpZCBJUCBhZGRyZXNzICVz","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"aW52YWxpZCBub24tQ0EgY2VydGlmaWNhdGUgKGhhcyBDQSBtYXJraW5ncyk=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"aW52YWxpZCBvciBpbmNvbnNpc3RlbnQgY2VydGlmaWNhdGUgZXh0ZW5zaW9u","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"aW52YWxpZCBvciBpbmNvbnNpc3RlbnQgY2VydGlmaWNhdGUgcG9saWN5IGV4dGVuc2lvbg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"aW52YWxpZCBzdG9pIGFyZ3VtZW50","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"aW52YWxpZCBzdHJpbmcgcG9zaXRpb24=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SW52YWxpZCB0ZXN0IHBhcmFtZXRlcihzKQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SW52YWxpZGF0ZVJlY3Q=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"aW9zX2Jhc2U6OmJhZGJpdCBzZXQ=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"aW9zX2Jhc2U6OmVvZmJpdCBzZXQ=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"aW9zX2Jhc2U6OmZhaWxiaXQgc2V0","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"aW9zdHJlYW0=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"aW9zdHJlYW0gc3RyZWFtIGVycm9y","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SVAgQWRkcmVzcw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SVAgYWRkcmVzcyBtaXNtYXRjaA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SVAgQWRkcmVzczolZC4lZC4lZC4lZA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SVAgQWRkcmVzczo8aW52YWxpZD4=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SVAgRW51bTogJWk=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SVAgT2ZmZXJlZDogJWk=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SVB2NC1TQUZJ","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SVB2NExvb3BiYWNrQWx0ZXJuYXRpdmU=","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SVB2Ni1TQUZJ","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SXNEZWJ1Z2dlclByZXNlbnQ=","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"aXNFJjR6VjRINg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"SXNQcm9jZXNzb3JGZWF0dXJlUHJlc2VudA==","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SXNzdWVyIGNlcnRpZmljYXRlIGxvb2t1cCBlcnJvcg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SXNzdWVyOiVj","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SXNWYWxpZENvZGVQYWdl","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SXNWYWxpZExvY2FsZU5hbWU=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SXNXaW5kb3c=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"SXNXaW5kb3dFbmFibGVk","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"SXNXaW5kb3dWaXNpYmxl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"SXNXb3c2NFByb2Nlc3M=","type":"Ansi","source":"Dropped File","process":null,"filename":"nsExec.dll.2021186361","compromised":null,"detection_total":null,"total":null},{"value":"SiJJd2VZbDo9cw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"SiN5SCN5WS9h","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Sml0dGVyIEF2ZS4gID0gJWQuJWRtcw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Sml0dGVyIE1heC4gID0gJWQuJWRtcw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SlNGU0FTcVNJU1VTTVNtUw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"SnQ6XytjSD42Qz4=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"ansve1wxLG9h","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"ayF8RWhDK2lw","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"SzVLSy1LPUsrSw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"azdQNFA8UCJQOlA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"a2VybmVsMzIuZGxs","type":"Ansi","source":"Dropped File","process":null,"filename":"SimpleSC.dll.328895541","compromised":null,"detection_total":null,"total":null},{"value":"S0VSTkVMMzIuZGxs","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"a2V5IGV4cGFuc2lvbg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"a2V5IHVzYWdlIGRvZXMgbm90IGluY2x1ZGUgY2VydGlmaWNhdGUgc2lnbmluZw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"a2V5IHVzYWdlIGRvZXMgbm90IGluY2x1ZGUgQ1JMIHNpZ25pbmc=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"a2V5IHVzYWdlIGRvZXMgbm90IGluY2x1ZGUgZGlnaXRhbCBzaWduYXR1cmU=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"a2Z4dnhueD5pb1Y=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"S2tjMS8jfDtHaw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"S1pcOkI1Smcm","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"bCJpJVF8QnRk","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"TENJRFRvTG9jYWxlTmFtZQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"TENNYXBTdHJpbmdFeA==","type":"Ansi","source":"Hybrid Analysis","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01311000.00000020.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"TENNYXBTdHJpbmdX","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"TGRhcENsaWVudEludGVncml0eQ==","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TGVhdmUgYmxhbmsgdG8gbWFuYWdlIGNlbnRyYWxseQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"TGVhdmVDcml0aWNhbFNlY3Rpb24=","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"TGVnYWN5IEFnZW50IFNldHRpbmdz","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"bGVuZ3RoIGlzIGdyZWF0ZXIgdGhhbiAlbGQ=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"TGlicmFyeVBhdGg=","type":"Unicode","source":"Runtime Data","process":"NetQCheckHTML5Agent.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TGljZW5jZSBFeHBpcmVk","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"bGljZW5zZWV4cGlyZWQ=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"TGljZW5zaW5nOiAlcw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"TGljZW5zaW5nOiBVVUlEIGlzICclcyc=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"bGlzdDxUPiB0b28gbG9uZw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"TGlzdGVuIGZhaWxlZA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"TGlzdGluZyBjZXJ0cyBmb3Igc3RvcmUgJXM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"TG9hZCBjb25maWcuIFNpemUgPSAlZCBieXRlcw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"TG9hZEFwcEluaXRfRExMcw==","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TG9hZEJpdG1hcEE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"TG9hZEN1cnNvckE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"TG9hZEltYWdlQQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"TG9hZExpYnJhcnlFeEE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"TG9hZExpYnJhcnlFeFc=","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"TG9jYWwgSVAgYWRkcmVzczogJXM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"TG9jYWxlTmFtZVRvTENJRA==","type":"Ansi","source":"Hybrid Analysis","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01311000.00000020.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"TG9jYWxpemVkTmFtZQ==","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TG9jYWxSZWRpcmVjdE9ubHk=","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TG9jYXRpb246","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"bG9jYXRpb25zPQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"TG9va3VwUHJpdmlsZWdlVmFsdWVB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"TG93IE1icHMgKiBMb3cgUGN0OiAlZg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"bHN0cmNtcEE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"bHN0cmNtcGlB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"bHN0cmNweUE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"bHN0cmNweW5B","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"bFRKcnJGdX5edkJsQHJQXFRBSmBVbA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"TFdmQS8oUm5V","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"TSJSW2QoVl5j","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"TSpXX2NIVl5j","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"bWBQLENjQWw=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"TWFjaGluZUd1aWQ=","type":"Unicode","source":"Runtime Data","process":"NetQCheckHTML5Agent.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWFjaGluZVByZWZlcnJlZFVJTGFuZ3VhZ2Vz","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"bWFnaWM9MHg=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"bWFqb3J2ZXJzaW9uPQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"TWFwTmV0RHJpdmVWZXJicw==","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWFwVmlld09mRmlsZQ==","type":"Ansi","source":"Dropped File","process":null,"filename":"nsExec.dll.2021186361","compromised":null,"detection_total":null,"total":null},{"value":"TWFyIDE0IDIwMTk=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"TWFydGFFeHRlbnNpb24=","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWFzayBBbGdvcml0aG06","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"bWFzdGVyIHNlY3JldA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"TWF4IGRhdGEgcmF0ZSA9ICVkIGJ5dGVzIHBlciBzZWNvbmQ=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"TWF4IEVmZmVjdGl2ZSBCYW5kd2lkdGg6ICVm","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"TWF4IHBhY2tldCByYXRlID0gJWQgKCVkIGJwcyk=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"TWF4IHBhdXNlIGlzICVkbXM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"TWF4QndXaXRoTm9Mb3NzID0gJWQ=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"TWF4QndXaXRoU2xpZ2h0TG9zcyA9ICVk","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"TWF4aW11bSBwYWNrZXQgc2l6ZSBsZXNzIHRoYW4gb3IgZXF1YWwgdG8gJXUgaXMgJXVNVFUgaXMgYXJvdW5kICV1IGJ5dGVz","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"bWF4bGVuZ3RoPQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"TWF4TGluZVNwZWVkS2JwcyA9ICVkIChEYXRhPSVkIG9mICVkLCBUaW1lPSVkICglZCBvZiAlZCBzYW1wbGVzIGNvbnNpZGVyZWQpKQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"TWF4TGluZVNwZWVkS2JwcyA9ICVkIChEYXRhPSVkLCBUaW1lPSVkICglZCBvZiAlZCBzYW1wbGVzIGNvbnNpZGVyZWQpKQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"TWF4TG9zcyA9ICVkLiVkJSU=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"TWF4TXMgPSAlZA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"TWF4UGFja2V0UmF0ZSAoJWQpIHJlZHVjZXMgTWF4QmFuZHdpZHRoIHRvICVkIGJwcw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"TWF4UnBjU2l6ZQ==","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"bWF4c2l6ZT0=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"TWF4U29ja2FkZHJMZW5ndGg=","type":"Unicode","source":"Runtime Data","process":"NetQCheckHTML5Agent.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWF4U3hTSGFzaENvdW50","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWJwc2VjOiAlZg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"bWNzc2pjLnZpc3VhbHdhcmUuY29t","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"TWVhc3VyaW5nIFJUVA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"TWVzc2FnZUJveEluZGlyZWN0QQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"bWdmMSB3aXRoIHNoYTEgKGRlZmF1bHQp","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"TWdyTG9nLnR4dA==","type":"Ansi","source":"Hybrid Analysis","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01311000.00000020.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"bUd+PXA/SmE2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"bWggY29tcGFyZSAlcw==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"TUlDLUNMRUFS","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"TUlDLU9OTFk=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"TWlkIE1icHMgKiBNaWQgUGN0OiAlZg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"TWlkZGxlOiAlZg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"TWluPSVkbXMsIE1heD0lZG1zLCBBdmc9JWRtcy4gUm91dGUgc3BlZWQ9JWRLYnBz","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"TWluQndXaXRoTG9zcyA9ICVk","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"bWlua2VybmVsXGNydHNcdWNydFxpbmNcY29yZWNydF9pbnRlcm5hbF9zdHJ0b3guaA==","type":"Unicode","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"bWlub3J2ZXJzaW9uPQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"TWluU29ja2FkZHJMZW5ndGg=","type":"Unicode","source":"Runtime Data","process":"NetQCheckHTML5Agent.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"bWpKVkpBSklKTUpz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"TWpUalxqUmpKallqUw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"bW1tbSBkLCB5eXl5","type":"Ansi","source":"Dropped File","process":null,"filename":"SimpleSC.dll.328895541","compromised":null,"detection_total":null,"total":null},{"value":"TU1NTSBkZCwgeXl5eQ==","type":"Unicode","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"bW47IEcgZyB3","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"TW9zdCBsaWtlbHkgcGF1c2UgaXMgJWRtcw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"TW92ZUZpbGVB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"TW92ZUZpbGVFeEE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"TW96aWxsYS80LjA=","type":"Ansi","source":"PCAP Processing","process":null,"filename":"PCAP","compromised":null,"detection_total":null,"total":null},{"value":"TVMgU2hlbGwgRGxn","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"bXMtd2luLWNvcmUtc3RyaW5nLWwxLTEtMA==","type":"Unicode","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"bXMtd2luLWNvcmUtd2lucnQtbDEtMS0w","type":"Unicode","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"bXNjb3JlZS5kbGw=","type":"Unicode","source":"Hybrid Analysis","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01311000.00000020.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"bXNjdGxzX3Byb2dyZXNzMzI=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"bXNndHlwZT1maWxlZGF0YSZmaWxlbmFtZT0=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"TXRpaHBaeSw8Ww==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"TXVsdGlCeXRlVG9XaWRlQ2hhcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"TXlDb25uZWN0aW9uIFNlcnZlcg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"bXlzcGVlZC9NeVNwZWVkU2VydmVyL2FjbWNhcHM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"bXlzcGVlZC9NeVNwZWVkU2VydmVyL21zcw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"bXlzcGVlZC9NeVNwZWVkU2VydmVyL3RpY2tldC9yYQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"TiJRWmQnVl5j","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"TiNPWWQnVl5j","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"TiNRW2QyVl5j","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"TiRPWWQyVl5j","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"TiVOWGQlVl5j","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"TipdY2I0Vl5j","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"TjZub183Vl5j","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"bjhlXyBAfGg=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"TjpiZ2FAVV1jO1ZeYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Tl14c1U4UWJe","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Tl9UXWNQVl5j","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"TmBRWmQ4Vl5j","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"bmFtZSBjb25zdHJhaW50cyBtaW5pbXVtIGFuZCBtYXhpbXVtIG5vdCBzdXBwb3J0ZWQ=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"TmFtZVNwYWNlX0NhbGxvdXQ=","type":"Unicode","source":"Runtime Data","process":"NetQCheckHTML5Agent.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TkFOKFNOQU4p","type":"Ansi","source":"Hybrid Analysis","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01311000.00000020.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"bmFuKHNuYW4p","type":"Ansi","source":"Hybrid Analysis","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01311000.00000020.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"TmFRW2Q5Vl5j","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"TmRyT2xlRXh0RExM","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TmV0UUNoZWNrIEFQSSB2ZXJzaW9uPSVkLiVkLiVkLiVkICglcyk=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"TmV0UUNoZWNrIFBpbmcgVGVzdA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"TmV0UUNoZWNrIFJlbW90ZSBBZ2VudA==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"TmV0UUNoZWNrSFRNTDVBZ2VudC5leGU=","type":"Unicode","source":"Runtime Data","process":"bcs.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TmV3IGNvbm5lY3Rpb24gb24gc29ja2V0ICVk","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"TmV4dF9DYXRhbG9nX0VudHJ5X0lE","type":"Unicode","source":"Runtime Data","process":"NetQCheckHTML5Agent.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Tkh2dF1VcHd9","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"TklTVCBDVVJWRTogJXM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Tm1KbUltRW1D","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Tm8gZGF0YSByZWNlaXZlZCAtIGNoZWNrIHBhY2tldCBzaXpl","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"bm8gZXhwbGljaXQgcG9saWN5","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Tm8gSVAgYWRkcmVzcyBvZmZlcmVk","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Tm8gbG9zcyBpcyAlZC4lMDJkJSU=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Tm8gbWF0Y2hpbmcgREFORSBUTFNBIHJlY29yZHM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"bm8gbWVtb3J5IGZvciBzb2NrZXQ=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Tm8gUHJpdmF0ZSBLZXk=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Tm8gcmVzcG9uc2UgZnJvbSBzZXJ2ZXIgZm9yIHJvdXRlIHRlc3QgcmVxdWVzdA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Tm8gcmVzcG9uc2UuICVz","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"bm8gc3RhY2s/","type":"Unicode","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Tk8gWDUwOV9OQU1F","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Tm9Db21tb25Hcm91cHM=","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Tm9Db250cm9sUGFuZWw=","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Tm9GaWxlRm9sZGVySnVuY3Rpb24=","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Tm9JbnRlcm5ldEljb24=","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Tm9Qcm9wZXJ0aWVzTXlDb21wdXRlcg==","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Tm9Qcm9wZXJ0aWVzUmVjeWNsZUJpbg==","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Tm9SZXBhaXI=","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Tm9TZXRGb2xkZXJz","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Tm90IEFmdGVyIDo=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Tm90IEFmdGVyOg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Tm90IEJlZm9yZTo=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Tm90IGRvaW5nIFNJUCB0ZXN0cw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"bm90aWNlTnVtYmVycw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"TlFDIGNvbmZpZyBwYXRoIGlzICVz","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"TlFDIFJlcG9ydA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"TlFDIFRlc3Q=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"TlFDOUZEM0IwNjcyQUY3RDE1OEVCMDM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"TlFDQXBwTWdyOiBSdW5uaW5nICVQUk9HUkFNRklMRVMlXCh4ODYpXFZpc3VhbHdhcmUgQkNTXE5ldFFDaGVja0hUTUw1QWdlbnQuZXhl","type":"Ansi","source":"Runtime Data","process":"bcs.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TlFDQXBwTWdyOiBSdW5uaW5nICVz","type":"Ansi","source":"Hybrid Analysis","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01310000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"TlFDQXBwTWdyOiBUZXJtaW5hdGluZyBwcm9jZXNzICVk","type":"Ansi","source":"Hybrid Analysis","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01311000.00000020.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"TlFDQXBwTWdyOiBVcGRhdGUgZm91bmQ=","type":"Ansi","source":"Hybrid Analysis","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01310000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"TlJQWmRBVl5j","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"bnNFeGVjLmRsbA==","type":"Ansi","source":"Dropped File","process":null,"filename":"nsExec.dll.2021186361","compromised":null,"detection_total":null,"total":null},{"value":"TlNJUyBFcnJvcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"TlNSW2RMVl5j","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"bnN4NDJFRS50bXA=","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TlRQWmRAVl5j","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"TlRQWmRBVl5j","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"TnVsbHNvZnRJbnN0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"TnVtX0NhdGFsb2dfRW50cmllcw==","type":"Unicode","source":"Runtime Data","process":"NetQCheckHTML5Agent.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"bnVtcG9ydHMgJWk=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"bnVtc29ja2V0cw==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"bnVtdXNvY2tldHM=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"TlVNWGQnVl5j","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"TlVRW2RHVl5j","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"bnY0TyFncldo","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"TnpWWDIxdE94","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"bzkmUXB1OUYqa0Jn","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"T0NTUF9TSUdOQVRVUkU=","type":"Ansi","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"b2N0ZXQtc3RyZWFt","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"T2VtVG9DaGFyQnVmZkE=","type":"Ansi","source":"Dropped File","process":null,"filename":"nsExec.dll.2021186361","compromised":null,"detection_total":null,"total":null},{"value":"T2ZmZXJlZCBJUCBBZGRyZXNzIHJlY2VpdmVk","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"b2lkX3NlY3Rpb24=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"b2xlMzIuZGxs","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"T2xlSW5pdGlhbGl6ZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"T2xlVW5pbml0aWFsaXpl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"T2xTXGM5Vl5j","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"T2xTXGM6Vl5j","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"b24tbDEtMi0x","type":"Unicode","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"T25seSBTb21lIFJlYXNvbnM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"T09CRUluUHJvZ3Jlc3M=","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"T3BlbkNsaXBib2FyZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"T3BlbmluZyBjZXJ0aWZpY2F0ZSBzdG9yZSAlcw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"T3BlbmluZyBTSVAgc29ja2V0","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"T3BlblByb2Nlc3NUb2tlbg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"T3BlblNDTWFuYWdlckE=","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"T3BlblNlcnZpY2VB","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"b3BlbnNzbC5jbmY=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"T3BlblNTTDogRkFUQUw=","type":"Unicode","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"T1BFTlNTTF9DT05G","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"b3BlbnNzbF9jb25m","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"T1BFTlNTTF9ESVJfcmVhZCgmY3R4LCAn","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"T1BFTlNTTF9FTkdJTkVT","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"T1BFTlNTTF9maW5pc2g=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"T1BFTlNTTF9pbml0","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"T1BFTlNTTF9XSU4zMl9VVEY4","type":"Unicode","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"T3BlblRocmVhZFRva2Vu","type":"Ansi","source":"Dropped File","process":null,"filename":"UserInfo.dll.2533488085","compromised":null,"detection_total":null,"total":null},{"value":"T3BlcmF0aW5nIFN5c3RlbTogJXM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"T3BlcmF0aW9uIG5vdCBwZXJtaXR0ZWQ=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"b3BlcmF0b3IgIiI=","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"T3B0IFJlYyBFbnVtOiAlaQ==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"T3B0IFJlcSBFbnVtOiAlaQ==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"T3B0aW9uICVkIGxlbmd0aCAlZA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"T3B0aW9ucyBSZWNlaXZlZDogJXM=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"T3B0aW9ucyBSZXF1ZXN0ZWQgVmVjdG9yICVp","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"T3B0aW9ucyBSZXF1ZXN0ZWQ6","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"T3B0aW9ucyBSZXF1ZXN0ZWQ6ICVz","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"T3B0aW9uczogICAgICAgdXBkYXRlY2hlY2tpbnRlcnZhbHNlY3M9bm4gICBUaW1lIGJldHdlZW4gY2hlY2tzIGZvciBhcHBsaWNhdGlvbiB1cGRhdGUgZmlsZSAgICAgICBpbnN0YWxsICAgPSBpbnN0YWxsIGFzIGEgc2VydmljZSAgICAgICB1bmluc3RhbGwgPSB1bmluc3RhbGwgZXhpc3Rpbmcgc2VydmljZSAgICAgICByZWluc3RhbGwgPSBpbnN0YWxsIGFzIGEgc2VydmljZSBhZnRlciB1bmluc3RhbGxpbmcgZXhpc3Rpbmcgc2VydmljZQ==","type":"Ansi","source":"Hybrid Analysis","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01311000.00000020.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"b3EuSHYuSHQuQG4=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"b3Igbm90aWNlIGlmIHlvdSBmYWlsIHRvIGNvbXBseSwgb3IgVmlzdWFsd2FyZSBoYXMgcmVhc29uYWJsZSBiZWxpZWYgdGhhdCB5b3UgZmFpbGVkIHRvIGNvbXBseSwgd2l0aCB0aGUgdGVybXMgYW5kIGNvbmRpdGlvbnMgb2YgdGhpcyBBZ3JlZW1lbnQuIEluIHN1Y2ggZXZlbnQsIHlvdSBtdXN0IGRlc3Ryb3kgYWxsIGNvcGllcyBvZiB0aGUgU09GVFdBUkUgUFJPRFVDVC4gXGxpbmUgXGxpbmUgfXtccnRsY2hcZmNzMSBcYWJcYWYyXGFmczIw","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"b3JnYW5pemF0aW9u","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"b3RoZXJOYW1l","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"b3RoZXJuYW1l","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"b3RoZXJuYW1lOjx1bnN1cHBvcnRlZD4=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"b3V0IG9mIG1lbW9yeQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"T1ZYX2N3Vl5jQ1ZeYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"T3hTXGMoVl5j","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"T3hVXWMoVl5j","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"T3hWXmMtVl5j","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"b3tiOV1sKipu","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"cCx7NHRQXT5Dew==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"UGFja2VkQ2F0YWxvZ0l0ZW0=","type":"Unicode","source":"Runtime Data","process":"NetQCheckHTML5Agent.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UGFja2V0IExvc3MgID0gJTAyZC4lMDJkJSU=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UGFja2V0IE9yZGVyID0gJTAyZC4lMDJkJSU=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UGFja2V0IHJhdGUgdG9vIGxvdyAtIHRlc3QgZmFpbGVk","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UGFja2V0IHNpemUgPSAgJWQgYnl0ZXM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"cGFja2V0c3BlcnNlY29uZA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"cGFnZS5odG1s","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UGFnZUFsbG9jYXRvclN5c3RlbUhlYXBJc1ByaXZhdGU=","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UGFnZUFsbG9jYXRvclVzZVN5c3RlbUhlYXA=","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UEFSQU1FVEVSUw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UGFyZW50Rm9sZGVy","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UGFyc2luZ05hbWU=","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UGFzcyAlZDogQXZlcmFnZSBwYWNrZXQgc2l6ZSBsZXNzIHRoYW4gb3IgZXF1YWwgdG8gJXUgaXMgJXUgYnl0ZXM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UGFzc3dvcmQgbWlzbWF0Y2g=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"cGF0aCBsZW5ndGggY29uc3RyYWludCBleGNlZWRlZA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UGF0aCBMb29w","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UGF1c2UgZnJlcXVlbmNpZXM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UGF1c2VTZXJ2aWNl","type":"Ansi","source":"Dropped File","process":null,"filename":"SimpleSC.dll.328895541","compromised":null,"detection_total":null,"total":null},{"value":"UGVla01lc3NhZ2VB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"UGVla05hbWVkUGlwZQ==","type":"Ansi","source":"Dropped File","process":null,"filename":"nsExec.dll.2021186361","compromised":null,"detection_total":null,"total":null},{"value":"UGVyY2VudCAlZiBsZXNzIHRoYW4gMC45NQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UGVyY2VudCAlZiBtb3JlIHRoYW4gb3IgZXF1YWwgdG8gMC45NQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"cGVyY2VudDogJWY=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UGVyZm9ybWluZyAlZCBSVFQgdGVzdHMgdG8gJXMgKFBvcnQgJWQp","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UGVyZm9ybWluZyBmaXJld2FsbCB0aW1lb3V0IGNoZWNrLi4u","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UGVyZm9ybWluZyBwcmUtdGVzdCB0byBlc3RpbWF0ZSBzb2NrZXRzIHJlcXVpcmVk","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"cGVybWl0dGVk","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"cGVybWl0dGVkIHN1YnRyZWUgdmlvbGF0aW9u","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"cGhyYXNlIGlzIHRvbyBzaG9ydCwgbmVlZHMgdG8gYmUgYXQgbGVhc3QgJWQgY2hhcnM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UGluVG9OYW1lU3BhY2VUcmVl","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UGxlYXNlIHdhaXQgd2hpbGUgU2V0dXAgaXMgbG9hZGluZy4uLg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"cGx1Z2luPSVzJnNyYz1hY3QmaXA9JXMmdGVzdHRvPSVzJnRlc3RzcGVjaWQ9JWQmc2lkPSVz","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"cGx1Z2lucz0=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UG9seW5vbWlhbDo=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UG9ydHMgdG8gYmUgdGVzdGVkOiAlaQ==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"cG9ydHNQZXJCbG9jazogJWk=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UG9zdGluZyAlcyBUZXN0IHJlc3VsdHMgdG8gJXMsIHBvcnQgJWQ=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UG9zdGluZyBSb3V0ZSBUZXN0IHJlc3VsdHMgdG8gJXMsIHBvcnQgJWQ=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UG9zdFF1aXRNZXNzYWdl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"UHJlLXRlc3QgY29uZmlybWF0aW9ucyA9ICVk","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UHJlLXRlc3QgZXN0aW1hdGVzICVkICVzIHJlcXVpcmVk","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UHJlQ3JlYXRl","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJlZmVyRXh0ZXJuYWxNYW5pZmVzdA==","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJlZmVycmVkVUlMYW5ndWFnZXM=","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"cHJpdiBbICVkIF0=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UFJJVkFURSBLRVk=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UHJpdmF0ZSBLZXkgSW5mbzo=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UHJpdmF0ZS1LZXk=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"cHJpdmF0ZS1rZXk6","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UHJpdmF0ZS1LZXk6ICglZCBiaXQp","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"cHJpdmF0ZUV4cG9uZW50Og==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UHJpdmF0ZUtleUxpZmV0aW1lU2Vjb25kcw==","type":"Unicode","source":"Runtime Data","process":"NetQCheckHTML5Agent.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJpdktleUNhY2hlTWF4SXRlbXM=","type":"Unicode","source":"Runtime Data","process":"NetQCheckHTML5Agent.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJpdktleUNhY2hlUHVyZ2VJbnRlcnZhbFNlY29uZHM=","type":"Unicode","source":"Runtime Data","process":"NetQCheckHTML5Agent.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJvYy1UeXBlOg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UHJvYy1UeXBlOiA0LA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UHJvY2VzcyBzdWNjZXNzZnVsbHkgdGVybWluYXRlZA==","type":"Ansi","source":"Hybrid Analysis","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01311000.00000020.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UHJvY2Vzc1JlcG9ydFBhZ2U6IE91dCBvZiBtZW1vcnk=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UHJvY2Vzc1JlcG9ydFBhZ2U6IHVua25vd24gcmVjZWl2ZWQgdGltZSA9ICVk","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UHJvZmlsZUltYWdlUGF0aA==","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJvZ3JhbSBGaWxlcyAoeDg2KVxWaXN1YWx3YXJlIEJDUw==","type":"Ansi","source":"Memory/File Scan","process":"bcs_service.exe","filename":"00034508-00002748.00000001.35008.00409000.00000004.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UHJvZ3JhbUZpbGVzRGly","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJvdmlkZXIgTmFtZTogICVzLCBQcm92aWRlciBUeXBlICVsdQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UHJvdmlkZXJJZA==","type":"Unicode","source":"Runtime Data","process":"NetQCheckHTML5Agent.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJvdmlkZXJJbmZv","type":"Unicode","source":"Runtime Data","process":"NetQCheckHTML5Agent.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"cHJveHkgY2VydGlmaWNhdGVzIG5vdCBhbGxvd2VkLCBwbGVhc2Ugc2V0IHRoZSBhcHByb3ByaWF0ZSBmbGFn","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"cHJveHkgcGF0aCBsZW5ndGggY29uc3RyYWludCBleGNlZWRlZA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"cHJveHkgc3ViamVjdCBuYW1lIHZpb2xhdGlvbg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"cHJveHlwb3J0","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UHVibGljIEtleQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UHVibGljLUtleQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"cHVibGljLWtleTo=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UHVibGljLUtleTogKCVkIGJpdCk=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"cHVibGljRXhwb25lbnQ6","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UHVibGlzaEV4cGFuZGVkUGF0aA==","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"cSBwIjRWdSY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"UVtkVl5jflZeYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"UW9zID0gJXUuJXUlJSBbJWQvJWRd","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"cVRefll+TlFZ","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"UXVlcnlGb3JJbmZvVGlw","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UXVlcnlGb3JPdmVybGF5","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UXVlcnlQZXJmb3JtYW5jZUNvdW50ZXI=","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UXVlcnlTZXJ2aWNlQ29uZmlnMkE=","type":"Ansi","source":"Dropped File","process":null,"filename":"SimpleSC.dll.328895541","compromised":null,"detection_total":null,"total":null},{"value":"UXVlcnlTZXJ2aWNlQ29uZmlnMlc=","type":"Ansi","source":"Dropped File","process":null,"filename":"SimpleSC.dll.328895541","compromised":null,"detection_total":null,"total":null},{"value":"UXVlcnlTZXJ2aWNlU3RhdHVz","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"ci8hMCRVNjFs","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"UkB4dl5gVl5j","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"cl5RXnFeRV5lXk1eXV5j","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmFpc2VFeGNlcHRpb24=","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"cmUgZ3JhbnRzIHlvdSB0aGUgbm9uLWV4Y2x1c2l2ZSByaWdodCB0byBpbnN0YWxsIGFuZCB1c2UgdGhlIGxpY2Vuc2VkIFNPRlRXQVJFIFBST0RVQ1QgaWRlbnRpZmllZCBpbiB0aGlzIHBhcmFncmFwaCwgYXMgZm9sbG93czo=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"UmVhZENvbnNvbGVX","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"cmVhc29uKCVsdSk=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UmVjZWl2ZSBCdWZmZXI6","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"cmVjb21tZW5kZWQtcHJpdmF0ZS1sZW5ndGg6ICVkIGJpdHM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UmVkaXJlY3RpbmcgdG8gJXM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UmVnQ2xvc2VLZXk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVnQ3JlYXRlS2V5RXhB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVnRGVsZXRlS2V5QQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVnRGVsZXRlS2V5RXhB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVnRGVsZXRlVmFsdWVB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVnRW51bUtleUE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVnRW51bVZhbHVlQQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVnaXN0ZXJDbGFzc0E=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVnaXN0ZXJlZCBJRA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UmVnaXN0ZXJlZCBJRDo=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UmVnaXN0ZXJTZXJ2aWNlQ3RybEhhbmRsZXJB","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UmVnT3BlbktleUV4QQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVnUXVlcnlWYWx1ZUV4QQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVnU2V0VmFsdWVFeEE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"cmVpbnN0YWxs","type":"Ansi","source":"Hybrid Analysis","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01311000.00000020.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"ckVqRVpFZkVJRWlFY0Vz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"cmVsYXRpdmVuYW1l","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UmVsYXRpdmVQYXRo","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UmVsZWFzZURD","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVtb3ZlRGlyZWN0b3J5QQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVtb3ZlU2VydmljZQ==","type":"Ansi","source":"Dropped File","process":null,"filename":"SimpleSC.dll.328895541","compromised":null,"detection_total":null,"total":null},{"value":"UmVtb3ZlU2VydmljZUxvZ29uUHJpdmlsZWdl","type":"Ansi","source":"Dropped File","process":null,"filename":"SimpleSC.dll.328895541","compromised":null,"detection_total":null,"total":null},{"value":"UmVwbGFjZUZpbGVB","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UmVwb3J0U2VjdGlvbiBzZW5kIGZhaWxlZCBbJWQgb2YgJWRd","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UmVxdWVzdGluZyBjYXBhY2l0eSB0ZXN0IHNlcnZlciBpbmZvIGZyb20gJXM6JWQ=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UmVxdWVzdGluZyBvcHRpb25zICVz","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UmVxdWlyZSBFeHBsaWNpdCBQb2xpY3k=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"cmVxdWlyZUV4cGxpY2l0UG9saWN5","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UmVzdGFydFNlcnZpY2U=","type":"Ansi","source":"Dropped File","process":null,"filename":"SimpleSC.dll.328895541","compromised":null,"detection_total":null,"total":null},{"value":"cmVzdHJpY3Qo","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UmVzdHJpY3RlZEF0dHJpYnV0ZXM=","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UmVzdWx0IENvZGUgPSAlZA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UmVzdWx0cyBkb3dubG9hZGVkIG9r","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"cmVzdWx0c2V0PQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UmV0cnlpbmc=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UmV0cnlpbmcuLi4=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"cmV2aXNpb249","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UkZDIDM3NzkgcmVzb3VyY2Ugbm90IHN1YnNldCBvZiBwYXJlbnQncyByZXNvdXJjZXM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"cmchfHNCI0Q=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"UkdoMkBMPj1C","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmljaEVkMjA=","type":"Ansi","source":"Hybrid Analysis","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmljaEVkMzI=","type":"Ansi","source":"Hybrid Analysis","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmljaEVkaXQyMEE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"UklQRU1EMTYw","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Uk9EVUNUIGlzIGF0IHlvdXIgb3duIHJpc2suIFRvIHRoZSBtYXhpbXVtIGV4dGVudCBwZXJtaXR0ZWQgYnkgYXBwbGljYWJsZSBsYXcsIFZpc3VhbHdhcmUgYW5kIGl0cyBvd25lcnMsIGVtcGxveWVlcywgYWdlbnRzLCBhc3NvY2lhdGVzLCBhZmZpbGlhdGVzLCBhbmQgc3VwcGxpZXJzIGRpc2NsYWltIGFsbCB3YXJyYW50aWVzIGFuZCBjb25kaXRpb25zLCBlaXRoZXIgZXhwcmVzcyBvciBpbXBsaWVkLCBpbmNsdWRpbmcsIGJ1dCBub3QgbGltaXRl","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"Um9Jbml0aWFsaXpl","type":"Ansi","source":"Hybrid Analysis","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01311000.00000020.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Um9VbmluaXRpYWxpemU=","type":"Ansi","source":"Hybrid Analysis","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01311000.00000020.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Um91dGUgdGVzdCBmcm9tIHNlcnZlciBjb21wbGV0ZWQgT0s=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"cm91dGU9JXMsJXMs","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Um91dGluZyBEb21haW4gSWRlbnRpZmllcnM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UlNBLVNIQTEtMg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"cnNhX2tleWdlbl9iaXRz","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"cnNhX2tleWdlbl9wdWJleHA=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"cnNhX21nZjFfbWQ=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"cnNhX29hZXBfbGFiZWw=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"cnNhX29hZXBfbWQ=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"cnNhX3BhZGRpbmdfbW9kZQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"cnNhX3Bzc19zYWx0bGVu","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UnRsVW53aW5k","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UlRUIEFmdGVyIERvd246","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UlRUIEFmdGVyIFVwOg==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UlRUIEJlZm9yZTo=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UnR0IHRlc3Q6IEROUyBsb29rdXAgZmFpbGVk","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"cnR0bnVtdGVzdHM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"cnR0bnVtdGVzdHMx","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"cnR0bnVtdGVzdHMy","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"cnVuIHRpbWUgaXM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UnVudGltZSBlcnJvciAgICAgYXQgMDAwMDAwMDA=","type":"Ansi","source":"Dropped File","process":null,"filename":"SimpleSC.dll.328895541","compromised":null,"detection_total":null,"total":null},{"value":"UlYgQ29kZSBFTFNFICVp","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UlYgZm9yICVzIGlzICVp","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U2FmZURsbFNlYXJjaE1vZGU=","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2FmZVByb2Nlc3NTZWFyY2hNb2Rl","type":"Unicode","source":"Runtime Data","process":"NetQCheckHTML5Agent.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2FsdCBMZW5ndGg6IDB4","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U2NyZWVuVG9DbGllbnQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2UjUGUjUGUj","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2VhcmNoUGF0aEE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2VjLVdlYlNvY2tldC1BY2NlcHQ6","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U2VjLVdlYlNvY2tldC1LZXk=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U0VDTEVWRUw9","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"c2VjdGlvbjo=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"c2VjdGlvbj0=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U2VjdXJpdHk=","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2VlIHJlc3VsdHMgb24gdGhlIHNlcnZlcg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U2VsZWN0aW5nIGZyb20gJWQgRGF0YVRpbWVzIGJldHdlZW4gJWQgYW5kICVk","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U2VsZWN0T2JqZWN0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"c2VsZiBzaWduZWQgY2VydGlmaWNhdGU=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"c2VsZiBzaWduZWQgY2VydGlmaWNhdGUgaW4gY2VydGlmaWNhdGUgY2hhaW4=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U2VuZCBCdWZmZXI6","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U2VuZCBEYXRhIFRocmVzaG9sZCA9ICVp","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U2VuZCBmYWlsZWQ=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U2VuZEJlZ2luVXBzdHJlYW1QYWNrZXQ6IGZhaWxlZA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U2VuZEJlZ2luVXBzdHJlYW1QYWNrZXQ6IGlnbm9yaW5nIHBhY2tldCB0eXBlICUwNHg=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U2VuZEJlZ2luVXBzdHJlYW1QYWNrZXQ6IG5vIHJlc3BvbnNlIFtyZXRyaWVzPSVzXQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U2VuZEJlZ2luVXBzdHJlYW1QYWNrZXQ6IE9L","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U2VuZGluZyByZXBvcnQgdG8gc2VydmVy","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U2VuZGluZyByb3V0ZSB0ZXN0IHJlcG9ydA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U2VuZGluZyB1cHN0cmVhbSBjb21wbGV0ZSwgZG93bmxvYWRpbmcgcmVzdWx0cy4uLg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U2VuZE1lc3NhZ2VB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2VuZE1lc3NhZ2VUaW1lb3V0QQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2VuZFJlcXVlc3RVcHN0cmVhbVJlc3VsdDogaWdub3JpbmcgcGFja2V0IHR5cGUgJTA0eA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U2VuZFJlcXVlc3RVcHN0cmVhbVJlc3VsdDogbm8gcmVzcG9uc2U=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U2VwdGVtYmVy","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U2VyaWFsICMgPSAlcw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U2VyaWFsIG51bWJlciAgIDogJXM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U2VyaWFsIE51bWJlcjo=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U2VyaWFsX0FjY2Vzc19OdW0=","type":"Unicode","source":"Runtime Data","process":"NetQCheckHTML5Agent.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2VydmVyICclcycgYnVzeQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U2VydmVyIEJ1c3k=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U2VydmVyIGRhdGEgbGltaXQgcmVhY2hlZCAtIHRlcm1pbmF0aW5nIHRlc3Q=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"c2VydmVyIGZpbmlzaGVk","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U2VydmVyIFBhc3N3b3Jk","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U2VydmVyIHJlc3BvbmRlZCAlZCB0byByb3V0ZSB0ZXN0IHJlcXVlc3Q=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U2VydmVyIFVucmVhY2hhYmxl","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"c2VydmVyY2ZtcHdvcmQ=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"c2VydmVycG9ydA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"c2VydmVycHdvcmQ=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"c2VydmVydXJs","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U2VydmljZSBNYWlu","type":"Ansi","source":"Runtime Data","process":"bcs.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2VydmljZS0weA==","type":"Unicode","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U2VydmljZUlzUGF1c2Vk","type":"Ansi","source":"Dropped File","process":null,"filename":"SimpleSC.dll.328895541","compromised":null,"detection_total":null,"total":null},{"value":"U2VydmljZUlzUnVubmluZw==","type":"Ansi","source":"Dropped File","process":null,"filename":"SimpleSC.dll.328895541","compromised":null,"detection_total":null,"total":null},{"value":"U2VydmljZUlzU3RvcHBlZA==","type":"Ansi","source":"Dropped File","process":null,"filename":"SimpleSC.dll.328895541","compromised":null,"detection_total":null,"total":null},{"value":"U2VTZXJ2aWNlTG9nb25SaWdodA==","type":"Ansi","source":"Dropped File","process":null,"filename":"SimpleSC.dll.328895541","compromised":null,"detection_total":null,"total":null},{"value":"U2VTaHV0ZG93blByaXZpbGVnZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2Vzc2lvbiAlMmQ6ICVkIEJ5dGVzIFslMC4xZiUlXQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U2Vzc2lvbiAlZDogUHJvY2Vzc2luZyBVcGxvYWQgcmVwb3J0LCBzaXplICVkIGF0ICV1bXM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U2V0ICVzIGJ1ZmZlciBzaXplIHRvICVkLiAoJWQgc2V0KQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U2V0LUNvb2tpZTo=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U2V0QmtDb2xvcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2V0QmtNb2Rl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2V0Q2xhc3NMb25nQQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2V0Q2xpcGJvYXJkRGF0YQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2V0Q3VycmVudERpcmVjdG9yeUE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2V0Q3Vyc29y","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2V0RGVmYXVsdERsbERpcmVjdG9yaWVz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2V0RGxnSXRlbVRleHRB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2V0RW5kT2ZGaWxl","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U2V0RW52aXJvbm1lbnRWYXJpYWJsZUE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2V0RXJyb3JNb2Rl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2V0RmlsZUF0dHJpYnV0ZXNB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2V0RmlsZVBvaW50ZXI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2V0RmlsZVBvaW50ZXJFeA==","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U2V0RmlsZVNlY3VyaXR5QQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2V0RmlsZVRpbWU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2V0Rm9yZWdyb3VuZFdpbmRvdw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2V0TGFzdEVycm9y","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U2V0U2VjdXJpdHlEZXNjcmlwdG9yRGFjbA==","type":"Ansi","source":"Dropped File","process":null,"filename":"nsExec.dll.2021186361","compromised":null,"detection_total":null,"total":null},{"value":"U2V0U2VydmljZUJpbmFyeVBhdGg=","type":"Ansi","source":"Dropped File","process":null,"filename":"SimpleSC.dll.328895541","compromised":null,"detection_total":null,"total":null},{"value":"U2V0U2VydmljZURlbGF5ZWRBdXRvU3RhcnRJbmZv","type":"Ansi","source":"Dropped File","process":null,"filename":"SimpleSC.dll.328895541","compromised":null,"detection_total":null,"total":null},{"value":"U2V0U2VydmljZURlc2NyaXB0aW9u","type":"Ansi","source":"Dropped File","process":null,"filename":"SimpleSC.dll.328895541","compromised":null,"detection_total":null,"total":null},{"value":"U2V0U2VydmljZUZhaWx1cmU=","type":"Ansi","source":"Dropped File","process":null,"filename":"SimpleSC.dll.328895541","compromised":null,"detection_total":null,"total":null},{"value":"U2V0U2VydmljZUZhaWx1cmVGbGFn","type":"Ansi","source":"Dropped File","process":null,"filename":"SimpleSC.dll.328895541","compromised":null,"detection_total":null,"total":null},{"value":"U2V0U2VydmljZUxvZ29u","type":"Ansi","source":"Dropped File","process":null,"filename":"SimpleSC.dll.328895541","compromised":null,"detection_total":null,"total":null},{"value":"U2V0U2VydmljZVN0YXJ0VHlwZQ==","type":"Ansi","source":"Dropped File","process":null,"filename":"SimpleSC.dll.328895541","compromised":null,"detection_total":null,"total":null},{"value":"U2V0U2VydmljZVN0YXR1cw==","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U2V0U3RkSGFuZGxl","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U2V0VGV4dENvbG9y","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2V0VW5oYW5kbGVkRXhjZXB0aW9uRmlsdGVy","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U2V0V2luZG93TG9uZ0E=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2V0V2luZG93UG9z","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2V0V2luZG93VGV4dEE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"c2hhMSAoZGVmYXVsdCk=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U0hBdXRvQ29tcGxldGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"U0hCcm93c2VGb3JGb2xkZXJB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"U0hFTEwzMi5kbGw=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2hlbGxFeGVjdXRlQQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"U0hGaWxlT3BlcmF0aW9uQQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"U0hGT0xERVI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"U0hHZXRGaWxlSW5mb0E=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"U0hHZXRGb2xkZXJQYXRoQQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"U0hHZXRQYXRoRnJvbUlETGlzdEE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"U0hHZXRTcGVjaWFsRm9sZGVyTG9jYXRpb24=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2hvd1dpbmRvdw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2lnbmF0dXJlIEFsZ29yaXRobTo=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U2lnbmlmaWNhbnQgbG9zcyBpcyAlZC4lMDJkJSU=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"c2lnbmlmaWNhbnRsb3Nz","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U2ltcGxlU0MuZGxs","type":"Ansi","source":"Dropped File","process":null,"filename":"SimpleSC.dll.328895541","compromised":null,"detection_total":null,"total":null},{"value":"c2ltdWxhdGlvbnNlY29uZHM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U0lQIEFMRyB0ZXN0IHJldHVybmVkICVk","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U29ja2V0IHRlc3QgZmFpbGVkIHRvICVzLiBTd2l0Y2hpbmcgdG8gSFRUUA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"c29mdF9sb2Fk","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U29mdHdhcmVcQm9ybGFuZFxEZWxwaGlcTG9jYWxlcw==","type":"Ansi","source":"Dropped File","process":null,"filename":"SimpleSC.dll.328895541","compromised":null,"detection_total":null,"total":null},{"value":"U09GVFdBUkVcQm9ybGFuZFxEZWxwaGlcUlRM","type":"Ansi","source":"Dropped File","process":null,"filename":"SimpleSC.dll.328895541","compromised":null,"detection_total":null,"total":null},{"value":"U29mdHdhcmVcQm9ybGFuZFxMb2NhbGVz","type":"Ansi","source":"Dropped File","process":null,"filename":"SimpleSC.dll.328895541","compromised":null,"detection_total":null,"total":null},{"value":"U29mdHdhcmVcTWljcm9zb2Z0XFdpbmRvd3NcQ3VycmVudFZlcnNpb24=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"U3BlZWQgYW5hbHlzaXMgLSAo","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U3BlZWQgVGVzdCBBdWRpdA==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U3BlZWQgdGVzdCBjcmVhdGVk","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U3BlZWQgdGVzdCBmYWlsZWQgdG8gY29tcGxldGU=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"c3ItQkEtTGF0bg==","type":"Unicode","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"c3ItU1AtQ3lybA==","type":"Unicode","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U1NMIGFsZXJ0IG51bWJlcg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"c3NsMy1zaGEx","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"c3NsXGQxX2xpYi5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"c3NsXGQxX3NydHAuYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"c3NsXHBxdWV1ZS5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"c3NsXHJlY29yZFxyZWNfbGF5ZXJfZDEuYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"c3NsXHJlY29yZFxyZWNfbGF5ZXJfczMuYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"c3NsXHJlY29yZFxzc2wzX2J1ZmZlci5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"c3NsXHJlY29yZFxzc2wzX3JlY29yZC5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"c3NsXHMzX2NiYy5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"c3NsXHMzX2VuYy5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"c3NsXHMzX2xpYi5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"c3NsXHMzX21zZy5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"c3NsXHNzbF9hc24xLmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"c3NsXHNzbF9jZXJ0LmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"c3NsXHNzbF9jaXBoLmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"c3NsXHNzbF9jb25mLmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"c3NsXHNzbF9pbml0LmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"c3NsXHNzbF9saWIuYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"c3NsXHNzbF9tY25mLmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"c3NsXHNzbF9yc2EuYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"c3NsXHNzbF9zZXNzLmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"c3NsXHN0YXRlbVxzdGF0ZW0uYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"c3NsXHN0YXRlbVxzdGF0ZW1fY2xudC5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"c3NsXHN0YXRlbVxzdGF0ZW1fZHRscy5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"c3NsXHN0YXRlbVxzdGF0ZW1fbGliLmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"c3NsXHN0YXRlbVxzdGF0ZW1fc3J2ci5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"c3NsXHQxX2VuYy5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"c3NsXHQxX2V4dC5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"c3NsXHQxX2xpYi5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"c3NsXHQxX3JlbmVnLmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"c3NsXHRsc19zcnAuYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"c3NsX2NsaWVudA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"c3NsX3NlcnZlcg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U3RhcnQgcm91dGUgdGVzdCBmcm9tIHNlcnZlcg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U3RhcnRpbmcgJXMgSFRUUCBzZXNzaW9uIHRocmVhZCBmb3Igc29ja2V0ICV1","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U3RhcnRpbmcgY2FwYWNpdHkgdGVzdCB0byBwb3J0ICVk","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U3RhcnRpbmcgREhDUCBUZXN0","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U3RhcnRpbmcgRG93bmxvYWQgU3BlZWQgVGVzdCAoJXMpLg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U3RhcnRpbmcgVENQIHNwZWVkIHRlc3QgdXNpbmcgJWQgc2Vzc2lvbnM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U3RhcnRpbmcgVHJhY2VSb3V0ZSB0byAlcw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U3RhcnRpbmcgVXBsb2FkIFNwZWVkIFRlc3QgKCVzKSBMZW5ndGggJWRtcy4=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U3RhcnRpbmcgV2Vic29ja2V0IFNlcnZlciBvbiBwb3J0ICVk","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U3RhcnRpbmcgV2Vic29ja2V0IFNlcnZlciBvbiBwb3J0IDMyNjU4","type":"Ansi","source":"Runtime Data","process":"NetQCheckHTML5Agent.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U3RhcnRpbmcgV2Vic29ja2V0IFNlcnZlciBvbiBwb3J0IDMyNjU4U3RhcnRTb2Z0d2FyZUFnZW50QkNTIFZlcnNpb24gNS40NFdlYlNlcnZlciBhY3RpdmUgb24gcG9ydCAzMjY1OFdlYlNlcnZlciBhY3RpdmUgb24gcG9ydCAzMjY2MEhUVFAgc2VydmVyIHJ1bm5pbmcgT0s=","type":"Ansi","source":"Dropped File","process":null,"filename":"log.txt","compromised":null,"detection_total":null,"total":null},{"value":"U3RhcnRTZXJ2aWNl","type":"Ansi","source":"Dropped File","process":null,"filename":"SimpleSC.dll.328895541","compromised":null,"detection_total":null,"total":null},{"value":"U3RhcnRTZXJ2aWNlQQ==","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U3RhcnRTZXJ2aWNlQ3RybERpc3BhdGNoZXJB","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U3RhcnRTb2Z0d2FyZUFnZW50","type":"Ansi","source":"Runtime Data","process":"NetQCheckHTML5Agent.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U3RhcnRUaHJlYWQgZmFpbGVk","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"c3RhdHVzPW9r","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"c3RibF9zZWN0aW9u","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"c3RvaSBhcmd1bWVudCBvdXQgb2YgcmFuZ2U=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U3RvcHBpbmcgc2VydmljZS4uLg==","type":"Ansi","source":"Hybrid Analysis","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01311000.00000020.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U3RvcFNlcnZpY2U=","type":"Ansi","source":"Dropped File","process":null,"filename":"SimpleSC.dll.328895541","compromised":null,"detection_total":null,"total":null},{"value":"U3RvcFNvZnR3YXJlQWdlbnQ=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U3RvcmVzU2VydmljZUNsYXNzSW5mbw==","type":"Unicode","source":"Runtime Data","process":"NetQCheckHTML5Agent.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U3RyZWFtIGxlbmd0aCByZWR1Y2VkIGZyb20gJWRtcyB0byAlZG1zIGJ5IG1heCB0cmFuc2ZlciBieXRlcyAoJWQp","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U3RyZWFtUmVzb3VyY2U=","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U3RyZWFtUmVzb3VyY2VUeXBl","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"c3RyaW5nIHRvbyBsb25n","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"c3ViZ3JvdXAgZmFjdG9yOg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"c3ViZ3JvdXAgb3JkZXI6","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"c3ViamVjdCBpc3N1ZXIgbWlzbWF0Y2g=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U3ViamVjdCBQdWJsaWMgS2V5IEluZm86","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U3ViamVjdDo=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U3ViamVjdDolYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U3VpdGUgQjogY2Fubm90IHNpZ24gUC0zODQgd2l0aCBQLTI1Ng==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U3VpdGUgQjogY2VydGlmaWNhdGUgdmVyc2lvbiBpbnZhbGlk","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U3VpdGUgQjogY3VydmUgbm90IGFsbG93ZWQgZm9yIHRoaXMgTE9T","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U3VpdGUgQjogaW52YWxpZCBFQ0MgY3VydmU=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U3VpdGUgQjogaW52YWxpZCBwdWJsaWMga2V5IGFsZ29yaXRobQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U3VpdGUgQjogaW52YWxpZCBzaWduYXR1cmUgYWxnb3JpdGht","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U1VJVEVCMTI4","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U1VJVEVCMTI4QzI=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U1VJVEVCMTI4T05MWQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U1VJVEVCMTky","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U3VwcG9ydGVkTmFtZVNwYWNl","type":"Unicode","source":"Runtime Data","process":"NetQCheckHTML5Agent.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U3lzTGlzdFZpZXczMg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"U3lzdGVtUGFyYW1ldGVyc0luZm9B","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"U3lzdGVtU2V0dXBJblByb2dyZXNz","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"c3xTS19vLSgi","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"VCQlbzxWem89","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"dC1tcy13aW4tbnR1c2VyLXdpbmRvd3N0YXRpb24tbDEtMS0w","type":"Unicode","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"dGFsbC5leGUi","type":"Ansi","source":"Memory/File Scan","process":"bcs_service.exe","filename":"00034508-00002748.00000001.35008.00409000.00000004.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VGFyZ2V0IEJXOiAlaQ==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"dGFyZ2V0PSJfYmxhbmsi","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VGNwQ29ubmVjdDogQmFkIHBvcnQgKCVkKQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VGNwQ29ubmVjdDogQ29ubmVjdGluZyB0byAlcyBwb3J0ICVkLi4u","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VGNwQ29ubmVjdDogU29ja2V0ICVkIGNvbm5lY3RlZCBPSy4gUnR0PSVk","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"dEQ8Ol4mTiR8","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"VGVybWluYXRlUHJvY2Vzcw==","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VGVybWluYXRpbmcgVGVzdA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VGVzdCBhYmFuZG9uZWQgYXQgJXM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VGVzdCBiYW5kd2lkdGg6ICVsZCwgJWxk","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VGVzdCBCdXN5","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VGVzdCBDb21wIENhcCBDQw==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VGVzdCBEdXJhdGlvbiBzZXQgYXMgJWk=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VGVzdCBGYWlsZWQuIEVycm9yOiAlcw==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VGVzdCBJbml0IEVudGVyZWQ=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VGVzdCBJbnZhbGlkLiBFcnJvcjogJXM=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VGVzdCBTZXJ2ZXI6ICVz","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VGVzdCBUZXJtaW5hdGVk","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VGVzdCBUZXJtaW5hdGVkLiBFcnJvcjogJXM=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VGVzdGluZyB0byB0aGlzIHNlcnZlciBpcyBmb3JiaWRkZW4=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VGVzdGluZyB0byB0aGlzIHNlcnZlciBpcyBmb3JiaWRkZW4uIFBsZWFzZSBjb250YWN0IHRoZSB0ZXN0IHByb3ZpZGVyIGFuZCByZXBvcnQgdGhlIGlzc3VlLg==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"dGVzdHBvcnRz","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VGVzdHMgZGVsYXllZCBieSAlZG1z","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VGVzdFNwZWNJZDogJWk=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VGhlIGRvbWFpbiBlbnRlcmVkIGNvdWxkIG5vdCBiZSByZXNvbHZlZC4gUGxlYXNlIGRvdWJsZSBjaGVjayB0aGUgZG9tYWluIGFuZCB0cnkgYWdhaW4uIElmIHRoZSBwcm9ibGVtIHBlcnNpc3RzIHBsZWFzZSBjb250YWN0IHRoZSB0ZXN0IHByb3ZpZGVyIGFuZCByZXBvcnQgdGhlIGlzc3VlLg==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VGhlIGxpY2Vuc2UgZm9yIHRoZSB0ZXN0IGVudmlyb25tZW50IGhhcyBleHBpcmVkLiBQbGVhc2UgY29udGFjdCB0aGUgdGVzdCBwcm92aWRlciBhbmQgcmVwb3J0IHRoZSBpc3N1ZS4=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VGhlIG1icHMgKiBwY3QgYWRkZWQgdXA6ICVm","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VGhlIG9wZXJhdGluZyBzeXN0ZW0gZG9lcyBub3Qgc3VwcG9ydCB0aW1lIHRvIGxpdmUuIFBsZWFzZSByZXN0YXJ0IEJDUyB3aXRoIGFkbWluIHByaXZpbGVnZXMu","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VGhlIE9TIGRvZXMgbm90IHN1cHBvcnQgdGhpcyB0ZXN0","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VGhlIHBhcmFtZXRlcnMgdXNlZCBmb3IgdGhlIHRlc3QgYXJlIGludmFsaWQuIFBsZWFzZSBjb250YWN0IHRoZSB0ZXN0IHByb3ZpZGVyIGFuZCByZXBvcnQgdGhlIGlzc3VlLg==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VGhlIHBhc3N3b3JkIHVzZWQgZm9yIHRoZSB0ZXN0IGRvZXNuJ3QgbWF0Y2guIFBsZWFzZSBjb250YWN0IHRoZSB0ZXN0IHByb3ZpZGVyIGFuZCByZXBvcnQgdGhlIGlzc3VlLg==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VGhlIHBlcmNlbnRhZ2VzIGFkZGVkIHVwOiAlZg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VGhlIHNlcnZlciBpcyBidXN5LiBUaGlzIGNvdWxkIGJlIGEgdGhyb3R0bGUgc2V0dGluZyBpbXBvc2VkIGJ5IHRoZSBwcm92aWRlci4gUGxlYXNlIGNvbnRhY3QgdGhlIHRlc3QgcHJvdmlkZXIgYW5kIHJlcG9ydCB0aGUgaXNzdWUu","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VGhlIHNlcnZlciByZWFjaGVkIGl0cyBtYXhpbXVtIGJhbmR3aWR0aCBzdHJlYW0gbGltaXQuIFBsZWFzZSBjb250YWN0IHRoZSB0ZXN0IHByb3ZpZGVyIGFuZCByZXBvcnQgdGhlIGlzc3VlLg==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VGhlIHNlcnZlcidzIG1heGltdW0gYmFuZHdpZHRoIHRvIHN0cmVhbSBsaW1pdCB3YXMgcmVhY2hlZA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VGhlIFNPRlRXQVJFIFBST0RVQ1QgaXMgbGljZW5zZWQsIG5vdCBzb2xkLiBUaGUgU09GVFdBUkUgUFJPRFVDVCBpcyBwcm90ZWN0ZWQgYnkgY29weXJpZ2h0IGxhd3MgYW5kIGludGVybmF0aW9uYWwgY29weXJpZ2h0IHRyZWF0aWVzLCBhcyB3ZWxsIGFzIG90aGVyIGludGVsbGVjdHVhbCBwcm9wZXJ0eSBsYXdzIGFuZCB0cmVhdGllcy4gQnkgaW5zdGFsbGlu","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"VGhlIHRlc3QgY291bGQgbm90IG9wZW4gYSBzb2NrZXQuIFRoaXMgaXMgbGlrZWx5IGR1ZSB0byBsYWNrIG9mIGFkbWluIHByaXZpbGVnZXMuIFBsZWFzZSByZXN0YXJ0IHRoZSBCQ1Mgd2l0aCBhZG1pbiBwcml2aWxlZ2VzLg==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VGhlIHRlc3QgZGlkbid0IGNvbXBsZXRlIGFzIGV4cGVjdGVkOg==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VGhlIHRlc3QgZmFpbGVkIHRvIHN0YXJ0ICh0aHJlYWQgZmFpbHVyZSkuIFBsZWFzZSBjb250YWN0IHRoZSB0ZXN0IHByb3ZpZGVyIGFuZCByZXBvcnQgdGhlIGlzc3VlLg==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VGhlIHRlc3QgaGFuZGxlIGlzIGludmFsaWQuIFBsZWFzZSBjb250YWN0IHRoZSB0ZXN0IHByb3ZpZGVyIGFuZCByZXBvcnQgdGhlIGlzc3VlLg==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VGhlIHRlc3QgaXMgYnVzeS4gUGxlYXNlIHdhaXQgdGhlbiByZWZyZXNoIHRoZSBwYWdlIGFuZCB0cnkgYWdhaW4u","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VGhlIHRlc3Qgc2VydmVyIGNhbm5vdCBiZSByZWFjaGVkLiBUaGlzIGNvdWxkIGJlIGRvd24gdG8gYSBsb3NzIG9mIEludGVybmV0L05ldHdvcmsgY29ubmVjdGl2aXR5LiBQbGVhc2UgY29udGFjdCB0aGUgdGVzdCBwcm92aWRlciBhbmQgcmVwb3J0IHRoZSBpc3N1ZS4=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VGhlIHRlc3Qgd2FzIHRlcm1pbmF0ZWQuICBQbGVhc2UgY29udGFjdCB0aGUgdGVzdCBwcm92aWRlciBhbmQgcmVwb3J0IHRoZSBpc3N1ZS4=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VGhlIHRyaWFsIGxpbWl0IGhhcyBiZWVuIGV4Y2VlZGVkLiBQbGVhc2UgY29udGFjdCB0aGUgdGVzdCBwcm92aWRlciBhbmQgcmVwb3J0IHRoZSBpc3N1ZS4=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VGhlbWVBcGlDb25uZWN0aW9uUmVxdWVzdA==","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"dGhlciBwZWN1bmlhcnkgbG9zcykgYXJpc2luZyBvdXQgb2YgdGhlIHVzZSBvZiBvciBpbmFiaWxpdHkgdG8gdXNlIHRoZSBTT0ZUV0FSRSBQUk9EVUNUICh3aGV0aGVyIGR1ZSB0byBsaWNlbnNlIHRlcm1pbmF0aW9uIG9yIGFueSBvdGhlciByZWFzb24pLCBldmVuIGlmIFZpc3VhbHdhcmUgaGFzIGJlZW4gYWR2aXNlZCBvZiB0aGUgcG9zc2liaWxpdHkgb2Ygc3VjaCBkYW1hZ2VzLiBcbGluZSBcbGluZSB9e1xydGxjaFxmY3Mx","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"VGhlcmUgYXJlIG5vdCBlbm91Z2ggcmVzb3VyY2VzIGF2YWlsYWJsZSB0byBydW4gdGhlIHRlc3QuIFBsZWFzZSBjb250YWN0IHRoZSB0ZXN0IHByb3ZpZGVyIGFuZCByZXBvcnQgdGhlIGlzc3VlLg==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VGhlcmUgaXMgbm8gZGF0YSBhdmFpbGFibGUgZm9yIHRoZSB0ZXN0LiBQbGVhc2UgY29udGFjdCB0aGUgdGVzdCBwcm92aWRlciBhbmQgcmVwb3J0IHRoZSBpc3N1ZS4=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VGhlcmUgaXMgbm90IGVub3VnaCBiYW5kd2lkdGggYXZhaWxhYmxlIGZyb20gdGhlIHNlcnZlciB0byBjb21wbGV0ZSB0aGUgdGVzdC4gUGxlYXNlIGNvbnRhY3QgdGhlIHRlc3QgcHJvdmlkZXIgYW5kIHJlcG9ydCB0aGUgaXNzdWUu","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VGhpcyBpcyB1c2VkIHRvIGFjY2VzcyB0aGUgc2VydmVyIHdoZW4gbm90IG1hbmFnZWQgY2VudHJhbGx5","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VGhpcyBMaWNlbnNlIEFncmVlbWVudCAodGhlICJBZ3JlZW1lbnQiKSBpcyBhIGxlZ2FsIGFncmVlbWVudA==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"VGhpcyBsaWNlbnNlIGlzIG5vdCB0cmFuc2ZlcmFibGUuIFxsaW5lIFxsaW5lIH17XHJ0bGNoXGZjczEgXGFiXGFmMlxhZnMyMCBcbHRyY2hcZmNzMCBcYlxmMlxmczIwXGxhbmcyMDU3XGxhbmdmZTIwNTdcbGFuZ2ZlbnAyMDU3XGluc3JzaWQxMzA1MDcyMlxjaGFycnNpZDEzMDUwNzIyIDIuIFJFU1RSSUNUSU9OUy59e1xydGxjaFxmY3MxIFxhZjJcYWZzMjAgXGx0cmNoXGZjczA=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"VGhpcyBwcm9ncmFtIG11c3QgYmUgcnVuIHVuZGVyIFdpbjMyJDc=","type":"Ansi","source":"Dropped File","process":null,"filename":"SimpleSC.dll.328895541","compromised":null,"detection_total":null,"total":null},{"value":"VGhpcyBzZXJ2aWNlIGlzIGFsZWFkeSBpbnN0YWxsZWQ=","type":"Ansi","source":"Hybrid Analysis","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01311000.00000020.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VGhyZWFkaW5nTW9kZWw=","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VGh1cnNkYXk=","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"dGlvbnMtbDEtMS0w","type":"Unicode","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VGxzR2V0VmFsdWU=","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VGxzU2V0VmFsdWU=","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"dG8gVENQIHBvcnQgJWQ=","type":"Ansi","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VG8gdGhlIG1heGltdW0gZXh0ZW50IHBlcm1pdHRlZCBieSBhcHBsaWNhYmxlIGxhdywgaW4gbm8gZXZlbnQgc2hhbGwgVmlzdWFsd2FyZSBvciBpdHMgb3duZXJzLCBlbXBsb3llZXMsIGFnZW50cw==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"VG90YWwgZGF0YSA9ICVkIGJ5dGVzIGluICVkIHNlY29uZHM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VHJhY2VSb3V0ZSB0byAlcyA6IEVsYXBzZWRUaW1lID0gJXVtcw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VHJhY2VSb3V0ZTogSWNtcENyZWF0ZUZpbGUgZmFpbGVk","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VHJhY2VSb3V0ZTogSW52YWxpZCBJUCBhZGRyZXNzICVz","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VHJhY2tQb3B1cE1lbnU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"VHJhaWxlciBGaWVsZDogMHg=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VHJhbnNwYXJlbnRFbmFibGVk","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VHJhbnNwb3J0cw==","type":"Unicode","source":"Runtime Data","process":"NetQCheckHTML5Agent.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VHJpYWwgbGltaXQgcmVhY2hlZA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"dHJvbFNlcnZpY2U=","type":"Ansi","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VFJVU1RFRCBDRVJUSUZJQ0FURQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VHV0b3JpYWxz","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VFdBUkUgUFJPRFVDVC4gKEYpIFlvdSBtYXkgbm90IGFjdGl2YXRlIHRoZSBTT0ZUV0FSRSBQUk9EVUNUIHdpdGggYSBsaWNlbnNlIGtleSB0aGF0IHlvdSBkaWQgbm90IGxlZ2FsbHkgb2J0YWluLiAoRykgWW91IG11c3QgcHJvcGVybHkgcGF5IGZvciBhbnkgU09GVFdBUkUgUFJPRFVDVCBsaWNlbnNlIGtleXMgdXNlZC4gXGxpbmUgXGxpbmUgfXtccnRsY2hcZmNzMSBcYWJcYWYyXGFmczIwIFxsdHJjaFxmY3Mw","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"dHlcfj01UVpRSQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"VHlwZSBEZXNjcmlwdG9yJw==","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VSw0QzVvR1poXQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"VTE1RjVWNW41XjVNNXM1RzUnNS81","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"VV1ibVZeY0RWXmM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"VV1jcFZeY1ZeYy5WXmM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"VURQICVzIGNhcGFjaXR5IGlzIGFyb3VuZCAlZEticHMgYXQgJWQgYnl0ZXMgcGVyIHBhY2tldA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VURQIENhcGFjaXR5IHByZXRlc3QgJWQgb2YgJWQ=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"dWRwaW5pdGlhbGJhbmR3aWR0aA==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"dWRwaW5pdGlhbHViYW5kd2lkdGg=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"dWRwbWF4YmFuZHdpZHRo","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"dWRwbWF4dWJhbmR3aWR0aA==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"dWRwcGFja2V0c2l6ZQ==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VWx+cHZ5WUdDOw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"dW5hYmxlIHRvIGRlY29kZSBpc3N1ZXIgcHVibGljIGtleQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"dW5hYmxlIHRvIGRlY3J5cHQgY2VydGlmaWNhdGUncyBzaWduYXR1cmU=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"dW5hYmxlIHRvIGRlY3J5cHQgQ1JMJ3Mgc2lnbmF0dXJl","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"dW5hYmxlIHRvIGdldCBjZXJ0aWZpY2F0ZSBDUkw=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"dW5hYmxlIHRvIGdldCBDUkwgaXNzdWVyIGNlcnRpZmljYXRl","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"dW5hYmxlIHRvIGdldCBpc3N1ZXIgY2VydGlmaWNhdGU=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"dW5hYmxlIHRvIGdldCBsb2NhbCBpc3N1ZXIgY2VydGlmaWNhdGU=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VW5hYmxlIHRvIGxvYWQgV2luU29jayBETEw=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"dW5hYmxlIHRvIHZlcmlmeSB0aGUgZmlyc3QgY2VydGlmaWNhdGU=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VW5leHBlY3RlZCBvcGNvZGUgdHlwZSAlZA==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"dW5oYW5kbGVkIGNyaXRpY2FsIENSTCBleHRlbnNpb24=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"dW5oYW5kbGVkIGNyaXRpY2FsIGV4dGVuc2lvbg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VW5oYW5kbGVkRXhjZXB0aW9uRmlsdGVy","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"dW5pbnN0YWxs","type":"Ansi","source":"Hybrid Analysis","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01311000.00000020.