How_To_Decrypt_My_File

26:I[10321,["/_next/static/chunks/1nkjstpmp978x.js","/_next/static/chunks/2ysmnrb0knc4n.js","/_next/static/chunks/0i2jherxtxs7l.js","/_next/static/chunks/23qlsjvno4-wq.js","/_next/static/chunks/11pkz44bx8x1b.js","/_next/static/chunks/04k_7k5p4krw4.js"],"ReportDetailWrapper"] 6f:I[27201,["/_next/static/chunks/1nkjstpmp978x.js","/_next/static/chunks/2ysmnrb0knc4n.js","/_next/static/chunks/0i2jherxtxs7l.js"],"IconMark"] 25:T4c9,{"@context":"https://schema.org","@type":"TechArticle","headline":"Malicious — Falcon Sandbox Report 65b2a614f3c3… — Score 100/100 — Sample 79468940d42d…","description":"Malicious verdict for sandbox report 65b2a614f3c3…. Threat score 100/100. 17 malicious and 12 suspicious behavioral indicators across 231 signatures. Detonated in Windows 10 64 bit. View behavioral indicators, network activity, dropped files, and MITRE ATT\u0026CK mappings.","url":"/sample/79468940d42d217a815eca555b9d2efe72b4f2a53e47d29076c3adde5eb9c5af/65b2a614f3c39a991a0e484e","keywords":["Malicious","sandbox report","malware analysis","MITRE ATT\u0026CK","79468940d42d217a815eca555b9d2efe72b4f2a53e47d29076c3adde5eb9c5af"],"about":{"@type":"SoftwareApplication","name":"794.bin","applicationCategory":"PE32+ executable (console) x86-64 (stripped to external PDB), for MS Windows","identifier":"79468940d42d217a815eca555b9d2efe72b4f2a53e47d29076c3adde5eb9c5af","additionalType":"Malicious sample"},"threatScore":100,"sandboxEnvironment":"Windows 10 64 bit","behavioralIndicators":{"malicious":17,"suspicious":12,"totalSignatures":231},"publisher":{"@type":"Organization","name":"Hybrid Analysis","url":"https://www.hybrid-analysis.com"}}27:T8f2,Found string "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_bytes.Buffer: reader returned negative count from Read" (Indicator: "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+"; Source: "00000000-00006160.00000000.68598.00000000.00000004.mdmp") Found string "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_bytes.Buffer: reader returned negative count from Read" (Indicator: "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"; Source: "00000000-00006160.00000000.68598.00000000.00000004.mdmp") Found string "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_bytes.Buffer: reader returned negative count from Read" (Indicator: "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-"; Source: "00000000-00006160.00000000.68598.00000000.00000004.mdmp") Found string "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_bytes.Buffer: reader returned negative count from Read" (Indicator: "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_"; Source: "00000000-00006160.00000000.68598.00000000.00000004.mdmp") Found string "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/" (Indicator: "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+"; Source: "00000000-00006160.00000000.68598.00000000.00000004.mdmp") Found string "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/" (Indicator: "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"; Source: "00000000-00006160.00000000.68598.00000000.00000004.mdmp") Found string "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_" (Indicator: "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-"; Source: "00000000-00006160.00000000.68598.00000000.00000004.mdmp") Found string "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_" (Indicator: "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_"; Source: "00000000-00006160.00000000.68598.00000000.00000004.mdmp")28:T10a6," How_To_Decrypt_My_File_

English Chinese

The price depends on the speed at which you write to us . After payment , we will send you a decryption tool and assist you in decrypting all files

Mail address !

Free decryption test as guarantee !

Integrity is our principle
Before making the payment , you can send us a test file to prove that we are capable of recovering your data

Attention !

Decryption of your files with the help of third parties may cause increased price
Do not try to decrypt your data using third party software , it may cause permanent data loss
Please do not (edit, delete, rename) any files , otherwise it cannot be restored

é®ä»¶å°å !

åè´¹è§£å¯æµè¯ä½ä¸ºä¿è¯ !

è¯ä¿¡æ¯æä»¬çåå
å¨ä»æ¬¾ä¹å , ä½ å¯ä»¥åæä»¬åéæµè¯æä»¶ä»¥è¯ææä»¬æè½åæ¢å¤ä½ çæ°æ®

æ³¨æ !

è¯·å¿å°è¯ä½¿ç¨ç¬¬ä¸æ¹è½¯ä»¶è§£å¯ä½ çæ°æ® , è¿å¯è½ä¼å¯¼è´æ°æ®æ°¸ä¹ä¸¢å¤±
è¯·ä¸è¦ (ç¼è¾, å é¤, éå½å) ä»»ä½æä»¶ , å¦åæ æ³æ¢å¤æä»¶

dizI/y2N5Q4ynd9Y

1d:["$","$L2",null,{"children":[["$","script",null,{"type":"application/ld+json","dangerouslySetInnerHTML":{"__html":"$25"}}],["$","$L26",null,{"initialData":{"job_id":"65b2a614f3c39a991a0e484e","environment_id":160,"environment_description":"Windows 10 64 bit","size":1837568,"type":"PE32+ executable (console) x86-64 (stripped to external PDB), for MS Windows","type_short":["peexe","64bits","executable"],"type_short_id":"64-bit exe","target_url":null,"state":"SUCCESS","error_type":null,"error_origin":null,"submit_name":"794.bin","md5":"d156711735a2fb0992440a2cd0a19138","sha1":"c8c9645ae15012eb25e83841d87a3ac6c16344aa","sha256":"79468940d42d217a815eca555b9d2efe72b4f2a53e47d29076c3adde5eb9c5af","sha512":"4d10a6a0c77e9bb5feba5a110da54e21ec201cbed7002b9a58a61087b0986e960fa7ba233bc111151ce8c145d2851720678923ee6306b35c169a8dd4bacf273c","ssdeep":"49152:2NA8O1U5YwSTTEVOCT316+f0RbnRM13qE83q7rjjY/qg4wG:21dYNOOSE+f0RzRMdc3Afjtv","imphash":"9aebf3da4677af9275c461261e5abde3","entrypoint":"0x1405840e0","entrypoint_section":"UPX1","image_base":"0x140000000","subsystem":"Windows Cui","image_file_characteristics":["LOCAL_SYMS_STRIPPED","EXECUTABLE_IMAGE","LARGE_ADDRESS_AWARE","DEBUG_STRIPPED","LINE_NUMS_STRIPPED"],"dll_characteristics":["TERMINAL_SERVER_AWARE","DYNAMIC_BASE","NX_COMPAT","HIGH_ENTROPY_VA"],"major_os_version":"6","minor_os_version":"1","av_detect":null,"vx_family":null,"url_analysis":false,"analysis_start_time":"2024-01-25T18:19:01+00:00","threat_score":100,"interesting":false,"threat_level":2,"verdict":"malicious","certificates":[],"is_certificates_valid":false,"certificates_validation_message":"No signature was present in the subject. (0x800b0100)","domains":[],"compromised_hosts":[],"hosts":[],"total_network_connections":0,"total_processes":18,"total_signatures":231,"extracted_files":[{"name":"lockxx.recovery_data.hta","file_path":"%ALLUSERSPROFILE%\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=f31a5357c9efec4f5b172f689ee9dedfe6a11ac9b24e3164f02e0e41bdfed43c94ac3045a5f5e338bc355e83fc6f21fd4136a9fa65e285a8c130a8afa0dd25876436ec983fc4b164aa970107b251b5f8b284","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=f31a5357c9efec4f5b172f689ee9dedfe6a11ac9b24e3164f02e0e41bdfed43c94ac3045a5f5e338bc355e83fc6f21fd4136a9fa65e285a8c130a8afa0dd25876436ec983fc4b164aa970107b251b5f8b284","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\KMSpico\\TokensBackup\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=8d3147bb749187a710554dc23b264f904b6f6cef6a9071fe9edff78605c32e78c7c21d7d4de9217c8665fb4c3c192e67c431fc4db6a1eea7fc20b73745cc51881f3f9d1acd01638bcbd80893488489f3f89a65","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=8d3147bb749187a710554dc23b264f904b6f6cef6a9071fe9edff78605c32e78c7c21d7d4de9217c8665fb4c3c192e67c431fc4db6a1eea7fc20b73745cc51881f3f9d1acd01638bcbd80893488489f3f89a65","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\KMSpico\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=2ba28bf3c6e3b36aa4774b1a62c76c35ae20e6247eba668ce01489dc1e1d6567bf52adbd423821f2050053da8c40fcb2fd032d26598564b69d62779d1b17c3741e719483f57562f5351232a9071d3100da625d","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=2ba28bf3c6e3b36aa4774b1a62c76c35ae20e6247eba668ce01489dc1e1d6567bf52adbd423821f2050053da8c40fcb2fd032d26598564b69d62779d1b17c3741e719483f57562f5351232a9071d3100da625d","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\Microsoft Analysis Services\\AS OLEDB\\10\\Cartridges\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=efce106a8b967e29274ecb33ea360afe16c044b91035c552db3901d749fb3f664d21c4030f2824552e9a117a6e81e4040fb45627006e522b337e52f7ee99b8ad07d5dea245256aa2778d1f6244f169a93ff964","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=efce106a8b967e29274ecb33ea360afe16c044b91035c552db3901d749fb3f664d21c4030f2824552e9a117a6e81e4040fb45627006e522b337e52f7ee99b8ad07d5dea245256aa2778d1f6244f169a93ff964","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\1033\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=dfa75e29649ae847546948fbea5d544e77d6d02d581ddea8e7f3e6b89746fa775639fff5c6d741005e8cf00ef02dac570898c3e6aa02b5c591de4c7d18f081c7e43c82225f5d412bceb4b9c9caa6dff61998","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=dfa75e29649ae847546948fbea5d544e77d6d02d581ddea8e7f3e6b89746fa775639fff5c6d741005e8cf00ef02dac570898c3e6aa02b5c591de4c7d18f081c7e43c82225f5d412bceb4b9c9caa6dff61998","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\Microsoft Analysis Services\\AS OLEDB\\10\\Resources\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=77bcf9b445ad4113c7b5746eb13f0b5a3808d689c52ead7f81e749f4a3d4806f1610e34b18a394cbf32701f2f828cbc5227855d3f0d2dd980c39044b075f692d3c4a4950f992bb040b1955535a93614b7f79be","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=77bcf9b445ad4113c7b5746eb13f0b5a3808d689c52ead7f81e749f4a3d4806f1610e34b18a394cbf32701f2f828cbc5227855d3f0d2dd980c39044b075f692d3c4a4950f992bb040b1955535a93614b7f79be","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\Microsoft Analysis Services\\AS OLEDB\\10\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=3d2592a786b64f4d486b24493e78c3a271dbdccd489800a642647535937cdfb360d11fe4fd919533394b07c15e21452ca9b4e17c1ad3de431dd3b112344cff9553ac40e8fa4a9528bc71f45a004a01963b46f0","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=3d2592a786b64f4d486b24493e78c3a271dbdccd489800a642647535937cdfb360d11fe4fd919533394b07c15e21452ca9b4e17c1ad3de431dd3b112344cff9553ac40e8fa4a9528bc71f45a004a01963b46f0","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\Microsoft Analysis Services\\AS OLEDB\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=ba6ab3d85a15fe646ad6b79f6770a7f74732f4b16e087eb0feca490f4ac3f8cef4fbf3bcbd8673e98cd8882de2454e17a509d84f0ad85291de4a719bab00a42e5be59090a4440928d9937d426aab8789e10f21","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=ba6ab3d85a15fe646ad6b79f6770a7f74732f4b16e087eb0feca490f4ac3f8cef4fbf3bcbd8673e98cd8882de2454e17a509d84f0ad85291de4a719bab00a42e5be59090a4440928d9937d426aab8789e10f21","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\Microsoft Analysis Services\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=bccba45ba0decf97d6525afc3e7254baf89e784db6f807779048a2357c6d3362ceaf86cdc77e1a34c8a00b5374fd0fc92d0bba239005789bc5645b24a5fd6d848acd73f730ccac1aee92afc71ccde3b5650986","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=bccba45ba0decf97d6525afc3e7254baf89e784db6f807779048a2357c6d3362ceaf86cdc77e1a34c8a00b5374fd0fc92d0bba239005789bc5645b24a5fd6d848acd73f730ccac1aee92afc71ccde3b5650986","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\Microsoft Office\\CLIPART\\PUB60COR\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=eed7d23af9047221c8788bce3fa12819f58db96f943a46516374334ddece53299478ee76be444379ef8259be7f008b5191eb6eb9951638776266df8b62d845ef0268120040604c1d0133ca454b6a3b8b55f7d9","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=eed7d23af9047221c8788bce3fa12819f58db96f943a46516374334ddece53299478ee76be444379ef8259be7f008b5191eb6eb9951638776266df8b62d845ef0268120040604c1d0133ca454b6a3b8b55f7d9","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\Microsoft Office\\CLIPART\\Publisher\\Backgrounds\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=caf8498a3314ff03e0e828404974f2c5caa238fcabf3ac208532d8334d876f2ea39d829b950122803ce3ae692fbb2a42273d2c2f27e5bf9e8964fb83133e7c233afabfdc359be35c7b837a436f920f055a7cec","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=caf8498a3314ff03e0e828404974f2c5caa238fcabf3ac208532d8334d876f2ea39d829b950122803ce3ae692fbb2a42273d2c2f27e5bf9e8964fb83133e7c233afabfdc359be35c7b837a436f920f055a7cec","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\Microsoft Office\\CLIPART\\Publisher\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=c92a0d8d379e14caa4998eb4ed2c2e6408835bcc29d7fd07c8d1b93ebf21f253dad784c3bec8197b37f639d8a2f3c8b83281d3fcc5d96c542f1900e8354cf652fcce6e09fd0f02c5294be11ab193a5124dc440","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=c92a0d8d379e14caa4998eb4ed2c2e6408835bcc29d7fd07c8d1b93ebf21f253dad784c3bec8197b37f639d8a2f3c8b83281d3fcc5d96c542f1900e8354cf652fcce6e09fd0f02c5294be11ab193a5124dc440","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\Microsoft Office\\CLIPART\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=757e1e623d7a67c57faa04ae02025bdbc957232bd95963fc5fa9e1e085453f9b0f359e0823495a23f5c7794304edcf4ce0ddfcc493d24de3ee0f708d77903c6666f060bb0054b5128aad64cc6aa36cbb9d53","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=757e1e623d7a67c57faa04ae02025bdbc957232bd95963fc5fa9e1e085453f9b0f359e0823495a23f5c7794304edcf4ce0ddfcc493d24de3ee0f708d77903c6666f060bb0054b5128aad64cc6aa36cbb9d53","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\Microsoft Office\\Document Themes 14\\Theme Colors\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=80bd8101a6652e4664c68a02e31316d2d3c68b56216499b60eb79410856c9653234214081c1f0de02ed05a36053ed3a7df4303ede86ad1cbfbb57114ca3d428f669e629d74d7521abbde105ea24fbb926ea7d8","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=80bd8101a6652e4664c68a02e31316d2d3c68b56216499b60eb79410856c9653234214081c1f0de02ed05a36053ed3a7df4303ede86ad1cbfbb57114ca3d428f669e629d74d7521abbde105ea24fbb926ea7d8","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\Microsoft Office\\Document Themes 14\\Theme Effects\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=09603fa9f12a440cacf92e71eee4eaf992565e14dba6fe47a57373f574b400e8164f132eebe08a7c6c29068bef9cfc5254ce808284230678d2ab08bd600c6a1d241cd87dc018eb23788f7d8b468f85a0bf2b","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=09603fa9f12a440cacf92e71eee4eaf992565e14dba6fe47a57373f574b400e8164f132eebe08a7c6c29068bef9cfc5254ce808284230678d2ab08bd600c6a1d241cd87dc018eb23788f7d8b468f85a0bf2b","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\Microsoft Office\\Document Themes 14\\Theme Fonts\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=be4b48efdd0df67bb57ed541cf7e887583e6b82957707e9566c30f093808c8d270c6969cd61644225f034e7c20cf7840d7c19c585d95bdfcc4b031ab3a9ee418a3c0f8cbc75ae4b06e29d99287d99e9894d91a","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=be4b48efdd0df67bb57ed541cf7e887583e6b82957707e9566c30f093808c8d270c6969cd61644225f034e7c20cf7840d7c19c585d95bdfcc4b031ab3a9ee418a3c0f8cbc75ae4b06e29d99287d99e9894d91a","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\Microsoft Office\\Document Themes 14\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=b92c67b406beea90dc055d635b1ae66cb72862f2f232aaf08bc83b5c517b2c6cd479ca14b2baec6899f4c376bb038c502cb970e8bb5bd7d6fc13a088afcb34b6003989858c7867feb23a523548ee78de522351","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=b92c67b406beea90dc055d635b1ae66cb72862f2f232aaf08bc83b5c517b2c6cd479ca14b2baec6899f4c376bb038c502cb970e8bb5bd7d6fc13a088afcb34b6003989858c7867feb23a523548ee78de522351","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\Microsoft Office\\MEDIA\\CAGCAT10\\1033\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=869e94841be4857246065db9c532cff85e757e37a3a2d5204410d8e37394a601eec6f44ef747ca768ebc79a7c1f908b520d1ca6acbc3a9cf6a31635342ae50cba6de3f7bc6e253cf1c1be3fcc3e98cebd0fd","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=869e94841be4857246065db9c532cff85e757e37a3a2d5204410d8e37394a601eec6f44ef747ca768ebc79a7c1f908b520d1ca6acbc3a9cf6a31635342ae50cba6de3f7bc6e253cf1c1be3fcc3e98cebd0fd","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\Microsoft Office\\MEDIA\\CAGCAT10\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=ec428f78f87ff925d149dc885aab243fcef0c051c55417db5dd86a1cb3e68fa1ca9e1af871dc295e72aed044df398f1cccb713c951b181b54f28de7ca4bc30b1052966717a2d5717ef620e39c7d8b23313451f","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=ec428f78f87ff925d149dc885aab243fcef0c051c55417db5dd86a1cb3e68fa1ca9e1af871dc295e72aed044df398f1cccb713c951b181b54f28de7ca4bc30b1052966717a2d5717ef620e39c7d8b23313451f","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\Microsoft Office\\MEDIA\\OFFICE14\\1033\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=b382485f19278cc0118b5c85e50a9763090bd28ff55d77afc64daa3eaa4ec45560ba68e6dd23dbd94f1456c08cbe6d2ced3985a4b02fcf71bbe2d108d85a1cef7ca2956285d4246de8db4a9277c517b0de","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=b382485f19278cc0118b5c85e50a9763090bd28ff55d77afc64daa3eaa4ec45560ba68e6dd23dbd94f1456c08cbe6d2ced3985a4b02fcf71bbe2d108d85a1cef7ca2956285d4246de8db4a9277c517b0de","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\Microsoft Office\\MEDIA\\OFFICE14\\AUTOSHAP\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=ce4b7aa350f94edd7f993d0723b8ee9133bb612af8005f4a31c809814f7f073eb6f282763fcf2098c919f8ef97a565d8ab85c27d309984673c210d65917da65a527b9076533f65530cdcf904f0f1d9dc9a07","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=ce4b7aa350f94edd7f993d0723b8ee9133bb612af8005f4a31c809814f7f073eb6f282763fcf2098c919f8ef97a565d8ab85c27d309984673c210d65917da65a527b9076533f65530cdcf904f0f1d9dc9a07","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\Microsoft Office\\MEDIA\\OFFICE14\\BULLETS\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=8c2a7018ed8cfc3cfd5c5d15466f8b720b7c256ed88779b898ce9187f19f84a29b787cd641ffd6d78a56f80608973573f21a2c72b3708e619c2c1c7d17bcc81e4e00fec0456517e333364f8391b415dde63c","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=8c2a7018ed8cfc3cfd5c5d15466f8b720b7c256ed88779b898ce9187f19f84a29b787cd641ffd6d78a56f80608973573f21a2c72b3708e619c2c1c7d17bcc81e4e00fec0456517e333364f8391b415dde63c","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\Microsoft Office\\MEDIA\\OFFICE14\\LINES\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=16d9daf438739f2370891561898075f6586084409795a7bb132936b1dcd551547881fd1600c7d1e8390f38f3e97e602e11d3a318f3c8b7a3d3fe8deda91dff47a9851c8d2d2f77ece2341f9a26dab4fb597fb9","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=16d9daf438739f2370891561898075f6586084409795a7bb132936b1dcd551547881fd1600c7d1e8390f38f3e97e602e11d3a318f3c8b7a3d3fe8deda91dff47a9851c8d2d2f77ece2341f9a26dab4fb597fb9","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\Microsoft Office\\MEDIA\\OFFICE14\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=78dc36307aff9dc6f7cb48f525951b2f0df31974b194ce0211458edfc51a4aba9f5976bc3d155c85d6c5f40c3d121fb4ecafd9bf4d5e83e12699c955764783fea60684c9bfb72ad6284e7c4daf36ec793e2a","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=78dc36307aff9dc6f7cb48f525951b2f0df31974b194ce0211458edfc51a4aba9f5976bc3d155c85d6c5f40c3d121fb4ecafd9bf4d5e83e12699c955764783fea60684c9bfb72ad6284e7c4daf36ec793e2a","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\Microsoft Office\\MEDIA\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=e8913cba9fbcd0a3e4defabdcce818252174d7361ac1fdea9465410f15ed36ed0c7264a0ce77f6429c576a2347cac46aafee706580882cba53182c13f8d3a66e288557cee31cf5c9e5c5c17457bd74ea6ab2b0","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=e8913cba9fbcd0a3e4defabdcce818252174d7361ac1fdea9465410f15ed36ed0c7264a0ce77f6429c576a2347cac46aafee706580882cba53182c13f8d3a66e288557cee31cf5c9e5c5c17457bd74ea6ab2b0","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\Microsoft Office\\Office14\\1033\\Bibliography\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=78acf2795b5b974c0bf742a325a04c0b0badb6598ccdf104da26ac56f73edd6a4aa11b66d9fbaa16e0d12f76c6ededd8a06afb907b192d9b227b2df322a79d46f067587dc314deee1c3c8be64ef67049a6f942","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=78acf2795b5b974c0bf742a325a04c0b0badb6598ccdf104da26ac56f73edd6a4aa11b66d9fbaa16e0d12f76c6ededd8a06afb907b192d9b227b2df322a79d46f067587dc314deee1c3c8be64ef67049a6f942","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\Microsoft Office\\Office14\\1033\\DataServices\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=2a38e3e378d6631938b21cfae7a3fd84e800043ce58ef26a706dcad72f8515487ae048a0c5b7b9f864366a4f813723a8c676fe09d3b58e9b8aa6a4015974a13b64be32f1c37fd53cce1cd650f05f7351773a81","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=2a38e3e378d6631938b21cfae7a3fd84e800043ce58ef26a706dcad72f8515487ae048a0c5b7b9f864366a4f813723a8c676fe09d3b58e9b8aa6a4015974a13b64be32f1c37fd53cce1cd650f05f7351773a81","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Americana\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=d30e43d3f46fdcb0d767439002af9554f40e1762bfd10dac552b0e595f1d97e7aaddaf9c6fe01eb65f96569d5b0e0258f151a60970af867362b65cffc91b99be8c1d114fe81c8e80682a4576ec51d64cbf022c","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=d30e43d3f46fdcb0d767439002af9554f40e1762bfd10dac552b0e595f1d97e7aaddaf9c6fe01eb65f96569d5b0e0258f151a60970af867362b65cffc91b99be8c1d114fe81c8e80682a4576ec51d64cbf022c","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BabyBlue\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=c7ca4149c3984f46b08e0c7f2f3f66d2136a744acd5f5eb3cdd9fd5006d2c6bac98ea11052ef943fc66a135d7017731f79a28790606347d6a3d2619aef8cd949bebd271d381b21382f532e2f0979aff1b4a676","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=c7ca4149c3984f46b08e0c7f2f3f66d2136a744acd5f5eb3cdd9fd5006d2c6bac98ea11052ef943fc66a135d7017731f79a28790606347d6a3d2619aef8cd949bebd271d381b21382f532e2f0979aff1b4a676","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Biscay\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=6011fbb8079d939d1c82b0d1f86515a160f68238c4a3bc757c2ba90a75ad2ab0db7b2f1318e4db93d39f5f9409cbf5c683685fbbf43cde8cd1e5bab0018f4438f90597cace3476151c4465db5ff2a7850065f5","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=6011fbb8079d939d1c82b0d1f86515a160f68238c4a3bc757c2ba90a75ad2ab0db7b2f1318e4db93d39f5f9409cbf5c683685fbbf43cde8cd1e5bab0018f4438f90597cace3476151c4465db5ff2a7850065f5","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightOrange\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=163f756d873c6efb4911c8a45267b198b944ee1e75ae38756ba8dc3a652ce87942ef5dc8425e92beb013ff2c642b39a716f46be233a28d96ea0f46bd0da181b639a0c9ffac2942f41217c81a41046aa8b64eed","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=163f756d873c6efb4911c8a45267b198b944ee1e75ae38756ba8dc3a652ce87942ef5dc8425e92beb013ff2c642b39a716f46be233a28d96ea0f46bd0da181b639a0c9ffac2942f41217c81a41046aa8b64eed","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\BrightYellow\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=bac0d79ba3244df1978f0c14ca59df017ec4ee026cfedf6ccf6c83b0ac7d3177d15fd0d9ae56f7c058edf2e66e436ac5a4b3bee065f8fc424e5d39615fd1c15ed13eeab495a7bd07096dcdb5e79336501f4c","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=bac0d79ba3244df1978f0c14ca59df017ec4ee026cfedf6ccf6c83b0ac7d3177d15fd0d9ae56f7c058edf2e66e436ac5a4b3bee065f8fc424e5d39615fd1c15ed13eeab495a7bd07096dcdb5e79336501f4c","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Desert\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=fc75211579a3f716129b13aeb43eb3430ee66bafcd3e8a8fb6da9ee4bc5627936449e8e4bf516fb5857a8db61e2cc62ed8ef531de723c8437c111b3f670c68012dea1cb9fa844ae6ac60e8695c9b9f0f94","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=fc75211579a3f716129b13aeb43eb3430ee66bafcd3e8a8fb6da9ee4bc5627936449e8e4bf516fb5857a8db61e2cc62ed8ef531de723c8437c111b3f670c68012dea1cb9fa844ae6ac60e8695c9b9f0f94","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\GrayCheck\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=3a9ba2160d81315ce19f374025da911478880f7b7c0bbd5ad0b021f7bf9fa98688254d3cd90cfff654bbfca03f35c521ccdc85941599308a79f7fe60387ade33be89156bf36118f67beb77bff618e84551e628","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=3a9ba2160d81315ce19f374025da911478880f7b7c0bbd5ad0b021f7bf9fa98688254d3cd90cfff654bbfca03f35c521ccdc85941599308a79f7fe60387ade33be89156bf36118f67beb77bff618e84551e628","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Lime\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=559709f02d424043ec650209d28747d1c78a6f409899c9cdd9c9c36593844075d15c47ca587f7aac04f98f62ef6d06c99fe449430942d752247c4a4d96a691a315b5eef9583fb5fcd308b61964f15e1b01b8a0","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=559709f02d424043ec650209d28747d1c78a6f409899c9cdd9c9c36593844075d15c47ca587f7aac04f98f62ef6d06c99fe449430942d752247c4a4d96a691a315b5eef9583fb5fcd308b61964f15e1b01b8a0","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Oasis\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=6cebf15f501f97797afd01e2d934f38683e55346c0bab1b982690fad2df4c48cf2ccf6a9fe8a9fca050c80b4ff89ae820ffa9932aedda4ef9ec98a725bcea57dfd6fe9b3fb14152ee9f20f9a23d6f5fb5914","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=6cebf15f501f97797afd01e2d934f38683e55346c0bab1b982690fad2df4c48cf2ccf6a9fe8a9fca050c80b4ff89ae820ffa9932aedda4ef9ec98a725bcea57dfd6fe9b3fb14152ee9f20f9a23d6f5fb5914","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\STS2\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=2833539128a0f6f642b123cb6c1077050cd5ccc63359f8eda44e7a3eeed002015b49da845fd31f6cfa24097126c0215b77dbeec1ebb67b9749b208b7cb18adb23ed0ba00f2c6a3bbcc0ce007bc45c028c6f100","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=2833539128a0f6f642b123cb6c1077050cd5ccc63359f8eda44e7a3eeed002015b49da845fd31f6cfa24097126c0215b77dbeec1ebb67b9749b208b7cb18adb23ed0ba00f2c6a3bbcc0ce007bc45c028c6f100","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Slate\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=555abafbafd3af51a184f3a697d566168dd7cd6e7b4aca9538ab7b79b86762dc2a1fd8d0c4de47a7f28ceba6ff05161dbc95afd6aebdc8ce5451277a1a53cfa3af5c944b91ca1498383f3024d20793d30cb6c7","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=555abafbafd3af51a184f3a697d566168dd7cd6e7b4aca9538ab7b79b86762dc2a1fd8d0c4de47a7f28ceba6ff05161dbc95afd6aebdc8ce5451277a1a53cfa3af5c944b91ca1498383f3024d20793d30cb6c7","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SoftBlue\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=3a7097f9224a802d4ee3dbcaacf3713eb87a4b6db49c6aa248bb08f45ca7b6eb7dc192bc9eee01b584a3a0aebbd7e482846c0d87bc1e2c868f7517ad7051ae2fae85f67bf814e94572944d45f98d174b10f899","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=3a7097f9224a802d4ee3dbcaacf3713eb87a4b6db49c6aa248bb08f45ca7b6eb7dc192bc9eee01b584a3a0aebbd7e482846c0d87bc1e2c868f7517ad7051ae2fae85f67bf814e94572944d45f98d174b10f899","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Solutions\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=0e932c3be2a9537adbf0bf047f03ba46e77075b91c9e0df180269b6d89ec1b7e6433368a0960a96ea95156a917d9ef47792a33ca589fe4e60c2ec7c432a21fe71a76a31fb7ff7f4d85506f959daecbcdc1","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=0e932c3be2a9537adbf0bf047f03ba46e77075b91c9e0df180269b6d89ec1b7e6433368a0960a96ea95156a917d9ef47792a33ca589fe4e60c2ec7c432a21fe71a76a31fb7ff7f4d85506f959daecbcdc1","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\SpringGreen\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=6cae0cc508cdf890503493c680584dd1edca91132a00edce82e12e958239927f08a7215bfdcecb04c4139c3823ff0671648c2e64fa4e9e9d235201e97acdab2079f21fff15e2a1b02a761ea8ea122bbca57d","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=6cae0cc508cdf890503493c680584dd1edca91132a00edce82e12e958239927f08a7215bfdcecb04c4139c3823ff0671648c2e64fa4e9e9d235201e97acdab2079f21fff15e2a1b02a761ea8ea122bbca57d","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\Swirl\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=e30cecd684362631efcef83ef7d1344ee45da48d7ad15d30e01972a0714437e204baa935ca350dc88e089c636b169f27114ac59cd288fa0404f32ba8afe2312c6d46837e08a9a3a6f8ee6d8078c7d507ad0299","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=e30cecd684362631efcef83ef7d1344ee45da48d7ad15d30e01972a0714437e204baa935ca350dc88e089c636b169f27114ac59cd288fa0404f32ba8afe2312c6d46837e08a9a3a6f8ee6d8078c7d507ad0299","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\Microsoft Office\\Office14\\1033\\GrooveForms5\\FormsStyles\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=29e15453c194876e0d0a9c0fea7e48ab8cf17816ed1a6cb01cfbf3f237724d6b1297e5e91f59e8781245efe17df50cd2daa697cb6d2481fea657bb2f58607cc690cf13ee2a4cbddbb993fafd5535726a229fd6","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=29e15453c194876e0d0a9c0fea7e48ab8cf17816ed1a6cb01cfbf3f237724d6b1297e5e91f59e8781245efe17df50cd2daa697cb6d2481fea657bb2f58607cc690cf13ee2a4cbddbb993fafd5535726a229fd6","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\Microsoft Office\\Office14\\1033\\GrooveForms5\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=754a196f4cacd23549e31ce6465ccacb2bca248a01e01c82cc9ba7f964c3bbea5cfc6c169c21a6e6a3901ccb1e04f9778d78c44e97a4d8dd6dc808db4807b8685a69d40cb8ed48739bcc063b4af5e911394dc8","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=754a196f4cacd23549e31ce6465ccacb2bca248a01e01c82cc9ba7f964c3bbea5cfc6c169c21a6e6a3901ccb1e04f9778d78c44e97a4d8dd6dc808db4807b8685a69d40cb8ed48739bcc063b4af5e911394dc8","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\Microsoft Office\\Office14\\1033\\PUBFTSCM\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=9224393e8a72a7c52e2c94944fc26f5e8bf57bd86d737bae3212c19f1ff8be3a9a225eaf4858518d98dc02c20ccd2558f27043c9ad4b58437729c3e86008b95ca1f9e1195b33204ee85e8e12a9fb7f92e7ec99","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=9224393e8a72a7c52e2c94944fc26f5e8bf57bd86d737bae3212c19f1ff8be3a9a225eaf4858518d98dc02c20ccd2558f27043c9ad4b58437729c3e86008b95ca1f9e1195b33204ee85e8e12a9fb7f92e7ec99","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\Microsoft Office\\Office14\\1033\\PUBSPAPR\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=18abe9aa45e5d5c7ab0df48c0788d297f52544f15599098a8cb339f6f60943f1444816411b486cbf6435ab83010d0f8fab67da84e23f9cd2bfda7da71e3b2c5a792f0303cfe1a51158eb4318d6c678d31f","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=18abe9aa45e5d5c7ab0df48c0788d297f52544f15599098a8cb339f6f60943f1444816411b486cbf6435ab83010d0f8fab67da84e23f9cd2bfda7da71e3b2c5a792f0303cfe1a51158eb4318d6c678d31f","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\Microsoft