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VW5pbnN0YWxsIHNlcnZpY2U6ICVzIHNlcnZpY2Ugbm90IGZvdW5k","type":"Ansi","source":"Hybrid Analysis","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01311000.00000020.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VW5pbnN0YWxsIHNlcnZpY2U6IHNlcnZpY2UgZGVsZXRlZA==","type":"Ansi","source":"Hybrid Analysis","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01311000.00000020.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VW5pbnN0YWxsU3RyaW5n","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VW5pcXVlIE5hbWU=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"dW5rbm93biBjZXJ0aWZpY2F0ZSB2ZXJpZmljYXRpb24gZXJyb3I=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VW5rbm93biBFcnJvcg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VW5rbm93biBleGNlcHRpb24=","type":"Ansi","source":"Hybrid Analysis","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01311000.00000020.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"dW5rbm93biUqcw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VW5tYXBWaWV3T2ZGaWxl","type":"Ansi","source":"Dropped File","process":null,"filename":"nsExec.dll.2021186361","compromised":null,"detection_total":null,"total":null},{"value":"dW5zZWN1cmVk","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"dW5zcGVjaWZpZWQgY2VydGlmaWNhdGUgdmVyaWZpY2F0aW9uIGVycm9y","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"dW5zdXBwb3J0ZWQgY2VydGlmaWNhdGUgcHVycG9zZQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VW5zdXBwb3J0ZWQgZXh0ZW5zaW9uIGZlYXR1cmU=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"dW5zdXBwb3J0ZWQgbmFtZSBjb25zdHJhaW50IHR5cGU=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"dW5zdXBwb3J0ZWQgb3IgaW52YWxpZCBuYW1lIGNvbnN0cmFpbnQgc3ludGF4","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"dW5zdXBwb3J0ZWQgb3IgaW52YWxpZCBuYW1lIHN5bnRheA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VW53ZWlnaHRlZCBtb2RhbCBwYXVzZSBpcyAlZG1zLCBjb3VudCAlZA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VXAgU2Vzc2lvbnM6","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VXAgVGVzdCBUeXBlOg==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VXAgdG8gJWRNYnBzOiBjb3VudCBpcyAlZC4gU3BlZWQgJTAuMWZNYnBzLCAlMC4xZiUl","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VXBkYXRlIHN1Y2Nlc3NmdWxseSBhcHBsaWVk","type":"Ansi","source":"Hybrid Analysis","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01310000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"dXBkYXRlYmNzLnZpc3VhbHdhcmUuY29t","type":"Ansi","source":"PCAP Processing","process":null,"filename":"PCAP","compromised":null,"detection_total":null,"total":null},{"value":"dXBkYXRlY2hlY2tpbnRlcnZhbHNlY3M9","type":"Ansi","source":"Hybrid Analysis","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01311000.00000020.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VXBncmFkZSB0byB3ZWJzb2NrZXQ=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VXBncmFkZTogd2Vic29ja2V0","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VXBsb2FkIHJlcG9ydCBjb21wbGV0ZSBbJWQgc2FtcGxlc10=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VXBsb2FkIHJlcG9ydCByZWplY3RlZCAtIGJhZCBzaXpl","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"dXBsb2FkLnBvcnQ9","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"dXBsb2FkcG9ydD0=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VXBzdHJlYW0=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"dXBzdHJlYW0=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VXBzdHJlYW0gSGFuZGxlIERlbGV0ZWQ=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VXBzdHJlYW0gUmVzdWx0cyBzZW50IHRvIHNlcnZlcg==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VXBzdHJlYW0gdGVzdDogbm8gcmVzcG9uc2UgZnJvbSBzZXJ2ZXI=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"dXJKZlFldU1dKw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"dXJsRm9yTWF5c2l0ZSAlcw==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"dXJsRnJvbURlY29kZSAlcw==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VXNlRGVsYXllZEFjY2VwdGFuY2U=","type":"Unicode","source":"Runtime Data","process":"NetQCheckHTML5Agent.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VXNlRHJvcEhhbmRsZXI=","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VXNlSG9zdG5hbWVBc0FsaWFz","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VXNlT2xkSG9zdFJlc29sdXRpb25PcmRlcg==","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VXNlciBHdWlkZQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VVNFUjMyLmRsbA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"VXNlckluZm8uZGxs","type":"Ansi","source":"Dropped File","process":null,"filename":"UserInfo.dll.2533488085","compromised":null,"detection_total":null,"total":null},{"value":"VVRGLTE2TEVVTklDT0RF","type":"Ansi","source":"Hybrid Analysis","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01311000.00000020.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VX1pU3w7aCJV","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"ViVkLiVkLiVkLiVk","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jIFZeY1BWXmM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jIFZeY1ZeYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jIVZeY3NWXmM4Vl5j","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jIVZeY1pWXmM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jIlZeY2RWXmM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jIlZeY3pWXmM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jI1ZeYyFWXmM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jI1ZeY1tWXmM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jI1ZeY15WXmM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jI1ZeY0lWXmM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jJFZeY25WXmM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jJFZeY3tWXmM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jJVZeYyRWXmN5Vl5j","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jJ1ZeYyVWXmM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jJ1ZeY1xWXmM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jKFZeY1ZeYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jKlZeYyZWXmM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jK1ZeY2VWXmM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jLlZeYz1WXmM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jLlZeY1dWXmM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jLlZeY1hWXmM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jMFZeY1lWXmM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jMlZeY0xWXmM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jMlZeY1FWXmN8Vl5j","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jM1ZeY1ZeYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jNVZeY1ZeYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jOFZeY19WXmM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jOFZeY1ZeYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jOVZeYzJWXmM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jO1ZeY2dWXmM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jO1ZeY1ZeYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jP1ZeYzxWXmM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jP1ZeY1BWXmM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jQFZeY2BWXmNWXmM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jW1ZeY1ZeYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jW1ZeY1ZeYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jY1ZeYyZWXmM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jY1ZeY1ZeYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jZFZeYzdWXmM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jRVZeY1ZeYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jR1ZeYyhWXmM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jSFZeYzhWXmM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jaFZeY1ZeYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jSFZeY1ZeYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5ja1ZeYzNWXmM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jS1ZeY2xWXmM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jS1ZeY3pWXmM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jTFZeYztWXmM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jb1ZeY09WXmM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jcFZeY1ZeYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jcFZeY1ZeYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jcVZeYzJWXmM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jcVZeY1ZeYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jclZeYy5WXmM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jVVZeY1ZeYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jVl5jIlZeYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jVl5jK1ZeYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jVl5jO1ZeYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jVl5jPVZeYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jVl5jXVZeYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jVl5jXlZeYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jVl5jX1ZeYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jVl5jQVZeYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jVl5jYlZeYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jVl5jZFZeYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jVl5jRlZeYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jVl5jZ1ZeYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jVl5jbVZeYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jVl5jb1ZeYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jVl5jUlZeYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jVl5jVVZeYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jVl5jeVZeYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jVl5jelZeYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jdlZeY1ZeYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jVlZeY1ZeYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jd1ZeYyBWXmM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jd1ZeY1ZeYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jd1ZeY1hWXmM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jeFZeYydWXmM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jelZeYyNWXmM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jelZeYztWXmM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jWlZeY1ZeYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5je1ZeYzlWXmNWXmM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5je1ZeY1ZeYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5je1ZeY1ZeYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5je1ZeY1lWXmM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jfFZeY1ZeYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jfVZeY1ZeYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jflZeY0JWXmM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jflZeY1ZeYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jflZeY1ZeYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"VmFsdWUgb2YgRHNjcEJpdHM6ICVp","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"dkR8PWxpQXN2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"VmVjdG9yIFNpemUgaXMgJWk=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"dmVjdG9yPFQ+IHRvbyBsb25n","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VmVyaWZ5IGVycm9yOg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VmVyaWZ5IGZhaWx1cmU=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VmVyaWZ5aW5nIC0gJXM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"dmVyaWZ5aW5nIGluc3RhbGxlcjogJWQlJQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"VmVyUXVlcnlWYWx1ZUE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"dmVyc2lvbj0=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"dmlkZW8ucG9ydD0=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VmlzdWFsd2FyZSBhcHBsaWNhdGlvbiBtYW5hZ2Vy","type":"Ansi","source":"Hybrid Analysis","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01311000.00000020.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VmlzdWFsd2FyZSBhcHBsaWNhdGlvbiBtYW5hZ2VyIC0gTmV0UUNoZWNrSFRNTDVBZ2VudC5leGU=","type":"Ansi","source":"Runtime Data","process":"bcs.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VmlzdWFsd2FyZSBhcHBsaWNhdGlvbiBtYW5hZ2VyIC0gTmV0UUNoZWNrSFRNTDVBZ2VudC5leGUgc2VydmljZSBpbnN0YWxsZWQgT0s=","type":"Ansi","source":"Runtime Data","process":"bcs.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VmlzdWFsd2FyZSBCQ1M=","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VmlzdWFsd2FyZSBCQ1MgU2V0dXA=","type":"Ansi","source":"Hybrid Analysis","process":"bcs_service.exe","filename":"00034508-00002748.00000001.35008.00401000.00000020.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VmlzdWFsd2FyZSBCcm93c2VyIENvbXBhdGliaWxpdHkgU2VydmljZSAoQkNTKQ==","type":"Ansi","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VmlzdWFsd2FyZSBJbmMw","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"VmlzdWFsd2FyZSBJbmMx","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"VmlzdWFsd2FyZSBtYXkgdGVybWluYXRlIHRoaXMgQWdyZWVtZW50IGFuZCBkaXNhYmxlIHRoZSBTT0ZUV0FSRSBQUk9EVUNUIGZvciBhbnkgbGVuZ3RoIG9mIHRpbWUsIGluY2x1ZGluZyBpbiBwZXJwZXR1aXR5LCB3aXRob3V0IHByaQ==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"Vk9JUCBkb3dubG9hZDogJWQgb2YgJWQgcGFja2V0cyByZWNlaXZlZA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Vm9JUCBMaW5lcyBTaW11bGF0ZWQ6","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Vm9JUCBUZXN0IEF1ZGl0","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Vm9JUDogZmFpbGVkIHRvIHJldHJpZXZlIHVwc3RyZWFtIHJlcG9ydA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Vm9pcFRlc3QgUGFja2V0IFNpemUgbGltaXRlZCB0byAlZCBieXRlcw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Vk9JUFRlc3Q6IE1zJTA1ZCAgZmFpbGVkIHRvIHN0YXJ0IGRhdGEgc2Vzc2lvbg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Vk9JUFRlc3Q6IE1zJTA1ZCAgUmVjZWl2ZSBTZXNzaW9uIHN0YXJ0ZWQgT0s=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Vk9JUFRlc3Q6IE1zJTA1ZCAgU2VuZCBTZXNzaW9uIHN0YXJ0ZWQgT0s=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Vk9JUFRlc3Q6IE1zJTA1ZCAgU3RhcnQgUmVjZWl2ZSBTZXNzaW9uLiBTZXJ2ZXIgSVA9JXMgVURQIHBvcnQ9JWQ=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Vk9JUFRlc3Q6IE1zJTA1ZCAgU3RhcnQgU2VuZCBTZXNzaW9uLiBTZXJ2ZXIgSVA9JXMgVURQIHBvcnQ9JWQ=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VllJWWVZVVl9WUM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"VntWe0l7RXtL","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"dzpmKUBHdjk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"d2FpdGZvcj0=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"V2FpdEZvclNpbmdsZU9iamVjdA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"V2FudHNBbGlhc2VkTm90aWZpY2F0aW9ucw==","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V2FudHNGT1JESVNQTEFZ","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V2FudHNGT1JQQVJTSU5H","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V2FudHNQYXJzZURpc3BsYXlOYW1l","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V2FudHNVbml2ZXJzYWxEZWxlZ2F0ZQ==","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V2ViU2VydmVyIGFjdGl2ZSBvbiBwb3J0ICVk","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"V2ViU2VydmVyIGFjdGl2ZSBvbiBwb3J0IDMyNjU4","type":"Ansi","source":"Runtime Data","process":"NetQCheckHTML5Agent.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V2ViU2VydmVyIGFjdGl2ZSBvbiBwb3J0IDMyNjYw","type":"Ansi","source":"Runtime Data","process":"NetQCheckHTML5Agent.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V2Vic2VydmVyOiBiaW5kIGZhaWxlZCBvbiBwb3J0ICVk","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"V2ViU2VydmVyOiBsaXN0ZW4gZmFpbGVk","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"d2Vic29ja2V0","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"V2VkbmVzZGF5","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"V2VpZ2h0ZWQgbW9kYWwgcGF1c2UgaXMgJWRtcywgY291bnQgJWQ=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"d0ZkZH5VTHx8Zn5FSm0=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"V2hkc1dTaz8q","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"V2lkZUNoYXJUb011bHRpQnl0ZQ==","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"V2luU29jayAyLjAgUHJvdmlkZXIgSUQ=","type":"Unicode","source":"Runtime Data","process":"NetQCheckHTML5Agent.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V2luU29ja19SZWdpc3RyeV9WZXJzaW9u","type":"Unicode","source":"Runtime Data","process":"NetQCheckHTML5Agent.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V0pQSlhKWUpf","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"V3JpdGVDb25zb2xlVw==","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"V3JpdGVGaWxl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"V3JpdGVQcml2YXRlUHJvZmlsZVN0cmluZ0E=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"d3JvbmdwYXNz","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"V3MyXzMyTnVtSGFuZGxlQnVja2V0cw==","type":"Unicode","source":"Runtime Data","process":"NetQCheckHTML5Agent.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V3MyXzMyU3BpbkNvdW50","type":"Unicode","source":"Runtime Data","process":"NetQCheckHTML5Agent.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"d3NwcmludGZB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"d1paUnJUamJ2fGY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"eCEpMSMlPT0t","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"WCV0MW1deFUk","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"WDQwME5hbWU6PHVuc3VwcG9ydGVkPg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"WDUwOSBDUkw=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"WDUwOXYzIGV4dGVuc2lvbnM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"eDYlJSVJPCYxKg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"WDkuNDIgREggUEFSQU1FVEVSUw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"eF1qaW5KTWVRbGltXEg=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"WF9jYlVdY11WXmNpVl5j","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"WGdkaDBCTUZo","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"WHVQQEk7Rls/RA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"WTQ2Ozk5Litxfg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"eT0lWlklfE1QPQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"WUBESENQIFRlc3QgSW5pdCBiZWluZyBjYWxsZWQ=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"eWRkNHtYRCIgXw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"WU42ZmdOLSpy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"WW91IGdpdmUgeW91ciBjb25zZW50IGZvciBWaXN1YWx3YXJlIHRvIG1vbml0b3IgU09GVFdBUkUgUFJPRFVDVCB1c2FnZSBhbmQgdG8gY29sbGVjdCBkYXRhIGZvciB0aGUgcHVycG9zZSBvZiBhdWRpdGluZyBjb21wbGlhbmNlIHdpdGggdGhlIHRlcm1zIG9mIHRoaXMgQWdyZWVtZW50LiBcbGluZSBcbGluZSB9e1xydGxjaFxmY3MxIFxhYlxhZjJcYWZzMjAgXGx0cmNoXGZjczA=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"WW91IG11c3QgdHlwZSBpbg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"WW91IG5lZWQgdG8gcmVhZCB0aGUgT3BlblNTTCBGQVEsIGh0dHBzOi8vd3d3Lm9wZW5zc2wub3JnL2RvY3MvZmFxLmh0bWw=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"WVFYMTFkd2w6","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"enJXJC0wXkRgdA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"ezFCM0VBNURDLUI1ODctNDc4Ni1CNEVGLUJEMURDMzMyQUVBRX0=","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"e1wqXGNvbG9yc2NoZW1lbWFwcGluZyAzYzNmNzg2ZDZjMjA3NjY1NzI3MzY5NmY2ZTNkMjIzMTJlMzAyMjIwNjU2ZTYzNmY2NDY5NmU2NzNkMjI1NTU0NDYyZDM4MjIyMDczNzQ2MTZlNjQ2MTZjNmY2ZTY1M2QyMjc5NjU3MzIyM2YzZTBkMGEzYzYxM2E2MzZjNzI0ZA==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"e1wqXGxhdGVudHN0eWxlc1xsc2RzdGltYXgzNzJcbHNkbG9ja2VkZGVmMFxsc2RzZW1paGlkZGVuZGVmMFxsc2R1bmhpZGV1c2VkZGVmMFxsc2RxZm9ybWF0ZGVmMFxsc2Rwcmlvcml0eWRlZjk5e1xsc2Rsb2NrZWRleGNlcHQgXGxzZHFmb3JtYXQxIFxsc2Rwcmlvcml0eTAgXGxzZGxvY2tlZDAgTm9ybWFsO1xsc2RxZm9ybWF0MSBcbHNkcHJpb3JpdHk5IFxsc2Rsb2NrZWQwIGhlYWRpbmcgMTs=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"e1wqXHJzaWR0YmwgXHJzaWQyNTA1NDkxXHJzaWQxMjk4ODU1N1xyc2lkMTI5OTY1MzhccnNpZDEzMDUwNzIyXHJzaWQxNjA2NzA1MX17XG1tYXRoUHJcbW1hdGhGb250MzRcbWJya0JpbjBcbWJya0JpblN1YjBcbXNtYWxsRnJhYzBcbWRpc3BEZWYxXG1sTWFyZ2luMFxtck1hcmdpbjBcbWRlZkpjMVxtd3JhcEluZGVudDE0NDBcbWludExpbTBcbW5hcnlMaW0xfXtcaW5mb3tcYXV0aG9yIGp1bGlhbn17XG9wZXJhdG9yIGp1bGlhbn0=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"e1wqXHdncmZmbXRmaWx0ZXIgMjQ1MH1cbm9mZWF0dXJldGhyb3R0bGUxXGlsZm9tYWNhdGNsbnVwMFxsdHJwYXIgXHNlY3RkIFxsdHJzZWN0XGxpbmV4MFxoZWFkZXJ5NzA4XGZvb3Rlcnk3MDhcY29sc3g3MDhcZW5kbmhlcmVcc2VjdGxpbmVncmlkMzYwXHNlY3RkZWZhdWx0Y2xcc2Z0bmJqIHtcKlxwbnNlY2x2bDFccG51Y3JtXHBuc3RhcnQxXHBuaW5kZW50NzIwXHBuaGFuZyB7XHBudHh0YSAufX17XCpccG5zZWNsdmwy","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"e1xjcmVhdGltXHlyMjAxM1xtbzRcZHkzMFxocjEzXG1pbjM1fXtccmV2dGltXHlyMjAxNlxtbzNcZHkxMlxocjE3XG1pbjMzfXtcdmVyc2lvbjR9e1xlZG1pbnM4fXtcbm9mcGFnZXMyfXtcbm9md29yZHM2MDB9e1xub2ZjaGFyczM0MjF9e1xub2ZjaGFyc3dzNDAxM317XHZlcm4zfX17XCpceG1sbnN0Ymwge1x4bWxuczEgaHR0cDovL3NjaGVtYXMubWljcm9zb2Z0LmNvbS9vZmZpY2Uvd29yZC8yMDAzL3dvcmRtbH19","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"e1xmMzgxXGZiaWRpIFxmcm9tYW5cZmNoYXJzZXQyMDRcZnBycTIgQ2FtYnJpYSBNYXRoIEN5cjt9e1xmMzgzXGZiaWRpIFxmcm9tYW5cZmNoYXJzZXQxNjFcZnBycTIgQ2FtYnJpYSBNYXRoIEdyZWVrO317XGYzODRcZmJpZGkgXGZyb21hblxmY2hhcnNldDE2MlxmcHJxMiBDYW1icmlhIE1hdGggVHVyO317XGYzODdcZmJpZGkgXGZyb21hblxmY2hhcnNldDE4NlxmcHJxMiBDYW1icmlhIE1hdGggQmFsdGljO30=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"e1xmMzg4XGZiaWRpIFxmcm9tYW5cZmNoYXJzZXQxNjNcZnBycTIgQ2FtYnJpYSBNYXRoIChWaWV0bmFtZXNlKTt9e1xmNDMwXGZiaWRpIFxmc3dpc3NcZmNoYXJzZXQyMzhcZnBycTIgQ2FsaWJyaSBDRTt9e1xmNDMxXGZiaWRpIFxmc3dpc3NcZmNoYXJzZXQyMDRcZnBycTIgQ2FsaWJyaSBDeXI7fXtcZjQzM1xmYmlkaSBcZnN3aXNzXGZjaGFyc2V0MTYxXGZwcnEyIENhbGlicmkgR3JlZWs7fQ==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"e1xmM1xmYmlkaSBcZnJvbWFuXGZjaGFyc2V0MlxmcHJxMntcKlxwYW5vc2UgMDUwNTAxMDIwMTA3MDYwMjA1MDd9U3ltYm9sO317XGYzNFxmYmlkaSBcZnJvbWFuXGZjaGFyc2V0MFxmcHJxMntcKlxwYW5vc2UgMDIwNDA1MDMwNTA0MDYwMzAyMDR9Q2FtYnJpYSBNYXRoO317XGYzOVxmYmlkaSBcZnN3aXNzXGZjaGFyc2V0MFxmcHJxMntcKlxwYW5vc2UgMDIwZjA1MDIwMjAyMDQwMzAyMDR9Q2FsaWJyaTt9","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"e1xmNDFcZmJpZGkgXGZyb21hblxmY2hhcnNldDIwNFxmcHJxMiBUaW1lcyBOZXcgUm9tYW4gQ3lyO317XGY0M1xmYmlkaSBcZnJvbWFuXGZjaGFyc2V0MTYxXGZwcnEyIFRpbWVzIE5ldyBSb21hbiBHcmVlazt9e1xmNDRcZmJpZGkgXGZyb21hblxmY2hhcnNldDE2MlxmcHJxMiBUaW1lcyBOZXcgUm9tYW4gVHVyO317XGY0NVxmYmlkaSBcZnJvbWFuXGZjaGFyc2V0MTc3XGZwcnEyIFRpbWVzIE5ldyBSb21hbiAoSGVicmV3KTt9","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"e1xmNDM0XGZiaWRpIFxmc3dpc3NcZmNoYXJzZXQxNjJcZnBycTIgQ2FsaWJyaSBUdXI7fXtcZjQzN1xmYmlkaSBcZnN3aXNzXGZjaGFyc2V0MTg2XGZwcnEyIENhbGlicmkgQmFsdGljO317XGY0MzhcZmJpZGkgXGZzd2lzc1xmY2hhcnNldDE2M1xmcHJxMiBDYWxpYnJpIChWaWV0bmFtZXNlKTt9e1xmbG9tYWpvclxmMzE1MDhcZmJpZGkgXGZyb21hblxmY2hhcnNldDIzOFxmcHJxMiBUaW1lcyBOZXcgUm9tYW4gQ0U7fQ==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"e1xmNDZcZmJpZGkgXGZyb21hblxmY2hhcnNldDE3OFxmcHJxMiBUaW1lcyBOZXcgUm9tYW4gKEFyYWJpYyk7fXtcZjQ3XGZiaWRpIFxmcm9tYW5cZmNoYXJzZXQxODZcZnBycTIgVGltZXMgTmV3IFJvbWFuIEJhbHRpYzt9e1xmNDhcZmJpZGkgXGZyb21hblxmY2hhcnNldDE2M1xmcHJxMiBUaW1lcyBOZXcgUm9tYW4gKFZpZXRuYW1lc2UpO317XGY2MFxmYmlkaSBcZm1vZGVyblxmY2hhcnNldDIzOFxmcHJxMSBDb3VyaWVyIE5ldyBDRTt9","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"e1xmNjFcZmJpZGkgXGZtb2Rlcm5cZmNoYXJzZXQyMDRcZnBycTEgQ291cmllciBOZXcgQ3lyO317XGY2M1xmYmlkaSBcZm1vZGVyblxmY2hhcnNldDE2MVxmcHJxMSBDb3VyaWVyIE5ldyBHcmVlazt9e1xmNjRcZmJpZGkgXGZtb2Rlcm5cZmNoYXJzZXQxNjJcZnBycTEgQ291cmllciBOZXcgVHVyO317XGY2NVxmYmlkaSBcZm1vZGVyblxmY2hhcnNldDE3N1xmcHJxMSBDb3VyaWVyIE5ldyAoSGVicmV3KTt9","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"e1xmNjZcZmJpZGkgXGZtb2Rlcm5cZmNoYXJzZXQxNzhcZnBycTEgQ291cmllciBOZXcgKEFyYWJpYyk7fXtcZjY3XGZiaWRpIFxmbW9kZXJuXGZjaGFyc2V0MTg2XGZwcnExIENvdXJpZXIgTmV3IEJhbHRpYzt9e1xmNjhcZmJpZGkgXGZtb2Rlcm5cZmNoYXJzZXQxNjNcZnBycTEgQ291cmllciBOZXcgKFZpZXRuYW1lc2UpO317XGYzODBcZmJpZGkgXGZyb21hblxmY2hhcnNldDIzOFxmcHJxMiBDYW1icmlhIE1hdGggQ0U7fQ==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"e1xmYmltYWpvclxmMzE1MzhcZmJpZGkgXGZyb21hblxmY2hhcnNldDIzOFxmcHJxMiBUaW1lcyBOZXcgUm9tYW4gQ0U7fXtcZmJpbWFqb3JcZjMxNTM5XGZiaWRpIFxmcm9tYW5cZmNoYXJzZXQyMDRcZnBycTIgVGltZXMgTmV3IFJvbWFuIEN5cjt9e1xmYmltYWpvclxmMzE1NDFcZmJpZGkgXGZyb21hblxmY2hhcnNldDE2MVxmcHJxMiBUaW1lcyBOZXcgUm9tYW4gR3JlZWs7fQ==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"e1xmYmltYWpvclxmMzE1NDJcZmJpZGkgXGZyb21hblxmY2hhcnNldDE2MlxmcHJxMiBUaW1lcyBOZXcgUm9tYW4gVHVyO317XGZiaW1ham9yXGYzMTU0M1xmYmlkaSBcZnJvbWFuXGZjaGFyc2V0MTc3XGZwcnEyIFRpbWVzIE5ldyBSb21hbiAoSGVicmV3KTt9e1xmYmltYWpvclxmMzE1NDRcZmJpZGkgXGZyb21hblxmY2hhcnNldDE3OFxmcHJxMiBUaW1lcyBOZXcgUm9tYW4gKEFyYWJpYyk7fQ==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"e1xmYmltYWpvclxmMzE1NDVcZmJpZGkgXGZyb21hblxmY2hhcnNldDE4NlxmcHJxMiBUaW1lcyBOZXcgUm9tYW4gQmFsdGljO317XGZiaW1ham9yXGYzMTU0NlxmYmlkaSBcZnJvbWFuXGZjaGFyc2V0MTYzXGZwcnEyIFRpbWVzIE5ldyBSb21hbiAoVmlldG5hbWVzZSk7fXtcZmxvbWlub3JcZjMxNTQ4XGZiaWRpIFxmcm9tYW5cZmNoYXJzZXQyMzhcZnBycTIgVGltZXMgTmV3IFJvbWFuIENFO30=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"e1xmYmltaW5vclxmMzE1NzlcZmJpZGkgXGZyb21hblxmY2hhcnNldDIwNFxmcHJxMiBUaW1lcyBOZXcgUm9tYW4gQ3lyO317XGZiaW1pbm9yXGYzMTU4MVxmYmlkaSBcZnJvbWFuXGZjaGFyc2V0MTYxXGZwcnEyIFRpbWVzIE5ldyBSb21hbiBHcmVlazt9e1xmYmltaW5vclxmMzE1ODJcZmJpZGkgXGZyb21hblxmY2hhcnNldDE2MlxmcHJxMiBUaW1lcyBOZXcgUm9tYW4gVHVyO30=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"e1xmYmltaW5vclxmMzE1ODNcZmJpZGkgXGZyb21hblxmY2hhcnNldDE3N1xmcHJxMiBUaW1lcyBOZXcgUm9tYW4gKEhlYnJldyk7fXtcZmJpbWlub3JcZjMxNTg0XGZiaWRpIFxmcm9tYW5cZmNoYXJzZXQxNzhcZnBycTIgVGltZXMgTmV3IFJvbWFuIChBcmFiaWMpO317XGZiaW1pbm9yXGYzMTU4NVxmYmlkaSBcZnJvbWFuXGZjaGFyc2V0MTg2XGZwcnEyIFRpbWVzIE5ldyBSb21hbiBCYWx0aWM7fQ==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"e1xmYmltaW5vclxmMzE1ODZcZmJpZGkgXGZyb21hblxmY2hhcnNldDE2M1xmcHJxMiBUaW1lcyBOZXcgUm9tYW4gKFZpZXRuYW1lc2UpO319e1xjb2xvcnRibDtccmVkMFxncmVlbjBcYmx1ZTA7XHJlZDBcZ3JlZW4wXGJsdWUyNTU7XHJlZDBcZ3JlZW4yNTVcYmx1ZTI1NTtccmVkMFxncmVlbjI1NVxibHVlMDtccmVkMjU1XGdyZWVuMFxibHVlMjU1O1xyZWQyNTVcZ3JlZW4wXGJsdWUwO1xyZWQyNTVcZ3JlZW4yNTVcYmx1ZTA7","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"e1xmZGJtYWpvclxmMzE1MjFcZmJpZGkgXGZyb21hblxmY2hhcnNldDE2MVxmcHJxMiBUaW1lcyBOZXcgUm9tYW4gR3JlZWs7fXtcZmRibWFqb3JcZjMxNTIyXGZiaWRpIFxmcm9tYW5cZmNoYXJzZXQxNjJcZnBycTIgVGltZXMgTmV3IFJvbWFuIFR1cjt9e1xmZGJtYWpvclxmMzE1MjNcZmJpZGkgXGZyb21hblxmY2hhcnNldDE3N1xmcHJxMiBUaW1lcyBOZXcgUm9tYW4gKEhlYnJldyk7fQ==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"e1xmZGJtYWpvclxmMzE1MjRcZmJpZGkgXGZyb21hblxmY2hhcnNldDE3OFxmcHJxMiBUaW1lcyBOZXcgUm9tYW4gKEFyYWJpYyk7fXtcZmRibWFqb3JcZjMxNTI1XGZiaWRpIFxmcm9tYW5cZmNoYXJzZXQxODZcZnBycTIgVGltZXMgTmV3IFJvbWFuIEJhbHRpYzt9e1xmZGJtYWpvclxmMzE1MjZcZmJpZGkgXGZyb21hblxmY2hhcnNldDE2M1xmcHJxMiBUaW1lcyBOZXcgUm9tYW4gKFZpZXRuYW1lc2UpO30=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"e1xmZGJtaW5vclxmMzE1NjFcZmJpZGkgXGZyb21hblxmY2hhcnNldDE2MVxmcHJxMiBUaW1lcyBOZXcgUm9tYW4gR3JlZWs7fXtcZmRibWlub3JcZjMxNTYyXGZiaWRpIFxmcm9tYW5cZmNoYXJzZXQxNjJcZnBycTIgVGltZXMgTmV3IFJvbWFuIFR1cjt9e1xmZGJtaW5vclxmMzE1NjNcZmJpZGkgXGZyb21hblxmY2hhcnNldDE3N1xmcHJxMiBUaW1lcyBOZXcgUm9tYW4gKEhlYnJldyk7fQ==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"e1xmZGJtaW5vclxmMzE1NjRcZmJpZGkgXGZyb21hblxmY2hhcnNldDE3OFxmcHJxMiBUaW1lcyBOZXcgUm9tYW4gKEFyYWJpYyk7fXtcZmRibWlub3JcZjMxNTY1XGZiaWRpIFxmcm9tYW5cZmNoYXJzZXQxODZcZnBycTIgVGltZXMgTmV3IFJvbWFuIEJhbHRpYzt9e1xmZGJtaW5vclxmMzE1NjZcZmJpZGkgXGZyb21hblxmY2hhcnNldDE2M1xmcHJxMiBUaW1lcyBOZXcgUm9tYW4gKFZpZXRuYW1lc2UpO30=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"e1xmaGltYWpvclxmMzE1MDJcZmJpZGkgXGZzd2lzc1xmY2hhcnNldDBcZnBycTJ7XCpccGFub3NlIDAyMGYwMzAyMDIwMjA0MDMwMjA0fUNhbGlicmkgTGlnaHQ7fXtcZmJpbWFqb3JcZjMxNTAzXGZiaWRpIFxmcm9tYW5cZmNoYXJzZXQwXGZwcnEye1wqXHBhbm9zZSAwMjAyMDYwMzA1MDQwNTAyMDMwNH1UaW1lcyBOZXcgUm9tYW47fQ==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"e1xmaGltYWpvclxmMzE1MjhcZmJpZGkgXGZzd2lzc1xmY2hhcnNldDIzOFxmcHJxMiBDYWxpYnJpIExpZ2h0IENFO317XGZoaW1ham9yXGYzMTUyOVxmYmlkaSBcZnN3aXNzXGZjaGFyc2V0MjA0XGZwcnEyIENhbGlicmkgTGlnaHQgQ3lyO317XGZoaW1ham9yXGYzMTUzMVxmYmlkaSBcZnN3aXNzXGZjaGFyc2V0MTYxXGZwcnEyIENhbGlicmkgTGlnaHQgR3JlZWs7fQ==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"e1xmaGltYWpvclxmMzE1MzJcZmJpZGkgXGZzd2lzc1xmY2hhcnNldDE2MlxmcHJxMiBDYWxpYnJpIExpZ2h0IFR1cjt9e1xmaGltYWpvclxmMzE1MzVcZmJpZGkgXGZzd2lzc1xmY2hhcnNldDE4NlxmcHJxMiBDYWxpYnJpIExpZ2h0IEJhbHRpYzt9e1xmaGltYWpvclxmMzE1MzZcZmJpZGkgXGZzd2lzc1xmY2hhcnNldDE2M1xmcHJxMiBDYWxpYnJpIExpZ2h0IChWaWV0bmFtZXNlKTt9","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"e1xmaGltaW5vclxmMzE1MDZcZmJpZGkgXGZzd2lzc1xmY2hhcnNldDBcZnBycTJ7XCpccGFub3NlIDAyMGYwNTAyMDIwMjA0MDMwMjA0fUNhbGlicmk7fXtcZmJpbWlub3JcZjMxNTA3XGZiaWRpIFxmcm9tYW5cZmNoYXJzZXQwXGZwcnEye1wqXHBhbm9zZSAwMjAyMDYwMzA1MDQwNTAyMDMwNH1UaW1lcyBOZXcgUm9tYW47fXtcZjQwXGZiaWRpIFxmcm9tYW5cZmNoYXJzZXQyMzhcZnBycTIgVGltZXMgTmV3IFJvbWFuIENFO30=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"e1xmaGltaW5vclxmMzE1NjhcZmJpZGkgXGZzd2lzc1xmY2hhcnNldDIzOFxmcHJxMiBDYWxpYnJpIENFO317XGZoaW1pbm9yXGYzMTU2OVxmYmlkaSBcZnN3aXNzXGZjaGFyc2V0MjA0XGZwcnEyIENhbGlicmkgQ3lyO317XGZoaW1pbm9yXGYzMTU3MVxmYmlkaSBcZnN3aXNzXGZjaGFyc2V0MTYxXGZwcnEyIENhbGlicmkgR3JlZWs7fXtcZmhpbWlub3JcZjMxNTcyXGZiaWRpIFxmc3dpc3NcZmNoYXJzZXQxNjJcZnBycTIgQ2FsaWJyaSBUdXI7fQ==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"e1xmaGltaW5vclxmMzE1NzVcZmJpZGkgXGZzd2lzc1xmY2hhcnNldDE4NlxmcHJxMiBDYWxpYnJpIEJhbHRpYzt9e1xmaGltaW5vclxmMzE1NzZcZmJpZGkgXGZzd2lzc1xmY2hhcnNldDE2M1xmcHJxMiBDYWxpYnJpIChWaWV0bmFtZXNlKTt9e1xmYmltaW5vclxmMzE1NzhcZmJpZGkgXGZyb21hblxmY2hhcnNldDIzOFxmcHJxMiBUaW1lcyBOZXcgUm9tYW4gQ0U7fQ==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"e1xmbG9tYWpvclxmMzE1MDBcZmJpZGkgXGZyb21hblxmY2hhcnNldDBcZnBycTJ7XCpccGFub3NlIDAyMDIwNjAzMDUwNDA1MDIwMzA0fVRpbWVzIE5ldyBSb21hbjt9e1xmZGJtYWpvclxmMzE1MDFcZmJpZGkgXGZyb21hblxmY2hhcnNldDBcZnBycTJ7XCpccGFub3NlIDAyMDIwNjAzMDUwNDA1MDIwMzA0fVRpbWVzIE5ldyBSb21hbjt9","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"e1xmbG9tYWpvclxmMzE1MDlcZmJpZGkgXGZyb21hblxmY2hhcnNldDIwNFxmcHJxMiBUaW1lcyBOZXcgUm9tYW4gQ3lyO317XGZsb21ham9yXGYzMTUxMVxmYmlkaSBcZnJvbWFuXGZjaGFyc2V0MTYxXGZwcnEyIFRpbWVzIE5ldyBSb21hbiBHcmVlazt9e1xmbG9tYWpvclxmMzE1MTJcZmJpZGkgXGZyb21hblxmY2hhcnNldDE2MlxmcHJxMiBUaW1lcyBOZXcgUm9tYW4gVHVyO30=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"e1xmbG9tYWpvclxmMzE1MTNcZmJpZGkgXGZyb21hblxmY2hhcnNldDE3N1xmcHJxMiBUaW1lcyBOZXcgUm9tYW4gKEhlYnJldyk7fXtcZmxvbWFqb3JcZjMxNTE0XGZiaWRpIFxmcm9tYW5cZmNoYXJzZXQxNzhcZnBycTIgVGltZXMgTmV3IFJvbWFuIChBcmFiaWMpO317XGZsb21ham9yXGYzMTUxNVxmYmlkaSBcZnJvbWFuXGZjaGFyc2V0MTg2XGZwcnEyIFRpbWVzIE5ldyBSb21hbiBCYWx0aWM7fQ==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"e1xmbG9tYWpvclxmMzE1MTZcZmJpZGkgXGZyb21hblxmY2hhcnNldDE2M1xmcHJxMiBUaW1lcyBOZXcgUm9tYW4gKFZpZXRuYW1lc2UpO317XGZkYm1ham9yXGYzMTUxOFxmYmlkaSBcZnJvbWFuXGZjaGFyc2V0MjM4XGZwcnEyIFRpbWVzIE5ldyBSb21hbiBDRTt9e1xmZGJtYWpvclxmMzE1MTlcZmJpZGkgXGZyb21hblxmY2hhcnNldDIwNFxmcHJxMiBUaW1lcyBOZXcgUm9tYW4gQ3lyO30=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"e1xmbG9taW5vclxmMzE1MDRcZmJpZGkgXGZyb21hblxmY2hhcnNldDBcZnBycTJ7XCpccGFub3NlIDAyMDIwNjAzMDUwNDA1MDIwMzA0fVRpbWVzIE5ldyBSb21hbjt9e1xmZGJtaW5vclxmMzE1MDVcZmJpZGkgXGZyb21hblxmY2hhcnNldDBcZnBycTJ7XCpccGFub3NlIDAyMDIwNjAzMDUwNDA1MDIwMzA0fVRpbWVzIE5ldyBSb21hbjt9","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"e1xmbG9taW5vclxmMzE1NDlcZmJpZGkgXGZyb21hblxmY2hhcnNldDIwNFxmcHJxMiBUaW1lcyBOZXcgUm9tYW4gQ3lyO317XGZsb21pbm9yXGYzMTU1MVxmYmlkaSBcZnJvbWFuXGZjaGFyc2V0MTYxXGZwcnEyIFRpbWVzIE5ldyBSb21hbiBHcmVlazt9e1xmbG9taW5vclxmMzE1NTJcZmJpZGkgXGZyb21hblxmY2hhcnNldDE2MlxmcHJxMiBUaW1lcyBOZXcgUm9tYW4gVHVyO30=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"e1xmbG9taW5vclxmMzE1NTNcZmJpZGkgXGZyb21hblxmY2hhcnNldDE3N1xmcHJxMiBUaW1lcyBOZXcgUm9tYW4gKEhlYnJldyk7fXtcZmxvbWlub3JcZjMxNTU0XGZiaWRpIFxmcm9tYW5cZmNoYXJzZXQxNzhcZnBycTIgVGltZXMgTmV3IFJvbWFuIChBcmFiaWMpO317XGZsb21pbm9yXGYzMTU1NVxmYmlkaSBcZnJvbWFuXGZjaGFyc2V0MTg2XGZwcnEyIFRpbWVzIE5ldyBSb21hbiBCYWx0aWM7fQ==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"e1xmbG9taW5vclxmMzE1NTZcZmJpZGkgXGZyb21hblxmY2hhcnNldDE2M1xmcHJxMiBUaW1lcyBOZXcgUm9tYW4gKFZpZXRuYW1lc2UpO317XGZkYm1pbm9yXGYzMTU1OFxmYmlkaSBcZnJvbWFuXGZjaGFyc2V0MjM4XGZwcnEyIFRpbWVzIE5ldyBSb21hbiBDRTt9e1xmZGJtaW5vclxmMzE1NTlcZmJpZGkgXGZyb21hblxmY2hhcnNldDIwNFxmcHJxMiBUaW1lcyBOZXcgUm9tYW4gQ3lyO30=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"e1xwbnR4dGIgKH17XHBudHh0YSApfX1ccGFyZFxwbGFpbiBcbHRycGFyXHFjIFxsaTBccmkwXHdpZGN0bHBhclx3cmFwZGVmYXVsdFxhc3BhbHBoYVxhc3BudW1cZmFhdXRvXGFkanVzdHJpZ2h0XHJpbjBcbGluMFxpdGFwMFxwYXJhcnNpZDEzMDUwNzIyIFxydGxjaFxmY3MxIFxhZjBcYWZzMjJcYWxhbmcxMDI1IFxsdHJjaFxmY3MwIFxmMzE1MDZcZnMyMlxsYW5nMjA1N1xsYW5nZmUxMDMzXGNncmlkXGxhbmducDIwNTdcbGFuZ2ZlbnAxMDMzIHs=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"e1xydGYxXGFkZWZsYW5nMTAyNVxhbnNpXGFuc2ljcGcxMjUyXHVjMVxhZGVmZjBcZGVmZjBcc3RzaGZkYmNoMFxzdHNoZmxvY2gzMTUwNlxzdHNoZmhpY2gzMTUwNlxzdHNoZmJpMzE1MDZcZGVmbGFuZzEwMzNcZGVmbGFuZ2ZlMTAzM1x0aGVtZWxhbmcyMDU3XHRoZW1lbGFuZ2ZlMFx0aGVtZWxhbmdjczB7XGZvbnR0Ymx7XGYwXGZiaWRpIFxmcm9tYW5cZmNoYXJzZXQwXGZwcnEye1wqXHBhbm9zZSAwMjAyMDYwMzA1MDQwNTAyMDMwNH1UaW1lcyBOZXcgUm8=","type":"Ansi","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"e1xydGYxXGFkZWZsYW5nMTAyNVxhbnNpXGFuc2ljcGcxMjUyXHVjMVxhZGVmZjBcZGVmZjBcc3RzaGZkYmNoMFxzdHNoZmxvY2gzMTUwNlxzdHNoZmhpY2gzMTUwNlxzdHNoZmJpMzE1MDZcZGVmbGFuZzEwMzNcZGVmbGFuZ2ZlMTAzM1x0aGVtZWxhbmcyMDU3XHRoZW1lbGFuZ2ZlMFx0aGVtZWxhbmdjczB7XGZvbnR0Ymx7XGYwXGZiaWRpIFxmcm9tYW5cZmNoYXJzZXQwXGZwcnEye1wqXHBhbm9zZSAwMjAyMDYwMzA1MDQwNTAyMDMwNH1UaW1lcyBOZXcgUm9tYW47fXtcZjJcZmJpZGkgXGZtb2Rlcm5cZmNoYXJzZXQwXGZwcnExe1wqXHBhbm9zZSAwMjA3MDMwOTAyMDIwNTAyMDQwNH1Db3VyaWVyIE5ldzt9","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"fE05bngoPVRv","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"fUBpVkg7RGk2SA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"fkBROU1JMSFC","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"fk0ielxEc0E=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"fnU2SFVoaH5M","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null}],"interesting":[{"value":"ISIjJCUmJygpKissLS4vMDEyM0BAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBBQkNERUZHSElKS0xNTk9QUVJTVFVWV1hZWmFiY2RlZmdoaWprbG1ub3BxcnN0dXZ3eHl6MDEyMzQ1Njc4OSsv","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"ISonKCk7OkAmPSskLC8/JSNbXQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"IiBhbHQ9IiI+IDwvZGl2PjxkaXYgaWQ9ImhlcmVtZW51Ij48dGFibGUgY2VsbHBhZGRpbmc9MCBjZWxsc3BhY2luZz0wIHdpZHRoPSIxMDAlIj48dHI+PHRkIHdpZHRoPSI0MDAiIHZhbGlnbj1taWRkbGU+IGhlcmUtLT48L3RkPjx0ZCB3aWR0aD0xPjwvdGQ+PC90cj48L3RhYmxlPjwvZGl2PjwvZGl2PjxpbWcgc3JjPSJzZXBiYWNrLmdpZiIgYWx0PSIiPjxkaXY+PC9kaXY+IGluc2lkZS0tPjxk","type":"Ansi","source":"Dropped File","process":null,"filename":"thebcs.exe.930316402","compromised":null,"detection_total":null,"total":null},{"value":"IiVQUk9HUkFNRklMRVMlXCh4ODYpXFZpc3VhbHdhcmUgQkNTXGJjc191bmluc3RhbGwuZXhlIg==","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"IkM6XGJjc19zZXJ2aWNlLmV4ZSI=","type":"Ansi","source":"Hybrid Analysis","process":"bcs_service.exe","filename":"00034508-00002748.00000001.35008.00401000.00000020.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Imh0dHA6Ly9vY3NwMi5nbG9iYWxzaWduLmNvbS9yb290cjMwNg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":0,"total":67},{"value":"JSUwMTAxMDAwMTUwMDEwMjAwMDAmYWQ9YXVkaXQgZXJyb3I=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JSUwMTAxMDAwNDAwMDEwMjAwMDBEb3duc3RyZWFtIEluaXRpYWxpc2F0aW9uIEZhaWxlZA==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JSUwMTAxMDAwNDAwMDEwMjAwMDBUaGUgRmlyZXdhbGwgdGVzdCBmYWlsZWQgdG8gaW5pdGlhbGl6ZQ==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JSUwMTAxMDAwNTAxMDEwMjAxNjVUaGUgbGljZW5zZSBoYXMgZXhwaXJlZCBmb3IgdGhlIHRlc3QgZW52aXJvbm1lbnQuIFBsZWFzZSBub3RpZnkgdGhlIHByb3ZpZGVyIG9mIHRoZSB0ZXN0IHNvIHRoZXkgY2FuIHJlY3RpZnkgdGhlIGlzc3VlLiBUbyBjb250YWN0IHVzIGNsaWNrIGhlcmUuaHR0cDovL3d3dy52aXN1YWx3YXJlLmNvbS9iY3Mvc3VwcG9ydC9lY181MDEuaHRtbA==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JSUwMTAxMDAwNTAyMDEwMjAxNjdUaGUgZG9tYWluIHRoZSB0ZXN0IGVudmlyb25tZW50IGlzIHJ1bm5pbmcgb24gaXNuJ3QgcGVybWl0dGVkLiBQbGVhc2UgY29udGFjdCB0aGUgdGVzdCBwcm92aWRlci4gRm9yIG1vcmUgaW5mb3JtYXRpb24sIG9yIHRvIGNvbnRhY3QgdXMgY2xpY2sgaGVyZS5odHRwOi8vd3d3LnZpc3VhbHdhcmUuY29tL2Jjcy9zdXBwb3J0L2VjXzUwMi5odG1sP3VybD0=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JSUwMTAxMDAwNTAzMDEwMjAxNDNZb3UgaGF2ZSByZWFjaGVkIHRoZSB0ZXN0IGxpbWl0IHNldCBieSB0aGUgc2VydmVyLiBDb250YWN0IHlvdXIgcHJvdmlkZXIgdG8gbGVhcm4gbW9yZS4gVG8gcmVhZCBtb3JlIGFib3V0IHRoaXMgY2xpY2sgaGVyZS5odHRwOi8vd3d3LnZpc3VhbHdhcmUuY29tL2Jjcy9zdXBwb3J0L2VjXzUxMS5odG1s","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JSUwMTAxMDAwNTA0MDEwMjAxNTVXZWIgdGVzdHMgZm9yIHB1YmxpYyB1c2VycyBoYXZlIG5vdCBiZWVuIHBlcm1pdHRlZC4gVG8gbGVhcm4gd2h5IHBsZWFzZSBjb250YWN0IHRoZSB0ZXN0IHByb3ZpZGVyLiBUbyBsZWFybiBtb3JlIGFib3V0IHRoaXMgY2xpY2sgaGVyZS5odHRwOi8vd3d3LnZpc3VhbHdhcmUuY29tL2Jjcy9zdXBwb3J0L2VjXzUxNS5odG1s","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JSUwMTAxMDAwNTA1MDEwMjAxNTVXZWIgdGVzdHMgZm9yIHB1YmxpYyB1c2VycyBoYXZlIG5vdCBiZWVuIHBlcm1pdHRlZC4gVG8gbGVhcm4gd2h5IHBsZWFzZSBjb250YWN0IHRoZSB0ZXN0IHByb3ZpZGVyLiBUbyBsZWFybiBtb3JlIGFib3V0IHRoaXMgY2xpY2sgaGVyZS5odHRwOi8vd3d3LnZpc3VhbHdhcmUuY29tL2Jjcy9zdXBwb3J0L2VjXzUxNS5odG1s","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JSpzPElOVkFMSUQgUFJJVkFURSBLRVk+","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JSpzPElOVkFMSUQgUFVCTElDIEtFWT4=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JSpzPE5vdCBTdXBwb3J0ZWQ+","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JSpzPFBhcnNlIEVycm9yPg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JSpzY3JsTnVtOg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JSpzY3JsVGltZTo=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JSpzY3JsVXJsOg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JSpzS2V5IElkOg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JSpzVmVyc2lvbiAgIDo=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JSpzVmVyc2lvbjogJWxkICgweCVsWCk=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JSpzWDI1NTE5IFByaXZhdGUtS2V5Og==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JSpzWDI1NTE5IFB1YmxpYy1LZXk6","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JTEyc1B1YmxpYyBLZXkgQWxnb3JpdGhtOg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JTEyc1VuYWJsZSB0byBsb2FkIFB1YmxpYyBLZXk=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JThzVmVyc2lvbjogJWx1ICgweCVseCk=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JWQgYnl0ZXMgKCVkIHBhY2tldHMpIHJlY2VpdmVkIGluICVkbXMgKCVkLiVkIFBrdHNQZXJTZWMp","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JWQuJWQuJWQuJWQvJWQuJWQuJWQuJWQ=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JUdVSUQ6IkNvbXB1dGVyIiU=","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"JWh0dHA6Ly9jcmwuZ2xvYmFsc2lnbi5jb20vcm9vdC1yMy5jcmwwYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":0,"total":67},{"value":"JWh0dHA6Ly9jcmwuZ2xvYmFsc2lnbi5uZXQvcm9vdC1yMy5jcmww","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"JWx1OiVzOiVzOiVkOiVz","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JVBST0dSQU1GSUxFUyVcKHg4NilcVmlzdWFsd2FyZSBCQ1NcTmV0UUNoZWNrSFRNTDVBZ2VudC5leGUgc3VjY2Vzc2Z1bGx5IHN0YXJ0ZWQ=","type":"Ansi","source":"Runtime Data","process":"bcs.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"JXMgYWxnb3JpdGhtICIlcyIgdW5zdXBwb3J0ZWQ=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JXMgZmFpbGVk","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JXMgc2VydmljZSBmYWlsZWQgdG8gaW5zdGFsbC4gRXJyb3IgJWQ=","type":"Ansi","source":"Hybrid Analysis","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01311000.00000020.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JXMgc2VydmljZSBpbnN0YWxsZWQgT0s=","type":"Ansi","source":"Hybrid Analysis","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01311000.00000020.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JXM6IEVycm9yICVk","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JXM6JWQ6IE9wZW5TU0wgaW50ZXJuYWwgZXJyb3I6ICVz","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JXUgZGF5cywgJXUgaG91cnMsICV1IG1pbnM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JiVzbmV0ZG93bnNlYz0lZCYlc25ldHVwc2VjPSVkJiVzbmV0ZG93bnBjPSVkLiVkJiVzaHR0cDN4eHNlYz0lZCYlc2h0dHA0eHhzZWM9JWQmJXNodHRwNXh4c2VjPSVkJiVzaHR0cHF4eHNlYz0lZA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JiVzcnVudGltZT0ldSYlc2ZyZWVxPSV1JiVzdmVyc2lvbj0=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JmFjdC5kc3BlZWQ9JWQmYWN0LnVzcGVlZD0lZCZhY3QucW9zPSVkJmFjdC51cW9zPSVkJmFjdC5ydHQ9JWQmYWN0LnJ0dG1heD0lZCZhY3QucnR0YXZnPSVkJmFjdC5tYXhwYXVzZT0lZCZhY3QudW1heHBhdXNlPSVkJmFjdC5kdGVzdHR5cGU9JWMlZCAlcyZhY3QudXRlc3R0eXBlPSVjJWQgJXMmYWN0LnRjcG10dT0lZA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JmFjdC5tYXhyb3V0ZXNwZWVkPSVkJmFjdC5tYXhsaW5lc3BlZWQ9JWQmYWN0LmNvbmN1cnJlbnR0Y3A9JWQuJWQmYWN0LnRjcGZvcmNlZGlkbGU9JWQuJWQmYWN0LnVtYXhsaW5lc3BlZWQ9JWQmYWN0LnVjb25jdXJyZW50dGNwPSVkLiVkJmFjdC51dGNwZm9yY2VkaWRsZT0lZC4lZA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JmFjdC52ZXJzaW9uPSVkLiVkLiVkLiVk","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JmJsaz1jb21w","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JmJ3PWVycm9yJnFvcz1lcnJvcg==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JmNvbm5lY3Rpb249JXM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JmZpPWVycm9y","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JmZwcz1lcnJvcg==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Jmh0dHBzOi8vd3d3Lmdsb2JhbHNpZ24uY29tL3JlcG9zaXRvcnkvMA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":0,"total":66},{"value":"Jmh0dHBzOi8vd3d3Lmdsb2JhbHNpZ24uY29tL3JlcG9zaXRvcnkvMDY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"JmxpbmU9ZXJyb3ImbXA9ZXJyb3ImYXA9ZXJyb3I=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Jm11Yz1lcnJvcg==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JnBiPWVycm9y","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JnBwcz1lcnJvcg==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JnJtaW49ZXJyb3ImcmF2Zz1lcnJvciZybWF4PWVycm9yJnJudW09ZXJyb3ImcnNhbT1lcnJvcg==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JnJvdXRlPWVycm9y","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JnR5cGU9ZXJyb3I=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JnR5cGU9aHR0cA==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JykuZm9jdXMoKSI+","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"KFRFU1RfRU5HX09QRU5TU0xfUEtFWSlMb2FkaW5nIFByaXZhdGUga2V5ICVz","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"KFRFU1RfRU5HX09QRU5TU0xfUkM0KSB0ZXN0X2luaXRfa2V5KCkgY2FsbGVk","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"KS0tLS0tLS0tLS0tLS0t","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"LCBhc3NvY2lhdGVzLCBhZmZpbGlhdGVzLCBvciBzdXBwbGllcnMgYmUgbGlhYmxlIGZvciBhbnkgc3BlY2lhbCwgaW5jaWRlbnRhbCwgaW5kaXJlY3QsIG9yIGNvbnNlcXVlbnRpYWwgZGFtYWdlcyB3aGF0c29ldmVyIChpbmNsdWRpbmcsIHdpdGhvdXQgbGltaXRhdGlvbiwgZGFtYWdlcyBmb3IgbG9zcyBvZiBidXNpbmVzcyBwcm9maXRzLCBidXNpbmVzcyBpbnRlcnJ1cHRpb24sIGxvc3Mgb2YgYnVzaW5lc3MgaW5mb3JtYXRpb24sIG9yIGFueSBv","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"LGh0dHA6Ly9vY3NwMi5nbG9iYWxzaWduLmNvbS9nc2NvZGVzaWduc2hhMmczMFY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":0,"total":67},{"value":"LSBhbiBpbnZhbGlkIHZhbHVlIHdhcyBzdWJtaXR0ZWQuIEFsbCBjaGFuZ2VzIGRpc2NhcmRlZC48L2ZvbnQ+","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"LS0tLS0tLS0tLS0tLS0tLQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"LS0tLS1CRUdJTg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"LWtlcm5lbDMyLXBhY2thZ2UtY3VycmVudC1sMS0xLTA=","type":"Unicode","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"LXdpbi1jb3JlLWZpYmVycy1sMS0xLTE=","type":"Unicode","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"LXdpbi1ydGNvcmUtbnR1c2VyLXdpbmRvdy1sMS0xLTA=","type":"Unicode","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Li4uLi4uLi4uLi4uLi4uLi4uLi4=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVmJhZF9hbGxvY0BzdGRAQA==","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.0132D000.00000004.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVmJhZF9hcnJheV9uZXdfbGVuZ3RoQHN0ZEBA","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.0132D000.00000004.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVmV4Y2VwdGlvbkBzdGRAQA==","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.0132D000.00000004.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVnR5cGVfaW5mb0BA","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.0132D000.00000004.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lmh0dHA6Ly9jcmwuZ2xvYmFsc2lnbi5jb20vZ3Njb2Rlc2lnbnNoYTJnMy5jcmww","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":0,"total":66},{"value":"LndqKFsoKmRL","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"L2FwcHVwZGF0ZXMvTmV0UUNoZWNrSFRNTDVBZ2VudC93aW5kb3dzL3ZlcnNpb24udHh0","type":"Ansi","source":"PCAP Processing","process":null,"filename":"PCAP","compromised":null,"detection_total":null,"total":null},{"value":"L215c3BlZWQvYmNzbG9nP0JpbiBGaWxlIFNlbnQ=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"L215c3BlZWQvZGF0YS5iaW4=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"L215c3BlZWQvbGxwbHVnaW4vc3BlZWQvdXBsb2FkdGVzdD91cGxvYWRpZD0lcyZ0bz0lZA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"L215c3BlZWQvcGx1Z2luL3JvdXRlL2FwcGxldC90cmFjZT9wcm90bz0yJnVybD0lcyZkaD0lcw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"L215c3BlZWQvcGx1Z2luL3NwZWVkL2NyZWF0ZXVwbG9hZA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"MGh0dHA6Ly9vY3NwMi5nbG9iYWxzaWduLmNvbS9nc3RpbWVzdGFtcGluZ3NoYTJnMjA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"MTkyLjE2OC4wLjE=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"MTkyLjE2OC4wLjk4","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"MiY2Lj4hMSk5JTUtPSMzKzsnNy8=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"MjU1LjI1NS4yNTUuMA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"MjU1LjI1NS4yNTUuMjU1","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"MjU4RUFGQTUtRTkxNC00N0RBLTk1Q0EtQzVBQjBEQzg1QjEx","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"NC4xNi4yMTQuMTY=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"NWh0dHA6Ly9jcmwuZ2xvYmFsc2lnbi5jb20vZ3MvZ3N0aW1lc3RhbXBpbmdzaGEyZzIuY3JsMA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Ni4gTk8gTElBQklMSVRZIEZPUiBDT05TRVFVRU5USUFMIERBTUFHRVMufXtccnRsY2hcZmNzMSBcYWYyXGFmczIwIFxsdHJjaFxmY3MwIFxmMlxmczIwXGxhbmcyMDU3XGxhbmdmZTIwNTdcbGFuZ2ZlbnAyMDU3XGluc3JzaWQxMzA1MDcyMlxjaGFycnNpZDEzMDUwNzIy","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"NjY2NjY2NjY2NjY2NjY2NjY2NjY2NjY2NjY2NjY2NjY2NjY2NjY2NjY2NjY2NjY2XFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcc3NsXHJlY29yZFxzc2wzX3JlY29yZC5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"OC4gVEhJUkQgUEFSVFkgUFJPRFVDVC59e1xydGxjaFxmY3MxIFxhZjJcYWZzMjAgXGx0cmNoXGZjczAgXGYyXGZzMjBcbGFuZzIwNTdcbGFuZ2ZlMjA1N1xsYW5nZmVucDIwNTdcaW5zcnNpZDEzMDUwNzIyXGNoYXJyc2lkMTMwNTA3MjI=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"ODM8M0AzRDNIM0wzUDNUM1gzXDNgM2QzaDNsM3AzdDN4M3wzKDUsNTA1NDU4NTw1QDVENUg1TDVQNSg4LDg4ODw4","type":"Ansi","source":"Memory/File Scan","process":"bcs_service.exe","filename":"00034508-00002748.00000001.35008.00409000.00000004.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"OlxVc2Vyc1xIQVBVQldTXEFwcERhdGFcTG9jYWxcVGVtcFxuc3g0MkVFLnRtcA==","type":"Ansi","source":"Memory/File Scan","process":"bcs_service.exe","filename":"00034508-00002748.00000001.35008.00409000.00000004.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"O0dsb2JhbFxCQ1NNdXRleA==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.01100000.00000004.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"PC9hcHBsaWNhdGlvbj48L2NvbXBhdGliaWxpdHk+PC9hc3NlbWJseT4=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"PC9zdHJvbmc+PC9wPjwvdGQ+PC90cj48dHI+PHRkIGNvbHNwYW49IjQiIGFsaWduPSJyaWdodCI+Jm5ic3A7PC90ZD48L3RyPg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"$37","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"$38","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"PD94bWwgdmVyc2lvbj0nMS4wJyBlbmNvZGluZz0nVVRGLTgnIHN0YW5kYWxvbmU9J3llcyc/Pjxhc3NlbWJseSB4bWxucz0ndXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTphc20udjEnIG1hbmlmZXN0VmVyc2lvbj0nMS4wJz4gIDx0cnVzdEluZm8geG1sbnM9InVybjpzY2hlbWFzLW1pY3Jvc29mdC1jb206YXNtLnYzIj4gICAgPHNlY3VyaXR5PiAgICAgIDxyZXF1ZXN0ZWRQcml2aWxlZ2VzPiAgICAgICAgPHJlcXVlc3RlZEV4ZWN1dGlvbkxldmVsIGxldmVsPSdhc0ludm9rZXInIHVpQWNjZXNzPSdmYWxzZScgLz4gICAgICA8L3JlcXVlc3RlZFByaXZpbGVnZXM+ICAgIDwvc2VjdXJpdHk+ICA8L3RydXN0SW5mbz48L2Fzc2VtYmx5Pg==","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.0132F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"PGJvZHkgb25Mb2FkPSJkb2N1bWVudC5nZXRFbGVtZW50QnlJZCgn","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"PGZvcm0gbWV0aG9kPXBvc3QgYWN0aW9uPSIiPg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"PGh0dHA6Ly9zZWN1cmUuZ2xvYmFsc2lnbi5jb20vY2FjZXJ0L2dzY29kZXNpZ25zaGEyZzNvY3NwLmNydDA4","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":0,"total":67},{"value":"PGh0dHA6Ly9zZWN1cmUuZ2xvYmFsc2lnbi5jb20vY2FjZXJ0L2dzdGltZXN0YW1waW5nc2hhMmcyLmNydDA8","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"PG1ldGEgaHR0cC1lcXVpdj0icmVmcmVzaCIgY29udGVudD0=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"PG1ldGEgaHR0cC1lcXVpdj0icmVmcmVzaCIgY29udGVudD0iNTtVUkw9aHR0cDovLw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"PHVuc3VwcG9ydGVkPg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"QDNAK0BLQFtA","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"QEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQD5AQEA/NDU2Nzg5Ojs8PUBAQEBAQEA=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"WyU0ZCwlNGRdID0gJWQgYnl0ZXMgKCVkS2Jwcyk=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"W0hFWCBEVU1QXTo=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"W0ludGVybmV0U2hvcnRjdXRdVVJMPWh0dHA6Ly93d3cubXljb25uZWN0aW9uc2VydmVyLmNvbS9zdXBwb3J0L3Y5L2Jjcy5odG1sSURMaXN0PUljb25GaWxlPSVXSU5ESVIlXHN5c3RlbTMyXFNIRUxMMzIuZGxsSWNvbkluZGV4PTE3SG90S2V5PTBbezAwMDIxNEEwLTAwMDAtMDAwMC1DMDAwLTAwMDAwMDAwMDA0Nn1dUHJvcDM9MTksMg==","type":"Ansi","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XCcwMVx1LTM5MTMgPzt9e1xsZXZlbG51bWJlcnM7fVxmM1xmczIwXGZiaWFzMFxocmVzMFxjaGhyZXMwIFxmaS0zNjBcbGkzNjAwXGpjbGlzdHRhYlx0eDM2MDBcbGluMzYwMCB9e1xsaXN0bGV2ZWxcbGV2ZWxuZmMyM1xsZXZlbG5mY24yM1xsZXZlbGpjMFxsZXZlbGpjbjBcbGV2ZWxmb2xsb3cwXGxldmVsc3RhcnRhdDFcbHZsdGVudGF0aXZlXGxldmVsc3BhY2UwXGxldmVsaW5kZW50MHtcbGV2ZWx0ZXh0","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XCcwMVx1LTM5MTMgPzt9e1xsZXZlbG51bWJlcnM7fVxmM1xmczIwXGZiaWFzMFxocmVzMFxjaGhyZXMwIFxmaS0zNjBcbGk0MzIwXGpjbGlzdHRhYlx0eDQzMjBcbGluNDMyMCB9e1xsaXN0bGV2ZWxcbGV2ZWxuZmMyM1xsZXZlbG5mY24yM1xsZXZlbGpjMFxsZXZlbGpjbjBcbGV2ZWxmb2xsb3cwXGxldmVsc3RhcnRhdDFcbHZsdGVudGF0aXZlXGxldmVsc3BhY2UwXGxldmVsaW5kZW50MHtcbGV2ZWx0ZXh0","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XCcwMVx1LTM5MTMgPzt9e1xsZXZlbG51bWJlcnM7fVxmM1xmczIwXGZiaWFzMFxocmVzMFxjaGhyZXMwIFxmaS0zNjBcbGk1MDQwXGpjbGlzdHRhYlx0eDUwNDBcbGluNTA0MCB9e1xsaXN0bGV2ZWxcbGV2ZWxuZmMyM1xsZXZlbG5mY24yM1xsZXZlbGpjMFxsZXZlbGpjbjBcbGV2ZWxmb2xsb3cwXGxldmVsc3RhcnRhdDFcbHZsdGVudGF0aXZlXGxldmVsc3BhY2UwXGxldmVsaW5kZW50MHtcbGV2ZWx0ZXh0","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XCcwMVx1LTM5MTMgPzt9e1xsZXZlbG51bWJlcnM7fVxmM1xmczIwXGZiaWFzMFxocmVzMFxjaGhyZXMwIFxmaS0zNjBcbGk1NzYwXGpjbGlzdHRhYlx0eDU3NjBcbGluNTc2MCB9e1xsaXN0bGV2ZWxcbGV2ZWxuZmMyM1xsZXZlbG5mY24yM1xsZXZlbGpjMFxsZXZlbGpjbjBcbGV2ZWxmb2xsb3cwXGxldmVsc3RhcnRhdDFcbHZsdGVudGF0aXZlXGxldmVsc3BhY2UwXGxldmVsaW5kZW50MHtcbGV2ZWx0ZXh0","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XCcwMVx1LTM5MTMgPzt9e1xsZXZlbG51bWJlcnM7fVxmM1xmczIwXGZiaWFzMFxocmVzMFxjaGhyZXMwIFxmaS0zNjBcbGk2NDgwXGpjbGlzdHRhYlx0eDY0ODBcbGluNjQ4MCB9e1xsaXN0bmFtZSA7fVxsaXN0aWQ3Mjg5NjMwN319e1wqXGxpc3RvdmVycmlkZXRhYmxle1xsaXN0b3ZlcnJpZGVcbGlzdGlkNzI4OTYzMDdcbGlzdG92ZXJyaWRlY291bnQwXGxzMX19e1wqXHBncHRibCB7XHBncFxpcGdwMFxpdGFwMFxsaTBccmkwXHNiMFxzYTB9fQ==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcc3NsXHJlY29yZFxzc2wzX3JlY29yZC5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"XGFiXGFmMlxhZnMyMCBcbHRyY2hcZmNzMCBcYlxmMlxmczIwXGxhbmcyMDU3XGxhbmdmZTIwNTdcbGFuZ2ZlbnAyMDU3XGluc3JzaWQxMzA1MDcyMlxjaGFycnNpZDEzMDUwNzIyIDEuIEdSQU5UIE9GIExJQ0VOU0UufXtccnRsY2hcZmNzMSBcYWYyXGFmczIwIFxsdHJjaFxmY3MwIFxmMlxmczIwXGxhbmcyMDU3XGxhbmdmZTIwNTdcbGFuZ2ZlbnAyMDU3XGluc3JzaWQxMzA1MDcyMlxjaGFycnNpZDEzMDUwNzIyICBWaXN1YWx3YQ==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGFiXGFmMlxhZnMyMCBcbHRyY2hcZmNzMCBcYlxmMlxmczIwXGxhbmcyMDU3XGxhbmdmZTIwNTdcbGFuZ2ZlbnAyMDU3XGluc3JzaWQxMzA1MDcyMlxjaGFycnNpZDEzMDUwNzIyIDcuIExJTUlUQVRJT04gT0YgTElBQklMSVRZLn17XHJ0bGNoXGZjczEgXGFmMlxhZnMyMCBcbHRyY2hcZmNzMCBcZjJcZnMyMFxsYW5nMjA1N1xsYW5nZmUyMDU3XGxhbmdmZW5wMjA1N1xpbnNyc2lkMTMwNTA3MjJcY2hhcnJzaWQxMzA1MDcyMiAgVmlzdWFsd2Fy","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGFmMFxhZnMyNFxhbGFuZzEwMjUgXGx0cmNoXGZjczAgXGZzMjRcbGFuZzIwNTdcbGFuZ2ZlMjA1N1xjZ3JpZFxsYW5nbnAyMDU3XGxhbmdmZW5wMjA1NyBcc2Jhc2Vkb24wIFxzbmV4dDE2IFxzc2VtaWhpZGRlbiBcc3VuaGlkZXVzZWQgXHN0eXJzaWQxMzA1MDcyMiBOb3JtYWwgKFdlYik7fX17XCpcbGlzdHRhYmxle1xsaXN0XGxpc3R0ZW1wbGF0ZWlkMTI3MDI4MzUzMntcbGlzdGxldmVsXGxldmVsbmZjMjNcbGV2ZWxuZmNuMjNcbGV2ZWxqYzA=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGFmMlxhZnMyMCBcbHRyY2hcZmNzMCBcZjJcZnMyMFxsYW5nMjA1N1xsYW5nZmUyMDU3XGxhbmdmZW5wMjA1N1xpbnNyc2lkMTMwNTA3MjJcY2hhcnJzaWQxMzA1MDcyMg==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGFzaWFuYnJrcnVsZVxyc2lkcm9vdDEzMDUwNzIyXG5ld3RibHN0eXJ1bHNcbm9ncm93YXV0b2ZpdFx1c2Vub3Jtc3R5Zm9ybGlzdFxub2luZG5tYnJ0c1xmZWxuYnJlbGV2XG5vY3hzcHRhYmxlXGluZHJsc3dlbGV2ZW5cbm9hZmNuc3R0YmxcYWZlbGV2XHV0aW5sXGh3ZWxldlxzcGx0cGdwYXJcbm90Y3Zhc3Bcbm90YnJrY25zdGZyY3RibFxub3R2YXR4Ynhca3JucHJzbmV0XGNhY2hlZGNvbGJhbCBcbm91aWNvbXBhdCBcZmV0MA==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGJcZjJcZnMyMFxsYW5nMjA1N1xsYW5nZmUyMDU3XGxhbmdmZW5wMjA1N1xpbnNyc2lkMTMwNTA3MjJcY2hhcnJzaWQxMzA1MDcyMiAzLiBBVURJVElORy59e1xydGxjaFxmY3MxIFxhZjJcYWZzMjAgXGx0cmNoXGZjczAgXGYyXGZzMjBcbGFuZzIwNTdcbGFuZ2ZlMjA1N1xsYW5nZmVucDIwNTdcaW5zcnNpZDEzMDUwNzIyXGNoYXJyc2lkMTMwNTA3MjI=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGJcZjJcZnMyMFxsYW5nMjA1N1xsYW5nZmUyMDU3XGxhbmdmZW5wMjA1N1xpbnNyc2lkMTMwNTA3MjJcY2hhcnJzaWQxMzA1MDcyMiA0LiBURVJNSU5BVElPTi59e1xydGxjaFxmY3MxIFxhZjJcYWZzMjAgXGx0cmNoXGZjczAgXGYyXGZzMjBcbGFuZzIwNTdcbGFuZ2ZlMjA1N1xsYW5nZmVucDIwNTdcaW5zcnNpZDEzMDUwNzIyXGNoYXJyc2lkMTMwNTA3MjI=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGJcZjJcZnMyMFxsYW5nMjA1N1xsYW5nZmUyMDU3XGxhbmdmZW5wMjA1N1xpbnNyc2lkMTMwNTA3MjJcY2hhcnJzaWQxMzA1MDcyMiBNeUNvbm5lY3Rpb24gU2VydmVyIH17XHJ0bGNoXGZjczEgXGFiXGFmMlxhZnMyMCBcbHRyY2hcZmNzMCBcYlxmMlxmczIwXGxhbmcyMDU3XGxhbmdmZTIwNTdcbGFuZ2ZlbnAyMDU3XGluc3JzaWQxMjk4ODU1NyBCcm93c2VyIENvbXBhdGliaWxpdHkgU2VydmljZX17XHJ0bGNoXGZjczEgXGFiXGFmMlxhZnMyMA==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGV4cHNocnRuXG5vdWx0cmxzcGNcZG50Ymxuc2JkYlxub3NwYWNlZm9ydWxcZm9ybXNoYWRlXGhvcnpkb2NcZGdtYXJnaW5cZGdoc3BhY2UxODBcZGd2c3BhY2UxODBcZGdob3JpZ2luMTQ0MFxkZ3ZvcmlnaW4xNDQwXGRnaHNob3cxXGRndnNob3cx","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGYwXGZzMjRcbGFuZzIwNTdcbGFuZ2ZlMjA1N1xsYW5nZmVucDIwNTdcaW5zcnNpZDEzMDUwNzIyXGNoYXJyc2lkMTMwNTA3MjI=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGYyXGZzMjBcbGFuZzIwNTdcbGFuZ2ZlMjA1N1xsYW5nZmVucDIwNTdcaW5zcnNpZDEyOTk2NTM4IGltcGxpZWQgb3IgfXtccnRsY2hcZmNzMSBcYWYyXGFmczIwIFxsdHJjaFxmY3MwIFxmMlxmczIwXGxhbmcyMDU3XGxhbmdmZTIwNTdcbGFuZ2ZlbnAyMDU3XGluc3JzaWQyNTA1NDkxIHByb3ZpZGVkIHVuZGVyIHRoaXMgbGljZW5zZSBhZ3JlZW1lbnQuIH17XHJ0bGNoXGZjczEgXGFmMFxhZnMyNCBcbHRyY2hcZmNzMA==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGYyXGZzMjBcbGFuZzIwNTdcbGFuZ2ZlMjA1N1xsYW5nZmVucDIwNTdcaW5zcnNpZDEyOTk2NTM4IHN9e1xydGxjaFxmY3MxIFxhZjJcYWZzMjAgXGx0cmNoXGZjczAgXGYyXGZzMjBcbGFuZzIwNTdcbGFuZ2ZlMjA1N1xsYW5nZmVucDIwNTdcaW5zcnNpZDI1MDU0OTEgIG9ubHkgYW5kIG5vIHdhcnJhbnR5IGlzIH17XHJ0bGNoXGZjczEgXGFmMlxhZnMyMCBcbHRyY2hcZmNzMA==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGYyXGZzMjBcbGFuZzIwNTdcbGFuZ2ZlMjA1N1xsYW5nZmVucDIwNTdcaW5zcnNpZDEzMDUwNzIyXGNoYXJyc2lkMTMwNTA3MjI=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGYyXGZzMjBcbGFuZzIwNTdcbGFuZ2ZlMjA1N1xsYW5nZmVucDIwNTdcaW5zcnNpZDEzMDUwNzIyXGNoYXJyc2lkMTMwNTA3MjIgIChBKSBZb3UgbXVzdCBjb21wbHkgd2l0aCBhbGwgYXBwbGljYWJsZSBsYXdzIHJlZ2FyZGluZyB0aGUgdXNlIG9mIHRoZSBTT0ZUV0FSRSBQUk9EVUNULiAoQikgWW91IG1heSBub3QgcmV2ZXJzZSBlbmdpbmVlciw=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGYyXGZzMjBcbGFuZzIwNTdcbGFuZ2ZlMjA1N1xsYW5nZmVucDIwNTdcaW5zcnNpZDEzMDUwNzIyXGNoYXJyc2lkMTMwNTA3MjIgIEluc3RhbGwgYW5kIHVzZSB0aGUgTmV0UUNoZWNrIG9uIGEgc2luZ2xlIHNlcnZlciwgb3IgbXVsdGlwbGUgZG9tYWlucyBhbmQgc2VydmVycyBjb3JyZXNwb25kaW5nIHRvIHRoZSBsaWNlbnNlIHB1cmNoYXNlZC4gfXtccnRsY2hcZmNzMSBcYWYyXGFmczIwIFxsdHJjaFxmY3Mw","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGYyXGZzMjBcbGFuZzIwNTdcbGFuZ2ZlMjA1N1xsYW5nZmVucDIwNTdcaW5zcnNpZDI1MDU0OTEgQ2xpZW50IHByb2dyYW0gYW5kIHNvdXJjZSBmaWxlcyBtYXkgYmUgaW5zdGFsbGVkIG9uIG11bHRpcGxlIGNsaWVudCBwbGF0Zm9ybXMgY29ycmVzcG9uZGluZyB0byB0aGUgbGljZW5zZWQgcHVyY2hhc2VkLiBTb3VyY2UgZmlsZXMgYXJlIHByb3ZpZGVkIGFzIGV4YW1wbGV9e1xydGxjaFxmY3MxIFxhZjJcYWZzMjAgXGx0cmNoXGZjczA=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGYzMTUwNlxmczIyXGxhbmcyMDU3XGxhbmdmZTEwMzNcbGFuZ25wMjA1NyB9e1wqXGRlZnBhcCBccWwgXGxpMFxyaTBcc2ExNjBcc2wyNTlcc2xtdWx0MVx3aWRjdGxwYXJcd3JhcGRlZmF1bHRcYXNwYWxwaGFcYXNwbnVtXGZhYXV0b1xhZGp1c3RyaWdodFxyaW4wXGxpbjBcaXRhcDAgfVxub3FmcHJvbW90ZSB7XHN0eWxlc2hlZXR7XHFsIFxsaTBccmkwXHNhMTYwXHNsMjU5XHNsbXVsdDE=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGpleHBhbmRcdmlld2tpbmQxXHZpZXdzY2FsZTEwMFxwZ2JyZHJoZWFkXHBnYnJkcmZvb3Rcc3BseXR3bmluZVxmdG5seXR3bmluZVxodG1hdXRzcFxub2xuaHRhZGp0YmxcdXNlbHRiYWxuXGFsbnRibGluZFxseXRjYWxjdGJsd2RcbHl0dGJscnRnclxsbmJya3J1bGVcbm9icmt3cnB0Ymxcc25hcHRvZ3JpZGluY2VsbFxhbGxvd2ZpZWxkZW5kc2VsXHdycHB1bmN0","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxldmVsaW5kZW50MHtcbGV2ZWx0ZXh0XCcwMVx1LTM5MTMgPzt9e1xsZXZlbG51bWJlcnM7fVxmM1xmczIwXGZiaWFzMFxocmVzMFxjaGhyZXMwIFxmaS0zNjBcbGkyODgwXGpjbGlzdHRhYlx0eDI4ODBcbGluMjg4MCB9e1xsaXN0bGV2ZWxcbGV2ZWxuZmMyM1xsZXZlbG5mY24yM1xsZXZlbGpjMFxsZXZlbGpjbjBcbGV2ZWxmb2xsb3cwXGxldmVsc3RhcnRhdDFcbHZsdGVudGF0aXZlXGxldmVsc3BhY2UwXGxldmVsaW5kZW50MHtcbGV2ZWx0ZXh0","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxldmVsamNuMFxsZXZlbGZvbGxvdzBcbGV2ZWxzdGFydGF0MVxsZXZlbHNwYWNlMFxsZXZlbGluZGVudDB7XGxldmVsdGV4dFwnMDFcdS0zOTEzID87fXtcbGV2ZWxudW1iZXJzO31cZjNcZnMyMFxmYmlhczBcaHJlczBcY2hocmVzMCBcZmktMzYwXGxpNzIwXGpjbGlzdHRhYlx0eDcyMFxsaW43MjAgfXtcbGlzdGxldmVsXGxldmVsbmZjMjNcbGV2ZWxuZmNuMjNcbGV2ZWxqYzBcbGV2ZWxqY24wXGxldmVsZm9sbG93MFxsZXZlbHN0YXJ0YXQx","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxldmVsc3BhY2UwXGxldmVsaW5kZW50MHtcbGV2ZWx0ZXh0XCcwMVx1LTM5MTMgPzt9e1xsZXZlbG51bWJlcnM7fVxmM1xmczIwXGZiaWFzMFxocmVzMFxjaGhyZXMwIFxmaS0zNjBcbGkyMTYwXGpjbGlzdHRhYlx0eDIxNjBcbGluMjE2MCB9e1xsaXN0bGV2ZWxcbGV2ZWxuZmMyM1xsZXZlbG5mY24yM1xsZXZlbGpjMFxsZXZlbGpjbjBcbGV2ZWxmb2xsb3cwXGxldmVsc3RhcnRhdDFcbHZsdGVudGF0aXZlXGxldmVsc3BhY2Uw","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHByaW9yaXR5NDUgXGxzZGxvY2tlZDAgUGxhaW4gVGFibGUgNTtcbHNkcHJpb3JpdHk0MCBcbHNkbG9ja2VkMCBHcmlkIFRhYmxlIExpZ2h0O1xsc2Rwcmlvcml0eTQ2IFxsc2Rsb2NrZWQwIEdyaWQgVGFibGUgMSBMaWdodDtcbHNkcHJpb3JpdHk0NyBcbHNkbG9ja2VkMCBHcmlkIFRhYmxlIDI7XGxzZHByaW9yaXR5NDggXGxzZGxvY2tlZDAgR3JpZCBUYWJsZSAzO1xsc2Rwcmlvcml0eTQ5IFxsc2Rsb2NrZWQwIEdyaWQgVGFibGUgNDs=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHByaW9yaXR5NDYgXGxzZGxvY2tlZDAgR3JpZCBUYWJsZSAxIExpZ2h0IEFjY2VudCAzO1xsc2Rwcmlvcml0eTQ3IFxsc2Rsb2NrZWQwIEdyaWQgVGFibGUgMiBBY2NlbnQgMztcbHNkcHJpb3JpdHk0OCBcbHNkbG9ja2VkMCBHcmlkIFRhYmxlIDMgQWNjZW50IDM7XGxzZHByaW9yaXR5NDkgXGxzZGxvY2tlZDAgR3JpZCBUYWJsZSA0IEFjY2VudCAzOw==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHByaW9yaXR5NDYgXGxzZGxvY2tlZDAgTGlzdCBUYWJsZSAxIExpZ2h0IEFjY2VudCAyO1xsc2Rwcmlvcml0eTQ3IFxsc2Rsb2NrZWQwIExpc3QgVGFibGUgMiBBY2NlbnQgMjtcbHNkcHJpb3JpdHk0OCBcbHNkbG9ja2VkMCBMaXN0IFRhYmxlIDMgQWNjZW50IDI7XGxzZHByaW9yaXR5NDkgXGxzZGxvY2tlZDAgTGlzdCBUYWJsZSA0IEFjY2VudCAyOw==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHByaW9yaXR5NDYgXGxzZGxvY2tlZDAgTGlzdCBUYWJsZSAxIExpZ2h0IEFjY2VudCA2O1xsc2Rwcmlvcml0eTQ3IFxsc2Rsb2NrZWQwIExpc3QgVGFibGUgMiBBY2NlbnQgNjtcbHNkcHJpb3JpdHk0OCBcbHNkbG9ja2VkMCBMaXN0IFRhYmxlIDMgQWNjZW50IDY7XGxzZHByaW9yaXR5NDkgXGxzZGxvY2tlZDAgTGlzdCBUYWJsZSA0IEFjY2VudCA2Ow==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHByaW9yaXR5NDYgXGxzZGxvY2tlZDAgTGlzdCBUYWJsZSAxIExpZ2h0O1xsc2Rwcmlvcml0eTQ3IFxsc2Rsb2NrZWQwIExpc3QgVGFibGUgMjtcbHNkcHJpb3JpdHk0OCBcbHNkbG9ja2VkMCBMaXN0IFRhYmxlIDM7XGxzZHByaW9yaXR5NDkgXGxzZGxvY2tlZDAgTGlzdCBUYWJsZSA0O1xsc2Rwcmlvcml0eTUwIFxsc2Rsb2NrZWQwIExpc3QgVGFibGUgNSBEYXJrOw==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHByaW9yaXR5NDcgXGxzZGxvY2tlZDAgR3JpZCBUYWJsZSAyIEFjY2VudCA0O1xsc2Rwcmlvcml0eTQ4IFxsc2Rsb2NrZWQwIEdyaWQgVGFibGUgMyBBY2NlbnQgNDtcbHNkcHJpb3JpdHk0OSBcbHNkbG9ja2VkMCBHcmlkIFRhYmxlIDQgQWNjZW50IDQ7XGxzZHByaW9yaXR5NTAgXGxzZGxvY2tlZDAgR3JpZCBUYWJsZSA1IERhcmsgQWNjZW50IDQ7","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHByaW9yaXR5NDcgXGxzZGxvY2tlZDAgTGlzdCBUYWJsZSAyIEFjY2VudCAzO1xsc2Rwcmlvcml0eTQ4IFxsc2Rsb2NrZWQwIExpc3QgVGFibGUgMyBBY2NlbnQgMztcbHNkcHJpb3JpdHk0OSBcbHNkbG9ja2VkMCBMaXN0IFRhYmxlIDQgQWNjZW50IDM7XGxzZHByaW9yaXR5NTAgXGxzZGxvY2tlZDAgTGlzdCBUYWJsZSA1IERhcmsgQWNjZW50IDM7","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHByaW9yaXR5NDggXGxzZGxvY2tlZDAgR3JpZCBUYWJsZSAzIEFjY2VudCAxO1xsc2Rwcmlvcml0eTQ5IFxsc2Rsb2NrZWQwIEdyaWQgVGFibGUgNCBBY2NlbnQgMTtcbHNkcHJpb3JpdHk1MCBcbHNkbG9ja2VkMCBHcmlkIFRhYmxlIDUgRGFyayBBY2NlbnQgMTtcbHNkcHJpb3JpdHk1MSBcbHNkbG9ja2VkMCBHcmlkIFRhYmxlIDYgQ29sb3JmdWwgQWNjZW50IDE7","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHByaW9yaXR5NDggXGxzZGxvY2tlZDAgR3JpZCBUYWJsZSAzIEFjY2VudCA1O1xsc2Rwcmlvcml0eTQ5IFxsc2Rsb2NrZWQwIEdyaWQgVGFibGUgNCBBY2NlbnQgNTtcbHNkcHJpb3JpdHk1MCBcbHNkbG9ja2VkMCBHcmlkIFRhYmxlIDUgRGFyayBBY2NlbnQgNTtcbHNkcHJpb3JpdHk1MSBcbHNkbG9ja2VkMCBHcmlkIFRhYmxlIDYgQ29sb3JmdWwgQWNjZW50IDU7","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHByaW9yaXR5NDggXGxzZGxvY2tlZDAgTGlzdCBUYWJsZSAzIEFjY2VudCA0O1xsc2Rwcmlvcml0eTQ5IFxsc2Rsb2NrZWQwIExpc3QgVGFibGUgNCBBY2NlbnQgNDtcbHNkcHJpb3JpdHk1MCBcbHNkbG9ja2VkMCBMaXN0IFRhYmxlIDUgRGFyayBBY2NlbnQgNDtcbHNkcHJpb3JpdHk1MSBcbHNkbG9ja2VkMCBMaXN0IFRhYmxlIDYgQ29sb3JmdWwgQWNjZW50IDQ7","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHByaW9yaXR5NDkgXGxzZGxvY2tlZDAgR3JpZCBUYWJsZSA0IEFjY2VudCAyO1xsc2Rwcmlvcml0eTUwIFxsc2Rsb2NrZWQwIEdyaWQgVGFibGUgNSBEYXJrIEFjY2VudCAyO1xsc2Rwcmlvcml0eTUxIFxsc2Rsb2NrZWQwIEdyaWQgVGFibGUgNiBDb2xvcmZ1bCBBY2NlbnQgMjtcbHNkcHJpb3JpdHk1MiBcbHNkbG9ja2VkMCBHcmlkIFRhYmxlIDcgQ29sb3JmdWwgQWNjZW50IDI7","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHByaW9yaXR5NDkgXGxzZGxvY2tlZDAgR3JpZCBUYWJsZSA0IEFjY2VudCA2O1xsc2Rwcmlvcml0eTUwIFxsc2Rsb2NrZWQwIEdyaWQgVGFibGUgNSBEYXJrIEFjY2VudCA2O1xsc2Rwcmlvcml0eTUxIFxsc2Rsb2NrZWQwIEdyaWQgVGFibGUgNiBDb2xvcmZ1bCBBY2NlbnQgNjtcbHNkcHJpb3JpdHk1MiBcbHNkbG9ja2VkMCBHcmlkIFRhYmxlIDcgQ29sb3JmdWwgQWNjZW50IDY7","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHByaW9yaXR5NDkgXGxzZGxvY2tlZDAgTGlzdCBUYWJsZSA0IEFjY2VudCAxO1xsc2Rwcmlvcml0eTUwIFxsc2Rsb2NrZWQwIExpc3QgVGFibGUgNSBEYXJrIEFjY2VudCAxO1xsc2Rwcmlvcml0eTUxIFxsc2Rsb2NrZWQwIExpc3QgVGFibGUgNiBDb2xvcmZ1bCBBY2NlbnQgMTtcbHNkcHJpb3JpdHk1MiBcbHNkbG9ja2VkMCBMaXN0IFRhYmxlIDcgQ29sb3JmdWwgQWNjZW50IDE7","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHByaW9yaXR5NDkgXGxzZGxvY2tlZDAgTGlzdCBUYWJsZSA0IEFjY2VudCA1O1xsc2Rwcmlvcml0eTUwIFxsc2Rsb2NrZWQwIExpc3QgVGFibGUgNSBEYXJrIEFjY2VudCA1O1xsc2Rwcmlvcml0eTUxIFxsc2Rsb2NrZWQwIExpc3QgVGFibGUgNiBDb2xvcmZ1bCBBY2NlbnQgNTtcbHNkcHJpb3JpdHk1MiBcbHNkbG9ja2VkMCBMaXN0IFRhYmxlIDcgQ29sb3JmdWwgQWNjZW50IDU7","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHByaW9yaXR5NTAgXGxzZGxvY2tlZDAgR3JpZCBUYWJsZSA1IERhcmsgQWNjZW50IDM7XGxzZHByaW9yaXR5NTEgXGxzZGxvY2tlZDAgR3JpZCBUYWJsZSA2IENvbG9yZnVsIEFjY2VudCAzO1xsc2Rwcmlvcml0eTUyIFxsc2Rsb2NrZWQwIEdyaWQgVGFibGUgNyBDb2xvcmZ1bCBBY2NlbnQgMztcbHNkcHJpb3JpdHk0NiBcbHNkbG9ja2VkMCBHcmlkIFRhYmxlIDEgTGlnaHQgQWNjZW50IDQ7","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHByaW9yaXR5NTAgXGxzZGxvY2tlZDAgR3JpZCBUYWJsZSA1IERhcms7XGxzZHByaW9yaXR5NTEgXGxzZGxvY2tlZDAgR3JpZCBUYWJsZSA2IENvbG9yZnVsO1xsc2Rwcmlvcml0eTUyIFxsc2Rsb2NrZWQwIEdyaWQgVGFibGUgNyBDb2xvcmZ1bDtcbHNkcHJpb3JpdHk0NiBcbHNkbG9ja2VkMCBHcmlkIFRhYmxlIDEgTGlnaHQgQWNjZW50IDE7XGxzZHByaW9yaXR5NDcgXGxzZGxvY2tlZDAgR3JpZCBUYWJsZSAyIEFjY2VudCAxOw==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHByaW9yaXR5NTAgXGxzZGxvY2tlZDAgTGlzdCBUYWJsZSA1IERhcmsgQWNjZW50IDI7XGxzZHByaW9yaXR5NTEgXGxzZGxvY2tlZDAgTGlzdCBUYWJsZSA2IENvbG9yZnVsIEFjY2VudCAyO1xsc2Rwcmlvcml0eTUyIFxsc2Rsb2NrZWQwIExpc3QgVGFibGUgNyBDb2xvcmZ1bCBBY2NlbnQgMjtcbHNkcHJpb3JpdHk0NiBcbHNkbG9ja2VkMCBMaXN0IFRhYmxlIDEgTGlnaHQgQWNjZW50IDM7","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHByaW9yaXR5NTAgXGxzZGxvY2tlZDAgTGlzdCBUYWJsZSA1IERhcmsgQWNjZW50IDY7XGxzZHByaW9yaXR5NTEgXGxzZGxvY2tlZDAgTGlzdCBUYWJsZSA2IENvbG9yZnVsIEFjY2VudCA2O1xsc2Rwcmlvcml0eTUyIFxsc2Rsb2NrZWQwIExpc3QgVGFibGUgNyBDb2xvcmZ1bCBBY2NlbnQgNjtcbHNkc2VtaWhpZGRlbjEgXGxzZHVuaGlkZXVzZWQxIFxsc2Rsb2NrZWQwIE1lbnRpb247fX17XCpcZGF0YXN0b3JlIDAxMDUwMDAwMDIwMDAwMDA=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHByaW9yaXR5NTEgXGxzZGxvY2tlZDAgR3JpZCBUYWJsZSA2IENvbG9yZnVsIEFjY2VudCA0O1xsc2Rwcmlvcml0eTUyIFxsc2Rsb2NrZWQwIEdyaWQgVGFibGUgNyBDb2xvcmZ1bCBBY2NlbnQgNDtcbHNkcHJpb3JpdHk0NiBcbHNkbG9ja2VkMCBHcmlkIFRhYmxlIDEgTGlnaHQgQWNjZW50IDU7XGxzZHByaW9yaXR5NDcgXGxzZGxvY2tlZDAgR3JpZCBUYWJsZSAyIEFjY2VudCA1Ow==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHByaW9yaXR5NTEgXGxzZGxvY2tlZDAgTGlzdCBUYWJsZSA2IENvbG9yZnVsIEFjY2VudCAzO1xsc2Rwcmlvcml0eTUyIFxsc2Rsb2NrZWQwIExpc3QgVGFibGUgNyBDb2xvcmZ1bCBBY2NlbnQgMztcbHNkcHJpb3JpdHk0NiBcbHNkbG9ja2VkMCBMaXN0IFRhYmxlIDEgTGlnaHQgQWNjZW50IDQ7XGxzZHByaW9yaXR5NDcgXGxzZGxvY2tlZDAgTGlzdCBUYWJsZSAyIEFjY2VudCA0Ow==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHByaW9yaXR5NTEgXGxzZGxvY2tlZDAgTGlzdCBUYWJsZSA2IENvbG9yZnVsO1xsc2Rwcmlvcml0eTUyIFxsc2Rsb2NrZWQwIExpc3QgVGFibGUgNyBDb2xvcmZ1bDtcbHNkcHJpb3JpdHk0NiBcbHNkbG9ja2VkMCBMaXN0IFRhYmxlIDEgTGlnaHQgQWNjZW50IDE7XGxzZHByaW9yaXR5NDcgXGxzZGxvY2tlZDAgTGlzdCBUYWJsZSAyIEFjY2VudCAxO1xsc2Rwcmlvcml0eTQ4IFxsc2Rsb2NrZWQwIExpc3QgVGFibGUgMyBBY2NlbnQgMTs=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHByaW9yaXR5NTIgXGxzZGxvY2tlZDAgR3JpZCBUYWJsZSA3IENvbG9yZnVsIEFjY2VudCAxO1xsc2Rwcmlvcml0eTQ2IFxsc2Rsb2NrZWQwIEdyaWQgVGFibGUgMSBMaWdodCBBY2NlbnQgMjtcbHNkcHJpb3JpdHk0NyBcbHNkbG9ja2VkMCBHcmlkIFRhYmxlIDIgQWNjZW50IDI7XGxzZHByaW9yaXR5NDggXGxzZGxvY2tlZDAgR3JpZCBUYWJsZSAzIEFjY2VudCAyOw==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHByaW9yaXR5NTIgXGxzZGxvY2tlZDAgR3JpZCBUYWJsZSA3IENvbG9yZnVsIEFjY2VudCA1O1xsc2Rwcmlvcml0eTQ2IFxsc2Rsb2NrZWQwIEdyaWQgVGFibGUgMSBMaWdodCBBY2NlbnQgNjtcbHNkcHJpb3JpdHk0NyBcbHNkbG9ja2VkMCBHcmlkIFRhYmxlIDIgQWNjZW50IDY7XGxzZHByaW9yaXR5NDggXGxzZGxvY2tlZDAgR3JpZCBUYWJsZSAzIEFjY2VudCA2Ow==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHByaW9yaXR5NTIgXGxzZGxvY2tlZDAgTGlzdCBUYWJsZSA3IENvbG9yZnVsIEFjY2VudCA0O1xsc2Rwcmlvcml0eTQ2IFxsc2Rsb2NrZWQwIExpc3QgVGFibGUgMSBMaWdodCBBY2NlbnQgNTtcbHNkcHJpb3JpdHk0NyBcbHNkbG9ja2VkMCBMaXN0IFRhYmxlIDIgQWNjZW50IDU7XGxzZHByaW9yaXR5NDggXGxzZGxvY2tlZDAgTGlzdCBUYWJsZSAzIEFjY2VudCA1Ow==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHByaW9yaXR5NjEgXGxzZGxvY2tlZDAgTGlnaHQgTGlzdCBBY2NlbnQgMTtcbHNkcHJpb3JpdHk2MiBcbHNkbG9ja2VkMCBMaWdodCBHcmlkIEFjY2VudCAxO1xsc2Rwcmlvcml0eTYzIFxsc2Rsb2NrZWQwIE1lZGl1bSBTaGFkaW5nIDEgQWNjZW50IDE7XGxzZHByaW9yaXR5NjQgXGxzZGxvY2tlZDAgTWVkaXVtIFNoYWRpbmcgMiBBY2NlbnQgMTtcbHNkcHJpb3JpdHk2NSBcbHNkbG9ja2VkMCBNZWRpdW0gTGlzdCAxIEFjY2VudCAxOw==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHByaW9yaXR5NjMgXGxzZGxvY2tlZDAgTWVkaXVtIFNoYWRpbmcgMSBBY2NlbnQgMjtcbHNkcHJpb3JpdHk2NCBcbHNkbG9ja2VkMCBNZWRpdW0gU2hhZGluZyAyIEFjY2VudCAyO1xsc2Rwcmlvcml0eTY1IFxsc2Rsb2NrZWQwIE1lZGl1bSBMaXN0IDEgQWNjZW50IDI7XGxzZHByaW9yaXR5NjYgXGxzZGxvY2tlZDAgTWVkaXVtIExpc3QgMiBBY2NlbnQgMjs=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHByaW9yaXR5NjMgXGxzZGxvY2tlZDAgTWVkaXVtIFNoYWRpbmcgMSBBY2NlbnQgMztcbHNkcHJpb3JpdHk2NCBcbHNkbG9ja2VkMCBNZWRpdW0gU2hhZGluZyAyIEFjY2VudCAzO1xsc2Rwcmlvcml0eTY1IFxsc2Rsb2NrZWQwIE1lZGl1bSBMaXN0IDEgQWNjZW50IDM7XGxzZHByaW9yaXR5NjYgXGxzZGxvY2tlZDAgTWVkaXVtIExpc3QgMiBBY2NlbnQgMzs=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHByaW9yaXR5NjMgXGxzZGxvY2tlZDAgTWVkaXVtIFNoYWRpbmcgMSBBY2NlbnQgNDtcbHNkcHJpb3JpdHk2NCBcbHNkbG9ja2VkMCBNZWRpdW0gU2hhZGluZyAyIEFjY2VudCA0O1xsc2Rwcmlvcml0eTY1IFxsc2Rsb2NrZWQwIE1lZGl1bSBMaXN0IDEgQWNjZW50IDQ7XGxzZHByaW9yaXR5NjYgXGxzZGxvY2tlZDAgTWVkaXVtIExpc3QgMiBBY2NlbnQgNDs=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHByaW9yaXR5NjMgXGxzZGxvY2tlZDAgTWVkaXVtIFNoYWRpbmcgMSBBY2NlbnQgNTtcbHNkcHJpb3JpdHk2NCBcbHNkbG9ja2VkMCBNZWRpdW0gU2hhZGluZyAyIEFjY2VudCA1O1xsc2Rwcmlvcml0eTY1IFxsc2Rsb2NrZWQwIE1lZGl1bSBMaXN0IDEgQWNjZW50IDU7XGxzZHByaW9yaXR5NjYgXGxzZGxvY2tlZDAgTWVkaXVtIExpc3QgMiBBY2NlbnQgNTs=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHByaW9yaXR5NjMgXGxzZGxvY2tlZDAgTWVkaXVtIFNoYWRpbmcgMSBBY2NlbnQgNjtcbHNkcHJpb3JpdHk2NCBcbHNkbG9ja2VkMCBNZWRpdW0gU2hhZGluZyAyIEFjY2VudCA2O1xsc2Rwcmlvcml0eTY1IFxsc2Rsb2NrZWQwIE1lZGl1bSBMaXN0IDEgQWNjZW50IDY7XGxzZHByaW9yaXR5NjYgXGxzZGxvY2tlZDAgTWVkaXVtIExpc3QgMiBBY2NlbnQgNjs=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHByaW9yaXR5NjMgXGxzZGxvY2tlZDAgTWVkaXVtIFNoYWRpbmcgMTtcbHNkcHJpb3JpdHk2NCBcbHNkbG9ja2VkMCBNZWRpdW0gU2hhZGluZyAyO1xsc2Rwcmlvcml0eTY1IFxsc2Rsb2NrZWQwIE1lZGl1bSBMaXN0IDE7XGxzZHByaW9yaXR5NjYgXGxzZGxvY2tlZDAgTWVkaXVtIExpc3QgMjtcbHNkcHJpb3JpdHk2NyBcbHNkbG9ja2VkMCBNZWRpdW0gR3JpZCAxO1xsc2Rwcmlvcml0eTY4IFxsc2Rsb2NrZWQwIE1lZGl1bSBHcmlkIDI7","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHByaW9yaXR5NjcgXGxzZGxvY2tlZDAgTWVkaXVtIEdyaWQgMSBBY2NlbnQgMTtcbHNkcHJpb3JpdHk2OCBcbHNkbG9ja2VkMCBNZWRpdW0gR3JpZCAyIEFjY2VudCAxO1xsc2Rwcmlvcml0eTY5IFxsc2Rsb2NrZWQwIE1lZGl1bSBHcmlkIDMgQWNjZW50IDE7XGxzZHByaW9yaXR5NzAgXGxzZGxvY2tlZDAgRGFyayBMaXN0IEFjY2VudCAxO1xsc2Rwcmlvcml0eTcxIFxsc2Rsb2NrZWQwIENvbG9yZnVsIFNoYWRpbmcgQWNjZW50IDE7","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHByaW9yaXR5NjcgXGxzZGxvY2tlZDAgTWVkaXVtIEdyaWQgMSBBY2NlbnQgMjtcbHNkcHJpb3JpdHk2OCBcbHNkbG9ja2VkMCBNZWRpdW0gR3JpZCAyIEFjY2VudCAyO1xsc2Rwcmlvcml0eTY5IFxsc2Rsb2NrZWQwIE1lZGl1bSBHcmlkIDMgQWNjZW50IDI7XGxzZHByaW9yaXR5NzAgXGxzZGxvY2tlZDAgRGFyayBMaXN0IEFjY2VudCAyO1xsc2Rwcmlvcml0eTcxIFxsc2Rsb2NrZWQwIENvbG9yZnVsIFNoYWRpbmcgQWNjZW50IDI7","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHByaW9yaXR5NjcgXGxzZGxvY2tlZDAgTWVkaXVtIEdyaWQgMSBBY2NlbnQgMztcbHNkcHJpb3JpdHk2OCBcbHNkbG9ja2VkMCBNZWRpdW0gR3JpZCAyIEFjY2VudCAzO1xsc2Rwcmlvcml0eTY5IFxsc2Rsb2NrZWQwIE1lZGl1bSBHcmlkIDMgQWNjZW50IDM7XGxzZHByaW9yaXR5NzAgXGxzZGxvY2tlZDAgRGFyayBMaXN0IEFjY2VudCAzO1xsc2Rwcmlvcml0eTcxIFxsc2Rsb2NrZWQwIENvbG9yZnVsIFNoYWRpbmcgQWNjZW50IDM7","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHByaW9yaXR5NjcgXGxzZGxvY2tlZDAgTWVkaXVtIEdyaWQgMSBBY2NlbnQgNDtcbHNkcHJpb3JpdHk2OCBcbHNkbG9ja2VkMCBNZWRpdW0gR3JpZCAyIEFjY2VudCA0O1xsc2Rwcmlvcml0eTY5IFxsc2Rsb2NrZWQwIE1lZGl1bSBHcmlkIDMgQWNjZW50IDQ7XGxzZHByaW9yaXR5NzAgXGxzZGxvY2tlZDAgRGFyayBMaXN0IEFjY2VudCA0O1xsc2Rwcmlvcml0eTcxIFxsc2Rsb2NrZWQwIENvbG9yZnVsIFNoYWRpbmcgQWNjZW50IDQ7","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHByaW9yaXR5NjcgXGxzZGxvY2tlZDAgTWVkaXVtIEdyaWQgMSBBY2NlbnQgNTtcbHNkcHJpb3JpdHk2OCBcbHNkbG9ja2VkMCBNZWRpdW0gR3JpZCAyIEFjY2VudCA1O1xsc2Rwcmlvcml0eTY5IFxsc2Rsb2NrZWQwIE1lZGl1bSBHcmlkIDMgQWNjZW50IDU7XGxzZHByaW9yaXR5NzAgXGxzZGxvY2tlZDAgRGFyayBMaXN0IEFjY2VudCA1O1xsc2Rwcmlvcml0eTcxIFxsc2Rsb2NrZWQwIENvbG9yZnVsIFNoYWRpbmcgQWNjZW50IDU7","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHByaW9yaXR5NjcgXGxzZGxvY2tlZDAgTWVkaXVtIEdyaWQgMSBBY2NlbnQgNjtcbHNkcHJpb3JpdHk2OCBcbHNkbG9ja2VkMCBNZWRpdW0gR3JpZCAyIEFjY2VudCA2O1xsc2Rwcmlvcml0eTY5IFxsc2Rsb2NrZWQwIE1lZGl1bSBHcmlkIDMgQWNjZW50IDY7XGxzZHByaW9yaXR5NzAgXGxzZGxvY2tlZDAgRGFyayBMaXN0IEFjY2VudCA2O1xsc2Rwcmlvcml0eTcxIFxsc2Rsb2NrZWQwIENvbG9yZnVsIFNoYWRpbmcgQWNjZW50IDY7","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHByaW9yaXR5NjkgXGxzZGxvY2tlZDAgTWVkaXVtIEdyaWQgMztcbHNkcHJpb3JpdHk3MCBcbHNkbG9ja2VkMCBEYXJrIExpc3Q7XGxzZHByaW9yaXR5NzEgXGxzZGxvY2tlZDAgQ29sb3JmdWwgU2hhZGluZztcbHNkcHJpb3JpdHk3MiBcbHNkbG9ja2VkMCBDb2xvcmZ1bCBMaXN0O1xsc2Rwcmlvcml0eTczIFxsc2Rsb2NrZWQwIENvbG9yZnVsIEdyaWQ7XGxzZHByaW9yaXR5NjAgXGxzZGxvY2tlZDAgTGlnaHQgU2hhZGluZyBBY2NlbnQgMTs=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHByaW9yaXR5NzIgXGxzZGxvY2tlZDAgQ29sb3JmdWwgTGlzdCBBY2NlbnQgMTtcbHNkcHJpb3JpdHk3MyBcbHNkbG9ja2VkMCBDb2xvcmZ1bCBHcmlkIEFjY2VudCAxO1xsc2Rwcmlvcml0eTYwIFxsc2Rsb2NrZWQwIExpZ2h0IFNoYWRpbmcgQWNjZW50IDI7XGxzZHByaW9yaXR5NjEgXGxzZGxvY2tlZDAgTGlnaHQgTGlzdCBBY2NlbnQgMjtcbHNkcHJpb3JpdHk2MiBcbHNkbG9ja2VkMCBMaWdodCBHcmlkIEFjY2VudCAyOw==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHByaW9yaXR5NzIgXGxzZGxvY2tlZDAgQ29sb3JmdWwgTGlzdCBBY2NlbnQgMjtcbHNkcHJpb3JpdHk3MyBcbHNkbG9ja2VkMCBDb2xvcmZ1bCBHcmlkIEFjY2VudCAyO1xsc2Rwcmlvcml0eTYwIFxsc2Rsb2NrZWQwIExpZ2h0IFNoYWRpbmcgQWNjZW50IDM7XGxzZHByaW9yaXR5NjEgXGxzZGxvY2tlZDAgTGlnaHQgTGlzdCBBY2NlbnQgMztcbHNkcHJpb3JpdHk2MiBcbHNkbG9ja2VkMCBMaWdodCBHcmlkIEFjY2VudCAzOw==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHByaW9yaXR5NzIgXGxzZGxvY2tlZDAgQ29sb3JmdWwgTGlzdCBBY2NlbnQgMztcbHNkcHJpb3JpdHk3MyBcbHNkbG9ja2VkMCBDb2xvcmZ1bCBHcmlkIEFjY2VudCAzO1xsc2Rwcmlvcml0eTYwIFxsc2Rsb2NrZWQwIExpZ2h0IFNoYWRpbmcgQWNjZW50IDQ7XGxzZHByaW9yaXR5NjEgXGxzZGxvY2tlZDAgTGlnaHQgTGlzdCBBY2NlbnQgNDtcbHNkcHJpb3JpdHk2MiBcbHNkbG9ja2VkMCBMaWdodCBHcmlkIEFjY2VudCA0Ow==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHByaW9yaXR5NzIgXGxzZGxvY2tlZDAgQ29sb3JmdWwgTGlzdCBBY2NlbnQgNDtcbHNkcHJpb3JpdHk3MyBcbHNkbG9ja2VkMCBDb2xvcmZ1bCBHcmlkIEFjY2VudCA0O1xsc2Rwcmlvcml0eTYwIFxsc2Rsb2NrZWQwIExpZ2h0IFNoYWRpbmcgQWNjZW50IDU7XGxzZHByaW9yaXR5NjEgXGxzZGxvY2tlZDAgTGlnaHQgTGlzdCBBY2NlbnQgNTtcbHNkcHJpb3JpdHk2MiBcbHNkbG9ja2VkMCBMaWdodCBHcmlkIEFjY2VudCA1Ow==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHByaW9yaXR5NzIgXGxzZGxvY2tlZDAgQ29sb3JmdWwgTGlzdCBBY2NlbnQgNTtcbHNkcHJpb3JpdHk3MyBcbHNkbG9ja2VkMCBDb2xvcmZ1bCBHcmlkIEFjY2VudCA1O1xsc2Rwcmlvcml0eTYwIFxsc2Rsb2NrZWQwIExpZ2h0IFNoYWRpbmcgQWNjZW50IDY7XGxzZHByaW9yaXR5NjEgXGxzZGxvY2tlZDAgTGlnaHQgTGlzdCBBY2NlbnQgNjtcbHNkcHJpb3JpdHk2MiBcbHNkbG9ja2VkMCBMaWdodCBHcmlkIEFjY2VudCA2Ow==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHByaW9yaXR5NzIgXGxzZGxvY2tlZDAgQ29sb3JmdWwgTGlzdCBBY2NlbnQgNjtcbHNkcHJpb3JpdHk3MyBcbHNkbG9ja2VkMCBDb2xvcmZ1bCBHcmlkIEFjY2VudCA2O1xsc2RxZm9ybWF0MSBcbHNkcHJpb3JpdHkxOSBcbHNkbG9ja2VkMCBTdWJ0bGUgRW1waGFzaXM7XGxzZHFmb3JtYXQxIFxsc2Rwcmlvcml0eTIxIFxsc2Rsb2NrZWQwIEludGVuc2UgRW1waGFzaXM7","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHFmb3JtYXQxIFxsc2Rwcmlvcml0eTIwIFxsc2Rsb2NrZWQwIEVtcGhhc2lzO1xsc2RzZW1paGlkZGVuMSBcbHNkdW5oaWRldXNlZDEgXGxzZGxvY2tlZDAgRG9jdW1lbnQgTWFwO1xsc2RzZW1paGlkZGVuMSBcbHNkdW5oaWRldXNlZDEgXGxzZGxvY2tlZDAgUGxhaW4gVGV4dDtcbHNkc2VtaWhpZGRlbjEgXGxzZHVuaGlkZXVzZWQxIFxsc2Rsb2NrZWQwIEUtbWFpbCBTaWduYXR1cmU7","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHFmb3JtYXQxIFxsc2Rwcmlvcml0eTMxIFxsc2Rsb2NrZWQwIFN1YnRsZSBSZWZlcmVuY2U7XGxzZHFmb3JtYXQxIFxsc2Rwcmlvcml0eTMyIFxsc2Rsb2NrZWQwIEludGVuc2UgUmVmZXJlbmNlO1xsc2RxZm9ybWF0MSBcbHNkcHJpb3JpdHkzMyBcbHNkbG9ja2VkMCBCb29rIFRpdGxlO1xsc2RzZW1paGlkZGVuMSBcbHNkdW5oaWRldXNlZDEgXGxzZHByaW9yaXR5MzcgXGxzZGxvY2tlZDAgQmlibGlvZ3JhcGh5Ow==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHNlbWloaWRkZW4xIFxsc2Rsb2NrZWQwIFBsYWNlaG9sZGVyIFRleHQ7XGxzZHFmb3JtYXQxIFxsc2Rwcmlvcml0eTEgXGxzZGxvY2tlZDAgTm8gU3BhY2luZztcbHNkcHJpb3JpdHk2MCBcbHNkbG9ja2VkMCBMaWdodCBTaGFkaW5nO1xsc2Rwcmlvcml0eTYxIFxsc2Rsb2NrZWQwIExpZ2h0IExpc3Q7XGxzZHByaW9yaXR5NjIgXGxzZGxvY2tlZDAgTGlnaHQgR3JpZDs=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHNlbWloaWRkZW4xIFxsc2Rsb2NrZWQwIFJldmlzaW9uO1xsc2RxZm9ybWF0MSBcbHNkcHJpb3JpdHkzNCBcbHNkbG9ja2VkMCBMaXN0IFBhcmFncmFwaDtcbHNkcWZvcm1hdDEgXGxzZHByaW9yaXR5MjkgXGxzZGxvY2tlZDAgUXVvdGU7XGxzZHFmb3JtYXQxIFxsc2Rwcmlvcml0eTMwIFxsc2Rsb2NrZWQwIEludGVuc2UgUXVvdGU7XGxzZHByaW9yaXR5NjYgXGxzZGxvY2tlZDAgTWVkaXVtIExpc3QgMiBBY2NlbnQgMTs=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHNlbWloaWRkZW4xIFxsc2R1bmhpZGV1c2VkMSBcbHNkbG9ja2VkMCBCbG9jayBUZXh0O1xsc2RzZW1paGlkZGVuMSBcbHNkdW5oaWRldXNlZDEgXGxzZGxvY2tlZDAgSHlwZXJsaW5rO1xsc2RzZW1paGlkZGVuMSBcbHNkdW5oaWRldXNlZDEgXGxzZGxvY2tlZDAgRm9sbG93ZWRIeXBlcmxpbms7XGxzZHFmb3JtYXQxIFxsc2Rwcmlvcml0eTIyIFxsc2Rsb2NrZWQwIFN0cm9uZzs=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHNlbWloaWRkZW4xIFxsc2R1bmhpZGV1c2VkMSBcbHNkbG9ja2VkMCBCb2R5IFRleHQgMjtcbHNkc2VtaWhpZGRlbjEgXGxzZHVuaGlkZXVzZWQxIFxsc2Rsb2NrZWQwIEJvZHkgVGV4dCAzO1xsc2RzZW1paGlkZGVuMSBcbHNkdW5oaWRldXNlZDEgXGxzZGxvY2tlZDAgQm9keSBUZXh0IEluZGVudCAyO1xsc2RzZW1paGlkZGVuMSBcbHNkdW5oaWRldXNlZDEgXGxzZGxvY2tlZDAgQm9keSBUZXh0IEluZGVudCAzOw==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHNlbWloaWRkZW4xIFxsc2R1bmhpZGV1c2VkMSBcbHNkbG9ja2VkMCBEYXRlO1xsc2RzZW1paGlkZGVuMSBcbHNkdW5oaWRldXNlZDEgXGxzZGxvY2tlZDAgQm9keSBUZXh0IEZpcnN0IEluZGVudDtcbHNkc2VtaWhpZGRlbjEgXGxzZHVuaGlkZXVzZWQxIFxsc2Rsb2NrZWQwIEJvZHkgVGV4dCBGaXJzdCBJbmRlbnQgMjtcbHNkc2VtaWhpZGRlbjEgXGxzZHVuaGlkZXVzZWQxIFxsc2Rsb2NrZWQwIE5vdGUgSGVhZGluZzs=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHNlbWloaWRkZW4xIFxsc2R1bmhpZGV1c2VkMSBcbHNkbG9ja2VkMCBlbnZlbG9wZSBhZGRyZXNzO1xsc2RzZW1paGlkZGVuMSBcbHNkdW5oaWRldXNlZDEgXGxzZGxvY2tlZDAgZW52ZWxvcGUgcmV0dXJuO1xsc2RzZW1paGlkZGVuMSBcbHNkdW5oaWRldXNlZDEgXGxzZGxvY2tlZDAgZm9vdG5vdGUgcmVmZXJlbmNlO1xsc2RzZW1paGlkZGVuMSBcbHNkdW5oaWRldXNlZDEgXGxzZGxvY2tlZDAgYW5ub3RhdGlvbiByZWZlcmVuY2U7","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHNlbWloaWRkZW4xIFxsc2R1bmhpZGV1c2VkMSBcbHNkbG9ja2VkMCBmb290bm90ZSB0ZXh0O1xsc2RzZW1paGlkZGVuMSBcbHNkdW5oaWRldXNlZDEgXGxzZGxvY2tlZDAgYW5ub3RhdGlvbiB0ZXh0O1xsc2RzZW1paGlkZGVuMSBcbHNkdW5oaWRldXNlZDEgXGxzZGxvY2tlZDAgaGVhZGVyO1xsc2RzZW1paGlkZGVuMSBcbHNkdW5oaWRldXNlZDEgXGxzZGxvY2tlZDAgZm9vdGVyOw==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHNlbWloaWRkZW4xIFxsc2R1bmhpZGV1c2VkMSBcbHNkbG9ja2VkMCBIVE1MIEFkZHJlc3M7XGxzZHNlbWloaWRkZW4xIFxsc2R1bmhpZGV1c2VkMSBcbHNkbG9ja2VkMCBIVE1MIENpdGU7XGxzZHNlbWloaWRkZW4xIFxsc2R1bmhpZGV1c2VkMSBcbHNkbG9ja2VkMCBIVE1MIENvZGU7XGxzZHNlbWloaWRkZW4xIFxsc2R1bmhpZGV1c2VkMSBcbHNkbG9ja2VkMCBIVE1MIERlZmluaXRpb247","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHNlbWloaWRkZW4xIFxsc2R1bmhpZGV1c2VkMSBcbHNkbG9ja2VkMCBIVE1MIEtleWJvYXJkO1xsc2RzZW1paGlkZGVuMSBcbHNkdW5oaWRldXNlZDEgXGxzZGxvY2tlZDAgSFRNTCBQcmVmb3JtYXR0ZWQ7XGxzZHNlbWloaWRkZW4xIFxsc2R1bmhpZGV1c2VkMSBcbHNkbG9ja2VkMCBIVE1MIFNhbXBsZTtcbHNkc2VtaWhpZGRlbjEgXGxzZHVuaGlkZXVzZWQxIFxsc2Rsb2NrZWQwIEhUTUwgVHlwZXdyaXRlcjs=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHNlbWloaWRkZW4xIFxsc2R1bmhpZGV1c2VkMSBcbHNkbG9ja2VkMCBIVE1MIFRvcCBvZiBGb3JtO1xsc2RzZW1paGlkZGVuMSBcbHNkdW5oaWRldXNlZDEgXGxzZGxvY2tlZDAgSFRNTCBCb3R0b20gb2YgRm9ybTtcbHNkc2VtaWhpZGRlbjEgXGxzZHVuaGlkZXVzZWQxIFxsc2Rsb2NrZWQwIE5vcm1hbCAoV2ViKTtcbHNkc2VtaWhpZGRlbjEgXGxzZHVuaGlkZXVzZWQxIFxsc2Rsb2NrZWQwIEhUTUwgQWNyb255bTs=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHNlbWloaWRkZW4xIFxsc2R1bmhpZGV1c2VkMSBcbHNkbG9ja2VkMCBIVE1MIFZhcmlhYmxlO1xsc2RzZW1paGlkZGVuMSBcbHNkdW5oaWRldXNlZDEgXGxzZGxvY2tlZDAgYW5ub3RhdGlvbiBzdWJqZWN0O1xsc2RzZW1paGlkZGVuMSBcbHNkdW5oaWRldXNlZDEgXGxzZGxvY2tlZDAgTm8gTGlzdDtcbHNkc2VtaWhpZGRlbjEgXGxzZHVuaGlkZXVzZWQxIFxsc2Rsb2NrZWQwIE91dGxpbmUgTGlzdCAxOw==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHNlbWloaWRkZW4xIFxsc2R1bmhpZGV1c2VkMSBcbHNkbG9ja2VkMCBpbmRleCAyO1xsc2RzZW1paGlkZGVuMSBcbHNkdW5oaWRldXNlZDEgXGxzZGxvY2tlZDAgaW5kZXggMztcbHNkc2VtaWhpZGRlbjEgXGxzZHVuaGlkZXVzZWQxIFxsc2Rsb2NrZWQwIGluZGV4IDQ7XGxzZHNlbWloaWRkZW4xIFxsc2R1bmhpZGV1c2VkMSBcbHNkbG9ja2VkMCBpbmRleCA1Ow==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHNlbWloaWRkZW4xIFxsc2R1bmhpZGV1c2VkMSBcbHNkbG9ja2VkMCBpbmRleCA2O1xsc2RzZW1paGlkZGVuMSBcbHNkdW5oaWRldXNlZDEgXGxzZGxvY2tlZDAgaW5kZXggNztcbHNkc2VtaWhpZGRlbjEgXGxzZHVuaGlkZXVzZWQxIFxsc2Rsb2NrZWQwIGluZGV4IDg7XGxzZHNlbWloaWRkZW4xIFxsc2R1bmhpZGV1c2VkMSBcbHNkbG9ja2VkMCBpbmRleCA5Ow==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHNlbWloaWRkZW4xIFxsc2R1bmhpZGV1c2VkMSBcbHNkbG9ja2VkMCBpbmRleCBoZWFkaW5nO1xsc2RzZW1paGlkZGVuMSBcbHNkdW5oaWRldXNlZDEgXGxzZHFmb3JtYXQxIFxsc2Rwcmlvcml0eTM1IFxsc2Rsb2NrZWQwIGNhcHRpb247XGxzZHNlbWloaWRkZW4xIFxsc2R1bmhpZGV1c2VkMSBcbHNkbG9ja2VkMCB0YWJsZSBvZiBmaWd1cmVzOw==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHNlbWloaWRkZW4xIFxsc2R1bmhpZGV1c2VkMSBcbHNkbG9ja2VkMCBsaW5lIG51bWJlcjtcbHNkc2VtaWhpZGRlbjEgXGxzZHVuaGlkZXVzZWQxIFxsc2Rsb2NrZWQwIHBhZ2UgbnVtYmVyO1xsc2RzZW1paGlkZGVuMSBcbHNkdW5oaWRldXNlZDEgXGxzZGxvY2tlZDAgZW5kbm90ZSByZWZlcmVuY2U7XGxzZHNlbWloaWRkZW4xIFxsc2R1bmhpZGV1c2VkMSBcbHNkbG9ja2VkMCBlbmRub3RlIHRleHQ7","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHNlbWloaWRkZW4xIFxsc2R1bmhpZGV1c2VkMSBcbHNkbG9ja2VkMCBMaXN0IDQ7XGxzZHNlbWloaWRkZW4xIFxsc2R1bmhpZGV1c2VkMSBcbHNkbG9ja2VkMCBMaXN0IDU7XGxzZHNlbWloaWRkZW4xIFxsc2R1bmhpZGV1c2VkMSBcbHNkbG9ja2VkMCBMaXN0IEJ1bGxldCAyO1xsc2RzZW1paGlkZGVuMSBcbHNkdW5oaWRldXNlZDEgXGxzZGxvY2tlZDAgTGlzdCBCdWxsZXQgMzs=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHNlbWloaWRkZW4xIFxsc2R1bmhpZGV1c2VkMSBcbHNkbG9ja2VkMCBMaXN0IEJ1bGxldCA0O1xsc2RzZW1paGlkZGVuMSBcbHNkdW5oaWRldXNlZDEgXGxzZGxvY2tlZDAgTGlzdCBCdWxsZXQgNTtcbHNkc2VtaWhpZGRlbjEgXGxzZHVuaGlkZXVzZWQxIFxsc2Rsb2NrZWQwIExpc3QgTnVtYmVyIDI7XGxzZHNlbWloaWRkZW4xIFxsc2R1bmhpZGV1c2VkMSBcbHNkbG9ja2VkMCBMaXN0IE51bWJlciAzOw==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHNlbWloaWRkZW4xIFxsc2R1bmhpZGV1c2VkMSBcbHNkbG9ja2VkMCBMaXN0IEJ1bGxldDtcbHNkc2VtaWhpZGRlbjEgXGxzZHVuaGlkZXVzZWQxIFxsc2Rsb2NrZWQwIExpc3QgTnVtYmVyO1xsc2RzZW1paGlkZGVuMSBcbHNkdW5oaWRldXNlZDEgXGxzZGxvY2tlZDAgTGlzdCAyO1xsc2RzZW1paGlkZGVuMSBcbHNkdW5oaWRldXNlZDEgXGxzZGxvY2tlZDAgTGlzdCAzOw==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHNlbWloaWRkZW4xIFxsc2R1bmhpZGV1c2VkMSBcbHNkbG9ja2VkMCBMaXN0IENvbnRpbnVlIDU7XGxzZHNlbWloaWRkZW4xIFxsc2R1bmhpZGV1c2VkMSBcbHNkbG9ja2VkMCBNZXNzYWdlIEhlYWRlcjtcbHNkcWZvcm1hdDEgXGxzZHByaW9yaXR5MTEgXGxzZGxvY2tlZDAgU3VidGl0bGU7XGxzZHNlbWloaWRkZW4xIFxsc2R1bmhpZGV1c2VkMSBcbHNkbG9ja2VkMCBTYWx1dGF0aW9uOw==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHNlbWloaWRkZW4xIFxsc2R1bmhpZGV1c2VkMSBcbHNkbG9ja2VkMCBMaXN0IENvbnRpbnVlO1xsc2RzZW1paGlkZGVuMSBcbHNkdW5oaWRldXNlZDEgXGxzZGxvY2tlZDAgTGlzdCBDb250aW51ZSAyO1xsc2RzZW1paGlkZGVuMSBcbHNkdW5oaWRldXNlZDEgXGxzZGxvY2tlZDAgTGlzdCBDb250aW51ZSAzO1xsc2RzZW1paGlkZGVuMSBcbHNkdW5oaWRldXNlZDEgXGxzZGxvY2tlZDAgTGlzdCBDb250aW51ZSA0Ow==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHNlbWloaWRkZW4xIFxsc2R1bmhpZGV1c2VkMSBcbHNkbG9ja2VkMCBMaXN0IE51bWJlciA0O1xsc2RzZW1paGlkZGVuMSBcbHNkdW5oaWRldXNlZDEgXGxzZGxvY2tlZDAgTGlzdCBOdW1iZXIgNTtcbHNkcWZvcm1hdDEgXGxzZHByaW9yaXR5MTAgXGxzZGxvY2tlZDAgVGl0bGU7XGxzZHNlbWloaWRkZW4xIFxsc2R1bmhpZGV1c2VkMSBcbHNkbG9ja2VkMCBDbG9zaW5nOw==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHNlbWloaWRkZW4xIFxsc2R1bmhpZGV1c2VkMSBcbHNkbG9ja2VkMCBPdXRsaW5lIExpc3QgMjtcbHNkc2VtaWhpZGRlbjEgXGxzZHVuaGlkZXVzZWQxIFxsc2Rsb2NrZWQwIE91dGxpbmUgTGlzdCAzO1xsc2RzZW1paGlkZGVuMSBcbHNkdW5oaWRldXNlZDEgXGxzZGxvY2tlZDAgQmFsbG9vbiBUZXh0O1xsc2Rwcmlvcml0eTM5IFxsc2Rsb2NrZWQwIFRhYmxlIEdyaWQ7","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHNlbWloaWRkZW4xIFxsc2R1bmhpZGV1c2VkMSBcbHNkbG9ja2VkMCBTaWduYXR1cmU7XGxzZHNlbWloaWRkZW4xIFxsc2R1bmhpZGV1c2VkMSBcbHNkcHJpb3JpdHkxIFxsc2Rsb2NrZWQwIERlZmF1bHQgUGFyYWdyYXBoIEZvbnQ7XGxzZHNlbWloaWRkZW4xIFxsc2R1bmhpZGV1c2VkMSBcbHNkbG9ja2VkMCBCb2R5IFRleHQ7XGxzZHNlbWloaWRkZW4xIFxsc2R1bmhpZGV1c2VkMSBcbHNkbG9ja2VkMCBCb2R5IFRleHQgSW5kZW50Ow==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHNlbWloaWRkZW4xIFxsc2R1bmhpZGV1c2VkMSBcbHNkbG9ja2VkMCB0YWJsZSBvZiBhdXRob3JpdGllcztcbHNkc2VtaWhpZGRlbjEgXGxzZHVuaGlkZXVzZWQxIFxsc2Rsb2NrZWQwIG1hY3JvO1xsc2RzZW1paGlkZGVuMSBcbHNkdW5oaWRldXNlZDEgXGxzZGxvY2tlZDAgdG9hIGhlYWRpbmc7XGxzZHNlbWloaWRkZW4xIFxsc2R1bmhpZGV1c2VkMSBcbHNkbG9ja2VkMCBMaXN0Ow==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHNlbWloaWRkZW4xIFxsc2R1bmhpZGV1c2VkMSBcbHNkcHJpb3JpdHkzOSBcbHNkbG9ja2VkMCB0b2MgMTtcbHNkc2VtaWhpZGRlbjEgXGxzZHVuaGlkZXVzZWQxIFxsc2Rwcmlvcml0eTM5IFxsc2Rsb2NrZWQwIHRvYyAyO1xsc2RzZW1paGlkZGVuMSBcbHNkdW5oaWRldXNlZDEgXGxzZHByaW9yaXR5MzkgXGxzZGxvY2tlZDAgdG9jIDM7","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHNlbWloaWRkZW4xIFxsc2R1bmhpZGV1c2VkMSBcbHNkcHJpb3JpdHkzOSBcbHNkbG9ja2VkMCB0b2MgNDtcbHNkc2VtaWhpZGRlbjEgXGxzZHVuaGlkZXVzZWQxIFxsc2Rwcmlvcml0eTM5IFxsc2Rsb2NrZWQwIHRvYyA1O1xsc2RzZW1paGlkZGVuMSBcbHNkdW5oaWRldXNlZDEgXGxzZHByaW9yaXR5MzkgXGxzZGxvY2tlZDAgdG9jIDY7","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHNlbWloaWRkZW4xIFxsc2R1bmhpZGV1c2VkMSBcbHNkcHJpb3JpdHkzOSBcbHNkbG9ja2VkMCB0b2MgNztcbHNkc2VtaWhpZGRlbjEgXGxzZHVuaGlkZXVzZWQxIFxsc2Rwcmlvcml0eTM5IFxsc2Rsb2NrZWQwIHRvYyA4O1xsc2RzZW1paGlkZGVuMSBcbHNkdW5oaWRldXNlZDEgXGxzZHByaW9yaXR5MzkgXGxzZGxvY2tlZDAgdG9jIDk7XGxzZHNlbWloaWRkZW4xIFxsc2R1bmhpZGV1c2VkMSBcbHNkbG9ja2VkMCBOb3JtYWwgSW5kZW50Ow==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHNlbWloaWRkZW4xIFxsc2R1bmhpZGV1c2VkMSBcbHNkcWZvcm1hdDEgXGxzZHByaW9yaXR5MzkgXGxzZGxvY2tlZDAgVE9DIEhlYWRpbmc7XGxzZHByaW9yaXR5NDEgXGxzZGxvY2tlZDAgUGxhaW4gVGFibGUgMTtcbHNkcHJpb3JpdHk0MiBcbHNkbG9ja2VkMCBQbGFpbiBUYWJsZSAyO1xsc2Rwcmlvcml0eTQzIFxsc2Rsb2NrZWQwIFBsYWluIFRhYmxlIDM7XGxzZHByaW9yaXR5NDQgXGxzZGxvY2tlZDAgUGxhaW4gVGFibGUgNDs=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHNlbWloaWRkZW4xIFxsc2R1bmhpZGV1c2VkMSBcbHNkcWZvcm1hdDEgXGxzZHByaW9yaXR5OSBcbHNkbG9ja2VkMCBoZWFkaW5nIDI7XGxzZHNlbWloaWRkZW4xIFxsc2R1bmhpZGV1c2VkMSBcbHNkcWZvcm1hdDEgXGxzZHByaW9yaXR5OSBcbHNkbG9ja2VkMCBoZWFkaW5nIDM7XGxzZHNlbWloaWRkZW4xIFxsc2R1bmhpZGV1c2VkMSBcbHNkcWZvcm1hdDEgXGxzZHByaW9yaXR5OSBcbHNkbG9ja2VkMCBoZWFkaW5nIDQ7","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHNlbWloaWRkZW4xIFxsc2R1bmhpZGV1c2VkMSBcbHNkcWZvcm1hdDEgXGxzZHByaW9yaXR5OSBcbHNkbG9ja2VkMCBoZWFkaW5nIDU7XGxzZHNlbWloaWRkZW4xIFxsc2R1bmhpZGV1c2VkMSBcbHNkcWZvcm1hdDEgXGxzZHByaW9yaXR5OSBcbHNkbG9ja2VkMCBoZWFkaW5nIDY7XGxzZHNlbWloaWRkZW4xIFxsc2R1bmhpZGV1c2VkMSBcbHNkcWZvcm1hdDEgXGxzZHByaW9yaXR5OSBcbHNkbG9ja2VkMCBoZWFkaW5nIDc7","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHNlbWloaWRkZW4xIFxsc2R1bmhpZGV1c2VkMSBcbHNkcWZvcm1hdDEgXGxzZHByaW9yaXR5OSBcbHNkbG9ja2VkMCBoZWFkaW5nIDg7XGxzZHNlbWloaWRkZW4xIFxsc2R1bmhpZGV1c2VkMSBcbHNkcWZvcm1hdDEgXGxzZHByaW9yaXR5OSBcbHNkbG9ja2VkMCBoZWFkaW5nIDk7XGxzZHNlbWloaWRkZW4xIFxsc2R1bmhpZGV1c2VkMSBcbHNkbG9ja2VkMCBpbmRleCAxOw==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGx0cmNoXGZjczAgXGJcZjJcZnMyMFxsYW5nMjA1N1xsYW5nZmUyMDU3XGxhbmdmZW5wMjA1N1xpbnNyc2lkMTMwNTA3MjJcY2hhcnJzaWQxMzA1MDcyMiAgYW5kIGFzc29jaWF0ZWQgZXhhbXBsZSB1c2UgcHJvZ3JhbXN9e1xydGxjaFxmY3MxIFxhYlxhZjJcYWZzMjAgXGx0cmNoXGZjczAgXGJcZjJcZnMyMFxsYW5nMjA1N1xsYW5nZmUyMDU3XGxhbmdmZW5wMjA1N1xpbnNyc2lkMjUwNTQ5MQ==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGx0cmNoXGZjczAgXGJcZjJcZnMyMFxsYW5nMjA1N1xsYW5nZmUyMDU3XGxhbmdmZW5wMjA1N1xpbnNyc2lkMTMwNTA3MjJcY2hhcnJzaWQxMzA1MDcyMiA1LiBOTyBXQVJSQU5UWS59e1xydGxjaFxmY3MxIFxhZjJcYWZzMjAgXGx0cmNoXGZjczAgXGYyXGZzMjBcbGFuZzIwNTdcbGFuZ2ZlMjA1N1xsYW5nZmVucDIwNTdcaW5zcnNpZDEzMDUwNzIyXGNoYXJyc2lkMTMwNTA3MjIgIEFueSB1c2Ugb2YgdGhlIFNPRlRXQVJFIFA=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGx2bHRlbnRhdGl2ZVxsZXZlbHNwYWNlMFxsZXZlbGluZGVudDB7XGxldmVsdGV4dFwnMDFcdS0zOTEzID87fXtcbGV2ZWxudW1iZXJzO31cZjNcZnMyMFxmYmlhczBcaHJlczBcY2hocmVzMCBcZmktMzYwXGxpMTQ0MFxqY2xpc3R0YWJcdHgxNDQwXGxpbjE0NDAgfXtcbGlzdGxldmVsXGxldmVsbmZjMjNcbGV2ZWxuZmNuMjNcbGV2ZWxqYzBcbGV2ZWxqY24wXGxldmVsZm9sbG93MFxsZXZlbHN0YXJ0YXQxXGx2bHRlbnRhdGl2ZQ==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XG1cXVxDXGNc","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"XHBhcGVydzExOTA2XHBhcGVyaDE2ODM4XG1hcmdsMTQ0MFxtYXJncjE0NDBcbWFyZ3QxNDQwXG1hcmdiMTQ0MFxndXR0ZXIwXGx0cnNlY3Q=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XHBhciB7XGxpc3R0ZXh0XHBhcmRccGxhaW5cbHRycGFyIFxydGxjaFxmY3MxIFxhYlxhZjJcYWZzMjAgXGx0cmNoXGZjczAgXGYzXGZzMjBcbGFuZzIwNTdcbGFuZ2ZlMjA1N1xsYW5nbnAyMDU3XGxhbmdmZW5wMjA1N1xpbnNyc2lkMTMwNTA3MjJcY2hhcnJzaWQxMzA1MDcyMiBcbG9jaFxhZjNcZGJjaFxhZjBcaGljaFxmMyBcJ2I3XHRhYn19XHBhcmQgXGx0cnBhcg==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XHBhciB9XHBhcmQgXGx0cnBhclxxYyBcbGkwXHJpMFx3aWRjdGxwYXJcd3JhcGRlZmF1bHRcYXNwYWxwaGFcYXNwbnVtXGZhYXV0b1xhZGp1c3RyaWdodFxyaW4wXGxpbjBcaXRhcDBccGFyYXJzaWQxMzA1MDcyMiB7XHJ0bGNoXGZjczEgXGFmMlxhZnMxNSBcbHRyY2hcZmNzMCBcZjJcZnMxNVxsYW5nMjA1N1xsYW5nZmUyMDU3XGxhbmdmZW5wMjA1N1xpbnNyc2lkMTMwNTA3MjJcY2hhcnJzaWQxMzA1MDcyMiAyMDA2MDIyMn17XHJ0bGNoXGZjczE=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XHBhciB9XHBhcmQgXGx0cnBhclxxbCBcbGkwXHJpMFxzYTE2MFxzbDI1OVxzbG11bHQxXHdpZGN0bHBhclx3cmFwZGVmYXVsdFxhc3BhbHBoYVxhc3BudW1cZmFhdXRvXGFkanVzdHJpZ2h0XHJpbjBcbGluMFxpdGFwMCB7XHJ0bGNoXGZjczEgXGFmMCBcbHRyY2hcZmNzMCBcaW5zcnNpZDE2MDY3MDUx","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XHBhciB9XHBhcmQgXGx0cnBhclxxbCBcbGkwXHJpMFxzYjEwMFxzYTI0MFxzYmF1dG8xXHdpZGN0bHBhclx3cmFwZGVmYXVsdFxhc3BhbHBoYVxhc3BudW1cZmFhdXRvXGFkanVzdHJpZ2h0XHJpbjBcbGluMFxpdGFwMFxwYXJhcnNpZDEzMDUwNzIyIHtccnRsY2hcZmNzMSBcYWYyXGFmczIwIFxsdHJjaFxmY3MwIFxmMlxmczIwXGxhbmcyMDU3XGxhbmdmZTIwNTdcbGFuZ2ZlbnAyMDU3XGluc3JzaWQxMzA1MDcyMlxjaGFycnNpZDEzMDUwNzIy","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XHBhciB9XHBhcmQgXGx0cnBhclxxbCBcbGkwXHJpMFx3aWRjdGxwYXJcd3JhcGRlZmF1bHRcYXNwYWxwaGFcYXNwbnVtXGZhYXV0b1xhZGp1c3RyaWdodFxyaW4wXGxpbjBcaXRhcDBccGFyYXJzaWQxMzA1MDcyMiB7XHJ0bGNoXGZjczEgXGFmMlxhZnMyMCBcbHRyY2hcZmNzMCBcZjJcZnMyMFxsYW5nMjA1N1xsYW5nZmUyMDU3XGxhbmdmZW5wMjA1N1xpbnNyc2lkMTMwNTA3MjJcY2hhcnJzaWQxMzA1MDcyMiBcbGluZQ==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XHBhciB9e1wqXHRoZW1lZGF0YSA1MDRiMDMwNDE0MDAwNjAwMDgwMDAwMDAyMTAwZTlkZTBmYmZmZjAwMDAwMDFjMDIwMDAwMTMwMDAwMDA1YjQzNmY2ZTc0NjU2ZTc0NWY1NDc5NzA2NTczNWQyZTc4NmQ2Y2FjOTFjYjRlYzMzMDEwNDVmNzQ4ZmM4M2U1MmQ0YQ==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XHBubGNsdHJccG5zdGFydDFccG5pbmRlbnQ3MjBccG5oYW5nIHtccG50eHRiICh9e1xwbnR4dGEgKX19e1wqXHBuc2VjbHZsN1xwbmxjcm1ccG5zdGFydDFccG5pbmRlbnQ3MjBccG5oYW5nIHtccG50eHRiICh9e1xwbnR4dGEgKX19e1wqXHBuc2VjbHZsOFxwbmxjbHRyXHBuc3RhcnQxXHBuaW5kZW50NzIwXHBuaGFuZyB7XHBudHh0YiAofXtccG50eHRhICl9fXtcKlxwbnNlY2x2bDlccG5sY3JtXHBuc3RhcnQxXHBuaW5kZW50NzIwXHBuaGFuZw==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XHBudWNsdHJccG5zdGFydDFccG5pbmRlbnQ3MjBccG5oYW5nIHtccG50eHRhIC59fXtcKlxwbnNlY2x2bDNccG5kZWNccG5zdGFydDFccG5pbmRlbnQ3MjBccG5oYW5nIHtccG50eHRhIC59fXtcKlxwbnNlY2x2bDRccG5sY2x0clxwbnN0YXJ0MVxwbmluZGVudDcyMFxwbmhhbmcge1xwbnR4dGEgKX19e1wqXHBuc2VjbHZsNVxwbmRlY1xwbnN0YXJ0MVxwbmluZGVudDcyMFxwbmhhbmcge1xwbnR4dGIgKH17XHBudHh0YSApfX17XCpccG5zZWNsdmw2","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XHFsIFxmaS0zNjBcbGk3MjBccmkwXHNiMTAwXHNhMTAwXHNiYXV0bzFcc2FhdXRvMVx3aWRjdGxwYXJcamNsaXN0dGFiXHR4NzIwXHdyYXBkZWZhdWx0XGFzcGFscGhhXGFzcG51bVxmYWF1dG9cbHMxXGFkanVzdHJpZ2h0XHJpbjBcbGluNzIwXGl0YXAwXHBhcmFyc2lkMTMwNTA3MjIge1xydGxjaFxmY3MxIFxhYlxhZjJcYWZzMjAgXGx0cmNoXGZjczA=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XHJlZDI1NVxncmVlbjI1NVxibHVlMjU1O1xyZWQwXGdyZWVuMFxibHVlMTI4O1xyZWQwXGdyZWVuMTI4XGJsdWUxMjg7XHJlZDBcZ3JlZW4xMjhcYmx1ZTA7XHJlZDEyOFxncmVlbjBcYmx1ZTEyODtccmVkMTI4XGdyZWVuMFxibHVlMDtccmVkMTI4XGdyZWVuMTI4XGJsdWUwO1xyZWQxMjhcZ3JlZW4xMjhcYmx1ZTEyODtccmVkMTkyXGdyZWVuMTkyXGJsdWUxOTI7fXtcKlxkZWZjaHA=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XFJQQyBDb250cm9sXENvbnNvbGVMUEMtMHgwMDAwMDAwMDAwMDAwQzZDLS0xNDA3Mzg3NjIxLTIyNzkwMjYxODg1MTEzNjEwMS01NDk5ODk2MTI4Mjc0NTA1MzktMTExODAwMjk2OC01NTQ2MjA5MTI4NjkwODI0Njg=","type":"Unicode","source":"Runtime Data","process":"bcs.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XHJ0bGNoXGZjczEgXGFiXGFmMlxhZnMyNCBcbHRyY2hcZmNzMCBcYlxmMlxmczI0XGxhbmcyMDU3XGxhbmdmZTIwNTdcbGFuZ2ZlbnAyMDU3XGluc3JzaWQxMzA1MDcyMlxjaGFycnNpZDEzMDUwNzIyIFNPRlRXQVJFIFBST0RVQ1QgTElDRU5TRSBBR1JFRU1FTlR9e1xydGxjaFxmY3MxIFxhZjJcYWZzMjAgXGx0cmNoXGZjczA=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XHJ0bGNoXGZjczEgXGFmMlxhZnMyMCBcbHRyY2hcZmNzMCBcZjJcZnMyMCBcc2Jhc2Vkb24xMCBcc3NlbWloaWRkZW4gXHN1bmhpZGV1c2VkIFxzdHlyc2lkMTMwNTA3MjIgSFRNTCBUeXBld3JpdGVyO317XHMxNlxxbCBcbGkwXHJpMFxzYjEwMFxzYTEwMFxzYmF1dG8xXHNhYXV0bzFcd2lkY3RscGFyXHdyYXBkZWZhdWx0XGFzcGFscGhhXGFzcG51bVxmYWF1dG9cYWRqdXN0cmlnaHRccmluMFxsaW4wXGl0YXAwIFxydGxjaFxmY3Mx","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XFNlc3Npb25zXDFcV2luZG93c1xBcGlQb3J0","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XHNzZW1paGlkZGVuIFxzdW5oaWRldXNlZCBcc3ByaW9yaXR5MSBEZWZhdWx0IFBhcmFncmFwaCBGb250O317XCo=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XFRoZW1lQXBpUG9ydA==","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XHRzMTFcdHNyb3dkXHRyZnRzV2lkdGhCM1x0cnBhZGRsMTA4XHRycGFkZHIxMDhcdHJwYWRkZmwzXHRycGFkZGZ0M1x0cnBhZGRmYjNcdHJwYWRkZnIzXHRyY2JwYXQxXHRyY2ZwYXQxXHRibGluZDBcdGJsaW5kdHlwZTNcdHN2ZXJ0YWx0XHRzYnJkcnRcdHNicmRybFx0c2JyZHJiXHRzYnJkcnJcdHNicmRyZGdsXHRzYnJkcmRnclx0c2JyZHJoXHRzYnJkcnYgXHFsIFxsaTBccmkwXHNhMTYwXHNsMjU5XHNsbXVsdDE=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XHdpZGN0bHBhclx3cmFwZGVmYXVsdFxhc3BhbHBoYVxhc3BudW1cZmFhdXRvXGFkanVzdHJpZ2h0XHJpbjBcbGluMFxpdGFwMCBccnRsY2hcZmNzMSBcYWYwXGFmczIyXGFsYW5nMTAyNSBcbHRyY2hcZmNzMCBcZjMxNTA2XGZzMjJcbGFuZzIwNTdcbGFuZ2ZlMTAzM1xjZ3JpZFxsYW5nbnAyMDU3XGxhbmdmZW5wMTAzMyBcc25leHQwIFxzcWZvcm1hdCBcc3ByaW9yaXR5MCBOb3JtYWw7fXtcKlxjczEwIFxhZGRpdGl2ZQ==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XHdpZGN0bHBhclx3cmFwZGVmYXVsdFxhc3BhbHBoYVxhc3BudW1cZmFhdXRvXGFkanVzdHJpZ2h0XHJpbjBcbGluMFxpdGFwMCBccnRsY2hcZmNzMSBcYWYzMTUwNlxhZnMyMlxhbGFuZzEwMjUgXGx0cmNoXGZjczAgXGYzMTUwNlxmczIyXGxhbmcyMDU3XGxhbmdmZTEwMzNcY2dyaWRcbGFuZ25wMjA1N1xsYW5nZmVucDEwMzMgXHNuZXh0MTEgXHNzZW1paGlkZGVuIFxzdW5oaWRldXNlZCBOb3JtYWwgVGFibGU7fXtcKlxjczE1IFxhZGRpdGl2ZQ==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XHdpZG93Y3RybFxmdG5ialxhZW5kZG9jXHRyYWNrbW92ZXMwXHRyYWNrZm9ybWF0dGluZzFcZG9ub3RlbWJlZHN5c2ZvbnQxXHJlbHlvbnZtbDBcZG9ub3RlbWJlZGxpbmdkYXRhMFxncmZkb2NldmVudHMwXHZhbGlkYXRleG1sMVxzaG93cGxhY2Vob2xkdGV4dDBcaWdub3JlbWl4ZWRjb250ZW50MFxzYXZlaW52YWxpZHhtbDBcc2hvd3htbGVycm9yczFcbm94bGF0dG95ZW4=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XFdpbmRvd3NcQXBpUG9ydA==","type":"Unicode","source":"Runtime Data","process":"bcs.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"X19jcnRfc3RydG94OjpmbG9hdGluZ19wb2ludF92YWx1ZTo6YXNfZG91Ymxl","type":"Unicode","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"X19jcnRfc3RydG94OjpmbG9hdGluZ19wb2ludF92YWx1ZTo6YXNfZmxvYXQ=","type":"Unicode","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"X09QRU5TU0xfaXNzZXJ2aWNl","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YFw/P1xWb2x1bWV7ZTQ3ZjRmNDMtZDg2My0xMWU3LTlkOGYtODA2ZTZmNmU2OTYzfQ==","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"YFw/P1xWb2x1bWV7ZTQ3ZjRmNDQtZDg2My0xMWU3LTlkOGYtODA2ZTZmNmU2OTYzfQ==","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"YFw/P1xWb2x1bWV7ZTQ3ZjRmNDctZDg2My0xMWU3LTlkOGYtODA2ZTZmNmU2OTYzfQ==","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"YGxvY2FsIHN0YXRpYyBndWFyZCc=","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YGxvY2FsIHN0YXRpYyB0aHJlYWQgZ3VhcmQn","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YGxvY2FsIHZmdGFibGUgY29uc3RydWN0b3IgY2xvc3VyZSc=","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YGxvY2FsIHZmdGFibGUn","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YHspWHtBeyg2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"QSBmaWxlIG5lZWRlZCBmb3IgdGhlIHRlc3QgY291bGRuJ3QgYmUgcmV0cmlldmVkLiBQbGVhc2UgY29udGFjdCB0aGUgdGVzdCBwcm92aWRlciBhbmQgcmVwb3J0IHRoZSBpc3N1ZS4=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"QUNNIGhhcyBiZWVuIGRldGVjdGVkIGFuZCBTZW5kUXVhbGl0eVRlc3RSZXBvcnQgaGFzIGJlZW4gdXNlZCB0byBzdWJtaXQgcmVwb3J0","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"QUNNIGhhcyBOT1QgYmVlbiBkZXRlY3RlZCBhbmQgU2VuZFNwZWVkVGVzdFJlcG9ydCBoYXMgYmVlbiB1c2VkIHRvIHN1Ym1pdCByZXBvcnQ=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"QWRkcmVzc0ZhbWlseQ==","type":"Unicode","source":"Runtime Data","process":"NetQCheckHTML5Agent.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"YWlLZXlBbGc9MHg=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"QUxMOiFDT01QTEVNRU5UT0ZERUZBVUxUOiFlTlVMTA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YW5kIHNvdXJjZSBmaWxlcyB3aGVyZSBwcm92aWRlZH17XHJ0bGNoXGZjczEgXGFiXGFmMlxhZnMyMCBcbHRyY2hcZmNzMCBcYlxmMlxmczIwXGxhbmcyMDU3XGxhbmdmZTIwNTdcbGFuZ2ZlbnAyMDU3XGluc3JzaWQxMzA1MDcyMlxjaGFycnNpZDEzMDUwNzIyIDp9e1xydGxjaFxmY3MxIFxhZjJcYWZzMjAgXGx0cmNoXGZjczA=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"QU5ZIFBSSVZBVEUgS0VZ","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"QVBJIHZlcnNpb24gaXM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXBpLW1zLXdpbi1hcHBtb2RlbC1ydW50aW1lLWwxLTEtMQ==","type":"Unicode","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXBpLW1zLXdpbi1jb3JlLWZpbGUtbDItMS0x","type":"Unicode","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXBwbGljYXRpb24gdmVyaWZpY2F0aW9uIGZhaWx1cmU=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"QXBwVXBkYXRlclRocmVhZCBydW5uaW5nQ3VycmVudCB2ZXJzaW9uIG9mIGFwcCBpcyA1LjQ0","type":"Ansi","source":"Runtime Data","process":"NetQCheckHTML5Agent.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"QXBwVXBkYXRlclRocmVhZCBydW5uaW5nQ3VycmVudCB2ZXJzaW9uIG9mIGFwcCBpcyA1LjQ0Q2hlY2tpbmcgdmVyc2lvbiBvbiBzZXJ2ZXIuIHVwZGF0ZWJjcy52aXN1YWx3YXJlLmNvbS9hcHB1cGRhdGVzL05ldFFDaGVja0hUTUw1QWdlbnQvd2luZG93cy92ZXJzaW9uLnR4dEh0dHBHZXQgcmV0dXJuZWQgMjAwLiBWZXJzaW9uIG9uIHNlcnZlciBpcyA1LjQ0","type":"Ansi","source":"Dropped File","process":null,"filename":"AppUpdaterLog.txt","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogIShtZXRoLT5leHRfZmxhZ3MgJiBTU0xfRVhUX0ZMQUdfU0VOVCk=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogIWV4cGVjdGVkX2xlbiB8fCBzLT5zMy0+cHJldmlvdXNfY2xpZW50X2ZpbmlzaGVkX2xlbg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogIWV4cGVjdGVkX2xlbiB8fCBzLT5zMy0+cHJldmlvdXNfc2VydmVyX2ZpbmlzaGVkX2xlbg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogKChsb25nKW1zZ19oZHItPm1zZ19sZW4pID4gMA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogKCpjaG9pY2UpLT51LmFzSWRzT3JSYW5nZXMgPT0gTlVMTA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogKCpjaG9pY2UpLT51LmluaGVyaXQgPT0gTlVMTA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogKih1bnNpZ25lZCBpbnQgKilsb2NrID09IDE=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogKmN1cnJsZW4gPD0gKm1heGxlbg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogKnNidWZmZXIgIT0gTlVMTA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogKnNidWZmZXIgIT0gTlVMTCB8fCBidWZmZXIgIT0gTlVMTA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogMA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogYW9yICE9IE5VTEwgJiYgbWluICE9IE5VTEwgJiYgbWF4ICE9IE5VTEw=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogYW9yLT51LmFkZHJlc3NSYW5nZSA9PSBOVUxM","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogQVNJZGVudGlmaWVyQ2hvaWNlX2lzX2Nhbm9uaWNhbChjaG9pY2Up","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogYiA8PSBzaXplb2YgY3R4LT5idWY=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogYiA8PSBzaXplb2YgY3R4LT5maW5hbA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogYmwgPD0gKGludClzaXplb2YoY3R4LT5idWYp","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogY2hhaW4gIT0gTlVMTCAmJiBza19YNTA5X251bShjaGFpbikgPiAw","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogY2h1bmsgPj0gMA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogY3R4ICE9IE5VTEwgfHwgZXh0ICE9IE5VTEw=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogY3R4ID09IE5VTEwgfHwgY3R4LT52ZXJpZnlfY2IgIT0gTlVMTA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogY3R4LT5idWZfbGVuIDw9IChpbnQpc2l6ZW9mKGN0eC0+YnVmKQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogY3R4LT5idWZfbGVuID49IGN0eC0+YnVmX29mZg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogY3R4LT5idWZfb2ZmICsgaSA8IChpbnQpc2l6ZW9mKGN0eC0+YnVmKQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogY3R4LT5idWZfb2ZmIDwgKGludClzaXplb2YoY3R4LT5idWYp","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogY3R4LT5idWZfb2ZmIDw9IChpbnQpc2l6ZW9mKGN0eC0+YnVmKQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogY3R4LT5idWZsZW4gPD0gY3R4LT5idWZzaXpl","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogY3R4LT5jaXBoZXItPmJsb2NrX3NpemUgPT0gMSB8fCBjdHgtPmNpcGhlci0+YmxvY2tfc2l6ZSA9PSA4IHx8IGN0eC0+Y2lwaGVyLT5ibG9ja19zaXplID09IDE2","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogY3R4LT5kaWdlc3QtPm1kX3NpemUgPD0gRVZQX01BWF9NRF9TSVpF","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogY3R4LT5sZW5ndGggPD0gKGludClzaXplb2YoY3R4LT5lbmNfZGF0YSk=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogY3R4LT5udW1fdW50cnVzdGVkIDw9IG51bQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogY3R4LT50bXBfbGVuIDw9IDM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogZGF0YV9wbHVzX21hY19wbHVzX3BhZGRpbmdfc2l6ZSA8IDEwMjQgKiAxMDI0","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogZWNrZXktPmdyb3VwLT5tZXRoLT5rZXlnZW4gIT0gTlVMTA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogRVZQX0NJUEhFUl9DVFhfaXZfbGVuZ3RoKGN0eCkgPD0gKGludClzaXplb2YoY3R4LT5pdik=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogRVZQX0NJUEhFUl9pdl9sZW5ndGgoZW5jKSA8PSAoaW50KXNpemVvZihpdik=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogZi0+YWRkcmVzc0ZhbWlseS0+ZGF0YSAhPSBOVUxM","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogZ3JvdXAtPm1ldGgtPmdyb3VwX29yZGVyX2JpdHMgIT0gTlVMTA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogaSAhPSAw","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogaSA8PSBFVlBfTUFYX01EX1NJWkU=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogaSA8PSBu","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogaXRlbSAhPSBOVUxM","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogaiA8PSAoaW50KXNpemVvZihjdHgtPmtleSk=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogaiA8PSBzaXplb2YoYy0+aXYp","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDoga2V5bGVuIDw9IHNpemVvZiBrZXk=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogbCA8PSBzaXplb2YoYy0+aXYp","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogbCA8PSBzaXplb2YoaXYp","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogbGVuIDw9IFNTTDNfUlRfTUFYX1BMQUlOX0xFTkdUSA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogbGVuID09ICh1bnNpZ25lZCBpbnQpcmV0","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogbQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogbWFjX3NlY3JldF9sZW5ndGggPD0gc2l6ZW9mKGhtYWNfcGFkKQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogbWFjX3NpemUgPD0gRVZQX01BWF9NRF9TSVpF","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogbWRfc2l6ZSA8PSBFVlBfTUFYX01EX1NJWkU=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogbWVtY21wKG1pbiwgbWF4LCBsZW5ndGgpIDw9IDA=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogbiA+PSAw","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogbml2IDw9IEVWUF9NQVhfSVZfTEVOR1RI","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogbmtleSA8PSBFVlBfTUFYX0tFWV9MRU5HVEg=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogbnVtID09IDEgJiYgY3R4LT5udW1fdW50cnVzdGVkID09IG51bQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogbnVtID09IGN0eC0+bnVtX3VudHJ1c3RlZA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogbnVtID4gaSAmJiBpID4gMCAmJiBzcyA9PSAw","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogcmVjLT5vcmlnX2xlbiA+PSBtZF9zaXpl","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogcy0+ZDEtPndfbXNnX2hkci5tc2dfbGVuICsgKChzLT52ZXJzaW9uID09IERUTFMxX0JBRF9WRVIpID8gMyA6IERUTFMxX0NDU19IRUFERVJfTEVOR1RIKSA9PSAodW5zaWduZWQgaW50KXMtPmluaXRfbnVt","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogcy0+ZDEtPndfbXNnX2hkci5tc2dfbGVuICsgRFRMUzFfSE1fSEVBREVSX0xFTkdUSCA9PSAodW5zaWduZWQgaW50KXMtPmluaXRfbnVt","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogcy0+aW5pdF9udW0gPT0gKGludClzLT5kMS0+d19tc2dfaGRyLm1zZ19sZW4gKyBEVExTMV9ITV9IRUFERVJfTEVOR1RI","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogcy0+aW5pdF9vZmYgPT0gMA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogcy0+c2lkX2N0eF9sZW5ndGggPD0gc2l6ZW9mIHMtPnNpZF9jdHg=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogc3RybGVuKG9ianN0cikgKyAyMyArIDIgKiBFVlBfQ0lQSEVSX2l2X2xlbmd0aChlbmMpICsgMTMgPD0gc2l6ZW9mIGJ1Zg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogdnYgPT0gTlVMTA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogeCAhPSBOVUxM","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogWDUwOXYzX2FkZHJfaXNfY2Fub25pY2FsKGFkZHIp","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"QXVkaXQgUG9zdGVk","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXV0aG9yaXR5IGFuZCBzdWJqZWN0IGtleSBpZGVudGlmaWVyIG1pc21hdGNo","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"QXdhaXRpbmcgdXBsb2FkIHJlcG9ydC4=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Yi9bbnMia18oVSov","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"YmFkIGxvY2FsZSBuYW1l","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"QmFzZSBDbGFzcyBEZXNjcmlwdG9yIGF0ICg=","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"QkNTIFYlZC4lZE9wdGlvbnM6ICAgICAgIC1wID0gU2V0cyBXZWJzb2NrZXQgc2VydmVyIHBvcnQgKGRlZmF1bHQ9JWQp","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F51000.00000020.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"QkNTIFZlcnNpb24gJWkuJWk=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"QkNTIFZlcnNpb24gNS40NA==","type":"Ansi","source":"Runtime Data","process":"NetQCheckHTML5Agent.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"QkNTIFZlcnNpb246","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YmV0d2VlbiB5b3UgKGFuIGluZGl2aWR1YWwgb3IgYW4gZW50aXR5KSBhbmQgVmlzdWFsd2FyZSBJbmMuIGZvciBzb21lIG9yIGFsbCBvZiB0aGUgc29mdHdhcmUgcHJvZHVjdHMgaWRlbnRpZmllZCBiZWxvdyAoZWFjaCwgYSBTT0ZUV0FSRSBQUk9EVUNUKSwgd2hpY2ggaW5jbHVkZXMgY29tcHV0ZXIgc29mdHdhcmUgYW5kIGVsZWN0cm9uaWMgZG9jdW1lbnRhdGlvbi4gWW91IHNob3VsZCBjYXJlZnVsbHkgcmVhZCB0aGUgZm9sbG93aW5nIHRlcm1z","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"QmluZCBmYWlsZWQ=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YmluZF9lbmdpbmU=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"QmluZGluZyB0byBsb2NhbCBlbmRwb2ludCAlcw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"QnVmZmVyaW5nIG9yIGRldmljZSBsaW1pdCBkZXRlY3RlZC4gRWxhcHNlZCBzdHJlYW0gdGltZSAoJWRtcykgZXhjZWVkcyBtYXggc3RyZWFtIHRpbWUgKCVkbXMp","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"QzpcYmNzX3NlcnZpY2UuZXhl","type":"Ansi","source":"Hybrid Analysis","process":"bcs_service.exe","filename":"00034508-00002748.00000001.35008.00401000.00000020.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JVBST0dSQU1GSUxFUyVcKHg4NilcVmlzdWFsd2FyZSBCQ1M=","type":"Ansi","source":"Hybrid Analysis","process":"bcs_service.exe","filename":"00034508-00002748.00000001.35008.00401000.00000020.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JVBST0dSQU1GSUxFUyVcKHg4NilcVmlzdWFsd2FyZSBCQ1NcYmNzLmV4ZQ==","type":"Ansi","source":"Hybrid Analysis","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01311000.00000020.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"QzpcUHJvZ3JhbV9GaWxlc18oeDg2KVxWaXN1YWx3YXJlX0JDU1xWaXN1YWx3YXJlX2FwcGxpY2F0aW9uX21hbmFnZXJfLV9OZXRRQ2hlY2tIVE1MNUFnZW50LmV4ZS5hcmc=","type":"Ansi","source":"Runtime Data","process":"bcs.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"JVRFTVAlXA==","type":"Ansi","source":"Hybrid Analysis","process":"bcs_service.exe","filename":"00034508-00002748.00000001.35008.00401000.00000020.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JVRFTVAlXG5zeDQyRUUudG1w","type":"Ansi","source":"Hybrid Analysis","process":"bcs_service.exe","filename":"00034508-00002748.00000000.34829.00401000.00000020.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JVRFTVAlXG5zeDQyRUUudG1wXA==","type":"Ansi","source":"Hybrid Analysis","process":"bcs_service.exe","filename":"00034508-00002748.00000001.35008.00401000.00000020.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JVRFTVAlXG5zeDQyRUUudG1wXCouKg==","type":"Ansi","source":"Hybrid Analysis","process":"bcs_service.exe","filename":"00034508-00002748.00000001.35008.00401000.00000020.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JVRFTVAlXG5zeDQyRUUudG1wXG5zRXhlYy5kbGw=","type":"Ansi","source":"Hybrid Analysis","process":"bcs_service.exe","filename":"00034508-00002748.00000001.35008.00401000.00000020.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JVVTRVJQUk9GSUxFJVxEb2N1bWVudHNcVmlzdWFsd2FyZVxOZXRRQ2hlY2tcV2luZG93c0Rlc2t0b3BcTlFDQXBwTWdyXFJlbGVhc2VcTlFDQXBwTWdyLnBkYg==","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q0EgY2VydGlmaWNhdGUga2V5IHRvbyB3ZWFr","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q2FsbCB0byBDcmVhdGVXaW5kb3cgZmFpbGVkIQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F51000.00000020.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q2FsbCB0byBSZWdpc3RlckNsYXNzRXggZmFpbGVkIQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F51000.00000020.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q2Fubm90IG1lYXN1cmUgYmFuZHdpZHRoIC0gdGhlIHNlcnZlciBkb2VzIG5vdCBzdXBwb3J0IHRlc3RpbmcgdGhpcyBmYXN0","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q2Fubm90IHJlZGlyZWN0IHRvICVzLiBIVFRQUyBub3Qgc3VwcG9ydGVk","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q2FwYWNpdHkgcHJlLXRlc3QgZmFpbGVk","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y2FwaV9jZXJ0X2dldF9mbmFtZQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y2FwaV9nZXRfa2V5LCBjb250bmFtZT0lcywgcHJvdm5hbWU9JXMsIHR5cGU9JWQ=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y2FwaV9nZXRfa2V5LCBjb250bmFtZT0lcywgUlNBX0FFU19DU1A=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y2FwaV9nZXRfcHJvdm5hbWUsIGluZGV4PSVk","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y2FwaV9nZXRfcHJvdm5hbWUsIHJldHVybmVkIG5hbWU9JXMsIHR5cGU9JWQ=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y2VydGlmaWNhdGUgc2lnbmF0dXJlIGZhaWx1cmU=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q2VydGlmaWNhdGUgVHJhbnNwYXJlbmN5IHJlcXVpcmVkLCBidXQgbm8gdmFsaWQgU0NUcyBmb3VuZA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q2hhbmdlU2VydmljZUNvbmZpZzJB","type":"Ansi","source":"Dropped File","process":null,"filename":"SimpleSC.dll.328895541","compromised":null,"detection_total":null,"total":null},{"value":"Q2hlY2tpbmcgdmVyc2lvbiBvbiBzZXJ2ZXIuIHVwZGF0ZWJjcy52aXN1YWx3YXJlLmNvbS9hcHB1cGRhdGVzL05ldFFDaGVja0hUTUw1QWdlbnQvd2luZG93cy92ZXJzaW9uLnR4dA==","type":"Ansi","source":"Runtime Data","process":"NetQCheckHTML5Agent.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q2xhc3MgSGllcmFyY2h5IERlc2NyaXB0b3In","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q2xvc2VTZXJ2aWNlSGFuZGxl","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q29DcmVhdGVJbnN0YW5jZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q29tK0VuYWJsZWQ=","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q09NQ1RMMzIuZGxs","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q29tbWFuZHM6IHEgPSBxdWl0","type":"Ansi","source":"Hybrid Analysis","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01311000.00000020.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q29tbWFuZHM6IHEgPSBxdWl0IHMgPSBzdXBwb3J0IGIgPSBiaW5kIGVycm9yIGhlbHA=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q29tcGFyZUZpbGVUaW1l","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q29tcGFyZVN0cmluZ0V4","type":"Ansi","source":"Hybrid Analysis","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01311000.00000020.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q29tcGFyZVN0cmluZ1c=","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q29tcGF0RGxs","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29tcGxldGUgT2JqZWN0IExvY2F0b3In","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q29tcHV0ZXJOYW1l","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Y29tcHV0ZXJuYW1l","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q29ubmVjdCBmYWlsZWQgWyVzOiVkXQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q29ubmVjdGlvbiBjbG9zZWQgYnkgcmVtb3Rl","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q29ubmVjdGlvbiB0eXBlOi0tLS0tLS0tLS0tLS0tLS0tLS0tLS0gJXM=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q29ubmVjdGlvbjogS2VlcC1BbGl2ZQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q29ubmVjdGlvbjogVXBncmFkZQ==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q29udGFpbmVyIE5hbWU6ICVzLCBLZXkgVHlwZSAlbHU=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q29udGludWVTZXJ2aWNl","type":"Ansi","source":"Dropped File","process":null,"filename":"SimpleSC.dll.328895541","compromised":null,"detection_total":null,"total":null},{"value":"Q29udHJvbCBQYW5lbFxEZXNrdG9wXFJlc291cmNlTG9jYWxl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q29udHJvbFNlcnZpY2U=","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q29yRXhpdFByb2Nlc3M=","type":"Ansi","source":"Hybrid Analysis","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01311000.00000020.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlUGlwZQ==","type":"Ansi","source":"Dropped File","process":null,"filename":"nsExec.dll.2021186361","compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlUHJvY2Vzc0E=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlU2VydmljZUE=","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q1JMIHBhdGggdmFsaWRhdGlvbiBlcnJvcg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q1JMIHNpZ25hdHVyZSBmYWlsdXJl","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGFzbjFcYXNuX21zdGJsLmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGFzbjFccDVfc2NyeXB0LmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGFzbjFcdF9wa2V5LmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGFzbjFceF9pbmZvLmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGFzbjFceF9wa2V5LmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGNvbXBcY29tcF9saWIuYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGN0XGN0X3NjdC5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGN0XGN0X3NjdF9jdHguYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGRoXGRoX2tleS5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGVjXGVjX2tleS5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGVuZ2luZVxlbmdfcGtleS5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGV2cFxldnBfa2V5LmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGV2cFxldnBfcGtleS5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGV2cFxzY3J5cHQuYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXHBlbVxwZW1faW5mby5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXHBlbVxwZW1fcGtleS5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXHBrY3MxMlxwMTJfa2V5LmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXHg1MDlceF9wdWJrZXkuYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXHg1MDl2M1x2M19ha2V5LmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXHg1MDl2M1x2M19pbmZvLmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXHg1MDl2M1x2M19za2V5LmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q3VycmVudCBWZXJzaW9uIE5vdCBDb21wYXRpYmxl","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q3VycmVudCB2ZXJzaW9uIG9mIGFwcCBpcyA1LjQ0","type":"Ansi","source":"Dropped File","process":null,"filename":"AppUpdaterLog.txt","compromised":null,"detection_total":null,"total":null},{"value":"Q3ljbGUgJWRBdHRlbXB0IHRvIHN0cmVhbSBiYW5kd2lkdGg6ICV1YnBzICglZCBwa3RzL3NlYywgJWQgYnl0ZXMvcGt0KS4uLg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"ZCB0bywgaW1wbGllZCB3YXJyYW50aWVzIG9mIG1lcmNoYW50YWJpbGl0eSwgZml0bmVzcyBmb3IgYSBwYXJ0aWN1bGFyIHB1cnBvc2UsIGFuZCBub25pbmZyaW5nZW1lbnQuIFxsaW5lIFxsaW5lIH17XHJ0bGNoXGZjczEgXGFiXGFmMlxhZnMyMCBcbHRyY2hcZmNzMCBcYlxmMlxmczIwXGxhbmcyMDU3XGxhbmdmZTIwNTdcbGFuZ2ZlbnAyMDU3XGluc3JzaWQxMzA1MDcyMlxjaGFycnNpZDEzMDUwNzIy","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"ZDpcb3BlbnNvdXJjZVxvcGVuc3NsLTEuMS4wYlxzc2xccGFja2V0X2xvY2wuaA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RDpcb3BlbnNvdXJjZVxvcGVuc3NsLWRpc3QtMS4xLjBiLXZzMjAxNVxvcGVuc3NsLXg4Ni1zdGF0aWMtcmVsZWFzZS12czIwMTVcbGliXGVuZ2luZXMtMV8x","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"ZD0lLTJkIGhsPSVsZCBsPWluZg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RGF0YSBjb3VudCAlZCBpbiAldW1zICglZEticHMpLCB0b3RhbCAlZCglZEticHMp","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RGVjb2RlU2VydmljZUFyZ3M=","type":"Ansi","source":"Hybrid Analysis","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01310000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RGVjb2RlU2VydmljZUFyZ3MgT25JbnN0YWxs","type":"Ansi","source":"Runtime Data","process":"bcs.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"ZGVjb21waWxlLCBvciBkaXNhc3NlbWJsZSB0aGUgU09GVFdBUkUgUFJPRFVDVC4gKEMpIFlvdSBtYXkgbm90IHJlbnQgb3IgbGVhc2UgdGhlIFNPRlRXQVJFIFBST0RVQ1QuIChEKSBZb3UgbWF5IG5vdCBkaXN0cmlidXRlIGNvcGllcyBvZiB0aGUgYWN0aXZhdGVkIFNPRlRXQVJFIFBST0RVQ1Qgb3IgbGljZW5zZSBrZXlzIHRvIHRoaXJkIHBhcnRpZXMuIChFKSBZb3UgbWF5IG5vdCBleGNlZWQgdGhlIHNjb3BlIG9mIHlvdXIgbGljZW5zZWQgU09G","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"REVLLUluZm86","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RGVsZXRlU2VydmljZQ==","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RGVzY3JpcHRpb24=","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGVzdHJveWluZyBIdHRwU2VydmVyU2Vzc2lvbiBvbiBzb2NrZXQgJWQ=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"REggUHJpdmF0ZS1LZXk=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"REggUHVibGljLUtleQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"REhDUCBkaXNjb3ZlciBzZW50IC0gd2FpdGluZyBmb3Igb2ZmZXIuLi4=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"REhDUCB0ZXN0IGNvbXBsZXRl","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RGlzYWJsZUxvY2FsT3ZlcnJpZGU=","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"ZGxvY2tlZDAgdGFibGUgb2YgYXV0aG9yaXRpZXM7XGxzZHNlbWloaWRkZW4xIFxsc2R1bmhpZGV1c2VkMSBcbHNkbG9ja2VkMCBtYWNybztcbHNkc2VtaWhpZGRlbjEgXGxzZHVuaGlkZXVzZWQxIFxsc2Rsb2NrZWQwIHRvYSBoZWFkaW5nO1xsc2RzZW1paGlkZGVuMSBcbHNkdW5oaWRldXNlZDEgXGxzZGxvY2tlZDAgTGlzdDtcbHNkc2VtaWhpZGRlbjEgXGxzZHVuaGlkZXVzZWQxIFxsc2Rsb2NrZWQwIExpc3QgQnVsbGV0O1xsc2RzZW1paGlkZGVuMSBc","type":"Ansi","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RE5TIGxvb2t1cCBmYWlsZWQ=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"ZG93bmxvYWQucG9ydD0=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"ZSBldmVuIGlmIHZlcnNpb24gY2hlY2tpbmcgZmFpbHMgKGJvb2xlYW4p","type":"Ansi","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RSFEIVYhUSFFIUchTw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"ZSdzIGVudGlyZSBsaWFiaWxpdHkgYW5kIHlvdXIgZXhjbHVzaXZlIHJlbWVkeSB1bmRlciB0aGlzIEFncmVlbWVudCBzaGFsbCBub3QgZXhjZWVkIHlvdXIgcHVyY2hhc2UgcHJpY2UuIFxsaW5lIFxsaW5lIH17XHJ0bGNoXGZjczEgXGFiXGFmMlxhZnMyMCBcbHRyY2hcZmNzMCBcYlxmMlxmczIwXGxhbmcyMDU3XGxhbmdmZTIwNTdcbGFuZ2ZlbnAyMDU3XGluc3JzaWQxMzA1MDcyMlxjaGFycnNpZDEzMDUwNzIy","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"RUNESEUtRUNEU0EtQUVTMTI4LUdDTS1TSEEyNTY=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RUNESEUtRUNEU0EtQUVTMTI4LUdDTS1TSEEyNTY6RUNESEUtRUNEU0EtQUVTMjU2LUdDTS1TSEEzODQ=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RUNESEUtRUNEU0EtQUVTMjU2LUdDTS1TSEEzODQ=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RUNEU0E=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RWRpUGFydHlOYW1lOjx1bnN1cHBvcnRlZD4=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RUUgY2VydGlmaWNhdGUga2V5IHRvbyB3ZWFr","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RUluT3V0RXJyb3IsVEA=","type":"Ansi","source":"Dropped File","process":null,"filename":"SimpleSC.dll.328895541","compromised":null,"detection_total":null,"total":null},{"value":"RW1haWwgYWRkcmVzcyBtaXNtYXRjaA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RU5DUllQVEVEIFBSSVZBVEUgS0VZ","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RW51bVN5c3RlbUxvY2FsZXNFeA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RXJyb3IgJWQgZ2V0dGluZyBzb2NrZXQgYnVmZmVyIHNpemU=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RXJyb3IgJWQgZ2V0dGluZyBzb2NrZXQgZXJyb3I=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RXJyb3IgJWQgc2V0dGluZyBzb2NrZXQgYnVmZmVyIHNpemU=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RXJyb3IgYWNjZXNzaW5nIHRoZSBzcGVjaWZpZWQgZmlsZQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RXJyb3IgY29kZT0gMHg=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RXJyb3IgY3JlYXRpbmcgRGF0YU91dHB1dFN0cmVhbQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RXJyb3IgaW4gZW5jb2Rpbmc=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RXJyb3IgbGF1bmNoaW5nIGluc3RhbGxlcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"RXJyb3IgTG9n","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RXJyb3Igd3JpdGluZyB0ZW1wb3JhcnkgZmlsZS4gTWFrZSBzdXJlIHlvdXIgdGVtcCBmb2xkZXIgaXMgdmFsaWQu","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"ZXJyb3I6JTA4bFg6JXM6JXM6JXM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"ZXJzXEhBUFVCV1NcQXBwRGF0YVxMb2NhbFxUZW1wXG5zeDQyRUUudG1w","type":"Ansi","source":"Memory/File Scan","process":"bcs_service.exe","filename":"00034508-00002748.00000001.35008.00409000.00000004.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"ZXJzXEhBUFVCV1NcQXBwRGF0YVxMb2NhbFxUZW1wXG5zeDQyRUUudG1wXG5zRXhlYy5kbGw=","type":"Ansi","source":"Memory/File Scan","process":"bcs_service.exe","filename":"00034508-00002748.00000001.35008.00409000.00000004.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RXhlY1RvTG9n","type":"Ansi","source":"Dropped File","process":null,"filename":"nsExec.dll.2021186361","compromised":null,"detection_total":null,"total":null},{"value":"RXhlY1RvU3RhY2s=","type":"Ansi","source":"Dropped File","process":null,"filename":"nsExec.dll.2021186361","compromised":null,"detection_total":null,"total":null},{"value":"RXhpc3RzU2VydmljZQ==","type":"Ansi","source":"Dropped File","process":null,"filename":"SimpleSC.dll.328895541","compromised":null,"detection_total":null,"total":null},{"value":"RXhpdFByb2Nlc3M=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"RmFpbGVkIGdldHRpbmcgY29uZmlndXJhdGlvbiBvZiBzZXJ2ZXIgJyVzJw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RmFpbGVkIHRvIGFsbG9jYXRlIHJlc291cmNl","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RmFpbGVkIHRvIGFwcGx5IHVwZGF0ZQ==","type":"Ansi","source":"Hybrid Analysis","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01310000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RmFpbGVkIHRvIGJpbmQgdG8gbG9jYWwgcG9ydC9pbnRlcmZhY2U=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RmFpbGVkIHRvIGNhbGN1bGF0ZSBiYW5kd2lkdGg=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RmFpbGVkIHRvIGNoYW5nZSB0aW1lciByZXNvbHV0aW9u","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RmFpbGVkIHRvIGNvbm5lY3QgdG8gU0lQIHNvY2tldA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RmFpbGVkIHRvIGNyZWF0ZSBsaW5lIGJ1ZmZlcg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RmFpbGVkIHRvIGNyZWF0ZSBSZWNlaXZlZCBUaW1lcyBhcnJheQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RmFpbGVkIHRvIGNyZWF0ZSBTZW50IFRpbWVzIGFycmF5","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RmFpbGVkIHRvIGNyZWF0ZSBzb2NrZXQ=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RmFpbGVkIHRvIGNyZWF0ZSB0ZXN0IHRocmVhZA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RmFpbGVkIHRvIGNyZWF0ZSB1ZHAgc29ja2V0","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RmFpbGVkIHRvIGNyZWF0ZSBVRFAgc29ja2V0","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RmFpbGVkIHRvIGNyZWF0ZSBVRFAgc29ja2V0IGZvciBTSVAgdGVzdA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RmFpbGVkIHRvIGRvd25sb2FkZWQgcmVzdWx0cw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RmFpbGVkIHRvIGdldCBjb21wdXRlciBuYW1lLiBFcnJvciAldSBbJXNd","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RmFpbGVkIHRvIGdldCBzZXJ2ZXIgY29uZmln","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RmFpbGVkIHRvIGdldCBzZXJ2ZXIgY29uZmlnLg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RmFpbGVkIHRvIGdldCBzZXJ2ZXIgdGlja2V0Lg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RmFpbGVkIHRvIGdldCB1cGxvYWQgcmVzdWx0IHNldC4=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RmFpbGVkIHRvIGxvZyByZXBvcnQgc2VjdGlvbg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RmFpbGVkIHRvIG1lYXN1cmUgbGluZSBjYXBhY2l0eQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RmFpbGVkIHRvIG9idGFpbiBjYXBhY2l0eSB0ZXN0IHNlcnZlciBpbmZv","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RmFpbGVkIHRvIG9wZW4gY29uZmlndXJhdGlvbiBmaWxl","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RmFpbGVkIHRvIG9wZW4gU0NNYW5hZ2Vy","type":"Ansi","source":"Hybrid Analysis","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01311000.00000020.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RmFpbGVkIHRvIG9wZW4gc29ja2V0","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RmFpbGVkIHRvIHJlY2VpdmUgdXBsb2FkIHNwZWVkIHRpbWVzIFslZCBvZiAlZCByZWNlaXZlZF0=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"ZmFpbGVkIHRvIHJlc29sdmUgKA==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RmFpbGVkIHRvIHJlc29sdmUgbmFtZSAoZ2V0aG9zdGJ5bmFtZSgpKQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RmFpbGVkIHRvIHNlbmQgY29udGVudCBbJWQgb2YgJWRd","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RmFpbGVkIHRvIHNldCBicm9hZGNhc3Qgb3B0aW9u","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RmFpbGVkIHRvIHNldCBkZWZhdWx0IGNvbmZpZ3VyYXRpb24=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RmFpbGVkIHRvIHNldCByZXVzZSBhZGRyZXNzIG9wdGlvbg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RmFpbGVkIHRvIHNldCBzb2NrZXQgYnVmZmVyIHNpemU=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RmFpbGVkIHRvIHN0YXJ0ICVz","type":"Ansi","source":"Hybrid Analysis","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01311000.00000020.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RmFpbGVkIHRvIHN0YXJ0IHRoZSBUZXN0IGFnZW50","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RmFpbGVkIHRvIHRlcm1pbmF0ZSBwcm9jZXNzIFslZF0=","type":"Ansi","source":"Hybrid Analysis","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01311000.00000020.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RmF0YWwgRXJyb3IsIGFiYW5kb25pbmcgdGVzdA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RmluYWwgdGVzdCBmYWlsZWQgdG8gbWVhc3VyZSBiYW5kd2lkdGg=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"ZmluYWxyZXBvcnQ=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RmlyZXdhbGxUZXN0OiB0byBUQ1AgcG9ydCAlZA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RmlyZXdhbGxUZXN0OiB0byBVRFAgcG9ydCAlZA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RmlybXdhcmUgdmVyc2lvbjogJXMgKCVzKQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RmxzR2V0VmFsdWU=","type":"Ansi","source":"Hybrid Analysis","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01311000.00000020.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Zm9ybWF0IGVycm9yIGluIGNlcnRpZmljYXRlJ3Mgbm90QWZ0ZXIgZmllbGQ=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Zm9ybWF0IGVycm9yIGluIGNlcnRpZmljYXRlJ3Mgbm90QmVmb3JlIGZpZWxk","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Zm9ybWF0IGVycm9yIGluIENSTCdzIGxhc3RVcGRhdGUgZmllbGQ=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Zm9ybWF0IGVycm9yIGluIENSTCdzIG5leHRVcGRhdGUgZmllbGQ=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"ZywgY29weWluZywgb3Igb3RoZXJ3aXNlIHVzaW5nIHRoZSBTT0ZUV0FSRSBQUk9EVUNULCB5b3UgYXJlIGFncmVlaW5nIHRvIGJlIGJvdW5kIGJ5IHRoZSB0ZXJtcyBvZiB0aGlzIEFncmVlbWVudC4gSWYgeW91IGRvIG5vdCBhZ3JlZSB0byBhbGwgb2YgdGhlIHRlcm1zIG9mIHRoaXMgQWdyZWVtZW50LCB5b3UgYXJlIG5vdCBhdXRob3JpemVkIHRvIHVzZSB0aGUgU09GVFdBUkUgUFJPRFVDVC4gXGxpbmUgXGxpbmUgfXtccnRsY2hcZmNzMQ==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"R2VuZXJhbEVycm9y","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R0VUIC9hcHB1cGRhdGVzL05ldFFDaGVja0hUTUw1QWdlbnQvd2luZG93cy92ZXJzaW9uLnR4dCBIVFRQLzEuMUFjY2VwdDogKi8qQWNjZXB0LUxhbmd1YWdlOiBlbi11c1VzZXItQWdlbnQ6IE1vemlsbGEvNC4wSG9zdDogdXBkYXRlYmNzLnZpc3VhbHdhcmUuY29t","type":"Ansi","source":"PCAP Processing","process":null,"filename":"PCAP","compromised":null,"detection_total":null,"total":null},{"value":"R0VUIC9teXNwZWVkL3BsdWdpbi9yb3V0ZS9hcHBsZXQvcmVsb29rdXA/JmRldGFpbC5pcHM9","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0QWNjb3VudFR5cGU=","type":"Ansi","source":"Dropped File","process":null,"filename":"UserInfo.dll.2533488085","compromised":null,"detection_total":null,"total":null},{"value":"R2V0Q2xhc3NJbmZvQQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0Q2xpZW50UmVjdA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0Q29tbWFuZExpbmVB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0Q29tbWFuZExpbmVX","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0Q29uc29sZUNQ","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0Q29uc29sZU1vZGU=","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0Q1BJbmZv","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0Q3VycmVudFBhY2thZ2VJZA==","type":"Ansi","source":"Hybrid Analysis","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01311000.00000020.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0Q3VycmVudFByb2Nlc3M=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0Q3VycmVudFByb2Nlc3NJZA==","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0Q3VycmVudFRocmVhZA==","type":"Ansi","source":"Dropped File","process":null,"filename":"UserInfo.dll.2533488085","compromised":null,"detection_total":null,"total":null},{"value":"R2V0Q3VycmVudFRocmVhZElk","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RGF0ZUZvcm1hdEV4","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RGV2aWNlQ2Fwcw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RGlza0ZyZWVTcGFjZUE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RGlza0ZyZWVTcGFjZUV4QQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RGxnSXRlbQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RGxnSXRlbVRleHRB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RW52aXJvbm1lbnRTdHJpbmdzVw==","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RXJyb3JNZXNzYWdl","type":"Ansi","source":"Dropped File","process":null,"filename":"SimpleSC.dll.328895541","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RXhpdENvZGVQcm9jZXNz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RmlsZUF0dHJpYnV0ZXNB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RmlsZUluZm9ybWF0aW9uQnlIYW5kbGVFeA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RmlsZVNpemU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RmlsZVRocmVhZCB3aXRob3V0IFdlYnNvY2tldCBzZXNzaW9u","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RmlsZVR5cGU=","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RmlsZVZlcnNpb25JbmZvQQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RmlsZVZlcnNpb25JbmZvU2l6ZUE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RnVsbFBhdGhOYW1lQQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Z2V0aG9zdGJ5bmFtZTogZmFpbGVkIHRvIHJlc29sdmUgaXAgYWRkcmVzcyBmcm9tICclcyc=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0TGFzdEVycm9y","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0TG9jYWxlSW5mb0V4","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0TG9uZ1BhdGhOYW1lQQ==","type":"Ansi","source":"Dropped File","process":null,"filename":"SimpleSC.dll.328895541","compromised":null,"detection_total":null,"total":null},{"value":"R2V0TWVzc2FnZVBvcw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0TW9kdWxlRmlsZU5hbWVB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0TW9kdWxlSGFuZGxlQQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0TW9kdWxlSGFuZGxlRXhX","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0TW9kdWxlSGFuZGxlVw==","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0T0VNQ1A=","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0T3JpZ2luYWxBY2NvdW50VHlwZQ==","type":"Ansi","source":"Dropped File","process":null,"filename":"UserInfo.dll.2533488085","compromised":null,"detection_total":null,"total":null},{"value":"R2V0UHJpdmF0ZVByb2ZpbGVTdHJpbmdB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0UHJvY0FkZHJlc3M=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0UHJvY2Vzc0hlYXA=","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0UHJvY2Vzc1dpbmRvd1N0YXRpb24=","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0U2VydmljZUFyZ3NQYXRoOg==","type":"Ansi","source":"Runtime Data","process":"bcs.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"R2V0U2VydmljZUFyZ3NQYXRoOiBDOlxQcm9ncmFtX0ZpbGVzXyh4ODYpXFZpc3VhbHdhcmVfQkNTXFZpc3VhbHdhcmVfYXBwbGljYXRpb25fbWFuYWdlcl8tX05ldFFDaGVja0hUTUw1QWdlbnQuZXhlLmFyZw==","type":"Ansi","source":"Dropped File","process":null,"filename":"MgrLog.txt","compromised":null,"detection_total":null,"total":null},{"value":"R2V0U2VydmljZUFyZ3NQYXRoOiBDOlxQcm9ncmFtX0ZpbGVzXyh4ODYpXFZpc3VhbHdhcmVfQkNTXFZpc3VhbHdhcmVfYXBwbGljYXRpb25fbWFuYWdlcl8tX05ldFFDaGVja0hUTUw1QWdlbnQuZXhlLmFyZ0RlY29kZVNlcnZpY2VBcmdzIE9uSW5zdGFsbFNlcnZpY2UgTWFpbk5RQ0FwcE1ncjogUnVubmluZyAlUFJPR1JBTUZJTEVTJVwoeDg2KVxWaXN1YWx3YXJlIEJDU1xOZXRRQ2hlY2tIVE1MNUFnZW50LmV4ZUM6XFByb2dyYW0gRmlsZXMgKHg4NilcVmlzdWFsd2FyZSBCQ1NcTmV0UUNoZWNrSFRNTDVBZ2VudC5leGUgc3VjY2Vzc2Z1bGx5IHN0YXJ0ZWQ=","type":"Ansi","source":"Dropped File","process":null,"filename":"MgrLog.txt","compromised":null,"detection_total":null,"total":null},{"value":"R2V0U2VydmljZUJpbmFyeVBhdGg=","type":"Ansi","source":"Dropped File","process":null,"filename":"SimpleSC.dll.328895541","compromised":null,"detection_total":null,"total":null},{"value":"R2V0U2VydmljZURlbGF5ZWRBdXRvU3RhcnRJbmZv","type":"Ansi","source":"Dropped File","process":null,"filename":"SimpleSC.dll.328895541","compromised":null,"detection_total":null,"total":null},{"value":"R2V0U2VydmljZURlc2NyaXB0aW9u","type":"Ansi","source":"Dropped File","process":null,"filename":"SimpleSC.dll.328895541","compromised":null,"detection_total":null,"total":null},{"value":"R2V0U2VydmljZURpc3BsYXlOYW1l","type":"Ansi","source":"Dropped File","process":null,"filename":"SimpleSC.dll.328895541","compromised":null,"detection_total":null,"total":null},{"value":"R2V0U2VydmljZUZhaWx1cmU=","type":"Ansi","source":"Dropped File","process":null,"filename":"SimpleSC.dll.328895541","compromised":null,"detection_total":null,"total":null},{"value":"R2V0U2VydmljZUZhaWx1cmVGbGFn","type":"Ansi","source":"Dropped File","process":null,"filename":"SimpleSC.dll.328895541","compromised":null,"detection_total":null,"total":null},{"value":"R2V0U2VydmljZUxvZ29u","type":"Ansi","source":"Dropped File","process":null,"filename":"SimpleSC.dll.328895541","compromised":null,"detection_total":null,"total":null},{"value":"R2V0U2VydmljZU5hbWU=","type":"Ansi","source":"Dropped File","process":null,"filename":"SimpleSC.dll.328895541","compromised":null,"detection_total":null,"total":null},{"value":"R2V0U2VydmljZVN0YXJ0VHlwZQ==","type":"Ansi","source":"Dropped File","process":null,"filename":"SimpleSC.dll.328895541","compromised":null,"detection_total":null,"total":null},{"value":"R2V0U2VydmljZVN0YXR1cw==","type":"Ansi","source":"Dropped File","process":null,"filename":"SimpleSC.dll.328895541","compromised":null,"detection_total":null,"total":null},{"value":"R2V0U2hvcnRQYXRoTmFtZUE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0U3RhcnR1cEluZm9B","type":"Ansi","source":"Dropped File","process":null,"filename":"nsExec.dll.2021186361","compromised":null,"detection_total":null,"total":null},{"value":"R2V0U3RhcnR1cEluZm9X","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0U3RkSGFuZGxl","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0U3RyaW5nVHlwZVc=","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0U3lzQ29sb3I=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0U3lzdGVtRGlyZWN0b3J5QQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0U3lzdGVtTWVudQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0U3lzdGVtTWV0cmljcw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0U3lzdGVtVGltZUFzRmlsZVRpbWU=","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0U3lzdGVtVGltZVByZWNpc2VBc0ZpbGVUaW1l","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0VGVtcEZpbGVOYW1lQQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0VGVtcFBhdGhB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0VGlja0NvdW50","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0VGltZUZvcm1hdEV4","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0dGluZyBDb25maWd1cmF0aW9uIG9mIHNlcnZlciAnJXMn","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0VG9rZW5JbmZvcm1hdGlvbg==","type":"Ansi","source":"Dropped File","process":null,"filename":"UserInfo.dll.2533488085","compromised":null,"detection_total":null,"total":null},{"value":"R2V0VXNlckRlZmF1bHRMb2NhbGVOYW1l","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0VXNlckRlZmF1bHRVSUxhbmd1YWdl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0VXNlck5hbWVB","type":"Ansi","source":"Dropped File","process":null,"filename":"UserInfo.dll.2533488085","compromised":null,"detection_total":null,"total":null},{"value":"R2V0VXNlck9iamVjdEluZm9ybWF0aW9uQQ==","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0VmVyc2lvbg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0V2luZG93TG9uZ0E=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0V2luZG93UmVjdA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0V2luZG93c0RpcmVjdG9yeUE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2xvYmFsXEJDU011dGV4","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F51000.00000020.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R3JhbnRTZXJ2aWNlTG9nb25Qcml2aWxlZ2U=","type":"Ansi","source":"Dropped File","process":null,"filename":"SimpleSC.dll.328895541","compromised":null,"detection_total":null,"total":null},{"value":"aCUuLntncHpc","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"SEFQVUJXU1xBcHBEYXRhXExvY2FsXFRlbXBcbnN4NDJFRS50bXBcbnNFeGVjLmRsbA==","type":"Ansi","source":"Memory/File Scan","process":"bcs_service.exe","filename":"00034508-00002748.00000001.35008.00409000.00000004.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SEJSQVdyaXRlQ2ZnIGVycm9yOiB3cm90ZSAlZCBvZiAlZCBieXRlcw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SHR0cCBQcm94eSBTZXR0aW5ncw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SFRUUCBzZXJ2ZXIgcnVubmluZyBPSw==","type":"Ansi","source":"Runtime Data","process":"NetQCheckHTML5Agent.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SFRUUC8xLjEgMTAxIFN3aXRjaGluZyBQcm90b2NvbHM=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SFRUUC8xLjEgMjAwIE9LU2VydmVyOiBOZXRRQ2hlY2tDYWNoZS1jb250cm9sOiBuby1jYWNoZUNvbnRlbnQtdHlwZTogdGV4dC9odG1sQ29udGVudC1sZW5ndGg6IDM1MjwvZGl2PjwvdGQ+IDwvdHI+PC90YWJsZT48L2Rpdj4gYm90dG9tLS0+PGRpdiBzdHlsZT0iYmFja2dyb3VuZDp1cmwoJ2JvdHRvbWJhY2suZ2lmJykgbm8tcmVwZWF0IHRvcCBsZWZ0Ij48Y2VudGVyPjxiaWc+Jm5ic3A7PC8=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SFRUUC8xLjEgMjAwIE9LU2VydmVyOiBOZXRRQ2hlY2tDYWNoZS1jb250cm9sOiBuby1jYWNoZUNvbnRlbnQtdHlwZTogdGV4dC9odG1sQ29udGVudC1sZW5ndGg6IDU0MzxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIgY29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij48dGl0bGU+QWNjZXNzIENUIGFuZCBNeUNvbm5lY3Rpb24gU2VydmVyIG5ldHdvcmsgYXNzZXNzbWVudCB0ZXN0aW5nLCBuZXR3b3Jr","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SFRUUC8xLjEgMjAwIE9LU2VydmVyOiBOZXRRQ2hlY2tDYWNoZS1jb250cm9sOiBuby1jYWNoZUNvbnRlbnQtdHlwZTogdGV4dC9odG1sQ29udGVudC1sZW5ndGg6IDcxMyBvdXRzaWRlLS0+PGJyPjxjZW50ZXI+PHRhYmxlIHdpZHRoPTgwMCBjZWxscGFkZGluZz0wIGNlbGxzcGFjaW5nPTAgYm9yZGVyPTA+PHRyPjx0ZD4gdG9wLS0+PGRpdiBpZD0idG9wIj48ZGl2IGlkPSJ0b3BiYWNrIj48aQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SFRUUC8xLjFBY2NlcHQ6IHRleHQ=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"aHR0cDovLyVzOiVkJXM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"aHR0cDovL3d3dy52aXN1YWx3YXJlLmNvbSAwLw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":0,"total":66},{"value":"aHR0cDovL3d3dy52aXN1YWx3YXJlLmNvbS9iY3Mvc3VwcG9ydC5odG1s","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"aHR0cDovL3d3dy52aXN1YWx3YXJlLmNvbS9iY3Mvc3VwcG9ydC9iaW5kX2Vycm9yLmh0bWw=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"aHR0cDovL3d3dy52aXN1YWx3YXJlLmNvbS9iY3Mvc3VwcG9ydC9lY181MDMuaHRtbD9maWxlPQ==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SHR0cEdldCByZXR1cm5lZCAyMDAuIFZlcnNpb24gb24gc2VydmVyIGlzIDUuNDQ=","type":"Ansi","source":"Runtime Data","process":"NetQCheckHTML5Agent.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"aHR0cHByb3h5","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SHR0cFNlcnZlclNlc3Npb24gZW5kIHRocmVhZA==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SHR0cFNlc3Npb25SdW4gbm8gbWVtb3J5IGZvciBzb2NrZXQgJXU=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"aW4tY29yZS1sb2NhbGl6YXRpb24tb2Jzb2xldGUtbDEtMi0w","type":"Unicode","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"aW5kZXguaHRtbA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SW5pdGlhbGl6ZVNlY3VyaXR5RGVzY3JpcHRvcg==","type":"Ansi","source":"Dropped File","process":null,"filename":"nsExec.dll.2021186361","compromised":null,"detection_total":null,"total":null},{"value":"aW5pdGlhdGUuanM=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SW5pdGlhdGVTaHV0ZG93bkE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"SW5zdGFsbERpcg==","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SW5zdGFsbGVyIGludGVncml0eSBjaGVjayBoYXMgZmFpbGVkLiBDb21tb24gY2F1c2VzIGluY2x1ZGVpbmNvbXBsZXRlIGRvd25sb2FkIGFuZCBkYW1hZ2VkIG1lZGlhLiBDb250YWN0IHRoZWluc3RhbGxlcidzIGF1dGhvciB0byBvYnRhaW4gYSBuZXcgY29weS5Nb3JlIGluZm9ybWF0aW9uIGF0Omh0dHA6Ly9uc2lzLnNmLm5ldC9OU0lTX0Vycm9y","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":1,"total":133},{"value":"SW5zdGFsbExhbmd1YWdlRmFsbGJhY2s=","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SW5zdGFsbFNlcnZpY2U=","type":"Ansi","source":"Dropped File","process":null,"filename":"SimpleSC.dll.328895541","compromised":null,"detection_total":null,"total":null},{"value":"SW5zdWZmaWNpZW50IGJhbmR3aWR0aCBmcm9tIHNlcnZlcg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SW5zdWZmaWNpZW50IGRhdGEgdG8gZXN0aW1hdGUgbGluZSBzcGVlZA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SW5zdWZmaWNpZW50IHZhbGlkIHNhbXBsZXMgKCVkIG9mICVkKQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SW50ZWwgSGFyZHdhcmUgQ3J5cHRvZ3JhcGhpYyBTZXJ2aWNlIFByb3ZpZGVy","type":"Unicode","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SW52YWxpZCBJUCBhZGRyZXNzICVz","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"aW9zdHJlYW0gc3RyZWFtIGVycm9y","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SVAgQWRkcmVzcw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SVAgYWRkcmVzcyBtaXNtYXRjaA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SVAgQWRkcmVzczolZC4lZC4lZC4lZA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SVAgQWRkcmVzczo8aW52YWxpZD4=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SXNQcm9jZXNzb3JGZWF0dXJlUHJlc2VudA==","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SXNzdWVyIGNlcnRpZmljYXRlIGxvb2t1cCBlcnJvcg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SXNWYWxpZExvY2FsZU5hbWU=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SXNXb3c2NFByb2Nlc3M=","type":"Ansi","source":"Dropped File","process":null,"filename":"nsExec.dll.2021186361","compromised":null,"detection_total":null,"total":null},{"value":"SlNGU0FTcVNJU1VTTVNtUw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"ansve1wxLG9h","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"a2V5IGV4cGFuc2lvbg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"a2V5IHVzYWdlIGRvZXMgbm90IGluY2x1ZGUgY2VydGlmaWNhdGUgc2lnbmluZw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"a2V5IHVzYWdlIGRvZXMgbm90IGluY2x1ZGUgQ1JMIHNpZ25pbmc=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"a2V5IHVzYWdlIGRvZXMgbm90IGluY2x1ZGUgZGlnaXRhbCBzaWduYXR1cmU=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"TENJRFRvTG9jYWxlTmFtZQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"TGlzdGVuIGZhaWxlZA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"TG9jYWwgSVAgYWRkcmVzczogJXM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"TG9jYWxlTmFtZVRvTENJRA==","type":"Ansi","source":"Hybrid Analysis","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01311000.00000020.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"TG9jYWxpemVkTmFtZQ==","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TG9jYWxSZWRpcmVjdE9ubHk=","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TG9va3VwUHJpdmlsZWdlVmFsdWVB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"bWFqb3J2ZXJzaW9uPQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"TWF4TGluZVNwZWVkS2JwcyA9ICVkIChEYXRhPSVkIG9mICVkLCBUaW1lPSVkICglZCBvZiAlZCBzYW1wbGVzIGNvbnNpZGVyZWQpKQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"TWF4TGluZVNwZWVkS2JwcyA9ICVkIChEYXRhPSVkLCBUaW1lPSVkICglZCBvZiAlZCBzYW1wbGVzIGNvbnNpZGVyZWQpKQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"bWNzc2pjLnZpc3VhbHdhcmUuY29t","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"bWggY29tcGFyZSAlcw==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"bWlua2VybmVsXGNydHNcdWNydFxpbmNcY29yZWNydF9pbnRlcm5hbF9zdHJ0b3guaA==","type":"Unicode","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"bWlub3J2ZXJzaW9uPQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"TWluU29ja2FkZHJMZW5ndGg=","type":"Unicode","source":"Runtime Data","process":"NetQCheckHTML5Agent.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TW96aWxsYS80LjA=","type":"Ansi","source":"PCAP Processing","process":null,"filename":"PCAP","compromised":null,"detection_total":null,"total":null},{"value":"bXMtd2luLWNvcmUtc3RyaW5nLWwxLTEtMA==","type":"Unicode","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"bXMtd2luLWNvcmUtd2lucnQtbDEtMS0w","type":"Unicode","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"bXNjb3JlZS5kbGw=","type":"Unicode","source":"Hybrid Analysis","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01311000.00000020.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"bXNjdGxzX3Byb2dyZXNzMzI=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"TXlDb25uZWN0aW9uIFNlcnZlcg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"bmFtZSBjb25zdHJhaW50cyBtaW5pbXVtIGFuZCBtYXhpbXVtIG5vdCBzdXBwb3J0ZWQ=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"TmV0UUNoZWNrIEFQSSB2ZXJzaW9uPSVkLiVkLiVkLiVkICglcyk=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"TmV0UUNoZWNrIFJlbW90ZSBBZ2VudA==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"TmV0UUNoZWNrSFRNTDVBZ2VudC5leGU=","type":"Unicode","source":"Runtime Data","process":"bcs.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TmV3IGNvbm5lY3Rpb24gb24gc29ja2V0ICVk","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Tm8gSVAgYWRkcmVzcyBvZmZlcmVk","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Tm8gUHJpdmF0ZSBLZXk=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Tm9Db21tb25Hcm91cHM=","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Tm9Qcm9wZXJ0aWVzTXlDb21wdXRlcg==","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Tm9Qcm9wZXJ0aWVzUmVjeWNsZUJpbg==","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TlFDIFJlcG9ydA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"TlFDQXBwTWdyOiBSdW5uaW5nICVQUk9HUkFNRklMRVMlXCh4ODYpXFZpc3VhbHdhcmUgQkNTXE5ldFFDaGVja0hUTUw1QWdlbnQuZXhl","type":"Ansi","source":"Runtime Data","process":"bcs.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TlFDQXBwTWdyOiBUZXJtaW5hdGluZyBwcm9jZXNzICVk","type":"Ansi","source":"Hybrid Analysis","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01311000.00000020.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"bnNFeGVjLmRsbA==","type":"Ansi","source":"Dropped File","process":null,"filename":"nsExec.dll.2021186361","compromised":null,"detection_total":null,"total":null},{"value":"TlNJUyBFcnJvcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"TnVsbHNvZnRJbnN0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"bnVtcG9ydHMgJWk=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"T2ZmZXJlZCBJUCBBZGRyZXNzIHJlY2VpdmVk","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"T3BlblByb2Nlc3NUb2tlbg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"T3BlblNlcnZpY2VB","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"T3B0aW9uczogICAgICAgdXBkYXRlY2hlY2tpbnRlcnZhbHNlY3M9bm4gICBUaW1lIGJldHdlZW4gY2hlY2tzIGZvciBhcHBsaWNhdGlvbiB1cGRhdGUgZmlsZSAgICAgICBpbnN0YWxsICAgPSBpbnN0YWxsIGFzIGEgc2VydmljZSAgICAgICB1bmluc3RhbGwgPSB1bmluc3RhbGwgZXhpc3Rpbmcgc2VydmljZSAgICAgICByZWluc3RhbGwgPSBpbnN0YWxsIGFzIGEgc2VydmljZSBhZnRlciB1bmluc3RhbGxpbmcgZXhpc3Rpbmcgc2VydmljZQ==","type":"Ansi","source":"Hybrid Analysis","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01311000.00000020.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"b3EuSHYuSHQuQG4=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"b3Igbm90aWNlIGlmIHlvdSBmYWlsIHRvIGNvbXBseSwgb3IgVmlzdWFsd2FyZSBoYXMgcmVhc29uYWJsZSBiZWxpZWYgdGhhdCB5b3UgZmFpbGVkIHRvIGNvbXBseSwgd2l0aCB0aGUgdGVybXMgYW5kIGNvbmRpdGlvbnMgb2YgdGhpcyBBZ3JlZW1lbnQuIEluIHN1Y2ggZXZlbnQsIHlvdSBtdXN0IGRlc3Ryb3kgYWxsIGNvcGllcyBvZiB0aGUgU09GVFdBUkUgUFJPRFVDVC4gXGxpbmUgXGxpbmUgfXtccnRsY2hcZmNzMSBcYWJcYWYyXGFmczIw","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"b3RoZXJuYW1lOjx1bnN1cHBvcnRlZD4=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UGFja2V0IHJhdGUgdG9vIGxvdyAtIHRlc3QgZmFpbGVk","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"cGFnZS5odG1s","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UGF1c2VTZXJ2aWNl","type":"Ansi","source":"Dropped File","process":null,"filename":"SimpleSC.dll.328895541","compromised":null,"detection_total":null,"total":null},{"value":"UGVla05hbWVkUGlwZQ==","type":"Ansi","source":"Dropped File","process":null,"filename":"nsExec.dll.2021186361","compromised":null,"detection_total":null,"total":null},{"value":"UGVyZm9ybWluZyAlZCBSVFQgdGVzdHMgdG8gJXMgKFBvcnQgJWQp","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"cGx1Z2lucz0=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UG9ydHMgdG8gYmUgdGVzdGVkOiAlaQ==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"cG9ydHNQZXJCbG9jazogJWk=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UG9zdGluZyAlcyBUZXN0IHJlc3VsdHMgdG8gJXMsIHBvcnQgJWQ=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UG9zdGluZyBSb3V0ZSBUZXN0IHJlc3VsdHMgdG8gJXMsIHBvcnQgJWQ=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UG9zdFF1aXRNZXNzYWdl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"UFJJVkFURSBLRVk=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UHJpdmF0ZSBLZXkgSW5mbzo=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UHJpdmF0ZS1LZXk=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"cHJpdmF0ZS1rZXk6","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UHJpdmF0ZS1LZXk6ICglZCBiaXQp","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UHJpdmF0ZUtleUxpZmV0aW1lU2Vjb25kcw==","type":"Unicode","source":"Runtime Data","process":"NetQCheckHTML5Agent.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJpdktleUNhY2hlTWF4SXRlbXM=","type":"Unicode","source":"Runtime Data","process":"NetQCheckHTML5Agent.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJpdktleUNhY2hlUHVyZ2VJbnRlcnZhbFNlY29uZHM=","type":"Unicode","source":"Runtime Data","process":"NetQCheckHTML5Agent.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJvY2VzcyBzdWNjZXNzZnVsbHkgdGVybWluYXRlZA==","type":"Ansi","source":"Hybrid Analysis","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01311000.00000020.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UHJvY2Vzc1JlcG9ydFBhZ2U6IE91dCBvZiBtZW1vcnk=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UHJvY2Vzc1JlcG9ydFBhZ2U6IHVua25vd24gcmVjZWl2ZWQgdGltZSA9ICVk","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UHJvZ3JhbSBGaWxlcyAoeDg2KVxWaXN1YWx3YXJlIEJDUw==","type":"Ansi","source":"Memory/File Scan","process":"bcs_service.exe","filename":"00034508-00002748.00000001.35008.00409000.00000004.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UHJvdmlkZXJJbmZv","type":"Unicode","source":"Runtime Data","process":"NetQCheckHTML5Agent.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"cHJveHlwb3J0","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UHVibGljIEtleQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UHVibGljLUtleQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"cHVibGljLWtleTo=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UHVibGljLUtleTogKCVkIGJpdCk=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UW9zID0gJXUuJXUlJSBbJWQvJWRd","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UXVlcnlGb3JJbmZvVGlw","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UXVlcnlTZXJ2aWNlQ29uZmlnMkE=","type":"Ansi","source":"Dropped File","process":null,"filename":"SimpleSC.dll.328895541","compromised":null,"detection_total":null,"total":null},{"value":"UXVlcnlTZXJ2aWNlQ29uZmlnMlc=","type":"Ansi","source":"Dropped File","process":null,"filename":"SimpleSC.dll.328895541","compromised":null,"detection_total":null,"total":null},{"value":"UXVlcnlTZXJ2aWNlU3RhdHVz","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"cmUgZ3JhbnRzIHlvdSB0aGUgbm9uLWV4Y2x1c2l2ZSByaWdodCB0byBpbnN0YWxsIGFuZCB1c2UgdGhlIGxpY2Vuc2VkIFNPRlRXQVJFIFBST0RVQ1QgaWRlbnRpZmllZCBpbiB0aGlzIHBhcmFncmFwaCwgYXMgZm9sbG93czo=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"cmVjb21tZW5kZWQtcHJpdmF0ZS1sZW5ndGg6ICVkIGJpdHM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UmVnQ2xvc2VLZXk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVnQ3JlYXRlS2V5RXhB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVnRGVsZXRlS2V5QQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVnRGVsZXRlS2V5RXhB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVnRGVsZXRlVmFsdWVB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVnRW51bUtleUE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVnRW51bVZhbHVlQQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVnaXN0ZXJDbGFzc0E=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVnaXN0ZXJlZCBJRA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UmVnaXN0ZXJlZCBJRDo=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UmVnaXN0ZXJTZXJ2aWNlQ3RybEhhbmRsZXJB","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UmVnT3BlbktleUV4QQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVnUXVlcnlWYWx1ZUV4QQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVnU2V0VmFsdWVFeEE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"cmVpbnN0YWxs","type":"Ansi","source":"Hybrid Analysis","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01311000.00000020.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UmVtb3ZlU2VydmljZQ==","type":"Ansi","source":"Dropped File","process":null,"filename":"SimpleSC.dll.328895541","compromised":null,"detection_total":null,"total":null},{"value":"UmVtb3ZlU2VydmljZUxvZ29uUHJpdmlsZWdl","type":"Ansi","source":"Dropped File","process":null,"filename":"SimpleSC.dll.328895541","compromised":null,"detection_total":null,"total":null},{"value":"UmVwb3J0U2VjdGlvbiBzZW5kIGZhaWxlZCBbJWQgb2YgJWRd","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UmVxdWVzdGluZyBjYXBhY2l0eSB0ZXN0IHNlcnZlciBpbmZvIGZyb20gJXM6JWQ=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UmVzdGFydFNlcnZpY2U=","type":"Ansi","source":"Dropped File","process":null,"filename":"SimpleSC.dll.328895541","compromised":null,"detection_total":null,"total":null},{"value":"Uk9EVUNUIGlzIGF0IHlvdXIgb3duIHJpc2suIFRvIHRoZSBtYXhpbXVtIGV4dGVudCBwZXJtaXR0ZWQgYnkgYXBwbGljYWJsZSBsYXcsIFZpc3VhbHdhcmUgYW5kIGl0cyBvd25lcnMsIGVtcGxveWVlcywgYWdlbnRzLCBhc3NvY2lhdGVzLCBhZmZpbGlhdGVzLCBhbmQgc3VwcGxpZXJzIGRpc2NsYWltIGFsbCB3YXJyYW50aWVzIGFuZCBjb25kaXRpb25zLCBlaXRoZXIgZXhwcmVzcyBvciBpbXBsaWVkLCBpbmNsdWRpbmcsIGJ1dCBub3QgbGltaXRl","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"Um91dGUgdGVzdCBmcm9tIHNlcnZlciBjb21wbGV0ZWQgT0s=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"cnNhX2tleWdlbl9iaXRz","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"cnNhX2tleWdlbl9wdWJleHA=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UnR0IHRlc3Q6IEROUyBsb29rdXAgZmFpbGVk","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UnVudGltZSBlcnJvciAgICAgYXQgMDAwMDAwMDA=","type":"Ansi","source":"Dropped File","process":null,"filename":"SimpleSC.dll.328895541","compromised":null,"detection_total":null,"total":null},{"value":"U2FmZVByb2Nlc3NTZWFyY2hNb2Rl","type":"Unicode","source":"Runtime Data","process":"NetQCheckHTML5Agent.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2NyZWVuVG9DbGllbnQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2VjLVdlYlNvY2tldC1LZXk=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U2VuZCBmYWlsZWQ=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U2VuZEJlZ2luVXBzdHJlYW1QYWNrZXQ6IGZhaWxlZA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U2VuZGluZyByZXBvcnQgdG8gc2VydmVy","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U2VuZGluZyByb3V0ZSB0ZXN0IHJlcG9ydA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U2VuZGluZyB1cHN0cmVhbSBjb21wbGV0ZSwgZG93bmxvYWRpbmcgcmVzdWx0cy4uLg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U2VuZE1lc3NhZ2VUaW1lb3V0QQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"c2VydmVycG9ydA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U2VydmljZSBNYWlu","type":"Ansi","source":"Runtime Data","process":"bcs.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2VydmljZS0weA==","type":"Unicode","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U2VydmljZUlzUGF1c2Vk","type":"Ansi","source":"Dropped File","process":null,"filename":"SimpleSC.dll.328895541","compromised":null,"detection_total":null,"total":null},{"value":"U2VydmljZUlzUnVubmluZw==","type":"Ansi","source":"Dropped File","process":null,"filename":"SimpleSC.dll.328895541","compromised":null,"detection_total":null,"total":null},{"value":"U2VydmljZUlzU3RvcHBlZA==","type":"Ansi","source":"Dropped File","process":null,"filename":"SimpleSC.dll.328895541","compromised":null,"detection_total":null,"total":null},{"value":"U2VTZXJ2aWNlTG9nb25SaWdodA==","type":"Ansi","source":"Dropped File","process":null,"filename":"SimpleSC.dll.328895541","compromised":null,"detection_total":null,"total":null},{"value":"U2Vzc2lvbiAlMmQ6ICVkIEJ5dGVzIFslMC4xZiUlXQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U2Vzc2lvbiAlZDogUHJvY2Vzc2luZyBVcGxvYWQgcmVwb3J0LCBzaXplICVkIGF0ICV1bXM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U2V0RGVmYXVsdERsbERpcmVjdG9yaWVz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2V0RXJyb3JNb2Rl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2V0Rm9yZWdyb3VuZFdpbmRvdw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2V0TGFzdEVycm9y","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U2V0U2VjdXJpdHlEZXNjcmlwdG9yRGFjbA==","type":"Ansi","source":"Dropped File","process":null,"filename":"nsExec.dll.2021186361","compromised":null,"detection_total":null,"total":null},{"value":"U2V0U2VydmljZUJpbmFyeVBhdGg=","type":"Ansi","source":"Dropped File","process":null,"filename":"SimpleSC.dll.328895541","compromised":null,"detection_total":null,"total":null},{"value":"U2V0U2VydmljZURlbGF5ZWRBdXRvU3RhcnRJbmZv","type":"Ansi","source":"Dropped File","process":null,"filename":"SimpleSC.dll.328895541","compromised":null,"detection_total":null,"total":null},{"value":"U2V0U2VydmljZURlc2NyaXB0aW9u","type":"Ansi","source":"Dropped File","process":null,"filename":"SimpleSC.dll.328895541","compromised":null,"detection_total":null,"total":null},{"value":"U2V0U2VydmljZUZhaWx1cmU=","type":"Ansi","source":"Dropped File","process":null,"filename":"SimpleSC.dll.328895541","compromised":null,"detection_total":null,"total":null},{"value":"U2V0U2VydmljZUZhaWx1cmVGbGFn","type":"Ansi","source":"Dropped File","process":null,"filename":"SimpleSC.dll.328895541","compromised":null,"detection_total":null,"total":null},{"value":"U2V0U2VydmljZUxvZ29u","type":"Ansi","source":"Dropped File","process":null,"filename":"SimpleSC.dll.328895541","compromised":null,"detection_total":null,"total":null},{"value":"U2V0U2VydmljZVN0YXJ0VHlwZQ==","type":"Ansi","source":"Dropped File","process":null,"filename":"SimpleSC.dll.328895541","compromised":null,"detection_total":null,"total":null},{"value":"U2V0U2VydmljZVN0YXR1cw==","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U0hBdXRvQ29tcGxldGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"U0hCcm93c2VGb3JGb2xkZXJB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2hlbGxFeGVjdXRlQQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"U0hHZXRGaWxlSW5mb0E=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"U0hHZXRGb2xkZXJQYXRoQQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"U0hHZXRQYXRoRnJvbUlETGlzdEE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"U0hHZXRTcGVjaWFsRm9sZGVyTG9jYXRpb24=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"U29ja2V0IHRlc3QgZmFpbGVkIHRvICVzLiBTd2l0Y2hpbmcgdG8gSFRUUA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U29mdHdhcmVcQm9ybGFuZFxEZWxwaGlcTG9jYWxlcw==","type":"Ansi","source":"Dropped File","process":null,"filename":"SimpleSC.dll.328895541","compromised":null,"detection_total":null,"total":null},{"value":"U29mdHdhcmVcQm9ybGFuZFxMb2NhbGVz","type":"Ansi","source":"Dropped File","process":null,"filename":"SimpleSC.dll.328895541","compromised":null,"detection_total":null,"total":null},{"value":"U29mdHdhcmVcTWljcm9zb2Z0XFdpbmRvd3NcQ3VycmVudFZlcnNpb24=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"U3BlZWQgdGVzdCBmYWlsZWQgdG8gY29tcGxldGU=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U3RhcnRpbmcgJXMgSFRUUCBzZXNzaW9uIHRocmVhZCBmb3Igc29ja2V0ICV1","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U3RhcnRpbmcgY2FwYWNpdHkgdGVzdCB0byBwb3J0ICVk","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U3RhcnRpbmcgV2Vic29ja2V0IFNlcnZlciBvbiBwb3J0ICVk","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U3RhcnRpbmcgV2Vic29ja2V0IFNlcnZlciBvbiBwb3J0IDMyNjU4","type":"Ansi","source":"Runtime Data","process":"NetQCheckHTML5Agent.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U3RhcnRpbmcgV2Vic29ja2V0IFNlcnZlciBvbiBwb3J0IDMyNjU4U3RhcnRTb2Z0d2FyZUFnZW50QkNTIFZlcnNpb24gNS40NFdlYlNlcnZlciBhY3RpdmUgb24gcG9ydCAzMjY1OFdlYlNlcnZlciBhY3RpdmUgb24gcG9ydCAzMjY2MEhUVFAgc2VydmVyIHJ1bm5pbmcgT0s=","type":"Ansi","source":"Dropped File","process":null,"filename":"log.txt","compromised":null,"detection_total":null,"total":null},{"value":"U3RhcnRTZXJ2aWNl","type":"Ansi","source":"Dropped File","process":null,"filename":"SimpleSC.dll.328895541","compromised":null,"detection_total":null,"total":null},{"value":"U3RhcnRTZXJ2aWNlQQ==","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U3RhcnRTZXJ2aWNlQ3RybERpc3BhdGNoZXJB","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U3RhcnRUaHJlYWQgZmFpbGVk","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U3RvcHBpbmcgc2VydmljZS4uLg==","type":"Ansi","source":"Hybrid Analysis","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01311000.00000020.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U3RvcFNlcnZpY2U=","type":"Ansi","source":"Dropped File","process":null,"filename":"SimpleSC.dll.328895541","compromised":null,"detection_total":null,"total":null},{"value":"U3RvcmVzU2VydmljZUNsYXNzSW5mbw==","type":"Unicode","source":"Runtime Data","process":"NetQCheckHTML5Agent.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U3ViamVjdCBQdWJsaWMgS2V5IEluZm86","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U3VpdGUgQjogY2VydGlmaWNhdGUgdmVyc2lvbiBpbnZhbGlk","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U3VpdGUgQjogaW52YWxpZCBwdWJsaWMga2V5IGFsZ29yaXRobQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U3VwcG9ydGVkTmFtZVNwYWNl","type":"Unicode","source":"Runtime Data","process":"NetQCheckHTML5Agent.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U3lzdGVtUGFyYW1ldGVyc0luZm9B","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"dC1tcy13aW4tbnR1c2VyLXdpbmRvd3N0YXRpb24tbDEtMS0w","type":"Unicode","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"dGFsbC5leGUi","type":"Ansi","source":"Memory/File Scan","process":"bcs_service.exe","filename":"00034508-00002748.00000001.35008.00409000.00000004.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VGFyZ2V0IEJXOiAlaQ==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"dGFyZ2V0PSJfYmxhbmsi","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VGNwQ29ubmVjdDogQmFkIHBvcnQgKCVkKQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VGNwQ29ubmVjdDogQ29ubmVjdGluZyB0byAlcyBwb3J0ICVkLi4u","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VGVybWluYXRlUHJvY2Vzcw==","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VGVzdCBDb21wIENhcCBDQw==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VGVzdCBGYWlsZWQuIEVycm9yOiAlcw==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VGVzdCBJbnZhbGlkLiBFcnJvcjogJXM=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VGVzdCBUZXJtaW5hdGVkLiBFcnJvcjogJXM=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VGVzdGluZyB0byB0aGlzIHNlcnZlciBpcyBmb3JiaWRkZW4uIFBsZWFzZSBjb250YWN0IHRoZSB0ZXN0IHByb3ZpZGVyIGFuZCByZXBvcnQgdGhlIGlzc3VlLg==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"dGVzdHBvcnRz","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VGhlIGRvbWFpbiBlbnRlcmVkIGNvdWxkIG5vdCBiZSByZXNvbHZlZC4gUGxlYXNlIGRvdWJsZSBjaGVjayB0aGUgZG9tYWluIGFuZCB0cnkgYWdhaW4uIElmIHRoZSBwcm9ibGVtIHBlcnNpc3RzIHBsZWFzZSBjb250YWN0IHRoZSB0ZXN0IHByb3ZpZGVyIGFuZCByZXBvcnQgdGhlIGlzc3VlLg==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VGhlIGxpY2Vuc2UgZm9yIHRoZSB0ZXN0IGVudmlyb25tZW50IGhhcyBleHBpcmVkLiBQbGVhc2UgY29udGFjdCB0aGUgdGVzdCBwcm92aWRlciBhbmQgcmVwb3J0IHRoZSBpc3N1ZS4=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VGhlIG9wZXJhdGluZyBzeXN0ZW0gZG9lcyBub3Qgc3VwcG9ydCB0aW1lIHRvIGxpdmUuIFBsZWFzZSByZXN0YXJ0IEJDUyB3aXRoIGFkbWluIHByaXZpbGVnZXMu","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VGhlIE9TIGRvZXMgbm90IHN1cHBvcnQgdGhpcyB0ZXN0","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VGhlIHBhcmFtZXRlcnMgdXNlZCBmb3IgdGhlIHRlc3QgYXJlIGludmFsaWQuIFBsZWFzZSBjb250YWN0IHRoZSB0ZXN0IHByb3ZpZGVyIGFuZCByZXBvcnQgdGhlIGlzc3VlLg==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VGhlIHBhc3N3b3JkIHVzZWQgZm9yIHRoZSB0ZXN0IGRvZXNuJ3QgbWF0Y2guIFBsZWFzZSBjb250YWN0IHRoZSB0ZXN0IHByb3ZpZGVyIGFuZCByZXBvcnQgdGhlIGlzc3VlLg==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VGhlIHNlcnZlciBpcyBidXN5LiBUaGlzIGNvdWxkIGJlIGEgdGhyb3R0bGUgc2V0dGluZyBpbXBvc2VkIGJ5IHRoZSBwcm92aWRlci4gUGxlYXNlIGNvbnRhY3QgdGhlIHRlc3QgcHJvdmlkZXIgYW5kIHJlcG9ydCB0aGUgaXNzdWUu","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VGhlIHNlcnZlciByZWFjaGVkIGl0cyBtYXhpbXVtIGJhbmR3aWR0aCBzdHJlYW0gbGltaXQuIFBsZWFzZSBjb250YWN0IHRoZSB0ZXN0IHByb3ZpZGVyIGFuZCByZXBvcnQgdGhlIGlzc3VlLg==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VGhlIFNPRlRXQVJFIFBST0RVQ1QgaXMgbGljZW5zZWQsIG5vdCBzb2xkLiBUaGUgU09GVFdBUkUgUFJPRFVDVCBpcyBwcm90ZWN0ZWQgYnkgY29weXJpZ2h0IGxhd3MgYW5kIGludGVybmF0aW9uYWwgY29weXJpZ2h0IHRyZWF0aWVzLCBhcyB3ZWxsIGFzIG90aGVyIGludGVsbGVjdHVhbCBwcm9wZXJ0eSBsYXdzIGFuZCB0cmVhdGllcy4gQnkgaW5zdGFsbGlu","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"VGhlIHRlc3QgZGlkbid0IGNvbXBsZXRlIGFzIGV4cGVjdGVkOg==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VGhlIHRlc3QgZmFpbGVkIHRvIHN0YXJ0ICh0aHJlYWQgZmFpbHVyZSkuIFBsZWFzZSBjb250YWN0IHRoZSB0ZXN0IHByb3ZpZGVyIGFuZCByZXBvcnQgdGhlIGlzc3VlLg==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VGhlIHRlc3QgaGFuZGxlIGlzIGludmFsaWQuIFBsZWFzZSBjb250YWN0IHRoZSB0ZXN0IHByb3ZpZGVyIGFuZCByZXBvcnQgdGhlIGlzc3VlLg==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VGhlIHRlc3Qgc2VydmVyIGNhbm5vdCBiZSByZWFjaGVkLiBUaGlzIGNvdWxkIGJlIGRvd24gdG8gYSBsb3NzIG9mIEludGVybmV0L05ldHdvcmsgY29ubmVjdGl2aXR5LiBQbGVhc2UgY29udGFjdCB0aGUgdGVzdCBwcm92aWRlciBhbmQgcmVwb3J0IHRoZSBpc3N1ZS4=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VGhlIHRlc3Qgd2FzIHRlcm1pbmF0ZWQuICBQbGVhc2UgY29udGFjdCB0aGUgdGVzdCBwcm92aWRlciBhbmQgcmVwb3J0IHRoZSBpc3N1ZS4=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VGhlIHRyaWFsIGxpbWl0IGhhcyBiZWVuIGV4Y2VlZGVkLiBQbGVhc2UgY29udGFjdCB0aGUgdGVzdCBwcm92aWRlciBhbmQgcmVwb3J0IHRoZSBpc3N1ZS4=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VGhlbWVBcGlDb25uZWN0aW9uUmVxdWVzdA==","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"dGhlciBwZWN1bmlhcnkgbG9zcykgYXJpc2luZyBvdXQgb2YgdGhlIHVzZSBvZiBvciBpbmFiaWxpdHkgdG8gdXNlIHRoZSBTT0ZUV0FSRSBQUk9EVUNUICh3aGV0aGVyIGR1ZSB0byBsaWNlbnNlIHRlcm1pbmF0aW9uIG9yIGFueSBvdGhlciByZWFzb24pLCBldmVuIGlmIFZpc3VhbHdhcmUgaGFzIGJlZW4gYWR2aXNlZCBvZiB0aGUgcG9zc2liaWxpdHkgb2Ygc3VjaCBkYW1hZ2VzLiBcbGluZSBcbGluZSB9e1xydGxjaFxmY3Mx","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"VGhlcmUgYXJlIG5vdCBlbm91Z2ggcmVzb3VyY2VzIGF2YWlsYWJsZSB0byBydW4gdGhlIHRlc3QuIFBsZWFzZSBjb250YWN0IHRoZSB0ZXN0IHByb3ZpZGVyIGFuZCByZXBvcnQgdGhlIGlzc3VlLg==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VGhlcmUgaXMgbm8gZGF0YSBhdmFpbGFibGUgZm9yIHRoZSB0ZXN0LiBQbGVhc2UgY29udGFjdCB0aGUgdGVzdCBwcm92aWRlciBhbmQgcmVwb3J0IHRoZSBpc3N1ZS4=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VGhlcmUgaXMgbm90IGVub3VnaCBiYW5kd2lkdGggYXZhaWxhYmxlIGZyb20gdGhlIHNlcnZlciB0byBjb21wbGV0ZSB0aGUgdGVzdC4gUGxlYXNlIGNvbnRhY3QgdGhlIHRlc3QgcHJvdmlkZXIgYW5kIHJlcG9ydCB0aGUgaXNzdWUu","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VGhpcyBsaWNlbnNlIGlzIG5vdCB0cmFuc2ZlcmFibGUuIFxsaW5lIFxsaW5lIH17XHJ0bGNoXGZjczEgXGFiXGFmMlxhZnMyMCBcbHRyY2hcZmNzMCBcYlxmMlxmczIwXGxhbmcyMDU3XGxhbmdmZTIwNTdcbGFuZ2ZlbnAyMDU3XGluc3JzaWQxMzA1MDcyMlxjaGFycnNpZDEzMDUwNzIyIDIuIFJFU1RSSUNUSU9OUy59e1xydGxjaFxmY3MxIFxhZjJcYWZzMjAgXGx0cmNoXGZjczA=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"VGhpcyBzZXJ2aWNlIGlzIGFsZWFkeSBpbnN0YWxsZWQ=","type":"Ansi","source":"Hybrid Analysis","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01311000.00000020.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VGxzR2V0VmFsdWU=","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"dG8gVENQIHBvcnQgJWQ=","type":"Ansi","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VG8gdGhlIG1heGltdW0gZXh0ZW50IHBlcm1pdHRlZCBieSBhcHBsaWNhYmxlIGxhdywgaW4gbm8gZXZlbnQgc2hhbGwgVmlzdWFsd2FyZSBvciBpdHMgb3duZXJzLCBlbXBsb3llZXMsIGFnZW50cw==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"VHJhY2VSb3V0ZTogSWNtcENyZWF0ZUZpbGUgZmFpbGVk","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VHJhY2VSb3V0ZTogSW52YWxpZCBJUCBhZGRyZXNzICVz","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VHJhbnNwb3J0cw==","type":"Unicode","source":"Runtime Data","process":"NetQCheckHTML5Agent.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"dHJvbFNlcnZpY2U=","type":"Ansi","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VFdBUkUgUFJPRFVDVC4gKEYpIFlvdSBtYXkgbm90IGFjdGl2YXRlIHRoZSBTT0ZUV0FSRSBQUk9EVUNUIHdpdGggYSBsaWNlbnNlIGtleSB0aGF0IHlvdSBkaWQgbm90IGxlZ2FsbHkgb2J0YWluLiAoRykgWW91IG11c3QgcHJvcGVybHkgcGF5IGZvciBhbnkgU09GVFdBUkUgUFJPRFVDVCBsaWNlbnNlIGtleXMgdXNlZC4gXGxpbmUgXGxpbmUgfXtccnRsY2hcZmNzMSBcYWJcYWYyXGFmczIwIFxsdHJjaFxmY3Mw","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"VHlwZSBEZXNjcmlwdG9yJw==","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"dW5hYmxlIHRvIGRlY29kZSBpc3N1ZXIgcHVibGljIGtleQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"dW5hYmxlIHRvIGdldCBjZXJ0aWZpY2F0ZSBDUkw=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"dW5hYmxlIHRvIGdldCBDUkwgaXNzdWVyIGNlcnRpZmljYXRl","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"dW5hYmxlIHRvIGdldCBpc3N1ZXIgY2VydGlmaWNhdGU=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"dW5hYmxlIHRvIGdldCBsb2NhbCBpc3N1ZXIgY2VydGlmaWNhdGU=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VW5hYmxlIHRvIGxvYWQgV2luU29jayBETEw=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"dW5pbnN0YWxs","type":"Ansi","source":"Hybrid Analysis","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01311000.00000020.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VW5pbnN0YWxsIHNlcnZpY2U6ICVzIHNlcnZpY2Ugbm90IGZvdW5k","type":"Ansi","source":"Hybrid Analysis","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01311000.00000020.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VW5pbnN0YWxsIHNlcnZpY2U6IHNlcnZpY2UgZGVsZXRlZA==","type":"Ansi","source":"Hybrid Analysis","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01311000.00000020.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VW5pbnN0YWxsU3RyaW5n","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"dW5rbm93biBjZXJ0aWZpY2F0ZSB2ZXJpZmljYXRpb24gZXJyb3I=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VW5rbm93biBFcnJvcg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"dW5zcGVjaWZpZWQgY2VydGlmaWNhdGUgdmVyaWZpY2F0aW9uIGVycm9y","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"dW5zdXBwb3J0ZWQgY2VydGlmaWNhdGUgcHVycG9zZQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VW5zdXBwb3J0ZWQgZXh0ZW5zaW9uIGZlYXR1cmU=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"dW5zdXBwb3J0ZWQgbmFtZSBjb25zdHJhaW50IHR5cGU=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"dW5zdXBwb3J0ZWQgb3IgaW52YWxpZCBuYW1lIGNvbnN0cmFpbnQgc3ludGF4","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"dW5zdXBwb3J0ZWQgb3IgaW52YWxpZCBuYW1lIHN5bnRheA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VXAgdG8gJWRNYnBzOiBjb3VudCBpcyAlZC4gU3BlZWQgJTAuMWZNYnBzLCAlMC4xZiUl","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"dXBkYXRlYmNzLnZpc3VhbHdhcmUuY29t","type":"Ansi","source":"PCAP Processing","process":null,"filename":"PCAP","compromised":null,"detection_total":null,"total":null},{"value":"VXBsb2FkIHJlcG9ydCBjb21wbGV0ZSBbJWQgc2FtcGxlc10=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VXBsb2FkIHJlcG9ydCByZWplY3RlZCAtIGJhZCBzaXpl","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"dXBsb2FkLnBvcnQ9","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"dXBsb2FkcG9ydD0=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VXNlckluZm8uZGxs","type":"Ansi","source":"Dropped File","process":null,"filename":"UserInfo.dll.2533488085","compromised":null,"detection_total":null,"total":null},{"value":"VmVyaWZ5IGVycm9yOg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VmVyaWZ5IGZhaWx1cmU=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"dmVyaWZ5aW5nIGluc3RhbGxlcjogJWQlJQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"VmVyUXVlcnlWYWx1ZUE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"dmVyc2lvbj0=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"dmlkZW8ucG9ydD0=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VmlzdWFsd2FyZSBhcHBsaWNhdGlvbiBtYW5hZ2Vy","type":"Ansi","source":"Hybrid Analysis","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01311000.00000020.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VmlzdWFsd2FyZSBhcHBsaWNhdGlvbiBtYW5hZ2VyIC0gTmV0UUNoZWNrSFRNTDVBZ2VudC5leGU=","type":"Ansi","source":"Runtime Data","process":"bcs.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VmlzdWFsd2FyZSBhcHBsaWNhdGlvbiBtYW5hZ2VyIC0gTmV0UUNoZWNrSFRNTDVBZ2VudC5leGUgc2VydmljZSBpbnN0YWxsZWQgT0s=","type":"Ansi","source":"Runtime Data","process":"bcs.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VmlzdWFsd2FyZSBCQ1M=","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VmlzdWFsd2FyZSBCQ1MgU2V0dXA=","type":"Ansi","source":"Hybrid Analysis","process":"bcs_service.exe","filename":"00034508-00002748.00000001.35008.00401000.00000020.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VmlzdWFsd2FyZSBCcm93c2VyIENvbXBhdGliaWxpdHkgU2VydmljZSAoQkNTKQ==","type":"Ansi","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VmlzdWFsd2FyZSBJbmMw","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"VmlzdWFsd2FyZSBJbmMx","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"VmlzdWFsd2FyZSBtYXkgdGVybWluYXRlIHRoaXMgQWdyZWVtZW50IGFuZCBkaXNhYmxlIHRoZSBTT0ZUV0FSRSBQUk9EVUNUIGZvciBhbnkgbGVuZ3RoIG9mIHRpbWUsIGluY2x1ZGluZyBpbiBwZXJwZXR1aXR5LCB3aXRob3V0IHByaQ==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"Vm9JUDogZmFpbGVkIHRvIHJldHJpZXZlIHVwc3RyZWFtIHJlcG9ydA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Vk9JUFRlc3Q6IE1zJTA1ZCAgZmFpbGVkIHRvIHN0YXJ0IGRhdGEgc2Vzc2lvbg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Vk9JUFRlc3Q6IE1zJTA1ZCAgU3RhcnQgUmVjZWl2ZSBTZXNzaW9uLiBTZXJ2ZXIgSVA9JXMgVURQIHBvcnQ9JWQ=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Vk9JUFRlc3Q6IE1zJTA1ZCAgU3RhcnQgU2VuZCBTZXNzaW9uLiBTZXJ2ZXIgSVA9JXMgVURQIHBvcnQ9JWQ=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VntWe0l7RXtL","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"V2ViU2VydmVyIGFjdGl2ZSBvbiBwb3J0ICVk","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"V2ViU2VydmVyIGFjdGl2ZSBvbiBwb3J0IDMyNjU4","type":"Ansi","source":"Runtime Data","process":"NetQCheckHTML5Agent.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V2ViU2VydmVyIGFjdGl2ZSBvbiBwb3J0IDMyNjYw","type":"Ansi","source":"Runtime Data","process":"NetQCheckHTML5Agent.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V2Vic2VydmVyOiBiaW5kIGZhaWxlZCBvbiBwb3J0ICVk","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"V2ViU2VydmVyOiBsaXN0ZW4gZmFpbGVk","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"V2luU29jayAyLjAgUHJvdmlkZXIgSUQ=","type":"Unicode","source":"Runtime Data","process":"NetQCheckHTML5Agent.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V2luU29ja19SZWdpc3RyeV9WZXJzaW9u","type":"Unicode","source":"Runtime Data","process":"NetQCheckHTML5Agent.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"WDQwME5hbWU6PHVuc3VwcG9ydGVkPg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"WW91IGdpdmUgeW91ciBjb25zZW50IGZvciBWaXN1YWx3YXJlIHRvIG1vbml0b3IgU09GVFdBUkUgUFJPRFVDVCB1c2FnZSBhbmQgdG8gY29sbGVjdCBkYXRhIGZvciB0aGUgcHVycG9zZSBvZiBhdWRpdGluZyBjb21wbGlhbmNlIHdpdGggdGhlIHRlcm1zIG9mIHRoaXMgQWdyZWVtZW50LiBcbGluZSBcbGluZSB9e1xydGxjaFxmY3MxIFxhYlxhZjJcYWZzMjAgXGx0cmNoXGZjczA=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"WW91IG5lZWQgdG8gcmVhZCB0aGUgT3BlblNTTCBGQVEsIGh0dHBzOi8vd3d3Lm9wZW5zc2wub3JnL2RvY3MvZmFxLmh0bWw=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"ezFCM0VBNURDLUI1ODctNDc4Ni1CNEVGLUJEMURDMzMyQUVBRX0=","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"e1wqXGxhdGVudHN0eWxlc1xsc2RzdGltYXgzNzJcbHNkbG9ja2VkZGVmMFxsc2RzZW1paGlkZGVuZGVmMFxsc2R1bmhpZGV1c2VkZGVmMFxsc2RxZm9ybWF0ZGVmMFxsc2Rwcmlvcml0eWRlZjk5e1xsc2Rsb2NrZWRleGNlcHQgXGxzZHFmb3JtYXQxIFxsc2Rwcmlvcml0eTAgXGxzZGxvY2tlZDAgTm9ybWFsO1xsc2RxZm9ybWF0MSBcbHNkcHJpb3JpdHk5IFxsc2Rsb2NrZWQwIGhlYWRpbmcgMTs=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"e1wqXHJzaWR0YmwgXHJzaWQyNTA1NDkxXHJzaWQxMjk4ODU1N1xyc2lkMTI5OTY1MzhccnNpZDEzMDUwNzIyXHJzaWQxNjA2NzA1MX17XG1tYXRoUHJcbW1hdGhGb250MzRcbWJya0JpbjBcbWJya0JpblN1YjBcbXNtYWxsRnJhYzBcbWRpc3BEZWYxXG1sTWFyZ2luMFxtck1hcmdpbjBcbWRlZkpjMVxtd3JhcEluZGVudDE0NDBcbWludExpbTBcbW5hcnlMaW0xfXtcaW5mb3tcYXV0aG9yIGp1bGlhbn17XG9wZXJhdG9yIGp1bGlhbn0=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"e1wqXHdncmZmbXRmaWx0ZXIgMjQ1MH1cbm9mZWF0dXJldGhyb3R0bGUxXGlsZm9tYWNhdGNsbnVwMFxsdHJwYXIgXHNlY3RkIFxsdHJzZWN0XGxpbmV4MFxoZWFkZXJ5NzA4XGZvb3Rlcnk3MDhcY29sc3g3MDhcZW5kbmhlcmVcc2VjdGxpbmVncmlkMzYwXHNlY3RkZWZhdWx0Y2xcc2Z0bmJqIHtcKlxwbnNlY2x2bDFccG51Y3JtXHBuc3RhcnQxXHBuaW5kZW50NzIwXHBuaGFuZyB7XHBudHh0YSAufX17XCpccG5zZWNsdmwy","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"e1xjcmVhdGltXHlyMjAxM1xtbzRcZHkzMFxocjEzXG1pbjM1fXtccmV2dGltXHlyMjAxNlxtbzNcZHkxMlxocjE3XG1pbjMzfXtcdmVyc2lvbjR9e1xlZG1pbnM4fXtcbm9mcGFnZXMyfXtcbm9md29yZHM2MDB9e1xub2ZjaGFyczM0MjF9e1xub2ZjaGFyc3dzNDAxM317XHZlcm4zfX17XCpceG1sbnN0Ymwge1x4bWxuczEgaHR0cDovL3NjaGVtYXMubWljcm9zb2Z0LmNvbS9vZmZpY2Uvd29yZC8yMDAzL3dvcmRtbH19","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"e1xmMzgxXGZiaWRpIFxmcm9tYW5cZmNoYXJzZXQyMDRcZnBycTIgQ2FtYnJpYSBNYXRoIEN5cjt9e1xmMzgzXGZiaWRpIFxmcm9tYW5cZmNoYXJzZXQxNjFcZnBycTIgQ2FtYnJpYSBNYXRoIEdyZWVrO317XGYzODRcZmJpZGkgXGZyb21hblxmY2hhcnNldDE2MlxmcHJxMiBDYW1icmlhIE1hdGggVHVyO317XGYzODdcZmJpZGkgXGZyb21hblxmY2hhcnNldDE4NlxmcHJxMiBDYW1icmlhIE1hdGggQmFsdGljO30=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"e1xmMzg4XGZiaWRpIFxmcm9tYW5cZmNoYXJzZXQxNjNcZnBycTIgQ2FtYnJpYSBNYXRoIChWaWV0bmFtZXNlKTt9e1xmNDMwXGZiaWRpIFxmc3dpc3NcZmNoYXJzZXQyMzhcZnBycTIgQ2FsaWJyaSBDRTt9e1xmNDMxXGZiaWRpIFxmc3dpc3NcZmNoYXJzZXQyMDRcZnBycTIgQ2FsaWJyaSBDeXI7fXtcZjQzM1xmYmlkaSBcZnN3aXNzXGZjaGFyc2V0MTYxXGZwcnEyIENhbGlicmkgR3JlZWs7fQ==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"e1xmM1xmYmlkaSBcZnJvbWFuXGZjaGFyc2V0MlxmcHJxMntcKlxwYW5vc2UgMDUwNTAxMDIwMTA3MDYwMjA1MDd9U3ltYm9sO317XGYzNFxmYmlkaSBcZnJvbWFuXGZjaGFyc2V0MFxmcHJxMntcKlxwYW5vc2UgMDIwNDA1MDMwNTA0MDYwMzAyMDR9Q2FtYnJpYSBNYXRoO317XGYzOVxmYmlkaSBcZnN3aXNzXGZjaGFyc2V0MFxmcHJxMntcKlxwYW5vc2UgMDIwZjA1MDIwMjAyMDQwMzAyMDR9Q2FsaWJyaTt9","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"e1xmNDFcZmJpZGkgXGZyb21hblxmY2hhcnNldDIwNFxmcHJxMiBUaW1lcyBOZXcgUm9tYW4gQ3lyO317XGY0M1xmYmlkaSBcZnJvbWFuXGZjaGFyc2V0MTYxXGZwcnEyIFRpbWVzIE5ldyBSb21hbiBHcmVlazt9e1xmNDRcZmJpZGkgXGZyb21hblxmY2hhcnNldDE2MlxmcHJxMiBUaW1lcyBOZXcgUm9tYW4gVHVyO317XGY0NVxmYmlkaSBcZnJvbWFuXGZjaGFyc2V0MTc3XGZwcnEyIFRpbWVzIE5ldyBSb21hbiAoSGVicmV3KTt9","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"e1xmNDM0XGZiaWRpIFxmc3dpc3NcZmNoYXJzZXQxNjJcZnBycTIgQ2FsaWJyaSBUdXI7fXtcZjQzN1xmYmlkaSBcZnN3aXNzXGZjaGFyc2V0MTg2XGZwcnEyIENhbGlicmkgQmFsdGljO317XGY0MzhcZmJpZGkgXGZzd2lzc1xmY2hhcnNldDE2M1xmcHJxMiBDYWxpYnJpIChWaWV0bmFtZXNlKTt9e1xmbG9tYWpvclxmMzE1MDhcZmJpZGkgXGZyb21hblxmY2hhcnNldDIzOFxmcHJxMiBUaW1lcyBOZXcgUm9tYW4gQ0U7fQ==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"e1xmNDZcZmJpZGkgXGZyb21hblxmY2hhcnNldDE3OFxmcHJxMiBUaW1lcyBOZXcgUm9tYW4gKEFyYWJpYyk7fXtcZjQ3XGZiaWRpIFxmcm9tYW5cZmNoYXJzZXQxODZcZnBycTIgVGltZXMgTmV3IFJvbWFuIEJhbHRpYzt9e1xmNDhcZmJpZGkgXGZyb21hblxmY2hhcnNldDE2M1xmcHJxMiBUaW1lcyBOZXcgUm9tYW4gKFZpZXRuYW1lc2UpO317XGY2MFxmYmlkaSBcZm1vZGVyblxmY2hhcnNldDIzOFxmcHJxMSBDb3VyaWVyIE5ldyBDRTt9","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"e1xmNjFcZmJpZGkgXGZtb2Rlcm5cZmNoYXJzZXQyMDRcZnBycTEgQ291cmllciBOZXcgQ3lyO317XGY2M1xmYmlkaSBcZm1vZGVyblxmY2hhcnNldDE2MVxmcHJxMSBDb3VyaWVyIE5ldyBHcmVlazt9e1xmNjRcZmJpZGkgXGZtb2Rlcm5cZmNoYXJzZXQxNjJcZnBycTEgQ291cmllciBOZXcgVHVyO317XGY2NVxmYmlkaSBcZm1vZGVyblxmY2hhcnNldDE3N1xmcHJxMSBDb3VyaWVyIE5ldyAoSGVicmV3KTt9","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"e1xmNjZcZmJpZGkgXGZtb2Rlcm5cZmNoYXJzZXQxNzhcZnBycTEgQ291cmllciBOZXcgKEFyYWJpYyk7fXtcZjY3XGZiaWRpIFxmbW9kZXJuXGZjaGFyc2V0MTg2XGZwcnExIENvdXJpZXIgTmV3IEJhbHRpYzt9e1xmNjhcZmJpZGkgXGZtb2Rlcm5cZmNoYXJzZXQxNjNcZnBycTEgQ291cmllciBOZXcgKFZpZXRuYW1lc2UpO317XGYzODBcZmJpZGkgXGZyb21hblxmY2hhcnNldDIzOFxmcHJxMiBDYW1icmlhIE1hdGggQ0U7fQ==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"e1xmYmltYWpvclxmMzE1MzhcZmJpZGkgXGZyb21hblxmY2hhcnNldDIzOFxmcHJxMiBUaW1lcyBOZXcgUm9tYW4gQ0U7fXtcZmJpbWFqb3JcZjMxNTM5XGZiaWRpIFxmcm9tYW5cZmNoYXJzZXQyMDRcZnBycTIgVGltZXMgTmV3IFJvbWFuIEN5cjt9e1xmYmltYWpvclxmMzE1NDFcZmJpZGkgXGZyb21hblxmY2hhcnNldDE2MVxmcHJxMiBUaW1lcyBOZXcgUm9tYW4gR3JlZWs7fQ==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"e1xmYmltYWpvclxmMzE1NDJcZmJpZGkgXGZyb21hblxmY2hhcnNldDE2MlxmcHJxMiBUaW1lcyBOZXcgUm9tYW4gVHVyO317XGZiaW1ham9yXGYzMTU0M1xmYmlkaSBcZnJvbWFuXGZjaGFyc2V0MTc3XGZwcnEyIFRpbWVzIE5ldyBSb21hbiAoSGVicmV3KTt9e1xmYmltYWpvclxmMzE1NDRcZmJpZGkgXGZyb21hblxmY2hhcnNldDE3OFxmcHJxMiBUaW1lcyBOZXcgUm9tYW4gKEFyYWJpYyk7fQ==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"e1xmYmltYWpvclxmMzE1NDVcZmJpZGkgXGZyb21hblxmY2hhcnNldDE4NlxmcHJxMiBUaW1lcyBOZXcgUm9tYW4gQmFsdGljO317XGZiaW1ham9yXGYzMTU0NlxmYmlkaSBcZnJvbWFuXGZjaGFyc2V0MTYzXGZwcnEyIFRpbWVzIE5ldyBSb21hbiAoVmlldG5hbWVzZSk7fXtcZmxvbWlub3JcZjMxNTQ4XGZiaWRpIFxmcm9tYW5cZmNoYXJzZXQyMzhcZnBycTIgVGltZXMgTmV3IFJvbWFuIENFO30=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"e1xmYmltaW5vclxmMzE1NzlcZmJpZGkgXGZyb21hblxmY2hhcnNldDIwNFxmcHJxMiBUaW1lcyBOZXcgUm9tYW4gQ3lyO317XGZiaW1pbm9yXGYzMTU4MVxmYmlkaSBcZnJvbWFuXGZjaGFyc2V0MTYxXGZwcnEyIFRpbWVzIE5ldyBSb21hbiBHcmVlazt9e1xmYmltaW5vclxmMzE1ODJcZmJpZGkgXGZyb21hblxmY2hhcnNldDE2MlxmcHJxMiBUaW1lcyBOZXcgUm9tYW4gVHVyO30=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"e1xmYmltaW5vclxmMzE1ODNcZmJpZGkgXGZyb21hblxmY2hhcnNldDE3N1xmcHJxMiBUaW1lcyBOZXcgUm9tYW4gKEhlYnJldyk7fXtcZmJpbWlub3JcZjMxNTg0XGZiaWRpIFxmcm9tYW5cZmNoYXJzZXQxNzhcZnBycTIgVGltZXMgTmV3IFJvbWFuIChBcmFiaWMpO317XGZiaW1pbm9yXGYzMTU4NVxmYmlkaSBcZnJvbWFuXGZjaGFyc2V0MTg2XGZwcnEyIFRpbWVzIE5ldyBSb21hbiBCYWx0aWM7fQ==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"e1xmYmltaW5vclxmMzE1ODZcZmJpZGkgXGZyb21hblxmY2hhcnNldDE2M1xmcHJxMiBUaW1lcyBOZXcgUm9tYW4gKFZpZXRuYW1lc2UpO319e1xjb2xvcnRibDtccmVkMFxncmVlbjBcYmx1ZTA7XHJlZDBcZ3JlZW4wXGJsdWUyNTU7XHJlZDBcZ3JlZW4yNTVcYmx1ZTI1NTtccmVkMFxncmVlbjI1NVxibHVlMDtccmVkMjU1XGdyZWVuMFxibHVlMjU1O1xyZWQyNTVcZ3JlZW4wXGJsdWUwO1xyZWQyNTVcZ3JlZW4yNTVcYmx1ZTA7","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"e1xmZGJtYWpvclxmMzE1MjFcZmJpZGkgXGZyb21hblxmY2hhcnNldDE2MVxmcHJxMiBUaW1lcyBOZXcgUm9tYW4gR3JlZWs7fXtcZmRibWFqb3JcZjMxNTIyXGZiaWRpIFxmcm9tYW5cZmNoYXJzZXQxNjJcZnBycTIgVGltZXMgTmV3IFJvbWFuIFR1cjt9e1xmZGJtYWpvclxmMzE1MjNcZmJpZGkgXGZyb21hblxmY2hhcnNldDE3N1xmcHJxMiBUaW1lcyBOZXcgUm9tYW4gKEhlYnJldyk7fQ==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"e1xmZGJtYWpvclxmMzE1MjRcZmJpZGkgXGZyb21hblxmY2hhcnNldDE3OFxmcHJxMiBUaW1lcyBOZXcgUm9tYW4gKEFyYWJpYyk7fXtcZmRibWFqb3JcZjMxNTI1XGZiaWRpIFxmcm9tYW5cZmNoYXJzZXQxODZcZnBycTIgVGltZXMgTmV3IFJvbWFuIEJhbHRpYzt9e1xmZGJtYWpvclxmMzE1MjZcZmJpZGkgXGZyb21hblxmY2hhcnNldDE2M1xmcHJxMiBUaW1lcyBOZXcgUm9tYW4gKFZpZXRuYW1lc2UpO30=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"e1xmZGJtaW5vclxmMzE1NjFcZmJpZGkgXGZyb21hblxmY2hhcnNldDE2MVxmcHJxMiBUaW1lcyBOZXcgUm9tYW4gR3JlZWs7fXtcZmRibWlub3JcZjMxNTYyXGZiaWRpIFxmcm9tYW5cZmNoYXJzZXQxNjJcZnBycTIgVGltZXMgTmV3IFJvbWFuIFR1cjt9e1xmZGJtaW5vclxmMzE1NjNcZmJpZGkgXGZyb21hblxmY2hhcnNldDE3N1xmcHJxMiBUaW1lcyBOZXcgUm9tYW4gKEhlYnJldyk7fQ==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"e1xmZGJtaW5vclxmMzE1NjRcZmJpZGkgXGZyb21hblxmY2hhcnNldDE3OFxmcHJxMiBUaW1lcyBOZXcgUm9tYW4gKEFyYWJpYyk7fXtcZmRibWlub3JcZjMxNTY1XGZiaWRpIFxmcm9tYW5cZmNoYXJzZXQxODZcZnBycTIgVGltZXMgTmV3IFJvbWFuIEJhbHRpYzt9e1xmZGJtaW5vclxmMzE1NjZcZmJpZGkgXGZyb21hblxmY2hhcnNldDE2M1xmcHJxMiBUaW1lcyBOZXcgUm9tYW4gKFZpZXRuYW1lc2UpO30=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"e1xmaGltYWpvclxmMzE1MDJcZmJpZGkgXGZzd2lzc1xmY2hhcnNldDBcZnBycTJ7XCpccGFub3NlIDAyMGYwMzAyMDIwMjA0MDMwMjA0fUNhbGlicmkgTGlnaHQ7fXtcZmJpbWFqb3JcZjMxNTAzXGZiaWRpIFxmcm9tYW5cZmNoYXJzZXQwXGZwcnEye1wqXHBhbm9zZSAwMjAyMDYwMzA1MDQwNTAyMDMwNH1UaW1lcyBOZXcgUm9tYW47fQ==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"e1xmaGltYWpvclxmMzE1MjhcZmJpZGkgXGZzd2lzc1xmY2hhcnNldDIzOFxmcHJxMiBDYWxpYnJpIExpZ2h0IENFO317XGZoaW1ham9yXGYzMTUyOVxmYmlkaSBcZnN3aXNzXGZjaGFyc2V0MjA0XGZwcnEyIENhbGlicmkgTGlnaHQgQ3lyO317XGZoaW1ham9yXGYzMTUzMVxmYmlkaSBcZnN3aXNzXGZjaGFyc2V0MTYxXGZwcnEyIENhbGlicmkgTGlnaHQgR3JlZWs7fQ==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"e1xmaGltYWpvclxmMzE1MzJcZmJpZGkgXGZzd2lzc1xmY2hhcnNldDE2MlxmcHJxMiBDYWxpYnJpIExpZ2h0IFR1cjt9e1xmaGltYWpvclxmMzE1MzVcZmJpZGkgXGZzd2lzc1xmY2hhcnNldDE4NlxmcHJxMiBDYWxpYnJpIExpZ2h0IEJhbHRpYzt9e1xmaGltYWpvclxmMzE1MzZcZmJpZGkgXGZzd2lzc1xmY2hhcnNldDE2M1xmcHJxMiBDYWxpYnJpIExpZ2h0IChWaWV0bmFtZXNlKTt9","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"e1xmaGltaW5vclxmMzE1MDZcZmJpZGkgXGZzd2lzc1xmY2hhcnNldDBcZnBycTJ7XCpccGFub3NlIDAyMGYwNTAyMDIwMjA0MDMwMjA0fUNhbGlicmk7fXtcZmJpbWlub3JcZjMxNTA3XGZiaWRpIFxmcm9tYW5cZmNoYXJzZXQwXGZwcnEye1wqXHBhbm9zZSAwMjAyMDYwMzA1MDQwNTAyMDMwNH1UaW1lcyBOZXcgUm9tYW47fXtcZjQwXGZiaWRpIFxmcm9tYW5cZmNoYXJzZXQyMzhcZnBycTIgVGltZXMgTmV3IFJvbWFuIENFO30=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"e1xmaGltaW5vclxmMzE1NjhcZmJpZGkgXGZzd2lzc1xmY2hhcnNldDIzOFxmcHJxMiBDYWxpYnJpIENFO317XGZoaW1pbm9yXGYzMTU2OVxmYmlkaSBcZnN3aXNzXGZjaGFyc2V0MjA0XGZwcnEyIENhbGlicmkgQ3lyO317XGZoaW1pbm9yXGYzMTU3MVxmYmlkaSBcZnN3aXNzXGZjaGFyc2V0MTYxXGZwcnEyIENhbGlicmkgR3JlZWs7fXtcZmhpbWlub3JcZjMxNTcyXGZiaWRpIFxmc3dpc3NcZmNoYXJzZXQxNjJcZnBycTIgQ2FsaWJyaSBUdXI7fQ==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"e1xmaGltaW5vclxmMzE1NzVcZmJpZGkgXGZzd2lzc1xmY2hhcnNldDE4NlxmcHJxMiBDYWxpYnJpIEJhbHRpYzt9e1xmaGltaW5vclxmMzE1NzZcZmJpZGkgXGZzd2lzc1xmY2hhcnNldDE2M1xmcHJxMiBDYWxpYnJpIChWaWV0bmFtZXNlKTt9e1xmYmltaW5vclxmMzE1NzhcZmJpZGkgXGZyb21hblxmY2hhcnNldDIzOFxmcHJxMiBUaW1lcyBOZXcgUm9tYW4gQ0U7fQ==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"e1xmbG9tYWpvclxmMzE1MDBcZmJpZGkgXGZyb21hblxmY2hhcnNldDBcZnBycTJ7XCpccGFub3NlIDAyMDIwNjAzMDUwNDA1MDIwMzA0fVRpbWVzIE5ldyBSb21hbjt9e1xmZGJtYWpvclxmMzE1MDFcZmJpZGkgXGZyb21hblxmY2hhcnNldDBcZnBycTJ7XCpccGFub3NlIDAyMDIwNjAzMDUwNDA1MDIwMzA0fVRpbWVzIE5ldyBSb21hbjt9","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"e1xmbG9tYWpvclxmMzE1MDlcZmJpZGkgXGZyb21hblxmY2hhcnNldDIwNFxmcHJxMiBUaW1lcyBOZXcgUm9tYW4gQ3lyO317XGZsb21ham9yXGYzMTUxMVxmYmlkaSBcZnJvbWFuXGZjaGFyc2V0MTYxXGZwcnEyIFRpbWVzIE5ldyBSb21hbiBHcmVlazt9e1xmbG9tYWpvclxmMzE1MTJcZmJpZGkgXGZyb21hblxmY2hhcnNldDE2MlxmcHJxMiBUaW1lcyBOZXcgUm9tYW4gVHVyO30=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"e1xmbG9tYWpvclxmMzE1MTNcZmJpZGkgXGZyb21hblxmY2hhcnNldDE3N1xmcHJxMiBUaW1lcyBOZXcgUm9tYW4gKEhlYnJldyk7fXtcZmxvbWFqb3JcZjMxNTE0XGZiaWRpIFxmcm9tYW5cZmNoYXJzZXQxNzhcZnBycTIgVGltZXMgTmV3IFJvbWFuIChBcmFiaWMpO317XGZsb21ham9yXGYzMTUxNVxmYmlkaSBcZnJvbWFuXGZjaGFyc2V0MTg2XGZwcnEyIFRpbWVzIE5ldyBSb21hbiBCYWx0aWM7fQ==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"e1xmbG9tYWpvclxmMzE1MTZcZmJpZGkgXGZyb21hblxmY2hhcnNldDE2M1xmcHJxMiBUaW1lcyBOZXcgUm9tYW4gKFZpZXRuYW1lc2UpO317XGZkYm1ham9yXGYzMTUxOFxmYmlkaSBcZnJvbWFuXGZjaGFyc2V0MjM4XGZwcnEyIFRpbWVzIE5ldyBSb21hbiBDRTt9e1xmZGJtYWpvclxmMzE1MTlcZmJpZGkgXGZyb21hblxmY2hhcnNldDIwNFxmcHJxMiBUaW1lcyBOZXcgUm9tYW4gQ3lyO30=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"e1xmbG9taW5vclxmMzE1MDRcZmJpZGkgXGZyb21hblxmY2hhcnNldDBcZnBycTJ7XCpccGFub3NlIDAyMDIwNjAzMDUwNDA1MDIwMzA0fVRpbWVzIE5ldyBSb21hbjt9e1xmZGJtaW5vclxmMzE1MDVcZmJpZGkgXGZyb21hblxmY2hhcnNldDBcZnBycTJ7XCpccGFub3NlIDAyMDIwNjAzMDUwNDA1MDIwMzA0fVRpbWVzIE5ldyBSb21hbjt9","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"e1xmbG9taW5vclxmMzE1NDlcZmJpZGkgXGZyb21hblxmY2hhcnNldDIwNFxmcHJxMiBUaW1lcyBOZXcgUm9tYW4gQ3lyO317XGZsb21pbm9yXGYzMTU1MVxmYmlkaSBcZnJvbWFuXGZjaGFyc2V0MTYxXGZwcnEyIFRpbWVzIE5ldyBSb21hbiBHcmVlazt9e1xmbG9taW5vclxmMzE1NTJcZmJpZGkgXGZyb21hblxmY2hhcnNldDE2MlxmcHJxMiBUaW1lcyBOZXcgUm9tYW4gVHVyO30=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"e1xmbG9taW5vclxmMzE1NTNcZmJpZGkgXGZyb21hblxmY2hhcnNldDE3N1xmcHJxMiBUaW1lcyBOZXcgUm9tYW4gKEhlYnJldyk7fXtcZmxvbWlub3JcZjMxNTU0XGZiaWRpIFxmcm9tYW5cZmNoYXJzZXQxNzhcZnBycTIgVGltZXMgTmV3IFJvbWFuIChBcmFiaWMpO317XGZsb21pbm9yXGYzMTU1NVxmYmlkaSBcZnJvbWFuXGZjaGFyc2V0MTg2XGZwcnEyIFRpbWVzIE5ldyBSb21hbiBCYWx0aWM7fQ==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"e1xmbG9taW5vclxmMzE1NTZcZmJpZGkgXGZyb21hblxmY2hhcnNldDE2M1xmcHJxMiBUaW1lcyBOZXcgUm9tYW4gKFZpZXRuYW1lc2UpO317XGZkYm1pbm9yXGYzMTU1OFxmYmlkaSBcZnJvbWFuXGZjaGFyc2V0MjM4XGZwcnEyIFRpbWVzIE5ldyBSb21hbiBDRTt9e1xmZGJtaW5vclxmMzE1NTlcZmJpZGkgXGZyb21hblxmY2hhcnNldDIwNFxmcHJxMiBUaW1lcyBOZXcgUm9tYW4gQ3lyO30=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"e1xwbnR4dGIgKH17XHBudHh0YSApfX1ccGFyZFxwbGFpbiBcbHRycGFyXHFjIFxsaTBccmkwXHdpZGN0bHBhclx3cmFwZGVmYXVsdFxhc3BhbHBoYVxhc3BudW1cZmFhdXRvXGFkanVzdHJpZ2h0XHJpbjBcbGluMFxpdGFwMFxwYXJhcnNpZDEzMDUwNzIyIFxydGxjaFxmY3MxIFxhZjBcYWZzMjJcYWxhbmcxMDI1IFxsdHJjaFxmY3MwIFxmMzE1MDZcZnMyMlxsYW5nMjA1N1xsYW5nZmUxMDMzXGNncmlkXGxhbmducDIwNTdcbGFuZ2ZlbnAxMDMzIHs=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"e1xydGYxXGFkZWZsYW5nMTAyNVxhbnNpXGFuc2ljcGcxMjUyXHVjMVxhZGVmZjBcZGVmZjBcc3RzaGZkYmNoMFxzdHNoZmxvY2gzMTUwNlxzdHNoZmhpY2gzMTUwNlxzdHNoZmJpMzE1MDZcZGVmbGFuZzEwMzNcZGVmbGFuZ2ZlMTAzM1x0aGVtZWxhbmcyMDU3XHRoZW1lbGFuZ2ZlMFx0aGVtZWxhbmdjczB7XGZvbnR0Ymx7XGYwXGZiaWRpIFxmcm9tYW5cZmNoYXJzZXQwXGZwcnEye1wqXHBhbm9zZSAwMjAyMDYwMzA1MDQwNTAyMDMwNH1UaW1lcyBOZXcgUm8=","type":"Ansi","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"e1xydGYxXGFkZWZsYW5nMTAyNVxhbnNpXGFuc2ljcGcxMjUyXHVjMVxhZGVmZjBcZGVmZjBcc3RzaGZkYmNoMFxzdHNoZmxvY2gzMTUwNlxzdHNoZmhpY2gzMTUwNlxzdHNoZmJpMzE1MDZcZGVmbGFuZzEwMzNcZGVmbGFuZ2ZlMTAzM1x0aGVtZWxhbmcyMDU3XHRoZW1lbGFuZ2ZlMFx0aGVtZWxhbmdjczB7XGZvbnR0Ymx7XGYwXGZiaWRpIFxmcm9tYW5cZmNoYXJzZXQwXGZwcnEye1wqXHBhbm9zZSAwMjAyMDYwMzA1MDQwNTAyMDMwNH1UaW1lcyBOZXcgUm9tYW47fXtcZjJcZmJpZGkgXGZtb2Rlcm5cZmNoYXJzZXQwXGZwcnExe1wqXHBhbm9zZSAwMjA3MDMwOTAyMDIwNTAyMDQwNH1Db3VyaWVyIE5ldzt9","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null}],"targets":[{"name":"NetQCheckHTML5Agent.exe:2588","strings":[{"value":"ISIjJCUmJygpKissLS4vMDEyM0BAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBBQkNERUZHSElKS0xNTk9QUVJTVFVWV1hZWmFiY2RlZmdoaWprbG1ub3BxcnN0dXZ3eHl6MDEyMzQ1Njc4OSsv","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"ISonKCk7OkAmPSskLC8/JSNbXQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"IV9pc19kb3VibGU=","type":"Unicode","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JSUwMTAxMDAw","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JSUwMTAxMDAwMTAxMDAwMDAwMDA=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JSUwMTAxMDAwMTAxMDAwMjAwMDA=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JSUwMTAxMDAwMTAxMDEwMjAwMDA=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JSUwMTAxMDAwMTAyMDAwMDAwMDA=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JSUwMTAxMDAwMTAzMDAwMDAwMDA=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JSUwMTAxMDAwMTA0MDEwMjAwMjM=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JSUwMTAxMDAwMTA0MDEwMjAwMjMxMDA=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JSUwMTAxMDAwMTA0MDEwMjAwMjV0dD1jcGQ9","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JSUwMTAxMDAwMTA3MDEwMjAwMDA=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JSUwMTAxMDAwMTA3MDEwMjAwMDAxMDA=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JSUwMTAxMDAwMTUwMDEwMjAwMDAmYWQ9","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JSUwMTAxMDAwMTUwMDEwMjAwMDAmYWQ9LTE=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JSUwMTAxMDAwMTUwMDEwMjAwMDAmYWQ9YXVkaXQgZXJyb3I=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JSUwMTAxMDAwMjAwMDEwMjAwMDB2PTUxNg==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JSUwMTAxMDAwMjAwMjEwMjA=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JSUwMTAxMDAwMjAxMDEwMjAwMDB2PTUxNg==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JSUwMTAxMDAwMjUwMDEwMjAwMDBBIG5lY2Vzc2FyeSB0ZXN0IGVudmlyb25tZW50IHVwZGF0ZSBpcyBhdmFpbGFibGUsIHdvdWxkIHlvdSBsaWtlIHRvIHVwZGF0ZT8=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JSUwMTAxMDAwNDAwMDEwMjAwMDA=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JSUwMTAxMDAwNDAwMDEwMjAwMDBEb3duc3RyZWFtIEluaXRpYWxpc2F0aW9uIEZhaWxlZA==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JSUwMTAxMDAwNDAwMDEwMjAwMDBUaGUgRmlyZXdhbGwgdGVzdCBmYWlsZWQgdG8gaW5pdGlhbGl6ZQ==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JSUwMTAxMDAwNTAwMDEwMjAwMDA=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JSUwMTAxMDAwNTAxMDEwMjAxNjVUaGUgbGljZW5zZSBoYXMgZXhwaXJlZCBmb3IgdGhlIHRlc3QgZW52aXJvbm1lbnQuIFBsZWFzZSBub3RpZnkgdGhlIHByb3ZpZGVyIG9mIHRoZSB0ZXN0IHNvIHRoZXkgY2FuIHJlY3RpZnkgdGhlIGlzc3VlLiBUbyBjb250YWN0IHVzIGNsaWNrIGhlcmUuaHR0cDovL3d3dy52aXN1YWx3YXJlLmNvbS9iY3Mvc3VwcG9ydC9lY181MDEuaHRtbA==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JSUwMTAxMDAwNTAyMDEwMjAxNjdUaGUgZG9tYWluIHRoZSB0ZXN0IGVudmlyb25tZW50IGlzIHJ1bm5pbmcgb24gaXNuJ3QgcGVybWl0dGVkLiBQbGVhc2UgY29udGFjdCB0aGUgdGVzdCBwcm92aWRlci4gRm9yIG1vcmUgaW5mb3JtYXRpb24sIG9yIHRvIGNvbnRhY3QgdXMgY2xpY2sgaGVyZS5odHRwOi8vd3d3LnZpc3VhbHdhcmUuY29tL2Jjcy9zdXBwb3J0L2VjXzUwMi5odG1sP3VybD0=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JSUwMTAxMDAwNTAzMDEwMjAxNDNZb3UgaGF2ZSByZWFjaGVkIHRoZSB0ZXN0IGxpbWl0IHNldCBieSB0aGUgc2VydmVyLiBDb250YWN0IHlvdXIgcHJvdmlkZXIgdG8gbGVhcm4gbW9yZS4gVG8gcmVhZCBtb3JlIGFib3V0IHRoaXMgY2xpY2sgaGVyZS5odHRwOi8vd3d3LnZpc3VhbHdhcmUuY29tL2Jjcy9zdXBwb3J0L2VjXzUxMS5odG1s","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JSUwMTAxMDAwNTA0MDEwMjAwMDBVbmtub3duIE1heWhvc3QgUmVzcG9uc2U=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JSUwMTAxMDAwNTA0MDEwMjAxNTVXZWIgdGVzdHMgZm9yIHB1YmxpYyB1c2VycyBoYXZlIG5vdCBiZWVuIHBlcm1pdHRlZC4gVG8gbGVhcm4gd2h5IHBsZWFzZSBjb250YWN0IHRoZSB0ZXN0IHByb3ZpZGVyLiBUbyBsZWFybiBtb3JlIGFib3V0IHRoaXMgY2xpY2sgaGVyZS5odHRwOi8vd3d3LnZpc3VhbHdhcmUuY29tL2Jjcy9zdXBwb3J0L2VjXzUxNS5odG1s","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JSUwMTAxMDAwNTA1MDEwMjAxNTVXZWIgdGVzdHMgZm9yIHB1YmxpYyB1c2VycyBoYXZlIG5vdCBiZWVuIHBlcm1pdHRlZC4gVG8gbGVhcm4gd2h5IHBsZWFzZSBjb250YWN0IHRoZSB0ZXN0IHByb3ZpZGVyLiBUbyBsZWFybiBtb3JlIGFib3V0IHRoaXMgY2xpY2sgaGVyZS5odHRwOi8vd3d3LnZpc3VhbHdhcmUuY29tL2Jjcy9zdXBwb3J0L2VjXzUxNS5odG1s","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JSUwMTAxMDAwNTEwMDEwMjA=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JSUwMjAxMDAwMTIwMDEwMjAwMDAmcmVwaWQ9","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JSUwMzAxMDAwMTIwMDEwMjAwMDAmcmVwaWQ9","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JSUwMzAxMDAwMTIwMDEwMjAwMDAmcmVwaWQ9LTEmdG90PQ==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JSUwMzAxMDAwMTIwMDEwMjAwMDByZXBpZD0=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JSpzJXM6JSpz","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JSpzPEVNUFRZPg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JSpzPElOVkFMSUQgUFJJVkFURSBLRVk+","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JSpzPElOVkFMSUQgUFVCTElDIEtFWT4=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JSpzPE5vdCBTdXBwb3J0ZWQ+","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JSpzPFBhcnNlIEVycm9yPg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JSpzQWxpYXM6ICVz","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JSpzY3JsTnVtOg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JSpzY3JsVGltZTo=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JSpzY3JsVXJsOg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JSpzRXh0ZW5zaW9uczo=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JSpzRnVsbCBOYW1lOg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JSpzSW5kaXJlY3QgQ1JM","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JSpzaW5oZXJpdA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JSpzSXNzdWVyOg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JSpzS2V5IElkOg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JSpzTG9nICAgICAgIDogJXM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JSpzTG9nIElEICAgIDo=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JSpzTm8gUmVqZWN0ZWQgVXNlcy4=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JSpzTm8gVHJ1c3RlZCBVc2VzLg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JSpzT25seSBBdHRyaWJ1dGUgQ2VydGlmaWNhdGVz","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JSpzT25seSBDQSBDZXJ0aWZpY2F0ZXM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JSpzT25seSBVc2VyIENlcnRpZmljYXRlcw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JSpzUGF0aCBMZW5ndGggQ29uc3RyYWludDo=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JSpzUG9saWN5IExhbmd1YWdlOg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JSpzUG9saWN5IFRleHQ6ICVz","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JSpzcHJpdjo=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JSpzUmVqZWN0ZWQgVXNlczolKnM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JSpzUmVsYXRpdmUgTmFtZTolKnM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JSpzU2lnbmF0dXJlIDo=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JSpzU2lnbmVkIENlcnRpZmljYXRlIFRpbWVzdGFtcDo=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JSpzVGltZXN0YW1wIDo=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JSpzVHJ1c3RlZCBVc2VzOiUqcw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JSpzVmVyc2lvbiAgIDo=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JSpzVmVyc2lvbjogJWxkICgweCVsWCk=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JSpzWDI1NTE5IFByaXZhdGUtS2V5Og==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JSpzWDI1NTE5IFB1YmxpYy1LZXk6","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JSpzWm9uZTogJXMsIFVzZXI6","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JS4xNHMuJTAzZFo=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JTAyZCUwMmQlMDJkJTAyZCUwMmQlMDJkWg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JTA0ZCUwMmQlMDJkJTAyZCUwMmQlMDJkWg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JTA4WCUwOFglMDhYJTA4WCUwOFg=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JTEyc1B1YmxpYyBLZXkgQWxnb3JpdGhtOg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JTEyc1VuYWJsZSB0byBsb2FkIFB1YmxpYyBLZXk=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JTRkbXMgfCAlM2QgfCAoJTZkYnl0ZXMp","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JThzSXNzdWVyIFVuaXF1ZSBJRDo=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JThzU3ViamVjdCBVbmlxdWUgSUQ6","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JThzVmVyc2lvbjogJWx1ICgweCVseCk=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JWIgJWQgJVkgJUg6JU06JVM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JWQgYnl0ZXMgKCVkIHBhY2tldHMpIHJlY2VpdmVkIGluICVkbXMgKCVkLiVkIFBrdHNQZXJTZWMp","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JWQgcGFja2V0cyBkaXNjYXJkZWQgYXQgJXVtcw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JWQgcGFja2V0cyBzZW50IGluICVkbXM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JWQuJWQuJWQuJWQ=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JWQuJWQuJWQuJWQvJWQuJWQuJWQuJWQ=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JWk6JWk6IFNldHRpbmcgdGltZW91dCB0byAlaSBhbmQgdGltZW91dCBjaGVjayB0byAlaQ==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JWx1OiVzOiVzOiVkOiVz","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JXMgIEJ1aWx0Og==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JXMgJTJkICUwMmQ6JTAyZDolMDJkICVkJXM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JXMgJTJkICUwMmQ6JTAyZDolMDJkJS4qcyAlZCVz","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JXMgJXMlbHUgKCVzMHglbHgp","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JXMgYWxnb3JpdGhtICIlcyIgdW5zdXBwb3J0ZWQ=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JXMgZmFpbGVk","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JXMgTGljZW5zaW5nOiB1c2luZyB0cmlhbCBsaWNlbmNl","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JXMgUmVzdWx0IENvZGU6ICVkLiVz","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JXMgVm9pcCBwYWNrZXQgZGV0YWlsW0lkLCB0U2VudCwgdFJlY2Rd","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JXMlMDR4IC0gPFNQQUNFUy9OVUxTPg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JXMlYyUwOGx4LiVzJWQ=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JXMlbHUgKCVzMHglbHgp","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JXM6ICglZCBiaXQp","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JXM6IEVycm9yICVk","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JXM6JWQ6IE9wZW5TU0wgaW50ZXJuYWwgZXJyb3I6ICVz","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JXUgZGF5cywgJXUgaG91cnMsICV1IG1pbnM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JXklbSVkICVIJU0lUw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JXklbSVkJUglTSVT","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JiVzbmV0ZG93bnNlYz0lZCYlc25ldHVwc2VjPSVkJiVzbmV0ZG93bnBjPSVkLiVkJiVzaHR0cDN4eHNlYz0lZCYlc2h0dHA0eHhzZWM9JWQmJXNodHRwNXh4c2VjPSVkJiVzaHR0cHF4eHNlYz0lZA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JiVzcnVudGltZT0ldSYlc2ZyZWVxPSV1JiVzdmVyc2lvbj0=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JiVzdGNwcnhwb29vPSV1JiVzdGNwcnhib29vPSV1JiVzdGNwcnhwb3c9JXUmJXN0Y3ByeGJvdz0ldSYlc3RjcHJ4ZG9wPSV1JiVzdGNwcnhkb2I9JXUmJXN0Y3ByeHBkcD0ldSYlc3RjcHJ4cGRiPSV1JiVzdGNwcnhjcmNlcnI9JXUmJXN0Y3ByeGJvZmY9JXUmJXN0Y3ByeHRzPSV1JiVzdGNwcnhwcm9iZT0ldSYlc3RjcHJ4d2luemVyb3VwPSV1JiVzdGNwYnl0ZXNsb3N0PSV1JiVzdGNwbXR1PSV1","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JiVzdGNwdHhydHh0bW89JXUmJXN0Y3B0eHJ0eGZhc3Q9JXUmJXN0Y3B0eHByZXR4PSV1JiVzdGNwdHhicmV0eD0ldSYlc3RjcHR4c25kd2luY2xvc2U9JXUmJXN0Y3B0eHJjdndpbnVwZD0ldSYlc3RjcHR4cmN2YWNrdG9vbXVjaD0ldSYlc3RjcHR4cmN2ZHVwYWNrPSV1JiVzdGNwdHhzbmRwcm9iZT0ldSYlc3RjcHR4cGVyc2lzdHRpbWVvPSV1JiVzdGNwbXR1PSV1","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JmFjdC5kc3BlZWQ9JWQmYWN0LnVzcGVlZD0lZCZhY3QucW9zPSVkJmFjdC51cW9zPSVkJmFjdC5ydHQ9JWQmYWN0LnJ0dG1heD0lZCZhY3QucnR0YXZnPSVkJmFjdC5tYXhwYXVzZT0lZCZhY3QudW1heHBhdXNlPSVkJmFjdC5kdGVzdHR5cGU9JWMlZCAlcyZhY3QudXRlc3R0eXBlPSVjJWQgJXMmYWN0LnRjcG10dT0lZA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JmFjdC5tYXhyb3V0ZXNwZWVkPSVkJmFjdC5tYXhsaW5lc3BlZWQ9JWQmYWN0LmNvbmN1cnJlbnR0Y3A9JWQuJWQmYWN0LnRjcGZvcmNlZGlkbGU9JWQuJWQmYWN0LnVtYXhsaW5lc3BlZWQ9JWQmYWN0LnVjb25jdXJyZW50dGNwPSVkLiVkJmFjdC51dGNwZm9yY2VkaWRsZT0lZC4lZA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JmFjdC5ydW50aW1lPSV1","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JmFjdC52ZXJzaW9uPSVkLiVkLiVkLiVk","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JmJsaz1jb21w","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JmJ3PWVycm9yJnFvcz1lcnJvcg==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JmNhcGFjaXR5LmRjYXBhY2l0eT0ldSZjYXBhY2l0eS5kcGFja2V0cz0ldSZjYXBhY2l0eS5kbWF4YmFuZHdpZHRoPSV1","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JmNhcGFjaXR5LnBhY2tldHNpemU9JXUmY2FwYWNpdHkucW9zPSVk","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JmNhcGFjaXR5LnVjYXBhY2l0eT0ldSZjYXBhY2l0eS51cGFja2V0cz0ldSZjYXBhY2l0eS51bWF4YmFuZHdpZHRoPSV1","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JmNodW5rc2l6ZT0=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JmNodW5rc3RhcnQ9","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JmNvbm5lY3Rpb249JXM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JmRldGFpbC4lYyVzPQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JmRldGFpbC4lcz0=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JmRldGFpbC5jb25zb2xlPQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JmRldGFpbC5kYnk9","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JmRldGFpbC5ob3BzPQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JmRldGFpbC5pcHM9","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JmRldGFpbC5sb3NzPQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JmRldGFpbC5tYXhtcz0=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JmRldGFpbC5taW5tcz0=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JmRldGFpbC5tcz0=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JmRldGFpbC5ubmFtZT0=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JmRldGFpbC5vZmZlcj0lYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JmRldGFpbC5vcHRzcmVjdmQ9JXM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JmRldGFpbC5vcHRzcmVxPSVz","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JmRldGFpbC5wYWNrZXRzaXplPSVk","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JmRoY3Aub2ZmZXI9JWM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JmRoY3Aub3B0c3JlY3ZkPSVz","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JmRoY3Aub3B0c3JlcT0lcw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JmZpPWVycm9y","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JmZvcm1hdD0=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JmZwcz1lcnJvcg==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JmxhdD0lMC43ZiZsb249JTAuN2Ymcm91PSUwLjFm","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Jmxlbmd0aD0=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JmxpbmU9ZXJyb3ImbXA9ZXJyb3ImYXA9ZXJyb3I=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Jm11Yz1lcnJvcg==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Jm9wdHJlYz0=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Jm9wdHJlYz0tMQ==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Jm9wdHJlcT0=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Jm9wdHJlcT0tMQ==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JnBiPWVycm9y","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JnBibG9jaz0=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JnBwaD0lZCZwdD0lZCZuaD0lZCZuaHI9JWQmcHBuPSVkJm50PSVkJmFsPXRydWUmb21uaT1mYWxzZSZ0c3BlYz0lZA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JnBwcz1lcnJvcg==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JnJtaW49ZXJyb3ImcmF2Zz1lcnJvciZybWF4PWVycm9yJnJudW09ZXJyb3ImcnNhbT1lcnJvcg==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JnJvdXRlPWVycm9y","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JnNpZF94PXJ0YS4lcw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JnRlc3RpZD0lZA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JnR5cGU9ZXJyb3I=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JnR5cGU9aHR0cA==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JnR5cGU9c29ja2V0","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JykuZm9jdXMoKSI+","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"KGFwcCA9IGFwcGxpY2F0aW9uLCBlbmQgPSBjYXBhY2l0eSk=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"KElOVkFMSUQgUFNTIFBBUkFNRVRFUlMp","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"KE5lZ2F0aXZlKQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"KFRFU1RfRU5HX09QRU5TU0xfUEtFWSlMb2FkaW5nIFByaXZhdGUga2V5ICVz","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"KFRFU1RfRU5HX09QRU5TU0xfUkM0KSB0ZXN0X2luaXRfa2V5KCkgY2FsbGVk","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"KS0tLS0tLS0tLS0tLS0t","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"KS4gQ2xpY2sgZm9yIGZ1cnRoZXIgaGVscC4=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"KiogTm8gcmVzcG9uc2UgZnJvbSBzZXJ2ZXIgKio=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"KipURVNUTEVOR1RIPSVkKio=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"LCByZXRjb2RlPQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"LCB2YWx1ZT0=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"LSBhbiBpbnZhbGlkIHZhbHVlIHdhcyBzdWJtaXR0ZWQuIEFsbCBjaGFuZ2VzIGRpc2NhcmRlZC48L2ZvbnQ+","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"LS0tLS0tLS0tLS0tLS0tLQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"LS0tLS1CRUdJTg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Li4uLi4uLi4uLi4uLi4uLi4uLi4=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"L215c3BlZWQv","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"L215c3BlZWQvYWRtaW4=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"L215c3BlZWQvYmNzbG9nPw==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"L215c3BlZWQvYmNzbG9nP0JpbiBGaWxlIFNlbnQ=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"L215c3BlZWQvZGF0YS5iaW4=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"L215c3BlZWQvbGxwbHVnaW4vc3BlZWQvdXBsb2FkdGVzdD91cGxvYWRpZD0lcyZ0bz0lZA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"L215c3BlZWQvTXlTcGVlZFNlcnZlci9ydGFwYXNz","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"L215c3BlZWQvcGx1Z2luL3JvdXRlL2FwcGxldC90cmFjZT9wcm90bz0yJnVybD0lcyZkaD0lcw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"L215c3BlZWQvcGx1Z2luL3NwZWVkL2NyZWF0ZXVwbG9hZA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"L215c3BlZWQvcnRhL25xY2xpY2VuY2U/dWlkMj0lcyYlcz0lcyVz","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"L215c3BlZWQvcnRhL25xY2xpY2Vuc2U/dWlkMj0lcyYlcz0lcyVz","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"L25Db24gVHlwZSA9ICVz","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"MDEwMjAwMDAxMDA=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"MDEyMzQ1Njc4OQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"MDEyMzQ1Njc4OS4=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"MDEyMzQ1Njc4OS46YWJjZGVmQUJDREVG","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"MDEyMzQ1Njc4OUFCQ0RFRg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"MDEyMzQ1Njc4OWFiY2RlZg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"MDEyMzQ1Njc4OUFCQ0RFRkdISUpLTE1OT1BRUlNUVVZXWFlaYWJjZGVmZ2hpamtsbW5vcHFyc3R1dnd4eXouLw==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.01100000.00000004.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"MTIzNDU2Nzg5MA==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"MTQgKGRlZmF1bHQp","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"MTkyLjE2OC4wLjE=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"MTkyLjE2OC4wLjk4","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"MjU1LjI1NS4yNTUuMA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"MjU1LjI1NS4yNTUuMjU1","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"MjU4RUFGQTUtRTkxNC00N0RBLTk1Q0EtQzVBQjBEQzg1QjEx","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"M3JkIHBvc2l0aW9uIE1icHMgbWF0Y2hlcyB0aGUgbG93ZXN0IE1icHMgcmVjb3JkZWQ=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"M1M0WDQrNU41JTg=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0111E000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"NC4xNi4yMTQuMTY=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"NjY2NjY2NjY2NjY2NjY2NjY2NjY2NjY2NjY2NjY2NjY2NjY2NjY2NjY2NjY2NjY2XFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcc3NsXHJlY29yZFxzc2wzX3JlY29yZC5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"OTQ8ODw8PEA8RDxIPEw8UDxUPFs+YT9xPw==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0111E000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"OiAlZCBzYW1wbGVz","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"OkJBRCBCT09MRUFO","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"OkJBRCBFTlVNRVJBVEVE","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"OkJBRCBJTlRFR0VS","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"OkJBRCBPQkpFQ1Q=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"OyA7JDsoOyw7","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0111E000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"O0dsb2JhbFxCQ1NNdXRleA==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.01100000.00000004.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"PC9wPjwvY2VudGVyPg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"PC9wPjwvdGQ+","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"PC9zcGFuPjwvdGQ+","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"PC9zdHJvbmc+PC9wPg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"PC9zdHJvbmc+PC9wPjwvdGQ+PC90cj48dHI+PHRkIGNvbHNwYW49IjQiIGFsaWduPSJyaWdodCI+Jm5ic3A7PC90ZD48L3RyPg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"PC90YWJsZT4=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"PDw8PDxMT0cgQlJFQUs+Pj4+Pg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"PGEgaHJlZj0=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"PEFTTjEgJWQ+","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"PGJvZHkgb25Mb2FkPSJkb2N1bWVudC5nZXRFbGVtZW50QnlJZCgn","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"PENhbid0IHBhcnNlIGNlcnRpZmljYXRlPg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"PGNlbnRlcj48cD4=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"PGRpdiBhbGlnbj1jZW50ZXIgY2xhc3M9ImMxIj4=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"PGZvbnQgY29sb3I9IiNmZjAwMDAiPg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"PGZvcm0gbWV0aG9kPXBvc3QgYWN0aW9uPSIiPg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"PGh0bWw+PGhlYWQ+","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"PElOVkFMSUQ+","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"PGludmFsaWQ+","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"PG1ldGEgaHR0cC1lcXVpdj0icmVmcmVzaCIgY29udGVudD0=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"PG1ldGEgaHR0cC1lcXVpdj0icmVmcmVzaCIgY29udGVudD0iNTtVUkw9aHR0cDovLw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"PE5vIEZyaWVuZGx5IE5hbWU+","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"PHA+PGlucHV0IHR5cGU9InN1Ym1pdCIgbmFtZT0iYnV0dG9uIiBpZD0iYnV0dG9uIiB2YWx1ZT0=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"PHA+PHN0cm9uZz5OZXRRQ2hlY2sgLQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"PHRhYmxlIHdpZHRoPSIxMDAlIj4=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"PHRkIGFsaWduPSJsZWZ0Ij48cD4=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"PHRkIGFsaWduPSJsZWZ0Ij48cD48aW5wdXQgdHlwZT0icGFzc3dvcmQiIG5hbWU9","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"PHRkIGFsaWduPSJsZWZ0Ij48cD48aW5wdXQgdHlwZT0idGV4dCIgbmFtZT0=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"PHRkIGhlaWdodD0iMTAiPjxwPiA8L3A+PC90ZD4=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"PHRkIHdpZHRoPSIyMDAiIGFsaWduPSJyaWdodCI+PHA+","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"PHRkPiA8c3BhbiBzdHlsZT0iZm9udC1zaXplOjhwdCI+Ww==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"PHRyPjx0ZCBoZWlnaHQ9IjEwIiBhbGlnbj0ibGVmdCIgY29sc3Bhbj0iNCIgY2xhc3M9InByb3h5bGluZSI+PHA+PHN0cm9uZz4=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"PFU9XD1GPk0+","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0111E000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"PHVuc3VwcG9ydGVkPg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"PSA+Zj44P34/","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0111E000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Pik/Nz9JP1w/","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0111E000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"PjwvcD48L3RkPg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Pj8lP0A/ST9lPw==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0111E000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"PyA/JD8oPyw/MD80Pzg/PD9AP0Q/SD9MP1A/VD9YP1w/YD9kP2g/","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0111E000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"PyE/MD9tP3g/","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0111E000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Pyw/MD80Pzg/PD9EP0g/UD8=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0111E000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"QEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQD5AQEA/NDU2Nzg5Ojs8PUBAQEBAQEA=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"WyU0ZCwlNGRdID0gJWQgYnl0ZXMgKCVkS2Jwcyk=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"W0hFWCBEVU1QXTo=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"XFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcc3NsXHJlY29yZFxzc2wzX3JlY29yZC5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"X19jcnRfc3RydG94OjpmbG9hdGluZ19wb2ludF92YWx1ZTo6YXNfZG91Ymxl","type":"Unicode","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"X19jcnRfc3RydG94OjpmbG9hdGluZ19wb2ludF92YWx1ZTo6YXNfZmxvYXQ=","type":"Unicode","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"X2lzX2RvdWJsZQ==","type":"Unicode","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"X09QRU5TU0xfaXNzZXJ2aWNl","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"QSBmaWxlIG5lZWRlZCBmb3IgdGhlIHRlc3QgY291bGRuJ3QgYmUgcmV0cmlldmVkLiBQbGVhc2UgY29udGFjdCB0aGUgdGVzdCBwcm92aWRlciBhbmQgcmVwb3J0IHRoZSBpc3N1ZS4=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"QWNoIEJXOiAlaQ==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"QWNoaWV2ZWQgJWRrYnBzIHdpdGggbG9zcz0lZC4lMDJkJSU=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"QWNoaWV2ZWQgYmFuZHdpZHRoIGlzICVkS2Jwcw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"QUNNIGhhcyBiZWVuIGRldGVjdGVkIGFuZCBTZW5kUXVhbGl0eVRlc3RSZXBvcnQgaGFzIGJlZW4gdXNlZCB0byBzdWJtaXQgcmVwb3J0","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"QUNNIGhhcyBOT1QgYmVlbiBkZXRlY3RlZCBhbmQgU2VuZFNwZWVkVGVzdFJlcG9ydCBoYXMgYmVlbiB1c2VkIHRvIHN1Ym1pdCByZXBvcnQ=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"QURDQjc0REI0Njc4REY3NERDQjI5RkQzQjA2NzJBRjdEMTU4RUIwMw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"QWRkcmVzc0ZhbWlseQ==","type":"Unicode","source":"Runtime Data","process":"NetQCheckHTML5Agent.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"QWdlbnQgTmFtZQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"QWdlbnQgcGFja2V0IGxpbWl0IHJlYWNoZWQ=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YWdlbnRuYW1l","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YWlLZXlBbGc9MHg=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YWxnX3NlY3Rpb24=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"QUxMOiFDT01QTEVNRU5UT0ZERUZBVUxUOiFlTlVMTA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"QU5ZIFBSSVZBVEUgS0VZ","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"QVBJIHZlcnNpb24gaXM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"QXBwIG9yIENhcDo=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXBwbCBbICVkIF0=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXBwbGljYXRpb24gdmVyaWZpY2F0aW9uIGZhaWx1cmU=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"QXBwVXBkYXRlckxvZy50eHQ=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"QXBwVXBkYXRlclRocmVhZCBydW5uaW5nQ3VycmVudCB2ZXJzaW9uIG9mIGFwcCBpcyA1LjQ0","type":"Ansi","source":"Runtime Data","process":"NetQCheckHTML5Agent.