Office\\Office14\\1033\\QuickStyles\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=265a68323f0e07d997eb934a81480e056fc503597bcc9361e621fdcc2641fc8f3b42c0dd941641aa33d8afcf20f2e4c8a9917ffa6ab406270da79f44fea7799d9b21d09069cb1b9cdc80c635f0a0d6f17ff8f3","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=265a68323f0e07d997eb934a81480e056fc503597bcc9361e621fdcc2641fc8f3b42c0dd941641aa33d8afcf20f2e4c8a9917ffa6ab406270da79f44fea7799d9b21d09069cb1b9cdc80c635f0a0d6f17ff8f3","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\Microsoft Office\\Office14\\1033\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=4eef5e54c580be2ff5f28e492f58cf831c9e535b7f2f318cf779c7c3216556bee7094b52c73183f6aea2c349d894a546d763936458ad92d0bfc7a9242d9b6acbe752f6c503876184a5049c5132ddd4dc5b3525","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=4eef5e54c580be2ff5f28e492f58cf831c9e535b7f2f318cf779c7c3216556bee7094b52c73183f6aea2c349d894a546d763936458ad92d0bfc7a9242d9b6acbe752f6c503876184a5049c5132ddd4dc5b3525","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\Microsoft Office\\Office14\\1036\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=9cd4e4a5cc30db85b61209d8cc833faf5a024819d13cafd3546eb31683132eb760480a12ee381ae3375cdf9e1b3eeb61b37d3dac98c95875e9c9f6aebf20e29238df5cc36fcf16ba5742ae1c83c89ec396c1","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=9cd4e4a5cc30db85b61209d8cc833faf5a024819d13cafd3546eb31683132eb760480a12ee381ae3375cdf9e1b3eeb61b37d3dac98c95875e9c9f6aebf20e29238df5cc36fcf16ba5742ae1c83c89ec396c1","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\Microsoft Office\\Office14\\3082\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=9a20f0cb19aaaaa756efad9cf68ed666d882266970e9eb5c8bf0ef32f86361d868bd657d18802cd0fa0ee1ed886e1d72958837734fd5e64a40eac8d1626d4351b7b4558fbce4f311d4be2feded214cbe999bca","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=9a20f0cb19aaaaa756efad9cf68ed666d882266970e9eb5c8bf0ef32f86361d868bd657d18802cd0fa0ee1ed886e1d72958837734fd5e64a40eac8d1626d4351b7b4558fbce4f311d4be2feded214cbe999bca","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\Microsoft Office\\Office14\\ACCWIZ\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=3bb1109e6d25c2af8787b5ba8d2dcc512df39b7819b4442f092fcbc91312c5bac06e00a92356980ca901b4bda1e514b8866adca4b3e8d38117e52bbbe8f15d6840c1ee59dda46ca3d638f53eb8722c7a7075","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=3bb1109e6d25c2af8787b5ba8d2dcc512df39b7819b4442f092fcbc91312c5bac06e00a92356980ca901b4bda1e514b8866adca4b3e8d38117e52bbbe8f15d6840c1ee59dda46ca3d638f53eb8722c7a7075","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\Microsoft Office\\Office14\\ADDINS\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=734a19c6f0c7d9118e13f42fcb32b82728a4e5bf41e838661e2cbd6f1ed0e41477b9b95c611e9d764ece10dbd7bda4e49c0be1fc432ab7fda73f48de4115b527d9edd38ba9878bbea8e07a119d6582ffac65","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=734a19c6f0c7d9118e13f42fcb32b82728a4e5bf41e838661e2cbd6f1ed0e41477b9b95c611e9d764ece10dbd7bda4e49c0be1fc432ab7fda73f48de4115b527d9edd38ba9878bbea8e07a119d6582ffac65","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\Microsoft Office\\Office14\\AccessWeb\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=f7dccb482ed46c330f4f43762622f6299ed6811b89e5102e976d387911fa4cfcfa471735ba043f67088b3677a56f6eb2018566d0acb90a746c91bfdaaf9c8ef3838ca78c5f9f6e9525fc2df82670205da4f1d8","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=f7dccb482ed46c330f4f43762622f6299ed6811b89e5102e976d387911fa4cfcfa471735ba043f67088b3677a56f6eb2018566d0acb90a746c91bfdaaf9c8ef3838ca78c5f9f6e9525fc2df82670205da4f1d8","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\Microsoft Office\\Office14\\BORDERS\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=8ebfa61390f38acb8a68ca0518c8c20dd62807774cf8fa31def47df65c6fe4ac4e4572da28dbcec49341a57315560f3bc94438a6902dd2dadfb2658fb593826bbdd8fb267e8a834789a723d24a9e8251681fbc","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=8ebfa61390f38acb8a68ca0518c8c20dd62807774cf8fa31def47df65c6fe4ac4e4572da28dbcec49341a57315560f3bc94438a6902dd2dadfb2658fb593826bbdd8fb267e8a834789a723d24a9e8251681fbc","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\Microsoft Office\\Office14\\Bibliography\\Sort\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=8614bd73f422d996f0096e80357c7b7a60472a585203c56db13f1f38a1d739dfb1be9f6977d11686529cdccd4718b0d8a6d46e2971760766abbab68bc36efd16c30496609b2628aa2bb78e7c9838d179b1c0","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=8614bd73f422d996f0096e80357c7b7a60472a585203c56db13f1f38a1d739dfb1be9f6977d11686529cdccd4718b0d8a6d46e2971760766abbab68bc36efd16c30496609b2628aa2bb78e7c9838d179b1c0","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\Microsoft Office\\Office14\\Bibliography\\Style\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=3e6b3b6f7094687b6014bd6932777a54c1b3dc6f76cdd3b0581f5d86c1f606bbd8ea941656f045bfff261a3c17fad6bcc0a9121cd90e410737f856dd2b3b40b88044f85a819e1c294b8a6304f42e5c2e79ec","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=3e6b3b6f7094687b6014bd6932777a54c1b3dc6f76cdd3b0581f5d86c1f606bbd8ea941656f045bfff261a3c17fad6bcc0a9121cd90e410737f856dd2b3b40b88044f85a819e1c294b8a6304f42e5c2e79ec","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\Microsoft Office\\Office14\\Bibliography\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=ccc3d96c83c1e2e44549f219c2828726f9cb8184461355c2840f1ce5f3234bc8074a04c882f059b5ad80c1533a5dd4e02b1017f78f7976b9a0873fe860c198cae12208666d32fec744e9858a92c07c3443ec0c","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=ccc3d96c83c1e2e44549f219c2828726f9cb8184461355c2840f1ce5f3234bc8074a04c882f059b5ad80c1533a5dd4e02b1017f78f7976b9a0873fe860c198cae12208666d32fec744e9858a92c07c3443ec0c","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\Microsoft Office\\Office14\\CONVERT\\1033\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=1c60e64bbd765067fcc5bb54d382ad1f4dbaf61007aca19d99845fb3f69c7d893714d46173368c7177d99cd1240c78b44062a87e422a5a55135a879a4674cd1e68f46a24da81f0bb34a5085d36b2e7c905ff88","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=1c60e64bbd765067fcc5bb54d382ad1f4dbaf61007aca19d99845fb3f69c7d893714d46173368c7177d99cd1240c78b44062a87e422a5a55135a879a4674cd1e68f46a24da81f0bb34a5085d36b2e7c905ff88","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\Microsoft Office\\Office14\\CONVERT\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=2585f59948ef381acad8ea4f31e7362d0baf860ad2f0cee0bce78436c2e3e8bc466164fd9b2b4fb4beaddb5e2ac39623f7dfee083c9af274aea42cabe426a1a746ab788632a197a3e8e763f38251fda5e60b3a","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=2585f59948ef381acad8ea4f31e7362d0baf860ad2f0cee0bce78436c2e3e8bc466164fd9b2b4fb4beaddb5e2ac39623f7dfee083c9af274aea42cabe426a1a746ab788632a197a3e8e763f38251fda5e60b3a","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\Microsoft Office\\Office14\\Document Parts\\1033\\14\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=5399d0e834026b561bd78fc7812cca0c5f8abb9fcdb4ccb54f492ec69dca2fc0fdfa8f075b659b7df30552851bed31c532d492063ed2fd3c8a545bc55db20006038717b4cde35a08778e14557d5c0f4ea967e9","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=5399d0e834026b561bd78fc7812cca0c5f8abb9fcdb4ccb54f492ec69dca2fc0fdfa8f075b659b7df30552851bed31c532d492063ed2fd3c8a545bc55db20006038717b4cde35a08778e14557d5c0f4ea967e9","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\Microsoft Office\\Office14\\Document Parts\\1033\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=70c21574f156997cdbe7c0f062d3234478b71f31e2e278df3ea6846d50a1a23a13a642c405e800db93ad423bb15ce5a747461fc2be5b1fbee24adda12cadcc252f380e5d3775b66d2eb874fde16e8d437b429a","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=70c21574f156997cdbe7c0f062d3234478b71f31e2e278df3ea6846d50a1a23a13a642c405e800db93ad423bb15ce5a747461fc2be5b1fbee24adda12cadcc252f380e5d3775b66d2eb874fde16e8d437b429a","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\Microsoft Office\\Office14\\Document Parts\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=fc7ce342e0ad3b9391118b9a30dc50c991b9fbac0b73f638cff953a6af70a195b34741ac4f23cfdced6e66daa2b0ecf88b9adba3708b5c9cb4396ddff73ac224473c56bd69d5f14f74877fe86edc9157c3ae","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=fc7ce342e0ad3b9391118b9a30dc50c991b9fbac0b73f638cff953a6af70a195b34741ac4f23cfdced6e66daa2b0ecf88b9adba3708b5c9cb4396ddff73ac224473c56bd69d5f14f74877fe86edc9157c3ae","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\Microsoft Office\\Office14\\FORMS\\1033\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=b3c60049c7072e650ac9b76067d6b36359db9ff00f60090210c2988820d612c6120acc09df2f69723260b95bd430df77312791216e82fdcd6fc7bd747b3111e1265668844aa650361deaa73daa4288bd520d7d","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=b3c60049c7072e650ac9b76067d6b36359db9ff00f60090210c2988820d612c6120acc09df2f69723260b95bd430df77312791216e82fdcd6fc7bd747b3111e1265668844aa650361deaa73daa4288bd520d7d","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\Microsoft Office\\Office14\\FORMS\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=f4e578041ae1722cf53ee1c60c7892e1dd585ade9cae77e2d0e0df187f9875771807bc9c9df1e19e309a8973ed3309c4427a65129747cde05069ff99001bff092b7dfcd6e982c06a883c48ba2feb21442dc7","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=f4e578041ae1722cf53ee1c60c7892e1dd585ade9cae77e2d0e0df187f9875771807bc9c9df1e19e309a8973ed3309c4427a65129747cde05069ff99001bff092b7dfcd6e982c06a883c48ba2feb21442dc7","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\Components\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=b1ecc04afc0d226ebc7040a73e6154009194e4cfad7ccc7aa54eac6e65b26ae923d692b6dcaef43f272f41721444339eb5e58e42ecc08e82ae03caa41aa43a4caafa9156f3484eee86fe64799db2f858fa9f","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=b1ecc04afc0d226ebc7040a73e6154009194e4cfad7ccc7aa54eac6e65b26ae923d692b6dcaef43f272f41721444339eb5e58e42ecc08e82ae03caa41aa43a4caafa9156f3484eee86fe64799db2f858fa9f","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\Microsoft Office\\Office14\\Groove\\Certificates\\Verisign\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=450a02196a1d2f5e6b365e95f0cfda5dfde55d57f9bb807241192ee1a5e172d9dfe8720cf091afe502c482951b320752ff9cce3c823b291dce15ad3d316b6a4058460c8ba121ae092a8aac886932b42bf311af","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=450a02196a1d2f5e6b365e95f0cfda5dfde55d57f9bb807241192ee1a5e172d9dfe8720cf091afe502c482951b320752ff9cce3c823b291dce15ad3d316b6a4058460c8ba121ae092a8aac886932b42bf311af","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Components\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=39aab48eba00d2eaafcada794048dc21958565195c220bb2d0a0d0e66ae858ee99f77c594502464b5f5d0150ba8120682d2ee9632b2468ec4f8d591f2bd3eb39b44bc24fffd8efde924c73d9692c60138f963a","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=39aab48eba00d2eaafcada794048dc21958565195c220bb2d0a0d0e66ae858ee99f77c594502464b5f5d0150ba8120682d2ee9632b2468ec4f8d591f2bd3eb39b44bc24fffd8efde924c73d9692c60138f963a","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\ManagedObjects\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=47b9f357ee99c62a0a07526e5d3122239972651f378af8e02d6835b598234184c4090bcdcd3d5a31bea1cab080044ffe9c7579cf0c1f24fae1955af17cceb84d13d90cbc84e11f5e56c318e58702b2d636b9","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=47b9f357ee99c62a0a07526e5d3122239972651f378af8e02d6835b598234184c4090bcdcd3d5a31bea1cab080044ffe9c7579cf0c1f24fae1955af17cceb84d13d90cbc84e11f5e56c318e58702b2d636b9","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\Servers\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=8d08106d706c3db41654a13051fd2c370f40482ffcb73cdfc61bf9e95417110570510acc2ecd74f5f230041c591eb28fe51df5ecd8698b3f37350858d4c70a840399b8a079c53900fbb3941f24b99b45e12aa3","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=8d08106d706c3db41654a13051fd2c370f40482ffcb73cdfc61bf9e95417110570510acc2ecd74f5f230041c591eb28fe51df5ecd8698b3f37350858d4c70a840399b8a079c53900fbb3941f24b99b45e12aa3","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\Microsoft Office\\Office14\\Groove\\Certificates\\groove.net\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=ae16c72e75467e911606aa107b8a38bf57229a19ce49d1bd44d4a1e7d62af18489dc991e3a40ae63c95b7b6be97bb1952a6562c9ed34efb23a97fb9eb75222bfbdfb6083075719585067c364a1f21c4da0ec","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=ae16c72e75467e911606aa107b8a38bf57229a19ce49d1bd44d4a1e7d62af18489dc991e3a40ae63c95b7b6be97bb1952a6562c9ed34efb23a97fb9eb75222bfbdfb6083075719585067c364a1f21c4da0ec","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\Microsoft Office\\Office14\\Groove\\Certificates\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=eb27e22988ee9702e27993a7602fd5a6bb55db0b29707990196ec93bfd752feda42214b9ec38bf39b4d7b688e596ff2d1cdda6f302bbedaabd02980464d6e869a1fd5aeeec7e1497fc09ce1d70b08662849d3e","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=eb27e22988ee9702e27993a7602fd5a6bb55db0b29707990196ec93bfd752feda42214b9ec38bf39b4d7b688e596ff2d1cdda6f302bbedaabd02980464d6e869a1fd5aeeec7e1497fc09ce1d70b08662849d3e","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\Microsoft Office\\Office14\\Groove\\Sounds\\People\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=e71b260eedd4b27010a78134ef98048d0c408124f593463969b078a4f88867b618db3daa717542d47ceacdb7e847a50ac43aa6ed753db5b5eab061d718c89527715e00f553c1d2ce5ed203246791720de28724","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=e71b260eedd4b27010a78134ef98048d0c408124f593463969b078a4f88867b618db3daa717542d47ceacdb7e847a50ac43aa6ed753db5b5eab061d718c89527715e00f553c1d2ce5ed203246791720de28724","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\Microsoft Office\\Office14\\Groove\\Sounds\\Places\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=7ec174ac3583e2dc4d3d66fa1345dc3d11ed71249a9338c3b425d583cf1f6df156886851833dcf929cd929f8cefabbd9ab4e14b11e603c1df2d158ae6760be75177ca9871a208038a7bd74585cf8e53694150b","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=7ec174ac3583e2dc4d3d66fa1345dc3d11ed71249a9338c3b425d583cf1f6df156886851833dcf929cd929f8cefabbd9ab4e14b11e603c1df2d158ae6760be75177ca9871a208038a7bd74585cf8e53694150b","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\Microsoft Office\\Office14\\Groove\\Sounds\\Things\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=deaa84226e9a2480fd6324260ae9589c5a9bca185429edb17a61d1314f2eeb7cbd7dea1c80badfb19d3a479466b479f18b44b18ad1646a84839a24881ffb6bf8a0687da47153c5181b3836ec7c3e419caf8bc6","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=deaa84226e9a2480fd6324260ae9589c5a9bca185429edb17a61d1314f2eeb7cbd7dea1c80badfb19d3a479466b479f18b44b18ad1646a84839a24881ffb6bf8a0687da47153c5181b3836ec7c3e419caf8bc6","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\Microsoft Office\\Office14\\Groove\\Sounds\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=740456e0c5b6611c409abf1055287d5512244fc3381b9de16428e6746916dea0f3ea315899d464f91df8d81b282bfac8d3b42673035aa1cf29c2fc28ee6383a007dfef69bc7e5f8fbacb680b0579ff55175f","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=740456e0c5b6611c409abf1055287d5512244fc3381b9de16428e6746916dea0f3ea315899d464f91df8d81b282bfac8d3b42673035aa1cf29c2fc28ee6383a007dfef69bc7e5f8fbacb680b0579ff55175f","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\Microsoft Office\\Office14\\Groove\\ToolBMPs\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=f7581af8c0bdc6c70bdd7e5fe99719a00a4cdac1f7d0c0f6dbe982621c907fc8eed6afaa359809dbe4d46aca0ae504a237a7c7affc1c51d9ee1e78353b469a5b1ef274d4cacd478bab894898bfc060f83c5a2a","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=f7581af8c0bdc6c70bdd7e5fe99719a00a4cdac1f7d0c0f6dbe982621c907fc8eed6afaa359809dbe4d46aca0ae504a237a7c7affc1c51d9ee1e78353b469a5b1ef274d4cacd478bab894898bfc060f83c5a2a","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Calendar\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=468fb84664cd4d314dcbc7304c853e0d20aac2bd4920ebbcc91c3c0432645ef9fb4e679ca5b65e291668d3b403f91544b47c58eae7c4fcfdfada612e83a94d76bbedd8be4169dc4dbab176ffc5b4fe7e32f93c","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=468fb84664cd4d314dcbc7304c853e0d20aac2bd4920ebbcc91c3c0432645ef9fb4e679ca5b65e291668d3b403f91544b47c58eae7c4fcfdfada612e83a94d76bbedd8be4169dc4dbab176ffc5b4fe7e32f93c","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\CommonData\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=ade44dc7c055ec0d926b3338114fae6da9bc106aa2ff8820b209a8b64d19265d75c95d58815deaf66450f378cf11fa69b6d047f8c9446b1111fbf917afd101b1fb11a31e819e44d45589308e70497e064b9d74","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=ade44dc7c055ec0d926b3338114fae6da9bc106aa2ff8820b209a8b64d19265d75c95d58815deaf66450f378cf11fa69b6d047f8c9446b1111fbf917afd101b1fb11a31e819e44d45589308e70497e064b9d74","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Computers\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=1703201315218fa77141e466773108bc094bcd3e731f1d9cd91964c3131e355fae005bae619918ee8c4d8bbc390add256a6ebd20bcf53c4a9a6ba6cc4001761630b11995032600eccc9c8d6903351f8e3871","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=1703201315218fa77141e466773108bc094bcd3e731f1d9cd91964c3131e355fae005bae619918ee8c4d8bbc390add256a6ebd20bcf53c4a9a6ba6cc4001761630b11995032600eccc9c8d6903351f8e3871","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\Discussion\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=7f91542aa6ce5c9ce610be64d10be3c06269af3e4f3db765e47356a4af569a8c6b6aae64d22799acf140f70736c74d97d9290a220f5fcf4a2f838d93bc0faf0938acbf2f4358161270c5ba3a27b50ebc04ac0b","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=7f91542aa6ce5c9ce610be64d10be3c06269af3e4f3db765e47356a4af569a8c6b6aae64d22799acf140f70736c74d97d9290a220f5fcf4a2f838d93bc0faf0938acbf2f4358161270c5ba3a27b50ebc04ac0b","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\DocumentShare\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=ae059d7b3c58b393428fed6111ed9afccd7e5894daa0273feecfe6b295b47e9ff02761ee642d6799cbda3c8ce0e5b462baf69ef71946ddc1a3cd5b8f58cd4420946faed2efd2fc40adb4ff10ade95395637d60","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=ae059d7b3c58b393428fed6111ed9afccd7e5894daa0273feecfe6b295b47e9ff02761ee642d6799cbda3c8ce0e5b462baf69ef71946ddc1a3cd5b8f58cd4420946faed2efd2fc40adb4ff10ade95395637d60","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveDocumentReview\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=151251f1e5fed4f3af50e23cf7109588a500f69395ead81e3d71121369a31dc24f43742122c918f804136b2fcead6a78d45a8b0228ac216c6cdd67ff1382e0ac338d401f54b90c4a2e8a0569e7ac5f9b3a8e","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=151251f1e5fed4f3af50e23cf7109588a500f69395ead81e3d71121369a31dc24f43742122c918f804136b2fcead6a78d45a8b0228ac216c6cdd67ff1382e0ac338d401f54b90c4a2e8a0569e7ac5f9b3a8e","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Americana\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=f16edcec3866c0754846b769b70530af3978227cad53890a36d9ccc3c216b72a7c50400dc741636e713dbdc7d881accde05cac50dc7d7a1a2cfcd1248adfc5b1b2e05849b42b93fc1bed5105a83b64ce928fc2","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=f16edcec3866c0754846b769b70530af3978227cad53890a36d9ccc3c216b72a7c50400dc741636e713dbdc7d881accde05cac50dc7d7a1a2cfcd1248adfc5b1b2e05849b42b93fc1bed5105a83b64ce928fc2","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BabyBlue\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=0cefcd13a4f93daddf757882197e368a226ca882642c27d8c1aa80aa3e3f0903816fdb13810c906114fe9493fa86da41420730f98a0407dfc9a4a0fd789475ac730983a396334e3fed6ad928131bcc486773ab","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=0cefcd13a4f93daddf757882197e368a226ca882642c27d8c1aa80aa3e3f0903816fdb13810c906114fe9493fa86da41420730f98a0407dfc9a4a0fd789475ac730983a396334e3fed6ad928131bcc486773ab","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Biscay\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=419679e57790dee8a2479de4fe635df7a47531d73d4971018adbced4c361a69f004d74bd5ab7ac31bd942be75be3133db852a619806701339265e484e3183c61a17b35cd42477c1937d1e87407504e30903401","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=419679e57790dee8a2479de4fe635df7a47531d73d4971018adbced4c361a69f004d74bd5ab7ac31bd942be75be3133db852a619806701339265e484e3183c61a17b35cd42477c1937d1e87407504e30903401","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightOrange\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=2b260dc77b72db50b3aa193ab3a638649309d0711b8f935d6d1ac072df927ee05f00e7e562bc7874202927800f438f484247b160ee5b3e615a2f5c734eaa8a24481ea01ea205e98dff766cdc1bfc1b1a1a3add","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=2b260dc77b72db50b3aa193ab3a638649309d0711b8f935d6d1ac072df927ee05f00e7e562bc7874202927800f438f484247b160ee5b3e615a2f5c734eaa8a24481ea01ea205e98dff766cdc1bfc1b1a1a3add","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\BrightYellow\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=a4cf5651f998d70a8b1463305d1bd794f62a5146364e76e35dfdd74ce512e16d04e918720d12fa2485fe799a2e49b5f50f1f8b392786635b3a05e62d7d049721ffda9eb13b6969f2ea00ccb2ed7418d0b420","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=a4cf5651f998d70a8b1463305d1bd794f62a5146364e76e35dfdd74ce512e16d04e918720d12fa2485fe799a2e49b5f50f1f8b392786635b3a05e62d7d049721ffda9eb13b6969f2ea00ccb2ed7418d0b420","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Desert\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=168a19ba6a301377cea2dd3ce4642381c27998a90583d4134d81fe13fdb58ae431c8b5f0ec2a55b3744d0ca14e0565f20b77a23748d275da29b8ebf1b0aec4626682587bb146c032c0b93cd413ddf535b086ef","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=168a19ba6a301377cea2dd3ce4642381c27998a90583d4134d81fe13fdb58ae431c8b5f0ec2a55b3744d0ca14e0565f20b77a23748d275da29b8ebf1b0aec4626682587bb146c032c0b93cd413ddf535b086ef","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\GrayCheck\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=09f30f3b8f482b0da7fe437a32ca81f7e62a7984a91a2f3e72ccee3b559fec8789f764addaf6942d072ae7d1c6c6cf5dc89860214789523fa3f19bb4ae8a0df08d7f38137b82d5957a9ed3abcebdabf1680503","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=09f30f3b8f482b0da7fe437a32ca81f7e62a7984a91a2f3e72ccee3b559fec8789f764addaf6942d072ae7d1c6c6cf5dc89860214789523fa3f19bb4ae8a0df08d7f38137b82d5957a9ed3abcebdabf1680503","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\Lime\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=efd421ed8a40062d9d75df79042bd08512191deea99960b26c56bfb68a0e0880f335c58f006246e501df8fe2e914e652d7e1aad1354910dc72287bec74d00eec6403680371b6630e809b0c8a2d8e0a6041f9","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=efd421ed8a40062d9d75df79042bd08512191deea99960b26c56bfb68a0e0880f335c58f006246e501df8fe2e914e652d7e1aad1354910dc72287bec74d00eec6403680371b6630e809b0c8a2d8e0a6041f9","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\FormsStyles\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=33c69e48bcd47f4f94334b178e9bb8b49eabd0eb0049a13b200379a502cc5c556004d1767e31386bc158cf8b28fa0e40962d4e3c57c88bac18345eb1b963bdbcd6b0e162c47fd882819e9746e6b8875485945d","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=33c69e48bcd47f4f94334b178e9bb8b49eabd0eb0049a13b200379a502cc5c556004d1767e31386bc158cf8b28fa0e40962d4e3c57c88bac18345eb1b963bdbcd6b0e162c47fd882819e9746e6b8875485945d","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms3\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=8909570370d4c14f4d4f8ce27f97aa18087890ae39d816aba84e3c584d2f036774c4e603152c81ee57c5acda438877175113220f3534b75712a3e47ac999edb54169097883a3f5b80e2cc6554374d0b3580100","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=8909570370d4c14f4d4f8ce27f97aa18087890ae39d816aba84e3c584d2f036774c4e603152c81ee57c5acda438877175113220f3534b75712a3e47ac999edb54169097883a3f5b80e2cc6554374d0b3580100","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Americana\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=df85303ba8fe79cb334dd8308f6503924a94106098e0d9232e2b14b77800920a42adc3990111d18cd25157b3be95fdcc06fff4a6c2b2fc6e9e7823c7100a8897d871ccc063b7b840d7662b285c13cebc6ca0a2","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=df85303ba8fe79cb334dd8308f6503924a94106098e0d9232e2b14b77800920a42adc3990111d18cd25157b3be95fdcc06fff4a6c2b2fc6e9e7823c7100a8897d871ccc063b7b840d7662b285c13cebc6ca0a2","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BabyBlue\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=9ea40d23e0210ec959ca5eb8527b64efaac7ac2c72a88a18ab286cdc45d47912f0bc1f3f24ce21b036609e749deea788929add559cccac8651ca5157924a4507e29e7e371d7b4124b80a4fb3e6142d29314798","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=9ea40d23e0210ec959ca5eb8527b64efaac7ac2c72a88a18ab286cdc45d47912f0bc1f3f24ce21b036609e749deea788929add559cccac8651ca5157924a4507e29e7e371d7b4124b80a4fb3e6142d29314798","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Biscay\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=80ac3aac0164bd4b399617ccb6cc91dc20af7f0972be86b3d51330f51ba93716196bf4de8e0e8af5a1f8c7de7dbe4b5c56fdcdd12c20854dbfa63667464cf7a756a187ec516e40be90788018381e5a42ba1809","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=80ac3aac0164bd4b399617ccb6cc91dc20af7f0972be86b3d51330f51ba93716196bf4de8e0e8af5a1f8c7de7dbe4b5c56fdcdd12c20854dbfa63667464cf7a756a187ec516e40be90788018381e5a42ba1809","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightOrange\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=923d4692d3a2ae0ecbacdb04e11de04cc0021e2f6e2205e2e52b33d7fe4fe97da65614f637459b0fef518d7e6b68eefc085323957773063a3f6416365be1a26e34b197a80a5dcb0bdf55118c7950ca2d445044","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=923d4692d3a2ae0ecbacdb04e11de04cc0021e2f6e2205e2e52b33d7fe4fe97da65614f637459b0fef518d7e6b68eefc085323957773063a3f6416365be1a26e34b197a80a5dcb0bdf55118c7950ca2d445044","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\BrightYellow\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=fc6c70635203098426210d452f026bbb21a775950812449b92d8cd5b646911cd0cb02f1f352378d02330cb52d69ffeeb2b7709727970e14ca277cc749296ad7274bef8c9ea337635ba73f388bef4a81b041395","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=fc6c70635203098426210d452f026bbb21a775950812449b92d8cd5b646911cd0cb02f1f352378d02330cb52d69ffeeb2b7709727970e14ca277cc749296ad7274bef8c9ea337635ba73f388bef4a81b041395","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\Desert\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=f3c06a9c96815d78e589d9f398ac7904ff997a7f45ede2bfa7a3d010d9fd480ca883bc75a128622e89cab07731cd0295077ac5e6b665c360fd596fde872a6da431d21a1f21cbe5268835afc9b954fbc865c453","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=f3c06a9c96815d78e589d9f398ac7904ff997a7f45ede2bfa7a3d010d9fd480ca883bc75a128622e89cab07731cd0295077ac5e6b665c360fd596fde872a6da431d21a1f21cbe5268835afc9b954fbc865c453","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\GrayCheck\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=007adf9cde5e35e3ff951a0bb7934beb7231c2ec7eadb265d34913c7ac5d960e6d822e619ee33fb79d62d4f21b59e7f33de903d007e3cef4f0a39bc36da106c12058e6d00dfce20219a71b1681314d982b3a62","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=007adf9cde5e35e3ff951a0bb7934beb7231c2ec7eadb265d34913c7ac5d960e6d822e619ee33fb79d62d4f21b59e7f33de903d007e3cef4f0a39bc36da106c12058e6d00dfce20219a71b1681314d982b3a62","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\FormsStyles\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=ff3f6585f3451303a7e458f135d36b6f9432c1ab31dabb8ac4d9bc951147150b6f478b8b31743aa857ab5f736cad9e9d9b737ac716ff970bce9b0371a09ca7a0d7031982d21c5a2ed3dfa86bf62ebff70e23","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=ff3f6585f3451303a7e458f135d36b6f9432c1ab31dabb8ac4d9bc951147150b6f478b8b31743aa857ab5f736cad9e9d9b737ac716ff970bce9b0371a09ca7a0d7031982d21c5a2ed3dfa86bf62ebff70e23","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms4\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=fedffa1d810193fb493f76ecb73bc17aa6a4ba2aa3eb63582d2a45684e5efe500d340bcd31f404665664a37e3b4acfc6222d8c8404476ef2747d7e67e052501ce6f8bf3ffdd6b815eec6ec4aa76e00dce629","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=fedffa1d810193fb493f76ecb73bc17aa6a4ba2aa3eb63582d2a45684e5efe500d340bcd31f404665664a37e3b4acfc6222d8c8404476ef2747d7e67e052501ce6f8bf3ffdd6b815eec6ec4aa76e00dce629","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FieldTypePreview\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=1db9bf2e2ddb120da6ed02a7c118ed46e86768e77b42b44c099964bab09ade35d970600d357c0701e714df94d3fb3f772a7fd2455ba34a15d9e5277a63ec6a53c2c901d49cac085c8b9205cfbf12d7e3dd5ae0","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=1db9bf2e2ddb120da6ed02a7c118ed46e86768e77b42b44c099964bab09ade35d970600d357c0701e714df94d3fb3f772a7fd2455ba34a15d9e5277a63ec6a53c2c901d49cac085c8b9205cfbf12d7e3dd5ae0","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\FormsTemplates\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=8962305d1e0b3d252848e88fe9a3f4f98dd01eef28eb0a6aa372a367dd38f39afc126abc0886b049d7747bb1a1585fab07641d01c78cd5e6d0f3fd98a972cc2b6e69314415301ceb8f7e4eb00d16cb2632fb3d","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=8962305d1e0b3d252848e88fe9a3f4f98dd01eef28eb0a6aa372a367dd38f39afc126abc0886b049d7747bb1a1585fab07641d01c78cd5e6d0f3fd98a972cc2b6e69314415301ceb8f7e4eb00d16cb2632fb3d","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\GrooveForms\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=e7c85cda028f8d810351add7b0fa6fbcd193af64a0191aa6df020acbb7ccfe62319aa4a471a3aa73410323c9df99035f1bd16a2e1a3515408651fd7157c111c64669cb272579a49f4db41a223358aeef24ca9d","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=e7c85cda028f8d810351add7b0fa6fbcd193af64a0191aa6df020acbb7ccfe62319aa4a471a3aa73410323c9df99035f1bd16a2e1a3515408651fd7157c111c64669cb272579a49f4db41a223358aeef24ca9d","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\Microsoft Office\\Office14\\Groove\\ToolData\\groove.net\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=43a184afcd2622c96f12410a390fe80035260e8e2806e3e144f16830c8a556afeb6d8507f82975de08a67c47923f36ea2bd2e221f325f11f884643189a5f12b96e928b9c17f928866380ceafb2108479277fb6","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=43a184afcd2622c96f12410a390fe80035260e8e2806e3e144f16830c8a556afeb6d8507f82975de08a67c47923f36ea2bd2e221f325f11f884643189a5f12b96e928b9c17f928866380ceafb2108479277fb6","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\Microsoft Office\\Office14\\Groove\\ToolData\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=6d5468bc7004570f54e8009705248c831399365af76071a56ba3f69ae841feeb26efa83b5a4245446b73d630302906b3bb17e55b9a36e0323d5ad9e8cf380e3afe498df5b17050721861aad3883c4807d91ca8","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=6d5468bc7004570f54e8009705248c831399365af76071a56ba3f69ae841feeb26efa83b5a4245446b73d630302906b3bb17e55b9a36e0323d5ad9e8cf380e3afe498df5b17050721861aad3883c4807d91ca8","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\Microsoft Office\\Office14\\Groove\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=932af9d4f53f8604f533675d1378b6f41eb9e853a485f9be10bf11d661d96b918f8ec7c396dd63abac3f6326d1269ed800c20fe464c87bca536cba6b9260aa51ab83db71ce38807bf36fc10e475e498eb848ea","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=932af9d4f53f8604f533675d1378b6f41eb9e853a485f9be10bf11d661d96b918f8ec7c396dd63abac3f6326d1269ed800c20fe464c87bca536cba6b9260aa51ab83db71ce38807bf36fc10e475e498eb848ea","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\Microsoft Office\\Office14\\en\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=0ec8dd9ef135504ee682c11505d88d3fe86a1e8ca99cbdd101c21d1c3360bfac6b4d6cc49cddcd717449fe3a4dc5f72c09560e28a636efa444e12bc845572878c183b6cbd06f5b92ac7bffd899e9ded3dfef69","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=0ec8dd9ef135504ee682c11505d88d3fe86a1e8ca99cbdd101c21d1c3360bfac6b4d6cc49cddcd717449fe3a4dc5f72c09560e28a636efa444e12bc845572878c183b6cbd06f5b92ac7bffd899e9ded3dfef69","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\Microsoft Office\\Office14\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=b2ed18e90694ea790f3af85029708c1fbce06791bd4e4b65a00673dc8ce7cd0e333e7d06be8bfa9eeb736c80f59831967ad0f19ec9a9307a984ffd4e0828588acb4777deb13ce160c3f5f637155353776d15","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=b2ed18e90694ea790f3af85029708c1fbce06791bd4e4b65a00673dc8ce7cd0e333e7d06be8bfa9eeb736c80f59831967ad0f19ec9a9307a984ffd4e0828588acb4777deb13ce160c3f5f637155353776d15","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\Microsoft Office\\Office16\\PROOF\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=27b5dfcb9ebb29ca8aeba2c2e421449bc333655b87cc1fd6da633c3e42d5c89bc1f9b4484a0d1ff9c4b05c8ef28d62ff6cadcd47702229032be67b07267e39fa09405f0bf848720071268e47202d125c01be","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=27b5dfcb9ebb29ca8aeba2c2e421449bc333655b87cc1fd6da633c3e42d5c89bc1f9b4484a0d1ff9c4b05c8ef28d62ff6cadcd47702229032be67b07267e39fa09405f0bf848720071268e47202d125c01be","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\Microsoft Office\\Office16\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=f0a9fd2bc484b49c3732475d33f40a910518b60c4ab6cd1dcec458ed0eb32ecaef25296d50f83c64b59c389b27a9c0b19e55bdea7134171b29c91d12252d00063e9f9f5ca2f0b01759e91888910c04379feeef","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=f0a9fd2bc484b49c3732475d33f40a910518b60c4ab6cd1dcec458ed0eb32ecaef25296d50f83c64b59c389b27a9c0b19e55bdea7134171b29c91d12252d00063e9f9f5ca2f0b01759e91888910c04379feeef","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\Microsoft Office\\Stationery\\1033\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=de90bbbb81070881b63c91bb11dca4ddaa6609b69e8ce953d907c899e55af62d5f6f776d8a713b34b861169d325ff90fc3f46e0d2a8e2b3766bc323c7ed18a16ec9d80e753d012c1e39b29360c5667663e9bb3","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=de90bbbb81070881b63c91bb11dca4ddaa6609b69e8ce953d907c899e55af62d5f6f776d8a713b34b861169d325ff90fc3f46e0d2a8e2b3766bc323c7ed18a16ec9d80e753d012c1e39b29360c5667663e9bb3","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\Microsoft Office\\Stationery\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=7800441664832a7cd4134f0ac9498db6b59c657f58b0742ae51ed13bbff908f2708ea3fcda4f8ed907a809efb7d94dd879735a11f3cb63fcae216a6ac9ad925a85d11b9c8f8fac2d15819a8e5d60b5044e","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=7800441664832a7cd4134f0ac9498db6b59c657f58b0742ae51ed13bbff908f2708ea3fcda4f8ed907a809efb7d94dd879735a11f3cb63fcae216a6ac9ad925a85d11b9c8f8fac2d15819a8e5d60b5044e","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\Microsoft Office\\Templates\\1033\\Access\\DataType\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=67d7613c2055b8f09269b755513f83e5ee4b3b477fbd106ec40761e508e6bf84db7788fc635272e132c5ed8dd7b9aaaf9889745265093667b8aeca7d893791f2b38495180fe0e877d5e36d790c7a4eddabe686","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=67d7613c2055b8f09269b755513f83e5ee4b3b477fbd106ec40761e508e6bf84db7788fc635272e132c5ed8dd7b9aaaf9889745265093667b8aeca7d893791f2b38495180fe0e877d5e36d790c7a4eddabe686","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\Microsoft Office\\Templates\\1033\\Access\\Part\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=1f9ae96e17311c70c6d97c22098f37d0076090de3211b77b5e129086c8fb561f933db4da5e5c07af72c4a62c08680640dc822774f3a26a83bd1e1d173412c8cf13d969e3f80d7eb202eaf11e953546c1fd3e","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=1f9ae96e17311c70c6d97c22098f37d0076090de3211b77b5e129086c8fb561f933db4da5e5c07af72c4a62c08680640dc822774f3a26a83bd1e1d173412c8cf13d969e3f80d7eb202eaf11e953546c1fd3e","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\Microsoft Office\\Templates\\1033\\Access\\WSS\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=60f4069fdf431fb376dac20c5cc25dfae6977b29e38a941baf50ff9486e661cb97e0e68590a22983ada498bbee40c1c8b8e4c12ee16479e80a88ff2352d7dbc3b5ae6df7689984402acfba404403ad9a61369d","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=60f4069fdf431fb376dac20c5cc25dfae6977b29e38a941baf50ff9486e661cb97e0e68590a22983ada498bbee40c1c8b8e4c12ee16479e80a88ff2352d7dbc3b5ae6df7689984402acfba404403ad9a61369d","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\Microsoft Office\\Templates\\1033\\Access\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=1a0110a3d964b47080ca71af606a5d2accdca79a6296e758eeb9c2b39ebc3c8c39fe37e9a9b7b1f8201e59ba74ad76df8cc2a07cc94d3bc15e1a04b89f16bd25b9097d3a32af2bde542e153c83d42c4d52341c","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=1a0110a3d964b47080ca71af606a5d2accdca79a6296e758eeb9c2b39ebc3c8c39fe37e9a9b7b1f8201e59ba74ad76df8cc2a07cc94d3bc15e1a04b89f16bd25b9097d3a32af2bde542e153c83d42c4d52341c","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\Microsoft Office\\Templates\\1033\\FAX\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=1de8e594db6cc1d67e4fd69352cb8337eaeea7bcad0ca3f10577af7e04a81fc9f65dda3a4c4fb28c16687720cd8055da4641bf38f488cf360842f8bf427abe8ed0d0b2157186ee48f5bb06b50d27c0a964ae96","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=1de8e594db6cc1d67e4fd69352cb8337eaeea7bcad0ca3f10577af7e04a81fc9f65dda3a4c4fb28c16687720cd8055da4641bf38f488cf360842f8bf427abe8ed0d0b2157186ee48f5bb06b50d27c0a964ae96","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Notebook Templates\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=311ae7a1b421869807b29091ba217d00becbcf05d3462f849df09d1c4674b27104105a9876468f4eb2d2ec98a7206feaa125095f0fb5928554a622a92bc46ea1dacaf5d22a6f122ba0ca495c61c4fc7fb966","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=311ae7a1b421869807b29091ba217d00becbcf05d3462f849df09d1c4674b27104105a9876468f4eb2d2ec98a7206feaa125095f0fb5928554a622a92bc46ea1dacaf5d22a6f122ba0ca495c61c4fc7fb966","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\Stationery\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=8a35614ce8db64473fdc903edc6d452d275bcb6efeecf2d9a93fcdba460b6700b67e6215b3754973ee94021748a840d53e7171cb3e229c968d932c1188ebcce9b7e2dbbe4043c723d35ee6b250fe72ff92f7","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=8a35614ce8db64473fdc903edc6d452d275bcb6efeecf2d9a93fcdba460b6700b67e6215b3754973ee94021748a840d53e7171cb3e229c968d932c1188ebcce9b7e2dbbe4043c723d35ee6b250fe72ff92f7","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\Microsoft Office\\Templates\\1033\\ONENOTE\\14\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=2dfabe605c03b235affc4a9999b47ede66f2153414e5f9ac4b8ff35cdca6973d81f380b386bec83bbf11ee618e99994fa6a83edac7049864743e6f1d12f50672ebf011fad13a16bf08d4291c826bfe0e3cde71","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=2dfabe605c03b235affc4a9999b47ede66f2153414e5f9ac4b8ff35cdca6973d81f380b386bec83bbf11ee618e99994fa6a83edac7049864743e6f1d12f50672ebf011fad13a16bf08d4291c826bfe0e3cde71","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\Microsoft Office\\Templates\\1033\\ONENOTE\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=2d47fb09578daf19a07dc10187b6ec5963bd033aebedbbdec5e83dbf02feb3148cf3338372fcb0017b3b4e68ae693da585dbd157de597c056b1c5a862fcf692b89c45acdd4301e20f7e083426972052742a949","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=2d47fb09578daf19a07dc10187b6ec5963bd033aebedbbdec5e83dbf02feb3148cf3338372fcb0017b3b4e68ae693da585dbd157de597c056b1c5a862fcf692b89c45acdd4301e20f7e083426972052742a949","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\Microsoft Office\\Templates\\1033\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=8719fe49f5c3f2143656a0e0a960fb91b9c4cc1788ad59840402f4c943e3922413792214592aada0975dc26cfca6943c3ee7f407922221059cea0556be0fa3e354d42dab0a211a099798e30a58742f67b3ee59","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=8719fe49f5c3f2143656a0e0a960fb91b9c4cc1788ad59840402f4c943e3922413792214592aada0975dc26cfca6943c3ee7f407922221059cea0556be0fa3e354d42dab0a211a099798e30a58742f67b3ee59","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\Microsoft Office\\Templates\\Presentation Designs\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=027fc8fd47daaba0fa2913923aad885c5ef72cfd3042725972cec79a9a8fe4e42dc9bacfb558dcbb7de00ef61c7f83417856e1ec1a2ad58d0f4a2501bb8cd4c69cd28644cc21b8b4e6b5a6c4e43bb88de56bfe","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=027fc8fd47daaba0fa2913923aad885c5ef72cfd3042725972cec79a9a8fe4e42dc9bacfb558dcbb7de00ef61c7f83417856e1ec1a2ad58d0f4a2501bb8cd4c69cd28644cc21b8b4e6b5a6c4e43bb88de56bfe","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\Microsoft Office\\Templates\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=9adc5d511fd9bb15f1eddca0d2d9d73373557923b3ea1d432784869aed922d680f6fcb62e1c27c54df12023c374a30aff2ccae30e7c7b4a64e43b9ce886868e9377b9eabbef9bf03c7db755595d1ff23df2c8b","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=9adc5d511fd9bb15f1eddca0d2d9d73373557923b3ea1d432784869aed922d680f6fcb62e1c27c54df12023c374a30aff2ccae30e7c7b4a64e43b9ce886868e9377b9eabbef9bf03c7db755595d1ff23df2c8b","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\Microsoft Office\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=1bde562010a9e20ed5230fbeed9a904e2b2b6f3ddfba16062b53ff07514175e1f5e9aec077808c7f3497957ee8c0c878872b8612c4acfb6729d6d5b3c2d7575a54e7932f7633b5cb6d28337471c7b12392c9bc","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=1bde562010a9e20ed5230fbeed9a904e2b2b6f3ddfba16062b53ff07514175e1f5e9aec077808c7f3497957ee8c0c878872b8612c4acfb6729d6d5b3c2d7575a54e7932f7633b5cb6d28337471c7b12392c9bc","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\Microsoft Sync Framework\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=6f3bb044d7a6f3302b33bcaf37bcd1b14c81cea8ba6188a56b6dcc389b3e2e6d7923652ca0a9a3668574fc15a110841660cc9b32a6e3bce930cabe337bea9bff5e17656109d3d71b75900fb2fb25449e3ecf1e","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=6f3bb044d7a6f3302b33bcaf37bcd1b14c81cea8ba6188a56b6dcc389b3e2e6d7923652ca0a9a3668574fc15a110841660cc9b32a6e3bce930cabe337bea9bff5e17656109d3d71b75900fb2fb25449e3ecf1e","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\License Agreements\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=5ee5387da71f447be7dbd27ac23c29078590d25a8fbaef44d98340e2aeefdb8ea7f651c3fce203314fe31aa443cfe084b6d4379084835ccc11320be32d7283331a32c6b518e5919063d0e331a2a305eeb9d1","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=5ee5387da71f447be7dbd27ac23c29078590d25a8fbaef44d98340e2aeefdb8ea7f651c3fce203314fe31aa443cfe084b6d4379084835ccc11320be32d7283331a32c6b518e5919063d0e331a2a305eeb9d1","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\Microsoft Sync Framework\\v1.0\\Documentation\\1033\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=c1376835ae68cf2ad691e9e0fa3c267224fa80c078ad0a07e1483aa0f67b034e923fcc9c304d071e179b0728cf757fade1aace7c5ee21a42ec9b974ff4d154d27ff063fcf1d1221ea006bc1edf04e9a4313313","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=c1376835ae68cf2ad691e9e0fa3c267224fa80c078ad0a07e1483aa0f67b034e923fcc9c304d071e179b0728cf757fade1aace7c5ee21a42ec9b974ff4d154d27ff063fcf1d1221ea006bc1edf04e9a4313313","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\Microsoft Sync Framework\\v1.0\\Documentation\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=426488cdd38e744b9a1d198a993c0482230df2fdaa8a836bbfc0d52055a065d3c61abe340387c8a7cf825ae2a0f80b4c363f0c7642c78932a1f974944658fd44be8a9d70e27714a8748162e4a62f889149e177","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=426488cdd38e744b9a1d198a993c0482230df2fdaa8a836bbfc0d52055a065d3c61abe340387c8a7cf825ae2a0f80b4c363f0c7642c78932a1f974944658fd44be8a9d70e27714a8748162e4a62f889149e177","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\Microsoft Sync Framework\\v1.0\\Runtime\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=543e3dab3155ac378274e827f7965c76d09f9c3e53b37ce5ccdb0905ea598af2f8b242d25e6a7d740632e7d8e7747cc76c7da48186d37bcd4ad025851ef3013d8bdc76985d102491a0ca269e27ff616d67ff7a","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=543e3dab3155ac378274e827f7965c76d09f9c3e53b37ce5ccdb0905ea598af2f8b242d25e6a7d740632e7d8e7747cc76c7da48186d37bcd4ad025851ef3013d8bdc76985d102491a0ca269e27ff616d67ff7a","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\Microsoft Sync Framework\\v1.0\\Runtime\\x64\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=16d94504650d7255f4c6016a48c5c926a1bcb2f56291a6a5868a9e53964c64fa70a02db2ef48483aae2f789cd3da57a69239b6edb3843162e5cd366e75524c884e04dd8126a8b798b134e7a519bf4a59bd8991","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=16d94504650d7255f4c6016a48c5c926a1bcb2f56291a6a5868a9e53964c64fa70a02db2ef48483aae2f789cd3da57a69239b6edb3843162e5cd366e75524c884e04dd8126a8b798b134e7a519bf4a59bd8991","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\Microsoft Sync Framework\\v1.0\\Runtime\\x64\\resources\\1033\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=9ec1acab2f26874076f90162c45b4d663e9386fe70a77b0df922ca0408ca53ea6da706dcfb59a40f30c8c4e9d24cbf037efdc49f960ad1e5b38cb1d6bbd7e167e80b60225f11b37000cb488a0c4bc794ad678a","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=9ec1acab2f26874076f90162c45b4d663e9386fe70a77b0df922ca0408ca53ea6da706dcfb59a40f30c8c4e9d24cbf037efdc49f960ad1e5b38cb1d6bbd7e167e80b60225f11b37000cb488a0c4bc794ad678a","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\Microsoft Sync Framework\\v1.0\\Runtime\\x64\\resources\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=370c3b74177a0c4894ef3c0ce97eb6b628c1b96dc10aeb46b310447c81f4facf8e987fc9665a50b912be863f16a746aff4b1f8876b97b42a0c14b7c70da4853e85666198e050e9fd570d34190a5ad9f1d8ce68","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=370c3b74177a0c4894ef3c0ce97eb6b628c1b96dc10aeb46b310447c81f4facf8e987fc9665a50b912be863f16a746aff4b1f8876b97b42a0c14b7c70da4853e85666198e050e9fd570d34190a5ad9f1d8ce68","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\Microsoft Sync Framework\\v1.0\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=81fc9abf06cf9d74f1f02e28ab13d421e061c197cf391cb54c9c928be42227185d693fa4a654915081169ba8c380efdceda7da35c3d82c4384e2c42a1630b0230e7a28deb0002fbef27d3aed52633e7e4dfa","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=81fc9abf06cf9d74f1f02e28ab13d421e061c197cf391cb54c9c928be42227185d693fa4a654915081169ba8c380efdceda7da35c3d82c4384e2c42a1630b0230e7a28deb0002fbef27d3aed52633e7e4dfa","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\Microsoft\\EdgeUpdater\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=c59c14ba141ffa19092adae14c13fd518297acb33329ba16b6be6c5a771533a99a75a9af84d4c0765ee37e96a19a18baba3df87f4163fd9fe62b0e985c44d0306c3fd8c78aace805dd09f94aa70ff205cd8c5b","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=c59c14ba141ffa19092adae14c13fd518297acb33329ba16b6be6c5a771533a99a75a9af84d4c0765ee37e96a19a18baba3df87f4163fd9fe62b0e985c44d0306c3fd8c78aace805dd09f94aa70ff205cd8c5b","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\Microsoft\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=00cdd8aa201aad26ab7f347f3119ae656a256029fae11bc37ae5ff008862c44186ecb20855f0beac6487caf847a688aa7fb131d6b815a2402e2afe82ab9856bbff738bba57f0e85742456e59e22904e747086f","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=00cdd8aa201aad26ab7f347f3119ae656a256029fae11bc37ae5ff008862c44186ecb20855f0beac6487caf847a688aa7fb131d6b815a2402e2afe82ab9856bbff738bba57f0e85742456e59e22904e747086f","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\Npcap\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=5af7affec4ae38a055595380dd9b9ff09bbe15dc648125ab2cef884aa79c9249a98d8ddba8b0adcef9306fefa5b4be1ebc2523e547404c02ca33420166a34d45ffef00fd4ee33828c3cd3cb3a0ac27b39983f3","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=5af7affec4ae38a055595380dd9b9ff09bbe15dc648125ab2cef884aa79c9249a98d8ddba8b0adcef9306fefa5b4be1ebc2523e547404c02ca33420166a34d45ffef00fd4ee33828c3cd3cb3a0ac27b39983f3","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\Oracle\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=7906fa0ad816a0322176dfc7e9a679a9c0bb949ccfe2691e122fd63d1c35e314234bb864e958a56507a093b6e7160379ccc46e6bd9edd1ad884f4604e40e90a52e03f54dc573cb7e41516a7d4cf70fb8d2d063","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=7906fa0ad816a0322176dfc7e9a679a9c0bb949ccfe2691e122fd63d1c35e314234bb864e958a56507a093b6e7160379ccc46e6bd9edd1ad884f4604e40e90a52e03f54dc573cb7e41516a7d4cf70fb8d2d063","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=60f9103d3a8bd4c0da7624d7db5e803d5d896ede3b2945cac0966b3764d081fcf147c09dc04bc9d76d9a5c3f31b0b78f5ecf55397485fec7cc6be0faea6365f7d8d369e93c9752a948cc4f8c268078d73480","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=60f9103d3a8bd4c0da7624d7db5e803d5d896ede3b2945cac0966b3764d081fcf147c09dc04bc9d76d9a5c3f31b0b78f5ecf55397485fec7cc6be0faea6365f7d8d369e93c9752a948cc4f8c268078d73480","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\mitmproxy\\bin\\certifi\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=13b2b348e7e0fac616b261aa4e0a1d4428b98fb3584db08e3a0fabf2ae3aaa7d2928e52b898697816efc669b651b80bbb1ab3ee1229607f54a29a3e8859b7abd0e668ce07e1ef83e3d5ac2faf240ab7f6aaccd","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=13b2b348e7e0fac616b261aa4e0a1d4428b98fb3584db08e3a0fabf2ae3aaa7d2928e52b898697816efc669b651b80bbb1ab3ee1229607f54a29a3e8859b7abd0e668ce07e1ef83e3d5ac2faf240ab7f6aaccd","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\mitmproxy\\bin\\cryptography-37.0.2.dist-info\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=acee2f3d69591e3d48f16600b073698169348fa1ce12cac2567c8a6108b08bf69a5816f9d92896c8b58501af5ed074d1ee0d8ff95ec98600eb93bf364007d22ece715d560448438bbc5ecee0b8f1b0d3f83c81","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=acee2f3d69591e3d48f16600b073698169348fa1ce12cac2567c8a6108b08bf69a5816f9d92896c8b58501af5ed074d1ee0d8ff95ec98600eb93bf364007d22ece715d560448438bbc5ecee0b8f1b0d3f83c81","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\mitmproxy\\bin\\cryptography\\hazmat\\bindings\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=b1ff788f3485eccd342958c9e3612cbd6673ddd9f918544e1b7059e69ba748bbdccd6e293d37465bb7681c4b18b354bffe75ab2c9fb0d14a566a511cdff730e90c098ee3c7eb83da4e90918732b06f36f55632","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=b1ff788f3485eccd342958c9e3612cbd6673ddd9f918544e1b7059e69ba748bbdccd6e293d37465bb7681c4b18b354bffe75ab2c9fb0d14a566a511cdff730e90c098ee3c7eb83da4e90918732b06f36f55632","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\mitmproxy\\bin\\cryptography\\hazmat\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=fcba48ac2840a50ece948506b4bf8a4baa9129cfc0824c967f0532a985110330544349c9e260e50715105233e419be54e149db148d281dffc11424c1dc109e65d53abdc2e24b2e807c878f4e0f1f789c8ca325","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=fcba48ac2840a50ece948506b4bf8a4baa9129cfc0824c967f0532a985110330544349c9e260e50715105233e419be54e149db148d281dffc11424c1dc109e65d53abdc2e24b2e807c878f4e0f1f789c8ca325","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\mitmproxy\\bin\\cryptography\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=ccdcf0615952125b28b689a4a14bb5795258097bda8fbdf6af0470b3f08e94e81bef3a39b6c440b78df1beddf1fab41db37c3c18a7ca176ee6e16c295039509a296ef46beeaa099d36e47b54726be4f044e8ae","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=ccdcf0615952125b28b689a4a14bb5795258097bda8fbdf6af0470b3f08e94e81bef3a39b6c440b78df1beddf1fab41db37c3c18a7ca176ee6e16c295039509a296ef46beeaa099d36e47b54726be4f044e8ae","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\mitmproxy\\bin\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=60609b53aaae6c6523f0d42e0b83e55e3b0a2906a38cf8152d0ddc0105e0f8e6ab1f628385618b29f7da8505703e750648d4b531b233eea3e0bf89e3ebb2acd9411493d6e780c43a9c3754dcfb7a5844868678","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=60609b53aaae6c6523f0d42e0b83e55e3b0a2906a38cf8152d0ddc0105e0f8e6ab1f628385618b29f7da8505703e750648d4b531b233eea3e0bf89e3ebb2acd9411493d6e780c43a9c3754dcfb7a5844868678","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\mitmproxy\\bin\\markupsafe\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=916dc1f94219e55a23314b0b93944f55d5683d107d6cad807c25