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"YXBwdXBkYXRlcw==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"QVNOMSBPSUQ6ICVz","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogIShtZXRoLT5leHRfZmxhZ3MgJiBTU0xfRVhUX0ZMQUdfU0VOVCk=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogIWV4cGVjdGVkX2xlbiB8fCBzLT5zMy0+cHJldmlvdXNfY2xpZW50X2ZpbmlzaGVkX2xlbg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogIWV4cGVjdGVkX2xlbiB8fCBzLT5zMy0+cHJldmlvdXNfc2VydmVyX2ZpbmlzaGVkX2xlbg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogKChsb25nKW1zZ19oZHItPm1zZ19sZW4pID4gMA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogKCpjaG9pY2UpLT51LmFzSWRzT3JSYW5nZXMgPT0gTlVMTA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogKCpjaG9pY2UpLT51LmluaGVyaXQgPT0gTlVMTA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogKih1bnNpZ25lZCBpbnQgKilsb2NrID09IDE=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogKmN1cnJsZW4gPD0gKm1heGxlbg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogKnNidWZmZXIgIT0gTlVMTA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogKnNidWZmZXIgIT0gTlVMTCB8fCBidWZmZXIgIT0gTlVMTA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogMA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogYW9yICE9IE5VTEwgJiYgbWluICE9IE5VTEwgJiYgbWF4ICE9IE5VTEw=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogYW9yLT51LmFkZHJlc3NSYW5nZSA9PSBOVUxM","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogQVNJZGVudGlmaWVyQ2hvaWNlX2lzX2Nhbm9uaWNhbChjaG9pY2Up","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogYiA8PSBzaXplb2YgY3R4LT5idWY=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogYiA8PSBzaXplb2YgY3R4LT5maW5hbA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogYmwgPD0gKGludClzaXplb2YoY3R4LT5idWYp","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogY2hhaW4gIT0gTlVMTCAmJiBza19YNTA5X251bShjaGFpbikgPiAw","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogY2h1bmsgPj0gMA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogY3R4ICE9IE5VTEwgfHwgZXh0ICE9IE5VTEw=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogY3R4ID09IE5VTEwgfHwgY3R4LT52ZXJpZnlfY2IgIT0gTlVMTA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogY3R4LT5idWZfbGVuIDw9IChpbnQpc2l6ZW9mKGN0eC0+YnVmKQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogY3R4LT5idWZfbGVuID49IGN0eC0+YnVmX29mZg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogY3R4LT5idWZfb2ZmICsgaSA8IChpbnQpc2l6ZW9mKGN0eC0+YnVmKQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogY3R4LT5idWZfb2ZmIDwgKGludClzaXplb2YoY3R4LT5idWYp","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogY3R4LT5idWZfb2ZmIDw9IChpbnQpc2l6ZW9mKGN0eC0+YnVmKQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogY3R4LT5idWZsZW4gPD0gY3R4LT5idWZzaXpl","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogY3R4LT5jaXBoZXItPmJsb2NrX3NpemUgPT0gMSB8fCBjdHgtPmNpcGhlci0+YmxvY2tfc2l6ZSA9PSA4IHx8IGN0eC0+Y2lwaGVyLT5ibG9ja19zaXplID09IDE2","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogY3R4LT5kaWdlc3QtPm1kX3NpemUgPD0gRVZQX01BWF9NRF9TSVpF","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogY3R4LT5sZW5ndGggPD0gKGludClzaXplb2YoY3R4LT5lbmNfZGF0YSk=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogY3R4LT5udW1fdW50cnVzdGVkIDw9IG51bQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogY3R4LT50bXBfbGVuIDw9IDM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogZGF0YV9wbHVzX21hY19wbHVzX3BhZGRpbmdfc2l6ZSA8IDEwMjQgKiAxMDI0","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogZWNrZXktPmdyb3VwLT5tZXRoLT5rZXlnZW4gIT0gTlVMTA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogRVZQX0NJUEhFUl9DVFhfaXZfbGVuZ3RoKGN0eCkgPD0gKGludClzaXplb2YoY3R4LT5pdik=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogRVZQX0NJUEhFUl9pdl9sZW5ndGgoZW5jKSA8PSAoaW50KXNpemVvZihpdik=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogZi0+YWRkcmVzc0ZhbWlseS0+ZGF0YSAhPSBOVUxM","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogZ3JvdXAtPm1ldGgtPmdyb3VwX29yZGVyX2JpdHMgIT0gTlVMTA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogaSAhPSAw","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogaSA8PSBFVlBfTUFYX01EX1NJWkU=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogaSA8PSBu","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogaXRlbSAhPSBOVUxM","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogaiA8PSAoaW50KXNpemVvZihjdHgtPmtleSk=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogaiA8PSBzaXplb2YoYy0+aXYp","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDoga2V5bGVuIDw9IHNpemVvZiBrZXk=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogbCA8PSBzaXplb2YoYy0+aXYp","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogbCA8PSBzaXplb2YoaXYp","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogbGVuIDw9IFNTTDNfUlRfTUFYX1BMQUlOX0xFTkdUSA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogbGVuID09ICh1bnNpZ25lZCBpbnQpcmV0","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogbQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogbWFjX3NlY3JldF9sZW5ndGggPD0gc2l6ZW9mKGhtYWNfcGFkKQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogbWFjX3NpemUgPD0gRVZQX01BWF9NRF9TSVpF","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogbWRfc2l6ZSA8PSBFVlBfTUFYX01EX1NJWkU=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogbWVtY21wKG1pbiwgbWF4LCBsZW5ndGgpIDw9IDA=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogbiA+PSAw","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogbml2IDw9IEVWUF9NQVhfSVZfTEVOR1RI","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogbmtleSA8PSBFVlBfTUFYX0tFWV9MRU5HVEg=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogbnVtID09IDEgJiYgY3R4LT5udW1fdW50cnVzdGVkID09IG51bQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogbnVtID09IGN0eC0+bnVtX3VudHJ1c3RlZA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogbnVtID4gaSAmJiBpID4gMCAmJiBzcyA9PSAw","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogcmVjLT5vcmlnX2xlbiA+PSBtZF9zaXpl","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogcy0+ZDEtPndfbXNnX2hkci5tc2dfbGVuICsgKChzLT52ZXJzaW9uID09IERUTFMxX0JBRF9WRVIpID8gMyA6IERUTFMxX0NDU19IRUFERVJfTEVOR1RIKSA9PSAodW5zaWduZWQgaW50KXMtPmluaXRfbnVt","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogcy0+ZDEtPndfbXNnX2hkci5tc2dfbGVuICsgRFRMUzFfSE1fSEVBREVSX0xFTkdUSCA9PSAodW5zaWduZWQgaW50KXMtPmluaXRfbnVt","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogcy0+aW5pdF9udW0gPT0gKGludClzLT5kMS0+d19tc2dfaGRyLm1zZ19sZW4gKyBEVExTMV9ITV9IRUFERVJfTEVOR1RI","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogcy0+aW5pdF9vZmYgPT0gMA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogcy0+c2lkX2N0eF9sZW5ndGggPD0gc2l6ZW9mIHMtPnNpZF9jdHg=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogc3RybGVuKG9ianN0cikgKyAyMyArIDIgKiBFVlBfQ0lQSEVSX2l2X2xlbmd0aChlbmMpICsgMTMgPD0gc2l6ZW9mIGJ1Zg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogdnYgPT0gTlVMTA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogeCAhPSBOVUxM","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXNzZXJ0aW9uIGZhaWxlZDogWDUwOXYzX2FkZHJfaXNfY2Fub25pY2FsKGFkZHIp","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"QVRlc3QgUGFyYW1zOg==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"QXVkaXQgUG9zdGVk","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"QXV0aGVudGljYXRpb24gdXNlcm5hbWU=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXV0aGdyYW50ZWQ=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXV0aG9yaXR5IGFuZCBpc3N1ZXIgc2VyaWFsIG51bWJlciBtaXNtYXRjaA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXV0aG9yaXR5IGFuZCBzdWJqZWN0IGtleSBpZGVudGlmaWVyIG1pc21hdGNo","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"QXV0b2RpYWxETEw=","type":"Unicode","source":"Runtime Data","process":"NetQCheckHTML5Agent.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"QXV0b25vbW91cyBTeXN0ZW0gTnVtYmVycw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"QXdhaXRpbmcgdXBsb2FkIHJlcG9ydC4=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"QmFkIERIQ1AgY29va2ll","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YmFkIGxvY2FsZSBuYW1l","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"QkFEIFJFQ1VSU0lPTiBERVBUSA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"QmFkIHRpbWUgdmFsdWU=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"QkFELVRZUEU=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"QmFuZHdpZHRoIGxpbWl0IHJlYWNoZWQgKCVkYnBzKQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"QmFzaXMgVHlwZTogJXM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"QkMgKGRlZmF1bHQp","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"QkNTIGlzIGFscmVhZHkgcnVubmluZw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F51000.00000020.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"QkNTIGlzIG5vdyBydW5uaW5nIGluIHRoZSBiYWNrZ3JvdW5k","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"QkNTIFYlZC4lZE9wdGlvbnM6ICAgICAgIC1wID0gU2V0cyBXZWJzb2NrZXQgc2VydmVyIHBvcnQgKGRlZmF1bHQ9JWQp","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F51000.00000020.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"QkNTIFZlcnNpb24gJWkuJWk=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"QkNTIFZlcnNpb24gNS40NA==","type":"Ansi","source":"Runtime Data","process":"NetQCheckHTML5Agent.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"QkNTIFZlcnNpb246","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"QmVnaW4gZG93bnN0cmVhbSB0ZXN0OiBQa3RzUGVyU2VjPSVkLCBUb3RQa3RzPSVkLCBQa3RTej0lZA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YmVnaW4gcGFja2V0IG9rLCBzZW5kaW5nIHVwc3RyZWFtLi4u","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"QmVnaW4gdXBzdHJlYW0gdGVzdDogUGt0c1BlclNlYz0lZCwgVG90UGt0cz0lZCwgUGt0U3o9JWQ=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"QmluZCBmYWlsZWQ=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YmluZF9lbmdpbmU=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"QmluZGluZyB0byBsb2NhbCBlbmRwb2ludCAlcw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"QnVmZmVyaW5nIG9yIGRldmljZSBsaW1pdCBkZXRlY3RlZC4gRWxhcHNlZCBzdHJlYW0gdGltZSAoJWRtcykgZXhjZWVkcyBtYXggc3RyZWFtIHRpbWUgKCVkbXMp","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Ynl0ZXNwZXJwYWNrZXQ=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q0EgY2VydGlmaWNhdGUga2V5IHRvbyB3ZWFr","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q0Egc2lnbmF0dXJlIGRpZ2VzdCBhbGdvcml0aG0gdG9vIHdlYWs=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q2FsY3VsYXRpbmcgQWNoaWV2ZWQgYmFuZHdpZHRoIGZyb20gRGF0YVRpbWVz","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q2FsY3VsYXRpbmcgUW9TIGZyb20gRGF0YVRpbWVz","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q2FsbCB0byBDcmVhdGVXaW5kb3cgZmFpbGVkIQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F51000.00000020.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q2FsbCB0byBSZWdpc3RlckNsYXNzRXggZmFpbGVkIQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F51000.00000020.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q2FsbGVkIENBUElfZHNhX2RvX3NpZ24oKQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q2FsbGVkIGNhcGlfcnNhX3ByaXZfZGVjKCk=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q2FsbGluZyBjYXBpX2N0eF9mcmVlIHdpdGggJWx4","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y2Fubm90IGNyZWF0ZSBzb2NrZXQ=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q2Fubm90IG1lYXN1cmUgYmFuZHdpZHRoIC0gdGhlIHNlcnZlciBkb2VzIG5vdCBzdXBwb3J0IHRlc3RpbmcgdGhpcyBmYXN0","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q2Fubm90IHJlZGlyZWN0IHRvICVzLiBIVFRQUyBub3Qgc3VwcG9ydGVk","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q2FwIHRlc3QgY3JlYXRlZA==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q2FwIFRlc3QgVGhyZWFk","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q2FwYWNpdHkgcHJlLXRlc3QgZmFpbGVk","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q2FwYWNpdHkgUHJlLXRlc3QgaXRlcmF0aW9uIGxpbWl0IHJlYWNoZWQuIENoZWNrIGluaXRpYWwgYmFuZHdpZHRo","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q2FwYWNpdHkgcHJlLXRlc3QgcmVzdWx0IGlzICVkYnBz","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q2FwYWNpdHkgVGVzdCBBdWRpdA==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y2FwYWNpdHku","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y2FwaV9jZXJ0X2dldF9mbmFtZQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y2FwaV9jdHhfc2V0X3Byb3ZuYW1lLCBuYW1lPSVzLCB0eXBlPSVk","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y2FwaV9nZXRfa2V5LCBjb250bmFtZT0lcywgcHJvdm5hbWU9JXMsIHR5cGU9JWQ=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y2FwaV9nZXRfa2V5LCBjb250bmFtZT0lcywgUlNBX0FFU19DU1A=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y2FwaV9nZXRfcHJvdm5hbWUsIGluZGV4PSVk","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y2FwaV9nZXRfcHJvdm5hbWUsIHJldHVybmVkIG5hbWU9JXMsIHR5cGU9JWQ=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q0VSVElGSUNBVEU=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q2VydGlmaWNhdGUgJWQ=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y2VydGlmaWNhdGUgY2hhaW4gdG9vIGxvbmc=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y2VydGlmaWNhdGUgaGFzIGV4cGlyZWQ=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y2VydGlmaWNhdGUgaXMgbm90IHlldCB2YWxpZA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y2VydGlmaWNhdGUgbm90IHRydXN0ZWQ=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y2VydGlmaWNhdGUgcmVqZWN0ZWQ=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y2VydGlmaWNhdGUgcmV2b2tlZA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y2VydGlmaWNhdGUgc2lnbmF0dXJlIGZhaWx1cmU=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q2VydGlmaWNhdGUgVHJhbnNwYXJlbmN5IHJlcXVpcmVkLCBidXQgbm8gdmFsaWQgU0NUcyBmb3VuZA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q2VydGlmaWNhdGU6","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y2hhcmFjdGVycw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q2hlY2tpbmcgdmVyc2lvbiBvbiBzZXJ2ZXIuIHVwZGF0ZWJjcy52aXN1YWx3YXJlLmNvbS9hcHB1cGRhdGVzL05ldFFDaGVja0hUTUw1QWdlbnQvd2luZG93cy92ZXJzaW9uLnR4dA==","type":"Ansi","source":"Runtime Data","process":"NetQCheckHTML5Agent.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q2hvc2VuICVkIERhdGFUaW1lcyBiZXR3ZWVuICVkIGFuZCAlZA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y2xpZW50IGZpbmlzaGVk","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y2xpZW50aXA9","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y29lZmZpY2llbnQ6","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q29mYWN0b3I6","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q29tbWFuZHM6IHEgPSBxdWl0IHMgPSBzdXBwb3J0IGIgPSBiaW5kIGVycm9yIGhlbHA=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y29tcHV0ZXJuYW1l","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q29uZmlybSBhbnkgY2hhbmdlIGhlcmU=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q29uZmlybSBQYXNzd29yZA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y29uZmlybWF0aW9ucw==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q29ubmVjdCBmYWlsZWQgWyVzOiVkXQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q29ubmVjdGlvbiBjbG9zZWQgYnkgcmVtb3Rl","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q29ubmVjdGlvbiB0eXBlOi0tLS0tLS0tLS0tLS0tLS0tLS0tLS0gJXM=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q29ubmVjdGlvbjogS2VlcC1BbGl2ZQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q29ubmVjdGlvbjogVXBncmFkZQ==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q29uc2lkZXJpbmcgcGF1c2VzIGJldHdlZW4gJWRtcyBhbmQgJWRtcy4uLg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y29udCBbICVkIF0=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q29udGFjdGluZyB0aGUgdXBkYXRlIHNlcnZlciB3YXMgc3VjY2Vzc2Z1bA==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q29udGFpbmVyIE5hbWU6ICVzLCBLZXkgVHlwZSAlbHU=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q29udGVudCBsZW5ndGggZXhjZWVkcyBIVE1MIGJ1ZmZlcg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q29udGVudC1MZW5ndGg6","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q29udGVudC1UeXBlOg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q291bGQgbm90IGVzdGFibGlzaCBtb3N0IGxpa2VseSBwYXVzZQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y291bnRlcjo=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlVm9pcFRlc3Q6IFBhY2tldHMgcGVyIHRlc3QgbGltaXRlZCB0byAlZA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q1JMIGhhcyBleHBpcmVk","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q1JMIGlzIG5vdCB5ZXQgdmFsaWQ=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q1JMIHBhdGggdmFsaWRhdGlvbiBlcnJvcg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q1JMIHNpZ25hdHVyZSBmYWlsdXJl","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q1JMaXNzdWVy","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGFzbjFcYV9iaXRzdHIuYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGFzbjFcYV9kMmlfZnAuYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGFzbjFcYV9kaWdlc3QuYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGFzbjFcYV9kdXAuYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGFzbjFcYV9nZW50bS5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGFzbjFcYV9pbnQuYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGFzbjFcYV9tYnN0ci5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGFzbjFcYV9vYmplY3QuYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGFzbjFcYV9zdHJleC5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGFzbjFcYV9zdHJuaWQuYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGFzbjFcYV90aW1lLmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGFzbjFcYV91dGN0bS5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGFzbjFcYV92ZXJpZnkuYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGFzbjFcYW1ldGhfbGliLmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGFzbjFcYXNuMV9nZW4uYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGFzbjFcYXNuMV9saWIuYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGFzbjFcYXNuX21vaWQuYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGFzbjFcYXNuX21zdGJsLmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGFzbjFcYXNuX3BhY2suYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGFzbjFcYmlvX2FzbjEuYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGFzbjFcZDJpX3ByLmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGFzbjFcZXZwX2FzbjEuYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGFzbjFccDVfc2NyeXB0LmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGFzbjFcdF9wa2V5LmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGFzbjFcdGFzbl9kZWMuYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGFzbjFcdGFzbl9lbmMuYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGFzbjFcdGFzbl9mcmUuYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGFzbjFcdGFzbl9uZXcuYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGFzbjFcdGFzbl91dGwuYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGFzbjFceF9pbmZvLmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGFzbjFceF9wa2V5LmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGFzeW5jXGFzeW5jLmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGFzeW5jXGFzeW5jX3dhaXQuYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGJpb1xiX3ByaW50LmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGJpb1xiZl9idWZmLmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGJpb1xiaW9fbGliLmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGJpb1xic3NfZmlsZS5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGJpb1xic3NfbWVtLmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGJuXGJuX2FkZC5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGJuXGJuX2JsaW5kLmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGJuXGJuX2N0eC5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGJuXGJuX2Rpdi5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGJuXGJuX2V4cC5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGJuXGJuX2djZC5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGJuXGJuX2dmMm0uYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGJuXGJuX2ludGVybi5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGJuXGJuX2xpYi5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGJuXGJuX21vbnQuYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGJuXGJuX3ByaW1lLmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGJuXGJuX3ByaW50LmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGJuXGJuX3JhbmQuYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGJuXGJuX3JlY3AuYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGJuXGJuX3NoaWZ0LmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGJuXGJuX3NxcnQuYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGJ1ZmZlclxidWZmZXIuYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGNtYWNcY21hYy5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGNtc1xjbXNfYXNuMS5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGNtc1xjbXNfZGQuYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGNtc1xjbXNfZW5jLmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGNtc1xjbXNfZW52LmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGNtc1xjbXNfaW8uYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGNtc1xjbXNfa2FyaS5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGNtc1xjbXNfbGliLmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGNtc1xjbXNfcHdyaS5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGNtc1xjbXNfc2QuYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGNvbXBcY29tcF9saWIuYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGNvbmZcY29uZl9hcGkuYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGNvbmZcY29uZl9kZWYuYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGNvbmZcY29uZl9saWIuYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGNvbmZcY29uZl9tb2QuYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGN0XGN0X2xvZy5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGN0XGN0X29jdC5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGN0XGN0X3BvbGljeS5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGN0XGN0X3NjdC5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGN0XGN0X3NjdF9jdHguYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGN0XGN0X3ZmeS5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGN0XGN0X3g1MDl2My5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGRoXGRoX2FtZXRoLmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGRoXGRoX2FzbjEuYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGRoXGRoX2dlbi5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGRoXGRoX2tkZi5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGRoXGRoX2tleS5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGRoXGRoX2xpYi5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGRoXGRoX3BtZXRoLmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGRzYVxkc2FfYW1ldGguYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGRzYVxkc2FfYXNuMS5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGRzYVxkc2FfZ2VuLmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGRzYVxkc2FfbGliLmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGRzYVxkc2FfbWV0aC5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGRzYVxkc2Ffb3NzbC5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGRzYVxkc2FfcG1ldGguYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGRzb1xkc29fbGliLmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGVjXGVjMl9tdWx0LmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGVjXGVjMl9vY3QuYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGVjXGVjMl9zbXBsLmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGVjXGVjX2FtZXRoLmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGVjXGVjX2FzbjEuYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGVjXGVjX2tleS5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGVjXGVjX2ttZXRoLmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGVjXGVjX2xpYi5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGVjXGVjX211bHQuYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGVjXGVjX29jdC5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGVjXGVjX3BtZXRoLmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGVjXGVjX3ByaW50LmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGVjXGVjZGhfb3NzbC5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGVjXGVjZHNhX29zc2wuYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGVjXGVjZHNhX3NpZ24uYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGVjXGVjZHNhX3ZyZi5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGVjXGVja19wcm4uYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGVjXGVjcF9tb250LmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGVjXGVjcF9uaXN0LmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGVjXGVjcF9vY3QuYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGVjXGVjcF9zbXBsLmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGVjXGVjeF9tZXRoLmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGVuZ2luZVxlbmdfY25mLmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGVuZ2luZVxlbmdfY3RybC5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGVuZ2luZVxlbmdfZHluLmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGVuZ2luZVxlbmdfZmF0LmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGVuZ2luZVxlbmdfaW5pdC5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGVuZ2luZVxlbmdfbGliLmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGVuZ2luZVxlbmdfbGlzdC5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGVuZ2luZVxlbmdfcGtleS5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGVuZ2luZVxlbmdfdGFibGUuYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGVuZ2luZVx0Yl9hc25tdGguYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGVuZ2luZVx0Yl9jaXBoZXIuYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGVuZ2luZVx0Yl9kaWdlc3QuYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGVuZ2luZVx0Yl9wa21ldGguYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGVyclxlcnIuYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGV2cFxiaW9fYjY0LmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGV2cFxiaW9fZW5jLmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGV2cFxjbWV0aF9saWIuYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGV2cFxkaWdlc3QuYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGV2cFxlX2NhbWVsbGlhLmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGV2cFxlX2NoYWNoYTIwX3BvbHkxMzA1LmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGV2cFxlX3JjMi5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGV2cFxlbmNvZGUuYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGV2cFxldnBfY25mLmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGV2cFxldnBfZW5jLmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGV2cFxldnBfa2V5LmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGV2cFxldnBfbGliLmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGV2cFxldnBfcGJlLmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGV2cFxldnBfcGtleS5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGV2cFxtX3NpZ3Zlci5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGV2cFxwNV9jcnB0Mi5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGV2cFxwX2xpYi5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGV2cFxwX3NpZ24uYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGV2cFxwX3ZlcmlmeS5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGV2cFxwbWV0aF9mbi5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGV2cFxwbWV0aF9nbi5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGV2cFxwbWV0aF9saWIuYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGV2cFxzY3J5cHQuYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGV4X2RhdGEuYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGhtYWNcaG1fcG1ldGguYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGhtYWNcaG1hYy5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGluaXQuYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGtkZlxoa2RmLmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGtkZlx0bHMxX3ByZi5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXGxoYXNoXGxoYXNoLmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXG1vZGVzXG9jYjEyOC5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXG9fc3RyLmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXG9iamVjdHNcb19uYW1lcy5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXG9iamVjdHNcb2JqX2RhdC5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXG9iamVjdHNcb2JqX2xpYi5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXG9iamVjdHNcb2JqX3hyZWYuYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXG9jc3Bcb2NzcF9jbC5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXHBlbVxwZW1faW5mby5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXHBlbVxwZW1fbGliLmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXHBlbVxwZW1fb3RoLmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXHBlbVxwZW1fcGtleS5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXHBrY3MxMlxwMTJfY3JwdC5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXHBrY3MxMlxwMTJfZGVjci5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXHBrY3MxMlxwMTJfa2V5LmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXHBrY3MxMlxwMTJfdXRsLmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXHBrY3M3XHBrN19hdHRyLmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXHBrY3M3XHBrN19kb2l0LmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXHBrY3M3XHBrN19saWIuYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXHJhbmRcbWRfcmFuZC5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXHJzYVxyc2FfYW1ldGguYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXHJzYVxyc2FfY3JwdC5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXHJzYVxyc2FfZ2VuLmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXHJzYVxyc2FfbGliLmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXHJzYVxyc2FfbWV0aC5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXHJzYVxyc2Ffbm9uZS5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXHJzYVxyc2Ffb2FlcC5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXHJzYVxyc2Ffb3NzbC5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXHJzYVxyc2FfcGsxLmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXHJzYVxyc2FfcG1ldGguYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXHJzYVxyc2FfcHNzLmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXHJzYVxyc2Ffc2Fvcy5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXHJzYVxyc2Ffc2lnbi5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXHJzYVxyc2Ffc3NsLmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXHJzYVxyc2FfeDkzMS5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXHNycFxzcnBfbGliLmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXHN0YWNrXHN0YWNrLmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXHRocmVhZHNfbm9uZS5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXHVpXHVpX2xpYi5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXHg1MDlcYnlfZGlyLmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXHg1MDlcYnlfZmlsZS5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXHg1MDlcdF94NTA5LmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXHg1MDlceDUwOV9hdHQuYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXHg1MDlceDUwOV9jbXAuYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXHg1MDlceDUwOV9sdS5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXHg1MDlceDUwOV9vYmouYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXHg1MDlceDUwOV92ZnkuYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXHg1MDlceDUwOV92cG0uYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXHg1MDlceDUwOW5hbWUuYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXHg1MDlceF9uYW1lLmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXHg1MDlceF9wdWJrZXkuYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXHg1MDl2M1xwY3lfY2FjaGUuYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXHg1MDl2M1xwY3lfZGF0YS5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXHg1MDl2M1xwY3lfbm9kZS5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXHg1MDl2M1xwY3lfdHJlZS5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXHg1MDl2M1x2M19hZGRyLmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXHg1MDl2M1x2M19ha2V5LmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXHg1MDl2M1x2M19hbHQuYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXHg1MDl2M1x2M19hc2lkLmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXHg1MDl2M1x2M19iY29ucy5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXHg1MDl2M1x2M19jb25mLmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXHg1MDl2M1x2M19jcG9scy5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXHg1MDl2M1x2M19jcmxkLmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXHg1MDl2M1x2M19lbnVtLmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXHg1MDl2M1x2M19leHRrdS5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXHg1MDl2M1x2M19pYTUuYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXHg1MDl2M1x2M19pbmZvLmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXHg1MDl2M1x2M19uY29ucy5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXHg1MDl2M1x2M19wY2kuYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXHg1MDl2M1x2M19wY29ucy5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXHg1MDl2M1x2M19wbWFwcy5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXHg1MDl2M1x2M19wcm4uYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXHg1MDl2M1x2M19za2V5LmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXHg1MDl2M1x2M19zeG5ldC5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Y3J5cHRvXHg1MDl2M1x2M191dGwuYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q3J5cHRvQVBJIERTQSBtZXRob2Q=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q3J5cHRvQVBJIFJTQSBtZXRob2Q=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q3VycmVudCBWZXJzaW9uIE5vdCBDb21wYXRpYmxl","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q3ljbGUgJWRBdHRlbXB0IHRvIHN0cmVhbSBiYW5kd2lkdGg6ICV1YnBzICglZCBwa3RzL3NlYywgJWQgYnl0ZXMvcGt0KS4uLg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"ZDpcb3BlbnNvdXJjZVxvcGVuc3NsLTEuMS4wYlxzc2xccGFja2V0X2xvY2wuaA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RDpcb3BlbnNvdXJjZVxvcGVuc3NsLWRpc3QtMS4xLjBiLXZzMjAxNVxvcGVuc3NsLXg4Ni1zdGF0aWMtcmVsZWFzZS12czIwMTVcbGliXGVuZ2luZXMtMV8x","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"ZD0lLTJkIGhsPSVsZCBsPSU0bGQ=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"ZD0lLTJkIGhsPSVsZCBsPWluZg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RGF0YSBjb3VudCAlZCBpbiAldW1zICglZEticHMpLCB0b3RhbCAlZCglZEticHMp","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RGVidWdIZWFwRmxhZ3M=","type":"Unicode","source":"Runtime Data","process":"NetQCheckHTML5Agent.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"ZGVmYXVsdF9hbGdvcml0aG1z","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"REVLLUluZm86","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RGVsYXkgYWZ0ZXIgbG9zcyBpcyAlZG1z","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RGVsYXkgQXZlLiAgID0gJWQuJWRtcw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RGVzdHJveWluZyBIdHRwU2VydmVyU2Vzc2lvbiBvbiBzb2NrZXQgJWQ=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"REggUGFyYW1ldGVycw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"REggUEFSQU1FVEVSUw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"REggUHJpdmF0ZS1LZXk=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"REggUHVibGljLUtleQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"REhDUCBkaXNjb3ZlciBzZW50IC0gd2FpdGluZyBmb3Igb2ZmZXIuLi4=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"REhDUCBzZXJ2ZXIgbm90IGRldGVjdGVk","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"REhDUCBUZXN0IEF1ZGl0","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"REhDUCB0ZXN0IGNvbXBsZXRl","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"ZGhjcG9wdGlvbnM6ICVz","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"REhDUFNlcnZlcg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"REhDUHNlcnZlcnM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RGlmZmVyZW50IENSTCBzY29wZQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RGlyZWN0aW9uIHNldCB0byBEb3du","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RGlyZWN0aW9uIHNldCB0byBVcA==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RGlyTmFtZTo=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"ZGlzY2FyZG1z","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RGlzY2FyZHMgICAgID0gJTAyZC4lMDJkJSU=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"ZGlzcGxheXNwZWVk","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RGlzcGxheVN0cmluZw==","type":"Unicode","source":"Runtime Data","process":"NetQCheckHTML5Agent.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RE5TIGxvb2t1cCBmYWlsZWQ=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"ZG5zdGltZT0=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"ZG9kb3dubG9hZA==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RG93biBIYW5kbGUgRGVsZXRlZA==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RG93biBTZXNzaW9uczo=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RG93biBUZXN0IFR5cGU6","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RG93bmxvYWQgcGFja2V0IGRldGFpbA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"ZG93bmxvYWQucG9ydD0=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RG93bnN0cmVhbQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"ZG93bnN0cmVhbQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RG93bnN0cmVhbSBSZXN1bHRzIHNlbnQgdG8gc2VydmVy","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RG93bnN0cmVhbSB0ZXN0OiBubyByZXNwb25zZSBmcm9tIHNlcnZlcg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RG93bnN0cmVhbSB0ZXN0OiBubyByZXNwb25zZSBmcm9tIHNlcnZlci4gJXM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RG93bnN0cmVhbSB0ZXN0OiBzdGFydGVkIG9r","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"ZG93bnR5cGU=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RFNBLVBhcmFtZXRlcnM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"ZHNhX3BhcmFtZ2VuX2JpdHM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"ZHNhX3BhcmFtZ2VuX21k","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"ZHNhX3BhcmFtZ2VuX3FfYml0cw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RHVyYXRpb246","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RHVyYXRpb249JWRzLCBwcHM9JWQsIHBwdD0lZCwgYnBwPSVk","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"ZHluYW1pY19wYXRo","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RUNESEUtRUNEU0EtQUVTMTI4LUdDTS1TSEEyNTY=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RUNESEUtRUNEU0EtQUVTMTI4LUdDTS1TSEEyNTY6RUNESEUtRUNEU0EtQUVTMjU2LUdDTS1TSEEzODQ=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RUNESEUtRUNEU0EtQUVTMjU2LUdDTS1TSEEzODQ=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RUNEU0E=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RUNEU0EtUGFyYW1ldGVycw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RWRpUGFydHlOYW1l","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RWRpUGFydHlOYW1lOjx1bnN1cHBvcnRlZD4=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RUUgY2VydGlmaWNhdGUga2V5IHRvbyB3ZWFr","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RWZmaWNpZW5jeSBUZXN0IEluaXQ=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RWZmaWNpZW5jeSBUZXN0IFRocmVhZA==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RW1haWwgYWRkcmVzcyBtaXNtYXRjaA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"ZW1haWw6JXM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RU5DUllQVEVE","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RU5DUllQVEVEIFBSSVZBVEUgS0VZ","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RW5kTG9zcyA9ICVkLiVkJSU=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RW5kTXMgPSAlZA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RW5kVm9JUFRlc3RTZXNzaW9uIGF0ICVz","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"ZW5naW5lX2lk","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"ZW5naW5lc1xlX2NhcGkuYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RW50ZXIgUGFzc3dvcmQ=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RW50ZXIgUEVNIHBhc3MgcGhyYXNlOg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RW50ZXIgVXNlcm5hbWU=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RW51bVN5c3RlbUxvY2FsZXNFeA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RXJyb3IgJWQgZ2V0dGluZyBzb2NrZXQgYnVmZmVyIHNpemU=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RXJyb3IgJWQgZ2V0dGluZyBzb2NrZXQgZXJyb3I=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RXJyb3IgJWQgc2V0dGluZyBzb2NrZXQgYnVmZmVyIHNpemU=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RXJyb3IgYWNjZXNzaW5nIHRoZSBzcGVjaWZpZWQgZmlsZQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RXJyb3IgY29kZT0gMHg=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RXJyb3IgY3JlYXRpbmcgRGF0YU91dHB1dFN0cmVhbQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RXJyb3IgaW4gZW5jb2Rpbmc=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RXJyb3IgTG9n","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"ZXJyb3I6JTA4bFg6JXM6JXM6JXM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RXN0aW1hdGluZyBsaW5lIHNwZWVkIGZyb20gYXZlcmFnZSBwYXVzZSBbJWRd","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RXN0aW1hdGluZyBNVFU=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RXZhbHVhdGlvbiBleHBpcmVk","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"ZXhjbHVkZWQgc3VidHJlZSB2aW9sYXRpb24=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RXhwZWN0aW5nOg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"ZXhwbGljaXRUZXh0","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"ZXhwb25lbnQxOg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"ZXhwb25lbnQyOg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RXhwb25lbnQ6","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"ZXh0ZW5kZWQgbWFzdGVyIHNlY3JldA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RmFpbGVkIGdldHRpbmcgY29uZmlndXJhdGlvbiBvZiBzZXJ2ZXIgJyVzJw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RmFpbGVkIHRvIGFsbG9jYXRlIHJlc291cmNl","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RmFpbGVkIHRvIGJpbmQgdG8gbG9jYWwgcG9ydC9pbnRlcmZhY2U=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RmFpbGVkIHRvIGNhbGN1bGF0ZSBiYW5kd2lkdGg=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RmFpbGVkIHRvIGNoYW5nZSB0aW1lciByZXNvbHV0aW9u","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RmFpbGVkIHRvIGNvbm5lY3QgdG8gU0lQIHNvY2tldA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RmFpbGVkIHRvIGNyZWF0ZSBsaW5lIGJ1ZmZlcg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RmFpbGVkIHRvIGNyZWF0ZSBSZWNlaXZlZCBUaW1lcyBhcnJheQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RmFpbGVkIHRvIGNyZWF0ZSBTZW50IFRpbWVzIGFycmF5","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RmFpbGVkIHRvIGNyZWF0ZSBzb2NrZXQ=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RmFpbGVkIHRvIGNyZWF0ZSB0ZXN0IHRocmVhZA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RmFpbGVkIHRvIGNyZWF0ZSB1ZHAgc29ja2V0","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RmFpbGVkIHRvIGNyZWF0ZSBVRFAgc29ja2V0","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RmFpbGVkIHRvIGNyZWF0ZSBVRFAgc29ja2V0IGZvciBTSVAgdGVzdA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RmFpbGVkIHRvIGRvd25sb2FkZWQgcmVzdWx0cw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RmFpbGVkIHRvIGdldCBjb21wdXRlciBuYW1lLiBFcnJvciAldSBbJXNd","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RmFpbGVkIHRvIGdldCBzZXJ2ZXIgY29uZmln","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RmFpbGVkIHRvIGdldCBzZXJ2ZXIgY29uZmlnLg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RmFpbGVkIHRvIGdldCBzZXJ2ZXIgdGlja2V0Lg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RmFpbGVkIHRvIGdldCB1cGxvYWQgcmVzdWx0IHNldC4=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RmFpbGVkIHRvIGxvZyByZXBvcnQgc2VjdGlvbg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RmFpbGVkIHRvIG1lYXN1cmUgbGluZSBjYXBhY2l0eQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RmFpbGVkIHRvIG9idGFpbiBjYXBhY2l0eSB0ZXN0IHNlcnZlciBpbmZv","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RmFpbGVkIHRvIG9wZW4gY29uZmlndXJhdGlvbiBmaWxl","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RmFpbGVkIHRvIG9wZW4gc29ja2V0","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RmFpbGVkIHRvIHJlY2VpdmUgdXBsb2FkIHNwZWVkIHRpbWVzIFslZCBvZiAlZCByZWNlaXZlZF0=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"ZmFpbGVkIHRvIHJlc29sdmUgKA==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RmFpbGVkIHRvIHJlc29sdmUgbmFtZSAoZ2V0aG9zdGJ5bmFtZSgpKQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RmFpbGVkIHRvIHNlbmQgY29udGVudCBbJWQgb2YgJWRd","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RmFpbGVkIHRvIHNldCBicm9hZGNhc3Qgb3B0aW9u","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RmFpbGVkIHRvIHNldCBkZWZhdWx0IGNvbmZpZ3VyYXRpb24=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RmFpbGVkIHRvIHNldCByZXVzZSBhZGRyZXNzIG9wdGlvbg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RmFpbGVkIHRvIHNldCBzb2NrZXQgYnVmZmVyIHNpemU=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RmFpbGVkIHRvIHN0YXJ0IHRoZSBUZXN0IGFnZW50","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RmF0YWwgRXJyb3IsIGFiYW5kb25pbmcgdGVzdA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RmllbGQgVHlwZTogJXM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RmluYWwgcmVhZGluZzogQWNoaWV2ZWQgJXVLYnBzIHdpdGggbG9zcz0lMC4zZiUl","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RmluYWwgdGVzdCBmYWlsZWQgdG8gbWVhc3VyZSBiYW5kd2lkdGg=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RmluYWwgdGVzdCB3aXRoIGJhbmR3aWR0aCA9ICV1YnBz","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"ZmluYWxyZXBvcnQ=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Zmlwc19tb2Rl","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Rmlwc0FsZ29yaXRobVBvbGljeQ==","type":"Unicode","source":"Runtime Data","process":"NetQCheckHTML5Agent.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RmlyZXdhbGwgVGVzdCBBdWRpdA==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RmlyZXdhbGwgdGVzdCBjcmVhdGVk","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RmlyZXdhbGxUZXN0OiB0byBUQ1AgcG9ydCAlZA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RmlyZXdhbGxUZXN0OiB0byBVRFAgcG9ydCAlZA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RmlybXdhcmUgdmVyc2lvbjogJXMgKCVzKQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Zm9ybWF0IGVycm9yIGluIGNlcnRpZmljYXRlJ3Mgbm90QWZ0ZXIgZmllbGQ=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Zm9ybWF0IGVycm9yIGluIGNlcnRpZmljYXRlJ3Mgbm90QmVmb3JlIGZpZWxk","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Zm9ybWF0IGVycm9yIGluIENSTCdzIGxhc3RVcGRhdGUgZmllbGQ=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Zm9ybWF0IGVycm9yIGluIENSTCdzIG5leHRVcGRhdGUgZmllbGQ=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Rm91bmQgQUNNIG1ldHJpY3M=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RnJpZW5kbHkgTmFtZSAiJXMi","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"ZnVuYyglbHUp","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2VuZXJhbEVycm9y","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Z2VuZXJhdG9yOg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R0VUIC9teXNwZWVkL3BsdWdpbi9yb3V0ZS9hcHBsZXQvcmVsb29rdXA/JmRldGFpbC5pcHM9","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RGF0ZUZvcm1hdEV4","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RmlsZUluZm9ybWF0aW9uQnlIYW5kbGVFeA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RmlsZVRocmVhZCB3aXRob3V0IFdlYnNvY2tldCBzZXNzaW9u","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Z2V0aG9zdGJ5bmFtZTogZmFpbGVkIHRvIHJlc29sdmUgaXAgYWRkcmVzcyBmcm9tICclcyc=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0TG9jYWxlSW5mb0V4","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0U3lzdGVtVGltZVByZWNpc2VBc0ZpbGVUaW1l","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0VGltZUZvcm1hdEV4","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0dGluZyBDb25maWd1cmF0aW9uIG9mIHNlcnZlciAnJXMn","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0VXNlckRlZmF1bHRMb2NhbGVOYW1l","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Z2dlbmNyeXB0b1xkc2FcZHNhX2dlbi5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2l2aW5nIHVw","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2xvYmFsXEJDU011dGV4","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F51000.00000020.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R3JvdXAgSUQgRmV0Y2hlZCAlaQ==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R3JvdXAgSUQgU2V0ICVp","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R3JvdXBJZCA8IDA=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R3JvdXBJZCA+IC0x","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Z3JvdXBpZDogJWk=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SGFzaCBBbGdvcml0aG06","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SEJSQVZhbGlkYXRlQ2ZnOiBDcmMgZmFpbCBzdG9yZWQ9JTA4eCwgYWN0dWFsPSUwOHg=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SEJSQVdyaXRlQ2ZnIGVycm9yOiB3cm90ZSAlZCBvZiAlZCBieXRlcw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SEJSQVdyaXRlQ2ZnOiBPSw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SGVhZGVyOiAlcw==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SGVscGVyRGxsTmFtZQ==","type":"Unicode","source":"Runtime Data","process":"NetQCheckHTML5Agent.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"aGV4c2VjcmV0","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"aGlkZGVuPjwvcD48L3RkPg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SGlnaCBNYnBzICogSGlnaCBQY3Q6ICVm","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SGlnaCBNYnBzIEhpZ2g6ICVm","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SGlnaCBNYnBzIExvdzogJWY=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SGlnaCBNYnBzIE1pZGRsZTogJWY=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SGlnaCBQY3QgSGlnaDogJWY=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SGlnaCBQY3QgTG93OiAlZg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SGlnaCBQY3QgTWlkZGxlOiAlZg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SGlnaDogJWY=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SGlnaGVzdCBhY2hpZXZlZCA9ICUwLjFm","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SG9wcyA9ICVk","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SG9zdG5hbWU=","type":"Unicode","source":"Runtime Data","process":"NetQCheckHTML5Agent.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SG9zdG5hbWUgbWlzbWF0Y2g=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SHR0cCBQcm94eSBTZXR0aW5ncw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SFRUUCBzZXJ2ZXIgcnVubmluZyBPSw==","type":"Ansi","source":"Runtime Data","process":"NetQCheckHTML5Agent.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SFRUUC8xLjEgMTAxIFN3aXRjaGluZyBQcm90b2NvbHM=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SFRUUC8xLjEgMjAwIE9LU2VydmVyOiBOZXRRQ2hlY2tDYWNoZS1jb250cm9sOiBuby1jYWNoZUNvbnRlbnQtdHlwZTogdGV4dC9odG1sQ29udGVudC1sZW5ndGg6IDM1MjwvZGl2PjwvdGQ+IDwvdHI+PC90YWJsZT48L2Rpdj4gYm90dG9tLS0+PGRpdiBzdHlsZT0iYmFja2dyb3VuZDp1cmwoJ2JvdHRvbWJhY2suZ2lmJykgbm8tcmVwZWF0IHRvcCBsZWZ0Ij48Y2VudGVyPjxiaWc+Jm5ic3A7PC8=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SFRUUC8xLjEgMjAwIE9LU2VydmVyOiBOZXRRQ2hlY2tDYWNoZS1jb250cm9sOiBuby1jYWNoZUNvbnRlbnQtdHlwZTogdGV4dC9odG1sQ29udGVudC1sZW5ndGg6IDU0MzxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIgY29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij48dGl0bGU+QWNjZXNzIENUIGFuZCBNeUNvbm5lY3Rpb24gU2VydmVyIG5ldHdvcmsgYXNzZXNzbWVudCB0ZXN0aW5nLCBuZXR3b3Jr","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SFRUUC8xLjEgMjAwIE9LU2VydmVyOiBOZXRRQ2hlY2tDYWNoZS1jb250cm9sOiBuby1jYWNoZUNvbnRlbnQtdHlwZTogdGV4dC9odG1sQ29udGVudC1sZW5ndGg6IDcxMyBvdXRzaWRlLS0+PGJyPjxjZW50ZXI+PHRhYmxlIHdpZHRoPTgwMCBjZWxscGFkZGluZz0wIGNlbGxzcGFjaW5nPTAgYm9yZGVyPTA+PHRyPjx0ZD4gdG9wLS0+PGRpdiBpZD0idG9wIj48ZGl2IGlkPSJ0b3BiYWNrIj48aQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SFRUUC8xLjFBY2NlcHQ6IHRleHQ=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"aHR0cDovLyVzOiVkJXM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"aHR0cDovL3d3dy52aXN1YWx3YXJlLmNvbS9iY3Mvc3VwcG9ydC5odG1s","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"aHR0cDovL3d3dy52aXN1YWx3YXJlLmNvbS9iY3Mvc3VwcG9ydC9iaW5kX2Vycm9yLmh0bWw=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"aHR0cDovL3d3dy52aXN1YWx3YXJlLmNvbS9iY3Mvc3VwcG9ydC9lY181MDMuaHRtbD9maWxlPQ==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SHR0cEdldCByZXR1cm5lZCAyMDAuIFZlcnNpb24gb24gc2VydmVyIGlzIDUuNDQ=","type":"Ansi","source":"Runtime Data","process":"NetQCheckHTML5Agent.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"aHR0cHByb3h5","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SHR0cFNlcnZlclNlc3Npb24gZW5kIHRocmVhZA==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SHR0cFNlc3Npb25SdW4gbm8gbWVtb3J5IGZvciBzb2NrZXQgJXU=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SWRlbnRpZmllcyB0aGlzIGRldmljZSB3aGVuIHZpZXdpbmcgcmVzdWx0cw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SW1hZ2UgUGF0aA==","type":"Unicode","source":"Runtime Data","process":"NetQCheckHTML5Agent.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"aW5kZXguaHRtbA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SW5oaWJpdCBQb2xpY3kgTWFwcGluZw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"aW5oaWJpdFBvbGljeU1hcHBpbmc=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SW5pdGlhbCBiYW5kd2lkdGggPSAgJWRrYnBz","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SW5pdGlhbCBiYW5kd2lkdGggbGltaXRlZCB0byAlZGticHMgYnkgZGF0YSByYXRlIGxpbWl0","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"aW5pdGlhdGUuanM=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SW5pdFNlcnZlckNUWA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SW5zdWZmaWNpZW50IGJhbmR3aWR0aCBmcm9tIHNlcnZlcg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SW5zdWZmaWNpZW50IGRhdGEgdG8gZXN0aW1hdGUgbGluZSBzcGVlZA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SW5zdWZmaWNpZW50IHZhbGlkIHNhbXBsZXMgKCVkIG9mICVkKQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SW50ZWwgSGFyZHdhcmUgQ3J5cHRvZ3JhcGhpYyBTZXJ2aWNlIFByb3ZpZGVy","type":"Unicode","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJmYWNlVHlwZTolcw==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"aW52YWxpZCBDQSBjZXJ0aWZpY2F0ZQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SW52YWxpZCBjZXJ0aWZpY2F0ZSB2ZXJpZmljYXRpb24gY29udGV4dA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SW52YWxpZCBIYW5kbGU=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SW52YWxpZCBJUCBhZGRyZXNzICVz","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"aW52YWxpZCBub24tQ0EgY2VydGlmaWNhdGUgKGhhcyBDQSBtYXJraW5ncyk=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"aW52YWxpZCBvciBpbmNvbnNpc3RlbnQgY2VydGlmaWNhdGUgZXh0ZW5zaW9u","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"aW52YWxpZCBvciBpbmNvbnNpc3RlbnQgY2VydGlmaWNhdGUgcG9saWN5IGV4dGVuc2lvbg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"aW52YWxpZCBzdG9pIGFyZ3VtZW50","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"aW52YWxpZCBzdHJpbmcgcG9zaXRpb24=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SW52YWxpZCB0ZXN0IHBhcmFtZXRlcihzKQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"aW9zX2Jhc2U6OmJhZGJpdCBzZXQ=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"aW9zX2Jhc2U6OmVvZmJpdCBzZXQ=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"aW9zX2Jhc2U6OmZhaWxiaXQgc2V0","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"aW9zdHJlYW0=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"aW9zdHJlYW0gc3RyZWFtIGVycm9y","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SVAgQWRkcmVzcw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SVAgYWRkcmVzcyBtaXNtYXRjaA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SVAgQWRkcmVzczolZC4lZC4lZC4lZA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SVAgQWRkcmVzczo8aW52YWxpZD4=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SVAgRW51bTogJWk=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SVAgT2ZmZXJlZDogJWk=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SVB2NC1TQUZJ","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SVB2Ni1TQUZJ","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SXNzdWVyIGNlcnRpZmljYXRlIGxvb2t1cCBlcnJvcg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SXNzdWVyOiVj","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SXNWYWxpZExvY2FsZU5hbWU=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Sml0dGVyIEF2ZS4gID0gJWQuJWRtcw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Sml0dGVyIE1heC4gID0gJWQuJWRtcw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"a2V5IGV4cGFuc2lvbg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"a2V5IHVzYWdlIGRvZXMgbm90IGluY2x1ZGUgY2VydGlmaWNhdGUgc2lnbmluZw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"a2V5IHVzYWdlIGRvZXMgbm90IGluY2x1ZGUgQ1JMIHNpZ25pbmc=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"a2V5IHVzYWdlIGRvZXMgbm90IGluY2x1ZGUgZGlnaXRhbCBzaWduYXR1cmU=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"TENJRFRvTG9jYWxlTmFtZQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"TGVhdmUgYmxhbmsgdG8gbWFuYWdlIGNlbnRyYWxseQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"TGVnYWN5IEFnZW50IFNldHRpbmdz","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"bGVuZ3RoIGlzIGdyZWF0ZXIgdGhhbiAlbGQ=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"TGlicmFyeVBhdGg=","type":"Unicode","source":"Runtime Data","process":"NetQCheckHTML5Agent.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TGljZW5jZSBFeHBpcmVk","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"bGljZW5zZWV4cGlyZWQ=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"TGljZW5zaW5nOiAlcw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"TGljZW5zaW5nOiBVVUlEIGlzICclcyc=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"bGlzdDxUPiB0b28gbG9uZw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"TGlzdGVuIGZhaWxlZA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"TGlzdGluZyBjZXJ0cyBmb3Igc3RvcmUgJXM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"TG9hZCBjb25maWcuIFNpemUgPSAlZCBieXRlcw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"TG9jYWwgSVAgYWRkcmVzczogJXM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"TG9jYXRpb246","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"bG9jYXRpb25zPQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"TG93IE1icHMgKiBMb3cgUGN0OiAlZg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"TWFjaGluZUd1aWQ=","type":"Unicode","source":"Runtime Data","process":"NetQCheckHTML5Agent.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"bWFnaWM9MHg=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"bWFqb3J2ZXJzaW9uPQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"TWFyIDE0IDIwMTk=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"TWFzayBBbGdvcml0aG06","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"bWFzdGVyIHNlY3JldA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"TWF4IGRhdGEgcmF0ZSA9ICVkIGJ5dGVzIHBlciBzZWNvbmQ=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"TWF4IEVmZmVjdGl2ZSBCYW5kd2lkdGg6ICVm","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"TWF4IHBhY2tldCByYXRlID0gJWQgKCVkIGJwcyk=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"TWF4IHBhdXNlIGlzICVkbXM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"TWF4QndXaXRoTm9Mb3NzID0gJWQ=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"TWF4QndXaXRoU2xpZ2h0TG9zcyA9ICVk","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"TWF4aW11bSBwYWNrZXQgc2l6ZSBsZXNzIHRoYW4gb3IgZXF1YWwgdG8gJXUgaXMgJXVNVFUgaXMgYXJvdW5kICV1IGJ5dGVz","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"bWF4bGVuZ3RoPQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"TWF4TGluZVNwZWVkS2JwcyA9ICVkIChEYXRhPSVkIG9mICVkLCBUaW1lPSVkICglZCBvZiAlZCBzYW1wbGVzIGNvbnNpZGVyZWQpKQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"TWF4TGluZVNwZWVkS2JwcyA9ICVkIChEYXRhPSVkLCBUaW1lPSVkICglZCBvZiAlZCBzYW1wbGVzIGNvbnNpZGVyZWQpKQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"TWF4TG9zcyA9ICVkLiVkJSU=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"TWF4TXMgPSAlZA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"TWF4UGFja2V0UmF0ZSAoJWQpIHJlZHVjZXMgTWF4QmFuZHdpZHRoIHRvICVkIGJwcw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"bWF4c2l6ZT0=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"TWF4U29ja2FkZHJMZW5ndGg=","type":"Unicode","source":"Runtime Data","process":"NetQCheckHTML5Agent.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWJwc2VjOiAlZg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"bWNzc2pjLnZpc3VhbHdhcmUuY29t","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"TWVhc3VyaW5nIFJUVA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"bWdmMSB3aXRoIHNoYTEgKGRlZmF1bHQp","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"bWggY29tcGFyZSAlcw==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"TUlDLUNMRUFS","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"TUlDLU9OTFk=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"TWlkIE1icHMgKiBNaWQgUGN0OiAlZg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"TWlkZGxlOiAlZg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"TWluPSVkbXMsIE1heD0lZG1zLCBBdmc9JWRtcy4gUm91dGUgc3BlZWQ9JWRLYnBz","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"TWluQndXaXRoTG9zcyA9ICVk","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"bWlua2VybmVsXGNydHNcdWNydFxpbmNcY29yZWNydF9pbnRlcm5hbF9zdHJ0b3guaA==","type":"Unicode","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"bWlub3J2ZXJzaW9uPQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"TWluU29ja2FkZHJMZW5ndGg=","type":"Unicode","source":"Runtime Data","process":"NetQCheckHTML5Agent.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TW9zdCBsaWtlbHkgcGF1c2UgaXMgJWRtcw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"bXNndHlwZT1maWxlZGF0YSZmaWxlbmFtZT0=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"TXlDb25uZWN0aW9uIFNlcnZlcg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"bXlzcGVlZC9NeVNwZWVkU2VydmVyL2FjbWNhcHM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"bXlzcGVlZC9NeVNwZWVkU2VydmVyL21zcw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"bXlzcGVlZC9NeVNwZWVkU2VydmVyL3RpY2tldC9yYQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"bmFtZSBjb25zdHJhaW50cyBtaW5pbXVtIGFuZCBtYXhpbXVtIG5vdCBzdXBwb3J0ZWQ=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"TmFtZVNwYWNlX0NhbGxvdXQ=","type":"Unicode","source":"Runtime Data","process":"NetQCheckHTML5Agent.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TmV0UUNoZWNrIEFQSSB2ZXJzaW9uPSVkLiVkLiVkLiVkICglcyk=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"TmV0UUNoZWNrIFBpbmcgVGVzdA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"TmV0UUNoZWNrIFJlbW90ZSBBZ2VudA==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"TmV3IGNvbm5lY3Rpb24gb24gc29ja2V0ICVk","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"TmV4dF9DYXRhbG9nX0VudHJ5X0lE","type":"Unicode","source":"Runtime Data","process":"NetQCheckHTML5Agent.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TklTVCBDVVJWRTogJXM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Tm8gZGF0YSByZWNlaXZlZCAtIGNoZWNrIHBhY2tldCBzaXpl","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"bm8gZXhwbGljaXQgcG9saWN5","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Tm8gSVAgYWRkcmVzcyBvZmZlcmVk","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Tm8gbG9zcyBpcyAlZC4lMDJkJSU=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Tm8gbWF0Y2hpbmcgREFORSBUTFNBIHJlY29yZHM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"bm8gbWVtb3J5IGZvciBzb2NrZXQ=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Tm8gUHJpdmF0ZSBLZXk=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Tm8gcmVzcG9uc2UgZnJvbSBzZXJ2ZXIgZm9yIHJvdXRlIHRlc3QgcmVxdWVzdA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Tm8gcmVzcG9uc2UuICVz","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"bm8gc3RhY2s/","type":"Unicode","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Tk8gWDUwOV9OQU1F","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Tm90IEFmdGVyIDo=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Tm90IEFmdGVyOg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Tm90IEJlZm9yZTo=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Tm90IGRvaW5nIFNJUCB0ZXN0cw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"bm90aWNlTnVtYmVycw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"TlFDIGNvbmZpZyBwYXRoIGlzICVz","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"TlFDIFJlcG9ydA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"TlFDIFRlc3Q=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"TlFDOUZEM0IwNjcyQUY3RDE1OEVCMDM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"TnVtX0NhdGFsb2dfRW50cmllcw==","type":"Unicode","source":"Runtime Data","process":"NetQCheckHTML5Agent.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"bnVtcG9ydHMgJWk=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"bnVtc29ja2V0cw==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"bnVtdXNvY2tldHM=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"b2N0ZXQtc3RyZWFt","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"T2ZmZXJlZCBJUCBBZGRyZXNzIHJlY2VpdmVk","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"b2lkX3NlY3Rpb24=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"T25seSBTb21lIFJlYXNvbnM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"T3BlbmluZyBjZXJ0aWZpY2F0ZSBzdG9yZSAlcw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"T3BlbmluZyBTSVAgc29ja2V0","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"b3BlbnNzbC5jbmY=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"T3BlblNTTDogRkFUQUw=","type":"Unicode","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"T1BFTlNTTF9DT05G","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"b3BlbnNzbF9jb25m","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"T1BFTlNTTF9ESVJfcmVhZCgmY3R4LCAn","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"T1BFTlNTTF9FTkdJTkVT","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"T1BFTlNTTF9maW5pc2g=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"T1BFTlNTTF9pbml0","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"T1BFTlNTTF9XSU4zMl9VVEY4","type":"Unicode","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"T3BlcmF0aW5nIFN5c3RlbTogJXM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"T3BlcmF0aW9uIG5vdCBwZXJtaXR0ZWQ=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"T3B0IFJlYyBFbnVtOiAlaQ==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"T3B0IFJlcSBFbnVtOiAlaQ==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"T3B0aW9uICVkIGxlbmd0aCAlZA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"T3B0aW9ucyBSZWNlaXZlZDogJXM=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"T3B0aW9ucyBSZXF1ZXN0ZWQgVmVjdG9yICVp","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"T3B0aW9ucyBSZXF1ZXN0ZWQ6","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"T3B0aW9ucyBSZXF1ZXN0ZWQ6ICVz","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"b3JnYW5pemF0aW9u","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"b3RoZXJOYW1l","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"b3RoZXJuYW1l","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"b3RoZXJuYW1lOjx1bnN1cHBvcnRlZD4=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"b3V0IG9mIG1lbW9yeQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UGFja2VkQ2F0YWxvZ0l0ZW0=","type":"Unicode","source":"Runtime Data","process":"NetQCheckHTML5Agent.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UGFja2V0IExvc3MgID0gJTAyZC4lMDJkJSU=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UGFja2V0IE9yZGVyID0gJTAyZC4lMDJkJSU=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UGFja2V0IHJhdGUgdG9vIGxvdyAtIHRlc3QgZmFpbGVk","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UGFja2V0IHNpemUgPSAgJWQgYnl0ZXM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"cGFja2V0c3BlcnNlY29uZA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"cGFnZS5odG1s","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UEFSQU1FVEVSUw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UGFzcyAlZDogQXZlcmFnZSBwYWNrZXQgc2l6ZSBsZXNzIHRoYW4gb3IgZXF1YWwgdG8gJXUgaXMgJXUgYnl0ZXM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UGFzc3dvcmQgbWlzbWF0Y2g=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"cGF0aCBsZW5ndGggY29uc3RyYWludCBleGNlZWRlZA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UGF0aCBMb29w","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UGF1c2UgZnJlcXVlbmNpZXM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UGVyY2VudCAlZiBsZXNzIHRoYW4gMC45NQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UGVyY2VudCAlZiBtb3JlIHRoYW4gb3IgZXF1YWwgdG8gMC45NQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"cGVyY2VudDogJWY=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UGVyZm9ybWluZyAlZCBSVFQgdGVzdHMgdG8gJXMgKFBvcnQgJWQp","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UGVyZm9ybWluZyBmaXJld2FsbCB0aW1lb3V0IGNoZWNrLi4u","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UGVyZm9ybWluZyBwcmUtdGVzdCB0byBlc3RpbWF0ZSBzb2NrZXRzIHJlcXVpcmVk","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"cGVybWl0dGVk","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"cGVybWl0dGVkIHN1YnRyZWUgdmlvbGF0aW9u","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"cGhyYXNlIGlzIHRvbyBzaG9ydCwgbmVlZHMgdG8gYmUgYXQgbGVhc3QgJWQgY2hhcnM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"cGx1Z2luPSVzJnNyYz1hY3QmaXA9JXMmdGVzdHRvPSVzJnRlc3RzcGVjaWQ9JWQmc2lkPSVz","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"cGx1Z2lucz0=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UG9seW5vbWlhbDo=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UG9ydHMgdG8gYmUgdGVzdGVkOiAlaQ==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"cG9ydHNQZXJCbG9jazogJWk=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UG9zdGluZyAlcyBUZXN0IHJlc3VsdHMgdG8gJXMsIHBvcnQgJWQ=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UG9zdGluZyBSb3V0ZSBUZXN0IHJlc3VsdHMgdG8gJXMsIHBvcnQgJWQ=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UHJlLXRlc3QgY29uZmlybWF0aW9ucyA9ICVk","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UHJlLXRlc3QgZXN0aW1hdGVzICVkICVzIHJlcXVpcmVk","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"cHJpdiBbICVkIF0=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UFJJVkFURSBLRVk=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UHJpdmF0ZSBLZXkgSW5mbzo=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UHJpdmF0ZS1LZXk=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"cHJpdmF0ZS1rZXk6","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UHJpdmF0ZS1LZXk6ICglZCBiaXQp","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"cHJpdmF0ZUV4cG9uZW50Og==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UHJpdmF0ZUtleUxpZmV0aW1lU2Vjb25kcw==","type":"Unicode","source":"Runtime Data","process":"NetQCheckHTML5Agent.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJpdktleUNhY2hlTWF4SXRlbXM=","type":"Unicode","source":"Runtime Data","process":"NetQCheckHTML5Agent.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJpdktleUNhY2hlUHVyZ2VJbnRlcnZhbFNlY29uZHM=","type":"Unicode","source":"Runtime Data","process":"NetQCheckHTML5Agent.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJvYy1UeXBlOg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UHJvYy1UeXBlOiA0LA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UHJvY2Vzc1JlcG9ydFBhZ2U6IE91dCBvZiBtZW1vcnk=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UHJvY2Vzc1JlcG9ydFBhZ2U6IHVua25vd24gcmVjZWl2ZWQgdGltZSA9ICVk","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UHJvdmlkZXIgTmFtZTogICVzLCBQcm92aWRlciBUeXBlICVsdQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UHJvdmlkZXJJZA==","type":"Unicode","source":"Runtime Data","process":"NetQCheckHTML5Agent.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJvdmlkZXJJbmZv","type":"Unicode","source":"Runtime Data","process":"NetQCheckHTML5Agent.