166a2fa5132be21cd317b034dfe5451da3fd6487945785aba0964c2cb937268450667d518fbec07813fac0d5d3ba700c50d752ab6aa7f20290","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=916dc1f94219e55a23314b0b93944f55d5683d107d6cad807c25166a2fa5132be21cd317b034dfe5451da3fd6487945785aba0964c2cb937268450667d518fbec07813fac0d5d3ba700c50d752ab6aa7f20290","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\mitmproxy\\bin\\mitmproxy\\addons\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=db0ce0750cbca786512394e9be912f5f17638deca1708bf2435a25b4a664d6a74089635c1d459795d7c4e22ae2282bb99d569b86e518bf5e38a03576d6cee054438fb0c6078433efe59007f0a13f9ac699048a","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=db0ce0750cbca786512394e9be912f5f17638deca1708bf2435a25b4a664d6a74089635c1d459795d7c4e22ae2282bb99d569b86e518bf5e38a03576d6cee054438fb0c6078433efe59007f0a13f9ac699048a","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\mitmproxy\\bin\\mitmproxy\\addons\\onboardingapp\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=1eb49b021c3da547e1456a7ebb5296dd43b6080fb4d3f0a556b6832562f1b3c499f9b550c60ba7583ebbcb97fa6fbbef3d6968abd14ff224d31bf8ca02512044c989659c273039c1ace62199119f2ba07c0d7e","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=1eb49b021c3da547e1456a7ebb5296dd43b6080fb4d3f0a556b6832562f1b3c499f9b550c60ba7583ebbcb97fa6fbbef3d6968abd14ff224d31bf8ca02512044c989659c273039c1ace62199119f2ba07c0d7e","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\mitmproxy\\bin\\mitmproxy\\addons\\onboardingapp\\static\\images\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=6260988534c591a74641f6dcbbef4e61420fdefae376782e7c27e094138628701824539dd2b5610865e7855ac0a5fc2d15b2c4c69458dd412e35ddfbdd2e2752d7a11777d526ec8392cbc15056e6912ce424","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=6260988534c591a74641f6dcbbef4e61420fdefae376782e7c27e094138628701824539dd2b5610865e7855ac0a5fc2d15b2c4c69458dd412e35ddfbdd2e2752d7a11777d526ec8392cbc15056e6912ce424","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\mitmproxy\\bin\\mitmproxy\\addons\\onboardingapp\\static\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=c368ce5ff621be0403c48f6793eb03a457e141ce3f47f3093e59378c31fa3cdbcec1830bb94f006c6c1b080938c0c1036263ce17b2cabf705e28aaa3a712e05d06934ef6a03755c25b7b7614e5166ca451f253","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=c368ce5ff621be0403c48f6793eb03a457e141ce3f47f3093e59378c31fa3cdbcec1830bb94f006c6c1b080938c0c1036263ce17b2cabf705e28aaa3a712e05d06934ef6a03755c25b7b7614e5166ca451f253","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\mitmproxy\\bin\\mitmproxy\\addons\\onboardingapp\\templates\\icons\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=75571d9816859ae890984877d5011b98a83e08055f24ebe7f48b6d040d6196a309295420001fef5c330c1a172b69b12fbfaa7e3d28e4c19cba28f2fdf501b03e37a00e25a461658d6f5555c85f2de33efc3a28","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=75571d9816859ae890984877d5011b98a83e08055f24ebe7f48b6d040d6196a309295420001fef5c330c1a172b69b12fbfaa7e3d28e4c19cba28f2fdf501b03e37a00e25a461658d6f5555c85f2de33efc3a28","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\mitmproxy\\bin\\mitmproxy\\addons\\onboardingapp\\templates\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=1195f282ea30d11511d3af62268d8af6b81da69aa846322d4533569113b6ea9c6eb6b47b7f71c7f068ac27651ee8fcb278e0d55b80c8663f04b6bb7505f5c23f22ad679913e9eaa9fd725c8f99d47f87ec36","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=1195f282ea30d11511d3af62268d8af6b81da69aa846322d4533569113b6ea9c6eb6b47b7f71c7f068ac27651ee8fcb278e0d55b80c8663f04b6bb7505f5c23f22ad679913e9eaa9fd725c8f99d47f87ec36","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\mitmproxy\\bin\\mitmproxy\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=c0bc0d1bf9eeaa6e33ca6977ad31de1cdc820653554d5c7ad2e5e3f28770a90e043d71f010897b0c1923046b73ecb4b1ca4d3ca998a1433615ea7681a13439fc55feda8c24d2bcf9d79ae547309a800087fed7","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=c0bc0d1bf9eeaa6e33ca6977ad31de1cdc820653554d5c7ad2e5e3f28770a90e043d71f010897b0c1923046b73ecb4b1ca4d3ca998a1433615ea7681a13439fc55feda8c24d2bcf9d79ae547309a800087fed7","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\mitmproxy\\bin\\mitmproxy\\tools\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=39dbbb2e310964734908666e71c8ddfe16f9ed59dcf317e44355f4e576543d85578eb76e0c1f4c437e0d1dfd665c73da428d0537cbbf830c23545121f645988ed43da5579ff0dba0842e2d2e9d705a4b9d164c","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=39dbbb2e310964734908666e71c8ddfe16f9ed59dcf317e44355f4e576543d85578eb76e0c1f4c437e0d1dfd665c73da428d0537cbbf830c23545121f645988ed43da5579ff0dba0842e2d2e9d705a4b9d164c","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\mitmproxy\\bin\\mitmproxy\\tools\\web\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=1915e36bafbadcaf67db0f90e7ebd33f6ddf928b0c5ff958fd2529f9a3d86808eba24cff174074e10bc7822c5002146462dd878a0d2bb7c60aa90cba1105c4e3e3da76768dc074c5fc4f9aa911f73fc4bb801b","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=1915e36bafbadcaf67db0f90e7ebd33f6ddf928b0c5ff958fd2529f9a3d86808eba24cff174074e10bc7822c5002146462dd878a0d2bb7c60aa90cba1105c4e3e3da76768dc074c5fc4f9aa911f73fc4bb801b","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\mitmproxy\\bin\\mitmproxy\\tools\\web\\static\\fonts\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=380a86e5ee3cf7bebb77b5aea11a0f4b69d1f0f27b6d1af13aa00d984e188b29d5ee776a509c1df8fe651acedc0f643dfa7e13e8925c8b640c8f13ada34c45283cf90e4fc20376e722996143644bb911d2f3","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=380a86e5ee3cf7bebb77b5aea11a0f4b69d1f0f27b6d1af13aa00d984e188b29d5ee776a509c1df8fe651acedc0f643dfa7e13e8925c8b640c8f13ada34c45283cf90e4fc20376e722996143644bb911d2f3","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\mitmproxy\\bin\\mitmproxy\\tools\\web\\static\\images\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=3adc52968970b25a2778ae897efce221b537c18c8a6144b3221a17e3ff3658b26c592e599a1a352181e59448c2b0f6fa4498de9e507327a3f8801229e1f81bbbb1e1e8edd09fd3d500879f1310528ede07603d","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=3adc52968970b25a2778ae897efce221b537c18c8a6144b3221a17e3ff3658b26c592e599a1a352181e59448c2b0f6fa4498de9e507327a3f8801229e1f81bbbb1e1e8edd09fd3d500879f1310528ede07603d","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\mitmproxy\\bin\\mitmproxy\\tools\\web\\static\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=896006860e70f89738e16b64a031bb8e7c62ecaadebbf69342f68490db20bc368d10fa11d07cce4dfe7837733ff5b48f14679d95e13b0ad19e3c0c1db344e84779a63c0a5759765bb3e158f57798f124e834c8","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=896006860e70f89738e16b64a031bb8e7c62ecaadebbf69342f68490db20bc368d10fa11d07cce4dfe7837733ff5b48f14679d95e13b0ad19e3c0c1db344e84779a63c0a5759765bb3e158f57798f124e834c8","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\mitmproxy\\bin\\mitmproxy\\tools\\web\\templates\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=af39635e1216d017e27c0765322e6791b198f779e094d13ed3e0c2fd26df66c17c091bd59b7898c72f99f3b33295014f3507e28026c5eeea60cd5e6118e6445842302e12766302a659fee2be737eb277b46846","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=af39635e1216d017e27c0765322e6791b198f779e094d13ed3e0c2fd26df66c17c091bd59b7898c72f99f3b33295014f3507e28026c5eeea60cd5e6118e6445842302e12766302a659fee2be737eb277b46846","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\mitmproxy\\bin\\msgpack\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=8414984acddb30dca97a1ca58839b38079ef1d6cf1a0e921778a936a05e3eb3095647d9eb49ce405df9f3dcadecf7d5d83f71231d2a0aea67037e7f78020e13db77e8f7eeab5c8c11bcdc21830fa4aadbc450f","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=8414984acddb30dca97a1ca58839b38079ef1d6cf1a0e921778a936a05e3eb3095647d9eb49ce405df9f3dcadecf7d5d83f71231d2a0aea67037e7f78020e13db77e8f7eeab5c8c11bcdc21830fa4aadbc450f","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\mitmproxy\\bin\\publicsuffix2\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=9724e6471986ca7522176b4a3c74fc809f27a5ed7d717cbb49e8eb4dc4c4da09fe0fcd24b1db25626107dae4c7d628bc1de11e7c77b2cc481af93ece1a5dfbd6532eb5d1c0781330084f00ce29aca28c283c7a","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=9724e6471986ca7522176b4a3c74fc809f27a5ed7d717cbb49e8eb4dc4c4da09fe0fcd24b1db25626107dae4c7d628bc1de11e7c77b2cc481af93ece1a5dfbd6532eb5d1c0781330084f00ce29aca28c283c7a","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\mitmproxy\\bin\\pydivert\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=602140179ce8a37aa161c0dbfd068e7c7b888791e520ef799d524ccc0728c572a66018295e8d0f44f780c1c3d9e5455fd01e6f4b03a3f58c20210a9ad21ac7579e84e500382d610c9b7df26d1148501a0065","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=602140179ce8a37aa161c0dbfd068e7c7b888791e520ef799d524ccc0728c572a66018295e8d0f44f780c1c3d9e5455fd01e6f4b03a3f58c20210a9ad21ac7579e84e500382d610c9b7df26d1148501a0065","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\mitmproxy\\bin\\pydivert\\windivert_dll\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=7f3d0d65c67caae744730c54a04b0f69a4997746f2dfc46160fb5c475fe08edc64a3547fd72f776217797a5b92246cde2beee15d328bc87cf197f310252577957cedec81437d431435591cdfea6da26d11ddf6","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=7f3d0d65c67caae744730c54a04b0f69a4997746f2dfc46160fb5c475fe08edc64a3547fd72f776217797a5b92246cde2beee15d328bc87cf197f310252577957cedec81437d431435591cdfea6da26d11ddf6","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\mitmproxy\\bin\\tornado\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=a4b7ee3cb3fa98b14919646f5eb5bf00e5e4651c3a1e108855bc1042d0f4c28c5be5c377cd79147af9c11b1d6cc38310059fb57a242256087b17e4dc2bb61855d6d839e45dc73f1069558da565d8d3372d240d","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=a4b7ee3cb3fa98b14919646f5eb5bf00e5e4651c3a1e108855bc1042d0f4c28c5be5c377cd79147af9c11b1d6cc38310059fb57a242256087b17e4dc2bb61855d6d839e45dc73f1069558da565d8d3372d240d","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\mitmproxy\\bin\\urwid\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=3ab2ab92b29f31a95531e86fdcdf8580dec890beb1acbbc8f1ffb5a7119ded7f7deedabce7873a8c06352618e96ffc3a81260d37bab2c115f338200ed8e0db7fdc7e370b4065c204a336bed7f005f2042837","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=3ab2ab92b29f31a95531e86fdcdf8580dec890beb1acbbc8f1ffb5a7119ded7f7deedabce7873a8c06352618e96ffc3a81260d37bab2c115f338200ed8e0db7fdc7e370b4065c204a336bed7f005f2042837","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\mitmproxy\\bin\\zstandard\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=7a27c989f4215bf974bf2afc254feb1835088e89687abdcd5c6c7423ece61621790a68aebdd5f5993d37380a45c206ab388f6da33aa8e04d42b76bdc36cc028506e4d08064a4fd20bae45e6fd9fc443bf0626b","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=7a27c989f4215bf974bf2afc254feb1835088e89687abdcd5c6c7423ece61621790a68aebdd5f5993d37380a45c206ab388f6da33aa8e04d42b76bdc36cc028506e4d08064a4fd20bae45e6fd9fc443bf0626b","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%PROGRAMFILES%\\mitmproxy\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=0edd1967a1d44674aea06b641271ff8b68b6214b2a30226ae5b586d842053d4647a5e33244c43e3954bf9fab947472d267e99d933b8138710e9e6d710e5556756b4596104ad1a6224b509884a8a5b1540ab80f","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=0edd1967a1d44674aea06b641271ff8b68b6214b2a30226ae5b586d842053d4647a5e33244c43e3954bf9fab947472d267e99d933b8138710e9e6d710e5556756b4596104ad1a6224b509884a8a5b1540ab80f","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"%USERPROFILE%\\Desktop\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=6763079b9e8adc8053a5defd6c3d8ab7d25df83b566c43f2995c0b544239fb451032641bd0446ef29cbaf63c3bfa0ee20b82a2e349de37245d7e6177918d7804eea4fc5656b93df1ad2535b928a2be5fffca7d","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=6763079b9e8adc8053a5defd6c3d8ab7d25df83b566c43f2995c0b544239fb451032641bd0446ef29cbaf63c3bfa0ee20b82a2e349de37245d7e6177918d7804eea4fc5656b93df1ad2535b928a2be5fffca7d","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"C:\\MSOCache\\All Users\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=496fb97e42bf378fee8285913229661ca122ed1a17542ade587674b8d259fa52f1735f0a23551e6454ddfaa1c57bb74ebe431df8e1789c16bff65adabde5759d97ecfca15190bc361d3d1d2dbb07a1714b7ce7","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=496fb97e42bf378fee8285913229661ca122ed1a17542ade587674b8d259fa52f1735f0a23551e6454ddfaa1c57bb74ebe431df8e1789c16bff65adabde5759d97ecfca15190bc361d3d1d2dbb07a1714b7ce7","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=2356f399ac1567c938606ae39d811157e0db75ed421785f320754fcc77ec9a4901e1cedb8c839af6521aa0f9d98f80bb821de783fdfa0caea1b1ef62ca09978d3990ac6af81d0e345c84dae1af395751e20fb2","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=2356f399ac1567c938606ae39d811157e0db75ed421785f320754fcc77ec9a4901e1cedb8c839af6521aa0f9d98f80bb821de783fdfa0caea1b1ef62ca09978d3990ac6af81d0e345c84dae1af395751e20fb2","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=e4a41ec01af7ec017e1ec2399515e67c0a8c2edfb7dfccda4d8fcf862e0b018bf284e8e776fd48f0e584765ceca545957499f0cfecf7a8ee67ba3588c09c2c0e9b90f43016779555727d9ff2346309cffcec26","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=e4a41ec01af7ec017e1ec2399515e67c0a8c2edfb7dfccda4d8fcf862e0b018bf284e8e776fd48f0e584765ceca545957499f0cfecf7a8ee67ba3588c09c2c0e9b90f43016779555727d9ff2346309cffcec26","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=2e5da0658389271a38c6b6b7c49727ca1e02750249f98841d6c3b4f71a146191451d189b8979896dd2928d1a508c4468fc3f4713d2ecbbfa49312cae7a619f5f8cdd6827f4948a83d9d4440e3639f88721ee33","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=2e5da0658389271a38c6b6b7c49727ca1e02750249f98841d6c3b4f71a146191451d189b8979896dd2928d1a508c4468fc3f4713d2ecbbfa49312cae7a619f5f8cdd6827f4948a83d9d4440e3639f88721ee33","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=14e4a46cd01abd2f64dead3d94166255a63423bba1c8c20748bed21fdbd0350b021e6e56acc38aa863fe7a903127a7aad8ab9818e6fbbef4f3a134325c2d85af9e8b87e032a1a09618d588a810c03e2d80af","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=14e4a46cd01abd2f64dead3d94166255a63423bba1c8c20748bed21fdbd0350b021e6e56acc38aa863fe7a903127a7aad8ab9818e6fbbef4f3a134325c2d85af9e8b87e032a1a09618d588a810c03e2d80af","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=3cf8919da38aabf2b35d35c8617af388999afea0eb769d2ee53178f51b913c7013d379fa4faf9b9d1078a783c73912e0b5b88a755ace3d4ddb0e0998052d3874a78f371a431d782af2235c4a98abe5f68a9eaf","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=3cf8919da38aabf2b35d35c8617af388999afea0eb769d2ee53178f51b913c7013d379fa4faf9b9d1078a783c73912e0b5b88a755ace3d4ddb0e0998052d3874a78f371a431d782af2235c4a98abe5f68a9eaf","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=2d1bd887e571d27b33e16cf1aafeeb41a1db3f8799feb8fafd27f85da121a712435a6294db24f982e1b6af5300b9437af5b29bcd761715cc06c5cabba1e0d8aaee6f839008f0ad402438813d27698a837cf505","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=2d1bd887e571d27b33e16cf1aafeeb41a1db3f8799feb8fafd27f85da121a712435a6294db24f982e1b6af5300b9437af5b29bcd761715cc06c5cabba1e0d8aaee6f839008f0ad402438813d27698a837cf505","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=071cd8c1fa77d5c9da977f0eafaaa1e48d11abfc2da3af527a34a3da79f51afee565d1938d5bd050083e1baa8f480f9a382fa25313753ec5606ff1362a67310b7cfe47c1898cf7f81e60b18bc21bb48213dfe1","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=071cd8c1fa77d5c9da977f0eafaaa1e48d11abfc2da3af527a34a3da79f51afee565d1938d5bd050083e1baa8f480f9a382fa25313753ec5606ff1362a67310b7cfe47c1898cf7f81e60b18bc21bb48213dfe1","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=257641255d27250460ee9b3426580adcc0c806616da0df713e753430ed4f898fe10620d578b179994bcc4db73c6e2858d2b0de07b60853e5102438f2821583c18cc82a01b86602f2d5f32b1e870d99248be8e4","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=257641255d27250460ee9b3426580adcc0c806616da0df713e753430ed4f898fe10620d578b179994bcc4db73c6e2858d2b0de07b60853e5102438f2821583c18cc82a01b86602f2d5f32b1e870d99248be8e4","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=3caefe0abec5a69097e3f53dce0e79a2a904f5ca8d3a18c3ee3d7a4805392b8d2054d60f9023871f21e369600a83867c46b0647254a36ad008de5cdc879a8e38a7724c342911fcf5af9e02de172f8c692d9ed5","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=3caefe0abec5a69097e3f53dce0e79a2a904f5ca8d3a18c3ee3d7a4805392b8d2054d60f9023871f21e369600a83867c46b0647254a36ad008de5cdc879a8e38a7724c342911fcf5af9e02de172f8c692d9ed5","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=70b8a920892911fc386101dbc08a16c111ca4f976207bbc3695958f8253c9ef320dced4700501ca00467de3bf0b4139ffd70e327b8bb6f536e33bc67f274db4498497cf1c382cbbb835f481ecfde8b2d2aff","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=70b8a920892911fc386101dbc08a16c111ca4f976207bbc3695958f8253c9ef320dced4700501ca00467de3bf0b4139ffd70e327b8bb6f536e33bc67f274db4498497cf1c382cbbb835f481ecfde8b2d2aff","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=3ff91708dc5f89abc9b6203fd31a8189f6c9f872ac54888d3050ae332ca71bb6f29b39f760955f74a2d401aafa333ee0ed170d71a9d41dcffa468ea0259d6486f7d28c0e1af36404c986c1ca8a12e55eb7e4e2","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=3ff91708dc5f89abc9b6203fd31a8189f6c9f872ac54888d3050ae332ca71bb6f29b39f760955f74a2d401aafa333ee0ed170d71a9d41dcffa468ea0259d6486f7d28c0e1af36404c986c1ca8a12e55eb7e4e2","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=be518f49129601a1f147e0f143ff5969b2630562e619722e840913361a7d13b97bb8648a0c9d4e64926dba48b32b0e0d64cdbef6f0bec0164ed2021e98d91291469933e89f50823c5fa834bb4003682369b38a","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=be518f49129601a1f147e0f143ff5969b2630562e619722e840913361a7d13b97bb8648a0c9d4e64926dba48b32b0e0d64cdbef6f0bec0164ed2021e98d91291469933e89f50823c5fa834bb4003682369b38a","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=0e580b1664d9cbd9dd92b30d9f547c2835432258117fdb924b60371222f4c9d29804f8b9d946b531d0f84f509882d512647bc7842208da0e439d6c6ee36f836b0345589f1ff5e55f3cdb3d59f2592005de","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=0e580b1664d9cbd9dd92b30d9f547c2835432258117fdb924b60371222f4c9d29804f8b9d946b531d0f84f509882d512647bc7842208da0e439d6c6ee36f836b0345589f1ff5e55f3cdb3d59f2592005de","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=6e47447c1c63618d928cd0308323d2d8d2425a3c98bbed1a288c76bd3e6ff730bac69cf0e12aac29ec1cd6b0a12e2038fa0c1e6a5e54857478da68bb81ad9078871ae9881d18cc5d98762f5dd5d8b5c84268c8","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=6e47447c1c63618d928cd0308323d2d8d2425a3c98bbed1a288c76bd3e6ff730bac69cf0e12aac29ec1cd6b0a12e2038fa0c1e6a5e54857478da68bb81ad9078871ae9881d18cc5d98762f5dd5d8b5c84268c8","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=f21c32407f5541765f400dee7c79ddc574d09615e8aa970548e3211682d23dc6c04d66e639e9e20351208656cb451d756c179a9820c0707df9c35634747c9daf8bde98b98fb5c8399c840502bab6e7472a4a4c","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=f21c32407f5541765f400dee7c79ddc574d09615e8aa970548e3211682d23dc6c04d66e639e9e20351208656cb451d756c179a9820c0707df9c35634747c9daf8bde98b98fb5c8399c840502bab6e7472a4a4c","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=abbfb72016bb0212394596949cb782dff8d0201bc1e42b1b0f7df2350d77e37b55f23c49eb1a5a4c22c5a5dac08cd774a428490ced884216459322cf210c529a25a9d6d1451545a4c69defea5a5dc2ba53495d","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=abbfb72016bb0212394596949cb782dff8d0201bc1e42b1b0f7df2350d77e37b55f23c49eb1a5a4c22c5a5dac08cd774a428490ced884216459322cf210c529a25a9d6d1451545a4c69defea5a5dc2ba53495d","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=019b1160990c819885900b256ac14568bd18082ddf3baf7750af41568ea96af5d7ac2b0486cd5b2d323fa4329281f6d0dc42a00a6868b0002867ec084a70582b7d80f6cb8a1c1ec52eeaa0875a3900de16f48c","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=019b1160990c819885900b256ac14568bd18082ddf3baf7750af41568ea96af5d7ac2b0486cd5b2d323fa4329281f6d0dc42a00a6868b0002867ec084a70582b7d80f6cb8a1c1ec52eeaa0875a3900de16f48c","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"C:\\MSOCache\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=3c0e2c287546d7265423bed9a6d0a00c6392e8c0f6aa32fcb70a1efe47bc7fd6f5157dace6e767db79ba4af0f430db43228cd59d11b74f3e8f279795f45d9132e6af9283388fc9c90c8f6fab63051433994cd9","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=3c0e2c287546d7265423bed9a6d0a00c6392e8c0f6aa32fcb70a1efe47bc7fd6f5157dace6e767db79ba4af0f430db43228cd59d11b74f3e8f279795f45d9132e6af9283388fc9c90c8f6fab63051433994cd9","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"C:\\PerfLogs\\Admin\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=1aab90a54b862605947b5140ddbbba38b99063c57143d1324bb3013ca69982017512e1f57389145b9222271bbcc7fbcc7284c0dc544ed384feecd2403eb8dc436672d2ecb27f29387c6137a4f0b3c07a00cd85","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=1aab90a54b862605947b5140ddbbba38b99063c57143d1324bb3013ca69982017512e1f57389145b9222271bbcc7fbcc7284c0dc544ed384feecd2403eb8dc436672d2ecb27f29387c6137a4f0b3c07a00cd85","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"C:\\PerfLogs\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=b0a41d7c146f797d264b0f12d5b70dd0bb7a823449015d8a2932bbfe1c8418c7ae4c746d60a415aab9be8527d68d609a19a76e04c7ba8ac5462ca66a1c7efada205c1be37b124149be7641c84e938ff23bab9c","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=b0a41d7c146f797d264b0f12d5b70dd0bb7a823449015d8a2932bbfe1c8418c7ae4c746d60a415aab9be8527d68d609a19a76e04c7ba8ac5462ca66a1c7efada205c1be37b124149be7641c84e938ff23bab9c","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"C:\\found.000\\dir0000.chk\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=ae758a5ea30fe6a14766a8fabfac5bdd916d53be758fb265ebdff9181862debed06cbe424eed5c884df67a48409e7ec2c2a53001a38d2b54632943a069ca3706c08450eff9acbbcf6fb371f43836af775377","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=ae758a5ea30fe6a14766a8fabfac5bdd916d53be758fb265ebdff9181862debed06cbe424eed5c884df67a48409e7ec2c2a53001a38d2b54632943a069ca3706c08450eff9acbbcf6fb371f43836af775377","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"C:\\found.000\\dir0001.chk\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=b32b443d2d32395ec84285b92ff7ad440995e3ba198bafc17014ecc5d30c151d7ce666bd5e769cc864450393e9de99cdb6e11a22525c7393c761a36f2d4a67669040d7c188a5e3d959cf51171d94854ca964","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=b32b443d2d32395ec84285b92ff7ad440995e3ba198bafc17014ecc5d30c151d7ce666bd5e769cc864450393e9de99cdb6e11a22525c7393c761a36f2d4a67669040d7c188a5e3d959cf51171d94854ca964","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"C:\\found.000\\dir0002.chk\\amd64_dual_basicdisplay.inf_31bf3856ad364e35_10.0.17134.1_none_15a0a24ecefe2c08\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=445f4ce5448f9106ee0bb19b569d3a688dff1c1aa5c83613741dfbe28ae1acfda9fc569501cf3e8f675caecd0eaf82bb06b6a6a9b7e088106763658d5e2bd3fcfd0cea695c5702615a4b10cb11126c75536f","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=445f4ce5448f9106ee0bb19b569d3a688dff1c1aa5c83613741dfbe28ae1acfda9fc569501cf3e8f675caecd0eaf82bb06b6a6a9b7e088106763658d5e2bd3fcfd0cea695c5702615a4b10cb11126c75536f","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"C:\\found.000\\dir0002.chk\\amd64_dual_basicrender.inf_31bf3856ad364e35_10.0.17134.1_none_d2a4d453fc2ccf14\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=8285754cfed26c5fc6d2cdd1430c320bec07fc5743dacc35681e58c6478939ff6adbccde6b7ff1c2c5a494ab5a6589e6e4d8b31ea9cdc11e109629e597407024e1ad54ba7ad735201ad374e8630b1ea83f76","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=8285754cfed26c5fc6d2cdd1430c320bec07fc5743dacc35681e58c6478939ff6adbccde6b7ff1c2c5a494ab5a6589e6e4d8b31ea9cdc11e109629e597407024e1ad54ba7ad735201ad374e8630b1ea83f76","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"C:\\found.000\\dir0002.chk\\amd64_dual_bthleenum.inf_31bf3856ad364e35_10.0.17134.1_none_9c8f8ab2e226b32e\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=f2970c87ed74593d6ff96568f6e745994950b35c5f61b3604bb6aa7bd19f1ad51b8d3c501c68de88ff92fbaf4a5b7caf8397e3a687e6b88e5486024249cee2ae309082903d745c5ec4e444327b980201e1ff","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=f2970c87ed74593d6ff96568f6e745994950b35c5f61b3604bb6aa7bd19f1ad51b8d3c501c68de88ff92fbaf4a5b7caf8397e3a687e6b88e5486024249cee2ae309082903d745c5ec4e444327b980201e1ff","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"C:\\found.000\\dir0002.chk\\amd64_dual_bthpan.inf_31bf3856ad364e35_10.0.17134.1_none_03fc23c4b916f8c3\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=eef57c8a46a968819c6d2ab013ca833ec91802d419399071d375c6bf45245449edda257e6047974c7da478ff9a75f8f23c81359e284399ad4872fb51462120d52683c36995d5dae58ee3348f7102ce1187fcd5","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=eef57c8a46a968819c6d2ab013ca833ec91802d419399071d375c6bf45245449edda257e6047974c7da478ff9a75f8f23c81359e284399ad4872fb51462120d52683c36995d5dae58ee3348f7102ce1187fcd5","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"C:\\found.000\\dir0002.chk\\amd64_dual_bthprint.inf_31bf3856ad364e35_10.0.17134.1_none_e35b5f7602624c2d\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=6c461fd634ba856eeebe1e5796f1c7c031cace6220e0f4726bc017b5110ed38a18021d7beef7f0dad2d3ee6186ec2d33e7adcb07973ae0b1ee5222b7102531a3c2df1fe45731e45e447151b0952bf7705baac6","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=6c461fd634ba856eeebe1e5796f1c7c031cace6220e0f4726bc017b5110ed38a18021d7beef7f0dad2d3ee6186ec2d33e7adcb07973ae0b1ee5222b7102531a3c2df1fe45731e45e447151b0952bf7705baac6","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"C:\\found.000\\dir0002.chk\\amd64_dual_buttonconverter.inf_31bf3856ad364e35_10.0.17134.1_none_7c47985213344f20\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=8f72731554abdee1e7c13f23c1001f63f6911e4c651b99403bc15a48b9538de62e770c10268410b40f4d07fa43cf53509cfe1578d4bb83718294de3845ddf721cd96218e887a9f36384d3e1dda383d21870554","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=8f72731554abdee1e7c13f23c1001f63f6911e4c651b99403bc15a48b9538de62e770c10268410b40f4d07fa43cf53509cfe1578d4bb83718294de3845ddf721cd96218e887a9f36384d3e1dda383d21870554","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"C:\\found.000\\dir0002.chk\\amd64_dual_c_barcodescanner.inf_31bf3856ad364e35_10.0.17134.1_none_42fc83d78749326c\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=53f1430d02e63cfebdc5696277e22b75fd44432d2848d630d67120110081f771c06706a21cec6eec888b20ec977fdc6083a801faac747c4041d16805a8f6de0a14ce90bbbbe337e3db2d715154d1fb53b587f2","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=53f1430d02e63cfebdc5696277e22b75fd44432d2848d630d67120110081f771c06706a21cec6eec888b20ec977fdc6083a801faac747c4041d16805a8f6de0a14ce90bbbbe337e3db2d715154d1fb53b587f2","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"C:\\found.000\\dir0002.chk\\amd64_dual_c_cashdrawer.inf_31bf3856ad364e35_10.0.17134.1_none_89197834e9647294\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=07d5a638905554636c14716d0efec302a64a8cb5e498770f86ed85a1922e671b0b5a0b36394bcdb6474027b561c8002c5bdd7739e75465463b4e68d53abd90ff5130ed5d2dea85bd9b68d52e06d7df738dd742","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=07d5a638905554636c14716d0efec302a64a8cb5e498770f86ed85a1922e671b0b5a0b36394bcdb6474027b561c8002c5bdd7739e75465463b4e68d53abd90ff5130ed5d2dea85bd9b68d52e06d7df738dd742","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"C:\\found.000\\dir0002.chk\\amd64_dual_c_linedisplay.inf_31bf3856ad364e35_10.0.17134.1_none_ad4727a8c2f25294\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=5fe6bd41790bc78263918a216125d5d9e64ced13d2b7d00ce339eb2e24ecb327c22fd11505c47aec24b6830c10ec700231d22eefb849dbf849c714a254d9d46c0ff7f539dba20b5f8642e3f7e765b5ebddd314","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=5fe6bd41790bc78263918a216125d5d9e64ced13d2b7d00ce339eb2e24ecb327c22fd11505c47aec24b6830c10ec700231d22eefb849dbf849c714a254d9d46c0ff7f539dba20b5f8642e3f7e765b5ebddd314","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"C:\\found.000\\dir0002.chk\\amd64_dual_c_magneticstripereader.inf_31bf3856ad364e35_10.0.17134.1_none_8ed26c3e962592c8\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=e510d1bccaf6b6b204f2115c38d94086415159d12324b33297107eaa058b1d696e44252322495986194ac74eb3053f502f67e1b6771bfa45ee5b96747cd1ba24710f88b90ad221f1850e1b8c7b9649414532","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=e510d1bccaf6b6b204f2115c38d94086415159d12324b33297107eaa058b1d696e44252322495986194ac74eb3053f502f67e1b6771bfa45ee5b96747cd1ba24710f88b90ad221f1850e1b8c7b9649414532","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"C:\\found.000\\dir0002.chk\\amd64_dual_c_receiptprinter.inf_31bf3856ad364e35_10.0.17134.1_none_c32532b5ff00a6b6\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=011353f196b61721dc6e89cc127065b74735c150067391ed4f1d37b94c6c7443bee4f2b814d520102906ef76d4bf2e4b1ea7bf3129812249a6740c02c9e03e0157e31b1ee27956091544047005541595597afb","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=011353f196b61721dc6e89cc127065b74735c150067391ed4f1d37b94c6c7443bee4f2b814d520102906ef76d4bf2e4b1ea7bf3129812249a6740c02c9e03e0157e31b1ee27956091544047005541595597afb","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"C:\\found.000\\dir0002.chk\\amd64_dual_display.inf_31bf3856ad364e35_10.0.17134.1_none_81e50fd40e84e47e\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=914d58d31e6557d399f1418c2cde84afdd8c9455efc480fd28720fcc6143822f59d57005e6c8924df0d1af997f074b0629657c680930f829e71c381a37091b6e2c91f10db6902feaffa6033ef5f655a43051f3","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=914d58d31e6557d399f1418c2cde84afdd8c9455efc480fd28720fcc6143822f59d57005e6c8924df0d1af997f074b0629657c680930f829e71c381a37091b6e2c91f10db6902feaffa6033ef5f655a43051f3","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"C:\\found.000\\dir0002.chk\\amd64_dual_fusionv2.inf_31bf3856ad364e35_10.0.17134.1_none_a2c130515c53981a\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=128401f2b24fe7cd4828c9e7186d355c5ef49ae02140878d79ef37974d2890bfaf5eeb2b00714c42ce06d355528588e06896a817bb3f458215632fe2728619c0a0261fdc487be236636a622b91f43c68bc21bb","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=128401f2b24fe7cd4828c9e7186d355c5ef49ae02140878d79ef37974d2890bfaf5eeb2b00714c42ce06d355528588e06896a817bb3f458215632fe2728619c0a0261fdc487be236636a622b91f43c68bc21bb","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"C:\\found.000\\dir0002.chk\\amd64_dual_hidbth.inf_31bf3856ad364e35_10.0.17134.1_none_29e1aeb7310c42dd\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=4636cbb5f046b92744a6b3928cc8283358b75306c7790299b7117939765d9843d0b0d368be8ceb8ee89d81e33a1fd0ecffeb9bb863fd36d3c19098c16c6f88fb04b27c92faec7fccf1e7acfef8914a75c0c0a1","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=4636cbb5f046b92744a6b3928cc8283358b75306c7790299b7117939765d9843d0b0d368be8ceb8ee89d81e33a1fd0ecffeb9bb863fd36d3c19098c16c6f88fb04b27c92faec7fccf1e7acfef8914a75c0c0a1","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"C:\\found.000\\dir0002.chk\\amd64_dual_hidbthle.inf_31bf3856ad364e35_10.0.17134.1_none_10c33264dc0d30f2\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=17993c847ea9536c851c199c3440dbee53f6fc767516d4225c13c81ae3975e1b19ee67ea43ce308c74f8c6023d32caab1ccf98ed4e3ca5ca205967b297c8879b9b1826ec47990437fe233219340f8669bca3dc","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=17993c847ea9536c851c199c3440dbee53f6fc767516d4225c13c81ae3975e1b19ee67ea43ce308c74f8c6023d32caab1ccf98ed4e3ca5ca205967b297c8879b9b1826ec47990437fe233219340f8669bca3dc","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"C:\\found.000\\dir0002.chk\\amd64_dual_hidinterrupt.inf_31bf3856ad364e35_10.0.17134.1_none_3c0d30c6df4b4ed4\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=eb6de7a404ec63042479570e780ad1af494f30bfa225ecd769300162cf0c94555542446ab213ce477519c61e8ccb3f4ff16705d3add1d088708bc86c503db0ec925f48c4bf3344d4bd2f9a5145e09b1c9334f6","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=eb6de7a404ec63042479570e780ad1af494f30bfa225ecd769300162cf0c94555542446ab213ce477519c61e8ccb3f4ff16705d3add1d088708bc86c503db0ec925f48c4bf3344d4bd2f9a5145e09b1c9334f6","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"C:\\found.000\\dir0002.chk\\amd64_dual_hidvhf.inf_31bf3856ad364e35_10.0.17134.1_none_5f058f010856977f\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=128a28ca625cc0275deeed4ec5a2db001a5f6571a01f684e670709b0057f14a3682b8e32b5e4654111534d78bb1c6ce9e02b9670e2c5c0564c2e8b5b6ea75a8888d8c175cdb4d9c37c920d1db618d86dbc27","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=128a28ca625cc0275deeed4ec5a2db001a5f6571a01f684e670709b0057f14a3682b8e32b5e4654111534d78bb1c6ce9e02b9670e2c5c0564c2e8b5b6ea75a8888d8c175cdb4d9c37c920d1db618d86dbc27","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"C:\\found.000\\dir0002.chk\\amd64_dual_idtsec.inf_31bf3856ad364e35_10.0.17134.1_none_d87a7ed99540aa4c\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=0f23dc6275c8a4904a9e70bc8f833ce4e2d91b6ca9e7a2304f19c812defc726f30e2369d053e75461fee7b70450809c29408466ee33519c3ef1f0ca73bf8b402243f50fc2f8974241b27b947b633bc9cfda7b1","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=0f23dc6275c8a4904a9e70bc8f833ce4e2d91b6ca9e7a2304f19c812defc726f30e2369d053e75461fee7b70450809c29408466ee33519c3ef1f0ca73bf8b402243f50fc2f8974241b27b947b633bc9cfda7b1","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"C:\\found.000\\dir0002.chk\\amd64_dual_mausbhost.inf_31bf3856ad364e35_10.0.17134.1_none_9f648b79c0f9f1c2\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=1cd4a611f1c69f32277078e4c3de5f7a8563bd65add54ee6395e9ac87f32079b895a3cbd0f416ae5ced83fd32f9b8f599677eeaff6c6012ca86494cf9d812d5ee0b380bf990969add387df4c13b9a22c908ffd","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=1cd4a611f1c69f32277078e4c3de5f7a8563bd65add54ee6395e9ac87f32079b895a3cbd0f416ae5ced83fd32f9b8f599677eeaff6c6012ca86494cf9d812d5ee0b380bf990969add387df4c13b9a22c908ffd","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"C:\\found.000\\dir0002.chk\\amd64_dual_mgtdyn.inf_31bf3856ad364e35_10.0.17134.1_none_cc195941b32e5da3\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=19c87f138d3f307d664cd94f7392bb21264012bc335a883b688285585868b6f4d3a904bdd92c432d27d736238531b5592cbcacfcb07d6973667012654a3e7976333a176556ffb07f476b397ea37b8ae2aeda","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=19c87f138d3f307d664cd94f7392bb21264012bc335a883b688285585868b6f4d3a904bdd92c432d27d736238531b5592cbcacfcb07d6973667012654a3e7976333a176556ffb07f476b397ea37b8ae2aeda","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"C:\\found.000\\dir0002.chk\\amd64_dual_miradisp.inf_31bf3856ad364e35_10.0.17134.1_none_c7e53ad6db9f67a9\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=d076e27eac7c578c2c1822d6c29d2578b1377ab8e04a187b029ad403b3ee2262f9a326d72290f5b407554175eee9ad6969f044ece2c253ffa408066eb6b5cd90679f2cfe2b6220d7d30835c1d4b08b86a348a1","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=d076e27eac7c578c2c1822d6c29d2578b1377ab8e04a187b029ad403b3ee2262f9a326d72290f5b407554175eee9ad6969f044ece2c253ffa408066eb6b5cd90679f2cfe2b6220d7d30835c1d4b08b86a348a1","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"C:\\found.000\\dir0002.chk\\amd64_dual_msgpiowin32.inf_31bf3856ad364e35_10.0.17134.1_none_5d85f18cc988b876\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=e0cef8bdcba46da3fd5fb3ac92da378cf0b084940e2fe0f5fbafe1d674669931a606aff9b842017dea5a45876a0caa80db663b0800aa34099d511d2fdb9460f4a4b35a01ebf991678fe7f13377f4cd9ab3d43e","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=e0cef8bdcba46da3fd5fb3ac92da378cf0b084940e2fe0f5fbafe1d674669931a606aff9b842017dea5a45876a0caa80db663b0800aa34099d511d2fdb9460f4a4b35a01ebf991678fe7f13377f4cd9ab3d43e","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"C:\\found.000\\dir0002.chk\\amd64_dual_msmouse.inf_31bf3856ad364e35_10.0.17134.1_none_c9127cd775ef8879\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=007dcc2c5338567cc07cc505c8fd6dde06065d4f0f6992bcfb6d7064f1ce53933d8f5c9e7923f16150f6c08b98eb9afd699c8832a09f132f94ec5ff7e779cc14f95e74aa508e0e94067c5ffff27df43bb05c81","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=007dcc2c5338567cc07cc505c8fd6dde06065d4f0f6992bcfb6d7064f1ce53933d8f5c9e7923f16150f6c08b98eb9afd699c8832a09f132f94ec5ff7e779cc14f95e74aa508e0e94067c5ffff27df43bb05c81","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"C:\\found.000\\dir0002.chk\\amd64_dual_ndisuio.inf_31bf3856ad364e35_10.0.17134.1_none_2456c3b1a5c2bb85\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=08d709f1f6b9be54d1189ec7c6122a395c5cda7be21fcc7150e402e0f56046097415bc7c58b0cebebb0cb3b6bd35343bc663cef2878d360f447a33664964915590fd9db6e7c3851f0c15257cc23399cbb0889f","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=08d709f1f6b9be54d1189ec7c6122a395c5cda7be21fcc7150e402e0f56046097415bc7c58b0cebebb0cb3b6bd35343bc663cef2878d360f447a33664964915590fd9db6e7c3851f0c15257cc23399cbb0889f","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"C:\\found.000\\dir0002.chk\\amd64_dual_netnb.inf_31bf3856ad364e35_10.0.17134.1_none_ebe638c258506507\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=7ba23af954f703976c51710e5af5f00df730ecde3f576f6a9c5c327d549e2475ae2762b12dc8f1647c0ef61d46f2e2efe7ce20f614dd7a93ae144b44702b8b56a3428eac0e19b8a09ecd64d371e7040403994b","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=7ba23af954f703976c51710e5af5f00df730ecde3f576f6a9c5c327d549e2475ae2762b12dc8f1647c0ef61d46f2e2efe7ce20f614dd7a93ae144b44702b8b56a3428eac0e19b8a09ecd64d371e7040403994b","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"C:\\found.000\\dir0002.chk\\amd64_dual_netpacer.inf_31bf3856ad364e35_10.0.17134.1_none_de3c2afd6d94b6a4\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=1b208a6f6c683855a56af1659441360c40def774f939c139540b8b7761e8db2c07c4a79e5e637c4d2672e80dd36121070e2cfbb38092ff929e609a209643a63f3ecb3f5eb14689b31f10e1b5201a9f9678796d","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=1b208a6f6c683855a56af1659441360c40def774f939c139540b8b7761e8db2c07c4a79e5e637c4d2672e80dd36121070e2cfbb38092ff929e609a209643a63f3ecb3f5eb14689b31f10e1b5201a9f9678796d","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"C:\\found.000\\dir0002.chk\\amd64_dual_npsvctrig.inf_31bf3856ad364e35_10.0.17134.1_none_6644ccbe543a52ca\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=598856920420cc868ccfc0312c191661f683a373f1c1f47592a6d8ab71cd61ee0483ff519133c63ead1f462fdf2a1a4830d1db18386c9b68310c54e06d1cc1adab2e7511a8d93f5aab202b4b33e5ce1486ab00","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=598856920420cc868ccfc0312c191661f683a373f1c1f47592a6d8ab71cd61ee0483ff519133c63ead1f462fdf2a1a4830d1db18386c9b68310c54e06d1cc1adab2e7511a8d93f5aab202b4b33e5ce1486ab00","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"C:\\found.000\\dir0002.chk\\amd64_dual_oposdrv.inf_31bf3856ad364e35_10.0.17134.1_none_a6cfc14d838321bf\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=b1331de25b8f3f1f4f0b6e98209254e72ace6bf37380abb2ecf91c91a5e2d813f3f183187e593c73220344bf9fa884971dafbbf5ef84b10815b987b34b1c9d9db92f9f39ddddf1d01371b853e5ea1a3b874ad5","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=b1331de25b8f3f1f4f0b6e98209254e72ace6bf37380abb2ecf91c91a5e2d813f3f183187e593c73220344bf9fa884971dafbbf5ef84b10815b987b34b1c9d9db92f9f39ddddf1d01371b853e5ea1a3b874ad5","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"C:\\found.000\\dir0002.chk\\amd64_dual_sensorshidclassdriver.inf_31bf3856ad364e35_10.0.17134.1_none_92a1cf19f639f90a\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=1c9de0afe4499ab3c41e1189ecb5a337bd58d7dc169bffeda185d1019deed1d09428c0c99aedfd7f6d8094baa61c01344cb4c6dae39da6e81739cb347d6732f82c9edfdcf2acd9560133141ec15016f9151aeb","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=1c9de0afe4499ab3c41e1189ecb5a337bd58d7dc169bffeda185d1019deed1d09428c0c99aedfd7f6d8094baa61c01344cb4c6dae39da6e81739cb347d6732f82c9edfdcf2acd9560133141ec15016f9151aeb","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"C:\\found.000\\dir0002.chk\\amd64_dual_ufxchipidea.inf_31bf3856ad364e35_10.0.17134.1_none_f5c834ebc9ce7654\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=fb1c1a0ff4a0235e08730b5c8b29a4b57934bcd30c327170d65542171b800396a38286344c464b9851a7e0ba4f8c1ac5261de9a54295dd2e972662451ca9fb8253f3270711de128dd97dc7cfbad4f511403ff1","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=fb1c1a0ff4a0235e08730b5c8b29a4b57934bcd30c327170d65542171b800396a38286344c464b9851a7e0ba4f8c1ac5261de9a54295dd2e972662451ca9fb8253f3270711de128dd97dc7cfbad4f511403ff1","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"C:\\found.000\\dir0002.chk\\amd64_dual_urschipidea.inf_31bf3856ad364e35_10.0.17134.1_none_f4ca567c7d57687b\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=d9dcf5c72e6c5baae4a77233be01da6acc214e4378803b9bcd2a11b16baee60f3d33a8b0737c087937cf0197ec56119af853ecfa1e379b539ecfcc1456d057a26e61256526d5de8caaaa92117d966780cb02","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=d9dcf5c72e6c5baae4a77233be01da6acc214e4378803b9bcd2a11b16baee60f3d33a8b0737c087937cf0197ec56119af853ecfa1e379b539ecfcc1456d057a26e61256526d5de8caaaa92117d966780cb02","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"C:\\found.000\\dir0002.chk\\amd64_dual_urssynopsys.inf_31bf3856ad364e35_10.0.17134.1_none_f1eb87334130843e\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=9299bd572da3fa0a5fc7574454437cadc0e5d418d3e78c96dede642aeb9531b54f746a551594f20e32a98f273522d77b5a71328c6a8827374b7158ce08591d5011a77e1bc0308976ba504dc29a887eeeb491c8","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=9299bd572da3fa0a5fc7574454437cadc0e5d418d3e78c96dede642aeb9531b54f746a551594f20e32a98f273522d77b5a71328c6a8827374b7158ce08591d5011a77e1bc0308976ba504dc29a887eeeb491c8","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"C:\\found.000\\dir0002.chk\\amd64_dual_usbcciddriver.inf_31bf3856ad364e35_10.0.17134.1_none_4070b1e28eb5028d\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=cd056367c3c7b217ac2e6ff4378adc36b2e06e4c631e00483c52a4a191abcf0946eea85a52f99ca5208c9582f4983083bd2521fa29b14ec9409a8a790d2c2c6ba7f29e49521b72fec0e0b2d3132ea7856d9955","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=cd056367c3c7b217ac2e6ff4378adc36b2e06e4c631e00483c52a4a191abcf0946eea85a52f99ca5208c9582f4983083bd2521fa29b14ec9409a8a790d2c2c6ba7f29e49521b72fec0e0b2d3132ea7856d9955","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"C:\\found.000\\dir0002.chk\\amd64_dual_usbser.inf_31bf3856ad364e35_10.0.17134.1_none_8281fb62ec80df7e\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=161af246520668e9e0d151087360454bd4bc185a5ee0db3f63654c0e2d2bcfc5bf4cc3edb65c7a7a1c52969a9c23c184a133bc5f632e6992b7312254a0617914f1f70c87052115475472bd410e50e220abe8","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=161af246520668e9e0d151087360454bd4bc185a5ee0db3f63654c0e2d2bcfc5bf4cc3edb65c7a7a1c52969a9c23c184a133bc5f632e6992b7312254a0617914f1f70c87052115475472bd410e50e220abe8","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"C:\\found.000\\dir0002.chk\\amd64_dual_usbstor.inf_31bf3856ad364e35_10.0.17134.1_none_264b44d815dcdf50\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=a876998c066cab9b55ce4225e07a960bb9714ea3321dc574f5d915369c4c2c2122a6aaf82d143bbe258b4c97b2d347b14b38cc05f30e45fa01846fba30d3c56bb9850cfaa1ad2c3904a0015a88c0560c416946","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=a876998c066cab9b55ce4225e07a960bb9714ea3321dc574f5d915369c4c2c2122a6aaf82d143bbe258b4c97b2d347b14b38cc05f30e45fa01846fba30d3c56bb9850cfaa1ad2c3904a0015a88c0560c416946","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"C:\\found.000\\dir0002.chk\\amd64_dual_vdrvroot.inf_31bf3856ad364e35_10.0.17134.1_none_a18506d29a6abad8\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=15d7c92b579fde292f33cb194f9473d45f499160f3e2648289efcaba00ab2578c59a45ab98c9049697512320d965ae10599685f3105a25b2fc269d486a82bc25d2d2f527c91aafb10cf99df9a4f216965a5446","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=15d7c92b579fde292f33cb194f9473d45f499160f3e2648289efcaba00ab2578c59a45ab98c9049697512320d965ae10599685f3105a25b2fc269d486a82bc25d2d2f527c91aafb10cf99df9a4f216965a5446","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"C:\\found.000\\dir0002.chk\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=6add4e9d054a3f3d799b52b772c44619f26b414fe89f578748fe68240573f56bdde3ad805144e9315fb0ce5cbf68697cf490c9cf9c1e230f8dde3f6df7b11110fab8fb5afbdccb123108be6b41b61b2486f619","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=6add4e9d054a3f3d799b52b772c44619f26b414fe89f578748fe68240573f56bdde3ad805144e9315fb0ce5cbf68697cf490c9cf9c1e230f8dde3f6df7b11110fab8fb5afbdccb123108be6b41b61b2486f619","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"C:\\found.000\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=b04467f75a39c0961f1765745497055ca2ef288ebd2f7accefa0dd44bba2438b76d740b74000f88981d9c3431202b90afa707792292c2aa6048f46295a10247338d5765786cd2f1312ba8c63af25aa9fd48f","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=b04467f75a39c0961f1765745497055ca2ef288ebd2f7accefa0dd44bba2438b76d740b74000f88981d9c3431202b90afa707792292c2aa6048f46295a10247338d5765786cd2f1312ba8c63af25aa9fd48f","has_overview":true,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"C:\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=fda37605302e66d94f3d88408f4c02b31b067e47136ce99bc573d555f6632b38f22bde67bd5282259abfbb279be097391b993f6eda4dc6c20c80e7a494065852a60288e51f31ccd45883ee66327554bb0633","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=fda37605302e66d94f3d88408f4c02b31b067e47136ce99bc573d555f6632b38f22bde67bd5282259abfbb279be097391b993f6eda4dc6c20c80e7a494065852a60288e51f31ccd45883ee66327554bb0633","has_overview":true,"extended_details":null},{"name":"lockxx.bin","file_path":"%ALLUSERSPROFILE%\\lockxx.bin","file_size":5242934,"md5":"0b45f91b0ac4746f18b0a4f6fed9cd03","sha1":"bd8f1bb15e54e655c704716f36cb87d84ecdcccf","sha256":"8531dad52e1ec20750c067340fbf9f0dbea8f282fa0f52385f10ddd5b92f4c35","sha512":"ef633d24386918ab9efd52a11613ce82a1012993bbc99921cb0e036dc61716fd180ecd1edce67497a31639698e9c6f42565b5f76ea3ce4a66b0e964470c1a1c5","type_tags":["data"],"description":"data","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=4b51fa6d4a05a174f22dfc23f392ea1612b834e0f523e5038c1e370d172ab8d895adfbfb516bca15a670e1014cd7cd05e6b54c77e0f136bc12edcfb171ef5cce8c230435ff","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=4b51fa6d4a05a174f22dfc23f392ea1612b834e0f523e5038c1e370d172ab8d895adfbfb516bca15a670e1014cd7cd05e6b54c77e0f136bc12edcfb171ef5cce8c230435ff","has_overview":false,"extended_details":null},{"name":"Keys.txt.lockxx","file_path":"%PROGRAMFILES%\\KMSpico\\TokensBackup\\Keys.txt.lockxx","file_size":94,"md5":"54f87e4e6754c29d63ddcda5e2fb59ff","sha1":"6c808ff9e3b6378edc2ea192ce5a2417d6a5715b","sha256":"6dd828e3d8c5863f35c164bc6f0131f5eca07b85a8b11f7d92a926fbf8b7cfc8","sha512":"8d88b79445e076e29bf968391b7de645a79453897fa4d5ec604cf5a2f284da791dc2cf5d2c491e7746d7b4c5c6faf60cde58121f4034afdbf28691c9596ffe08","type_tags":["data"],"description":"data","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=59879eb7b90c4104951d084c8fab7cc3989ba9f8b25eec9e09b03199aaa8e563086ada329f1a4cf3c181fc446ca2605a574a0024db9f0a7a1bccf0d436b5fe7fa6589a0f9c798af995d0","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=59879eb7b90c4104951d084c8fab7cc3989ba9f8b25eec9e09b03199aaa8e563086ada329f1a4cf3c181fc446ca2605a574a0024db9f0a7a1bccf0d436b5fe7fa6589a0f9c798af995d0","has_overview":false,"extended_details":null},{"name":"lockxx.recovery_data.hta","file_path":"C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\lockxx.recovery_data.hta","file_size":5040,"md5":"6987d642cede42512c01684f37a9ec94","sha1":"98c38c96ded94b5762b54e49806f457a09c8687b","sha256":"2056469d884c1fa208054daa5a4d465bc4d5135ae1e0df445fd15af8a11a8168","sha512":"d39daeabec18338ef11980b32699d31535f2342f9c1cf09b378e4a2b3746ef0480f036f6c50699eccf1a0f496e3ac09b1c5f55c4f1b16d0380073b3ca5174a7f","type_tags":["html"],"description":"HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators","runtime_process":"794.bin.exe (PID: 6160)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/65b2a614f3c39a991a0e484e/download/dropped-file?key=1d0d12e4c8b708b8d0ad0fd7d930e955e20aecb3f2510ee6754baa9eaa72469384a29f039b1b709c21cd4f546221618d2c94db929ea54e3284cfbe5cd43bba9808a7daad48c5c7d2f4b0dec8b2d5b838b50d33","submit_link":"/bff/report/65b2a614f3c39a991a0e484e/submit/dropped-file?key=1d0d12e4c8b708b8d0ad0fd7d930e955e20aecb3f2510ee6754baa9eaa72469384a29f039b1b709c21cd4f546221618d2c94db929ea54e3284cfbe5cd43bba9808a7daad48c5c7d2f4b0dec8b2d5b838b50d33","has_overview":true,"extended_details":null}],"file_metadata":{"file_compositions":[],"imported_objects":[],"file_analysis":[],"total_file_compositions_imports":null},"processes":[{"uid":"00000000-00006160","parentuid":null,"name":"794.bin.exe","normalized_path":"C:\\794.bin.exe","command_line":null,"sha256":"79468940d42d217a815eca555b9d2efe72b4f2a53e47d29076c3adde5eb9c5af","av_label":null,"av_matched":null,"av_total":null,"pid":"6160","icon":"iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAABH0lEQVR4Xu2UXWrCQBCAQymICEUQz2qxLVTUB8HnwoKnkdIr1OQAOUD+k5eREdYuQ2YzWZJQMAMfvuX7Zgf0vHHG+S+zPxxhSKi/t4Dz90/tL/XfAsIwHAQ2oKqqXijL8k5RFHwALUXwA97qV0yTvDHgS53umAHLXQCLbQDzTQAvnz7MPnyYvvswebvA8/oCT69/AUopljzP7QEUHSCRmy9QtznKnQMk8k5egDuBRI7YNkeyLLMHUHSARK4D6NYmzgESuQ7gNtdYA7gTSOQIiunWJmma2gMoOkAi1wHc5ih3DpDIEZTSrVu9AHcCKbbNkSRJ7AEUl4C6rbW89wDb5oMGcPI4jtsHNP23N93clDsFdCmPoogPGBLqH2ecx50rVs0alvIcXXoAAAAASUVORK5CYII=","process_flags":[]},{"uid":"00000000-00000504","parentuid":"00000000-00006160","name":"cmd.exe","normalized_path":"%WINDIR%\\system32\\cmd.exe","command_line":"/c \"wmic shadowcopy delete /nointeractive\"","sha256":"ec436aeee41857eee5875efdb7166fe043349db5f58f3ee9fc4ff7f50005767f","av_label":null,"av_matched":null,"av_total":null,"pid":"504","icon":null,"process_flags":[]},{"uid":"00000000-00003724","parentuid":"00000000-00000504","name":"WMIC.exe","normalized_path":"%WINDIR%\\System32\\Wbem\\WMIC.exe","command_line":"wmic shadowcopy delete /nointeractive","sha256":"a23c1b94d193ebe3d4cf647c653e41f63ba7b6d996c9a3de6380408c7e4a812e","av_label":null,"av_matched":null,"av_total":null,"pid":"3724","icon":null,"process_flags":[]},{"uid":"00000000-00007288","parentuid":"00000000-00006160","name":"cmd.exe","normalized_path":"%WINDIR%\\system32\\cmd.exe","command_line":"/c \"bcdedit /set {default} recoveryenabled No\"","sha256":"ec436aeee41857eee5875efdb7166fe043349db5f58f3ee9fc4ff7f50005767f","av_label":null,"av_matched":null,"av_total":null,"pid":"7288","icon":null,"process_flags":[]},{"uid":"00000000-00007584","parentuid":"00000000-00007288","name":"bcdedit.exe","normalized_path":"%WINDIR%\\system32\\bcdedit.exe","command_line":"bcdedit /set {default} recoveryenabled No","sha256":"069ce47afc6f23154cb8430602e41d9860f5934936aeb99252319ba93fd1427c","av_label":null,"av_matched":null,"av_total":null,"pid":"7584","icon":null,"process_flags":[{"name":"Reduced Monitoring","data":null}]},{"uid":"00000000-00006312","parentuid":"00000000-00006160","name":"cmd.exe","normalized_path":"%WINDIR%\\system32\\cmd.exe","command_line":"/c \"bcdedit /set {default} bootstatuspolicy ignoreallfailures\"","sha256":"ec436aeee41857eee5875efdb7166fe043349db5f58f3ee9fc4ff7f50005767f","av_label":null,"av_matched":null,"av_total":null,"pid":"6312","icon":null,"process_flags":[]},{"uid":"00000000-00006256","parentuid":"00000000-00006312","name":"bcdedit.exe","normalized_path":"%WINDIR%\\system32\\bcdedit.exe","command_line":"bcdedit /set {default} bootstatuspolicy ignoreallfailures","sha256":"069ce47afc6f23154cb8430602e41d9860f5934936aeb99252319ba93fd1427c","av_label":null,"av_matched":null,"av_total":null,"pid":"6256","icon":null,"process_flags":[{"name":"Reduced Monitoring","data":null}]},{"uid":"00000000-00001752","parentuid":"00000000-00006160","name":"cmd.exe","normalized_path":"%WINDIR%\\system32\\cmd.exe","command_line":"/c \"vssadmin delete shadows /All /Quiet\"","sha256":"ec436aeee41857eee5875efdb7166fe043349db5f58f3ee9fc4ff7f50005767f","av_label":null,"av_matched":null,"av_total":null,"pid":"1752","icon":null,"process_flags":[]},{"uid":"00000000-00004364","parentuid":"00000000-00001752","name":"vssadmin.exe","normalized_path":"%WINDIR%\\system32\\vssadmin.exe","command_line":"vssadmin delete shadows /All /Quiet","sha256":"3083bfcbf6e240716676c6710d252c9178eea70c5694398ade94444a1b23fe99","av_label":null,"av_matched":null,"av_total":null,"pid":"4364","icon":null,"process_flags":[{"name":"Reduced Monitoring","data":null}]},{"uid":"00000000-00006932","parentuid":"00000000-00006160","name":"cmd.exe","normalized_path":"%WINDIR%\\system32\\cmd.exe","command_line":"/c schtasks /create /sc minute /mo 5 /tn \"Windows update00\" /tr \\\"C:\\\\\\\" /ru \"\" /RL HIGHEST","sha256":"ec436aeee41857eee5875efdb7166fe043349db5f58f3ee9fc4ff7f50005767f","av_label":null,"av_matched":null,"av_total":null,"pid":"6932","icon":null,"process_flags":[]},{"uid":"00000000-00007708","parentuid":"00000000-00006932","name":"schtasks.exe","normalized_path":"%WINDIR%\\system32\\schtasks.exe","command_line":"schtasks /create /sc minute /mo 5 /tn \"Windows update00\" /tr \\\"C:\\\\\\\" /ru \"\" /RL HIGHEST","sha256":"3a0943826ebc7f6d76908e5bc6a14067265460b0742f89ae0f74b9380ef9a361","av_label":null,"av_matched":null,"av_total":null,"pid":"7708","icon":null,"process_flags":[{"name":"Reduced Monitoring","data":null}]},{"uid":"00000000-00006568","parentuid":"00000000-00006160","name":"cmd.exe","normalized_path":"%WINDIR%\\system32\\cmd.exe","command_line":"/c schtasks /create /sc minute /mo 5 /tn \"Windows update01\" /tr \"Powershell wevtutil el | Foreach-Object {Write-Host \\\"Clearing $_\\\"; wevtutil cl \\\"$_\\\"}\" /ru \"\" /RL HIGHEST","sha256":"ec436aeee41857eee5875efdb7166fe043349db5f58f3ee9fc4ff7f50005767f","av_label":null,"av_matched":null,"av_total":null,"pid":"6568","icon":null,"process_flags":[]},{"uid":"00000000-00001468","parentuid":"00000000-00006568","name":"schtasks.exe","normalized_path":"%WINDIR%\\system32\\schtasks.exe","command_line":"schtasks /create /sc minute /mo 5 /tn \"Windows update01\" /tr \"Powershell wevtutil el | Foreach-Object {Write-Host \\\"Clearing $_\\\"; wevtutil cl \\\"$_\\\"}\" /ru \"\" /RL HIGHEST","sha256":"3a0943826ebc7f6d76908e5bc6a14067265460b0742f89ae0f74b9380ef9a361","av_label":null,"av_matched":null,"av_total":null,"pid":"1468","icon":null,"process_flags":[{"name":"Reduced Monitoring","data":null}]},{"uid":"00000000-00006520","parentuid":"00000000-00006160","name":"cmd.exe","normalized_path":"%WINDIR%\\system32\\cmd.exe","command_line":"/c schtasks /delete /tn \"Windows update00\" /f","sha256":"ec436aeee41857eee5875efdb7166fe043349db5f58f3ee9fc4ff7f50005767f","av_label":null,"av_matched":null,"av_total":null,"pid":"6520","icon":null,"process_flags":[]},{"uid":"00000000-00007320","parentuid":"00000000-00006520","name":"schtasks.exe","normalized_path":"%WINDIR%\\system32\\schtasks.exe","command_line":"schtasks /delete /tn \"Windows update00\" /f","sha256":"3a0943826ebc7f6d76908e5bc6a14067265460b0742f89ae0f74b9380ef9a361","av_label":null,"av_matched":null,"av_total":null,"pid":"7320","icon":null,"process_flags":[{"name":"Reduced Monitoring","data":null}]},{"uid":"00000000-00001268","parentuid":"00000000-00006160","name":"cmd.exe","normalized_path":"%WINDIR%\\system32\\cmd.exe","command_line":"/c schtasks /create /tn shutdown00 /tr \"shutdown -r -t 0\" /sc once /st 10:32:48 /ru \"\"","sha256":"ec436aeee41857eee5875efdb7166fe043349db5f58f3ee9fc4ff7f50005767f","av_label":null,"av_matched":null,"av_total":null,"pid":"1268","icon":null,"process_flags":[]},{"uid":"00000000-00007504","parentuid":"00000000-00001268","name":"schtasks.exe","normalized_path":"%WINDIR%\\system32\\schtasks.exe","command_line":"schtasks /create /tn shutdown00 /tr \"shutdown -r -t 0\" /sc once /st 10:32:48 /ru \"\"","sha256":"3a0943826ebc7f6d76908e5bc6a14067265460b0742f89ae0f74b9380ef9a361","av_label":null,"av_matched":null,"av_total":null,"pid":"7504","icon":null,"process_flags":[{"name":"Reduced Monitoring","data":null}]},{"uid":"00000000-00007812","parentuid":"00000000-00006160","name":"explorer.exe","normalized_path":"%WINDIR%\\explorer.exe","command_line":null,"sha256":"107060bab6d8dff0fdf91777f84453b8336fdc4c30ca189ab9d58e8801c9e924","av_label":null,"av_matched":null,"av_total":null,"pid":"7812","icon":null,"process_flags":[{"name":"Reduced Monitoring","data":null}]}],"mitre_attcks":[{"tactic":"Initial Access","technique":"Replication Through Removable Media","attck_id":"T1091","attck_id_wiki":"https://attack.mitre.org/techniques/T1091","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":1,"suspicious_identifiers":[],"informative_identifiers_count":0,"informative_identifiers":[],"parent":null},{"tactic":"Execution","technique":"Windows Command Shell","attck_id":"T1059.003","attck_id_wiki":"https://attack.mitre.org/techniques/T1059/003","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":2,"informative_identifiers":["Contains ability to executes commands or batch file","Contains ability to retrieve the command-line string for the current process (API string)"],"parent":{"technique":"Command and Scripting Interpreter","attck_id":"T1059","attck_id_wiki":"https://attack.mitre.org/techniques/T1059"}},{"tactic":"Execution","technique":"Windows Management Instrumentation","attck_id":"T1047","attck_id_wiki":"https://attack.mitre.org/techniques/T1047","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":2,"suspicious_identifiers":["Contains references to WMI/WMIC"],"informative_identifiers_count":1,"informative_identifiers":["Executes WMI queries"],"parent":null},{"tactic":"Execution","technique":"PowerShell","attck_id":"T1059.001","attck_id_wiki":"https://attack.mitre.org/techniques/T1059/001","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Observed Powershell command strings"],"parent":{"technique":"Command and Scripting Interpreter","attck_id":"T1059","attck_id_wiki":"https://attack.mitre.org/techniques/T1059"}},{"tactic":"Execution","technique":"Inter-Process Communication","attck_id":"T1559","attck_id_wiki":"https://attack.mitre.org/techniques/T1559","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Contains ability to create/connect to a named pipe (API string)"],"parent":null},{"tactic":"Execution","technique":"Native API","attck_id":"T1106","attck_id_wiki":"https://attack.mitre.org/techniques/T1106","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":2,"suspicious_identifiers":["Imports suspicious APIs"],"informative_identifiers_count":12,"informative_identifiers":["Contains ability to create/open files (API string)","Contains ability to create a new process (API string)","Contains ability to execute an application (API string)","Contains ability to find and load resources of specific modules (API string)","Contains ability to set/get the last-error code for a calling thread (API string)","Contains ability to load modules (API string)","Contains ability to execute Windows APIs","Contains ability to retrieve/modify process thread (API string)","Contains ability to retrieve address of exported function from a DLL (API string)","Contains ability to retrieve the fully qualified path of module (API string)","Calls an API typically used to retrieve function addresses","Calls an API typically used to create a process"],"parent":null},{"tactic":"Execution","technique":"Service Execution","attck_id":"T1569.002","attck_id_wiki":"https://attack.mitre.org/techniques/T1569/002","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":1,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Contains ability to open a service (API string)"],"parent":{"technique":"System Services","attck_id":"T1569","attck_id_wiki":"https://attack.mitre.org/techniques/T1569"}},{"tactic":"Execution","technique":"Shared Modules","attck_id":"T1129","attck_id_wiki":"https://attack.mitre.org/techniques/T1129","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":4,"informative_identifiers":["Loads modules at runtime","Calls an API typically used to load libraries","Loads the RPC (Remote Procedure Call) module DLL","Looks up procedures from modules (excluding apphelp.dll, kernel32.dll, user32.dll, gdi32.dll, ole32.dll, comctl32.dll, uxtheme.dll, oleaut32.dll, version.dll, msctfime.ime)"],"parent":null},{"tactic":"Execution","technique":"JavaScript","attck_id":"T1059.007","attck_id_wiki":"https://attack.mitre.org/techniques/T1059/007","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["References JavaScript(s)"],"parent":{"technique":"Command and Scripting Interpreter","attck_id":"T1059","attck_id_wiki":"https://attack.mitre.org/techniques/T1059"}},{"tactic":"Execution","technique":"Scheduled Task","attck_id":"T1053.005","attck_id_wiki":"https://attack.mitre.org/techniques/T1053/005","malicious_identifiers_count":1,"malicious_identifiers":["Schedules a task to be executed at a specific time and date"],"suspicious_identifiers_count":1,"suspicious_identifiers":[],"informative_identifiers_count":0,"informative_identifiers":[],"parent":{"technique":"Scheduled Task/Job","attck_id":"T1053","attck_id_wiki":"https://attack.mitre.org/techniques/T1053"}},{"tactic":"Execution","technique":"Component Object Model","attck_id":"T1559.001","attck_id_wiki":"https://attack.mitre.org/techniques/T1559/001","malicious_identifiers_count":1,"malicious_identifiers":["Loads the task scheduler COM API"],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":0,"informative_identifiers":[],"parent":{"technique":"Inter-Process Communication","attck_id":"T1559","attck_id_wiki":"https://attack.mitre.org/techniques/T1559"}},{"tactic":"Persistence","technique":"Account Manipulation","attck_id":"T1098","attck_id_wiki":"https://attack.mitre.org/techniques/T1098","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Contains ability to modify the user configuration/privilege (API string)"],"parent":null},{"tactic":"Persistence","technique":"Windows Service","attck_id":"T1543.003","attck_id_wiki":"https://attack.mitre.org/techniques/T1543/003","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":7,"informative_identifiers":["Contains the ability to modify system service (API string)","Contains ability to create a service (API string)","Contains ability to set/delete MS-DOS device name (API string)","Contains ability to create/control drivers (API string)","Contains ability to access device drivers","Creates or modifies windows services","Contains ability to start a service (API string)"],"parent":{"technique":"Create or Modify System Process","attck_id":"T1543","attck_id_wiki":"https://attack.mitre.org/techniques/T1543"}},{"tactic":"Persistence","technique":"Scheduled Task","attck_id":"T1053.005","attck_id_wiki":"https://attack.mitre.org/techniques/T1053/005","malicious_identifiers_count":1,"malicious_identifiers":["Schedules a task to be executed at a specific time and date"],"suspicious_identifiers_count":1,"suspicious_identifiers":[],"informative_identifiers_count":0,"informative_identifiers":[],"parent":{"technique":"Scheduled Task/Job","attck_id":"T1053","attck_id_wiki":"https://attack.mitre.org/techniques/T1053"}},{"tactic":"Persistence","technique":"Registry Run Keys / Startup Folder","attck_id":"T1547.001","attck_id_wiki":"https://attack.mitre.org/techniques/T1547/001","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":1,"suspicious_identifiers":["Modifies auto-execute functionality by setting/creating a value in the registry"],"informative_identifiers_count":0,"informative_identifiers":[],"parent":{"technique":"Boot or Logon Autostart Execution","attck_id":"T1547","attck_id_wiki":"https://attack.mitre.org/techniques/T1547"}},{"tactic":"Persistence","technique":"Component Object Model Hijacking","attck_id":"T1546.015","attck_id_wiki":"https://attack.mitre.org/techniques/T1546/015","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Overview of unique CLSIDs touched in registry"],"parent":{"technique":"Event Triggered Execution","attck_id":"T1546","attck_id_wiki":"https://attack.mitre.org/techniques/T1546"}},{"tactic":"Persistence","technique":"Shortcut Modification","attck_id":"T1547.009","attck_id_wiki":"https://attack.mitre.org/techniques/T1547/009","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Contains ability to register hotkeys (API string)"],"parent":{"technique":"Boot or Logon Autostart Execution","attck_id":"T1547","attck_id_wiki":"https://attack.mitre.org/techniques/T1547"}},{"tactic":"Persistence","technique":"Boot or Logon Autostart Execution","attck_id":"T1547","attck_id_wiki":"https://attack.mitre.org/techniques/T1547","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":1,"suspicious_identifiers":[],"informative_identifiers_count":0,"informative_identifiers":[],"parent":null},{"tactic":"Privilege Escalation","technique":"Token Impersonation/Theft","attck_id":"T1134.001","attck_id_wiki":"https://attack.mitre.org/techniques/T1134/001","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":2,"informative_identifiers":["Contains ability to obtains specified information about the security of a file or directory (API string)","Contains ability to impersonate access tokens (API string)"],"parent":{"technique":"Access Token Manipulation","attck_id":"T1134","attck_id_wiki":"https://attack.mitre.org/techniques/T1134"}},{"tactic":"Privilege Escalation","technique":"Account Manipulation","attck_id":"T1098","attck_id_wiki":"https://attack.mitre.org/techniques/T1098","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Contains ability to modify the user configuration/privilege (API string)"],"parent":null},{"tactic":"Privilege Escalation","technique":"Windows Service","attck_id":"T1543.003","attck_id_wiki":"https://attack.mitre.org/techniques/T1543/003","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":7,"informative_identifiers":["Contains the ability to modify system service (API string)","Contains ability to create a service (API string)","Contains ability to set/delete MS-DOS device name (API string)","Contains ability to create/control drivers (API string)","Contains ability to access device drivers","Creates or modifies windows services","Contains ability to start a service (API string)"],"parent":{"technique":"Create or Modify System Process","attck_id":"T1543","attck_id_wiki":"https://attack.mitre.org/techniques/T1543"}},{"tactic":"Privilege Escalation","technique":"Thread Execution Hijacking","attck_id":"T1055.003","attck_id_wiki":"https://attack.mitre.org/techniques/T1055/003","malicious_identifiers_count":1,"malicious_identifiers":["Creates a thread in a remote process"],"suspicious_identifiers_count":1,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Creates a thread in a self process"],"parent":{"technique":"Process Injection","attck_id":"T1055","attck_id_wiki":"https://attack.mitre.org/techniques/T1055"}},{"tactic":"Privilege Escalation","technique":"Abuse Elevation Control Mechanism","attck_id":"T1548","attck_id_wiki":"https://attack.mitre.org/techniques/T1548","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Contains ability to use security policy setting (API string)"],"parent":null},{"tactic":"Privilege Escalation","technique":"Dynamic-link Library Injection","attck_id":"T1055.001","attck_id_wiki":"https://attack.mitre.org/techniques/T1055/001","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Contains ability to load/free library (API string)"],"parent":{"technique":"Process Injection","attck_id":"T1055","attck_id_wiki":"https://attack.mitre.org/techniques/T1055"}},{"tactic":"Privilege Escalation","technique":"Create Process with Token","attck_id":"T1134.002","attck_id_wiki":"https://attack.mitre.org/techniques/T1134/002","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Contains ability to create process with token (API string)"],"parent":{"technique":"Access Token Manipulation","attck_id":"T1134","attck_id_wiki":"https://attack.mitre.org/techniques/T1134"}},{"tactic":"Privilege Escalation","technique":"Extra Window Memory Injection","attck_id":"T1055.011","attck_id_wiki":"https://attack.mitre.org/techniques/T1055/011","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":1,"suspicious_identifiers":[],"informative_identifiers_count":0,"informative_identifiers":[],"parent":{"technique":"Process Injection","attck_id":"T1055","attck_id_wiki":"https://attack.mitre.org/techniques/T1055"}},{"tactic":"Privilege Escalation","technique":"Process Injection","attck_id":"T1055","attck_id_wiki":"https://attack.mitre.org/techniques/T1055","malicious_identifiers_count":3,"malicious_identifiers":["Writes data to a remote process","Calls an API typically used to create a thread in another process","Creates a process in suspended mode (likely for process injection)"],"suspicious_identifiers_count":1,"suspicious_identifiers":["Spawned processes likely due to injection"],"informative_identifiers_count":1,"informative_identifiers":["Contains ability to inject code into another process (API string)"],"parent":null},{"tactic":"Privilege Escalation","technique":"Access Token Manipulation","attck_id":"T1134","attck_id_wiki":"https://attack.mitre.org/techniques/T1134","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":3,"informative_identifiers":["Calls an API typically used to enable or disable privileges in the specified access token","Contains ability to modify access token privileges (API string)","Contains ability to retrieve token privileges information (API string)"],"parent":null},{"tactic":"Privilege Escalation","technique":"Scheduled Task","attck_id":"T1053.005","attck_id_wiki":"https://attack.mitre.org/techniques/T1053/005","malicious_identifiers_count":1,"malicious_identifiers":["Schedules a task to be executed at a specific time and date"],"suspicious_identifiers_count":1,"suspicious_identifiers":[],"informative_identifiers_count":0,"informative_identifiers":[],"parent":{"technique":"Scheduled Task/Job","attck_id":"T1053","attck_id_wiki":"https://attack.mitre.org/techniques/T1053"}},{"tactic":"Privilege Escalation","technique":"Registry Run Keys / Startup Folder","attck_id":"T1547.001","attck_id_wiki":"https://attack.mitre.org/techniques/T1547/001","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":1,"suspicious_identifiers":["Modifies auto-execute functionality by setting/creating a value in the registry"],"informative_identifiers_count":0,"informative_identifiers":[],"parent":{"technique":"Boot or Logon Autostart Execution","attck_id":"T1547","attck_id_wiki":"https://attack.mitre.org/techniques/T1547"}},{"tactic":"Privilege Escalation","technique":"Component Object Model Hijacking","attck_id":"T1546.015","attck_id_wiki":"https://attack.mitre.org/techniques/T1546/015","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Overview of unique CLSIDs touched in registry"],"parent":{"technique":"Event Triggered Execution","attck_id":"T1546","attck_id_wiki":"https://attack.mitre.org/techniques/T1546"}},{"tactic":"Privilege Escalation","technique":"Bypass User Account Control","attck_id":"T1548.002","attck_id_wiki":"https://attack.mitre.org/techniques/T1548/002","malicious_identifiers_count":1,"malicious_identifiers":["Tries to disable user account control"],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Contains ability to bypass UAC using COM object (API string)"],"parent":{"technique":"Abuse Elevation Control Mechanism","attck_id":"T1548","attck_id_wiki":"https://attack.mitre.org/techniques/T1548"}},{"tactic":"Privilege Escalation","technique":"Shortcut Modification","attck_id":"T1547.009","attck_id_wiki":"https://attack.mitre.org/techniques/T1547/009","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Contains ability to register hotkeys (API string)"],"parent":{"technique":"Boot or Logon Autostart Execution","attck_id":"T1547","attck_id_wiki":"https://attack.mitre.org/techniques/T1547"}},{"tactic":"Privilege Escalation","technique":"Boot or Logon Autostart Execution","attck_id":"T1547","attck_id_wiki":"https://attack.mitre.org/techniques/T1547","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":1,"suspicious_identifiers":[],"informative_identifiers_count":0,"informative_identifiers":[],"parent":null},{"tactic":"Privilege Escalation","technique":"Thread Local Storage","attck_id":"T1055.005","attck_id_wiki":"https://attack.mitre.org/techniques/T1055/005","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":1,"suspicious_identifiers":[],"informative_identifiers_count":0,"informative_identifiers":[],"parent":{"technique":"Process Injection","attck_id":"T1055","attck_id_wiki":"https://attack.mitre.org/techniques/T1055"}},{"tactic":"Defense Evasion","technique":"Disable or Modify Tools","attck_id":"T1562.001","attck_id_wiki":"https://attack.mitre.org/techniques/T1562/001","malicious_identifiers_count":1,"malicious_identifiers":["Tries to disable/delete scheduled tasks"],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Contains ability to modify process attributes (API string)"],"parent":{"technique":"Impair Defenses","attck_id":"T1562","attck_id_wiki":"https://attack.mitre.org/techniques/T1562"}},{"tactic":"Defense Evasion","technique":"Token Impersonation/Theft","attck_id":"T1134.001","attck_id_wiki":"https://attack.mitre.org/techniques/T1134/001","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":2,"informative_identifiers":["Contains ability to obtains specified information about the security of a file or directory (API string)","Contains ability to impersonate access tokens (API string)"],"parent":{"technique":"Access Token Manipulation","attck_id":"T1134","attck_id_wiki":"https://attack.mitre.org/techniques/T1134"}},{"tactic":"Defense Evasion","technique":"Thread Execution Hijacking","attck_id":"T1055.003","attck_id_wiki":"https://attack.mitre.org/techniques/T1055/003","malicious_identifiers_count":1,"malicious_identifiers":["Creates a thread in a remote process"],"suspicious_identifiers_count":1,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Creates a thread in a self process"],"parent":{"technique":"Process Injection","attck_id":"T1055","attck_id_wiki":"https://attack.mitre.org/techniques/T1055"}},{"tactic":"Defense Evasion","technique":"Modify Registry","attck_id":"T1112","attck_id_wiki":"https://attack.mitre.org/techniques/T1112","malicious_identifiers_count":1,"malicious_identifiers":["Modifies the UAC/LUA settings (Account Control)"],"suspicious_identifiers_count":1,"suspicious_identifiers":[],"informative_identifiers_count":4,"informative_identifiers":["Contains ability to disable/close registry key (API string)","Contains ability to create/load registry keys (API string)","Contains ability to modify registry key/value (API string)","Contains ability to delete registry key/value (API string)"],"parent":null},{"tactic":"Defense Evasion","technique":"Abuse Elevation Control Mechanism","attck_id":"T1548","attck_id_wiki":"https://attack.mitre.org/techniques/T1548","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Contains ability to use security policy setting (API string)"],"parent":null},{"tactic":"Defense Evasion","technique":"Hide Artifacts","attck_id":"T1564","attck_id_wiki":"https://attack.mitre.org/techniques/T1564","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Found virtual disk drive like strings"],"parent":null},{"tactic":"Defense Evasion","technique":"Dynamic-link Library Injection","attck_id":"T1055.001","attck_id_wiki":"https://attack.mitre.org/techniques/T1055/001","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Contains ability to load/free library (API string)"],"parent":{"technique":"Process Injection","attck_id":"T1055","attck_id_wiki":"https://attack.mitre.org/techniques/T1055"}},{"tactic":"Defense Evasion","technique":"Timestomp","attck_id":"T1070.006","attck_id_wiki":"https://attack.mitre.org/techniques/T1070/006","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":2,"informative_identifiers":["Contains ability to retrieve file time (API string)","Contains ability to set file time (API string)"],"parent":{"technique":"Indicator Removal","attck_id":"T1070","attck_id_wiki":"https://attack.mitre.org/techniques/T1070"}},{"tactic":"Defense Evasion","technique":"File and Directory Permissions Modification","attck_id":"T1222","attck_id_wiki":"https://attack.mitre.org/techniques/T1222","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Contains ability to modify file attributes (API string)"],"parent":null},{"tactic":"Defense Evasion","technique":"Time Based Evasion","attck_id":"T1497.003","attck_id_wiki":"https://attack.mitre.org/techniques/T1497/003","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Contains ability to retrieve the time elapsed since the system was started (API string)"],"parent":{"technique":"Virtualization/Sandbox Evasion","attck_id":"T1497","attck_id_wiki":"https://attack.mitre.org/techniques/T1497"}},{"tactic":"Defense Evasion","technique":"Create Process with Token","attck_id":"T1134.002","attck_id_wiki":"https://attack.mitre.org/techniques/T1134/002","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Contains ability to create process with token (API string)"],"parent":{"technique":"Access Token Manipulation","attck_id":"T1134","attck_id_wiki":"https://attack.mitre.org/techniques/T1134"}},{"tactic":"Defense Evasion","technique":"Clear Windows Event Logs","attck_id":"T1070.001","attck_id_wiki":"https://attack.mitre.org/techniques/T1070/001","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":2,"informative_identifiers":["Contains ability to retrieve event logs (API string)","Contains ability to delete all entries from an event log (API string)"],"parent":{"technique":"Indicator Removal","attck_id":"T1070","attck_id_wiki":"https://attack.mitre.org/techniques/T1070"}},{"tactic":"Defense Evasion","technique":"Hidden Window","attck_id":"T1564.003","attck_id_wiki":"https://attack.mitre.org/techniques/T1564/003","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Contains ability to show a graphical window (API string)"],"parent":{"technique":"Hide Artifacts","attck_id":"T1564","attck_id_wiki":"https://attack.mitre.org/techniques/T1564"}},{"tactic":"Defense Evasion","technique":"Extra Window Memory Injection","attck_id":"T1055.011","attck_id_wiki":"https://attack.mitre.org/techniques/T1055/011","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":1,"suspicious_identifiers":[],"informative_identifiers_count":0,"informative_identifiers":[],"parent":{"technique":"Process