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"cHJveHkgY2VydGlmaWNhdGVzIG5vdCBhbGxvd2VkLCBwbGVhc2Ugc2V0IHRoZSBhcHByb3ByaWF0ZSBmbGFn","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"cHJveHkgcGF0aCBsZW5ndGggY29uc3RyYWludCBleGNlZWRlZA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"cHJveHkgc3ViamVjdCBuYW1lIHZpb2xhdGlvbg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"cHJveHlwb3J0","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UHVibGljIEtleQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UHVibGljLUtleQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"cHVibGljLWtleTo=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UHVibGljLUtleTogKCVkIGJpdCk=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"cHVibGljRXhwb25lbnQ6","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UW9zID0gJXUuJXUlJSBbJWQvJWRd","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"cmVhc29uKCVsdSk=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UmVjZWl2ZSBCdWZmZXI6","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"cmVjb21tZW5kZWQtcHJpdmF0ZS1sZW5ndGg6ICVkIGJpdHM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UmVkaXJlY3RpbmcgdG8gJXM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UmVnaXN0ZXJlZCBJRA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UmVnaXN0ZXJlZCBJRDo=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"cmVsYXRpdmVuYW1l","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UmVwb3J0U2VjdGlvbiBzZW5kIGZhaWxlZCBbJWQgb2YgJWRd","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UmVxdWVzdGluZyBjYXBhY2l0eSB0ZXN0IHNlcnZlciBpbmZvIGZyb20gJXM6JWQ=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UmVxdWVzdGluZyBvcHRpb25zICVz","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UmVxdWlyZSBFeHBsaWNpdCBQb2xpY3k=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"cmVxdWlyZUV4cGxpY2l0UG9saWN5","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UmVzdWx0IENvZGUgPSAlZA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UmVzdWx0cyBkb3dubG9hZGVkIG9r","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"cmVzdWx0c2V0PQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UmV0cnlpbmc=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UmV0cnlpbmcuLi4=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"cmV2aXNpb249","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UkZDIDM3NzkgcmVzb3VyY2Ugbm90IHN1YnNldCBvZiBwYXJlbnQncyByZXNvdXJjZXM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UklQRU1EMTYw","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Um91dGUgdGVzdCBmcm9tIHNlcnZlciBjb21wbGV0ZWQgT0s=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"cm91dGU9JXMsJXMs","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Um91dGluZyBEb21haW4gSWRlbnRpZmllcnM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UlNBLVNIQTEtMg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"cnNhX2tleWdlbl9iaXRz","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"cnNhX2tleWdlbl9wdWJleHA=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"cnNhX21nZjFfbWQ=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"cnNhX29hZXBfbGFiZWw=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"cnNhX29hZXBfbWQ=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"cnNhX3BhZGRpbmdfbW9kZQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"cnNhX3Bzc19zYWx0bGVu","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UlRUIEFmdGVyIERvd246","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UlRUIEFmdGVyIFVwOg==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UlRUIEJlZm9yZTo=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UnR0IHRlc3Q6IEROUyBsb29rdXAgZmFpbGVk","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"cnR0bnVtdGVzdHM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"cnR0bnVtdGVzdHMx","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"cnR0bnVtdGVzdHMy","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"cnVuIHRpbWUgaXM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UlYgQ29kZSBFTFNFICVp","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UlYgZm9yICVzIGlzICVp","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U2FmZVByb2Nlc3NTZWFyY2hNb2Rl","type":"Unicode","source":"Runtime Data","process":"NetQCheckHTML5Agent.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2FsdCBMZW5ndGg6IDB4","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U2VjLVdlYlNvY2tldC1BY2NlcHQ6","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U2VjLVdlYlNvY2tldC1LZXk=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U0VDTEVWRUw9","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"c2VjdGlvbjo=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"c2VjdGlvbj0=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U2VlIHJlc3VsdHMgb24gdGhlIHNlcnZlcg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U2VsZWN0aW5nIGZyb20gJWQgRGF0YVRpbWVzIGJldHdlZW4gJWQgYW5kICVk","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"c2VsZiBzaWduZWQgY2VydGlmaWNhdGU=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"c2VsZiBzaWduZWQgY2VydGlmaWNhdGUgaW4gY2VydGlmaWNhdGUgY2hhaW4=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U2VuZCBCdWZmZXI6","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U2VuZCBEYXRhIFRocmVzaG9sZCA9ICVp","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U2VuZCBmYWlsZWQ=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U2VuZEJlZ2luVXBzdHJlYW1QYWNrZXQ6IGZhaWxlZA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U2VuZEJlZ2luVXBzdHJlYW1QYWNrZXQ6IGlnbm9yaW5nIHBhY2tldCB0eXBlICUwNHg=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U2VuZEJlZ2luVXBzdHJlYW1QYWNrZXQ6IG5vIHJlc3BvbnNlIFtyZXRyaWVzPSVzXQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U2VuZEJlZ2luVXBzdHJlYW1QYWNrZXQ6IE9L","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U2VuZGluZyByZXBvcnQgdG8gc2VydmVy","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U2VuZGluZyByb3V0ZSB0ZXN0IHJlcG9ydA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U2VuZGluZyB1cHN0cmVhbSBjb21wbGV0ZSwgZG93bmxvYWRpbmcgcmVzdWx0cy4uLg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U2VuZFJlcXVlc3RVcHN0cmVhbVJlc3VsdDogaWdub3JpbmcgcGFja2V0IHR5cGUgJTA0eA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U2VuZFJlcXVlc3RVcHN0cmVhbVJlc3VsdDogbm8gcmVzcG9uc2U=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U2VyaWFsICMgPSAlcw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U2VyaWFsIG51bWJlciAgIDogJXM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U2VyaWFsIE51bWJlcjo=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U2VyaWFsX0FjY2Vzc19OdW0=","type":"Unicode","source":"Runtime Data","process":"NetQCheckHTML5Agent.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2VydmVyICclcycgYnVzeQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U2VydmVyIEJ1c3k=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U2VydmVyIGRhdGEgbGltaXQgcmVhY2hlZCAtIHRlcm1pbmF0aW5nIHRlc3Q=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"c2VydmVyIGZpbmlzaGVk","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U2VydmVyIFBhc3N3b3Jk","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U2VydmVyIHJlc3BvbmRlZCAlZCB0byByb3V0ZSB0ZXN0IHJlcXVlc3Q=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U2VydmVyIFVucmVhY2hhYmxl","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"c2VydmVyY2ZtcHdvcmQ=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"c2VydmVycG9ydA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"c2VydmVycHdvcmQ=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"c2VydmVydXJs","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U2VydmljZS0weA==","type":"Unicode","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U2Vzc2lvbiAlMmQ6ICVkIEJ5dGVzIFslMC4xZiUlXQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U2Vzc2lvbiAlZDogUHJvY2Vzc2luZyBVcGxvYWQgcmVwb3J0LCBzaXplICVkIGF0ICV1bXM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U2V0ICVzIGJ1ZmZlciBzaXplIHRvICVkLiAoJWQgc2V0KQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U2V0LUNvb2tpZTo=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"c2hhMSAoZGVmYXVsdCk=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U2lnbmF0dXJlIEFsZ29yaXRobTo=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U2lnbmlmaWNhbnQgbG9zcyBpcyAlZC4lMDJkJSU=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"c2lnbmlmaWNhbnRsb3Nz","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"c2ltdWxhdGlvbnNlY29uZHM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U0lQIEFMRyB0ZXN0IHJldHVybmVkICVk","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U29ja2V0IHRlc3QgZmFpbGVkIHRvICVzLiBTd2l0Y2hpbmcgdG8gSFRUUA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"c29mdF9sb2Fk","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U3BlZWQgYW5hbHlzaXMgLSAo","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U3BlZWQgVGVzdCBBdWRpdA==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U3BlZWQgdGVzdCBjcmVhdGVk","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U3BlZWQgdGVzdCBmYWlsZWQgdG8gY29tcGxldGU=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U1NMIGFsZXJ0IG51bWJlcg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"c3NsMy1zaGEx","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"c3NsXGQxX2xpYi5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"c3NsXGQxX3NydHAuYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"c3NsXHBxdWV1ZS5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"c3NsXHJlY29yZFxyZWNfbGF5ZXJfZDEuYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"c3NsXHJlY29yZFxyZWNfbGF5ZXJfczMuYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"c3NsXHJlY29yZFxzc2wzX2J1ZmZlci5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"c3NsXHJlY29yZFxzc2wzX3JlY29yZC5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"c3NsXHMzX2NiYy5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"c3NsXHMzX2VuYy5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"c3NsXHMzX2xpYi5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"c3NsXHMzX21zZy5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"c3NsXHNzbF9hc24xLmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"c3NsXHNzbF9jZXJ0LmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"c3NsXHNzbF9jaXBoLmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"c3NsXHNzbF9jb25mLmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"c3NsXHNzbF9pbml0LmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"c3NsXHNzbF9saWIuYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"c3NsXHNzbF9tY25mLmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"c3NsXHNzbF9yc2EuYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"c3NsXHNzbF9zZXNzLmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"c3NsXHN0YXRlbVxzdGF0ZW0uYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"c3NsXHN0YXRlbVxzdGF0ZW1fY2xudC5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"c3NsXHN0YXRlbVxzdGF0ZW1fZHRscy5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"c3NsXHN0YXRlbVxzdGF0ZW1fbGliLmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"c3NsXHN0YXRlbVxzdGF0ZW1fc3J2ci5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"c3NsXHQxX2VuYy5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"c3NsXHQxX2V4dC5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"c3NsXHQxX2xpYi5j","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"c3NsXHQxX3JlbmVnLmM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"c3NsXHRsc19zcnAuYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"c3NsX2NsaWVudA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"c3NsX3NlcnZlcg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U3RhcnQgcm91dGUgdGVzdCBmcm9tIHNlcnZlcg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U3RhcnRpbmcgJXMgSFRUUCBzZXNzaW9uIHRocmVhZCBmb3Igc29ja2V0ICV1","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U3RhcnRpbmcgY2FwYWNpdHkgdGVzdCB0byBwb3J0ICVk","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U3RhcnRpbmcgREhDUCBUZXN0","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U3RhcnRpbmcgRG93bmxvYWQgU3BlZWQgVGVzdCAoJXMpLg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U3RhcnRpbmcgVENQIHNwZWVkIHRlc3QgdXNpbmcgJWQgc2Vzc2lvbnM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U3RhcnRpbmcgVHJhY2VSb3V0ZSB0byAlcw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U3RhcnRpbmcgVXBsb2FkIFNwZWVkIFRlc3QgKCVzKSBMZW5ndGggJWRtcy4=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U3RhcnRpbmcgV2Vic29ja2V0IFNlcnZlciBvbiBwb3J0ICVk","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U3RhcnRpbmcgV2Vic29ja2V0IFNlcnZlciBvbiBwb3J0IDMyNjU4","type":"Ansi","source":"Runtime Data","process":"NetQCheckHTML5Agent.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U3RhcnRTb2Z0d2FyZUFnZW50","type":"Ansi","source":"Runtime Data","process":"NetQCheckHTML5Agent.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U3RhcnRUaHJlYWQgZmFpbGVk","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"c3RhdHVzPW9r","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"c3RibF9zZWN0aW9u","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"c3RvaSBhcmd1bWVudCBvdXQgb2YgcmFuZ2U=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U3RvcFNvZnR3YXJlQWdlbnQ=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U3RvcmVzU2VydmljZUNsYXNzSW5mbw==","type":"Unicode","source":"Runtime Data","process":"NetQCheckHTML5Agent.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U3RyZWFtIGxlbmd0aCByZWR1Y2VkIGZyb20gJWRtcyB0byAlZG1zIGJ5IG1heCB0cmFuc2ZlciBieXRlcyAoJWQp","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"c3RyaW5nIHRvbyBsb25n","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"c3ViZ3JvdXAgZmFjdG9yOg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"c3ViZ3JvdXAgb3JkZXI6","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"c3ViamVjdCBpc3N1ZXIgbWlzbWF0Y2g=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U3ViamVjdCBQdWJsaWMgS2V5IEluZm86","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U3ViamVjdDo=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U3ViamVjdDolYw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U3VpdGUgQjogY2Fubm90IHNpZ24gUC0zODQgd2l0aCBQLTI1Ng==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U3VpdGUgQjogY2VydGlmaWNhdGUgdmVyc2lvbiBpbnZhbGlk","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U3VpdGUgQjogY3VydmUgbm90IGFsbG93ZWQgZm9yIHRoaXMgTE9T","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U3VpdGUgQjogaW52YWxpZCBFQ0MgY3VydmU=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U3VpdGUgQjogaW52YWxpZCBwdWJsaWMga2V5IGFsZ29yaXRobQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U3VpdGUgQjogaW52YWxpZCBzaWduYXR1cmUgYWxnb3JpdGht","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U1VJVEVCMTI4","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U1VJVEVCMTI4QzI=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U1VJVEVCMTI4T05MWQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U1VJVEVCMTky","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U3VwcG9ydGVkTmFtZVNwYWNl","type":"Unicode","source":"Runtime Data","process":"NetQCheckHTML5Agent.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VGFyZ2V0IEJXOiAlaQ==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"dGFyZ2V0PSJfYmxhbmsi","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VGNwQ29ubmVjdDogQmFkIHBvcnQgKCVkKQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VGNwQ29ubmVjdDogQ29ubmVjdGluZyB0byAlcyBwb3J0ICVkLi4u","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VGNwQ29ubmVjdDogU29ja2V0ICVkIGNvbm5lY3RlZCBPSy4gUnR0PSVk","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VGVybWluYXRpbmcgVGVzdA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VGVzdCBhYmFuZG9uZWQgYXQgJXM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VGVzdCBiYW5kd2lkdGg6ICVsZCwgJWxk","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VGVzdCBCdXN5","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VGVzdCBDb21wIENhcCBDQw==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VGVzdCBEdXJhdGlvbiBzZXQgYXMgJWk=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VGVzdCBGYWlsZWQuIEVycm9yOiAlcw==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VGVzdCBJbml0IEVudGVyZWQ=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VGVzdCBJbnZhbGlkLiBFcnJvcjogJXM=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VGVzdCBTZXJ2ZXI6ICVz","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VGVzdCBUZXJtaW5hdGVk","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VGVzdCBUZXJtaW5hdGVkLiBFcnJvcjogJXM=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VGVzdGluZyB0byB0aGlzIHNlcnZlciBpcyBmb3JiaWRkZW4=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VGVzdGluZyB0byB0aGlzIHNlcnZlciBpcyBmb3JiaWRkZW4uIFBsZWFzZSBjb250YWN0IHRoZSB0ZXN0IHByb3ZpZGVyIGFuZCByZXBvcnQgdGhlIGlzc3VlLg==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"dGVzdHBvcnRz","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VGVzdHMgZGVsYXllZCBieSAlZG1z","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VGVzdFNwZWNJZDogJWk=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VGhlIGRvbWFpbiBlbnRlcmVkIGNvdWxkIG5vdCBiZSByZXNvbHZlZC4gUGxlYXNlIGRvdWJsZSBjaGVjayB0aGUgZG9tYWluIGFuZCB0cnkgYWdhaW4uIElmIHRoZSBwcm9ibGVtIHBlcnNpc3RzIHBsZWFzZSBjb250YWN0IHRoZSB0ZXN0IHByb3ZpZGVyIGFuZCByZXBvcnQgdGhlIGlzc3VlLg==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VGhlIGxpY2Vuc2UgZm9yIHRoZSB0ZXN0IGVudmlyb25tZW50IGhhcyBleHBpcmVkLiBQbGVhc2UgY29udGFjdCB0aGUgdGVzdCBwcm92aWRlciBhbmQgcmVwb3J0IHRoZSBpc3N1ZS4=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VGhlIG1icHMgKiBwY3QgYWRkZWQgdXA6ICVm","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VGhlIG9wZXJhdGluZyBzeXN0ZW0gZG9lcyBub3Qgc3VwcG9ydCB0aW1lIHRvIGxpdmUuIFBsZWFzZSByZXN0YXJ0IEJDUyB3aXRoIGFkbWluIHByaXZpbGVnZXMu","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VGhlIE9TIGRvZXMgbm90IHN1cHBvcnQgdGhpcyB0ZXN0","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VGhlIHBhcmFtZXRlcnMgdXNlZCBmb3IgdGhlIHRlc3QgYXJlIGludmFsaWQuIFBsZWFzZSBjb250YWN0IHRoZSB0ZXN0IHByb3ZpZGVyIGFuZCByZXBvcnQgdGhlIGlzc3VlLg==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VGhlIHBhc3N3b3JkIHVzZWQgZm9yIHRoZSB0ZXN0IGRvZXNuJ3QgbWF0Y2guIFBsZWFzZSBjb250YWN0IHRoZSB0ZXN0IHByb3ZpZGVyIGFuZCByZXBvcnQgdGhlIGlzc3VlLg==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VGhlIHBlcmNlbnRhZ2VzIGFkZGVkIHVwOiAlZg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VGhlIHNlcnZlciBpcyBidXN5LiBUaGlzIGNvdWxkIGJlIGEgdGhyb3R0bGUgc2V0dGluZyBpbXBvc2VkIGJ5IHRoZSBwcm92aWRlci4gUGxlYXNlIGNvbnRhY3QgdGhlIHRlc3QgcHJvdmlkZXIgYW5kIHJlcG9ydCB0aGUgaXNzdWUu","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VGhlIHNlcnZlciByZWFjaGVkIGl0cyBtYXhpbXVtIGJhbmR3aWR0aCBzdHJlYW0gbGltaXQuIFBsZWFzZSBjb250YWN0IHRoZSB0ZXN0IHByb3ZpZGVyIGFuZCByZXBvcnQgdGhlIGlzc3VlLg==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VGhlIHNlcnZlcidzIG1heGltdW0gYmFuZHdpZHRoIHRvIHN0cmVhbSBsaW1pdCB3YXMgcmVhY2hlZA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VGhlIHRlc3QgY291bGQgbm90IG9wZW4gYSBzb2NrZXQuIFRoaXMgaXMgbGlrZWx5IGR1ZSB0byBsYWNrIG9mIGFkbWluIHByaXZpbGVnZXMuIFBsZWFzZSByZXN0YXJ0IHRoZSBCQ1Mgd2l0aCBhZG1pbiBwcml2aWxlZ2VzLg==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VGhlIHRlc3QgZGlkbid0IGNvbXBsZXRlIGFzIGV4cGVjdGVkOg==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VGhlIHRlc3QgZmFpbGVkIHRvIHN0YXJ0ICh0aHJlYWQgZmFpbHVyZSkuIFBsZWFzZSBjb250YWN0IHRoZSB0ZXN0IHByb3ZpZGVyIGFuZCByZXBvcnQgdGhlIGlzc3VlLg==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VGhlIHRlc3QgaGFuZGxlIGlzIGludmFsaWQuIFBsZWFzZSBjb250YWN0IHRoZSB0ZXN0IHByb3ZpZGVyIGFuZCByZXBvcnQgdGhlIGlzc3VlLg==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VGhlIHRlc3QgaXMgYnVzeS4gUGxlYXNlIHdhaXQgdGhlbiByZWZyZXNoIHRoZSBwYWdlIGFuZCB0cnkgYWdhaW4u","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VGhlIHRlc3Qgc2VydmVyIGNhbm5vdCBiZSByZWFjaGVkLiBUaGlzIGNvdWxkIGJlIGRvd24gdG8gYSBsb3NzIG9mIEludGVybmV0L05ldHdvcmsgY29ubmVjdGl2aXR5LiBQbGVhc2UgY29udGFjdCB0aGUgdGVzdCBwcm92aWRlciBhbmQgcmVwb3J0IHRoZSBpc3N1ZS4=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VGhlIHRlc3Qgd2FzIHRlcm1pbmF0ZWQuICBQbGVhc2UgY29udGFjdCB0aGUgdGVzdCBwcm92aWRlciBhbmQgcmVwb3J0IHRoZSBpc3N1ZS4=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VGhlIHRyaWFsIGxpbWl0IGhhcyBiZWVuIGV4Y2VlZGVkLiBQbGVhc2UgY29udGFjdCB0aGUgdGVzdCBwcm92aWRlciBhbmQgcmVwb3J0IHRoZSBpc3N1ZS4=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VGhlcmUgYXJlIG5vdCBlbm91Z2ggcmVzb3VyY2VzIGF2YWlsYWJsZSB0byBydW4gdGhlIHRlc3QuIFBsZWFzZSBjb250YWN0IHRoZSB0ZXN0IHByb3ZpZGVyIGFuZCByZXBvcnQgdGhlIGlzc3VlLg==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VGhlcmUgaXMgbm8gZGF0YSBhdmFpbGFibGUgZm9yIHRoZSB0ZXN0LiBQbGVhc2UgY29udGFjdCB0aGUgdGVzdCBwcm92aWRlciBhbmQgcmVwb3J0IHRoZSBpc3N1ZS4=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VGhlcmUgaXMgbm90IGVub3VnaCBiYW5kd2lkdGggYXZhaWxhYmxlIGZyb20gdGhlIHNlcnZlciB0byBjb21wbGV0ZSB0aGUgdGVzdC4gUGxlYXNlIGNvbnRhY3QgdGhlIHRlc3QgcHJvdmlkZXIgYW5kIHJlcG9ydCB0aGUgaXNzdWUu","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VGhpcyBpcyB1c2VkIHRvIGFjY2VzcyB0aGUgc2VydmVyIHdoZW4gbm90IG1hbmFnZWQgY2VudHJhbGx5","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VG90YWwgZGF0YSA9ICVkIGJ5dGVzIGluICVkIHNlY29uZHM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VHJhY2VSb3V0ZSB0byAlcyA6IEVsYXBzZWRUaW1lID0gJXVtcw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VHJhY2VSb3V0ZTogSWNtcENyZWF0ZUZpbGUgZmFpbGVk","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VHJhY2VSb3V0ZTogSW52YWxpZCBJUCBhZGRyZXNzICVz","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VHJhaWxlciBGaWVsZDogMHg=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VHJhbnNwb3J0cw==","type":"Unicode","source":"Runtime Data","process":"NetQCheckHTML5Agent.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VHJpYWwgbGltaXQgcmVhY2hlZA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VFJVU1RFRCBDRVJUSUZJQ0FURQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VHV0b3JpYWxz","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VURQICVzIGNhcGFjaXR5IGlzIGFyb3VuZCAlZEticHMgYXQgJWQgYnl0ZXMgcGVyIHBhY2tldA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VURQIENhcGFjaXR5IHByZXRlc3QgJWQgb2YgJWQ=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"dWRwaW5pdGlhbGJhbmR3aWR0aA==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"dWRwaW5pdGlhbHViYW5kd2lkdGg=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"dWRwbWF4YmFuZHdpZHRo","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"dWRwbWF4dWJhbmR3aWR0aA==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"dWRwcGFja2V0c2l6ZQ==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"dW5hYmxlIHRvIGRlY29kZSBpc3N1ZXIgcHVibGljIGtleQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"dW5hYmxlIHRvIGRlY3J5cHQgY2VydGlmaWNhdGUncyBzaWduYXR1cmU=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"dW5hYmxlIHRvIGRlY3J5cHQgQ1JMJ3Mgc2lnbmF0dXJl","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"dW5hYmxlIHRvIGdldCBjZXJ0aWZpY2F0ZSBDUkw=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"dW5hYmxlIHRvIGdldCBDUkwgaXNzdWVyIGNlcnRpZmljYXRl","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"dW5hYmxlIHRvIGdldCBpc3N1ZXIgY2VydGlmaWNhdGU=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"dW5hYmxlIHRvIGdldCBsb2NhbCBpc3N1ZXIgY2VydGlmaWNhdGU=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VW5hYmxlIHRvIGxvYWQgV2luU29jayBETEw=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"dW5hYmxlIHRvIHZlcmlmeSB0aGUgZmlyc3QgY2VydGlmaWNhdGU=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VW5leHBlY3RlZCBvcGNvZGUgdHlwZSAlZA==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"dW5oYW5kbGVkIGNyaXRpY2FsIENSTCBleHRlbnNpb24=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"dW5oYW5kbGVkIGNyaXRpY2FsIGV4dGVuc2lvbg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VW5pcXVlIE5hbWU=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"dW5rbm93biBjZXJ0aWZpY2F0ZSB2ZXJpZmljYXRpb24gZXJyb3I=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VW5rbm93biBFcnJvcg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"dW5rbm93biUqcw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"dW5zZWN1cmVk","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"dW5zcGVjaWZpZWQgY2VydGlmaWNhdGUgdmVyaWZpY2F0aW9uIGVycm9y","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"dW5zdXBwb3J0ZWQgY2VydGlmaWNhdGUgcHVycG9zZQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VW5zdXBwb3J0ZWQgZXh0ZW5zaW9uIGZlYXR1cmU=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"dW5zdXBwb3J0ZWQgbmFtZSBjb25zdHJhaW50IHR5cGU=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"dW5zdXBwb3J0ZWQgb3IgaW52YWxpZCBuYW1lIGNvbnN0cmFpbnQgc3ludGF4","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"dW5zdXBwb3J0ZWQgb3IgaW52YWxpZCBuYW1lIHN5bnRheA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VW53ZWlnaHRlZCBtb2RhbCBwYXVzZSBpcyAlZG1zLCBjb3VudCAlZA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VXAgU2Vzc2lvbnM6","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VXAgVGVzdCBUeXBlOg==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VXAgdG8gJWRNYnBzOiBjb3VudCBpcyAlZC4gU3BlZWQgJTAuMWZNYnBzLCAlMC4xZiUl","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VXBncmFkZSB0byB3ZWJzb2NrZXQ=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VXBncmFkZTogd2Vic29ja2V0","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VXBsb2FkIHJlcG9ydCBjb21wbGV0ZSBbJWQgc2FtcGxlc10=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VXBsb2FkIHJlcG9ydCByZWplY3RlZCAtIGJhZCBzaXpl","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"dXBsb2FkLnBvcnQ9","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"dXBsb2FkcG9ydD0=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VXBzdHJlYW0=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"dXBzdHJlYW0=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VXBzdHJlYW0gSGFuZGxlIERlbGV0ZWQ=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VXBzdHJlYW0gUmVzdWx0cyBzZW50IHRvIHNlcnZlcg==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VXBzdHJlYW0gdGVzdDogbm8gcmVzcG9uc2UgZnJvbSBzZXJ2ZXI=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"dXJsRm9yTWF5c2l0ZSAlcw==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"dXJsRnJvbURlY29kZSAlcw==","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VXNlRGVsYXllZEFjY2VwdGFuY2U=","type":"Unicode","source":"Runtime Data","process":"NetQCheckHTML5Agent.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VXNlciBHdWlkZQ==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"ViVkLiVkLiVkLiVk","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VmFsdWUgb2YgRHNjcEJpdHM6ICVp","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VmVjdG9yIFNpemUgaXMgJWk=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"dmVjdG9yPFQ+IHRvbyBsb25n","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VmVyaWZ5IGVycm9yOg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VmVyaWZ5IGZhaWx1cmU=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VmVyaWZ5aW5nIC0gJXM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"dmVyc2lvbj0=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"dmlkZW8ucG9ydD0=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Vk9JUCBkb3dubG9hZDogJWQgb2YgJWQgcGFja2V0cyByZWNlaXZlZA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Vm9JUCBMaW5lcyBTaW11bGF0ZWQ6","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Vm9JUCBUZXN0IEF1ZGl0","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Vm9JUDogZmFpbGVkIHRvIHJldHJpZXZlIHVwc3RyZWFtIHJlcG9ydA==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Vm9pcFRlc3QgUGFja2V0IFNpemUgbGltaXRlZCB0byAlZCBieXRlcw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Vk9JUFRlc3Q6IE1zJTA1ZCAgZmFpbGVkIHRvIHN0YXJ0IGRhdGEgc2Vzc2lvbg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Vk9JUFRlc3Q6IE1zJTA1ZCAgUmVjZWl2ZSBTZXNzaW9uIHN0YXJ0ZWQgT0s=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Vk9JUFRlc3Q6IE1zJTA1ZCAgU2VuZCBTZXNzaW9uIHN0YXJ0ZWQgT0s=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Vk9JUFRlc3Q6IE1zJTA1ZCAgU3RhcnQgUmVjZWl2ZSBTZXNzaW9uLiBTZXJ2ZXIgSVA9JXMgVURQIHBvcnQ9JWQ=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Vk9JUFRlc3Q6IE1zJTA1ZCAgU3RhcnQgU2VuZCBTZXNzaW9uLiBTZXJ2ZXIgSVA9JXMgVURQIHBvcnQ9JWQ=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"d2FpdGZvcj0=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"V2ViU2VydmVyIGFjdGl2ZSBvbiBwb3J0ICVk","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"V2ViU2VydmVyIGFjdGl2ZSBvbiBwb3J0IDMyNjU4","type":"Ansi","source":"Runtime Data","process":"NetQCheckHTML5Agent.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V2ViU2VydmVyIGFjdGl2ZSBvbiBwb3J0IDMyNjYw","type":"Ansi","source":"Runtime Data","process":"NetQCheckHTML5Agent.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V2Vic2VydmVyOiBiaW5kIGZhaWxlZCBvbiBwb3J0ICVk","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"V2ViU2VydmVyOiBsaXN0ZW4gZmFpbGVk","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"d2Vic29ja2V0","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"V2VpZ2h0ZWQgbW9kYWwgcGF1c2UgaXMgJWRtcywgY291bnQgJWQ=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"V2luU29jayAyLjAgUHJvdmlkZXIgSUQ=","type":"Unicode","source":"Runtime Data","process":"NetQCheckHTML5Agent.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V2luU29ja19SZWdpc3RyeV9WZXJzaW9u","type":"Unicode","source":"Runtime Data","process":"NetQCheckHTML5Agent.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"d3JvbmdwYXNz","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"V3MyXzMyTnVtSGFuZGxlQnVja2V0cw==","type":"Unicode","source":"Runtime Data","process":"NetQCheckHTML5Agent.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V3MyXzMyU3BpbkNvdW50","type":"Unicode","source":"Runtime Data","process":"NetQCheckHTML5Agent.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"WDQwME5hbWU6PHVuc3VwcG9ydGVkPg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"WDUwOSBDUkw=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"WDUwOXYzIGV4dGVuc2lvbnM=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"WDkuNDIgREggUEFSQU1FVEVSUw==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"WUBESENQIFRlc3QgSW5pdCBiZWluZyBjYWxsZWQ=","type":"Ansi","source":"Memory/File Scan","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.0108F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"WW91IG11c3QgdHlwZSBpbg==","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"WW91IG5lZWQgdG8gcmVhZCB0aGUgT3BlblNTTCBGQVEsIGh0dHBzOi8vd3d3Lm9wZW5zc2wub3JnL2RvY3MvZmFxLmh0bWw=","type":"Ansi","source":"Hybrid Analysis","process":"NetQCheckHTML5Agent.exe","filename":"00034916-00002588.00000002.39079.00F50000.00000002.mdmp","compromised":null,"detection_total":null,"total":null}]},{"name":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","strings":[{"value":"IV5hIWFoMDtG","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"IVRoaXMgcHJvZ3JhbSBjYW5ub3QgYmUgcnVuIGluIERPUyBtb2RlLiQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"ImQnSnkuP1F6","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Imh0dHA6Ly9vY3NwMi5nbG9iYWxzaWduLmNvbS9yb290cjMwNg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":0,"total":67},{"value":"ImpRaDgkS3IyfA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"InRxNjB+Ym8/XmI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"IzV2RHtaKndEO1o=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"I1JtK15uIUc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"JDJWbV86e1dG","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"JD07KSU2eXFm","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"JFJZOGkrfGw2PW4=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"JWh0dHA6Ly9jcmwuZ2xvYmFsc2lnbi5jb20vcm9vdC1yMy5jcmwwYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":0,"total":67},{"value":"JWh0dHA6Ly9jcmwuZ2xvYmFsc2lnbi5uZXQvcm9vdC1yMy5jcmww","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"JXUuJXUlcyVz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"JiZBTy9BKDxR","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Jmh0dHBzOi8vd3d3Lmdsb2JhbHNpZ24uY29tL3JlcG9zaXRvcnkvMA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":0,"total":66},{"value":"Jmh0dHBzOi8vd3d3Lmdsb2JhbHNpZ24uY29tL3JlcG9zaXRvcnkvMDY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"J0dsb2JhbFNpZ24gQ29kZVNpZ25pbmcgQ0EgLSBTSEEyNTYgLSBHMw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"J0dsb2JhbFNpZ24gQ29kZVNpZ25pbmcgQ0EgLSBTSEEyNTYgLSBHMzA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"KCY5RzlHVTRv","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"KEdsb2JhbFNpZ24gVGltZXN0YW1waW5nIENBIC0gU0hBMjU2IC0gRzI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"KEdsb2JhbFNpZ24gVGltZXN0YW1waW5nIENBIC0gU0hBMjU2IC0gRzIw","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"KGhgbidsYmFz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"KHp3fClVTyIr","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"KS9OZFpvMnxLaQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"KUBpeDZ1NXlEP1o=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Kj98PD4vIjo=","type":"Ansi","source":"Hybrid Analysis","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Kk8qLytvKiNlag==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"K0BfdnxmRUo5","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"K2lYWEJcezZ7Yg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"K2svRD55QTVdRA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"LGh0dHA6Ly9vY3NwMi5nbG9iYWxzaWduLmNvbS9nc2NvZGVzaWduc2hhMmczMFY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":0,"total":67},{"value":"LWU4TSZLY1hqKHs=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"LkRFRkFVTFRcQ29udHJvbCBQYW5lbFxJbnRlcm5hdGlvbmFs","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Lmh0dHA6Ly9jcmwuZ2xvYmFsc2lnbi5jb20vZ3Njb2Rlc2lnbnNoYTJnMy5jcmww","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":0,"total":66},{"value":"LndqKFsoKmRL","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"LywyKzA0SUVv","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Lz02TVRKJmpj","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"L0tKSXg2Oy41","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"L1FMSFo2Z1Ficg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"MDNqdHVOdWJN","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"MGh0dHA6Ly9vY3NwMi5nbG9iYWxzaWduLmNvbS9nc3RpbWVzdGFtcGluZ3NoYTJnMjA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"MEp4VXpqIzsubA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"MHpSekZ6VnpBemF6WXp5en16Q3o=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"MTEwODAyMTAwMDAwWg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"MTYwNjE1MDAwMDAwWg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"MTcwMTI0MTYxMzU3Wg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"MTgwMjE5MDAwMDAwWg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"MTkwMzE5MTYwNzQzWjAv","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"MTxBXUg+eHE9LQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"MUM5MyRZXSdWXw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"MXtvRzk8cyd8","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"MiY2Lj4hMSk5JTUtPSMzKzsnNy8=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"MjAwMjI0MTYxMzU3WjBeMQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"MjAxOTAzMTkxNjA3NDNa","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"MjQwNjE1MDAwMDAwWjBaMQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"MjkwMzE4MTAwMDAwWjArMSkwJw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"MjkwMzI5MTAwMDAwWjBbMQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"MlM9OCooJ3dKTw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"MypYMScxakNB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"NCFodlBuUEFQUQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"NHJsKyMxT2tz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"NFYtekVjLXcz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"NWh0dHA6Ly9jcmwuZ2xvYmFsc2lnbi5jb20vZ3MvZ3N0aW1lc3RhbXBpbmdzaGEyZzIuY3JsMA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"NzwqSW4hR3grQSQ5WQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"OCl5WiNcXURK","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"OCp0QmBIaHhoVA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"OCspfEYhL3x0IDE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"OSpySnp5RXpAaQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"OTZCOyFLeEJ4Vw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"OT4lLENFWEl5","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"OT5naXlPJz5Z","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"OVs5ezh7OUc5","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"OUpnTlhkKlVdYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"OXInXkdOa35+RWs=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Oi80KTQ1ND00Kw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"OkBYIkNsVW9NTg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"OzlKTTpyX0V1","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"PC9hcHBsaWNhdGlvbj48L2NvbXBhdGliaWxpdHk+PC9hc3NlbWJseT4=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"PDYqc0psZnxhYHQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"$39","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"$3a","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"PGh0dHA6Ly9zZWN1cmUuZ2xvYmFsc2lnbi5jb20vY2FjZXJ0L2dzY29kZXNpZ25zaGEyZzNvY3NwLmNydDA4","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":0,"total":67},{"value":"PGh0dHA6Ly9zZWN1cmUuZ2xvYmFsc2lnbi5jb20vY2FjZXJ0L2dzdGltZXN0YW1waW5nc2hhMmcyLmNydDA8","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"PUJFL3xXNU4=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"PWJSVWdXV31Bcw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"PkR1Mk91LlBj","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"P2F6NiIkMjxy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"P054LDc/MWpCaHs=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"P3IgYEhlcGFEeA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"P3Y3PD40O3l7Q0l7Mg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"QDNAK0BLQFtA","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"W0FQQVxBXkFVQVNBWw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"W3FdX3tkajRfeQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"XG1cXVxDXGNc","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"XE1pY3Jvc29mdFxJbnRlcm5ldCBFeHBsb3JlclxRdWljayBMYXVuY2g=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"XUdQR1JHVkdZZw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"XUxjOztPZjVu","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"X2J6Tms9eHY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"X0paXU16XVUz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"X3RAIFpHQUBr","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"X1hPJEhqJExH","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"YHZcPTwsIWxHWFNY","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"YHZJJGBzVy9g","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"YHspWHtBeyg2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"QWRqdXN0VG9rZW5Qcml2aWxlZ2Vz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"QURWQVBJMzIuZGxs","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"QXBwZW5kTWVudUE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Yi9bbnMia18oVSov","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"QmVnaW5QYWludA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"YkxtKkZcSF9xOg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"QlFfWVFfRVFf","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"QnFiUC10Iy80","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"YlJYTkFePy4=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"YlU5PU10MkA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"QlZCdkJuQl5CPkI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"YzBmMGkwbTBv","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"QzdJJWp0bW50bU50bTY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2FsbFdpbmRvd1Byb2NB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q0R+N0FAfiVBQG5P","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2hhck5leHRB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2hhclByZXZB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2hlY2tEbGdCdXR0b24=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2xvc2VDbGlwYm9hcmQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2xvc2VIYW5kbGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q29DcmVhdGVJbnN0YW5jZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q09NQ1RMMzIuZGxs","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q29tcGFyZUZpbGVUaW1l","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q29udHJvbCBQYW5lbFxEZXNrdG9wXFJlc291cmNlTG9jYWxl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q29weUZpbGVB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q29UYXNrTWVtRnJlZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q3BGRmd8UGo2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlQnJ1c2hJbmRpcmVjdA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlRGlhbG9nUGFyYW1B","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlRGlyZWN0b3J5QQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlRmlsZUE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlRm9udEluZGlyZWN0QQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlUG9wdXBNZW51","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlUHJvY2Vzc0E=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlVGhyZWFk","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlV2luZG93RXhB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q1JZUFRCQVNF","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Y1hfLmM4Ql8uZzhJTw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"RCxCSW9sIUV5","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"RGVmV2luZG93UHJvY0E=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"RGVsZXRlRmlsZUE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"RGVsZXRlT2JqZWN0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"RGVzdHJveVdpbmRvdw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"RGlhbG9nQm94UGFyYW1B","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"RGlzcGF0Y2hNZXNzYWdlQQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"RHJhd1RleHRB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"ZFJWLj1xTmZm","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"RSFEIVYhUSFFIUchTw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"ZTN7YkU8cylkN18=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"ZWFzZSB3YWl0IHdoaWxlIFNldHVwIGlzIGxvYWRpbmcuLi4=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"RUd2dVV3JkBeLQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"ZWwoP3VUIyN9","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"RW1wdHlDbGlwYm9hcmQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"RW5hYmxlTWVudUl0ZW0=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"RW5hYmxlV2luZG93","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"RW5kRGlhbG9n","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVErJ31cPnRvZTU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"ZXFBR3w2In5M","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVFNJ2U3bVhhVw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"RXJyb3IgbGF1bmNoaW5nIGluc3RhbGxlcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"RXJyb3Igd3JpdGluZyB0ZW1wb3JhcnkgZmlsZS4gTWFrZSBzdXJlIHlvdXIgdGVtcCBmb2xkZXIgaXMgdmFsaWQu","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"ZVJzWTdzWXdz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"RXhpdFByb2Nlc3M=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"RXhpdFdpbmRvd3NFeA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"RXhwYW5kRW52aXJvbm1lbnRTdHJpbmdzQQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"RjxCPEk8UzxHPE8=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"RmluZENsb3Nl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"RmluZEZpcnN0RmlsZUE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"RmluZE5leHRGaWxlQQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"RmluZFdpbmRvd0V4QQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Zk1fcX5oWSx8SCg=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Rm1KZkpTZlFTYDEk","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"RnJlZUxpYnJhcnk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"RyZAJkgmQiZZJl0mQyZP","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"RzhoQlxseXM7XlZ2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Rz1EPUw9Rj1OPV49ST1TPUs9Xw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"R10yXmY5clF1Zw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Z0J6XklOaHN4","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"R0RJMzIuZGxs","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0Q2xhc3NJbmZvQQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0Q2xpZW50UmVjdA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0Q29tbWFuZExpbmVB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0Q3VycmVudFByb2Nlc3M=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RGV2aWNlQ2Fwcw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RGlza0ZyZWVTcGFjZUE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RGlza0ZyZWVTcGFjZUV4QQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RGxnSXRlbQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RGxnSXRlbVRleHRB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RXhpdENvZGVQcm9jZXNz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RmlsZUF0dHJpYnV0ZXNB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RmlsZVNpemU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RmlsZVZlcnNpb25JbmZvQQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RmlsZVZlcnNpb25JbmZvU2l6ZUE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RnVsbFBhdGhOYW1lQQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0TGFzdEVycm9y","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0TWVzc2FnZVBvcw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0TW9kdWxlRmlsZU5hbWVB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0TW9kdWxlSGFuZGxlQQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0UHJpdmF0ZVByb2ZpbGVTdHJpbmdB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0UHJvY0FkZHJlc3M=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0U2hvcnRQYXRoTmFtZUE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0U3lzQ29sb3I=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0U3lzdGVtRGlyZWN0b3J5QQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0U3lzdGVtTWVudQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0U3lzdGVtTWV0cmljcw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0VGVtcEZpbGVOYW1lQQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0VGVtcFBhdGhB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0VGlja0NvdW50","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0VXNlckRlZmF1bHRVSUxhbmd1YWdl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0VmVyc2lvbg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0V2luZG93TG9uZ0E=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0V2luZG93UmVjdA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0V2luZG93c0RpcmVjdG9yeUE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2xvYmFsQWxsb2M=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2xvYmFsRnJlZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2xvYmFsTG9jaw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2xvYmFsU2lnbiBudi1zYTEwMC4=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2xvYmFsU2lnbiBudi1zYTExMC8=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2xvYmFsU2lnbiBSb290IENBIC0gUjMx","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2xvYmFsU2lnbiBUU0EgZm9yIEFkdmFuY2VkIC0gRzI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2xvYmFsU2lnbiBUU0EgZm9yIEFkdmFuY2VkIC0gRzIw","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2xvYmFsU2lnbjA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2xvYmFsU2lnbjE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2xvYmFsVW5sb2Nr","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"R3NUc0pzVXNNc1M=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"R1lZXDNbXXFi","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"aCUuLntncHpc","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"aEtwYlB0ZVpqcmBNfHFo","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"aHR0cDovL3d3dy52aXN1YWx3YXJlLmNvbSAwLw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":0,"total":66},{"value":"STNvR31XLm9YZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"SWsuYFQjLEM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"aUw+IkxfOkNi","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"SWxYa2hfRUEk","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"SW1hZ2VMaXN0X0FkZE1hc2tlZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"SW1hZ2VMaXN0X0NyZWF0ZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"SW1hZ2VMaXN0X0Rlc3Ryb3k=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"SW5pdGlhdGVTaHV0ZG93bkE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"SW5zdGFsbGVyIGludGVncml0eSBjaGVjayBoYXMgZmFpbGVkLiBDb21tb24gY2F1c2VzIGluY2x1ZGVpbmNvbXBsZXRlIGRvd25sb2FkIGFuZCBkYW1hZ2VkIG1lZGlhLiBDb250YWN0IHRoZWluc3RhbGxlcidzIGF1dGhvciB0byBvYnRhaW4gYSBuZXcgY29weS5Nb3JlIGluZm9ybWF0aW9uIGF0Omh0dHA6Ly9uc2lzLnNmLm5ldC9OU0lTX0Vycm9y","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":1,"total":133},{"value":"SW52YWxpZGF0ZVJlY3Q=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"aXNFJjR6VjRINg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"SXNXaW5kb3c=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"SXNXaW5kb3dFbmFibGVk","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"SXNXaW5kb3dWaXNpYmxl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"SiJJd2VZbDo9cw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"SiN5SCN5WS9h","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"SlNGU0FTcVNJU1VTTVNtUw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"SnQ6XytjSD42Qz4=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"ansve1wxLG9h","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"ayF8RWhDK2lw","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"SzVLSy1LPUsrSw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"azdQNFA8UCJQOlA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"S0VSTkVMMzIuZGxs","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"a2Z4dnhueD5pb1Y=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"S2tjMS8jfDtHaw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"S1pcOkI1Smcm","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"bCJpJVF8QnRk","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"TG9hZEJpdG1hcEE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"TG9hZEN1cnNvckE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"TG9hZEltYWdlQQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"TG9hZExpYnJhcnlFeEE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"TG9va3VwUHJpdmlsZWdlVmFsdWVB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"bHN0cmNtcEE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"bHN0cmNtcGlB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"bHN0cmNweUE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"bHN0cmNweW5B","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"bFRKcnJGdX5edkJsQHJQXFRBSmBVbA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"TFdmQS8oUm5V","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"TSJSW2QoVl5j","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"TSpXX2NIVl5j","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"bWBQLENjQWw=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"TWVzc2FnZUJveEluZGlyZWN0QQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"bUd+PXA/SmE2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"bWpKVkpBSklKTUpz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"TWpUalxqUmpKallqUw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"bW47IEcgZyB3","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"TW92ZUZpbGVB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"TW92ZUZpbGVFeEE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"TVMgU2hlbGwgRGxn","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"bXNjdGxzX3Byb2dyZXNzMzI=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"TXRpaHBaeSw8Ww==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"TXVsdGlCeXRlVG9XaWRlQ2hhcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"TiJRWmQnVl5j","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"TiNPWWQnVl5j","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"TiNRW2QyVl5j","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"TiRPWWQyVl5j","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"TiVOWGQlVl5j","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"TipdY2I0Vl5j","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"TjZub183Vl5j","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"bjhlXyBAfGg=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"TjpiZ2FAVV1jO1ZeYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Tl14c1U4UWJe","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Tl9UXWNQVl5j","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"TmBRWmQ4Vl5j","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"TmFRW2Q5Vl5j","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Tkh2dF1VcHd9","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Tm1KbUltRW1D","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"TlJQWmRBVl5j","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"TlNJUyBFcnJvcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"TlNSW2RMVl5j","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"TlRQWmRAVl5j","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"TlRQWmRBVl5j","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"TnVsbHNvZnRJbnN0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"TlVNWGQnVl5j","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"TlVRW2RHVl5j","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"bnY0TyFncldo","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"TnpWWDIxdE94","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"bzkmUXB1OUYqa0Jn","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"b2xlMzIuZGxs","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"T2xlSW5pdGlhbGl6ZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"T2xlVW5pbml0aWFsaXpl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"T2xTXGM5Vl5j","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"T2xTXGM6Vl5j","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"T3BlbkNsaXBib2FyZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"T3BlblByb2Nlc3NUb2tlbg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"b3EuSHYuSHQuQG4=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"T1ZYX2N3Vl5jQ1ZeYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"T3hTXGMoVl5j","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"T3hVXWMoVl5j","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"T3hWXmMtVl5j","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"b3tiOV1sKipu","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"cCx7NHRQXT5Dew==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"UGVla01lc3NhZ2VB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"UGxlYXNlIHdhaXQgd2hpbGUgU2V0dXAgaXMgbG9hZGluZy4uLg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"UG9zdFF1aXRNZXNzYWdl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"cSBwIjRWdSY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"UVtkVl5jflZeYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"cVRefll+TlFZ","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"ci8hMCRVNjFs","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"UkB4dl5gVl5j","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"cl5RXnFeRV5lXk1eXV5j","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVnQ2xvc2VLZXk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVnQ3JlYXRlS2V5RXhB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVnRGVsZXRlS2V5QQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVnRGVsZXRlS2V5RXhB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVnRGVsZXRlVmFsdWVB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVnRW51bUtleUE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVnRW51bVZhbHVlQQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVnaXN0ZXJDbGFzc0E=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVnT3BlbktleUV4QQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVnUXVlcnlWYWx1ZUV4QQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVnU2V0VmFsdWVFeEE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"ckVqRVpFZkVJRWlFY0Vz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVsZWFzZURD","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVtb3ZlRGlyZWN0b3J5QQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"cmchfHNCI0Q=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"UkdoMkBMPj1C","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmljaEVkMjA=","type":"Ansi","source":"Hybrid Analysis","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmljaEVkMzI=","type":"Ansi","source":"Hybrid Analysis","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmljaEVkaXQyMEE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2NyZWVuVG9DbGllbnQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2UjUGUjUGUj","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2VhcmNoUGF0aEE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2VsZWN0T2JqZWN0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2VuZE1lc3NhZ2VB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2VuZE1lc3NhZ2VUaW1lb3V0QQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2VTaHV0ZG93blByaXZpbGVnZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2V0QmtDb2xvcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2V0QmtNb2Rl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2V0Q2xhc3NMb25nQQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2V0Q2xpcGJvYXJkRGF0YQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2V0Q3VycmVudERpcmVjdG9yeUE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2V0Q3Vyc29y","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2V0RGVmYXVsdERsbERpcmVjdG9yaWVz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2V0RGxnSXRlbVRleHRB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2V0RW52aXJvbm1lbnRWYXJpYWJsZUE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2V0RXJyb3JNb2Rl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2V0RmlsZUF0dHJpYnV0ZXNB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2V0RmlsZVBvaW50ZXI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2V0RmlsZVNlY3VyaXR5QQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2V0RmlsZVRpbWU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2V0Rm9yZWdyb3VuZFdpbmRvdw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2V0VGV4dENvbG9y","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2V0V2luZG93TG9uZ0E=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2V0V2luZG93UG9z","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2V0V2luZG93VGV4dEE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"U0hBdXRvQ29tcGxldGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"U0hCcm93c2VGb3JGb2xkZXJB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"U0hFTEwzMi5kbGw=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2hlbGxFeGVjdXRlQQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"U0hGaWxlT3BlcmF0aW9uQQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"U0hGT0xERVI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"U0hHZXRGaWxlSW5mb0E=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"U0hHZXRGb2xkZXJQYXRoQQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"U0hHZXRQYXRoRnJvbUlETGlzdEE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"U0hHZXRTcGVjaWFsRm9sZGVyTG9jYXRpb24=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2hvd1dpbmRvdw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"U29mdHdhcmVcTWljcm9zb2Z0XFdpbmRvd3NcQ3VycmVudFZlcnNpb24=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"U3lzTGlzdFZpZXczMg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"U3lzdGVtUGFyYW1ldGVyc0luZm9B","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"c3xTS19vLSgi","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"VCQlbzxWem89","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"dEQ8Ol4mTiR8","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"VHJhY2tQb3B1cE1lbnU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"dHlcfj01UVpRSQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"VSw0QzVvR1poXQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"VTE1RjVWNW41XjVNNXM1RzUnNS81","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"VV1ibVZeY0RWXmM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"VV1jcFZeY1ZeYy5WXmM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"VWx+cHZ5WUdDOw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"dXJKZlFldU1dKw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"VVNFUjMyLmRsbA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"VX1pU3w7aCJV","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jIFZeY1BWXmM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jIFZeY1ZeYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jIVZeY3NWXmM4Vl5j","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jIVZeY1pWXmM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jIlZeY2RWXmM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jIlZeY3pWXmM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jI1ZeYyFWXmM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jI1ZeY1tWXmM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jI1ZeY15WXmM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jI1ZeY0lWXmM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jJFZeY25WXmM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jJFZeY3tWXmM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jJVZeYyRWXmN5Vl5j","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jJ1ZeYyVWXmM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jJ1ZeY1xWXmM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jKFZeY1ZeYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jKlZeYyZWXmM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jK1ZeY2VWXmM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jLlZeYz1WXmM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jLlZeY1dWXmM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jLlZeY1hWXmM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jMFZeY1lWXmM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jMlZeY0xWXmM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jMlZeY1FWXmN8Vl5j","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jM1ZeY1ZeYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jNVZeY1ZeYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jOFZeY19WXmM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jOFZeY1ZeYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jOVZeYzJWXmM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jO1ZeY2dWXmM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jO1ZeY1ZeYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jP1ZeYzxWXmM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jP1ZeY1BWXmM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jQFZeY2BWXmNWXmM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jW1ZeY1ZeYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jW1ZeY1ZeYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jY1ZeYyZWXmM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jY1ZeY1ZeYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jZFZeYzdWXmM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jRVZeY1ZeYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jR1ZeYyhWXmM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jSFZeYzhWXmM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jaFZeY1ZeYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jSFZeY1ZeYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5ja1ZeYzNWXmM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jS1ZeY2xWXmM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jS1ZeY3pWXmM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jTFZeYztWXmM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jb1ZeY09WXmM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jcFZeY1ZeYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jcFZeY1ZeYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jcVZeYzJWXmM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jcVZeY1ZeYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jclZeYy5WXmM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jVVZeY1ZeYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jVl5jIlZeYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jVl5jK1ZeYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jVl5jO1ZeYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jVl5jPVZeYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jVl5jXVZeYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jVl5jXlZeYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jVl5jX1ZeYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jVl5jQVZeYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jVl5jYlZeYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jVl5jZFZeYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jVl5jRlZeYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jVl5jZ1ZeYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jVl5jbVZeYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jVl5jb1ZeYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jVl5jUlZeYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jVl5jVVZeYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jVl5jeVZeYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jVl5jelZeYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jdlZeY1ZeYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jVlZeY1ZeYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jd1ZeYyBWXmM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jd1ZeY1ZeYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jd1ZeY1hWXmM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jeFZeYydWXmM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jelZeYyNWXmM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jelZeYztWXmM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jWlZeY1ZeYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5je1ZeYzlWXmNWXmM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5je1ZeY1ZeYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5je1ZeY1ZeYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5je1ZeY1lWXmM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jfFZeY1ZeYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jfVZeY1ZeYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jflZeY0JWXmM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jflZeY1ZeYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"Vl5jflZeY1ZeYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"dkR8PWxpQXN2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"dmVyaWZ5aW5nIGluc3RhbGxlcjogJWQlJQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"VmVyUXVlcnlWYWx1ZUE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"VmlzdWFsd2FyZSBJbmMw","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"VmlzdWFsd2FyZSBJbmMx","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"VllJWWVZVVl9WUM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"VntWe0l7RXtL","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"dzpmKUBHdjk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"V2FpdEZvclNpbmdsZU9iamVjdA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"d0ZkZH5VTHx8Zn5FSm0=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"V2hkc1dTaz8q","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"V0pQSlhKWUpf","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"V3JpdGVGaWxl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"V3JpdGVQcml2YXRlUHJvZmlsZVN0cmluZ0E=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"d3NwcmludGZB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"d1paUnJUamJ2fGY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"eCEpMSMlPT0t","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"WCV0MW1deFUk","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"eDYlJSVJPCYxKg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"eF1qaW5KTWVRbGltXEg=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"WF9jYlVdY11WXmNpVl5j","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"WGdkaDBCTUZo","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"WHVQQEk7Rls/RA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"WTQ2Ozk5Litxfg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"eT0lWlklfE1QPQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"eWRkNHtYRCIgXw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"WU42ZmdOLSpy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"WVFYMTFkd2w6","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"enJXJC0wXkRgdA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"fE05bngoPVRv","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"fUBpVkg7RGk2SA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"fkBROU1JMSFC","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"fk0ielxEc0E=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null},{"value":"fnU2SFVoaH5M","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334.bin","compromised":null,"detection_total":null,"total":null}]},{"name":"thebcs.exe.930316402","strings":[{"value":"IiBhbHQ9IiI+IDwvZGl2PjxkaXYgaWQ9ImhlcmVtZW51Ij48dGFibGUgY2VsbHBhZGRpbmc9MCBjZWxsc3BhY2luZz0wIHdpZHRoPSIxMDAlIj48dHI+PHRkIHdpZHRoPSI0MDAiIHZhbGlnbj1taWRkbGU+IGhlcmUtLT48L3RkPjx0ZCB3aWR0aD0xPjwvdGQ+PC90cj48L3RhYmxlPjwvZGl2PjwvZGl2PjxpbWcgc3JjPSJzZXBiYWNrLmdpZiIgYWx0PSIiPjxkaXY+PC9kaXY+IGluc2lkZS0tPjxk","type":"Ansi","source":"Dropped File","process":null,"filename":"thebcs.exe.930316402","compromised":null,"detection_total":null,"total":null}]},{"name":"bcs.exe:3656","strings":[{"value":"IiBtYW5hZ2Vk","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JXMgc2VydmljZSBmYWlsZWQgdG8gaW5zdGFsbC4gRXJyb3IgJWQ=","type":"Ansi","source":"Hybrid Analysis","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01311000.00000020.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JXMgc2VydmljZSBpbnN0YWxsZWQgT0s=","type":"Ansi","source":"Hybrid Analysis","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01311000.00000020.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JXMgc3VjY2Vzc2Z1bGx5IHN0YXJ0ZWQ=","type":"Ansi","source":"Hybrid Analysis","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01311000.00000020.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"LWtlcm5lbDMyLXBhY2thZ2UtY3VycmVudC1sMS0xLTA=","type":"Unicode","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"LXdpbi1jb3JlLWZpYmVycy1sMS0xLTE=","type":"Unicode","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"LXdpbi1ydGNvcmUtbnR1c2VyLXdpbmRvdy1sMS0xLTA=","type":"Unicode","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVmJhZF9hbGxvY0BzdGRAQA==","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.0132D000.00000004.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVmJhZF9hcnJheV9uZXdfbGVuZ3RoQHN0ZEBA","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.0132D000.00000004.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVmV4Y2VwdGlvbkBzdGRAQA==","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.0132D000.00000004.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVnR5cGVfaW5mb0BA","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.0132D000.00000004.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"LkNSVCRYQ0FB","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"LkNSVCRYSUE=","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"LkNSVCRYSUFB","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"LkNSVCRYSUFD","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"LkNSVCRYSVo=","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"LkNSVCRYUEE=","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"LkNSVCRYUFhB","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"LkNSVCRYUFo=","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"LmdmaWRzJHg=","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"LmdmaWRzJHk=","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"LnJkYXRhJHN4ZGF0YQ==","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"LnJkYXRhJHp6emRiZw==","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"MksyUDJUMlgyXDI=","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.0132F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"PCo8NDxXPGE8","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.0132F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"PD94bWwgdmVyc2lvbj0nMS4wJyBlbmNvZGluZz0nVVRGLTgnIHN0YW5kYWxvbmU9J3llcyc/Pjxhc3NlbWJseSB4bWxucz0ndXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTphc20udjEnIG1hbmlmZXN0VmVyc2lvbj0nMS4wJz4gIDx0cnVzdEluZm8geG1sbnM9InVybjpzY2hlbWFzLW1pY3Jvc29mdC1jb206YXNtLnYzIj4gICAgPHNlY3VyaXR5PiAgICAgIDxyZXF1ZXN0ZWRQcml2aWxlZ2VzPiAgICAgICAgPHJlcXVlc3RlZEV4ZWN1dGlvbkxldmVsIGxldmVsPSdhc0ludm9rZXInIHVpQWNjZXNzPSdmYWxzZScgLz4gICAgICA8L3JlcXVlc3RlZFByaXZpbGVnZXM+ICAgIDwvc2VjdXJpdHk+ICA8L3RydXN0SW5mbz48L2Fzc2VtYmx5Pg==","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.0132F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"PiA+JD4oPiw+MD40Pjg+PD5APkQ+","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.0132F000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"XFJQQyBDb250cm9sXENvbnNvbGVMUEMtMHgwMDAwMDAwMDAwMDAwQzZDLS0xNDA3Mzg3NjIxLTIyNzkwMjYxODg1MTEzNjEwMS01NDk5ODk2MTI4Mjc0NTA1MzktMTExODAwMjk2OC01NTQ2MjA5MTI4NjkwODI0Njg=","type":"Unicode","source":"Runtime Data","process":"bcs.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"X19jbHJjYWxs","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"X19mYXN0Y2FsbA==","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"X19yZXN0cmljdA==","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"X19zdGRjYWxs","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"X190aGlzY2FsbA==","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"X191bmFsaWduZWQ=","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"X192ZWN0b3JjYWxs","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"X25leHRhZnRlcg==","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YGNvcHkgY29uc3RydWN0b3IgY2xvc3VyZSc=","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YGRlZmF1bHQgY29uc3RydWN0b3IgY2xvc3VyZSc=","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YGR5bmFtaWMgYXRleGl0IGRlc3RydWN0b3IgZm9yICc=","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YGR5bmFtaWMgaW5pdGlhbGl6ZXIgZm9yICc=","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YGVoIHZlY3RvciBjb25zdHJ1Y3RvciBpdGVyYXRvcic=","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YGVoIHZlY3RvciBjb3B5IGNvbnN0cnVjdG9yIGl0ZXJhdG9yJw==","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YGVoIHZlY3RvciBkZXN0cnVjdG9yIGl0ZXJhdG9yJw==","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YGVoIHZlY3RvciB2YmFzZSBjb25zdHJ1Y3RvciBpdGVyYXRvcic=","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YGVoIHZlY3RvciB2YmFzZSBjb3B5IGNvbnN0cnVjdG9yIGl0ZXJhdG9yJw==","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YGxvY2FsIHN0YXRpYyBndWFyZCc=","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YGxvY2FsIHN0YXRpYyB0aHJlYWQgZ3VhcmQn","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YGxvY2FsIHZmdGFibGUgY29uc3RydWN0b3IgY2xvc3VyZSc=","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YGxvY2FsIHZmdGFibGUn","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YG1hbmFnZWQgdmVjdG9yIGNvbnN0cnVjdG9yIGl0ZXJhdG9yJw==","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YG1hbmFnZWQgdmVjdG9yIGNvcHkgY29uc3RydWN0b3IgaXRlcmF0b3In","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YG1hbmFnZWQgdmVjdG9yIGRlc3RydWN0b3IgaXRlcmF0b3In","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YG9tbmkgY2FsbHNpZyc=","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YHBsYWNlbWVudCBkZWxldGUgY2xvc3VyZSc=","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YHBsYWNlbWVudCBkZWxldGVbXSBjbG9zdXJlJw==","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YHNjYWxhciBkZWxldGluZyBkZXN0cnVjdG9yJw==","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YHN0cmluZyc=","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YHR5cGVvZic=","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YHVkdCByZXR1cm5pbmcn","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YHZiYXNlIGRlc3RydWN0b3In","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YHZidGFibGUn","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YHZlY3RvciBjb25zdHJ1Y3RvciBpdGVyYXRvcic=","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YHZlY3RvciBjb3B5IGNvbnN0cnVjdG9yIGl0ZXJhdG9yJw==","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YHZlY3RvciBkZWxldGluZyBkZXN0cnVjdG9yJw==","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YHZlY3RvciBkZXN0cnVjdG9yIGl0ZXJhdG9yJw==","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YHZlY3RvciB2YmFzZSBjb25zdHJ1Y3RvciBpdGVyYXRvcic=","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YHZlY3RvciB2YmFzZSBjb3B5IGNvbnN0cnVjdG9yIGl0ZXJhdG9yJw==","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YHZmdGFibGUn","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YHZpcnR1YWwgZGlzcGxhY2VtZW50IG1hcCc=","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"QUJDREVGR0hJSktMTU5PUFFSU1RVVldYWVo=","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.0132D000.00000004.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YWJjZGVmZ2hpamtsbW5vcHFyc3R1dnd4eXo=","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.0132D000.00000004.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXBpLW1zLXdpbi1hcHBtb2RlbC1ydW50aW1lLWwxLTEtMQ==","type":"Unicode","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXBpLW1zLXdpbi1jb3JlLWZpbGUtbDItMS0x","type":"Unicode","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"QXJlRmlsZUFwaXNBTlNJ","type":"Ansi","source":"Hybrid Analysis","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01311000.00000020.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXotQVotQ3lybA==","type":"Unicode","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXotQVotTGF0bg==","type":"Unicode","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YmFkIGFsbG9jYXRpb24=","type":"Ansi","source":"Hybrid Analysis","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01311000.00000020.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YmFkIGFycmF5IG5ldyBsZW5ndGg=","type":"Ansi","source":"Hybrid Analysis","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01311000.00000020.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"QmFzZSBDbGFzcyBBcnJheSc=","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"QmFzZSBDbGFzcyBEZXNjcmlwdG9yIGF0ICg=","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YnMtYmEtbGF0bg==","type":"Unicode","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JVBST0dSQU1GSUxFUyVcKHg4NilcVmlzdWFsd2FyZSBCQ1NcYmNzLmV4ZQ==","type":"Ansi","source":"Hybrid Analysis","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01311000.00000020.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JVVTRVJQUk9GSUxFJVxEb2N1bWVudHNcVmlzdWFsd2FyZVxOZXRRQ2hlY2tcV2luZG93c0Rlc2t0b3BcTlFDQXBwTWdyXFJlbGVhc2VcTlFDQXBwTWdyLnBkYg==","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q2xhc3MgSGllcmFyY2h5IERlc2NyaXB0b3In","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q2xvc2VTZXJ2aWNlSGFuZGxl","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q29tbWFuZHM6IHEgPSBxdWl0","type":"Ansi","source":"Hybrid Analysis","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01311000.00000020.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q29tcGFyZVN0cmluZ0V4","type":"Ansi","source":"Hybrid Analysis","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01311000.00000020.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q29tcGFyZVN0cmluZ1c=","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q29tcGxldGUgT2JqZWN0IExvY2F0b3In","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q29udHJvbFNlcnZpY2U=","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q29yRXhpdFByb2Nlc3M=","type":"Ansi","source":"Hybrid Analysis","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01311000.00000020.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlRXZlbnRB","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlRmlsZVc=","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlU2VydmljZUE=","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"ZGRkZCwgTU1NTSBkZCwgeXl5eQ==","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RGVjb2RlUG9pbnRlcg==","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RGVjb2RlU2VydmljZUFyZ3M=","type":"Ansi","source":"Hybrid Analysis","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01310000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RGVsZXRlQ3JpdGljYWxTZWN0aW9u","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RGVsZXRlU2VydmljZQ==","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RW50ZXJDcml0aWNhbFNlY3Rpb24=","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RXhpdFRocmVhZA==","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RmFpbGVkIHRvIGFwcGx5IHVwZGF0ZQ==","type":"Ansi","source":"Hybrid Analysis","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01310000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RmFpbGVkIHRvIG9wZW4gU0NNYW5hZ2Vy","type":"Ansi","source":"Hybrid Analysis","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01311000.00000020.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RmFpbGVkIHRvIHN0YXJ0ICVz","type":"Ansi","source":"Hybrid Analysis","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01311000.00000020.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RmFpbGVkIHRvIHRlcm1pbmF0ZSBwcm9jZXNzIFslZF0=","type":"Ansi","source":"Hybrid Analysis","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01311000.00000020.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RmluZEZpcnN0RmlsZUV4QQ==","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RmxzR2V0VmFsdWU=","type":"Ansi","source":"Hybrid Analysis","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01311000.00000020.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RmxzU2V0VmFsdWU=","type":"Ansi","source":"Hybrid Analysis","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01311000.00000020.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Rmx1c2hGaWxlQnVmZmVycw==","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RnJlZUVudmlyb25tZW50U3RyaW5nc1c=","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RnJlZUxpYnJhcnlBbmRFeGl0VGhyZWFk","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0Q29tbWFuZExpbmVX","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0Q29uc29sZUNQ","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0Q29uc29sZU1vZGU=","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0Q1BJbmZv","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0Q3VycmVudFBhY2thZ2VJZA==","type":"Ansi","source":"Hybrid Analysis","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01311000.00000020.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0Q3VycmVudFByb2Nlc3NJZA==","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0Q3VycmVudFRocmVhZElk","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RW52aXJvbm1lbnRTdHJpbmdzVw==","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RmlsZVR5cGU=","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0TW9kdWxlSGFuZGxlRXhX","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0TW9kdWxlSGFuZGxlVw==","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0T0VNQ1A=","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0UHJvY2Vzc0hlYXA=","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0UHJvY2Vzc1dpbmRvd1N0YXRpb24=","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0U3RhcnR1cEluZm9X","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0U3RkSGFuZGxl","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0U3RyaW5nVHlwZVc=","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0U3lzdGVtVGltZUFzRmlsZVRpbWU=","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0VXNlck9iamVjdEluZm9ybWF0aW9uQQ==","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SGVhcEFsbG9j","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SGVhcFJlQWxsb2M=","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"aW4tY29yZS1sb2NhbGl6YXRpb24tb2Jzb2xldGUtbDEtMi0w","type":"Unicode","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SW5pdGlhbGl6ZUNyaXRpY2FsU2VjdGlvbkFuZFNwaW5Db3VudA==","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SW5pdGlhbGl6ZUNyaXRpY2FsU2VjdGlvbkV4","type":"Ansi","source":"Hybrid Analysis","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01311000.00000020.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SW5pdGlhbGl6ZVNMaXN0SGVhZA==","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SXNEZWJ1Z2dlclByZXNlbnQ=","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SXNQcm9jZXNzb3JGZWF0dXJlUHJlc2VudA==","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SXNWYWxpZENvZGVQYWdl","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"TENNYXBTdHJpbmdFeA==","type":"Ansi","source":"Hybrid Analysis","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01311000.00000020.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"TENNYXBTdHJpbmdX","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"TGVhdmVDcml0aWNhbFNlY3Rpb24=","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"TG9hZExpYnJhcnlFeFc=","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"TG9jYWxlTmFtZVRvTENJRA==","type":"Ansi","source":"Hybrid Analysis","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01311000.00000020.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"TWdyTG9nLnR4dA==","type":"Ansi","source":"Hybrid Analysis","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01311000.00000020.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"TU1NTSBkZCwgeXl5eQ==","type":"Unicode","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"bXMtd2luLWNvcmUtc3RyaW5nLWwxLTEtMA==","type":"Unicode","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"bXMtd2luLWNvcmUtd2lucnQtbDEtMS0w","type":"Unicode","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"bXNjb3JlZS5kbGw=","type":"Unicode","source":"Hybrid Analysis","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01311000.00000020.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"TkFOKFNOQU4p","type":"Ansi","source":"Hybrid Analysis","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01311000.00000020.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"bmFuKHNuYW4p","type":"Ansi","source":"Hybrid Analysis","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01311000.00000020.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"TlFDQXBwTWdyOiBSdW5uaW5nICVz","type":"Ansi","source":"Hybrid Analysis","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01310000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"TlFDQXBwTWdyOiBUZXJtaW5hdGluZyBwcm9jZXNzICVk","type":"Ansi","source":"Hybrid Analysis","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01311000.00000020.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"TlFDQXBwTWdyOiBVcGRhdGUgZm91bmQ=","type":"Ansi","source":"Hybrid Analysis","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01310000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"b24tbDEtMi0x","type":"Unicode","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"T3BlblNDTWFuYWdlckE=","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"T3BlblNlcnZpY2VB","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"b3BlcmF0b3IgIiI=","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"T3B0aW9uczogICAgICAgdXBkYXRlY2hlY2tpbnRlcnZhbHNlY3M9bm4gICBUaW1lIGJldHdlZW4gY2hlY2tzIGZvciBhcHBsaWNhdGlvbiB1cGRhdGUgZmlsZSAgICAgICBpbnN0YWxsICAgPSBpbnN0YWxsIGFzIGEgc2VydmljZSAgICAgICB1bmluc3RhbGwgPSB1bmluc3RhbGwgZXhpc3Rpbmcgc2VydmljZSAgICAgICByZWluc3RhbGwgPSBpbnN0YWxsIGFzIGEgc2VydmljZSBhZnRlciB1bmluc3RhbGxpbmcgZXhpc3Rpbmcgc2VydmljZQ==","type":"Ansi","source":"Hybrid Analysis","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01311000.00000020.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UHJvY2VzcyBzdWNjZXNzZnVsbHkgdGVybWluYXRlZA==","type":"Ansi","source":"Hybrid Analysis","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01311000.00000020.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UXVlcnlQZXJmb3JtYW5jZUNvdW50ZXI=","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UXVlcnlTZXJ2aWNlU3RhdHVz","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UmFpc2VFeGNlcHRpb24=","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UmVhZENvbnNvbGVX","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UmVnaXN0ZXJTZXJ2aWNlQ3RybEhhbmRsZXJB","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"cmVpbnN0YWxs","type":"Ansi","source":"Hybrid Analysis","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01311000.00000020.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UmVwbGFjZUZpbGVB","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"cmVzdHJpY3Qo","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Um9Jbml0aWFsaXpl","type":"Ansi","source":"Hybrid Analysis","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01311000.00000020.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Um9VbmluaXRpYWxpemU=","type":"Ansi","source":"Hybrid Analysis","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01311000.00000020.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UnRsVW53aW5k","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U2VwdGVtYmVy","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U2V0RW5kT2ZGaWxl","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U2V0RmlsZVBvaW50ZXJFeA==","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U2V0TGFzdEVycm9y","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U2V0U2VydmljZVN0YXR1cw==","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U2V0U3RkSGFuZGxl","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U2V0VW5oYW5kbGVkRXhjZXB0aW9uRmlsdGVy","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"c3ItQkEtTGF0bg==","type":"Unicode","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"c3ItU1AtQ3lybA==","type":"Unicode","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U3RhcnRTZXJ2aWNlQQ==","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U3RhcnRTZXJ2aWNlQ3RybERpc3BhdGNoZXJB","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U3RvcHBpbmcgc2VydmljZS4uLg==","type":"Ansi","source":"Hybrid Analysis","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01311000.00000020.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"dC1tcy13aW4tbnR1c2VyLXdpbmRvd3N0YXRpb24tbDEtMS0w","type":"Unicode","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VGVybWluYXRlUHJvY2Vzcw==","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VGhpcyBzZXJ2aWNlIGlzIGFsZWFkeSBpbnN0YWxsZWQ=","type":"Ansi","source":"Hybrid Analysis","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01311000.00000020.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VGh1cnNkYXk=","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"dGlvbnMtbDEtMS0w","type":"Unicode","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VGxzR2V0VmFsdWU=","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VGxzU2V0VmFsdWU=","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VHlwZSBEZXNjcmlwdG9yJw==","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VW5oYW5kbGVkRXhjZXB0aW9uRmlsdGVy","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"dW5pbnN0YWxs","type":"Ansi","source":"Hybrid Analysis","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01311000.00000020.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VW5pbnN0YWxsIHNlcnZpY2U6ICVzIHNlcnZpY2Ugbm90IGZvdW5k","type":"Ansi","source":"Hybrid Analysis","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01311000.00000020.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VW5pbnN0YWxsIHNlcnZpY2U6IHNlcnZpY2UgZGVsZXRlZA==","type":"Ansi","source":"Hybrid Analysis","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01311000.00000020.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VW5rbm93biBleGNlcHRpb24=","type":"Ansi","source":"Hybrid Analysis","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01311000.00000020.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VXBkYXRlIHN1Y2Nlc3NmdWxseSBhcHBsaWVk","type":"Ansi","source":"Hybrid Analysis","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01310000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"dXBkYXRlY2hlY2tpbnRlcnZhbHNlY3M9","type":"Ansi","source":"Hybrid Analysis","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01311000.00000020.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VVRGLTE2TEVVTklDT0RF","type":"Ansi","source":"Hybrid Analysis","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01311000.00000020.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VmlzdWFsd2FyZSBhcHBsaWNhdGlvbiBtYW5hZ2Vy","type":"Ansi","source":"Hybrid Analysis","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01311000.00000020.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VmlzdWFsd2FyZSBhcHBsaWNhdGlvbiBtYW5hZ2VyIC0gTmV0UUNoZWNrSFRNTDVBZ2VudC5leGU=","type":"Ansi","source":"Runtime Data","process":"bcs.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VmlzdWFsd2FyZSBhcHBsaWNhdGlvbiBtYW5hZ2VyIC0gTmV0UUNoZWNrSFRNTDVBZ2VudC5leGUgc2VydmljZSBpbnN0YWxsZWQgT0s=","type":"Ansi","source":"Runtime Data","process":"bcs.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V2VkbmVzZGF5","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"V2lkZUNoYXJUb011bHRpQnl0ZQ==","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"V3JpdGVDb25zb2xlVw==","type":"Ansi","source":"Memory/File Scan","process":"bcs.exe","filename":"00034673-00003656.00000000.34896.01326000.00000002.mdmp","compromised":null,"detection_total":null,"total":null}]},{"name":"bcs_service.exe:2748","strings":[{"value":"IiVQUk9HUkFNRklMRVMlXCh4ODYpXFZpc3VhbHdhcmUgQkNTXGJjc191bmluc3RhbGwuZXhlIg==","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"IkM6XGJjc19zZXJ2aWNlLmV4ZSI=","type":"Ansi","source":"Hybrid Analysis","process":"bcs_service.exe","filename":"00034508-00002748.00000001.35008.00401000.00000020.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JUdVSUQ6IkNvbXB1dGVyIiU=","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"MDAwNjAxMDEuMDAwNjAxMDE=","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"MSAxJDEoMSwxMDE0MTgx","type":"Ansi","source":"Memory/File Scan","process":"bcs_service.exe","filename":"00034508-00002748.00000001.35008.00409000.00000004.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"MSAxJDEoMSwxNDE8MUQxSDFUMVgx","type":"Ansi","source":"Memory/File Scan","process":"bcs_service.exe","filename":"00034508-00002748.00000001.35008.00409000.00000004.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"NSQ1LDU0NTw1RA==","type":"Ansi","source":"Memory/File Scan","process":"bcs_service.exe","filename":"00034508-00002748.00000001.35008.00409000.00000004.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"NUw1VDVcNWQ1bDV0NcOvwr/CvQ==","type":"Ansi","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"ODM8M0AzRDNIM0wzUDNUM1gzXDNgM2QzaDNsM3AzdDN4M3wzKDUsNTA1NDU4NTw1QDVENUg1TDVQNSg4LDg4ODw4","type":"Ansi","source":"Memory/File Scan","process":"bcs_service.exe","filename":"00034508-00002748.00000001.35008.00409000.00000004.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"OlxVc2Vyc1xIQVBVQldTXEFwcERhdGFcTG9jYWxcVGVtcFxuc3g0MkVFLnRtcA==","type":"Ansi","source":"Memory/File Scan","process":"bcs_service.exe","filename":"00034508-00002748.00000001.35008.00409000.00000004.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"PSI9OD1OPVY9","type":"Ansi","source":"Memory/File Scan","process":"bcs_service.exe","filename":"00034508-00002748.00000001.35008.00409000.00000004.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"PiA+JD4oPiw+MD40Pjg+PD5APkQ+SD5MPlA+VD4=","type":"Ansi","source":"Memory/File Scan","process":"bcs_service.exe","filename":"00034508-00002748.00000001.35008.00409000.00000004.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"PjA+ND5EPkg+WD5cPmg+cD54Pg==","type":"Ansi","source":"Memory/File Scan","process":"bcs_service.exe","filename":"00034508-00002748.00000001.35008.00409000.00000004.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"PyA/KD8wPzg/QD9IP1A/WD9gPw==","type":"Ansi","source":"Memory/File Scan","process":"bcs_service.exe","filename":"00034508-00002748.00000001.35008.00409000.00000004.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"PyQ/ND9EP0g/VD9kPw==","type":"Ansi","source":"Memory/File Scan","process":"bcs_service.exe","filename":"00034508-00002748.00000001.35008.00409000.00000004.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"W0ludGVybmV0U2hvcnRjdXRdVVJMPWh0dHA6Ly93d3cubXljb25uZWN0aW9uc2VydmVyLmNvbS9zdXBwb3J0L3Y5L2Jjcy5odG1sSURMaXN0PUljb25GaWxlPSVXSU5ESVIlXHN5c3RlbTMyXFNIRUxMMzIuZGxsSWNvbkluZGV4PTE3SG90S2V5PTBbezAwMDIxNEEwLTAwMDAtMDAwMC1DMDAwLTAwMDAwMDAwMDA0Nn1dUHJvcDM9MTksMg==","type":"Ansi","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFNlc3Npb25zXDFcV2luZG93c1xBcGlQb3J0","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFRoZW1lQXBpUG9ydA==","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"YFw/P1xWb2x1bWV7ZTQ3ZjRmNDMtZDg2My0xMWU3LTlkOGYtODA2ZTZmNmU2OTYzfQ==","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"YFw/P1xWb2x1bWV7ZTQ3ZjRmNDQtZDg2My0xMWU3LTlkOGYtODA2ZTZmNmU2OTYzfQ==","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"YFw/P1xWb2x1bWV7ZTQ3ZjRmNDctZDg2My0xMWU3LTlkOGYtODA2ZTZmNmU2OTYzfQ==","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"YWRkX3NlcnZlcmhlbGxvX3JlbmVnb3RpYXRlX2V4dA==","type":"Ansi","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"QWx0ZXJuYXRlQ29kZVBhZ2U=","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"QXR0cmlidXRlcw==","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"QXV0aGVudGljb2RlRW5hYmxlZA==","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"QzpcYmNzX3NlcnZpY2UuZXhl","type":"Ansi","source":"Hybrid Analysis","process":"bcs_service.exe","filename":"00034508-00002748.00000001.35008.00401000.00000020.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JVBST0dSQU1GSUxFUyVcKHg4NilcVmlzdWFsd2FyZSBCQ1M=","type":"Ansi","source":"Hybrid Analysis","process":"bcs_service.exe","filename":"00034508-00002748.00000001.35008.00401000.00000020.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JVRFTVAlXA==","type":"Ansi","source":"Hybrid Analysis","process":"bcs_service.exe","filename":"00034508-00002748.00000001.35008.00401000.00000020.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JVRFTVAlXG5zeDQyRUUudG1w","type":"Ansi","source":"Hybrid Analysis","process":"bcs_service.exe","filename":"00034508-00002748.00000000.34829.00401000.00000020.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JVRFTVAlXG5zeDQyRUUudG1wXA==","type":"Ansi","source":"Hybrid Analysis","process":"bcs_service.exe","filename":"00034508-00002748.00000001.35008.00401000.00000020.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JVRFTVAlXG5zeDQyRUUudG1wXCouKg==","type":"Ansi","source":"Hybrid Analysis","process":"bcs_service.exe","filename":"00034508-00002748.00000001.35008.00401000.00000020.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JVRFTVAlXG5zeDQyRUUudG1wXG5zRXhlYy5kbGw=","type":"Ansi","source":"Hybrid Analysis","process":"bcs_service.exe","filename":"00034508-00002748.00000001.35008.00401000.00000020.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q2FsbEZvckF0dHJpYnV0ZXM=","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q2F0ZWdvcnk=","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q0VJUEVuYWJsZQ==","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29tK0VuYWJsZWQ=","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29tcGF0RGxs","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29tcHV0ZXJOYW1l","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q1dESWxsZWdhbEluRExMU2VhcmNo","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGVzY3JpcHRpb24=","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGV2aWNlUGF0aA==","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGlzYWJsZUVuZ2luZQ==","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGlzYWJsZUxvY2FsT3ZlcnJpZGU=","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGlzYWJsZU1ldGFGaWxlcw==","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGlzYWJsZVVzZXJNb2RlQ2FsbGJhY2tGaWx0ZXI=","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGlzcGxheU5hbWU=","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"ZGxvY2tlZDAgdGFibGUgb2YgYXV0aG9yaXRpZXM7XGxzZHNlbWloaWRkZW4xIFxsc2R1bmhpZGV1c2VkMSBcbHNkbG9ja2VkMCBtYWNybztcbHNkc2VtaWhpZGRlbjEgXGxzZHVuaGlkZXVzZWQxIFxsc2Rsb2NrZWQwIHRvYSBoZWFkaW5nO1xsc2RzZW1paGlkZGVuMSBcbHNkdW5oaWRldXNlZDEgXGxzZGxvY2tlZDAgTGlzdDtcbHNkc2VtaWhpZGRlbjEgXGxzZHVuaGlkZXVzZWQxIFxsc2Rsb2NrZWQwIExpc3QgQnVsbGV0O1xsc2RzZW1paGlkZGVuMSBc","type":"Ansi","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RHJpdmVNYXNr","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"ZSBldmVuIGlmIHZlcnNpb24gY2hlY2tpbmcgZmFpbHMgKGJvb2xlYW4p","type":"Ansi","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"ZXJzXEhBUFVCV1NcQXBwRGF0YVxMb2NhbFxUZW1wXG5zeDQyRUUudG1w","type":"Ansi","source":"Memory/File Scan","process":"bcs_service.exe","filename":"00034508-00002748.00000001.35008.00409000.00000004.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"ZXJzXEhBUFVCV1NcQXBwRGF0YVxMb2NhbFxUZW1wXG5zeDQyRUUudG1wXG5zRXhlYy5kbGw=","type":"Ansi","source":"Memory/File Scan","process":"bcs_service.exe","filename":"00034508-00002748.00000001.35008.00409000.00000004.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Rm9sZGVyVHlwZUlE","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"R2VuZXJhdGlvbg==","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SEFQVUJXU1xBcHBEYXRhXExvY2FsXFRlbXBcbnN4NDJFRS50bXBcbnNFeGVjLmRsbA==","type":"Ansi","source":"Memory/File Scan","process":"bcs_service.exe","filename":"00034508-00002748.00000001.35008.00409000.00000004.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SGFzTmF2aWdhdGlvbkVudW0=","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SGlkZUZvbGRlclZlcmJz","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SGlkZUluV2ViVmlldw==","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SGlkZU9uRGVza3RvcFBlclVzZXI=","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SW5pdEZvbGRlckhhbmRsZXI=","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SW5wcm9jU2VydmVyMzI=","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SW5zdGFsbERpcg==","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SW5zdGFsbExhbmd1YWdlRmFsbGJhY2s=","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SVB2NExvb3BiYWNrQWx0ZXJuYXRpdmU=","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TGRhcENsaWVudEludGVncml0eQ==","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TG9hZEFwcEluaXRfRExMcw==","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TG9jYWxpemVkTmFtZQ==","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TG9jYWxSZWRpcmVjdE9ubHk=","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWFjaGluZVByZWZlcnJlZFVJTGFuZ3VhZ2Vz","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWFwTmV0RHJpdmVWZXJicw==","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWFydGFFeHRlbnNpb24=","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWF4UnBjU2l6ZQ==","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWF4U3hTSGFzaENvdW50","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TmRyT2xlRXh0RExM","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Tm9Db21tb25Hcm91cHM=","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Tm9Db250cm9sUGFuZWw=","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Tm9GaWxlRm9sZGVySnVuY3Rpb24=","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Tm9JbnRlcm5ldEljb24=","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Tm9Qcm9wZXJ0aWVzTXlDb21wdXRlcg==","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Tm9Qcm9wZXJ0aWVzUmVjeWNsZUJpbg==","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Tm9SZXBhaXI=","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Tm9TZXRGb2xkZXJz","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"bnN4NDJFRS50bXA=","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"T0NTUF9TSUdOQVRVUkU=","type":"Ansi","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"T09CRUluUHJvZ3Jlc3M=","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UGFnZUFsbG9jYXRvclN5c3RlbUhlYXBJc1ByaXZhdGU=","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UGFnZUFsbG9jYXRvclVzZVN5c3RlbUhlYXA=","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UGFyZW50Rm9sZGVy","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UGFyc2luZ05hbWU=","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UGluVG9OYW1lU3BhY2VUcmVl","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJlQ3JlYXRl","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJlZmVyRXh0ZXJuYWxNYW5pZmVzdA==","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJlZmVycmVkVUlMYW5ndWFnZXM=","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJvZmlsZUltYWdlUGF0aA==","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJvZ3JhbSBGaWxlcyAoeDg2KVxWaXN1YWx3YXJlIEJDUw==","type":"Ansi","source":"Memory/File Scan","process":"bcs_service.exe","filename":"00034508-00002748.00000001.35008.00409000.00000004.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UHJvZ3JhbUZpbGVzRGly","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHVibGlzaEV4cGFuZGVkUGF0aA==","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UXVlcnlGb3JJbmZvVGlw","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UXVlcnlGb3JPdmVybGF5","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UmVsYXRpdmVQYXRo","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UmVzdHJpY3RlZEF0dHJpYnV0ZXM=","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2FmZURsbFNlYXJjaE1vZGU=","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2VjdXJpdHk=","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U3RyZWFtUmVzb3VyY2U=","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U3RyZWFtUmVzb3VyY2VUeXBl","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U3lzdGVtU2V0dXBJblByb2dyZXNz","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"dGFsbC5leGUi","type":"Ansi","source":"Memory/File Scan","process":"bcs_service.exe","filename":"00034508-00002748.00000001.35008.00409000.00000004.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VGhlbWVBcGlDb25uZWN0aW9uUmVxdWVzdA==","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VGhyZWFkaW5nTW9kZWw=","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"dG8gVENQIHBvcnQgJWQ=","type":"Ansi","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VHJhbnNwYXJlbnRFbmFibGVk","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"dHJvbFNlcnZpY2U=","type":"Ansi","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VW5pbnN0YWxsU3RyaW5n","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VXNlRHJvcEhhbmRsZXI=","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VXNlSG9zdG5hbWVBc0FsaWFz","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VXNlT2xkSG9zdFJlc29sdXRpb25PcmRlcg==","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VmlzdWFsd2FyZSBCQ1M=","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VmlzdWFsd2FyZSBCQ1MgU2V0dXA=","type":"Ansi","source":"Hybrid Analysis","process":"bcs_service.exe","filename":"00034508-00002748.00000001.35008.00401000.00000020.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VmlzdWFsd2FyZSBCcm93c2VyIENvbXBhdGliaWxpdHkgU2VydmljZSAoQkNTKQ==","type":"Ansi","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V2FudHNBbGlhc2VkTm90aWZpY2F0aW9ucw==","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V2FudHNGT1JESVNQTEFZ","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V2FudHNGT1JQQVJTSU5H","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V2FudHNQYXJzZURpc3BsYXlOYW1l","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V2FudHNVbml2ZXJzYWxEZWxlZ2F0ZQ==","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"ezFCM0VBNURDLUI1ODctNDc4Ni1CNEVGLUJEMURDMzMyQUVBRX0=","type":"Unicode","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"e1xydGYxXGFkZWZsYW5nMTAyNVxhbnNpXGFuc2ljcGcxMjUyXHVjMVxhZGVmZjBcZGVmZjBcc3RzaGZkYmNoMFxzdHNoZmxvY2gzMTUwNlxzdHNoZmhpY2gzMTUwNlxzdHNoZmJpMzE1MDZcZGVmbGFuZzEwMzNcZGVmbGFuZ2ZlMTAzM1x0aGVtZWxhbmcyMDU3XHRoZW1lbGFuZ2ZlMFx0aGVtZWxhbmdjczB7XGZvbnR0Ymx7XGYwXGZiaWRpIFxmcm9tYW5cZmNoYXJzZXQwXGZwcnEye1wqXHBhbm9zZSAwMjAyMDYwMzA1MDQwNTAyMDMwNH1UaW1lcyBOZXcgUm8=","type":"Ansi","source":"Runtime Data","process":"bcs_service.exe","filename":null,"compromised":null,"detection_total":null,"total":null}]},{"name":"bcs.exe:1664","strings":[{"value":"JVBST0dSQU1GSUxFUyVcKHg4NilcVmlzdWFsd2FyZSBCQ1NcTmV0UUNoZWNrSFRNTDVBZ2VudC5leGUgc3VjY2Vzc2Z1bGx5IHN0YXJ0ZWQ=","type":"Ansi","source":"Runtime Data","process":"bcs.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFdpbmRvd3NcQXBpUG9ydA==","type":"Unicode","source":"Runtime Data","process":"bcs.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"YXBwdXBkYXRl","type":"Unicode","source":"Runtime Data","process":"bcs.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"QzpcUHJvZ3JhbV9GaWxlc18oeDg2KVxWaXN1YWx3YXJlX0JDU1xWaXN1YWx3YXJlX2FwcGxpY2F0aW9uX21hbmFnZXJfLV9OZXRRQ2hlY2tIVE1MNUFnZW50LmV4ZS5hcmc=","type":"Ansi","source":"Runtime Data","process":"bcs.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGVjb2RlU2VydmljZUFyZ3MgT25JbnN0YWxs","type":"Ansi","source":"Runtime Data","process":"bcs.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"R2V0U2VydmljZUFyZ3NQYXRoOg==","type":"Ansi","source":"Runtime Data","process":"bcs.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TmV0UUNoZWNrSFRNTDVBZ2VudC5leGU=","type":"Unicode","source":"Runtime Data","process":"bcs.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TlFDQXBwTWdyOiBSdW5uaW5nICVQUk9HUkFNRklMRVMlXCh4ODYpXFZpc3VhbHdhcmUgQkNTXE5ldFFDaGVja0hUTUw1QWdlbnQuZXhl","type":"Ansi","source":"Runtime Data","process":"bcs.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2VydmljZSBNYWlu","type":"Ansi","source":"Runtime Data","process":"bcs.exe","filename":null,"compromised":null,"detection_total":null,"total":null}]},{"name":"license.rtf","strings":[{"value":"LCBhc3NvY2lhdGVzLCBhZmZpbGlhdGVzLCBvciBzdXBwbGllcnMgYmUgbGlhYmxlIGZvciBhbnkgc3BlY2lhbCwgaW5jaWRlbnRhbCwgaW5kaXJlY3QsIG9yIGNvbnNlcXVlbnRpYWwgZGFtYWdlcyB3aGF0c29ldmVyIChpbmNsdWRpbmcsIHdpdGhvdXQgbGltaXRhdGlvbiwgZGFtYWdlcyBmb3IgbG9zcyBvZiBidXNpbmVzcyBwcm9maXRzLCBidXNpbmVzcyBpbnRlcnJ1cHRpb24sIGxvc3Mgb2YgYnVzaW5lc3MgaW5mb3JtYXRpb24sIG9yIGFueSBv","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDBmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmYwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDEwNTAwMDAwMDAwMDAwMH19","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"MDgwNzEzZDk2MGY1YTAxYWRkMzRlYjFhMjk4N2FkNWRmNzc0MjMxOTM5NGQzNDU3M2RkMzUwMTVkOTM1ZWQyYTY2Y2NiMDZjMDM2YmIxM2M1ZjkzZDc1ODJkNDMwYzlhYTY3N2Y4NTRiYWQ3MjViN2JlZDRiYWI1N2Q0MmQ2MjU=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"MGM4OTVmY2Y2NzIwMTkyZGU2YmYzYjllODllY2RiZDY1OTZjYmNkZDhlYjI4ZTdjMzY1ZWNjNGVjMWZmMTQ2MGY1M2ZlODEzZDNjYzdmNWI3ZjAyMDAwMGZmZmYwMzAwNTA0YjAzMDQxNDAwMDYwMDA4MDAwMDAwMjEwMGE1ZDY=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"MGUyNTUxYzM5NWNiY2ZkMjQwNjNhNTIxOGE1YmIxMDQ4MjcwNjFjOWQ1NDE1NjJlMWEzOTQ4YmE5OTY0M2MxZWUzYTFkMGQzYWU4ZGM4NDhhN2E3YTBmMGE5NTY1OGFmMmFmM2YzODNhNTI1OWI0MWJhN2JlMWU4ZDgxOWQwNTk=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"MGY4OGQ5NGZiYzUyYWU0MjY0ZDFjOTEwZDI0YTQ1ZGIzNDYyMjQ3ZmE3OTE3MTVmZDcxZjk4OWUxOWUwMzY0Y2QzZjUxNjUyZDczNzYwYWU4ZmE4YzlmZmIzYzMzMGNjOWU0ZmMxN2ZhZjJjZTU0NTA0NmUzNzk0NGM2OWU0NjI=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"MTgwMDAwMDA0ZDczNzg2ZDZjMzIyZTUzNDE1ODU4NGQ0YzUyNjU2MTY0NjU3MjJlMzYyZTMwMDAwMDAwMDAwMDAwMDAwMDAwMDAwNjAwMDA=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"MjBlMDU5ZmMyYzVkZjcwYzBkNDFhM2I2OWFjY2EwMjYxOTZmY2FiMGQ0ZWNjNWE4ZDkzYjk2MGIzYzg1ZGE1OTlhODRhNmZhOTVhNWRiYjViODY1M2RjMjNhMWQwYzllYWJmMzgzZGQ3YWQ1YzJkMDc4YjlhZjU0OTE1NmRmM2Q=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"MmI1MDQ4NDk3Y2I4ODEyZWY4OTU3MmIwNWM2ZDA2MTkzM2JhNjc4NWQ3N2RhZjViMmQyZDljYWY1MDUwMGQ1OTc1YzkyOWM2MmMxNmRiNmEyZDQyZjc1OGQyMDU4MDA0NTIyNDQ4ZWM4OGY5MTQ4ZmQxMTBhYTM4NDA5NDBjMTI=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"MmU3MjY1NmM3MzUwNGIwMTAyMmQwMDE0MDAwNjAwMDgwMDAwMDAyMTAwNmI3OTk2MTY4MzAwMDAwMDhhMDAwMDAwMWMwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDE5MDIwMDAwNzQ2ODY1NmQ2NTJmNzQ2ODY1NmQ2NTJmNzQ=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"NDM2OTFiNDhhMDJmZTlhZmQ5MzZhNTRkMjE3ZmExNzc0NmI2M2M2MzhmYmI5YjI1ODVhNTY0MGQ4YjM0M2FmN2NlOTk3YmFmY2UxZDQ5OTdhZmRjOGZhODczODQxMzRlNThkYzcwOGI5NzBhYWU4M2UzMjExYjkxNzhkMjcwNmY=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"NDc1N2U4ZDNmNzI5ZTI0NWViMmIyNjBhMDIzOGZkMDEwMDAwZmZmZjAzMDA1MDRiMDMwNDE0MDAwNjAwMDgwMDAwMDAyMTAwYWE1MjI1ZGZjNjA2MDAwMDhiMWEwMDAwMTYwMDAwMDA3NDY4NjU2ZDY1MmY3NDY4NjU2ZDY1MmY=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"NGIwZDU5MmM5YzA3MGQ4YTY1Y2QyZTg4YjdmMDdjMmNhNzFiYThkYTQ4MWNjNTJjNmNlMWM3MTVlNmU5NzgxOGM5YjQ4ZDEzZGY0OWM4NzM1MTdkMjNkNTkwODVhZGI1ZGQyMGQ2YjUyYmQ1MjFlZjJjZGQ1ZWI5MjQ2YTNkOGI=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"NGYxNWY3MzU1OWY3ZmY1YjU5MDcyMTdkZjVlZDUzY2JhYTJlYWFhMDM3MTM2MmJkYTNmNmQ2NjQ3YzFiNmU1ZGJjMDM5NjhjYzhjNWQ3ZWUzNjlhYzUzNzMxZGMyZTliMGRlY2JkNzRiZjk3NmVmNzdmMmZkZGRiZWVlNzc3MmY=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"NTY4OTgxMWExODNjNjFhNTBmOThmNGJhYmViYzI4Mzc4NzgwNDk4OTlhNTJhNTdiZTY3MDY3NGNiMjNkOGU5MDcyMWY5MGE0ZDJmYTM4MDJjYjM1NzYyNjgwZmQ4MDBlY2Q3NTUxZGMxOGViODk5MTM4ZTNjOTQzZDdlNTAzYjY=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"NTcyZjM3YmIzOWFmZGRhYWU1ZWE0MWE1OTU2YjU3ODI2YWJiZGIwZWZjNWFiZGZiZDA3NThlMTRkODZiOTYwM2FmZDJhOWU1MmFjNTIwYzg3OTk1ODJhNDVmYWJlN2FhNWVhOWQ0ZjRhYWNkNWFjNzZiM2U1YzZjNjM2MGU1YTk=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"Ni4gTk8gTElBQklMSVRZIEZPUiBDT05TRVFVRU5USUFMIERBTUFHRVMufXtccnRsY2hcZmNzMSBcYWYyXGFmczIwIFxsdHJjaFxmY3MwIFxmMlxmczIwXGxhbmcyMDU3XGxhbmdmZTIwNTdcbGFuZ2ZlbnAyMDU3XGluc3JzaWQxMzA1MDcyMlxjaGFycnNpZDEzMDUwNzIy","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"NjE3MDIwNzg2ZDZjNmU3MzNhNjEzZDIyNjg3NDc0NzAzYTJmMmY3MzYzNjg2NTZkNjE3MzJlNmY3MDY1NmU3ODZkNmM2NjZmNzI2ZDYxNzQ3MzJlNmY3MjY3MmY2NDcyNjE3NzY5NmU2NzZkNmMyZjMyMzAzMDM2MmY2ZDYxNjk=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"NjU2ZTc0MzIzZDIyNjE2MzYzNjU2ZTc0MzIyMjIwNjE2MzYzNjU2ZTc0MzMzZDIyNjE2MzYzNjU2ZTc0MzMyMjIwNjE2MzYzNjU2ZTc0MzQzZDIyNjE2MzYzNjU2ZTc0MzQyMjIwNjE2MzYzNjU2ZTc0MzUzZDIyNjE2MzYzNjU2ZTc0MzUyMjIwNjE2MzYzNjU2ZTc0MzYzZDIyNjE2MzYzNjU2ZTc0MzYyMjIwNjg2YzY5NmU2YjNkMjI2ODZjNjk2ZTZiMjIyMDY2NmY2YzQ4NmM2OTZlNmIzZDIyNjY2ZjZjNDg2YzY5NmU2YjIyMmYzZX0=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"NjU3NTc3MDkzMWUyN2E0MDg2MDllMzZjMmM5Y2JiYzQ2OTIxNjIwZDQ5OWYwYzhjNmE1YTE5ZWQ5MTA4ZjIzMmI3MTE4NDdjMWJiMTM5YjhlM2I0MThiNWFkYmE4ZDhmNGMyNGRjMTU4ODVhYzhmNzMxMzVjMjc4MTVjZDA0OGE=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"Njg2NTZkNjU0ZDYxNmU2MTY3NjU3MjJlNzg2ZDZjNTA0YjAxMDIyZDAwMTQwMDA2MDAwODAwMDAwMDIxMDBhYTUyMjVkZmM2MDYwMDAwOGIxYTAwMDAxNjAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwZDYwMjAwMDA3NDY4NjU=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"NmMyZWZiMjhhMjdhYzBmNzkxMDg2ZDI0N2JmMzY0YThlMzNhNWM0MGE2Mjc5ODMyYTczM2MyOWNkYjZjNmUyNGIwNWUyZGU5ZDc0MDVlZWM2OTNmYTBmM2M4NDQyNjgyMWNkYTdjZWUyM2M2NzQ2NDliMWQwNjIxOGFhNjM2NmM=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"NmQzMjkzNDRkOTQyYTJiYTFjOTQ0MTUyMGZlNjEwMzQwYjA5YjViMjc3YzJhMjZlNjE1MTkzZWU5N2E5ZGE2MDAxZDRiMmFjYzBkNmM5ODEwZDU3YzNmNTNkMzAwMTIzNzhhMjQyMTQ4ZjY0OWVkMjU0MmZiM2FiOTJmOTJlMzM=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"NmQ2NTJmNzQ2ODY1NmQ2NTJmNzQ2ODY1NmQ2NTMxMmU3ODZkNmM1MDRiMDEwMjJkMDAxNDAwMDYwMDA4MDAwMDAwMjEwMDBkZDE5MDlmYjYwMDAwMDAxYjAxMDAwMDI3MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDBkMDA5MDAwMDc0Njg2NTZkNjUyZjc0Njg2NTZkNjUyZjVmNzI2NTZjNzMyZjc0Njg2NTZkNjU0ZDYxNmU2MTY3NjU3MjJlNzg2ZDZjMmU3MjY1NmM3MzUwNGIwNTA2MDAwMDAwMDAwNTAwMDUwMDVkMDEwMDAwY2IwYTAwMDAwMDAwfQ==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"NmQ2NTJmNzQ2ODY1NmQ2NTRkNjE2ZTYxNjc2NTcyMmU3ODZkNmMwY2NjNGQwYWMzMjAxMDQwZTE3ZGExNzc5MGQ5Mzc2M2JiMjg0NTYyYjJjYmFlYmJmNjAwNDM5YzFhNDFjN2EwZDI5ZmRiZDdlNWUzODMzN2NlZGYxNGQ1OWI=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"NmUyMjIwNjI2NzMxM2QyMjZjNzQzMTIyMjA3NDc4MzEzZDIyNjQ2YjMxMjIyMDYyNjczMjNkMjI2Yzc0MzIyMjIwNzQ3ODMyM2QyMjY0NmIzMjIyMjA2MTYzNjM2NTZlNzQzMTNkMjI2MTYzNjM2NTZlNzQzMTIyMjA2MTYzNjM=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"NzEwMTE3MWE2ZTQxZmRiOWY5ZGRjYjc5YjRiMzMwYTI2MjhiYWQ2NmQ3NTU3ZjBiYmI4NWMxZThiMGE0ZTY0YzI2ODM2YzUyY2ZmM2JkNGEzM2YzYWYwMDU0NmNlMjNhZDU0ZWE1NTNjOWZjMjkwMDFhMGU2MWE1MjkxN2RkYTc=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"NzIwYjQxODlmOWQ1YTIwY2UwODg3MDc4ZmI1MzRjYTMzOTIyZjAzYTMzMTNiMjU1ZmRhZDM1YTY4NWVjZWFlZjEzNTUwZGE1ZTM4ODRlNDNiNGU4MjhiYTk4YTc3MDI1ZTUxOTFkNzU5NmM1NDAzYjViYWMxOTAyYWE4NTY0ZDE=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"NzQ1ZjU0Nzk3MDY1NzM1ZDJlNzg2ZDZjNTA0YjAxMDIyZDAwMTQwMDA2MDAwODAwMDAwMDIxMDBhNWQ2YTdlN2MwMDAwMDAwMzYwMTAwMDAwYjAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMzAwMTAwMDA1ZjcyNjU2YzczMmY=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"NzQ2ODY1NmQ2NTMxMmU3ODZkNmNlYzU5NWQ4YmRiNDYxNDdkMmZmNDNmMDhiZDNiZmU5MmZjYjFjNDFiNmNkOWNlYjZkOTRkNDJlY2E0ZTQ3MTZjOGZhZGM5OGUzNDQ2MzNkZThkMDk4MTkyM2MxNjBhYTU2OWU5NDMwMzdkZWI=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"NzQ2ODY1NmQ2NTRkNjE2ZTYxNjc2NTcyMmU3ODZkNmMyZTcyNjU2YzczODQ4ZjRkMGFjMjMwMTQ4NGY3ODI3NzA4NmY2ZmQzYmExMDkxMjZkZDg4ZDBhZGQ0MDM4NGU0MzUwZDM2M2YyNDUxZWNlZDBkYWUyYzA4MmU4NzYxYmU=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"N2MyYzYyMDFlMTU1YmM3NmZmMDEwMDAwZmZmZjAzMDA1MDRiMDMwNDE0MDAwNjAwMDgwMDAwMDAyMTAwMGRkMTkwOWZiNjAwMDAwMDFiMDEwMDAwMjcwMDAwMDA3NDY4NjU2ZDY1MmY3NDY4NjU2ZDY1MmY1ZjcyNjU2YzczMmY=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"OC4gVEhJUkQgUEFSVFkgUFJPRFVDVC59e1xydGxjaFxmY3MxIFxhZjJcYWZzMjAgXGx0cmNoXGZjczAgXGYyXGZzMjBcbGFuZzIwNTdcbGFuZ2ZlMjA1N1xsYW5nZmVucDIwNTdcaW5zcnNpZDEzMDUwNzIyXGNoYXJyc2lkMTMwNTA3MjI=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"ODg0MDg1N2NkMTAxZmVmZmZmZmYwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMGZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZjAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"OGZjNGExOGVmZDg4MWY0Mjg5MjJlNzI2MTMzNmY4MDEzM2VmMTA3OTBlNzk0MGYxZDY3NGRmMjFkODQ4ZjdlOTZhNzAxYjk0NTVhN2I0MmExMDc5NjU5NjU4NzI3OTE1MzNhMzdlN2I3MzNhNDY1ODQ5MGQwOGJmYTFlNzExODk=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"OTkyMDE2OGZkN2MyYzgwMDFlMzA0NjViMmNiMTQ2ZTE5YTljNGIwYjczN2YxNjRmZWM5MzI3MzMxZDc3MGJhMTIzZGJkYzAxOGE4ZGZjNzY2NjUzZDA1NjYyNzMxOTg0ZDhhMDc5OTNhMjU4YTAwOThlYjE3MGU0MzU3Njg4YjE=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"OTk2OWJiOTc5ZGM5MTM2MzMyZGUzMTY4YWExYTA4M2FlOTk1NzE5YWMxNmRiOGVjOGU0MDUyMTY0ZTg5ZDkzYjY0YjA2MDgyOGU2ZjM3ZWQxNTY3OTE0YjI4NGQyNjI0NTIyODJlMzE5ODcyMGUyNzRhOTM5Y2QwOGE1NGY5ODA=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"OWNiMjQwMDgyNWU5ODJjNzhlYzdhMjdjYzBjODk5MjQxNmM5ZDhiMmE3NTVmYmY3NGNkMjU0NDJhODIwMTY2YzJjZDkzM2Y3OWUzYmUzNzJiZDFmMDdiNWMzOTg5Y2E3NGFhZmYyNDIyYjI0ZWIxYjQ3NWRhNWRmMzc0ZmQ5YWQ=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XCcwMVx1LTM5MTMgPzt9e1xsZXZlbG51bWJlcnM7fVxmM1xmczIwXGZiaWFzMFxocmVzMFxjaGhyZXMwIFxmaS0zNjBcbGkzNjAwXGpjbGlzdHRhYlx0eDM2MDBcbGluMzYwMCB9e1xsaXN0bGV2ZWxcbGV2ZWxuZmMyM1xsZXZlbG5mY24yM1xsZXZlbGpjMFxsZXZlbGpjbjBcbGV2ZWxmb2xsb3cwXGxldmVsc3RhcnRhdDFcbHZsdGVudGF0aXZlXGxldmVsc3BhY2UwXGxldmVsaW5kZW50MHtcbGV2ZWx0ZXh0","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XCcwMVx1LTM5MTMgPzt9e1xsZXZlbG51bWJlcnM7fVxmM1xmczIwXGZiaWFzMFxocmVzMFxjaGhyZXMwIFxmaS0zNjBcbGk0MzIwXGpjbGlzdHRhYlx0eDQzMjBcbGluNDMyMCB9e1xsaXN0bGV2ZWxcbGV2ZWxuZmMyM1xsZXZlbG5mY24yM1xsZXZlbGpjMFxsZXZlbGpjbjBcbGV2ZWxmb2xsb3cwXGxldmVsc3RhcnRhdDFcbHZsdGVudGF0aXZlXGxldmVsc3BhY2UwXGxldmVsaW5kZW50MHtcbGV2ZWx0ZXh0","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XCcwMVx1LTM5MTMgPzt9e1xsZXZlbG51bWJlcnM7fVxmM1xmczIwXGZiaWFzMFxocmVzMFxjaGhyZXMwIFxmaS0zNjBcbGk1MDQwXGpjbGlzdHRhYlx0eDUwNDBcbGluNTA0MCB9e1xsaXN0bGV2ZWxcbGV2ZWxuZmMyM1xsZXZlbG5mY24yM1xsZXZlbGpjMFxsZXZlbGpjbjBcbGV2ZWxmb2xsb3cwXGxldmVsc3RhcnRhdDFcbHZsdGVudGF0aXZlXGxldmVsc3BhY2UwXGxldmVsaW5kZW50MHtcbGV2ZWx0ZXh0","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XCcwMVx1LTM5MTMgPzt9e1xsZXZlbG51bWJlcnM7fVxmM1xmczIwXGZiaWFzMFxocmVzMFxjaGhyZXMwIFxmaS0zNjBcbGk1NzYwXGpjbGlzdHRhYlx0eDU3NjBcbGluNTc2MCB9e1xsaXN0bGV2ZWxcbGV2ZWxuZmMyM1xsZXZlbG5mY24yM1xsZXZlbGpjMFxsZXZlbGpjbjBcbGV2ZWxmb2xsb3cwXGxldmVsc3RhcnRhdDFcbHZsdGVudGF0aXZlXGxldmVsc3BhY2UwXGxldmVsaW5kZW50MHtcbGV2ZWx0ZXh0","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XCcwMVx1LTM5MTMgPzt9e1xsZXZlbG51bWJlcnM7fVxmM1xmczIwXGZiaWFzMFxocmVzMFxjaGhyZXMwIFxmaS0zNjBcbGk2NDgwXGpjbGlzdHRhYlx0eDY0ODBcbGluNjQ4MCB9e1xsaXN0bmFtZSA7fVxsaXN0aWQ3Mjg5NjMwN319e1wqXGxpc3RvdmVycmlkZXRhYmxle1xsaXN0b3ZlcnJpZGVcbGlzdGlkNzI4OTYzMDdcbGlzdG92ZXJyaWRlY291bnQwXGxzMX19e1wqXHBncHRibCB7XHBncFxpcGdwMFxpdGFwMFxsaTBccmkwXHNiMFxzYTB9fQ==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGFiXGFmMlxhZnMyMCBcbHRyY2hcZmNzMCBcYlxmMlxmczIwXGxhbmcyMDU3XGxhbmdmZTIwNTdcbGFuZ2ZlbnAyMDU3XGluc3JzaWQxMzA1MDcyMlxjaGFycnNpZDEzMDUwNzIyIDEuIEdSQU5UIE9GIExJQ0VOU0UufXtccnRsY2hcZmNzMSBcYWYyXGFmczIwIFxsdHJjaFxmY3MwIFxmMlxmczIwXGxhbmcyMDU3XGxhbmdmZTIwNTdcbGFuZ2ZlbnAyMDU3XGluc3JzaWQxMzA1MDcyMlxjaGFycnNpZDEzMDUwNzIyICBWaXN1YWx3YQ==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGFiXGFmMlxhZnMyMCBcbHRyY2hcZmNzMCBcYlxmMlxmczIwXGxhbmcyMDU3XGxhbmdmZTIwNTdcbGFuZ2ZlbnAyMDU3XGluc3JzaWQxMzA1MDcyMlxjaGFycnNpZDEzMDUwNzIyIDcuIExJTUlUQVRJT04gT0YgTElBQklMSVRZLn17XHJ0bGNoXGZjczEgXGFmMlxhZnMyMCBcbHRyY2hcZmNzMCBcZjJcZnMyMFxsYW5nMjA1N1xsYW5nZmUyMDU3XGxhbmdmZW5wMjA1N1xpbnNyc2lkMTMwNTA3MjJcY2hhcnJzaWQxMzA1MDcyMiAgVmlzdWFsd2Fy","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGFmMFxhZnMyNFxhbGFuZzEwMjUgXGx0cmNoXGZjczAgXGZzMjRcbGFuZzIwNTdcbGFuZ2ZlMjA1N1xjZ3JpZFxsYW5nbnAyMDU3XGxhbmdmZW5wMjA1NyBcc2Jhc2Vkb24wIFxzbmV4dDE2IFxzc2VtaWhpZGRlbiBcc3VuaGlkZXVzZWQgXHN0eXJzaWQxMzA1MDcyMiBOb3JtYWwgKFdlYik7fX17XCpcbGlzdHRhYmxle1xsaXN0XGxpc3R0ZW1wbGF0ZWlkMTI3MDI4MzUzMntcbGlzdGxldmVsXGxldmVsbmZjMjNcbGV2ZWxuZmNuMjNcbGV2ZWxqYzA=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGFmMlxhZnMyMCBcbHRyY2hcZmNzMCBcZjJcZnMyMFxsYW5nMjA1N1xsYW5nZmUyMDU3XGxhbmdmZW5wMjA1N1xpbnNyc2lkMTMwNTA3MjJcY2hhcnJzaWQxMzA1MDcyMg==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGFzaWFuYnJrcnVsZVxyc2lkcm9vdDEzMDUwNzIyXG5ld3RibHN0eXJ1bHNcbm9ncm93YXV0b2ZpdFx1c2Vub3Jtc3R5Zm9ybGlzdFxub2luZG5tYnJ0c1xmZWxuYnJlbGV2XG5vY3hzcHRhYmxlXGluZHJsc3dlbGV2ZW5cbm9hZmNuc3R0YmxcYWZlbGV2XHV0aW5sXGh3ZWxldlxzcGx0cGdwYXJcbm90Y3Zhc3Bcbm90YnJrY25zdGZyY3RibFxub3R2YXR4Ynhca3JucHJzbmV0XGNhY2hlZGNvbGJhbCBcbm91aWNvbXBhdCBcZmV0MA==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGJcZjJcZnMyMFxsYW5nMjA1N1xsYW5nZmUyMDU3XGxhbmdmZW5wMjA1N1xpbnNyc2lkMTMwNTA3MjJcY2hhcnJzaWQxMzA1MDcyMiAzLiBBVURJVElORy59e1xydGxjaFxmY3MxIFxhZjJcYWZzMjAgXGx0cmNoXGZjczAgXGYyXGZzMjBcbGFuZzIwNTdcbGFuZ2ZlMjA1N1xsYW5nZmVucDIwNTdcaW5zcnNpZDEzMDUwNzIyXGNoYXJyc2lkMTMwNTA3MjI=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGJcZjJcZnMyMFxsYW5nMjA1N1xsYW5nZmUyMDU3XGxhbmdmZW5wMjA1N1xpbnNyc2lkMTMwNTA3MjJcY2hhcnJzaWQxMzA1MDcyMiA0LiBURVJNSU5BVElPTi59e1xydGxjaFxmY3MxIFxhZjJcYWZzMjAgXGx0cmNoXGZjczAgXGYyXGZzMjBcbGFuZzIwNTdcbGFuZ2ZlMjA1N1xsYW5nZmVucDIwNTdcaW5zcnNpZDEzMDUwNzIyXGNoYXJyc2lkMTMwNTA3MjI=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGJcZjJcZnMyMFxsYW5nMjA1N1xsYW5nZmUyMDU3XGxhbmdmZW5wMjA1N1xpbnNyc2lkMTMwNTA3MjJcY2hhcnJzaWQxMzA1MDcyMiBNeUNvbm5lY3Rpb24gU2VydmVyIH17XHJ0bGNoXGZjczEgXGFiXGFmMlxhZnMyMCBcbHRyY2hcZmNzMCBcYlxmMlxmczIwXGxhbmcyMDU3XGxhbmdmZTIwNTdcbGFuZ2ZlbnAyMDU3XGluc3JzaWQxMjk4ODU1NyBCcm93c2VyIENvbXBhdGliaWxpdHkgU2VydmljZX17XHJ0bGNoXGZjczEgXGFiXGFmMlxhZnMyMA==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGV4cHNocnRuXG5vdWx0cmxzcGNcZG50Ymxuc2JkYlxub3NwYWNlZm9ydWxcZm9ybXNoYWRlXGhvcnpkb2NcZGdtYXJnaW5cZGdoc3BhY2UxODBcZGd2c3BhY2UxODBcZGdob3JpZ2luMTQ0MFxkZ3ZvcmlnaW4xNDQwXGRnaHNob3cxXGRndnNob3cx","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGYwXGZzMjRcbGFuZzIwNTdcbGFuZ2ZlMjA1N1xsYW5nZmVucDIwNTdcaW5zcnNpZDEzMDUwNzIyXGNoYXJyc2lkMTMwNTA3MjI=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGYyXGZzMjBcbGFuZzIwNTdcbGFuZ2ZlMjA1N1xsYW5nZmVucDIwNTdcaW5zcnNpZDEyOTk2NTM4IGltcGxpZWQgb3IgfXtccnRsY2hcZmNzMSBcYWYyXGFmczIwIFxsdHJjaFxmY3MwIFxmMlxmczIwXGxhbmcyMDU3XGxhbmdmZTIwNTdcbGFuZ2ZlbnAyMDU3XGluc3JzaWQyNTA1NDkxIHByb3ZpZGVkIHVuZGVyIHRoaXMgbGljZW5zZSBhZ3JlZW1lbnQuIH17XHJ0bGNoXGZjczEgXGFmMFxhZnMyNCBcbHRyY2hcZmNzMA==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGYyXGZzMjBcbGFuZzIwNTdcbGFuZ2ZlMjA1N1xsYW5nZmVucDIwNTdcaW5zcnNpZDEyOTk2NTM4IHN9e1xydGxjaFxmY3MxIFxhZjJcYWZzMjAgXGx0cmNoXGZjczAgXGYyXGZzMjBcbGFuZzIwNTdcbGFuZ2ZlMjA1N1xsYW5nZmVucDIwNTdcaW5zcnNpZDI1MDU0OTEgIG9ubHkgYW5kIG5vIHdhcnJhbnR5IGlzIH17XHJ0bGNoXGZjczEgXGFmMlxhZnMyMCBcbHRyY2hcZmNzMA==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGYyXGZzMjBcbGFuZzIwNTdcbGFuZ2ZlMjA1N1xsYW5nZmVucDIwNTdcaW5zcnNpZDEzMDUwNzIyXGNoYXJyc2lkMTMwNTA3MjI=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGYyXGZzMjBcbGFuZzIwNTdcbGFuZ2ZlMjA1N1xsYW5nZmVucDIwNTdcaW5zcnNpZDEzMDUwNzIyXGNoYXJyc2lkMTMwNTA3MjIgIChBKSBZb3UgbXVzdCBjb21wbHkgd2l0aCBhbGwgYXBwbGljYWJsZSBsYXdzIHJlZ2FyZGluZyB0aGUgdXNlIG9mIHRoZSBTT0ZUV0FSRSBQUk9EVUNULiAoQikgWW91IG1heSBub3QgcmV2ZXJzZSBlbmdpbmVlciw=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGYyXGZzMjBcbGFuZzIwNTdcbGFuZ2ZlMjA1N1xsYW5nZmVucDIwNTdcaW5zcnNpZDEzMDUwNzIyXGNoYXJyc2lkMTMwNTA3MjIgIEluc3RhbGwgYW5kIHVzZSB0aGUgTmV0UUNoZWNrIG9uIGEgc2luZ2xlIHNlcnZlciwgb3IgbXVsdGlwbGUgZG9tYWlucyBhbmQgc2VydmVycyBjb3JyZXNwb25kaW5nIHRvIHRoZSBsaWNlbnNlIHB1cmNoYXNlZC4gfXtccnRsY2hcZmNzMSBcYWYyXGFmczIwIFxsdHJjaFxmY3Mw","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGYyXGZzMjBcbGFuZzIwNTdcbGFuZ2ZlMjA1N1xsYW5nZmVucDIwNTdcaW5zcnNpZDI1MDU0OTEgQ2xpZW50IHByb2dyYW0gYW5kIHNvdXJjZSBmaWxlcyBtYXkgYmUgaW5zdGFsbGVkIG9uIG11bHRpcGxlIGNsaWVudCBwbGF0Zm9ybXMgY29ycmVzcG9uZGluZyB0byB0aGUgbGljZW5zZWQgcHVyY2hhc2VkLiBTb3VyY2UgZmlsZXMgYXJlIHByb3ZpZGVkIGFzIGV4YW1wbGV9e1xydGxjaFxmY3MxIFxhZjJcYWZzMjAgXGx0cmNoXGZjczA=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGYzMTUwNlxmczIyXGxhbmcyMDU3XGxhbmdmZTEwMzNcbGFuZ25wMjA1NyB9e1wqXGRlZnBhcCBccWwgXGxpMFxyaTBcc2ExNjBcc2wyNTlcc2xtdWx0MVx3aWRjdGxwYXJcd3JhcGRlZmF1bHRcYXNwYWxwaGFcYXNwbnVtXGZhYXV0b1xhZGp1c3RyaWdodFxyaW4wXGxpbjBcaXRhcDAgfVxub3FmcHJvbW90ZSB7XHN0eWxlc2hlZXR7XHFsIFxsaTBccmkwXHNhMTYwXHNsMjU5XHNsbXVsdDE=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGpleHBhbmRcdmlld2tpbmQxXHZpZXdzY2FsZTEwMFxwZ2JyZHJoZWFkXHBnYnJkcmZvb3Rcc3BseXR3bmluZVxmdG5seXR3bmluZVxodG1hdXRzcFxub2xuaHRhZGp0YmxcdXNlbHRiYWxuXGFsbnRibGluZFxseXRjYWxjdGJsd2RcbHl0dGJscnRnclxsbmJya3J1bGVcbm9icmt3cnB0Ymxcc25hcHRvZ3JpZGluY2VsbFxhbGxvd2ZpZWxkZW5kc2VsXHdycHB1bmN0","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxldmVsaW5kZW50MHtcbGV2ZWx0ZXh0XCcwMVx1LTM5MTMgPzt9e1xsZXZlbG51bWJlcnM7fVxmM1xmczIwXGZiaWFzMFxocmVzMFxjaGhyZXMwIFxmaS0zNjBcbGkyODgwXGpjbGlzdHRhYlx0eDI4ODBcbGluMjg4MCB9e1xsaXN0bGV2ZWxcbGV2ZWxuZmMyM1xsZXZlbG5mY24yM1xsZXZlbGpjMFxsZXZlbGpjbjBcbGV2ZWxmb2xsb3cwXGxldmVsc3RhcnRhdDFcbHZsdGVudGF0aXZlXGxldmVsc3BhY2UwXGxldmVsaW5kZW50MHtcbGV2ZWx0ZXh0","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxldmVsamNuMFxsZXZlbGZvbGxvdzBcbGV2ZWxzdGFydGF0MVxsZXZlbHNwYWNlMFxsZXZlbGluZGVudDB7XGxldmVsdGV4dFwnMDFcdS0zOTEzID87fXtcbGV2ZWxudW1iZXJzO31cZjNcZnMyMFxmYmlhczBcaHJlczBcY2hocmVzMCBcZmktMzYwXGxpNzIwXGpjbGlzdHRhYlx0eDcyMFxsaW43MjAgfXtcbGlzdGxldmVsXGxldmVsbmZjMjNcbGV2ZWxuZmNuMjNcbGV2ZWxqYzBcbGV2ZWxqY24wXGxldmVsZm9sbG93MFxsZXZlbHN0YXJ0YXQx","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxldmVsc3BhY2UwXGxldmVsaW5kZW50MHtcbGV2ZWx0ZXh0XCcwMVx1LTM5MTMgPzt9e1xsZXZlbG51bWJlcnM7fVxmM1xmczIwXGZiaWFzMFxocmVzMFxjaGhyZXMwIFxmaS0zNjBcbGkyMTYwXGpjbGlzdHRhYlx0eDIxNjBcbGluMjE2MCB9e1xsaXN0bGV2ZWxcbGV2ZWxuZmMyM1xsZXZlbG5mY24yM1xsZXZlbGpjMFxsZXZlbGpjbjBcbGV2ZWxmb2xsb3cwXGxldmVsc3RhcnRhdDFcbHZsdGVudGF0aXZlXGxldmVsc3BhY2Uw","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHByaW9yaXR5NDUgXGxzZGxvY2tlZDAgUGxhaW4gVGFibGUgNTtcbHNkcHJpb3JpdHk0MCBcbHNkbG9ja2VkMCBHcmlkIFRhYmxlIExpZ2h0O1xsc2Rwcmlvcml0eTQ2IFxsc2Rsb2NrZWQwIEdyaWQgVGFibGUgMSBMaWdodDtcbHNkcHJpb3JpdHk0NyBcbHNkbG9ja2VkMCBHcmlkIFRhYmxlIDI7XGxzZHByaW9yaXR5NDggXGxzZGxvY2tlZDAgR3JpZCBUYWJsZSAzO1xsc2Rwcmlvcml0eTQ5IFxsc2Rsb2NrZWQwIEdyaWQgVGFibGUgNDs=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHByaW9yaXR5NDYgXGxzZGxvY2tlZDAgR3JpZCBUYWJsZSAxIExpZ2h0IEFjY2VudCAzO1xsc2Rwcmlvcml0eTQ3IFxsc2Rsb2NrZWQwIEdyaWQgVGFibGUgMiBBY2NlbnQgMztcbHNkcHJpb3JpdHk0OCBcbHNkbG9ja2VkMCBHcmlkIFRhYmxlIDMgQWNjZW50IDM7XGxzZHByaW9yaXR5NDkgXGxzZGxvY2tlZDAgR3JpZCBUYWJsZSA0IEFjY2VudCAzOw==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHByaW9yaXR5NDYgXGxzZGxvY2tlZDAgTGlzdCBUYWJsZSAxIExpZ2h0IEFjY2VudCAyO1xsc2Rwcmlvcml0eTQ3IFxsc2Rsb2NrZWQwIExpc3QgVGFibGUgMiBBY2NlbnQgMjtcbHNkcHJpb3JpdHk0OCBcbHNkbG9ja2VkMCBMaXN0IFRhYmxlIDMgQWNjZW50IDI7XGxzZHByaW9yaXR5NDkgXGxzZGxvY2tlZDAgTGlzdCBUYWJsZSA0IEFjY2VudCAyOw==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHByaW9yaXR5NDYgXGxzZGxvY2tlZDAgTGlzdCBUYWJsZSAxIExpZ2h0IEFjY2VudCA2O1xsc2Rwcmlvcml0eTQ3IFxsc2Rsb2NrZWQwIExpc3QgVGFibGUgMiBBY2NlbnQgNjtcbHNkcHJpb3JpdHk0OCBcbHNkbG9ja2VkMCBMaXN0IFRhYmxlIDMgQWNjZW50IDY7XGxzZHByaW9yaXR5NDkgXGxzZGxvY2tlZDAgTGlzdCBUYWJsZSA0IEFjY2VudCA2Ow==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHByaW9yaXR5NDYgXGxzZGxvY2tlZDAgTGlzdCBUYWJsZSAxIExpZ2h0O1xsc2Rwcmlvcml0eTQ3IFxsc2Rsb2NrZWQwIExpc3QgVGFibGUgMjtcbHNkcHJpb3JpdHk0OCBcbHNkbG9ja2VkMCBMaXN0IFRhYmxlIDM7XGxzZHByaW9yaXR5NDkgXGxzZGxvY2tlZDAgTGlzdCBUYWJsZSA0O1xsc2Rwcmlvcml0eTUwIFxsc2Rsb2NrZWQwIExpc3QgVGFibGUgNSBEYXJrOw==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHByaW9yaXR5NDcgXGxzZGxvY2tlZDAgR3JpZCBUYWJsZSAyIEFjY2VudCA0O1xsc2Rwcmlvcml0eTQ4IFxsc2Rsb2NrZWQwIEdyaWQgVGFibGUgMyBBY2NlbnQgNDtcbHNkcHJpb3JpdHk0OSBcbHNkbG9ja2VkMCBHcmlkIFRhYmxlIDQgQWNjZW50IDQ7XGxzZHByaW9yaXR5NTAgXGxzZGxvY2tlZDAgR3JpZCBUYWJsZSA1IERhcmsgQWNjZW50IDQ7","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHByaW9yaXR5NDcgXGxzZGxvY2tlZDAgTGlzdCBUYWJsZSAyIEFjY2VudCAzO1xsc2Rwcmlvcml0eTQ4IFxsc2Rsb2NrZWQwIExpc3QgVGFibGUgMyBBY2NlbnQgMztcbHNkcHJpb3JpdHk0OSBcbHNkbG9ja2VkMCBMaXN0IFRhYmxlIDQgQWNjZW50IDM7XGxzZHByaW9yaXR5NTAgXGxzZGxvY2tlZDAgTGlzdCBUYWJsZSA1IERhcmsgQWNjZW50IDM7","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHByaW9yaXR5NDggXGxzZGxvY2tlZDAgR3JpZCBUYWJsZSAzIEFjY2VudCAxO1xsc2Rwcmlvcml0eTQ5IFxsc2Rsb2NrZWQwIEdyaWQgVGFibGUgNCBBY2NlbnQgMTtcbHNkcHJpb3JpdHk1MCBcbHNkbG9ja2VkMCBHcmlkIFRhYmxlIDUgRGFyayBBY2NlbnQgMTtcbHNkcHJpb3JpdHk1MSBcbHNkbG9ja2VkMCBHcmlkIFRhYmxlIDYgQ29sb3JmdWwgQWNjZW50IDE7","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHByaW9yaXR5NDggXGxzZGxvY2tlZDAgR3JpZCBUYWJsZSAzIEFjY2VudCA1O1xsc2Rwcmlvcml0eTQ5IFxsc2Rsb2NrZWQwIEdyaWQgVGFibGUgNCBBY2NlbnQgNTtcbHNkcHJpb3JpdHk1MCBcbHNkbG9ja2VkMCBHcmlkIFRhYmxlIDUgRGFyayBBY2NlbnQgNTtcbHNkcHJpb3JpdHk1MSBcbHNkbG9ja2VkMCBHcmlkIFRhYmxlIDYgQ29sb3JmdWwgQWNjZW50IDU7","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHByaW9yaXR5NDggXGxzZGxvY2tlZDAgTGlzdCBUYWJsZSAzIEFjY2VudCA0O1xsc2Rwcmlvcml0eTQ5IFxsc2Rsb2NrZWQwIExpc3QgVGFibGUgNCBBY2NlbnQgNDtcbHNkcHJpb3JpdHk1MCBcbHNkbG9ja2VkMCBMaXN0IFRhYmxlIDUgRGFyayBBY2NlbnQgNDtcbHNkcHJpb3JpdHk1MSBcbHNkbG9ja2VkMCBMaXN0IFRhYmxlIDYgQ29sb3JmdWwgQWNjZW50IDQ7","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHByaW9yaXR5NDkgXGxzZGxvY2tlZDAgR3JpZCBUYWJsZSA0IEFjY2VudCAyO1xsc2Rwcmlvcml0eTUwIFxsc2Rsb2NrZWQwIEdyaWQgVGFibGUgNSBEYXJrIEFjY2VudCAyO1xsc2Rwcmlvcml0eTUxIFxsc2Rsb2NrZWQwIEdyaWQgVGFibGUgNiBDb2xvcmZ1bCBBY2NlbnQgMjtcbHNkcHJpb3JpdHk1MiBcbHNkbG9ja2VkMCBHcmlkIFRhYmxlIDcgQ29sb3JmdWwgQWNjZW50IDI7","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHByaW9yaXR5NDkgXGxzZGxvY2tlZDAgR3JpZCBUYWJsZSA0IEFjY2VudCA2O1xsc2Rwcmlvcml0eTUwIFxsc2Rsb2NrZWQwIEdyaWQgVGFibGUgNSBEYXJrIEFjY2VudCA2O1xsc2Rwcmlvcml0eTUxIFxsc2Rsb2NrZWQwIEdyaWQgVGFibGUgNiBDb2xvcmZ1bCBBY2NlbnQgNjtcbHNkcHJpb3JpdHk1MiBcbHNkbG9ja2VkMCBHcmlkIFRhYmxlIDcgQ29sb3JmdWwgQWNjZW50IDY7","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHByaW9yaXR5NDkgXGxzZGxvY2tlZDAgTGlzdCBUYWJsZSA0IEFjY2VudCAxO1xsc2Rwcmlvcml0eTUwIFxsc2Rsb2NrZWQwIExpc3QgVGFibGUgNSBEYXJrIEFjY2VudCAxO1xsc2Rwcmlvcml0eTUxIFxsc2Rsb2NrZWQwIExpc3QgVGFibGUgNiBDb2xvcmZ1bCBBY2NlbnQgMTtcbHNkcHJpb3JpdHk1MiBcbHNkbG9ja2VkMCBMaXN0IFRhYmxlIDcgQ29sb3JmdWwgQWNjZW50IDE7","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHByaW9yaXR5NDkgXGxzZGxvY2tlZDAgTGlzdCBUYWJsZSA0IEFjY2VudCA1O1xsc2Rwcmlvcml0eTUwIFxsc2Rsb2NrZWQwIExpc3QgVGFibGUgNSBEYXJrIEFjY2VudCA1O1xsc2Rwcmlvcml0eTUxIFxsc2Rsb2NrZWQwIExpc3QgVGFibGUgNiBDb2xvcmZ1bCBBY2NlbnQgNTtcbHNkcHJpb3JpdHk1MiBcbHNkbG9ja2VkMCBMaXN0IFRhYmxlIDcgQ29sb3JmdWwgQWNjZW50IDU7","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHByaW9yaXR5NTAgXGxzZGxvY2tlZDAgR3JpZCBUYWJsZSA1IERhcmsgQWNjZW50IDM7XGxzZHByaW9yaXR5NTEgXGxzZGxvY2tlZDAgR3JpZCBUYWJsZSA2IENvbG9yZnVsIEFjY2VudCAzO1xsc2Rwcmlvcml0eTUyIFxsc2Rsb2NrZWQwIEdyaWQgVGFibGUgNyBDb2xvcmZ1bCBBY2NlbnQgMztcbHNkcHJpb3JpdHk0NiBcbHNkbG9ja2VkMCBHcmlkIFRhYmxlIDEgTGlnaHQgQWNjZW50IDQ7","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHByaW9yaXR5NTAgXGxzZGxvY2tlZDAgR3JpZCBUYWJsZSA1IERhcms7XGxzZHByaW9yaXR5NTEgXGxzZGxvY2tlZDAgR3JpZCBUYWJsZSA2IENvbG9yZnVsO1xsc2Rwcmlvcml0eTUyIFxsc2Rsb2NrZWQwIEdyaWQgVGFibGUgNyBDb2xvcmZ1bDtcbHNkcHJpb3JpdHk0NiBcbHNkbG9ja2VkMCBHcmlkIFRhYmxlIDEgTGlnaHQgQWNjZW50IDE7XGxzZHByaW9yaXR5NDcgXGxzZGxvY2tlZDAgR3JpZCBUYWJsZSAyIEFjY2VudCAxOw==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHByaW9yaXR5NTAgXGxzZGxvY2tlZDAgTGlzdCBUYWJsZSA1IERhcmsgQWNjZW50IDI7XGxzZHByaW9yaXR5NTEgXGxzZGxvY2tlZDAgTGlzdCBUYWJsZSA2IENvbG9yZnVsIEFjY2VudCAyO1xsc2Rwcmlvcml0eTUyIFxsc2Rsb2NrZWQwIExpc3QgVGFibGUgNyBDb2xvcmZ1bCBBY2NlbnQgMjtcbHNkcHJpb3JpdHk0NiBcbHNkbG9ja2VkMCBMaXN0IFRhYmxlIDEgTGlnaHQgQWNjZW50IDM7","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHByaW9yaXR5NTAgXGxzZGxvY2tlZDAgTGlzdCBUYWJsZSA1IERhcmsgQWNjZW50IDY7XGxzZHByaW9yaXR5NTEgXGxzZGxvY2tlZDAgTGlzdCBUYWJsZSA2IENvbG9yZnVsIEFjY2VudCA2O1xsc2Rwcmlvcml0eTUyIFxsc2Rsb2NrZWQwIExpc3QgVGFibGUgNyBDb2xvcmZ1bCBBY2NlbnQgNjtcbHNkc2VtaWhpZGRlbjEgXGxzZHVuaGlkZXVzZWQxIFxsc2Rsb2NrZWQwIE1lbnRpb247fX17XCpcZGF0YXN0b3JlIDAxMDUwMDAwMDIwMDAwMDA=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHByaW9yaXR5NTEgXGxzZGxvY2tlZDAgR3JpZCBUYWJsZSA2IENvbG9yZnVsIEFjY2VudCA0O1xsc2Rwcmlvcml0eTUyIFxsc2Rsb2NrZWQwIEdyaWQgVGFibGUgNyBDb2xvcmZ1bCBBY2NlbnQgNDtcbHNkcHJpb3JpdHk0NiBcbHNkbG9ja2VkMCBHcmlkIFRhYmxlIDEgTGlnaHQgQWNjZW50IDU7XGxzZHByaW9yaXR5NDcgXGxzZGxvY2tlZDAgR3JpZCBUYWJsZSAyIEFjY2VudCA1Ow==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHByaW9yaXR5NTEgXGxzZGxvY2tlZDAgTGlzdCBUYWJsZSA2IENvbG9yZnVsIEFjY2VudCAzO1xsc2Rwcmlvcml0eTUyIFxsc2Rsb2NrZWQwIExpc3QgVGFibGUgNyBDb2xvcmZ1bCBBY2NlbnQgMztcbHNkcHJpb3JpdHk0NiBcbHNkbG9ja2VkMCBMaXN0IFRhYmxlIDEgTGlnaHQgQWNjZW50IDQ7XGxzZHByaW9yaXR5NDcgXGxzZGxvY2tlZDAgTGlzdCBUYWJsZSAyIEFjY2VudCA0Ow==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHByaW9yaXR5NTEgXGxzZGxvY2tlZDAgTGlzdCBUYWJsZSA2IENvbG9yZnVsO1xsc2Rwcmlvcml0eTUyIFxsc2Rsb2NrZWQwIExpc3QgVGFibGUgNyBDb2xvcmZ1bDtcbHNkcHJpb3JpdHk0NiBcbHNkbG9ja2VkMCBMaXN0IFRhYmxlIDEgTGlnaHQgQWNjZW50IDE7XGxzZHByaW9yaXR5NDcgXGxzZGxvY2tlZDAgTGlzdCBUYWJsZSAyIEFjY2VudCAxO1xsc2Rwcmlvcml0eTQ4IFxsc2Rsb2NrZWQwIExpc3QgVGFibGUgMyBBY2NlbnQgMTs=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHByaW9yaXR5NTIgXGxzZGxvY2tlZDAgR3JpZCBUYWJsZSA3IENvbG9yZnVsIEFjY2VudCAxO1xsc2Rwcmlvcml0eTQ2IFxsc2Rsb2NrZWQwIEdyaWQgVGFibGUgMSBMaWdodCBBY2NlbnQgMjtcbHNkcHJpb3JpdHk0NyBcbHNkbG9ja2VkMCBHcmlkIFRhYmxlIDIgQWNjZW50IDI7XGxzZHByaW9yaXR5NDggXGxzZGxvY2tlZDAgR3JpZCBUYWJsZSAzIEFjY2VudCAyOw==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHByaW9yaXR5NTIgXGxzZGxvY2tlZDAgR3JpZCBUYWJsZSA3IENvbG9yZnVsIEFjY2VudCA1O1xsc2Rwcmlvcml0eTQ2IFxsc2Rsb2NrZWQwIEdyaWQgVGFibGUgMSBMaWdodCBBY2NlbnQgNjtcbHNkcHJpb3JpdHk0NyBcbHNkbG9ja2VkMCBHcmlkIFRhYmxlIDIgQWNjZW50IDY7XGxzZHByaW9yaXR5NDggXGxzZGxvY2tlZDAgR3JpZCBUYWJsZSAzIEFjY2VudCA2Ow==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHByaW9yaXR5NTIgXGxzZGxvY2tlZDAgTGlzdCBUYWJsZSA3IENvbG9yZnVsIEFjY2VudCA0O1xsc2Rwcmlvcml0eTQ2IFxsc2Rsb2NrZWQwIExpc3QgVGFibGUgMSBMaWdodCBBY2NlbnQgNTtcbHNkcHJpb3JpdHk0NyBcbHNkbG9ja2VkMCBMaXN0IFRhYmxlIDIgQWNjZW50IDU7XGxzZHByaW9yaXR5NDggXGxzZGxvY2tlZDAgTGlzdCBUYWJsZSAzIEFjY2VudCA1Ow==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHByaW9yaXR5NjEgXGxzZGxvY2tlZDAgTGlnaHQgTGlzdCBBY2NlbnQgMTtcbHNkcHJpb3JpdHk2MiBcbHNkbG9ja2VkMCBMaWdodCBHcmlkIEFjY2VudCAxO1xsc2Rwcmlvcml0eTYzIFxsc2Rsb2NrZWQwIE1lZGl1bSBTaGFkaW5nIDEgQWNjZW50IDE7XGxzZHByaW9yaXR5NjQgXGxzZGxvY2tlZDAgTWVkaXVtIFNoYWRpbmcgMiBBY2NlbnQgMTtcbHNkcHJpb3JpdHk2NSBcbHNkbG9ja2VkMCBNZWRpdW0gTGlzdCAxIEFjY2VudCAxOw==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHByaW9yaXR5NjMgXGxzZGxvY2tlZDAgTWVkaXVtIFNoYWRpbmcgMSBBY2NlbnQgMjtcbHNkcHJpb3JpdHk2NCBcbHNkbG9ja2VkMCBNZWRpdW0gU2hhZGluZyAyIEFjY2VudCAyO1xsc2Rwcmlvcml0eTY1IFxsc2Rsb2NrZWQwIE1lZGl1bSBMaXN0IDEgQWNjZW50IDI7XGxzZHByaW9yaXR5NjYgXGxzZGxvY2tlZDAgTWVkaXVtIExpc3QgMiBBY2NlbnQgMjs=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHByaW9yaXR5NjMgXGxzZGxvY2tlZDAgTWVkaXVtIFNoYWRpbmcgMSBBY2NlbnQgMztcbHNkcHJpb3JpdHk2NCBcbHNkbG9ja2VkMCBNZWRpdW0gU2hhZGluZyAyIEFjY2VudCAzO1xsc2Rwcmlvcml0eTY1IFxsc2Rsb2NrZWQwIE1lZGl1bSBMaXN0IDEgQWNjZW50IDM7XGxzZHByaW9yaXR5NjYgXGxzZGxvY2tlZDAgTWVkaXVtIExpc3QgMiBBY2NlbnQgMzs=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHByaW9yaXR5NjMgXGxzZGxvY2tlZDAgTWVkaXVtIFNoYWRpbmcgMSBBY2NlbnQgNDtcbHNkcHJpb3JpdHk2NCBcbHNkbG9ja2VkMCBNZWRpdW0gU2hhZGluZyAyIEFjY2VudCA0O1xsc2Rwcmlvcml0eTY1IFxsc2Rsb2NrZWQwIE1lZGl1bSBMaXN0IDEgQWNjZW50IDQ7XGxzZHByaW9yaXR5NjYgXGxzZGxvY2tlZDAgTWVkaXVtIExpc3QgMiBBY2NlbnQgNDs=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHByaW9yaXR5NjMgXGxzZGxvY2tlZDAgTWVkaXVtIFNoYWRpbmcgMSBBY2NlbnQgNTtcbHNkcHJpb3JpdHk2NCBcbHNkbG9ja2VkMCBNZWRpdW0gU2hhZGluZyAyIEFjY2VudCA1O1xsc2Rwcmlvcml0eTY1IFxsc2Rsb2NrZWQwIE1lZGl1bSBMaXN0IDEgQWNjZW50IDU7XGxzZHByaW9yaXR5NjYgXGxzZGxvY2tlZDAgTWVkaXVtIExpc3QgMiBBY2NlbnQgNTs=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHByaW9yaXR5NjMgXGxzZGxvY2tlZDAgTWVkaXVtIFNoYWRpbmcgMSBBY2NlbnQgNjtcbHNkcHJpb3JpdHk2NCBcbHNkbG9ja2VkMCBNZWRpdW0gU2hhZGluZyAyIEFjY2VudCA2O1xsc2Rwcmlvcml0eTY1IFxsc2Rsb2NrZWQwIE1lZGl1bSBMaXN0IDEgQWNjZW50IDY7XGxzZHByaW9yaXR5NjYgXGxzZGxvY2tlZDAgTWVkaXVtIExpc3QgMiBBY2NlbnQgNjs=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHByaW9yaXR5NjMgXGxzZGxvY2tlZDAgTWVkaXVtIFNoYWRpbmcgMTtcbHNkcHJpb3JpdHk2NCBcbHNkbG9ja2VkMCBNZWRpdW0gU2hhZGluZyAyO1xsc2Rwcmlvcml0eTY1IFxsc2Rsb2NrZWQwIE1lZGl1bSBMaXN0IDE7XGxzZHByaW9yaXR5NjYgXGxzZGxvY2tlZDAgTWVkaXVtIExpc3QgMjtcbHNkcHJpb3JpdHk2NyBcbHNkbG9ja2VkMCBNZWRpdW0gR3JpZCAxO1xsc2Rwcmlvcml0eTY4IFxsc2Rsb2NrZWQwIE1lZGl1bSBHcmlkIDI7","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHByaW9yaXR5NjcgXGxzZGxvY2tlZDAgTWVkaXVtIEdyaWQgMSBBY2NlbnQgMTtcbHNkcHJpb3JpdHk2OCBcbHNkbG9ja2VkMCBNZWRpdW0gR3JpZCAyIEFjY2VudCAxO1xsc2Rwcmlvcml0eTY5IFxsc2Rsb2NrZWQwIE1lZGl1bSBHcmlkIDMgQWNjZW50IDE7XGxzZHByaW9yaXR5NzAgXGxzZGxvY2tlZDAgRGFyayBMaXN0IEFjY2VudCAxO1xsc2Rwcmlvcml0eTcxIFxsc2Rsb2NrZWQwIENvbG9yZnVsIFNoYWRpbmcgQWNjZW50IDE7","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHByaW9yaXR5NjcgXGxzZGxvY2tlZDAgTWVkaXVtIEdyaWQgMSBBY2NlbnQgMjtcbHNkcHJpb3JpdHk2OCBcbHNkbG9ja2VkMCBNZWRpdW0gR3JpZCAyIEFjY2VudCAyO1xsc2Rwcmlvcml0eTY5IFxsc2Rsb2NrZWQwIE1lZGl1bSBHcmlkIDMgQWNjZW50IDI7XGxzZHByaW9yaXR5NzAgXGxzZGxvY2tlZDAgRGFyayBMaXN0IEFjY2VudCAyO1xsc2Rwcmlvcml0eTcxIFxsc2Rsb2NrZWQwIENvbG9yZnVsIFNoYWRpbmcgQWNjZW50IDI7","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHByaW9yaXR5NjcgXGxzZGxvY2tlZDAgTWVkaXVtIEdyaWQgMSBBY2NlbnQgMztcbHNkcHJpb3JpdHk2OCBcbHNkbG9ja2VkMCBNZWRpdW0gR3JpZCAyIEFjY2VudCAzO1xsc2Rwcmlvcml0eTY5IFxsc2Rsb2NrZWQwIE1lZGl1bSBHcmlkIDMgQWNjZW50IDM7XGxzZHByaW9yaXR5NzAgXGxzZGxvY2tlZDAgRGFyayBMaXN0IEFjY2VudCAzO1xsc2Rwcmlvcml0eTcxIFxsc2Rsb2NrZWQwIENvbG9yZnVsIFNoYWRpbmcgQWNjZW50IDM7","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHByaW9yaXR5NjcgXGxzZGxvY2tlZDAgTWVkaXVtIEdyaWQgMSBBY2NlbnQgNDtcbHNkcHJpb3JpdHk2OCBcbHNkbG9ja2VkMCBNZWRpdW0gR3JpZCAyIEFjY2VudCA0O1xsc2Rwcmlvcml0eTY5IFxsc2Rsb2NrZWQwIE1lZGl1bSBHcmlkIDMgQWNjZW50IDQ7XGxzZHByaW9yaXR5NzAgXGxzZGxvY2tlZDAgRGFyayBMaXN0IEFjY2VudCA0O1xsc2Rwcmlvcml0eTcxIFxsc2Rsb2NrZWQwIENvbG9yZnVsIFNoYWRpbmcgQWNjZW50IDQ7","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHByaW9yaXR5NjcgXGxzZGxvY2tlZDAgTWVkaXVtIEdyaWQgMSBBY2NlbnQgNTtcbHNkcHJpb3JpdHk2OCBcbHNkbG9ja2VkMCBNZWRpdW0gR3JpZCAyIEFjY2VudCA1O1xsc2Rwcmlvcml0eTY5IFxsc2Rsb2NrZWQwIE1lZGl1bSBHcmlkIDMgQWNjZW50IDU7XGxzZHByaW9yaXR5NzAgXGxzZGxvY2tlZDAgRGFyayBMaXN0IEFjY2VudCA1O1xsc2Rwcmlvcml0eTcxIFxsc2Rsb2NrZWQwIENvbG9yZnVsIFNoYWRpbmcgQWNjZW50IDU7","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHByaW9yaXR5NjcgXGxzZGxvY2tlZDAgTWVkaXVtIEdyaWQgMSBBY2NlbnQgNjtcbHNkcHJpb3JpdHk2OCBcbHNkbG9ja2VkMCBNZWRpdW0gR3JpZCAyIEFjY2VudCA2O1xsc2Rwcmlvcml0eTY5IFxsc2Rsb2NrZWQwIE1lZGl1bSBHcmlkIDMgQWNjZW50IDY7XGxzZHByaW9yaXR5NzAgXGxzZGxvY2tlZDAgRGFyayBMaXN0IEFjY2VudCA2O1xsc2Rwcmlvcml0eTcxIFxsc2Rsb2NrZWQwIENvbG9yZnVsIFNoYWRpbmcgQWNjZW50IDY7","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHByaW9yaXR5NjkgXGxzZGxvY2tlZDAgTWVkaXVtIEdyaWQgMztcbHNkcHJpb3JpdHk3MCBcbHNkbG9ja2VkMCBEYXJrIExpc3Q7XGxzZHByaW9yaXR5NzEgXGxzZGxvY2tlZDAgQ29sb3JmdWwgU2hhZGluZztcbHNkcHJpb3JpdHk3MiBcbHNkbG9ja2VkMCBDb2xvcmZ1bCBMaXN0O1xsc2Rwcmlvcml0eTczIFxsc2Rsb2NrZWQwIENvbG9yZnVsIEdyaWQ7XGxzZHByaW9yaXR5NjAgXGxzZGxvY2tlZDAgTGlnaHQgU2hhZGluZyBBY2NlbnQgMTs=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHByaW9yaXR5NzIgXGxzZGxvY2tlZDAgQ29sb3JmdWwgTGlzdCBBY2NlbnQgMTtcbHNkcHJpb3JpdHk3MyBcbHNkbG9ja2VkMCBDb2xvcmZ1bCBHcmlkIEFjY2VudCAxO1xsc2Rwcmlvcml0eTYwIFxsc2Rsb2NrZWQwIExpZ2h0IFNoYWRpbmcgQWNjZW50IDI7XGxzZHByaW9yaXR5NjEgXGxzZGxvY2tlZDAgTGlnaHQgTGlzdCBBY2NlbnQgMjtcbHNkcHJpb3JpdHk2MiBcbHNkbG9ja2VkMCBMaWdodCBHcmlkIEFjY2VudCAyOw==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHByaW9yaXR5NzIgXGxzZGxvY2tlZDAgQ29sb3JmdWwgTGlzdCBBY2NlbnQgMjtcbHNkcHJpb3JpdHk3MyBcbHNkbG9ja2VkMCBDb2xvcmZ1bCBHcmlkIEFjY2VudCAyO1xsc2Rwcmlvcml0eTYwIFxsc2Rsb2NrZWQwIExpZ2h0IFNoYWRpbmcgQWNjZW50IDM7XGxzZHByaW9yaXR5NjEgXGxzZGxvY2tlZDAgTGlnaHQgTGlzdCBBY2NlbnQgMztcbHNkcHJpb3JpdHk2MiBcbHNkbG9ja2VkMCBMaWdodCBHcmlkIEFjY2VudCAzOw==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHByaW9yaXR5NzIgXGxzZGxvY2tlZDAgQ29sb3JmdWwgTGlzdCBBY2NlbnQgMztcbHNkcHJpb3JpdHk3MyBcbHNkbG9ja2VkMCBDb2xvcmZ1bCBHcmlkIEFjY2VudCAzO1xsc2Rwcmlvcml0eTYwIFxsc2Rsb2NrZWQwIExpZ2h0IFNoYWRpbmcgQWNjZW50IDQ7XGxzZHByaW9yaXR5NjEgXGxzZGxvY2tlZDAgTGlnaHQgTGlzdCBBY2NlbnQgNDtcbHNkcHJpb3JpdHk2MiBcbHNkbG9ja2VkMCBMaWdodCBHcmlkIEFjY2VudCA0Ow==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHByaW9yaXR5NzIgXGxzZGxvY2tlZDAgQ29sb3JmdWwgTGlzdCBBY2NlbnQgNDtcbHNkcHJpb3JpdHk3MyBcbHNkbG9ja2VkMCBDb2xvcmZ1bCBHcmlkIEFjY2VudCA0O1xsc2Rwcmlvcml0eTYwIFxsc2Rsb2NrZWQwIExpZ2h0IFNoYWRpbmcgQWNjZW50IDU7XGxzZHByaW9yaXR5NjEgXGxzZGxvY2tlZDAgTGlnaHQgTGlzdCBBY2NlbnQgNTtcbHNkcHJpb3JpdHk2MiBcbHNkbG9ja2VkMCBMaWdodCBHcmlkIEFjY2VudCA1Ow==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHByaW9yaXR5NzIgXGxzZGxvY2tlZDAgQ29sb3JmdWwgTGlzdCBBY2NlbnQgNTtcbHNkcHJpb3JpdHk3MyBcbHNkbG9ja2VkMCBDb2xvcmZ1bCBHcmlkIEFjY2VudCA1O1xsc2Rwcmlvcml0eTYwIFxsc2Rsb2NrZWQwIExpZ2h0IFNoYWRpbmcgQWNjZW50IDY7XGxzZHByaW9yaXR5NjEgXGxzZGxvY2tlZDAgTGlnaHQgTGlzdCBBY2NlbnQgNjtcbHNkcHJpb3JpdHk2MiBcbHNkbG9ja2VkMCBMaWdodCBHcmlkIEFjY2VudCA2Ow==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHByaW9yaXR5NzIgXGxzZGxvY2tlZDAgQ29sb3JmdWwgTGlzdCBBY2NlbnQgNjtcbHNkcHJpb3JpdHk3MyBcbHNkbG9ja2VkMCBDb2xvcmZ1bCBHcmlkIEFjY2VudCA2O1xsc2RxZm9ybWF0MSBcbHNkcHJpb3JpdHkxOSBcbHNkbG9ja2VkMCBTdWJ0bGUgRW1waGFzaXM7XGxzZHFmb3JtYXQxIFxsc2Rwcmlvcml0eTIxIFxsc2Rsb2NrZWQwIEludGVuc2UgRW1waGFzaXM7","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHFmb3JtYXQxIFxsc2Rwcmlvcml0eTIwIFxsc2Rsb2NrZWQwIEVtcGhhc2lzO1xsc2RzZW1paGlkZGVuMSBcbHNkdW5oaWRldXNlZDEgXGxzZGxvY2tlZDAgRG9jdW1lbnQgTWFwO1xsc2RzZW1paGlkZGVuMSBcbHNkdW5oaWRldXNlZDEgXGxzZGxvY2tlZDAgUGxhaW4gVGV4dDtcbHNkc2VtaWhpZGRlbjEgXGxzZHVuaGlkZXVzZWQxIFxsc2Rsb2NrZWQwIEUtbWFpbCBTaWduYXR1cmU7","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHFmb3JtYXQxIFxsc2Rwcmlvcml0eTMxIFxsc2Rsb2NrZWQwIFN1YnRsZSBSZWZlcmVuY2U7XGxzZHFmb3JtYXQxIFxsc2Rwcmlvcml0eTMyIFxsc2Rsb2NrZWQwIEludGVuc2UgUmVmZXJlbmNlO1xsc2RxZm9ybWF0MSBcbHNkcHJpb3JpdHkzMyBcbHNkbG9ja2VkMCBCb29rIFRpdGxlO1xsc2RzZW1paGlkZGVuMSBcbHNkdW5oaWRldXNlZDEgXGxzZHByaW9yaXR5MzcgXGxzZGxvY2tlZDAgQmlibGlvZ3JhcGh5Ow==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHNlbWloaWRkZW4xIFxsc2Rsb2NrZWQwIFBsYWNlaG9sZGVyIFRleHQ7XGxzZHFmb3JtYXQxIFxsc2Rwcmlvcml0eTEgXGxzZGxvY2tlZDAgTm8gU3BhY2luZztcbHNkcHJpb3JpdHk2MCBcbHNkbG9ja2VkMCBMaWdodCBTaGFkaW5nO1xsc2Rwcmlvcml0eTYxIFxsc2Rsb2NrZWQwIExpZ2h0IExpc3Q7XGxzZHByaW9yaXR5NjIgXGxzZGxvY2tlZDAgTGlnaHQgR3JpZDs=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHNlbWloaWRkZW4xIFxsc2Rsb2NrZWQwIFJldmlzaW9uO1xsc2RxZm9ybWF0MSBcbHNkcHJpb3JpdHkzNCBcbHNkbG9ja2VkMCBMaXN0IFBhcmFncmFwaDtcbHNkcWZvcm1hdDEgXGxzZHByaW9yaXR5MjkgXGxzZGxvY2tlZDAgUXVvdGU7XGxzZHFmb3JtYXQxIFxsc2Rwcmlvcml0eTMwIFxsc2Rsb2NrZWQwIEludGVuc2UgUXVvdGU7XGxzZHByaW9yaXR5NjYgXGxzZGxvY2tlZDAgTWVkaXVtIExpc3QgMiBBY2NlbnQgMTs=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHNlbWloaWRkZW4xIFxsc2R1bmhpZGV1c2VkMSBcbHNkbG9ja2VkMCBCbG9jayBUZXh0O1xsc2RzZW1paGlkZGVuMSBcbHNkdW5oaWRldXNlZDEgXGxzZGxvY2tlZDAgSHlwZXJsaW5rO1xsc2RzZW1paGlkZGVuMSBcbHNkdW5oaWRldXNlZDEgXGxzZGxvY2tlZDAgRm9sbG93ZWRIeXBlcmxpbms7XGxzZHFmb3JtYXQxIFxsc2Rwcmlvcml0eTIyIFxsc2Rsb2NrZWQwIFN0cm9uZzs=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHNlbWloaWRkZW4xIFxsc2R1bmhpZGV1c2VkMSBcbHNkbG9ja2VkMCBCb2R5IFRleHQgMjtcbHNkc2VtaWhpZGRlbjEgXGxzZHVuaGlkZXVzZWQxIFxsc2Rsb2NrZWQwIEJvZHkgVGV4dCAzO1xsc2RzZW1paGlkZGVuMSBcbHNkdW5oaWRldXNlZDEgXGxzZGxvY2tlZDAgQm9keSBUZXh0IEluZGVudCAyO1xsc2RzZW1paGlkZGVuMSBcbHNkdW5oaWRldXNlZDEgXGxzZGxvY2tlZDAgQm9keSBUZXh0IEluZGVudCAzOw==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHNlbWloaWRkZW4xIFxsc2R1bmhpZGV1c2VkMSBcbHNkbG9ja2VkMCBEYXRlO1xsc2RzZW1paGlkZGVuMSBcbHNkdW5oaWRldXNlZDEgXGxzZGxvY2tlZDAgQm9keSBUZXh0IEZpcnN0IEluZGVudDtcbHNkc2VtaWhpZGRlbjEgXGxzZHVuaGlkZXVzZWQxIFxsc2Rsb2NrZWQwIEJvZHkgVGV4dCBGaXJzdCBJbmRlbnQgMjtcbHNkc2VtaWhpZGRlbjEgXGxzZHVuaGlkZXVzZWQxIFxsc2Rsb2NrZWQwIE5vdGUgSGVhZGluZzs=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHNlbWloaWRkZW4xIFxsc2R1bmhpZGV1c2VkMSBcbHNkbG9ja2VkMCBlbnZlbG9wZSBhZGRyZXNzO1xsc2RzZW1paGlkZGVuMSBcbHNkdW5oaWRldXNlZDEgXGxzZGxvY2tlZDAgZW52ZWxvcGUgcmV0dXJuO1xsc2RzZW1paGlkZGVuMSBcbHNkdW5oaWRldXNlZDEgXGxzZGxvY2tlZDAgZm9vdG5vdGUgcmVmZXJlbmNlO1xsc2RzZW1paGlkZGVuMSBcbHNkdW5oaWRldXNlZDEgXGxzZGxvY2tlZDAgYW5ub3RhdGlvbiByZWZlcmVuY2U7","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHNlbWloaWRkZW4xIFxsc2R1bmhpZGV1c2VkMSBcbHNkbG9ja2VkMCBmb290bm90ZSB0ZXh0O1xsc2RzZW1paGlkZGVuMSBcbHNkdW5oaWRldXNlZDEgXGxzZGxvY2tlZDAgYW5ub3RhdGlvbiB0ZXh0O1xsc2RzZW1paGlkZGVuMSBcbHNkdW5oaWRldXNlZDEgXGxzZGxvY2tlZDAgaGVhZGVyO1xsc2RzZW1paGlkZGVuMSBcbHNkdW5oaWRldXNlZDEgXGxzZGxvY2tlZDAgZm9vdGVyOw==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHNlbWloaWRkZW4xIFxsc2R1bmhpZGV1c2VkMSBcbHNkbG9ja2VkMCBIVE1MIEFkZHJlc3M7XGxzZHNlbWloaWRkZW4xIFxsc2R1bmhpZGV1c2VkMSBcbHNkbG9ja2VkMCBIVE1MIENpdGU7XGxzZHNlbWloaWRkZW4xIFxsc2R1bmhpZGV1c2VkMSBcbHNkbG9ja2VkMCBIVE1MIENvZGU7XGxzZHNlbWloaWRkZW4xIFxsc2R1bmhpZGV1c2VkMSBcbHNkbG9ja2VkMCBIVE1MIERlZmluaXRpb247","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHNlbWloaWRkZW4xIFxsc2R1bmhpZGV1c2VkMSBcbHNkbG9ja2VkMCBIVE1MIEtleWJvYXJkO1xsc2RzZW1paGlkZGVuMSBcbHNkdW5oaWRldXNlZDEgXGxzZGxvY2tlZDAgSFRNTCBQcmVmb3JtYXR0ZWQ7XGxzZHNlbWloaWRkZW4xIFxsc2R1bmhpZGV1c2VkMSBcbHNkbG9ja2VkMCBIVE1MIFNhbXBsZTtcbHNkc2VtaWhpZGRlbjEgXGxzZHVuaGlkZXVzZWQxIFxsc2Rsb2NrZWQwIEhUTUwgVHlwZXdyaXRlcjs=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHNlbWloaWRkZW4xIFxsc2R1bmhpZGV1c2VkMSBcbHNkbG9ja2VkMCBIVE1MIFRvcCBvZiBGb3JtO1xsc2RzZW1paGlkZGVuMSBcbHNkdW5oaWRldXNlZDEgXGxzZGxvY2tlZDAgSFRNTCBCb3R0b20gb2YgRm9ybTtcbHNkc2VtaWhpZGRlbjEgXGxzZHVuaGlkZXVzZWQxIFxsc2Rsb2NrZWQwIE5vcm1hbCAoV2ViKTtcbHNkc2VtaWhpZGRlbjEgXGxzZHVuaGlkZXVzZWQxIFxsc2Rsb2NrZWQwIEhUTUwgQWNyb255bTs=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHNlbWloaWRkZW4xIFxsc2R1bmhpZGV1c2VkMSBcbHNkbG9ja2VkMCBIVE1MIFZhcmlhYmxlO1xsc2RzZW1paGlkZGVuMSBcbHNkdW5oaWRldXNlZDEgXGxzZGxvY2tlZDAgYW5ub3RhdGlvbiBzdWJqZWN0O1xsc2RzZW1paGlkZGVuMSBcbHNkdW5oaWRldXNlZDEgXGxzZGxvY2tlZDAgTm8gTGlzdDtcbHNkc2VtaWhpZGRlbjEgXGxzZHVuaGlkZXVzZWQxIFxsc2Rsb2NrZWQwIE91dGxpbmUgTGlzdCAxOw==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHNlbWloaWRkZW4xIFxsc2R1bmhpZGV1c2VkMSBcbHNkbG9ja2VkMCBpbmRleCAyO1xsc2RzZW1paGlkZGVuMSBcbHNkdW5oaWRldXNlZDEgXGxzZGxvY2tlZDAgaW5kZXggMztcbHNkc2VtaWhpZGRlbjEgXGxzZHVuaGlkZXVzZWQxIFxsc2Rsb2NrZWQwIGluZGV4IDQ7XGxzZHNlbWloaWRkZW4xIFxsc2R1bmhpZGV1c2VkMSBcbHNkbG9ja2VkMCBpbmRleCA1Ow==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHNlbWloaWRkZW4xIFxsc2R1bmhpZGV1c2VkMSBcbHNkbG9ja2VkMCBpbmRleCA2O1xsc2RzZW1paGlkZGVuMSBcbHNkdW5oaWRldXNlZDEgXGxzZGxvY2tlZDAgaW5kZXggNztcbHNkc2VtaWhpZGRlbjEgXGxzZHVuaGlkZXVzZWQxIFxsc2Rsb2NrZWQwIGluZGV4IDg7XGxzZHNlbWloaWRkZW4xIFxsc2R1bmhpZGV1c2VkMSBcbHNkbG9ja2VkMCBpbmRleCA5Ow==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHNlbWloaWRkZW4xIFxsc2R1bmhpZGV1c2VkMSBcbHNkbG9ja2VkMCBpbmRleCBoZWFkaW5nO1xsc2RzZW1paGlkZGVuMSBcbHNkdW5oaWRldXNlZDEgXGxzZHFmb3JtYXQxIFxsc2Rwcmlvcml0eTM1IFxsc2Rsb2NrZWQwIGNhcHRpb247XGxzZHNlbWloaWRkZW4xIFxsc2R1bmhpZGV1c2VkMSBcbHNkbG9ja2VkMCB0YWJsZSBvZiBmaWd1cmVzOw==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHNlbWloaWRkZW4xIFxsc2R1bmhpZGV1c2VkMSBcbHNkbG9ja2VkMCBsaW5lIG51bWJlcjtcbHNkc2VtaWhpZGRlbjEgXGxzZHVuaGlkZXVzZWQxIFxsc2Rsb2NrZWQwIHBhZ2UgbnVtYmVyO1xsc2RzZW1paGlkZGVuMSBcbHNkdW5oaWRldXNlZDEgXGxzZGxvY2tlZDAgZW5kbm90ZSByZWZlcmVuY2U7XGxzZHNlbWloaWRkZW4xIFxsc2R1bmhpZGV1c2VkMSBcbHNkbG9ja2VkMCBlbmRub3RlIHRleHQ7","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHNlbWloaWRkZW4xIFxsc2R1bmhpZGV1c2VkMSBcbHNkbG9ja2VkMCBMaXN0IDQ7XGxzZHNlbWloaWRkZW4xIFxsc2R1bmhpZGV1c2VkMSBcbHNkbG9ja2VkMCBMaXN0IDU7XGxzZHNlbWloaWRkZW4xIFxsc2R1bmhpZGV1c2VkMSBcbHNkbG9ja2VkMCBMaXN0IEJ1bGxldCAyO1xsc2RzZW1paGlkZGVuMSBcbHNkdW5oaWRldXNlZDEgXGxzZGxvY2tlZDAgTGlzdCBCdWxsZXQgMzs=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHNlbWloaWRkZW4xIFxsc2R1bmhpZGV1c2VkMSBcbHNkbG9ja2VkMCBMaXN0IEJ1bGxldCA0O1xsc2RzZW1paGlkZGVuMSBcbHNkdW5oaWRldXNlZDEgXGxzZGxvY2tlZDAgTGlzdCBCdWxsZXQgNTtcbHNkc2VtaWhpZGRlbjEgXGxzZHVuaGlkZXVzZWQxIFxsc2Rsb2NrZWQwIExpc3QgTnVtYmVyIDI7XGxzZHNlbWloaWRkZW4xIFxsc2R1bmhpZGV1c2VkMSBcbHNkbG9ja2VkMCBMaXN0IE51bWJlciAzOw==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHNlbWloaWRkZW4xIFxsc2R1bmhpZGV1c2VkMSBcbHNkbG9ja2VkMCBMaXN0IEJ1bGxldDtcbHNkc2VtaWhpZGRlbjEgXGxzZHVuaGlkZXVzZWQxIFxsc2Rsb2NrZWQwIExpc3QgTnVtYmVyO1xsc2RzZW1paGlkZGVuMSBcbHNkdW5oaWRldXNlZDEgXGxzZGxvY2tlZDAgTGlzdCAyO1xsc2RzZW1paGlkZGVuMSBcbHNkdW5oaWRldXNlZDEgXGxzZGxvY2tlZDAgTGlzdCAzOw==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHNlbWloaWRkZW4xIFxsc2R1bmhpZGV1c2VkMSBcbHNkbG9ja2VkMCBMaXN0IENvbnRpbnVlIDU7XGxzZHNlbWloaWRkZW4xIFxsc2R1bmhpZGV1c2VkMSBcbHNkbG9ja2VkMCBNZXNzYWdlIEhlYWRlcjtcbHNkcWZvcm1hdDEgXGxzZHByaW9yaXR5MTEgXGxzZGxvY2tlZDAgU3VidGl0bGU7XGxzZHNlbWloaWRkZW4xIFxsc2R1bmhpZGV1c2VkMSBcbHNkbG9ja2VkMCBTYWx1dGF0aW9uOw==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHNlbWloaWRkZW4xIFxsc2R1bmhpZGV1c2VkMSBcbHNkbG9ja2VkMCBMaXN0IENvbnRpbnVlO1xsc2RzZW1paGlkZGVuMSBcbHNkdW5oaWRldXNlZDEgXGxzZGxvY2tlZDAgTGlzdCBDb250aW51ZSAyO1xsc2RzZW1paGlkZGVuMSBcbHNkdW5oaWRldXNlZDEgXGxzZGxvY2tlZDAgTGlzdCBDb250aW51ZSAzO1xsc2RzZW1paGlkZGVuMSBcbHNkdW5oaWRldXNlZDEgXGxzZGxvY2tlZDAgTGlzdCBDb250aW51ZSA0Ow==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHNlbWloaWRkZW4xIFxsc2R1bmhpZGV1c2VkMSBcbHNkbG9ja2VkMCBMaXN0IE51bWJlciA0O1xsc2RzZW1paGlkZGVuMSBcbHNkdW5oaWRldXNlZDEgXGxzZGxvY2tlZDAgTGlzdCBOdW1iZXIgNTtcbHNkcWZvcm1hdDEgXGxzZHByaW9yaXR5MTAgXGxzZGxvY2tlZDAgVGl0bGU7XGxzZHNlbWloaWRkZW4xIFxsc2R1bmhpZGV1c2VkMSBcbHNkbG9ja2VkMCBDbG9zaW5nOw==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHNlbWloaWRkZW4xIFxsc2R1bmhpZGV1c2VkMSBcbHNkbG9ja2VkMCBPdXRsaW5lIExpc3QgMjtcbHNkc2VtaWhpZGRlbjEgXGxzZHVuaGlkZXVzZWQxIFxsc2Rsb2NrZWQwIE91dGxpbmUgTGlzdCAzO1xsc2RzZW1paGlkZGVuMSBcbHNkdW5oaWRldXNlZDEgXGxzZGxvY2tlZDAgQmFsbG9vbiBUZXh0O1xsc2Rwcmlvcml0eTM5IFxsc2Rsb2NrZWQwIFRhYmxlIEdyaWQ7","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHNlbWloaWRkZW4xIFxsc2R1bmhpZGV1c2VkMSBcbHNkbG9ja2VkMCBTaWduYXR1cmU7XGxzZHNlbWloaWRkZW4xIFxsc2R1bmhpZGV1c2VkMSBcbHNkcHJpb3JpdHkxIFxsc2Rsb2NrZWQwIERlZmF1bHQgUGFyYWdyYXBoIEZvbnQ7XGxzZHNlbWloaWRkZW4xIFxsc2R1bmhpZGV1c2VkMSBcbHNkbG9ja2VkMCBCb2R5IFRleHQ7XGxzZHNlbWloaWRkZW4xIFxsc2R1bmhpZGV1c2VkMSBcbHNkbG9ja2VkMCBCb2R5IFRleHQgSW5kZW50Ow==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHNlbWloaWRkZW4xIFxsc2R1bmhpZGV1c2VkMSBcbHNkbG9ja2VkMCB0YWJsZSBvZiBhdXRob3JpdGllcztcbHNkc2VtaWhpZGRlbjEgXGxzZHVuaGlkZXVzZWQxIFxsc2Rsb2NrZWQwIG1hY3JvO1xsc2RzZW1paGlkZGVuMSBcbHNkdW5oaWRldXNlZDEgXGxzZGxvY2tlZDAgdG9hIGhlYWRpbmc7XGxzZHNlbWloaWRkZW4xIFxsc2R1bmhpZGV1c2VkMSBcbHNkbG9ja2VkMCBMaXN0Ow==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHNlbWloaWRkZW4xIFxsc2R1bmhpZGV1c2VkMSBcbHNkcHJpb3JpdHkzOSBcbHNkbG9ja2VkMCB0b2MgMTtcbHNkc2VtaWhpZGRlbjEgXGxzZHVuaGlkZXVzZWQxIFxsc2Rwcmlvcml0eTM5IFxsc2Rsb2NrZWQwIHRvYyAyO1xsc2RzZW1paGlkZGVuMSBcbHNkdW5oaWRldXNlZDEgXGxzZHByaW9yaXR5MzkgXGxzZGxvY2tlZDAgdG9jIDM7","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHNlbWloaWRkZW4xIFxsc2R1bmhpZGV1c2VkMSBcbHNkcHJpb3JpdHkzOSBcbHNkbG9ja2VkMCB0b2MgNDtcbHNkc2VtaWhpZGRlbjEgXGxzZHVuaGlkZXVzZWQxIFxsc2Rwcmlvcml0eTM5IFxsc2Rsb2NrZWQwIHRvYyA1O1xsc2RzZW1paGlkZGVuMSBcbHNkdW5oaWRldXNlZDEgXGxzZHByaW9yaXR5MzkgXGxzZGxvY2tlZDAgdG9jIDY7","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHNlbWloaWRkZW4xIFxsc2R1bmhpZGV1c2VkMSBcbHNkcHJpb3JpdHkzOSBcbHNkbG9ja2VkMCB0b2MgNztcbHNkc2VtaWhpZGRlbjEgXGxzZHVuaGlkZXVzZWQxIFxsc2Rwcmlvcml0eTM5IFxsc2Rsb2NrZWQwIHRvYyA4O1xsc2RzZW1paGlkZGVuMSBcbHNkdW5oaWRldXNlZDEgXGxzZHByaW9yaXR5MzkgXGxzZGxvY2tlZDAgdG9jIDk7XGxzZHNlbWloaWRkZW4xIFxsc2R1bmhpZGV1c2VkMSBcbHNkbG9ja2VkMCBOb3JtYWwgSW5kZW50Ow==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHNlbWloaWRkZW4xIFxsc2R1bmhpZGV1c2VkMSBcbHNkcWZvcm1hdDEgXGxzZHByaW9yaXR5MzkgXGxzZGxvY2tlZDAgVE9DIEhlYWRpbmc7XGxzZHByaW9yaXR5NDEgXGxzZGxvY2tlZDAgUGxhaW4gVGFibGUgMTtcbHNkcHJpb3JpdHk0MiBcbHNkbG9ja2VkMCBQbGFpbiBUYWJsZSAyO1xsc2Rwcmlvcml0eTQzIFxsc2Rsb2NrZWQwIFBsYWluIFRhYmxlIDM7XGxzZHByaW9yaXR5NDQgXGxzZGxvY2tlZDAgUGxhaW4gVGFibGUgNDs=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHNlbWloaWRkZW4xIFxsc2R1bmhpZGV1c2VkMSBcbHNkcWZvcm1hdDEgXGxzZHByaW9yaXR5OSBcbHNkbG9ja2VkMCBoZWFkaW5nIDI7XGxzZHNlbWloaWRkZW4xIFxsc2R1bmhpZGV1c2VkMSBcbHNkcWZvcm1hdDEgXGxzZHByaW9yaXR5OSBcbHNkbG9ja2VkMCBoZWFkaW5nIDM7XGxzZHNlbWloaWRkZW4xIFxsc2R1bmhpZGV1c2VkMSBcbHNkcWZvcm1hdDEgXGxzZHByaW9yaXR5OSBcbHNkbG9ja2VkMCBoZWFkaW5nIDQ7","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHNlbWloaWRkZW4xIFxsc2R1bmhpZGV1c2VkMSBcbHNkcWZvcm1hdDEgXGxzZHByaW9yaXR5OSBcbHNkbG9ja2VkMCBoZWFkaW5nIDU7XGxzZHNlbWloaWRkZW4xIFxsc2R1bmhpZGV1c2VkMSBcbHNkcWZvcm1hdDEgXGxzZHByaW9yaXR5OSBcbHNkbG9ja2VkMCBoZWFkaW5nIDY7XGxzZHNlbWloaWRkZW4xIFxsc2R1bmhpZGV1c2VkMSBcbHNkcWZvcm1hdDEgXGxzZHByaW9yaXR5OSBcbHNkbG9ja2VkMCBoZWFkaW5nIDc7","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGxzZHNlbWloaWRkZW4xIFxsc2R1bmhpZGV1c2VkMSBcbHNkcWZvcm1hdDEgXGxzZHByaW9yaXR5OSBcbHNkbG9ja2VkMCBoZWFkaW5nIDg7XGxzZHNlbWloaWRkZW4xIFxsc2R1bmhpZGV1c2VkMSBcbHNkcWZvcm1hdDEgXGxzZHByaW9yaXR5OSBcbHNkbG9ja2VkMCBoZWFkaW5nIDk7XGxzZHNlbWloaWRkZW4xIFxsc2R1bmhpZGV1c2VkMSBcbHNkbG9ja2VkMCBpbmRleCAxOw==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGx0cmNoXGZjczAgXGJcZjJcZnMyMFxsYW5nMjA1N1xsYW5nZmUyMDU3XGxhbmdmZW5wMjA1N1xpbnNyc2lkMTMwNTA3MjJcY2hhcnJzaWQxMzA1MDcyMiAgYW5kIGFzc29jaWF0ZWQgZXhhbXBsZSB1c2UgcHJvZ3JhbXN9e1xydGxjaFxmY3MxIFxhYlxhZjJcYWZzMjAgXGx0cmNoXGZjczAgXGJcZjJcZnMyMFxsYW5nMjA1N1xsYW5nZmUyMDU3XGxhbmdmZW5wMjA1N1xpbnNyc2lkMjUwNTQ5MQ==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGx0cmNoXGZjczAgXGJcZjJcZnMyMFxsYW5nMjA1N1xsYW5nZmUyMDU3XGxhbmdmZW5wMjA1N1xpbnNyc2lkMTMwNTA3MjJcY2hhcnJzaWQxMzA1MDcyMiA1LiBOTyBXQVJSQU5UWS59e1xydGxjaFxmY3MxIFxhZjJcYWZzMjAgXGx0cmNoXGZjczAgXGYyXGZzMjBcbGFuZzIwNTdcbGFuZ2ZlMjA1N1xsYW5nZmVucDIwNTdcaW5zcnNpZDEzMDUwNzIyXGNoYXJyc2lkMTMwNTA3MjIgIEFueSB1c2Ugb2YgdGhlIFNPRlRXQVJFIFA=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XGx2bHRlbnRhdGl2ZVxsZXZlbHNwYWNlMFxsZXZlbGluZGVudDB7XGxldmVsdGV4dFwnMDFcdS0zOTEzID87fXtcbGV2ZWxudW1iZXJzO31cZjNcZnMyMFxmYmlhczBcaHJlczBcY2hocmVzMCBcZmktMzYwXGxpMTQ0MFxqY2xpc3R0YWJcdHgxNDQwXGxpbjE0NDAgfXtcbGlzdGxldmVsXGxldmVsbmZjMjNcbGV2ZWxuZmNuMjNcbGV2ZWxqYzBcbGV2ZWxqY24wXGxldmVsZm9sbG93MFxsZXZlbHN0YXJ0YXQxXGx2bHRlbnRhdGl2ZQ==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XHBhcGVydzExOTA2XHBhcGVyaDE2ODM4XG1hcmdsMTQ0MFxtYXJncjE0NDBcbWFyZ3QxNDQwXG1hcmdiMTQ0MFxndXR0ZXIwXGx0cnNlY3Q=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XHBhciB7XGxpc3R0ZXh0XHBhcmRccGxhaW5cbHRycGFyIFxydGxjaFxmY3MxIFxhYlxhZjJcYWZzMjAgXGx0cmNoXGZjczAgXGYzXGZzMjBcbGFuZzIwNTdcbGFuZ2ZlMjA1N1xsYW5nbnAyMDU3XGxhbmdmZW5wMjA1N1xpbnNyc2lkMTMwNTA3MjJcY2hhcnJzaWQxMzA1MDcyMiBcbG9jaFxhZjNcZGJjaFxhZjBcaGljaFxmMyBcJ2I3XHRhYn19XHBhcmQgXGx0cnBhcg==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XHBhciB9XHBhcmQgXGx0cnBhclxxYyBcbGkwXHJpMFx3aWRjdGxwYXJcd3JhcGRlZmF1bHRcYXNwYWxwaGFcYXNwbnVtXGZhYXV0b1xhZGp1c3RyaWdodFxyaW4wXGxpbjBcaXRhcDBccGFyYXJzaWQxMzA1MDcyMiB7XHJ0bGNoXGZjczEgXGFmMlxhZnMxNSBcbHRyY2hcZmNzMCBcZjJcZnMxNVxsYW5nMjA1N1xsYW5nZmUyMDU3XGxhbmdmZW5wMjA1N1xpbnNyc2lkMTMwNTA3MjJcY2hhcnJzaWQxMzA1MDcyMiAyMDA2MDIyMn17XHJ0bGNoXGZjczE=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XHBhciB9XHBhcmQgXGx0cnBhclxxbCBcbGkwXHJpMFxzYTE2MFxzbDI1OVxzbG11bHQxXHdpZGN0bHBhclx3cmFwZGVmYXVsdFxhc3BhbHBoYVxhc3BudW1cZmFhdXRvXGFkanVzdHJpZ2h0XHJpbjBcbGluMFxpdGFwMCB7XHJ0bGNoXGZjczEgXGFmMCBcbHRyY2hcZmNzMCBcaW5zcnNpZDE2MDY3MDUx","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XHBhciB9XHBhcmQgXGx0cnBhclxxbCBcbGkwXHJpMFxzYjEwMFxzYTI0MFxzYmF1dG8xXHdpZGN0bHBhclx3cmFwZGVmYXVsdFxhc3BhbHBoYVxhc3BudW1cZmFhdXRvXGFkanVzdHJpZ2h0XHJpbjBcbGluMFxpdGFwMFxwYXJhcnNpZDEzMDUwNzIyIHtccnRsY2hcZmNzMSBcYWYyXGFmczIwIFxsdHJjaFxmY3MwIFxmMlxmczIwXGxhbmcyMDU3XGxhbmdmZTIwNTdcbGFuZ2ZlbnAyMDU3XGluc3JzaWQxMzA1MDcyMlxjaGFycnNpZDEzMDUwNzIy","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XHBhciB9XHBhcmQgXGx0cnBhclxxbCBcbGkwXHJpMFx3aWRjdGxwYXJcd3JhcGRlZmF1bHRcYXNwYWxwaGFcYXNwbnVtXGZhYXV0b1xhZGp1c3RyaWdodFxyaW4wXGxpbjBcaXRhcDBccGFyYXJzaWQxMzA1MDcyMiB7XHJ0bGNoXGZjczEgXGFmMlxhZnMyMCBcbHRyY2hcZmNzMCBcZjJcZnMyMFxsYW5nMjA1N1xsYW5nZmUyMDU3XGxhbmdmZW5wMjA1N1xpbnNyc2lkMTMwNTA3MjJcY2hhcnJzaWQxMzA1MDcyMiBcbGluZQ==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XHBhciB9e1wqXHRoZW1lZGF0YSA1MDRiMDMwNDE0MDAwNjAwMDgwMDAwMDAyMTAwZTlkZTBmYmZmZjAwMDAwMDFjMDIwMDAwMTMwMDAwMDA1YjQzNmY2ZTc0NjU2ZTc0NWY1NDc5NzA2NTczNWQyZTc4NmQ2Y2FjOTFjYjRlYzMzMDEwNDVmNzQ4ZmM4M2U1MmQ0YQ==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XHBubGNsdHJccG5zdGFydDFccG5pbmRlbnQ3MjBccG5oYW5nIHtccG50eHRiICh9e1xwbnR4dGEgKX19e1wqXHBuc2VjbHZsN1xwbmxjcm1ccG5zdGFydDFccG5pbmRlbnQ3MjBccG5oYW5nIHtccG50eHRiICh9e1xwbnR4dGEgKX19e1wqXHBuc2VjbHZsOFxwbmxjbHRyXHBuc3RhcnQxXHBuaW5kZW50NzIwXHBuaGFuZyB7XHBudHh0YiAofXtccG50eHRhICl9fXtcKlxwbnNlY2x2bDlccG5sY3JtXHBuc3RhcnQxXHBuaW5kZW50NzIwXHBuaGFuZw==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XHBudWNsdHJccG5zdGFydDFccG5pbmRlbnQ3MjBccG5oYW5nIHtccG50eHRhIC59fXtcKlxwbnNlY2x2bDNccG5kZWNccG5zdGFydDFccG5pbmRlbnQ3MjBccG5oYW5nIHtccG50eHRhIC59fXtcKlxwbnNlY2x2bDRccG5sY2x0clxwbnN0YXJ0MVxwbmluZGVudDcyMFxwbmhhbmcge1xwbnR4dGEgKX19e1wqXHBuc2VjbHZsNVxwbmRlY1xwbnN0YXJ0MVxwbmluZGVudDcyMFxwbmhhbmcge1xwbnR4dGIgKH17XHBudHh0YSApfX17XCpccG5zZWNsdmw2","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XHFsIFxmaS0zNjBcbGk3MjBccmkwXHNiMTAwXHNhMTAwXHNiYXV0bzFcc2FhdXRvMVx3aWRjdGxwYXJcamNsaXN0dGFiXHR4NzIwXHdyYXBkZWZhdWx0XGFzcGFscGhhXGFzcG51bVxmYWF1dG9cbHMxXGFkanVzdHJpZ2h0XHJpbjBcbGluNzIwXGl0YXAwXHBhcmFyc2lkMTMwNTA3MjIge1xydGxjaFxmY3MxIFxhYlxhZjJcYWZzMjAgXGx0cmNoXGZjczA=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XHJlZDI1NVxncmVlbjI1NVxibHVlMjU1O1xyZWQwXGdyZWVuMFxibHVlMTI4O1xyZWQwXGdyZWVuMTI4XGJsdWUxMjg7XHJlZDBcZ3JlZW4xMjhcYmx1ZTA7XHJlZDEyOFxncmVlbjBcYmx1ZTEyODtccmVkMTI4XGdyZWVuMFxibHVlMDtccmVkMTI4XGdyZWVuMTI4XGJsdWUwO1xyZWQxMjhcZ3JlZW4xMjhcYmx1ZTEyODtccmVkMTkyXGdyZWVuMTkyXGJsdWUxOTI7fXtcKlxkZWZjaHA=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XHJ0bGNoXGZjczEgXGFiXGFmMlxhZnMyNCBcbHRyY2hcZmNzMCBcYlxmMlxmczI0XGxhbmcyMDU3XGxhbmdmZTIwNTdcbGFuZ2ZlbnAyMDU3XGluc3JzaWQxMzA1MDcyMlxjaGFycnNpZDEzMDUwNzIyIFNPRlRXQVJFIFBST0RVQ1QgTElDRU5TRSBBR1JFRU1FTlR9e1xydGxjaFxmY3MxIFxhZjJcYWZzMjAgXGx0cmNoXGZjczA=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XHJ0bGNoXGZjczEgXGFmMlxhZnMyMCBcbHRyY2hcZmNzMCBcZjJcZnMyMCBcc2Jhc2Vkb24xMCBcc3NlbWloaWRkZW4gXHN1bmhpZGV1c2VkIFxzdHlyc2lkMTMwNTA3MjIgSFRNTCBUeXBld3JpdGVyO317XHMxNlxxbCBcbGkwXHJpMFxzYjEwMFxzYTEwMFxzYmF1dG8xXHNhYXV0bzFcd2lkY3RscGFyXHdyYXBkZWZhdWx0XGFzcGFscGhhXGFzcG51bVxmYWF1dG9cYWRqdXN0cmlnaHRccmluMFxsaW4wXGl0YXAwIFxydGxjaFxmY3Mx","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XHNzZW1paGlkZGVuIFxzdW5oaWRldXNlZCBcc3ByaW9yaXR5MSBEZWZhdWx0IFBhcmFncmFwaCBGb250O317XCo=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XHRzMTFcdHNyb3dkXHRyZnRzV2lkdGhCM1x0cnBhZGRsMTA4XHRycGFkZHIxMDhcdHJwYWRkZmwzXHRycGFkZGZ0M1x0cnBhZGRmYjNcdHJwYWRkZnIzXHRyY2JwYXQxXHRyY2ZwYXQxXHRibGluZDBcdGJsaW5kdHlwZTNcdHN2ZXJ0YWx0XHRzYnJkcnRcdHNicmRybFx0c2JyZHJiXHRzYnJkcnJcdHNicmRyZGdsXHRzYnJkcmRnclx0c2JyZHJoXHRzYnJkcnYgXHFsIFxsaTBccmkwXHNhMTYwXHNsMjU5XHNsbXVsdDE=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XHdpZGN0bHBhclx3cmFwZGVmYXVsdFxhc3BhbHBoYVxhc3BudW1cZmFhdXRvXGFkanVzdHJpZ2h0XHJpbjBcbGluMFxpdGFwMCBccnRsY2hcZmNzMSBcYWYwXGFmczIyXGFsYW5nMTAyNSBcbHRyY2hcZmNzMCBcZjMxNTA2XGZzMjJcbGFuZzIwNTdcbGFuZ2ZlMTAzM1xjZ3JpZFxsYW5nbnAyMDU3XGxhbmdmZW5wMTAzMyBcc25leHQwIFxzcWZvcm1hdCBcc3ByaW9yaXR5MCBOb3JtYWw7fXtcKlxjczEwIFxhZGRpdGl2ZQ==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XHdpZGN0bHBhclx3cmFwZGVmYXVsdFxhc3BhbHBoYVxhc3BudW1cZmFhdXRvXGFkanVzdHJpZ2h0XHJpbjBcbGluMFxpdGFwMCBccnRsY2hcZmNzMSBcYWYzMTUwNlxhZnMyMlxhbGFuZzEwMjUgXGx0cmNoXGZjczAgXGYzMTUwNlxmczIyXGxhbmcyMDU3XGxhbmdmZTEwMzNcY2dyaWRcbGFuZ25wMjA1N1xsYW5nZmVucDEwMzMgXHNuZXh0MTEgXHNzZW1paGlkZGVuIFxzdW5oaWRldXNlZCBOb3JtYWwgVGFibGU7fXtcKlxjczE1IFxhZGRpdGl2ZQ==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"XHdpZG93Y3RybFxmdG5ialxhZW5kZG9jXHRyYWNrbW92ZXMwXHRyYWNrZm9ybWF0dGluZzFcZG9ub3RlbWJlZHN5c2ZvbnQxXHJlbHlvbnZtbDBcZG9ub3RlbWJlZGxpbmdkYXRhMFxncmZkb2NldmVudHMwXHZhbGlkYXRleG1sMVxzaG93cGxhY2Vob2xkdGV4dDBcaWdub3JlbWl4ZWRjb250ZW50MFxzYXZlaW52YWxpZHhtbDBcc2hvd3htbGVycm9yczFcbm94bGF0dG95ZW4=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"YTA4MTBlZWY5MzA4NzNlNzNhM2U3NjZlYjEwODE2YTY0MjYwMzJjNzgzZTRlZDJjZmEyMTIyYmE0NTMzOWU3MDE0MjMzOThiYzU3ZjQ3ODQwNmZhZmExYzUxNjRjMWI1YjAxOWMxM2IwOTQ4OGMwZDc4NzU3NmNmMjBkYzBiOTM=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"YTFhODJmZTM1M2JkOTBhODY1YWFkNDFlZDBiNWI4ZjlkNmZkMDEwMDAwZmZmZjAzMDA1MDRiMDMwNDE0MDAwNjAwMDgwMDAwMDAyMTAwNmI3OTk2MTY4MzAwMDAwMDhhMDAwMDAwMWMwMDAwMDA3NDY4NjU2ZDY1MmY3NDY4NjU=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"YTdlN2MwMDAwMDAwMzYwMTAwMDAwYjAwMDAwMDVmNzI2NTZjNzMyZjJlNzI2NTZjNzM4NDhmY2Y2YWMzMzAwYzg3ZWY4NWJkODNkMTdkNTFkMmMzMTgyNTc2MmZhNTkwNDMyZmEzN2QwMGUxMjg3ZjY4MjIxYmRiMWJlYmRiNGY=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"YWUzOGEzOGY1NmU0MjJhM2E2NDFjOGJiZDA0OGY3NzU3ZGEwZjE5YjAxN2NjNTI0YmQ2MjEwN2JkNTAwMTk5NjUwOWFmZmIzZmQzODFhODk2NzJmMWYxNjVkZmU1MTQxNzNkOTg1MDUyOGEyYzZjY2UwMjM5YmFhNGMwNGNhNWI=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"YW5kIGNvbmRpdGlvbnMgYmVmb3JlIHVzaW5nIHRoZSBTT0ZUV0FSRSBQUk9EVUNULiBcbGluZSBcbGluZQ==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"YW5kIHNvdXJjZSBmaWxlcyB3aGVyZSBwcm92aWRlZH17XHJ0bGNoXGZjczEgXGFiXGFmMlxhZnMyMCBcbHRyY2hcZmNzMCBcYlxmMlxmczIwXGxhbmcyMDU3XGxhbmdmZTIwNTdcbGFuZ2ZlbnAyMDU3XGluc3JzaWQxMzA1MDcyMlxjaGFycnNpZDEzMDUwNzIyIDp9e1xydGxjaFxmY3MxIFxhZjJcYWZzMjAgXGx0cmNoXGZjczA=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"YjAxZDU4M2RlZWU1Zjk5ODI0ZTI5MGI0YmEzZjM2NGVhYzRhNDMwODgzYjNjMDkyZDRlY2E4Zjk0NmM5MTY0MjJlY2FiOTI3ZjUyZWE0MmI4OWExY2Q1OWMyNTRmOTE5YjBlODVlNjUzNWQxMzVhOGRlMjBmMjBiOGMxMmMzYjA=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"YmFiYWM0ZGYwMDAwMDBmZmZmMDMwMDUwNGIwMTAyMmQwMDE0MDAwNjAwMDgwMDAwMDAyMTAwZTlkZTBmYmZmZjAwMDAwMDFjMDIwMDAwMTMwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwNWI0MzZmNmU3NDY1NmU=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"YmQyZDk4NDYwNWMwM2U2MjU5MDFhYjRjZDcyNWQ3YWRjYjkzYWI0YjRiZWQwYzk5MzY0ODY4ZTU2NjkyNTA5MTUxM2Q4Yzg3Njg4NDE3ZDUyOTQ3Y2Y0MmUzNmQ3MzVkNWZhNWQ0YTAyNzQzYTFlNjgzZDI1YWQxYThkNmZlOGQ=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"YmV0d2VlbiB5b3UgKGFuIGluZGl2aWR1YWwgb3IgYW4gZW50aXR5KSBhbmQgVmlzdWFsd2FyZSBJbmMuIGZvciBzb21lIG9yIGFsbCBvZiB0aGUgc29mdHdhcmUgcHJvZHVjdHMgaWRlbnRpZmllZCBiZWxvdyAoZWFjaCwgYSBTT0ZUV0FSRSBQUk9EVUNUKSwgd2hpY2ggaW5jbHVkZXMgY29tcHV0ZXIgc29mdHdhcmUgYW5kIGVsZWN0cm9uaWMgZG9jdW1lbnRhdGlvbi4gWW91IHNob3VsZCBjYXJlZnVsbHkgcmVhZCB0aGUgZm9sbG93aW5nIHRlcm1z","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"YzU3OTczMGQ3NmViZGE0MDYzNWQyOTY4ZWMxYzM3ZGM0YWQ5ODc5MjE5YTI2OWMzMWRjMzYzM2YxYzQ2NTNhODFkMmViN2JjODg0ZWUwZGRkOTUwMjRlOTBkN2YxZTY1OTkyNjVjYjQxMTBmZDM4MDJiZDE0OWQ1MjAyMjAyMjc=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"YzcwNjBhYmIwODg0YTRlZmY3YTkzZGZlYWU4YmY5ZTE5NGU3MjAxNjlhYWEwNmMzZTI0MzNmY2I2OGUxNzYzZGJmN2Y4MmM5ODVhNGE3MjUwODViNzg3MDg2YTM3YmRiYjU1ZmJjNTBkMWEzM2NjZDMxMWJhNTQ4YjYzMDk1MTI=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"Yzc4ZjRmMWVmZDljM2EzMmFjZjY1MDNjZDFhZDVlN2ZmZmM1ZGY0ZjNmNzVmZTdhZmVkZGViMjc1ZmQ5ZjE1Y2M3ZmZmZWQzNjdiZmZkZmFhNTFkMDgyYjVkODVlMGQ1ZDdjZmZlNzhmMWVjZDUzNzlmZmZmOWMzMTMwYmJjOTk=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"ZCB0bywgaW1wbGllZCB3YXJyYW50aWVzIG9mIG1lcmNoYW50YWJpbGl0eSwgZml0bmVzcyBmb3IgYSBwYXJ0aWN1bGFyIHB1cnBvc2UsIGFuZCBub25pbmZyaW5nZW1lbnQuIFxsaW5lIFxsaW5lIH17XHJ0bGNoXGZjczEgXGFiXGFmMlxhZnMyMCBcbHRyY2hcZmNzMCBcYlxmMlxmczIwXGxhbmcyMDU3XGxhbmdmZTIwNTdcbGFuZ2ZlbnAyMDU3XGluc3JzaWQxMzA1MDcyMlxjaGFycnNpZDEzMDUwNzIy","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"ZDBjZjExZTBhMWIxMWFlMTAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwM2UwMDAzMDBmZWZmMDkwMDA2MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAxMDAwMDAwMDEwMDAwMDAwMDAwMDAwMDAwMTAwMDAwZmVmZmZmZmYwMDAwMDAwMGZlZmZmZmZmMDAwMDAwMDAwMDAwMDAwMGZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZm","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"ZDgyYjhkMDZmOTk2NWJjNTc0YWJhZTM2ZWVkMWQ2N2RmYjk4NTBkYTEzNzM4YWY3YjlkYWJhNzNlODRjYTMyZTBjNGEzYmY1Y2M4YWIzZTdiODY5MDg4N2YyNGU4NjA5MGNkYzI0NDFjYWM2NDk5OGY4ODQ4OGIwMTdhMjI5ZWM=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"ZGVjb21waWxlLCBvciBkaXNhc3NlbWJsZSB0aGUgU09GVFdBUkUgUFJPRFVDVC4gKEMpIFlvdSBtYXkgbm90IHJlbnQgb3IgbGVhc2UgdGhlIFNPRlRXQVJFIFBST0RVQ1QuIChEKSBZb3UgbWF5IG5vdCBkaXN0cmlidXRlIGNvcGllcyBvZiB0aGUgYWN0aXZhdGVkIFNPRlRXQVJFIFBST0RVQ1Qgb3IgbGljZW5zZSBrZXlzIHRvIHRoaXJkIHBhcnRpZXMuIChFKSBZb3UgbWF5IG5vdCBleGNlZWQgdGhlIHNjb3BlIG9mIHlvdXIgbGljZW5zZWQgU09G","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"ZGZhYWI3ZGFmZTAyYWI4MWQyNDM4YmVmNzZiNTVkMmUxYTc4Y2Q3Zjc5ODM3M2QzOTczZjAzYWY0MGE5N2Y2ZjAzZGZlZDA2MTA0NTAzYWY0MDI5ZGVkZmMwN2I1ZWI1MTQ3ODA2NWU4MTUyN2M2NTAzNWYyZDM0ZGI1ZWQ1YzA=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"ZSdzIGVudGlyZSBsaWFiaWxpdHkgYW5kIHlvdXIgZXhjbHVzaXZlIHJlbWVkeSB1bmRlciB0aGlzIEFncmVlbWVudCBzaGFsbCBub3QgZXhjZWVkIHlvdXIgcHVyY2hhc2UgcHJpY2UuIFxsaW5lIFxsaW5lIH17XHJ0bGNoXGZjczEgXGFiXGFmMlxhZnMyMCBcbHRyY2hcZmNzMCBcYlxmMlxmczIwXGxhbmcyMDU3XGxhbmdmZTIwNTdcbGFuZ2ZlbnAyMDU3XGluc3JzaWQxMzA1MDcyMlxjaGFycnNpZDEzMDUwNzIy","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"ZTJlYzkzNDkwODg1Mzc0NTMxZTMzMDVjMjgxNWJhODUzMmZjOTczZjRmMWRhOTg4YTAxZDhjMzQ2YmM5MGI5OGYwOGQyMWM5YzdlMWMzODQ0YzQ1YzNmZDE4YmNiYTFhZTRjZGNiMWZkZmJjN2NlZTljM2M3YTcxZjJlODk3OTM=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"ZTU2MmM3MmYxNmRhYWRkMjQzNjgyYzIyOGM4YTdlZmFjZGE1MGJhZmEyZTg3Y2YxZTU0NThkNmY3YzdkODk5NjZmZGIyZTBkNTk5NDY3ZWFlYjRhNWUxMTU3NWY1ZjhhYTVlZDVmNWYxYzAyYTJmM2EwNTJlYWQ2Y2JmNTU2MjU=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"ZWY4YmFlNzQzMmUxMGJkNzEzZWU0YzE5ODc2ZGJmMWFiNmZhOTY3ODNhOGIwZWQ4Mjg3ZDVjMmQxNmU1YTM2OTJhMWUxYzg5ZDU3OGMxY2ZjNmUxNTE0M2E0ZTg0YTc1ZjUwODk2Yjk1NzZjMjdlYTUxNzk0OTQwZGFiZTBkMDk=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"ZjNhNTQyYTE5MjhmMTA4OTVkMjc0NjExYjhiZDMxMWU5MzIxNzZmYWQyYTViYmJiNzRkZWExNzAxYTBiMmUwNzg2MzRlOTQ5ZDdkOGIwNTBkOGQxNjE1MTIyZjg5YzA3MzQ3MThlMTA2ZGI4MzBjZjg4MWRmN2YxN2RlMTNhMTQ=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"ZjQ0ZjEzNmM3MDBmYzRhMzBkMmY4MTY3NTQ3MDk1NGFmOGYwOTAyMGQ4MTBmNWQ0OWUyNDk1MGRiODQ1ZWU4YmM1YWQwMTQ3Y2UyYzIxMGRmNzQxYzE2ZjdhNDFjOTBmNzI4NTlhZGZjOTc5NjVhZjkwYWJmOWNkNzJhZWU5ZmI=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"ZjdiYmI5OWFlYjcwODFlMjExYTIyY2M2MGQ3NzhlYjk3YjY1ZjdjMzBmMmVhMzFkMTFlMjA4M2I2MDFmZjMxZGQ0NzA0MzIxYTYzYmY5M2MxZmMyMzBlMjk3ZDgxNGM3NzA2ZGNjOTIwODA5Mzg0ZDI2Zjk1MTgyOGVjMTZmNDQ=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"ZmZmZmZmZmZmZmZmZmZmZmZkZmZmZmZmZmVmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZm","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"ZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmY1MjAwNmYwMDZmMDA3NDAwMjAwMDQ1MDA2ZTAwNzQwMDcyMDA3OTAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDE2MDAwNTAwZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmMGM2YWQ5ODg5MmYxZDQxMWE2NWYwMDQwOTYzMjUxZTUwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDA0MDhi","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"ZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZm","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"ZywgY29weWluZywgb3Igb3RoZXJ3aXNlIHVzaW5nIHRoZSBTT0ZUV0FSRSBQUk9EVUNULCB5b3UgYXJlIGFncmVlaW5nIHRvIGJlIGJvdW5kIGJ5IHRoZSB0ZXJtcyBvZiB0aGlzIEFncmVlbWVudC4gSWYgeW91IGRvIG5vdCBhZ3JlZSB0byBhbGwgb2YgdGhlIHRlcm1zIG9mIHRoaXMgQWdyZWVtZW50LCB5b3UgYXJlIG5vdCBhdXRob3JpemVkIHRvIHVzZSB0aGUgU09GVFdBUkUgUFJPRFVDVC4gXGxpbmUgXGxpbmUgfXtccnRsY2hcZmNzMQ==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"SWYgcHVyY2hhc2luZyBhIHRoaXJkIHBhcnR5IHByb2R1Y3QsIHRoZSB1c2Ugb2Ygc3VjaCB0aGlyZCBwYXJ0eSBwcm9kdWN0IHNoYWxsIGJlIGdvdmVybmVkIGJ5IHRoZSB0aGlyZCBwYXJ0eSdzIGxpY2Vuc2UgYWdyZWVtZW50LCB3aGljaCBtdXN0IGJlIGFwcHJvdmVkIHdpdGggZmlyc3QgdXNlIG9mIHRoZSBwcm9kdWN0Lg==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"b3Igbm90aWNlIGlmIHlvdSBmYWlsIHRvIGNvbXBseSwgb3IgVmlzdWFsd2FyZSBoYXMgcmVhc29uYWJsZSBiZWxpZWYgdGhhdCB5b3UgZmFpbGVkIHRvIGNvbXBseSwgd2l0aCB0aGUgdGVybXMgYW5kIGNvbmRpdGlvbnMgb2YgdGhpcyBBZ3JlZW1lbnQuIEluIHN1Y2ggZXZlbnQsIHlvdSBtdXN0IGRlc3Ryb3kgYWxsIGNvcGllcyBvZiB0aGUgU09GVFdBUkUgUFJPRFVDVC4gXGxpbmUgXGxpbmUgfXtccnRsY2hcZmNzMSBcYWJcYWYyXGFmczIw","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"cmUgZ3JhbnRzIHlvdSB0aGUgbm9uLWV4Y2x1c2l2ZSByaWdodCB0byBpbnN0YWxsIGFuZCB1c2UgdGhlIGxpY2Vuc2VkIFNPRlRXQVJFIFBST0RVQ1QgaWRlbnRpZmllZCBpbiB0aGlzIHBhcmFncmFwaCwgYXMgZm9sbG93czo=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"Uk9EVUNUIGlzIGF0IHlvdXIgb3duIHJpc2suIFRvIHRoZSBtYXhpbXVtIGV4dGVudCBwZXJtaXR0ZWQgYnkgYXBwbGljYWJsZSBsYXcsIFZpc3VhbHdhcmUgYW5kIGl0cyBvd25lcnMsIGVtcGxveWVlcywgYWdlbnRzLCBhc3NvY2lhdGVzLCBhZmZpbGlhdGVzLCBhbmQgc3VwcGxpZXJzIGRpc2NsYWltIGFsbCB3YXJyYW50aWVzIGFuZCBjb25kaXRpb25zLCBlaXRoZXIgZXhwcmVzcyBvciBpbXBsaWVkLCBpbmNsdWRpbmcsIGJ1dCBub3QgbGltaXRl","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"VGhlIFNPRlRXQVJFIFBST0RVQ1QgaXMgbGljZW5zZWQsIG5vdCBzb2xkLiBUaGUgU09GVFdBUkUgUFJPRFVDVCBpcyBwcm90ZWN0ZWQgYnkgY29weXJpZ2h0IGxhd3MgYW5kIGludGVybmF0aW9uYWwgY29weXJpZ2h0IHRyZWF0aWVzLCBhcyB3ZWxsIGFzIG90aGVyIGludGVsbGVjdHVhbCBwcm9wZXJ0eSBsYXdzIGFuZCB0cmVhdGllcy4gQnkgaW5zdGFsbGlu","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"dGhlciBwZWN1bmlhcnkgbG9zcykgYXJpc2luZyBvdXQgb2YgdGhlIHVzZSBvZiBvciBpbmFiaWxpdHkgdG8gdXNlIHRoZSBTT0ZUV0FSRSBQUk9EVUNUICh3aGV0aGVyIGR1ZSB0byBsaWNlbnNlIHRlcm1pbmF0aW9uIG9yIGFueSBvdGhlciByZWFzb24pLCBldmVuIGlmIFZpc3VhbHdhcmUgaGFzIGJlZW4gYWR2aXNlZCBvZiB0aGUgcG9zc2liaWxpdHkgb2Ygc3VjaCBkYW1hZ2VzLiBcbGluZSBcbGluZSB9e1xydGxjaFxmY3Mx","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"VGhpcyBMaWNlbnNlIEFncmVlbWVudCAodGhlICJBZ3JlZW1lbnQiKSBpcyBhIGxlZ2FsIGFncmVlbWVudA==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"VGhpcyBsaWNlbnNlIGlzIG5vdCB0cmFuc2ZlcmFibGUuIFxsaW5lIFxsaW5lIH17XHJ0bGNoXGZjczEgXGFiXGFmMlxhZnMyMCBcbHRyY2hcZmNzMCBcYlxmMlxmczIwXGxhbmcyMDU3XGxhbmdmZTIwNTdcbGFuZ2ZlbnAyMDU3XGluc3JzaWQxMzA1MDcyMlxjaGFycnNpZDEzMDUwNzIyIDIuIFJFU1RSSUNUSU9OUy59e1xydGxjaFxmY3MxIFxhZjJcYWZzMjAgXGx0cmNoXGZjczA=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"VG8gdGhlIG1heGltdW0gZXh0ZW50IHBlcm1pdHRlZCBieSBhcHBsaWNhYmxlIGxhdywgaW4gbm8gZXZlbnQgc2hhbGwgVmlzdWFsd2FyZSBvciBpdHMgb3duZXJzLCBlbXBsb3llZXMsIGFnZW50cw==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"VFdBUkUgUFJPRFVDVC4gKEYpIFlvdSBtYXkgbm90IGFjdGl2YXRlIHRoZSBTT0ZUV0FSRSBQUk9EVUNUIHdpdGggYSBsaWNlbnNlIGtleSB0aGF0IHlvdSBkaWQgbm90IGxlZ2FsbHkgb2J0YWluLiAoRykgWW91IG11c3QgcHJvcGVybHkgcGF5IGZvciBhbnkgU09GVFdBUkUgUFJPRFVDVCBsaWNlbnNlIGtleXMgdXNlZC4gXGxpbmUgXGxpbmUgfXtccnRsY2hcZmNzMSBcYWJcYWYyXGFmczIwIFxsdHJjaFxmY3Mw","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"VmlzdWFsd2FyZSBtYXkgdGVybWluYXRlIHRoaXMgQWdyZWVtZW50IGFuZCBkaXNhYmxlIHRoZSBTT0ZUV0FSRSBQUk9EVUNUIGZvciBhbnkgbGVuZ3RoIG9mIHRpbWUsIGluY2x1ZGluZyBpbiBwZXJwZXR1aXR5LCB3aXRob3V0IHByaQ==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"WW91IGdpdmUgeW91ciBjb25zZW50IGZvciBWaXN1YWx3YXJlIHRvIG1vbml0b3IgU09GVFdBUkUgUFJPRFVDVCB1c2FnZSBhbmQgdG8gY29sbGVjdCBkYXRhIGZvciB0aGUgcHVycG9zZSBvZiBhdWRpdGluZyBjb21wbGlhbmNlIHdpdGggdGhlIHRlcm1zIG9mIHRoaXMgQWdyZWVtZW50LiBcbGluZSBcbGluZSB9e1xydGxjaFxmY3MxIFxhYlxhZjJcYWZzMjAgXGx0cmNoXGZjczA=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"e1wqXGNvbG9yc2NoZW1lbWFwcGluZyAzYzNmNzg2ZDZjMjA3NjY1NzI3MzY5NmY2ZTNkMjIzMTJlMzAyMjIwNjU2ZTYzNmY2NDY5NmU2NzNkMjI1NTU0NDYyZDM4MjIyMDczNzQ2MTZlNjQ2MTZjNmY2ZTY1M2QyMjc5NjU3MzIyM2YzZTBkMGEzYzYxM2E2MzZjNzI0ZA==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"e1wqXGxhdGVudHN0eWxlc1xsc2RzdGltYXgzNzJcbHNkbG9ja2VkZGVmMFxsc2RzZW1paGlkZGVuZGVmMFxsc2R1bmhpZGV1c2VkZGVmMFxsc2RxZm9ybWF0ZGVmMFxsc2Rwcmlvcml0eWRlZjk5e1xsc2Rsb2NrZWRleGNlcHQgXGxzZHFmb3JtYXQxIFxsc2Rwcmlvcml0eTAgXGxzZGxvY2tlZDAgTm9ybWFsO1xsc2RxZm9ybWF0MSBcbHNkcHJpb3JpdHk5IFxsc2Rsb2NrZWQwIGhlYWRpbmcgMTs=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"e1wqXHJzaWR0YmwgXHJzaWQyNTA1NDkxXHJzaWQxMjk4ODU1N1xyc2lkMTI5OTY1MzhccnNpZDEzMDUwNzIyXHJzaWQxNjA2NzA1MX17XG1tYXRoUHJcbW1hdGhGb250MzRcbWJya0JpbjBcbWJya0JpblN1YjBcbXNtYWxsRnJhYzBcbWRpc3BEZWYxXG1sTWFyZ2luMFxtck1hcmdpbjBcbWRlZkpjMVxtd3JhcEluZGVudDE0NDBcbWludExpbTBcbW5hcnlMaW0xfXtcaW5mb3tcYXV0aG9yIGp1bGlhbn17XG9wZXJhdG9yIGp1bGlhbn0=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"e1wqXHdncmZmbXRmaWx0ZXIgMjQ1MH1cbm9mZWF0dXJldGhyb3R0bGUxXGlsZm9tYWNhdGNsbnVwMFxsdHJwYXIgXHNlY3RkIFxsdHJzZWN0XGxpbmV4MFxoZWFkZXJ5NzA4XGZvb3Rlcnk3MDhcY29sc3g3MDhcZW5kbmhlcmVcc2VjdGxpbmVncmlkMzYwXHNlY3RkZWZhdWx0Y2xcc2Z0bmJqIHtcKlxwbnNlY2x2bDFccG51Y3JtXHBuc3RhcnQxXHBuaW5kZW50NzIwXHBuaGFuZyB7XHBudHh0YSAufX17XCpccG5zZWNsdmwy","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"e1xjcmVhdGltXHlyMjAxM1xtbzRcZHkzMFxocjEzXG1pbjM1fXtccmV2dGltXHlyMjAxNlxtbzNcZHkxMlxocjE3XG1pbjMzfXtcdmVyc2lvbjR9e1xlZG1pbnM4fXtcbm9mcGFnZXMyfXtcbm9md29yZHM2MDB9e1xub2ZjaGFyczM0MjF9e1xub2ZjaGFyc3dzNDAxM317XHZlcm4zfX17XCpceG1sbnN0Ymwge1x4bWxuczEgaHR0cDovL3NjaGVtYXMubWljcm9zb2Z0LmNvbS9vZmZpY2Uvd29yZC8yMDAzL3dvcmRtbH19","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"e1xmMzgxXGZiaWRpIFxmcm9tYW5cZmNoYXJzZXQyMDRcZnBycTIgQ2FtYnJpYSBNYXRoIEN5cjt9e1xmMzgzXGZiaWRpIFxmcm9tYW5cZmNoYXJzZXQxNjFcZnBycTIgQ2FtYnJpYSBNYXRoIEdyZWVrO317XGYzODRcZmJpZGkgXGZyb21hblxmY2hhcnNldDE2MlxmcHJxMiBDYW1icmlhIE1hdGggVHVyO317XGYzODdcZmJpZGkgXGZyb21hblxmY2hhcnNldDE4NlxmcHJxMiBDYW1icmlhIE1hdGggQmFsdGljO30=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"e1xmMzg4XGZiaWRpIFxmcm9tYW5cZmNoYXJzZXQxNjNcZnBycTIgQ2FtYnJpYSBNYXRoIChWaWV0bmFtZXNlKTt9e1xmNDMwXGZiaWRpIFxmc3dpc3NcZmNoYXJzZXQyMzhcZnBycTIgQ2FsaWJyaSBDRTt9e1xmNDMxXGZiaWRpIFxmc3dpc3NcZmNoYXJzZXQyMDRcZnBycTIgQ2FsaWJyaSBDeXI7fXtcZjQzM1xmYmlkaSBcZnN3aXNzXGZjaGFyc2V0MTYxXGZwcnEyIENhbGlicmkgR3JlZWs7fQ==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"e1xmM1xmYmlkaSBcZnJvbWFuXGZjaGFyc2V0MlxmcHJxMntcKlxwYW5vc2UgMDUwNTAxMDIwMTA3MDYwMjA1MDd9U3ltYm9sO317XGYzNFxmYmlkaSBcZnJvbWFuXGZjaGFyc2V0MFxmcHJxMntcKlxwYW5vc2UgMDIwNDA1MDMwNTA0MDYwMzAyMDR9Q2FtYnJpYSBNYXRoO317XGYzOVxmYmlkaSBcZnN3aXNzXGZjaGFyc2V0MFxmcHJxMntcKlxwYW5vc2UgMDIwZjA1MDIwMjAyMDQwMzAyMDR9Q2FsaWJyaTt9","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"e1xmNDFcZmJpZGkgXGZyb21hblxmY2hhcnNldDIwNFxmcHJxMiBUaW1lcyBOZXcgUm9tYW4gQ3lyO317XGY0M1xmYmlkaSBcZnJvbWFuXGZjaGFyc2V0MTYxXGZwcnEyIFRpbWVzIE5ldyBSb21hbiBHcmVlazt9e1xmNDRcZmJpZGkgXGZyb21hblxmY2hhcnNldDE2MlxmcHJxMiBUaW1lcyBOZXcgUm9tYW4gVHVyO317XGY0NVxmYmlkaSBcZnJvbWFuXGZjaGFyc2V0MTc3XGZwcnEyIFRpbWVzIE5ldyBSb21hbiAoSGVicmV3KTt9","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"e1xmNDM0XGZiaWRpIFxmc3dpc3NcZmNoYXJzZXQxNjJcZnBycTIgQ2FsaWJyaSBUdXI7fXtcZjQzN1xmYmlkaSBcZnN3aXNzXGZjaGFyc2V0MTg2XGZwcnEyIENhbGlicmkgQmFsdGljO317XGY0MzhcZmJpZGkgXGZzd2lzc1xmY2hhcnNldDE2M1xmcHJxMiBDYWxpYnJpIChWaWV0bmFtZXNlKTt9e1xmbG9tYWpvclxmMzE1MDhcZmJpZGkgXGZyb21hblxmY2hhcnNldDIzOFxmcHJxMiBUaW1lcyBOZXcgUm9tYW4gQ0U7fQ==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"e1xmNDZcZmJpZGkgXGZyb21hblxmY2hhcnNldDE3OFxmcHJxMiBUaW1lcyBOZXcgUm9tYW4gKEFyYWJpYyk7fXtcZjQ3XGZiaWRpIFxmcm9tYW5cZmNoYXJzZXQxODZcZnBycTIgVGltZXMgTmV3IFJvbWFuIEJhbHRpYzt9e1xmNDhcZmJpZGkgXGZyb21hblxmY2hhcnNldDE2M1xmcHJxMiBUaW1lcyBOZXcgUm9tYW4gKFZpZXRuYW1lc2UpO317XGY2MFxmYmlkaSBcZm1vZGVyblxmY2hhcnNldDIzOFxmcHJxMSBDb3VyaWVyIE5ldyBDRTt9","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"e1xmNjFcZmJpZGkgXGZtb2Rlcm5cZmNoYXJzZXQyMDRcZnBycTEgQ291cmllciBOZXcgQ3lyO317XGY2M1xmYmlkaSBcZm1vZGVyblxmY2hhcnNldDE2MVxmcHJxMSBDb3VyaWVyIE5ldyBHcmVlazt9e1xmNjRcZmJpZGkgXGZtb2Rlcm5cZmNoYXJzZXQxNjJcZnBycTEgQ291cmllciBOZXcgVHVyO317XGY2NVxmYmlkaSBcZm1vZGVyblxmY2hhcnNldDE3N1xmcHJxMSBDb3VyaWVyIE5ldyAoSGVicmV3KTt9","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"e1xmNjZcZmJpZGkgXGZtb2Rlcm5cZmNoYXJzZXQxNzhcZnBycTEgQ291cmllciBOZXcgKEFyYWJpYyk7fXtcZjY3XGZiaWRpIFxmbW9kZXJuXGZjaGFyc2V0MTg2XGZwcnExIENvdXJpZXIgTmV3IEJhbHRpYzt9e1xmNjhcZmJpZGkgXGZtb2Rlcm5cZmNoYXJzZXQxNjNcZnBycTEgQ291cmllciBOZXcgKFZpZXRuYW1lc2UpO317XGYzODBcZmJpZGkgXGZyb21hblxmY2hhcnNldDIzOFxmcHJxMiBDYW1icmlhIE1hdGggQ0U7fQ==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"e1xmYmltYWpvclxmMzE1MzhcZmJpZGkgXGZyb21hblxmY2hhcnNldDIzOFxmcHJxMiBUaW1lcyBOZXcgUm9tYW4gQ0U7fXtcZmJpbWFqb3JcZjMxNTM5XGZiaWRpIFxmcm9tYW5cZmNoYXJzZXQyMDRcZnBycTIgVGltZXMgTmV3IFJvbWFuIEN5cjt9e1xmYmltYWpvclxmMzE1NDFcZmJpZGkgXGZyb21hblxmY2hhcnNldDE2MVxmcHJxMiBUaW1lcyBOZXcgUm9tYW4gR3JlZWs7fQ==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"e1xmYmltYWpvclxmMzE1NDJcZmJpZGkgXGZyb21hblxmY2hhcnNldDE2MlxmcHJxMiBUaW1lcyBOZXcgUm9tYW4gVHVyO317XGZiaW1ham9yXGYzMTU0M1xmYmlkaSBcZnJvbWFuXGZjaGFyc2V0MTc3XGZwcnEyIFRpbWVzIE5ldyBSb21hbiAoSGVicmV3KTt9e1xmYmltYWpvclxmMzE1NDRcZmJpZGkgXGZyb21hblxmY2hhcnNldDE3OFxmcHJxMiBUaW1lcyBOZXcgUm9tYW4gKEFyYWJpYyk7fQ==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"e1xmYmltYWpvclxmMzE1NDVcZmJpZGkgXGZyb21hblxmY2hhcnNldDE4NlxmcHJxMiBUaW1lcyBOZXcgUm9tYW4gQmFsdGljO317XGZiaW1ham9yXGYzMTU0NlxmYmlkaSBcZnJvbWFuXGZjaGFyc2V0MTYzXGZwcnEyIFRpbWVzIE5ldyBSb21hbiAoVmlldG5hbWVzZSk7fXtcZmxvbWlub3JcZjMxNTQ4XGZiaWRpIFxmcm9tYW5cZmNoYXJzZXQyMzhcZnBycTIgVGltZXMgTmV3IFJvbWFuIENFO30=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"e1xmYmltaW5vclxmMzE1NzlcZmJpZGkgXGZyb21hblxmY2hhcnNldDIwNFxmcHJxMiBUaW1lcyBOZXcgUm9tYW4gQ3lyO317XGZiaW1pbm9yXGYzMTU4MVxmYmlkaSBcZnJvbWFuXGZjaGFyc2V0MTYxXGZwcnEyIFRpbWVzIE5ldyBSb21hbiBHcmVlazt9e1xmYmltaW5vclxmMzE1ODJcZmJpZGkgXGZyb21hblxmY2hhcnNldDE2MlxmcHJxMiBUaW1lcyBOZXcgUm9tYW4gVHVyO30=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"e1xmYmltaW5vclxmMzE1ODNcZmJpZGkgXGZyb21hblxmY2hhcnNldDE3N1xmcHJxMiBUaW1lcyBOZXcgUm9tYW4gKEhlYnJldyk7fXtcZmJpbWlub3JcZjMxNTg0XGZiaWRpIFxmcm9tYW5cZmNoYXJzZXQxNzhcZnBycTIgVGltZXMgTmV3IFJvbWFuIChBcmFiaWMpO317XGZiaW1pbm9yXGYzMTU4NVxmYmlkaSBcZnJvbWFuXGZjaGFyc2V0MTg2XGZwcnEyIFRpbWVzIE5ldyBSb21hbiBCYWx0aWM7fQ==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"e1xmYmltaW5vclxmMzE1ODZcZmJpZGkgXGZyb21hblxmY2hhcnNldDE2M1xmcHJxMiBUaW1lcyBOZXcgUm9tYW4gKFZpZXRuYW1lc2UpO319e1xjb2xvcnRibDtccmVkMFxncmVlbjBcYmx1ZTA7XHJlZDBcZ3JlZW4wXGJsdWUyNTU7XHJlZDBcZ3JlZW4yNTVcYmx1ZTI1NTtccmVkMFxncmVlbjI1NVxibHVlMDtccmVkMjU1XGdyZWVuMFxibHVlMjU1O1xyZWQyNTVcZ3JlZW4wXGJsdWUwO1xyZWQyNTVcZ3JlZW4yNTVcYmx1ZTA7","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"e1xmZGJtYWpvclxmMzE1MjFcZmJpZGkgXGZyb21hblxmY2hhcnNldDE2MVxmcHJxMiBUaW1lcyBOZXcgUm9tYW4gR3JlZWs7fXtcZmRibWFqb3JcZjMxNTIyXGZiaWRpIFxmcm9tYW5cZmNoYXJzZXQxNjJcZnBycTIgVGltZXMgTmV3IFJvbWFuIFR1cjt9e1xmZGJtYWpvclxmMzE1MjNcZmJpZGkgXGZyb21hblxmY2hhcnNldDE3N1xmcHJxMiBUaW1lcyBOZXcgUm9tYW4gKEhlYnJldyk7fQ==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"e1xmZGJtYWpvclxmMzE1MjRcZmJpZGkgXGZyb21hblxmY2hhcnNldDE3OFxmcHJxMiBUaW1lcyBOZXcgUm9tYW4gKEFyYWJpYyk7fXtcZmRibWFqb3JcZjMxNTI1XGZiaWRpIFxmcm9tYW5cZmNoYXJzZXQxODZcZnBycTIgVGltZXMgTmV3IFJvbWFuIEJhbHRpYzt9e1xmZGJtYWpvclxmMzE1MjZcZmJpZGkgXGZyb21hblxmY2hhcnNldDE2M1xmcHJxMiBUaW1lcyBOZXcgUm9tYW4gKFZpZXRuYW1lc2UpO30=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"e1xmZGJtaW5vclxmMzE1NjFcZmJpZGkgXGZyb21hblxmY2hhcnNldDE2MVxmcHJxMiBUaW1lcyBOZXcgUm9tYW4gR3JlZWs7fXtcZmRibWlub3JcZjMxNTYyXGZiaWRpIFxmcm9tYW5cZmNoYXJzZXQxNjJcZnBycTIgVGltZXMgTmV3IFJvbWFuIFR1cjt9e1xmZGJtaW5vclxmMzE1NjNcZmJpZGkgXGZyb21hblxmY2hhcnNldDE3N1xmcHJxMiBUaW1lcyBOZXcgUm9tYW4gKEhlYnJldyk7fQ==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"e1xmZGJtaW5vclxmMzE1NjRcZmJpZGkgXGZyb21hblxmY2hhcnNldDE3OFxmcHJxMiBUaW1lcyBOZXcgUm9tYW4gKEFyYWJpYyk7fXtcZmRibWlub3JcZjMxNTY1XGZiaWRpIFxmcm9tYW5cZmNoYXJzZXQxODZcZnBycTIgVGltZXMgTmV3IFJvbWFuIEJhbHRpYzt9e1xmZGJtaW5vclxmMzE1NjZcZmJpZGkgXGZyb21hblxmY2hhcnNldDE2M1xmcHJxMiBUaW1lcyBOZXcgUm9tYW4gKFZpZXRuYW1lc2UpO30=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"e1xmaGltYWpvclxmMzE1MDJcZmJpZGkgXGZzd2lzc1xmY2hhcnNldDBcZnBycTJ7XCpccGFub3NlIDAyMGYwMzAyMDIwMjA0MDMwMjA0fUNhbGlicmkgTGlnaHQ7fXtcZmJpbWFqb3JcZjMxNTAzXGZiaWRpIFxmcm9tYW5cZmNoYXJzZXQwXGZwcnEye1wqXHBhbm9zZSAwMjAyMDYwMzA1MDQwNTAyMDMwNH1UaW1lcyBOZXcgUm9tYW47fQ==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"e1xmaGltYWpvclxmMzE1MjhcZmJpZGkgXGZzd2lzc1xmY2hhcnNldDIzOFxmcHJxMiBDYWxpYnJpIExpZ2h0IENFO317XGZoaW1ham9yXGYzMTUyOVxmYmlkaSBcZnN3aXNzXGZjaGFyc2V0MjA0XGZwcnEyIENhbGlicmkgTGlnaHQgQ3lyO317XGZoaW1ham9yXGYzMTUzMVxmYmlkaSBcZnN3aXNzXGZjaGFyc2V0MTYxXGZwcnEyIENhbGlicmkgTGlnaHQgR3JlZWs7fQ==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"e1xmaGltYWpvclxmMzE1MzJcZmJpZGkgXGZzd2lzc1xmY2hhcnNldDE2MlxmcHJxMiBDYWxpYnJpIExpZ2h0IFR1cjt9e1xmaGltYWpvclxmMzE1MzVcZmJpZGkgXGZzd2lzc1xmY2hhcnNldDE4NlxmcHJxMiBDYWxpYnJpIExpZ2h0IEJhbHRpYzt9e1xmaGltYWpvclxmMzE1MzZcZmJpZGkgXGZzd2lzc1xmY2hhcnNldDE2M1xmcHJxMiBDYWxpYnJpIExpZ2h0IChWaWV0bmFtZXNlKTt9","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"e1xmaGltaW5vclxmMzE1MDZcZmJpZGkgXGZzd2lzc1xmY2hhcnNldDBcZnBycTJ7XCpccGFub3NlIDAyMGYwNTAyMDIwMjA0MDMwMjA0fUNhbGlicmk7fXtcZmJpbWlub3JcZjMxNTA3XGZiaWRpIFxmcm9tYW5cZmNoYXJzZXQwXGZwcnEye1wqXHBhbm9zZSAwMjAyMDYwMzA1MDQwNTAyMDMwNH1UaW1lcyBOZXcgUm9tYW47fXtcZjQwXGZiaWRpIFxmcm9tYW5cZmNoYXJzZXQyMzhcZnBycTIgVGltZXMgTmV3IFJvbWFuIENFO30=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"e1xmaGltaW5vclxmMzE1NjhcZmJpZGkgXGZzd2lzc1xmY2hhcnNldDIzOFxmcHJxMiBDYWxpYnJpIENFO317XGZoaW1pbm9yXGYzMTU2OVxmYmlkaSBcZnN3aXNzXGZjaGFyc2V0MjA0XGZwcnEyIENhbGlicmkgQ3lyO317XGZoaW1pbm9yXGYzMTU3MVxmYmlkaSBcZnN3aXNzXGZjaGFyc2V0MTYxXGZwcnEyIENhbGlicmkgR3JlZWs7fXtcZmhpbWlub3JcZjMxNTcyXGZiaWRpIFxmc3dpc3NcZmNoYXJzZXQxNjJcZnBycTIgQ2FsaWJyaSBUdXI7fQ==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"e1xmaGltaW5vclxmMzE1NzVcZmJpZGkgXGZzd2lzc1xmY2hhcnNldDE4NlxmcHJxMiBDYWxpYnJpIEJhbHRpYzt9e1xmaGltaW5vclxmMzE1NzZcZmJpZGkgXGZzd2lzc1xmY2hhcnNldDE2M1xmcHJxMiBDYWxpYnJpIChWaWV0bmFtZXNlKTt9e1xmYmltaW5vclxmMzE1NzhcZmJpZGkgXGZyb21hblxmY2hhcnNldDIzOFxmcHJxMiBUaW1lcyBOZXcgUm9tYW4gQ0U7fQ==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"e1xmbG9tYWpvclxmMzE1MDBcZmJpZGkgXGZyb21hblxmY2hhcnNldDBcZnBycTJ7XCpccGFub3NlIDAyMDIwNjAzMDUwNDA1MDIwMzA0fVRpbWVzIE5ldyBSb21hbjt9e1xmZGJtYWpvclxmMzE1MDFcZmJpZGkgXGZyb21hblxmY2hhcnNldDBcZnBycTJ7XCpccGFub3NlIDAyMDIwNjAzMDUwNDA1MDIwMzA0fVRpbWVzIE5ldyBSb21hbjt9","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"e1xmbG9tYWpvclxmMzE1MDlcZmJpZGkgXGZyb21hblxmY2hhcnNldDIwNFxmcHJxMiBUaW1lcyBOZXcgUm9tYW4gQ3lyO317XGZsb21ham9yXGYzMTUxMVxmYmlkaSBcZnJvbWFuXGZjaGFyc2V0MTYxXGZwcnEyIFRpbWVzIE5ldyBSb21hbiBHcmVlazt9e1xmbG9tYWpvclxmMzE1MTJcZmJpZGkgXGZyb21hblxmY2hhcnNldDE2MlxmcHJxMiBUaW1lcyBOZXcgUm9tYW4gVHVyO30=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"e1xmbG9tYWpvclxmMzE1MTNcZmJpZGkgXGZyb21hblxmY2hhcnNldDE3N1xmcHJxMiBUaW1lcyBOZXcgUm9tYW4gKEhlYnJldyk7fXtcZmxvbWFqb3JcZjMxNTE0XGZiaWRpIFxmcm9tYW5cZmNoYXJzZXQxNzhcZnBycTIgVGltZXMgTmV3IFJvbWFuIChBcmFiaWMpO317XGZsb21ham9yXGYzMTUxNVxmYmlkaSBcZnJvbWFuXGZjaGFyc2V0MTg2XGZwcnEyIFRpbWVzIE5ldyBSb21hbiBCYWx0aWM7fQ==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"e1xmbG9tYWpvclxmMzE1MTZcZmJpZGkgXGZyb21hblxmY2hhcnNldDE2M1xmcHJxMiBUaW1lcyBOZXcgUm9tYW4gKFZpZXRuYW1lc2UpO317XGZkYm1ham9yXGYzMTUxOFxmYmlkaSBcZnJvbWFuXGZjaGFyc2V0MjM4XGZwcnEyIFRpbWVzIE5ldyBSb21hbiBDRTt9e1xmZGJtYWpvclxmMzE1MTlcZmJpZGkgXGZyb21hblxmY2hhcnNldDIwNFxmcHJxMiBUaW1lcyBOZXcgUm9tYW4gQ3lyO30=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"e1xmbG9taW5vclxmMzE1MDRcZmJpZGkgXGZyb21hblxmY2hhcnNldDBcZnBycTJ7XCpccGFub3NlIDAyMDIwNjAzMDUwNDA1MDIwMzA0fVRpbWVzIE5ldyBSb21hbjt9e1xmZGJtaW5vclxmMzE1MDVcZmJpZGkgXGZyb21hblxmY2hhcnNldDBcZnBycTJ7XCpccGFub3NlIDAyMDIwNjAzMDUwNDA1MDIwMzA0fVRpbWVzIE5ldyBSb21hbjt9","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"e1xmbG9taW5vclxmMzE1NDlcZmJpZGkgXGZyb21hblxmY2hhcnNldDIwNFxmcHJxMiBUaW1lcyBOZXcgUm9tYW4gQ3lyO317XGZsb21pbm9yXGYzMTU1MVxmYmlkaSBcZnJvbWFuXGZjaGFyc2V0MTYxXGZwcnEyIFRpbWVzIE5ldyBSb21hbiBHcmVlazt9e1xmbG9taW5vclxmMzE1NTJcZmJpZGkgXGZyb21hblxmY2hhcnNldDE2MlxmcHJxMiBUaW1lcyBOZXcgUm9tYW4gVHVyO30=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"e1xmbG9taW5vclxmMzE1NTNcZmJpZGkgXGZyb21hblxmY2hhcnNldDE3N1xmcHJxMiBUaW1lcyBOZXcgUm9tYW4gKEhlYnJldyk7fXtcZmxvbWlub3JcZjMxNTU0XGZiaWRpIFxmcm9tYW5cZmNoYXJzZXQxNzhcZnBycTIgVGltZXMgTmV3IFJvbWFuIChBcmFiaWMpO317XGZsb21pbm9yXGYzMTU1NVxmYmlkaSBcZnJvbWFuXGZjaGFyc2V0MTg2XGZwcnEyIFRpbWVzIE5ldyBSb21hbiBCYWx0aWM7fQ==","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"e1xmbG9taW5vclxmMzE1NTZcZmJpZGkgXGZyb21hblxmY2hhcnNldDE2M1xmcHJxMiBUaW1lcyBOZXcgUm9tYW4gKFZpZXRuYW1lc2UpO317XGZkYm1pbm9yXGYzMTU1OFxmYmlkaSBcZnJvbWFuXGZjaGFyc2V0MjM4XGZwcnEyIFRpbWVzIE5ldyBSb21hbiBDRTt9e1xmZGJtaW5vclxmMzE1NTlcZmJpZGkgXGZyb21hblxmY2hhcnNldDIwNFxmcHJxMiBUaW1lcyBOZXcgUm9tYW4gQ3lyO30=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"e1xwbnR4dGIgKH17XHBudHh0YSApfX1ccGFyZFxwbGFpbiBcbHRycGFyXHFjIFxsaTBccmkwXHdpZGN0bHBhclx3cmFwZGVmYXVsdFxhc3BhbHBoYVxhc3BudW1cZmFhdXRvXGFkanVzdHJpZ2h0XHJpbjBcbGluMFxpdGFwMFxwYXJhcnNpZDEzMDUwNzIyIFxydGxjaFxmY3MxIFxhZjBcYWZzMjJcYWxhbmcxMDI1IFxsdHJjaFxmY3MwIFxmMzE1MDZcZnMyMlxsYW5nMjA1N1xsYW5nZmUxMDMzXGNncmlkXGxhbmducDIwNTdcbGFuZ2ZlbnAxMDMzIHs=","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null},{"value":"e1xydGYxXGFkZWZsYW5nMTAyNVxhbnNpXGFuc2ljcGcxMjUyXHVjMVxhZGVmZjBcZGVmZjBcc3RzaGZkYmNoMFxzdHNoZmxvY2gzMTUwNlxzdHNoZmhpY2gzMTUwNlxzdHNoZmJpMzE1MDZcZGVmbGFuZzEwMzNcZGVmbGFuZ2ZlMTAzM1x0aGVtZWxhbmcyMDU3XHRoZW1lbGFuZ2ZlMFx0aGVtZWxhbmdjczB7XGZvbnR0Ymx7XGYwXGZiaWRpIFxmcm9tYW5cZmNoYXJzZXQwXGZwcnEye1wqXHBhbm9zZSAwMjAyMDYwMzA1MDQwNTAyMDMwNH1UaW1lcyBOZXcgUm9tYW47fXtcZjJcZmJpZGkgXGZtb2Rlcm5cZmNoYXJzZXQwXGZwcnExe1wqXHBhbm9zZSAwMjA3MDMwOTAyMDIwNTAyMDQwNH1Db3VyaWVyIE5ldzt9","type":"Ansi","source":"Dropped File","process":null,"filename":"license.rtf","compromised":null,"detection_total":null,"total":null}]},{"name":"PCAP","strings":[{"value":"L2FwcHVwZGF0ZXMvTmV0UUNoZWNrSFRNTDVBZ2VudC93aW5kb3dzL3ZlcnNpb24udHh0","type":"Ansi","source":"PCAP Processing","process":null,"filename":"PCAP","compromised":null,"detection_total":null,"total":null},{"value":"R0VUIC9hcHB1cGRhdGVzL05ldFFDaGVja0hUTUw1QWdlbnQvd2luZG93cy92ZXJzaW9uLnR4dCBIVFRQLzEuMUFjY2VwdDogKi8qQWNjZXB0LUxhbmd1YWdlOiBlbi11c1VzZXItQWdlbnQ6IE1vemlsbGEvNC4wSG9zdDogdXBkYXRlYmNzLnZpc3VhbHdhcmUuY29t","type":"Ansi","source":"PCAP Processing","process":null,"filename":"PCAP","compromised":null,"detection_total":null,"total":null},{"value":"TW96aWxsYS80LjA=","type":"Ansi","source":"PCAP Processing","process":null,"filename":"PCAP","compromised":null,"detection_total":null,"total":null},{"value":"dXBkYXRlYmNzLnZpc3VhbHdhcmUuY29t","type":"Ansi","source":"PCAP Processing","process":null,"filename":"PCAP","compromised":null,"detection_total":null,"total":null}]},{"name":"nsExec.dll.2021186361","strings":[{"value":"L1RJTUVPVVQ9","type":"Ansi","source":"Dropped File","process":null,"filename":"nsExec.dll.2021186361","compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlRmlsZU1hcHBpbmdB","type":"Ansi","source":"Dropped File","process":null,"filename":"nsExec.dll.2021186361","compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlUGlwZQ==","type":"Ansi","source":"Dropped File","process":null,"filename":"nsExec.dll.2021186361","compromised":null,"detection_total":null,"total":null},{"value":"RXhlY1RvTG9n","type":"Ansi","source":"Dropped File","process":null,"filename":"nsExec.dll.2021186361","compromised":null,"detection_total":null,"total":null},{"value":"RXhlY1RvU3RhY2s=","type":"Ansi","source":"Dropped File","process":null,"filename":"nsExec.dll.2021186361","compromised":null,"detection_total":null,"total":null},{"value":"R2V0U3RhcnR1cEluZm9B","type":"Ansi","source":"Dropped File","process":null,"filename":"nsExec.dll.2021186361","compromised":null,"detection_total":null,"total":null},{"value":"R2xvYmFsUmVBbGxvYw==","type":"Ansi","source":"Dropped File","process":null,"filename":"nsExec.dll.2021186361","compromised":null,"detection_total":null,"total":null},{"value":"R2xvYmFsU2l6ZQ==","type":"Ansi","source":"Dropped File","process":null,"filename":"nsExec.dll.2021186361","compromised":null,"detection_total":null,"total":null},{"value":"SW5pdGlhbGl6ZVNlY3VyaXR5RGVzY3JpcHRvcg==","type":"Ansi","source":"Dropped File","process":null,"filename":"nsExec.dll.2021186361","compromised":null,"detection_total":null,"total":null},{"value":"SXNXb3c2NFByb2Nlc3M=","type":"Ansi","source":"Dropped File","process":null,"filename":"nsExec.dll.2021186361","compromised":null,"detection_total":null,"total":null},{"value":"TWFwVmlld09mRmlsZQ==","type":"Ansi","source":"Dropped File","process":null,"filename":"nsExec.dll.2021186361","compromised":null,"detection_total":null,"total":null},{"value":"bnNFeGVjLmRsbA==","type":"Ansi","source":"Dropped File","process":null,"filename":"nsExec.dll.2021186361","compromised":null,"detection_total":null,"total":null},{"value":"T2VtVG9DaGFyQnVmZkE=","type":"Ansi","source":"Dropped File","process":null,"filename":"nsExec.dll.2021186361","compromised":null,"detection_total":null,"total":null},{"value":"UGVla05hbWVkUGlwZQ==","type":"Ansi","source":"Dropped File","process":null,"filename":"nsExec.dll.2021186361","compromised":null,"detection_total":null,"total":null},{"value":"U2V0U2VjdXJpdHlEZXNjcmlwdG9yRGFjbA==","type":"Ansi","source":"Dropped File","process":null,"filename":"nsExec.dll.2021186361","compromised":null,"detection_total":null,"total":null},{"value":"VW5tYXBWaWV3T2ZGaWxl","type":"Ansi","source":"Dropped File","process":null,"filename":"nsExec.dll.2021186361","compromised":null,"detection_total":null,"total":null}]},{"name":"SimpleSC.dll.328895541","strings":[{"value":"NCA0JDQoNCw0MDQ0NDg0PDQ=","type":"Ansi","source":"Dropped File","process":null,"filename":"SimpleSC.dll.328895541","compromised":null,"detection_total":null,"total":null},{"value":"PCA8JDwoPCw8MDw0PDg8PDxAPEQ8SDxMPFA8VDxcPGc8","type":"Ansi","source":"Dropped File","process":null,"filename":"SimpleSC.dll.328895541","compromised":null,"detection_total":null,"total":null},{"value":"YWR2YXBpMzIuZGxs","type":"Ansi","source":"Dropped File","process":null,"filename":"SimpleSC.dll.328895541","compromised":null,"detection_total":null,"total":null},{"value":"Q2hhbmdlU2VydmljZUNvbmZpZzJB","type":"Ansi","source":"Dropped File","process":null,"filename":"SimpleSC.dll.328895541","compromised":null,"detection_total":null,"total":null},{"value":"Q29udGludWVTZXJ2aWNl","type":"Ansi","source":"Dropped File","process":null,"filename":"SimpleSC.dll.328895541","compromised":null,"detection_total":null,"total":null},{"value":"RUluT3V0RXJyb3IsVEA=","type":"Ansi","source":"Dropped File","process":null,"filename":"SimpleSC.dll.328895541","compromised":null,"detection_total":null,"total":null},{"value":"RUludmFsaWRQb2ludGVyXFhA","type":"Ansi","source":"Dropped File","process":null,"filename":"SimpleSC.dll.328895541","compromised":null,"detection_total":null,"total":null},{"value":"RXhpc3RzU2VydmljZQ==","type":"Ansi","source":"Dropped File","process":null,"filename":"SimpleSC.dll.328895541","compromised":null,"detection_total":null,"total":null},{"value":"RVplcm9EaXZpZGVQV0A=","type":"Ansi","source":"Dropped File","process":null,"filename":"SimpleSC.dll.328895541","compromised":null,"detection_total":null,"total":null},{"value":"RlBVTWFza1ZhbHVl","type":"Ansi","source":"Dropped File","process":null,"filename":"SimpleSC.dll.328895541","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RXJyb3JNZXNzYWdl","type":"Ansi","source":"Dropped File","process":null,"filename":"SimpleSC.dll.328895541","compromised":null,"detection_total":null,"total":null},{"value":"R2V0TG9uZ1BhdGhOYW1lQQ==","type":"Ansi","source":"Dropped File","process":null,"filename":"SimpleSC.dll.328895541","compromised":null,"detection_total":null,"total":null},{"value":"R2V0U2VydmljZUJpbmFyeVBhdGg=","type":"Ansi","source":"Dropped File","process":null,"filename":"SimpleSC.dll.328895541","compromised":null,"detection_total":null,"total":null},{"value":"R2V0U2VydmljZURlbGF5ZWRBdXRvU3RhcnRJbmZv","type":"Ansi","source":"Dropped File","process":null,"filename":"SimpleSC.dll.328895541","compromised":null,"detection_total":null,"total":null},{"value":"R2V0U2VydmljZURlc2NyaXB0aW9u","type":"Ansi","source":"Dropped File","process":null,"filename":"SimpleSC.dll.328895541","compromised":null,"detection_total":null,"total":null},{"value":"R2V0U2VydmljZURpc3BsYXlOYW1l","type":"Ansi","source":"Dropped File","process":null,"filename":"SimpleSC.dll.328895541","compromised":null,"detection_total":null,"total":null},{"value":"R2V0U2VydmljZUZhaWx1cmU=","type":"Ansi","source":"Dropped File","process":null,"filename":"SimpleSC.dll.328895541","compromised":null,"detection_total":null,"total":null},{"value":"R2V0U2VydmljZUZhaWx1cmVGbGFn","type":"Ansi","source":"Dropped File","process":null,"filename":"SimpleSC.dll.328895541","compromised":null,"detection_total":null,"total":null},{"value":"R2V0U2VydmljZUxvZ29u","type":"Ansi","source":"Dropped File","process":null,"filename":"SimpleSC.dll.328895541","compromised":null,"detection_total":null,"total":null},{"value":"R2V0U2VydmljZU5hbWU=","type":"Ansi","source":"Dropped File","process":null,"filename":"SimpleSC.dll.328895541","compromised":null,"detection_total":null,"total":null},{"value":"R2V0U2VydmljZVN0YXJ0VHlwZQ==","type":"Ansi","source":"Dropped File","process":null,"filename":"SimpleSC.dll.328895541","compromised":null,"detection_total":null,"total":null},{"value":"R2V0U2VydmljZVN0YXR1cw==","type":"Ansi","source":"Dropped File","process":null,"filename":"SimpleSC.dll.328895541","compromised":null,"detection_total":null,"total":null},{"value":"R3JhbnRTZXJ2aWNlTG9nb25Qcml2aWxlZ2U=","type":"Ansi","source":"Dropped File","process":null,"filename":"SimpleSC.dll.328895541","compromised":null,"detection_total":null,"total":null},{"value":"SW5zdGFsbFNlcnZpY2U=","type":"Ansi","source":"Dropped File","process":null,"filename":"SimpleSC.dll.328895541","compromised":null,"detection_total":null,"total":null},{"value":"a2VybmVsMzIuZGxs","type":"Ansi","source":"Dropped File","process":null,"filename":"SimpleSC.dll.328895541","compromised":null,"detection_total":null,"total":null},{"value":"bW1tbSBkLCB5eXl5","type":"Ansi","source":"Dropped File","process":null,"filename":"SimpleSC.dll.328895541","compromised":null,"detection_total":null,"total":null},{"value":"UGF1c2VTZXJ2aWNl","type":"Ansi","source":"Dropped File","process":null,"filename":"SimpleSC.dll.328895541","compromised":null,"detection_total":null,"total":null},{"value":"UXVlcnlTZXJ2aWNlQ29uZmlnMkE=","type":"Ansi","source":"Dropped File","process":null,"filename":"SimpleSC.dll.328895541","compromised":null,"detection_total":null,"total":null},{"value":"UXVlcnlTZXJ2aWNlQ29uZmlnMlc=","type":"Ansi","source":"Dropped File","process":null,"filename":"SimpleSC.dll.328895541","compromised":null,"detection_total":null,"total":null},{"value":"UmVtb3ZlU2VydmljZQ==","type":"Ansi","source":"Dropped File","process":null,"filename":"SimpleSC.dll.328895541","compromised":null,"detection_total":null,"total":null},{"value":"UmVtb3ZlU2VydmljZUxvZ29uUHJpdmlsZWdl","type":"Ansi","source":"Dropped File","process":null,"filename":"SimpleSC.dll.328895541","compromised":null,"detection_total":null,"total":null},{"value":"UmVzdGFydFNlcnZpY2U=","type":"Ansi","source":"Dropped File","process":null,"filename":"SimpleSC.dll.328895541","compromised":null,"detection_total":null,"total":null},{"value":"UnVudGltZSBlcnJvciAgICAgYXQgMDAwMDAwMDA=","type":"Ansi","source":"Dropped File","process":null,"filename":"SimpleSC.dll.328895541","compromised":null,"detection_total":null,"total":null},{"value":"U2VydmljZUlzUGF1c2Vk","type":"Ansi","source":"Dropped File","process":null,"filename":"SimpleSC.dll.328895541","compromised":null,"detection_total":null,"total":null},{"value":"U2VydmljZUlzUnVubmluZw==","type":"Ansi","source":"Dropped File","process":null,"filename":"SimpleSC.dll.328895541","compromised":null,"detection_total":null,"total":null},{"value":"U2VydmljZUlzU3RvcHBlZA==","type":"Ansi","source":"Dropped File","process":null,"filename":"SimpleSC.dll.328895541","compromised":null,"detection_total":null,"total":null},{"value":"U2VTZXJ2aWNlTG9nb25SaWdodA==","type":"Ansi","source":"Dropped File","process":null,"filename":"SimpleSC.dll.328895541","compromised":null,"detection_total":null,"total":null},{"value":"U2V0U2VydmljZUJpbmFyeVBhdGg=","type":"Ansi","source":"Dropped File","process":null,"filename":"SimpleSC.dll.328895541","compromised":null,"detection_total":null,"total":null},{"value":"U2V0U2VydmljZURlbGF5ZWRBdXRvU3RhcnRJbmZv","type":"Ansi","source":"Dropped File","process":null,"filename":"SimpleSC.dll.328895541","compromised":null,"detection_total":null,"total":null},{"value":"U2V0U2VydmljZURlc2NyaXB0aW9u","type":"Ansi","source":"Dropped File","process":null,"filename":"SimpleSC.dll.328895541","compromised":null,"detection_total":null,"total":null},{"value":"U2V0U2VydmljZUZhaWx1cmU=","type":"Ansi","source":"Dropped File","process":null,"filename":"SimpleSC.dll.328895541","compromised":null,"detection_total":null,"total":null},{"value":"U2V0U2VydmljZUZhaWx1cmVGbGFn","type":"Ansi","source":"Dropped File","process":null,"filename":"SimpleSC.dll.328895541","compromised":null,"detection_total":null,"total":null},{"value":"U2V0U2VydmljZUxvZ29u","type":"Ansi","source":"Dropped File","process":null,"filename":"SimpleSC.dll.328895541","compromised":null,"detection_total":null,"total":null},{"value":"U2V0U2VydmljZVN0YXJ0VHlwZQ==","type":"Ansi","source":"Dropped File","process":null,"filename":"SimpleSC.dll.328895541","compromised":null,"detection_total":null,"total":null},{"value":"U2ltcGxlU0MuZGxs","type":"Ansi","source":"Dropped File","process":null,"filename":"SimpleSC.dll.328895541","compromised":null,"detection_total":null,"total":null},{"value":"U29mdHdhcmVcQm9ybGFuZFxEZWxwaGlcTG9jYWxlcw==","type":"Ansi","source":"Dropped File","process":null,"filename":"SimpleSC.dll.328895541","compromised":null,"detection_total":null,"total":null},{"value":"U09GVFdBUkVcQm9ybGFuZFxEZWxwaGlcUlRM","type":"Ansi","source":"Dropped File","process":null,"filename":"SimpleSC.dll.328895541","compromised":null,"detection_total":null,"total":null},{"value":"U29mdHdhcmVcQm9ybGFuZFxMb2NhbGVz","type":"Ansi","source":"Dropped File","process":null,"filename":"SimpleSC.dll.328895541","compromised":null,"detection_total":null,"total":null},{"value":"U3RhcnRTZXJ2aWNl","type":"Ansi","source":"Dropped File","process":null,"filename":"SimpleSC.dll.328895541","compromised":null,"detection_total":null,"total":null},{"value":"U3RvcFNlcnZpY2U=","type":"Ansi","source":"Dropped File","process":null,"filename":"SimpleSC.dll.328895541","compromised":null,"detection_total":null,"total":null},{"value":"VGhpcyBwcm9ncmFtIG11c3QgYmUgcnVuIHVuZGVyIFdpbjMyJDc=","type":"Ansi","source":"Dropped File","process":null,"filename":"SimpleSC.dll.328895541","compromised":null,"detection_total":null,"total":null}]},{"name":"screen_0.png","strings":[{"value":"Xz9fX19fX18wXz9fX2xfX19fX19xX18/P19f","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_0.png","compromised":null,"detection_total":null,"total":null},{"value":"X2hsX0xZX0lf","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_0.png","compromised":null,"detection_total":null,"total":null}]},{"name":"UserInfo.dll.2533488085","strings":[{"value":"QWxsb2NhdGVBbmRJbml0aWFsaXplU2lk","type":"Ansi","source":"Dropped File","process":null,"filename":"UserInfo.dll.2533488085","compromised":null,"detection_total":null,"total":null},{"value":"Q2hlY2tUb2tlbk1lbWJlcnNoaXA=","type":"Ansi","source":"Dropped File","process":null,"filename":"UserInfo.dll.2533488085","compromised":null,"detection_total":null,"total":null},{"value":"RXF1YWxTaWQ=","type":"Ansi","source":"Dropped File","process":null,"filename":"UserInfo.dll.2533488085","compromised":null,"detection_total":null,"total":null},{"value":"R2V0QWNjb3VudFR5cGU=","type":"Ansi","source":"Dropped File","process":null,"filename":"UserInfo.dll.2533488085","compromised":null,"detection_total":null,"total":null},{"value":"R2V0Q3VycmVudFRocmVhZA==","type":"Ansi","source":"Dropped File","process":null,"filename":"UserInfo.dll.2533488085","compromised":null,"detection_total":null,"total":null},{"value":"R2V0T3JpZ2luYWxBY2NvdW50VHlwZQ==","type":"Ansi","source":"Dropped File","process":null,"filename":"UserInfo.dll.2533488085","compromised":null,"detection_total":null,"total":null},{"value":"R2V0VG9rZW5JbmZvcm1hdGlvbg==","type":"Ansi","source":"Dropped File","process":null,"filename":"UserInfo.dll.2533488085","compromised":null,"detection_total":null,"total":null},{"value":"R2V0VXNlck5hbWVB","type":"Ansi","source":"Dropped File","process":null,"filename":"UserInfo.dll.2533488085","compromised":null,"detection_total":null,"total":null},{"value":"T3BlblRocmVhZFRva2Vu","type":"Ansi","source":"Dropped File","process":null,"filename":"UserInfo.dll.2533488085","compromised":null,"detection_total":null,"total":null},{"value":"VXNlckluZm8uZGxs","type":"Ansi","source":"Dropped File","process":null,"filename":"UserInfo.dll.2533488085","compromised":null,"detection_total":null,"total":null}]},{"name":"AppUpdaterLog.txt","strings":[{"value":"QXBwVXBkYXRlclRocmVhZCBydW5uaW5n","type":"Ansi","source":"Dropped File","process":null,"filename":"AppUpdaterLog.txt","compromised":null,"detection_total":null,"total":null},{"value":"QXBwVXBkYXRlclRocmVhZCBydW5uaW5nQ3VycmVudCB2ZXJzaW9uIG9mIGFwcCBpcyA1LjQ0Q2hlY2tpbmcgdmVyc2lvbiBvbiBzZXJ2ZXIuIHVwZGF0ZWJjcy52aXN1YWx3YXJlLmNvbS9hcHB1cGRhdGVzL05ldFFDaGVja0hUTUw1QWdlbnQvd2luZG93cy92ZXJzaW9uLnR4dEh0dHBHZXQgcmV0dXJuZWQgMjAwLiBWZXJzaW9uIG9uIHNlcnZlciBpcyA1LjQ0","type":"Ansi","source":"Dropped File","process":null,"filename":"AppUpdaterLog.txt","compromised":null,"detection_total":null,"total":null},{"value":"Q3VycmVudCB2ZXJzaW9uIG9mIGFwcCBpcyA1LjQ0","type":"Ansi","source":"Dropped File","process":null,"filename":"AppUpdaterLog.txt","compromised":null,"detection_total":null,"total":null}]},{"name":"MgrLog.txt","strings":[{"value":"R2V0U2VydmljZUFyZ3NQYXRoOiBDOlxQcm9ncmFtX0ZpbGVzXyh4ODYpXFZpc3VhbHdhcmVfQkNTXFZpc3VhbHdhcmVfYXBwbGljYXRpb25fbWFuYWdlcl8tX05ldFFDaGVja0hUTUw1QWdlbnQuZXhlLmFyZw==","type":"Ansi","source":"Dropped File","process":null,"filename":"MgrLog.txt","compromised":null,"detection_total":null,"total":null},{"value":"R2V0U2VydmljZUFyZ3NQYXRoOiBDOlxQcm9ncmFtX0ZpbGVzXyh4ODYpXFZpc3VhbHdhcmVfQkNTXFZpc3VhbHdhcmVfYXBwbGljYXRpb25fbWFuYWdlcl8tX05ldFFDaGVja0hUTUw1QWdlbnQuZXhlLmFyZ0RlY29kZVNlcnZpY2VBcmdzIE9uSW5zdGFsbFNlcnZpY2UgTWFpbk5RQ0FwcE1ncjogUnVubmluZyAlUFJPR1JBTUZJTEVTJVwoeDg2KVxWaXN1YWx3YXJlIEJDU1xOZXRRQ2hlY2tIVE1MNUFnZW50LmV4ZUM6XFByb2dyYW0gRmlsZXMgKHg4NilcVmlzdWFsd2FyZSBCQ1NcTmV0UUNoZWNrSFRNTDVBZ2VudC5leGUgc3VjY2Vzc2Z1bGx5IHN0YXJ0ZWQ=","type":"Ansi","source":"Dropped File","process":null,"filename":"MgrLog.txt","compromised":null,"detection_total":null,"total":null}]},{"name":"log.txt","strings":[{"value":"U3RhcnRpbmcgV2Vic29ja2V0IFNlcnZlciBvbiBwb3J0IDMyNjU4U3RhcnRTb2Z0d2FyZUFnZW50QkNTIFZlcnNpb24gNS40NFdlYlNlcnZlciBhY3RpdmUgb24gcG9ydCAzMjY1OFdlYlNlcnZlciBhY3RpdmUgb24gcG9ydCAzMjY2MEhUVFAgc2VydmVyIHJ1bm5pbmcgT0s=","type":"Ansi","source":"Dropped File","process":null,"filename":"log.txt","compromised":null,"detection_total":null,"total":null}]}],"image":[]},"http_requests":[{"host":"updatebcs.visualware.com","host_ip":"38.100.141.76:80","url":"/appupdates/NetQCheckHTML5Agent/windows/version.txt","method":"GET","response_code":null,"response_file_type_tags":[],"response_file_size":null,"response_file_exists":false,"response_file_download_link":null,"response_file_submit_link":null,"response_phrase":null,"response_header":null,"header":"GET /appupdates/NetQCheckHTML5Agent/windows/version.txt HTTP/1.1\nAccept: */*\nAccept-Language: en-us\nUser-Agent: Mozilla/4.0\nHost: updatebcs.visualware.com","hex":"$3b"}],"ftp_requests":[],"irc_requests":[],"strings_resources":["192.168.0.1","192.168.0.98","255.255.255.0","255.255.255.255","4.16.214.16","C:\\Users\\Nigel\\Documents\\Visualware\\NetQCheck\\WindowsDesktop\\NQCAppMgr\\Release\\NQCAppMgr.pdb","http://mcssjc.visualware.com","http://nsis.sf.net","http://nsis.sf.net/nsis_error","http://updatebcs.visualware.com","http://updatebcs.visualware.com/appupdates/netqcheckhtml5agent/windows/version.txt","http://www.myconnectionserver.com/support/v9/bcs.html","http://www.visualware.com","http://www.visualware.com/bcs/support.html","http://www.visualware.com/bcs/support/bind_error.html","http://www.visualware.com/bcs/support/ec_501.html","http://www.visualware.com/bcs/support/ec_502.html","http://www.visualware.com/bcs/support/ec_503.html","http://www.visualware.com/bcs/support/ec_511.html","http://www.visualware.com/bcs/support/ec_515.html","https://www.openssl.org/docs/faq.html"],"tags_details":[],"sample_flags":["Multi-Process","Network Traffic","Extracted Files","TOR analysis"],"suricata_alerts":[],"version_info":[],"apk_info":null,"apps_info":[{"name":"Access","product":null,"version":null},{"name":"Acrobat Reader","product":"Adobe Acrobat Reader DC","version":"18.9.20050.254034"},{"name":"Chrome","product":null,"version":null},{"name":"Excel","product":"Microsoft Office 2010","version":"14.0.4756.1000"},{"name":"Firefox","product":"Firefox","version":"57.0.1"},{"name":"Flash","product":"Shockwave Flash","version":"27,0,0,187"},{"name":"Hancom Office Hancell","product":null,"version":null},{"name":"Internet Explorer","product":"Internet Explorer","version":"11.00.9600.16428"},{"name":"Java","product":"Java(TM) Platform SE 8","version":"8.0.1510.12"},{"name":"OneNote","product":"Microsoft OneNote","version":"14.0.4763.1000"},{"name":"PowerPoint","product":"Microsoft Office 2010","version":"14.0.4754.1000"},{"name":"Word","product":"Microsoft Office 2010","version":"14.0.4762.1000"}],"architecture":"32 Bit","document":{"author":null,"creator":null,"producer":null,"title":null,"subject":null,"pages":0},"packer":null,"file_imports":[{"module":"ADVAPI32.dll","functions":["AdjustTokenPrivileges","LookupPrivilegeValueA","OpenProcessToken","RegCloseKey","RegCreateKeyExA","RegDeleteKeyA","RegDeleteValueA","RegEnumKeyA","RegEnumValueA","RegOpenKeyExA","RegQueryValueExA","RegSetValueExA","SetFileSecurityA"]},{"module":"COMCTL32.dll","functions":["ImageList_AddMasked","ImageList_Create","ImageList_Destroy"]},{"module":"GDI32.dll","functions":["CreateBrushIndirect","CreateFontIndirectA","DeleteObject","GetDeviceCaps","SelectObject","SetBkColor","SetBkMode","SetTextColor"]},{"module":"KERNEL32.dll","functions":["CloseHandle","CompareFileTime","CopyFileA","CreateDirectoryA","CreateFileA","CreateProcessA","CreateThread","DeleteFileA","ExitProcess","ExpandEnvironmentStringsA","FindClose","FindFirstFileA","FindNextFileA","FreeLibrary","GetCommandLineA","GetCurrentProcess","GetDiskFreeSpaceA","GetExitCodeProcess","GetFileAttributesA","GetFileSize","GetFullPathNameA","GetLastError","GetModuleFileNameA","GetModuleHandleA","GetPrivateProfileStringA","GetProcAddress","GetShortPathNameA","GetSystemDirectoryA","GetTempFileNameA","GetTempPathA","GetTickCount","GetVersion","GetWindowsDirectoryA","GlobalAlloc","GlobalFree","GlobalLock","GlobalUnlock","LoadLibraryExA","lstrcatA","lstrcmpA","lstrcmpiA","lstrcpyA","lstrcpynA","lstrlenA","MoveFileA","MoveFileExA","MulDiv","MultiByteToWideChar","ReadFile","RemoveDirectoryA","SearchPathA","SetCurrentDirectoryA","SetEnvironmentVariableA","SetErrorMode","SetFileAttributesA","SetFilePointer","SetFileTime","Sleep","WaitForSingleObject","WriteFile","WritePrivateProfileStringA"]},{"module":"ole32.dll","functions":["CoCreateInstance","CoTaskMemFree","OleInitialize","OleUninitialize"]},{"module":"SHELL32.dll","functions":["SHBrowseForFolderA","ShellExecuteA","SHFileOperationA","SHGetFileInfoA","SHGetPathFromIDListA","SHGetSpecialFolderLocation"]},{"module":"USER32.dll","functions":["AppendMenuA","BeginPaint","CallWindowProcA","CharNextA","CharPrevA","CheckDlgButton","CloseClipboard","CreateDialogParamA","CreatePopupMenu","CreateWindowExA","DefWindowProcA","DestroyWindow","DialogBoxParamA","DispatchMessageA","DrawTextA","EmptyClipboard","EnableMenuItem","EnableWindow","EndDialog","EndPaint","ExitWindowsEx","FillRect","FindWindowExA","GetClassInfoA","GetClientRect","GetDC","GetDlgItem","GetDlgItemTextA","GetMessagePos","GetSysColor","GetSystemMenu","GetSystemMetrics","GetWindowLongA","GetWindowRect","InvalidateRect","IsWindow","IsWindowEnabled","IsWindowVisible","LoadBitmapA","LoadCursorA","LoadImageA","MessageBoxIndirectA","OpenClipboard","PeekMessageA","PostQuitMessage","RegisterClassA","ReleaseDC","ScreenToClient","SendMessageA","SendMessageTimeoutA","SetClassLongA","SetClipboardData","SetCursor","SetDlgItemTextA","SetForegroundWindow","SetTimer","SetWindowLongA","SetWindowPos","SetWindowTextA","ShowWindow","SystemParametersInfoA","TrackPopupMenu","wsprintfA"]}],"osint_tags":[],"osint_references":[],"memory_forensics":[{"value":"192.168.0.1","stream_uid":"00034916-00002588-4946-4248-00F8C6A0","stream_modal_data_link":"/bff/report/5c928014038838ca2336b70d/processes/00034791-00001664/streams/0/00034916-00002588-4946-4248-00F8C6A0?childUid=00034916-00002588"},{"value":"192.168.0.98","stream_uid":"00034916-00002588-4946-4248-00F8C6A0","stream_modal_data_link":"/bff/report/5c928014038838ca2336b70d/processes/00034791-00001664/streams/0/00034916-00002588-4946-4248-00F8C6A0?childUid=00034916-00002588"},{"value":"255.255.255.0","stream_uid":"00034916-00002588-4946-4248-00F8C6A0","stream_modal_data_link":"/bff/report/5c928014038838ca2336b70d/processes/00034791-00001664/streams/0/00034916-00002588-4946-4248-00F8C6A0?childUid=00034916-00002588"},{"value":"255.255.255.255","stream_uid":"00034916-00002588-4946-4763-00F814C0","stream_modal_data_link":"/bff/report/5c928014038838ca2336b70d/processes/00034791-00001664/streams/0/00034916-00002588-4946-4763-00F814C0?childUid=00034916-00002588"},{"value":"http://nsis.sf.net/nsis_error","stream_uid":"00034508-00002748-48436-65-00402C66","stream_modal_data_link":"/bff/report/5c928014038838ca2336b70d/processes/00034508-00002748/streams/0/00034508-00002748-48436-65-00402C66"},{"value":"https://www.openssl.org/docs/faq.html","stream_uid":"00034916-00002588-4946-2464-00FFE110","stream_modal_data_link":"/bff/report/5c928014038838ca2336b70d/processes/00034791-00001664/streams/0/00034916-00002588-4946-2464-00FFE110?childUid=00034916-00002588"},{"value":"detail.ms","stream_uid":"00034916-00002588-4946-4547-00F8E7A0","stream_modal_data_link":"/bff/report/5c928014038838ca2336b70d/processes/00034791-00001664/streams/0/00034916-00002588-4946-4547-00F8E7A0?childUid=00034916-00002588"}],"language":"ENGLISH","authentihash":"ec560cbcb8f589ab9c964c86df05edffeabf114b8c7e28bad645b98ffbd2840b","entrypoint_bytes":null,"pdb_timestamp":null,"pdb_pathway":null,"pdb_guid":null,"file_sections":[{"name":".text","entropy":6.49969750701,"virtual_address":"0x1000","virtual_size":"0x5fdd","raw_size":"0x6000","md5":"38462d04cfdbc4943d18be461d53cc3e","characteristics":[]},{"name":".rdata","entropy":5.20753899343,"virtual_address":"0x7000","virtual_size":"0x1352","raw_size":"0x1400","md5":"3d134ae5961af9895950a7ee0adc520a","characteristics":[]},{"name":".data","entropy":4.03235059384,"virtual_address":"0x9000","virtual_size":"0x254f8","raw_size":"0x600","md5":"2d00401e0c64d69b6d0ccb877d9f624e","characteristics":[]},{"name":".ndata","entropy":0,"virtual_address":"0x2f000","virtual_size":"0xe000","raw_size":"0x0","md5":"d41d8cd98f00b204e9800998ecf8427e","characteristics":[]},{"name":".rsrc","entropy":2.72523283577,"virtual_address":"0x3d000","virtual_size":"0x4b908","raw_size":"0x4ba00","md5":"70c3523a85009f18b0d2d8872f9bf26c","characteristics":[]}],"file_exports":[],"error":null,"yara_hits":[],"intelligence_mitre_mappings":[],"entrypoint_preview_count":0,"entrypoint_preview_instructions":[],"file_resources":[{"name":"RT_ICON","rva":"0x3d310","size":"0x25228","type":"dBase IV DBT of \\200\\001.DBF, blocks size 0, block length 16384, next free block index 40, next free block 0, next used block 0","language":"english"},{"name":"RT_ICON","rva":"0x62538","size":"0x10828","type":"dBase III DBT, version number 0, next free block index 40","language":"english"},{"name":"RT_ICON","rva":"0x72d60","size":"0x94a8","type":"dBase IV DBT of \\300.DBF, block length 36864, next free block index 40, next free block 0, next used block 0","language":"english"},{"name":"RT_ICON","rva":"0x7c208","size":"0x4228","type":"dBase IV DBT of \\200.DBF, blocks size 0, block length 16384, next free block index 40, next free block 0, next used block 0","language":"english"},{"name":"RT_ICON","rva":"0x80430","size":"0x37f7","type":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","language":"english"},{"name":"RT_ICON","rva":"0x83c28","size":"0x25a8","type":"dBase IV DBT of `.DBF, block length 9216, next free block index 40, next free block 0, next used block 0","language":"english"},{"name":"RT_ICON","rva":"0x861d0","size":"0x10a8","type":"dBase IV DBT of @.DBF, block length 4096, next free block index 40, next free block 0, next used block 0","language":"english"},{"name":"RT_ICON","rva":"0x87278","size":"0x988","type":"data","language":"english"},{"name":"RT_ICON","rva":"0x87c00","size":"0x468","type":"GLS_BINARY_LSB_FIRST","language":"english"},{"name":"RT_DIALOG","rva":"0x88068","size":"0x200","type":"data","language":"english"},{"name":"RT_DIALOG","rva":"0x88268","size":"0xf8","type":"data","language":"english"},{"name":"RT_DIALOG","rva":"0x88360","size":"0xee","type":"data","language":"english"},{"name":"RT_GROUP_ICON","rva":"0x88450","size":"0x84","type":"MS Windows icon resource - 9 icons, 16x16","language":"english"},{"name":"RT_MANIFEST","rva":"0x884d8","size":"0x429","type":"XML 1.0 document, ASCII text, with very long lines, with no line terminators","language":"english"}],"file_permissions":[],"file_activities":[],"file_receivers":[],"file_data_directories":[],"elf_headers":[],"elf_static_symbols":null,"vba_macros":[],"verdict_source":null,"user_comments":[],"email_headers":null,"classification_tags":[],"tags":[],"submissions":[{"submission_id":"5e45804819d8d156bf0962a5","filename":"bcs_service.exe","url":null,"created_at":"2020-02-13T16:58:48+00:00"},{"submission_id":"5caf3a94028838ff40973e14","filename":"bcs_service.exe","url":null,"created_at":"2019-04-11T13:01:08+00:00"},{"submission_id":"5caee4860288381425973dec","filename":"bcs_service.exe","url":null,"created_at":"2019-04-11T06:53:58+00:00"},{"submission_id":"5cae2085038838db0588e61e","filename":"bcs_service.exe","url":null,"created_at":"2019-04-10T16:57:41+00:00"},{"submission_id":"5ca339680388389c84ca5a20","filename":"bcs_service.exe","url":null,"created_at":"2019-04-02T10:28:56+00:00"},{"submission_id":"5c928014038838ca2336b70c","filename":"bcs_service.exe","url":null,"created_at":"2019-03-20T18:01:56+00:00"}],"crowdstrike_ai":{"executable_process_memory_analysis":[],"analysis_related_urls":[]},"warnings":["Network whitenoise filtering (Process) was applied","Not all IP/URL string resources were checked online"],"report_related_files":{"report_json":{"file_name":"report.json","download_url":"/bff/report/5c928014038838ca2336b70d/download/files/report_json","file_size":3011879},"memory_strings":{"file_name":"mstrings.zip","download_url":"/bff/report/5c928014038838ca2336b70d/download/files/memory_strings","file_size":17957},"certificate":{"file_name":"certificate.crt","download_url":"/bff/report/5c928014038838ca2336b70d/download/files/certificate","file_size":6336},"network_pcap":{"file_name":"network.pcap","download_url":"/bff/report/5c928014038838ca2336b70d/download/files/network_pcap","file_size":5739},"memory_dumps":null},"system_resource_monitor":{"cpu_usage":[{"x":0,"y":56.0938},{"x":1,"y":16.0648},{"x":2,"y":81.8982},{"x":3,"y":50.1652},{"x":4,"y":98.51},{"x":5,"y":98.5492},{"x":7,"y":98.5166},{"x":8,"y":98.4724},{"x":10,"y":98.5401},{"x":11,"y":98.3024},{"x":13,"y":98.4133}],"memory_usage":[{"x":0,"y":19.9608},{"x":1,"y":19.9795},{"x":2,"y":19.8947},{"x":3,"y":19.9259},{"x":4,"y":19.7367},{"x":5,"y":20.7676},{"x":6,"y":20.5205},{"x":7,"y":20.8726},{"x":8,"y":20.7863},{"x":9,"y":20.77},{"x":10,"y":20.8308}],"disk_read":[{"x":0,"y":1998700},{"x":1,"y":1871470},{"x":2,"y":279141},{"x":3,"y":202745},{"x":4,"y":512231},{"x":5,"y":149435},{"x":6,"y":95753.1},{"x":7,"y":371214},{"x":8,"y":17887},{"x":9,"y":55437.2},{"x":10,"y":96007.1}],"disk_write":[{"x":0,"y":5342750},{"x":1,"y":5282180},{"x":2,"y":1297970},{"x":3,"y":514687},{"x":4,"y":1334630},{"x":5,"y":744826},{"x":6,"y":244106},{"x":7,"y":1084910},{"x":8,"y":162660},{"x":9,"y":265416},{"x":10,"y":374265}],"network_packets":[{"x":0,"y":12.6958},{"x":1,"y":3.78429},{"x":2,"y":0.896707},{"x":3,"y":17.0263},{"x":4,"y":9.58899},{"x":5,"y":2.19297},{"x":6,"y":6.18405},{"x":7,"y":22.264},{"x":8,"y":2.18347},{"x":9,"y":11.6436},{"x":10,"y":6.95231}],"page_file":[{"x":0,"y":309629000},{"x":1,"y":308916000},{"x":2,"y":306672000},{"x":3,"y":306737000},{"x":4,"y":299762000},{"x":5,"y":299250000},{"x":6,"y":292749000},{"x":7,"y":294445000},{"x":8,"y":291758000},{"x":9,"y":291537000},{"x":10,"y":293065000}]},"external_reports":null,"available_buttons":{"report_false_positive":false},"hashes_to_context_check":["563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334","df4fd14255354524cb96f3cb12b73623063eb55da3e486c3ca44ae8f9433d0f0","1a5e9fa5350cc221ac0c10653062468d8b8ed229d3fb0cf3ed407a096241811e","0a81d737877d13736301d894c7e7ca512f0fb2adf83a211d3dbb2af9b5482717","f3448723722c30db499c1cefa02008dd6486a9372919ac08d6a27465d5607841","e0c580bbe48a483075c21277c6e0f23f3cbd6ce3eb2ccd3bf48cf68f05628f43","77b40d42606d48f817b901f1e5abea114b4288b344b8c193bf3e3c52e469a926","3e3d516d4f28948a474704d5dc9907dbe39e3b3f98e7299f536337278c59c5c9","615106efa1da7a0111c5466f9c2f9eb9e3df0e062ae206fc4e9d5eb17fdd6b93","d69c0a1e3193a537a1cf4fec0c2462b40b45e432d39e4059155095393a581dfe","cf004d7d50ec6699933ea3c9c84d8ab57cc907867a03d60309c17604b9f93c78","6bfe68e0f180c942d121ab35a17b0b671ef219ebc34d95e2f68dac000e94fb9c","4b02a0edde9a8879cce95df8a577c2d0d5e9d8eba2f3a4dd7c73f9925177d336","cd7e3ed554384c2fd9e3a16b0f8ae145419598dd7780e8f7db3fd873cb649afe"]}}]]}] 20:null 24:[["$","title","0",{"children":"Clean Trojan.DOMG — Falcon Sandbox Report — Score 100/100 — Sample 563bbf8d20ba… | Hybrid Analysis"}],["$","meta","1",{"name":"description","content":"Clean verdict for sandbox report 5c9280140388…. Malware family: Trojan.DOMG. Threat score 100/100. 5 malicious and 22 suspicious behavioral indicators across 69 signatures. Detonated in Windows 7 64 bit. View behavioral indicators, network activity, dropped files, and MITRE ATT&CK mappings."}],["$","meta","2",{"name":"robots","content":"index, follow"}],["$","link","3",{"rel":"canonical","href":"https://www.hybrid-analysis.com/sample/563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334/5c928014038838ca2336b70d"}],["$","meta","4",{"property":"og:title","content":"Clean Trojan.DOMG — Falcon Sandbox Report — Score 100/100 — Sample 563bbf8d20ba… | Hybrid Analysis"}],["$","meta","5",{"property":"og:description","content":"Clean verdict for sandbox report 5c9280140388…. Malware family: Trojan.DOMG. Threat score 100/100. 5 malicious and 22 suspicious behavioral indicators across 69 signatures. Detonated in Windows 7 64 bit. View behavioral indicators, network activity, dropped files, and MITRE ATT&CK mappings."}],["$","meta","6",{"property":"og:url","content":"https://www.hybrid-analysis.com/sample/563bbf8d20ba1e746d5b7bf8112a6f35113d9a1513cb15882973e92188d59334/5c928014038838ca2336b70d"}],["$","meta","7",{"name":"twitter:card","content":"summary"}],["$","meta","8",{"name":"twitter:title","content":"Clean Trojan.DOMG — Falcon Sandbox Report — Score 100/100 — Sample 563bbf8d20ba… | Hybrid Analysis"}],["$","meta","9",{"name":"twitter:description","content":"Clean verdict for sandbox report 5c9280140388…. Malware family: Trojan.DOMG. Threat score 100/100. 5 malicious and 22 suspicious behavioral indicators across 69 signatures. Detonated in Windows 7 64 bit. View behavioral indicators, network activity, dropped files, and MITRE ATT&CK mappings."}],["$","link","10",{"rel":"icon","href":"/favicon.svg"}],["$","$L3c","11",{}]]