Injection","attck_id":"T1055","attck_id_wiki":"https://attack.mitre.org/techniques/T1055"}},{"tactic":"Defense Evasion","technique":"File Deletion","attck_id":"T1070.004","attck_id_wiki":"https://attack.mitre.org/techniques/T1070/004","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":1,"suspicious_identifiers":["Opens file with deletion access rights"],"informative_identifiers_count":1,"informative_identifiers":["Contains ability to delete files/directories (API string)"],"parent":{"technique":"Indicator Removal","attck_id":"T1070","attck_id_wiki":"https://attack.mitre.org/techniques/T1070"}},{"tactic":"Defense Evasion","technique":"Masquerading","attck_id":"T1036","attck_id_wiki":"https://attack.mitre.org/techniques/T1036","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":2,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Renames files"],"parent":null},{"tactic":"Defense Evasion","technique":"Double File Extension","attck_id":"T1036.007","attck_id_wiki":"https://attack.mitre.org/techniques/T1036/007","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":1,"suspicious_identifiers":[],"informative_identifiers_count":0,"informative_identifiers":[],"parent":{"technique":"Masquerading","attck_id":"T1036","attck_id_wiki":"https://attack.mitre.org/techniques/T1036"}},{"tactic":"Defense Evasion","technique":"Process Injection","attck_id":"T1055","attck_id_wiki":"https://attack.mitre.org/techniques/T1055","malicious_identifiers_count":3,"malicious_identifiers":["Writes data to a remote process","Calls an API typically used to create a thread in another process","Creates a process in suspended mode (likely for process injection)"],"suspicious_identifiers_count":1,"suspicious_identifiers":["Spawned processes likely due to injection"],"informative_identifiers_count":1,"informative_identifiers":["Contains ability to inject code into another process (API string)"],"parent":null},{"tactic":"Defense Evasion","technique":"Access Token Manipulation","attck_id":"T1134","attck_id_wiki":"https://attack.mitre.org/techniques/T1134","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":3,"informative_identifiers":["Calls an API typically used to enable or disable privileges in the specified access token","Contains ability to modify access token privileges (API string)","Contains ability to retrieve token privileges information (API string)"],"parent":null},{"tactic":"Defense Evasion","technique":"Obfuscated Files or Information","attck_id":"T1027","attck_id_wiki":"https://attack.mitre.org/techniques/T1027","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":3,"suspicious_identifiers":["Entrypoint in PE header is within an uncommon section","Timestamp in PE header is very old or in the future"],"informative_identifiers_count":5,"informative_identifiers":["Loads the Bcrypt module DLL","Matched Compiler/Packer signature (DIE)","PE file contains zero-size sections","Sample file has high entropy (likely encrypted/compressed content)","Shows ability to obfuscate file or information"],"parent":null},{"tactic":"Defense Evasion","technique":"Bypass User Account Control","attck_id":"T1548.002","attck_id_wiki":"https://attack.mitre.org/techniques/T1548/002","malicious_identifiers_count":1,"malicious_identifiers":["Tries to disable user account control"],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Contains ability to bypass UAC using COM object (API string)"],"parent":{"technique":"Abuse Elevation Control Mechanism","attck_id":"T1548","attck_id_wiki":"https://attack.mitre.org/techniques/T1548"}},{"tactic":"Defense Evasion","technique":"Debugger Evasion","attck_id":"T1622","attck_id_wiki":"https://attack.mitre.org/techniques/T1622","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":1,"suspicious_identifiers":[],"informative_identifiers_count":0,"informative_identifiers":[],"parent":null},{"tactic":"Defense Evasion","technique":"Direct Volume Access","attck_id":"T1006","attck_id_wiki":"https://attack.mitre.org/techniques/T1006","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Contains the ability to enumerate volumes (API string)"],"parent":null},{"tactic":"Defense Evasion","technique":"Software Packing","attck_id":"T1027.002","attck_id_wiki":"https://attack.mitre.org/techniques/T1027/002","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":4,"suspicious_identifiers":["PE file is packed with UPX","PE file has unusual entropy sections"],"informative_identifiers_count":0,"informative_identifiers":[],"parent":{"technique":"Obfuscated Files or Information","attck_id":"T1027","attck_id_wiki":"https://attack.mitre.org/techniques/T1027"}},{"tactic":"Defense Evasion","technique":"Dynamic API Resolution","attck_id":"T1027.007","attck_id_wiki":"https://attack.mitre.org/techniques/T1027/007","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Contains ability to dynamically determine API calls"],"parent":{"technique":"Obfuscated Files or Information","attck_id":"T1027","attck_id_wiki":"https://attack.mitre.org/techniques/T1027"}},{"tactic":"Defense Evasion","technique":"Indicator Removal from Tools","attck_id":"T1027.005","attck_id_wiki":"https://attack.mitre.org/techniques/T1027/005","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Contains XOR operation loops [Stream disassembly]"],"parent":{"technique":"Obfuscated Files or Information","attck_id":"T1027","attck_id_wiki":"https://attack.mitre.org/techniques/T1027"}},{"tactic":"Defense Evasion","technique":"Deobfuscate/Decode Files or Information","attck_id":"T1140","attck_id_wiki":"https://attack.mitre.org/techniques/T1140","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":2,"informative_identifiers":["Contains ability to perform decryption (API string)","Shows ability to deobfuscate/decode files or information"],"parent":null},{"tactic":"Defense Evasion","technique":"Indicator Removal","attck_id":"T1070","attck_id_wiki":"https://attack.mitre.org/techniques/T1070","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":1,"suspicious_identifiers":[],"informative_identifiers_count":0,"informative_identifiers":[],"parent":null},{"tactic":"Defense Evasion","technique":"Thread Local Storage","attck_id":"T1055.005","attck_id_wiki":"https://attack.mitre.org/techniques/T1055/005","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":1,"suspicious_identifiers":[],"informative_identifiers_count":0,"informative_identifiers":[],"parent":{"technique":"Process Injection","attck_id":"T1055","attck_id_wiki":"https://attack.mitre.org/techniques/T1055"}},{"tactic":"Defense Evasion","technique":"Execution Guardrails","attck_id":"T1480","attck_id_wiki":"https://attack.mitre.org/techniques/T1480","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Shows ability to use execution guardrails"],"parent":null},{"tactic":"Credential Access","technique":"Input Capture","attck_id":"T1056","attck_id_wiki":"https://attack.mitre.org/techniques/T1056","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Contains ability to register/read input devices (API string)"],"parent":null},{"tactic":"Credential Access","technique":"Keylogging","attck_id":"T1056.001","attck_id_wiki":"https://attack.mitre.org/techniques/T1056/001","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Contains ability to retrieve information about pressed keystrokes (API string)"],"parent":{"technique":"Input Capture","attck_id":"T1056","attck_id_wiki":"https://attack.mitre.org/techniques/T1056"}},{"tactic":"Discovery","technique":"Query Registry","attck_id":"T1012","attck_id_wiki":"https://attack.mitre.org/techniques/T1012","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":1,"suspicious_identifiers":[],"informative_identifiers_count":4,"informative_identifiers":["Contains registry location strings","Contains ability to query registry keys (API string)","Opens registry keys","Queries registry keys"],"parent":null},{"tactic":"Discovery","technique":"System Information Discovery","attck_id":"T1082","attck_id_wiki":"https://attack.mitre.org/techniques/T1082","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":4,"suspicious_identifiers":[],"informative_identifiers_count":20,"informative_identifiers":["Contains ability to retrieve volume information (API string)","Contains reference to mutex-related activity (API string)","Contains ability to find logical drives of the machine (API string)","Contains ability to retrieve the OS information (API string)","Contains ability to query volume/memory size (API string)","Contains ability to retrieve a module handle (API string)","Calls an API typically used to get product type","Calls an API typically used to retrieve information about the current system","Contains ability to enumerate objects (Powershell command string)","Reads information about supported languages","Contains ability to read software policies","Calls an API typically used to retrieve computer name","Contains ability to retrieve the NetBIOS name of the local computer (API string)","Contains ability to retrieve information about the current system (API string)","Contains ability to determine disk drive type (API string)","Contains ability to retrieve information about MS-DOS device names (API string)","Contains ability to retrieve information about operating system (API string)","Contains ability to retrieve the host's architecture (API string)","Calls an API typically used to get system version information","Reads the active computer name"],"parent":null},{"tactic":"Discovery","technique":"File and Directory Discovery","attck_id":"T1083","attck_id_wiki":"https://attack.mitre.org/techniques/T1083","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":10,"informative_identifiers":["Contains ability to retrieve file and directory information (API string)","Contains ability to retrieve path in which Windows is installed (API string)","Tries to access non-existent files (executable)","Reads files","Touches files in the Windows directory","Calls an API's typically used for searching a directory for a files","Contains ability to enumerate files on disk (API string)","Touches files","Tries to access non-existent files (non-executable)","Touches files in program files directory"],"parent":null},{"tactic":"Discovery","technique":"System Network Configuration Discovery","attck_id":"T1016","attck_id_wiki":"https://attack.mitre.org/techniques/T1016","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":4,"informative_identifiers":["Contains ability retrieve IPv4 mapping information (API string)","Contains ability to query network adapter information (API string)","Contains ability to free the memory used by network management functions (API string)","Contains ability to retrieve the local name for a socket (API string)"],"parent":null},{"tactic":"Discovery","technique":"Process Discovery","attck_id":"T1057","attck_id_wiki":"https://attack.mitre.org/techniques/T1057","malicious_identifiers_count":1,"malicious_identifiers":["Spawns a lot of processes"],"suspicious_identifiers_count":3,"suspicious_identifiers":[],"informative_identifiers_count":9,"informative_identifiers":["Contains ability to enumerate process and/or its information (API string)","Contains ability to determine if process is running under WOW64 (API string)","Contains ability to retrieve process ID (API string)","Queries basic information of the specified process","Calls an API typically used for taking snapshot of the specified processes","Spawns new processes","Spawns new processes that are not known child processes","Process launched with changed environment","Contains ability to retrieve/open a process (API string)"],"parent":null},{"tactic":"Discovery","technique":"System Time Discovery","attck_id":"T1124","attck_id_wiki":"https://attack.mitre.org/techniques/T1124","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":2,"informative_identifiers":["Contains ability to retrieve machine time (API string)","Contains ability to retrieve machine timezone (API string)"],"parent":null},{"tactic":"Discovery","technique":"System Owner/User Discovery","attck_id":"T1033","attck_id_wiki":"https://attack.mitre.org/techniques/T1033","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Contains ability to retrieve usernames and/or user information (API string)"],"parent":null},{"tactic":"Discovery","technique":"Remote System Discovery","attck_id":"T1018","attck_id_wiki":"https://attack.mitre.org/techniques/T1018","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Contains ability to retrieve remote session information (API string)"],"parent":null},{"tactic":"Discovery","technique":"System Network Connections Discovery","attck_id":"T1049","attck_id_wiki":"https://attack.mitre.org/techniques/T1049","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Contains ability to enumerate logon sessions (API string)"],"parent":null},{"tactic":"Discovery","technique":"Time Based Evasion","attck_id":"T1497.003","attck_id_wiki":"https://attack.mitre.org/techniques/T1497/003","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Contains ability to retrieve the time elapsed since the system was started (API string)"],"parent":{"technique":"Virtualization/Sandbox Evasion","attck_id":"T1497","attck_id_wiki":"https://attack.mitre.org/techniques/T1497"}},{"tactic":"Discovery","technique":"System Location Discovery","attck_id":"T1614","attck_id_wiki":"https://attack.mitre.org/techniques/T1614","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Contains ability to query system locale (API string)"],"parent":null},{"tactic":"Discovery","technique":"Application Window Discovery","attck_id":"T1010","attck_id_wiki":"https://attack.mitre.org/techniques/T1010","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":2,"informative_identifiers":["Contains ability to retrieve open application windows (API string)","Contains ability to find open windows (API string)"],"parent":null},{"tactic":"Discovery","technique":"Local Account","attck_id":"T1087.001","attck_id_wiki":"https://attack.mitre.org/techniques/T1087/001","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Contains ability to retrieve information about user accounts on a server (API string)"],"parent":{"technique":"Account Discovery","attck_id":"T1087","attck_id_wiki":"https://attack.mitre.org/techniques/T1087"}},{"tactic":"Discovery","technique":"System Service Discovery","attck_id":"T1007","attck_id_wiki":"https://attack.mitre.org/techniques/T1007","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":2,"suspicious_identifiers":[],"informative_identifiers_count":2,"informative_identifiers":["Contains the ability to enumerate service (API string)","Queries services related registry keys"],"parent":null},{"tactic":"Discovery","technique":"Debugger Evasion","attck_id":"T1622","attck_id_wiki":"https://attack.mitre.org/techniques/T1622","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":1,"suspicious_identifiers":[],"informative_identifiers_count":0,"informative_identifiers":[],"parent":null},{"tactic":"Discovery","technique":"System Language Discovery","attck_id":"T1614.001","attck_id_wiki":"https://attack.mitre.org/techniques/T1614/001","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":2,"informative_identifiers":["Contains ability to retrieve system language (API string)","Reads the windows installation language"],"parent":{"technique":"System Location Discovery","attck_id":"T1614","attck_id_wiki":"https://attack.mitre.org/techniques/T1614"}},{"tactic":"Discovery","technique":"Account Discovery","attck_id":"T1087","attck_id_wiki":"https://attack.mitre.org/techniques/T1087","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Contains ability to retrieve SID for the specified name (API string)"],"parent":null},{"tactic":"Lateral Movement","technique":"Lateral Tool Transfer","attck_id":"T1570","attck_id_wiki":"https://attack.mitre.org/techniques/T1570","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Contains ability to move file or directory (API string)"],"parent":null},{"tactic":"Lateral Movement","technique":"Replication Through Removable Media","attck_id":"T1091","attck_id_wiki":"https://attack.mitre.org/techniques/T1091","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":1,"suspicious_identifiers":[],"informative_identifiers_count":0,"informative_identifiers":[],"parent":null},{"tactic":"Lateral Movement","technique":"Remote Desktop Protocol","attck_id":"T1021.001","attck_id_wiki":"https://attack.mitre.org/techniques/T1021/001","malicious_identifiers_count":1,"malicious_identifiers":["Sets terminal service related keys (often RDP related)"],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":0,"informative_identifiers":[],"parent":{"technique":"Remote Services","attck_id":"T1021","attck_id_wiki":"https://attack.mitre.org/techniques/T1021"}},{"tactic":"Collection","technique":"Email Collection","attck_id":"T1114","attck_id_wiki":"https://attack.mitre.org/techniques/T1114","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":1,"suspicious_identifiers":[],"informative_identifiers_count":0,"informative_identifiers":[],"parent":null},{"tactic":"Collection","technique":"Local Data Staging","attck_id":"T1074.001","attck_id_wiki":"https://attack.mitre.org/techniques/T1074/001","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":2,"informative_identifiers":["Contains ability to create directories (API string)","Writes log files"],"parent":{"technique":"Data Staged","attck_id":"T1074","attck_id_wiki":"https://attack.mitre.org/techniques/T1074"}},{"tactic":"Collection","technique":"Input Capture","attck_id":"T1056","attck_id_wiki":"https://attack.mitre.org/techniques/T1056","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Contains ability to register/read input devices (API string)"],"parent":null},{"tactic":"Collection","technique":"Keylogging","attck_id":"T1056.001","attck_id_wiki":"https://attack.mitre.org/techniques/T1056/001","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Contains ability to retrieve information about pressed keystrokes (API string)"],"parent":{"technique":"Input Capture","attck_id":"T1056","attck_id_wiki":"https://attack.mitre.org/techniques/T1056"}},{"tactic":"Collection","technique":"Data from Local System","attck_id":"T1005","attck_id_wiki":"https://attack.mitre.org/techniques/T1005","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Tries to open documents files"],"parent":null},{"tactic":"Collection","technique":"Automated Collection","attck_id":"T1119","attck_id_wiki":"https://attack.mitre.org/techniques/T1119","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Shows ability to send encrypted data to the internet"],"parent":null},{"tactic":"Command and Control","technique":"Application Layer Protocol","attck_id":"T1071","attck_id_wiki":"https://attack.mitre.org/techniques/T1071","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":3,"informative_identifiers":["Found potential URL in binary/memory","Contains ability to communicate with network (API string)","Found potential IP address in binary/memory"],"parent":null},{"tactic":"Command and Control","technique":"Non-Application Layer Protocol","attck_id":"T1095","attck_id_wiki":"https://attack.mitre.org/techniques/T1095","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Contains ability to communicate with C2 using Sockets (API string)"],"parent":null},{"tactic":"Command and Control","technique":"Ingress Tool Transfer","attck_id":"T1105","attck_id_wiki":"https://attack.mitre.org/techniques/T1105","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":1,"suspicious_identifiers":["Drops executable files"],"informative_identifiers_count":2,"informative_identifiers":["Contains ability to write files (API string)","Dropped files"],"parent":null},{"tactic":"Command and Control","technique":"Encrypted Channel","attck_id":"T1573","attck_id_wiki":"https://attack.mitre.org/techniques/T1573","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":1,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Making HTTPS connections using secure TLS/SSL version"],"parent":null},{"tactic":"Command and Control","technique":"Non-Standard Port","attck_id":"T1571","attck_id_wiki":"https://attack.mitre.org/techniques/T1571","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Contains ability to open a port and listen for incoming connection (API string)"],"parent":null},{"tactic":"Command and Control","technique":"Data Encoding","attck_id":"T1132","attck_id_wiki":"https://attack.mitre.org/techniques/T1132","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Contains ability to perform Base64 encoding/decoding"],"parent":null},{"tactic":"Command and Control","technique":"Symmetric Cryptography","attck_id":"T1573.001","attck_id_wiki":"https://attack.mitre.org/techniques/T1573/001","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Shows ability to use encryption for command and control traffic"],"parent":{"technique":"Encrypted Channel","attck_id":"T1573","attck_id_wiki":"https://attack.mitre.org/techniques/T1573"}},{"tactic":"Exfiltration","technique":"Scheduled Transfer","attck_id":"T1029","attck_id_wiki":"https://attack.mitre.org/techniques/T1029","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Contains ability to perform scheduled transfer (API string)"],"parent":null},{"tactic":"Impact","technique":"System Shutdown/Reboot","attck_id":"T1529","attck_id_wiki":"https://attack.mitre.org/techniques/T1529","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":2,"informative_identifiers":["Contains ability to reboot/shutdown the operating system (API string)","Contains ability to shutdown system"],"parent":null},{"tactic":"Impact","technique":"Data Encrypted for Impact","attck_id":"T1486","attck_id_wiki":"https://attack.mitre.org/techniques/T1486","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":2,"suspicious_identifiers":[],"informative_identifiers_count":3,"informative_identifiers":["Contains ability to perform encryption (API string)","Contains possible references to Golang crypto modules","Contains reference to cryptographic keys"],"parent":null},{"tactic":"Impact","technique":"Service Stop","attck_id":"T1489","attck_id_wiki":"https://attack.mitre.org/techniques/T1489","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":2,"informative_identifiers":["Contains ability to terminate a process (API string)","Contains ability to close a handle to a service (API string)"],"parent":null},{"tactic":"Impact","technique":"Internal Defacement","attck_id":"T1491.001","attck_id_wiki":"https://attack.mitre.org/techniques/T1491/001","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":1,"suspicious_identifiers":["Detected indicator that file is ransomware"],"informative_identifiers_count":0,"informative_identifiers":[],"parent":{"technique":"Defacement","attck_id":"T1491","attck_id_wiki":"https://attack.mitre.org/techniques/T1491"}},{"tactic":"Impact","technique":"Defacement","attck_id":"T1491","attck_id_wiki":"https://attack.mitre.org/techniques/T1491","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":1,"suspicious_identifiers":["Changes the desktop background picture"],"informative_identifiers_count":0,"informative_identifiers":[],"parent":null},{"tactic":"Impact","technique":"Inhibit System Recovery","attck_id":"T1490","attck_id_wiki":"https://attack.mitre.org/techniques/T1490","malicious_identifiers_count":3,"malicious_identifiers":["Tries to suppress failures during boot (often used to hide system changes)","Deletes volume snapshots (often used by ransomware)","Disables startup repair"],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":0,"informative_identifiers":[],"parent":null}],"network_mode":"default","signatures":[{"threat_level":0,"threat_level_human":"informative","category":"Anti-Detection/Stealthyness","identifier":"string-226","type":2,"relevance":1,"name":"Contains ability to delay execution by waiting for signal/timeout (API string)","description":"Found reference to API \"WaitForMultipleObjects\" (Indicator: \"WaitForMultipleObjects\"; Source: \"00000000-00006160.00000000.68598.00000000.00000004.mdmp\")\n Found reference to API \"WaitForSingleObject\" (Indicator: \"WaitForSingleObject\"; Source: \"00000000-00006160.00000000.68598.00000000.00000004.mdmp\")\n Found reference to API \"syntax eSetTimersyntax error scauser32.dll\" (Indicator: \"SetTimer\"; Source: \"00000000-00006160.00000000.68598.00000000.00000004.mdmp\")","description_v2":["Found reference to API \"WaitForMultipleObjects\" (Indicator: \"WaitForMultipleObjects\"; Source: \"00000000-00006160.00000000.68598.00000000.00000004.mdmp\")","Found reference to API \"WaitForSingleObject\" (Indicator: \"WaitForSingleObject\"; Source: \"00000000-00006160.00000000.68598.00000000.00000004.mdmp\")","Found reference to API \"syntax eSetTimersyntax error scauser32.dll\" (Indicator: \"SetTimer\"; Source: \"00000000-00006160.00000000.68598.00000000.00000004.mdmp\")"],"description_v3":[{"type":"text","value":"Found reference to API \"WaitForMultipleObjects\" (Indicator: \"WaitForMultipleObjects\"; Source: \"00000000-00006160.00000000.68598.00000000.00000004.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"WaitForSingleObject\" (Indicator: \"WaitForSingleObject\"; Source: \"00000000-00006160.00000000.68598.00000000.00000004.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"syntax eSetTimersyntax error scauser32.dll\" (Indicator: \"SetTimer\"; Source: \"00000000-00006160.00000000.68598.00000000.00000004.mdmp\")"}],"origin":"File/Memory","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Anti-Detection/Stealthyness","identifier":"string-211","type":2,"relevance":1,"name":"Contains ability to delete all entries from an event log (API string)","description":"Found reference to API \"ClearEventLogW\" (Indicator: \"ClearEventLog\"; Source: \"00000000-00006160.00000000.68598.00000000.00000004.mdmp\")","description_v2":["Found reference to API \"ClearEventLogW\" (Indicator: \"ClearEventLog\"; Source: \"00000000-00006160.00000000.68598.00000000.00000004.mdmp\")"],"description_v3":[{"type":"text","value":"Found reference to API \"ClearEventLogW\" (Indicator: \"ClearEventLog\"; Source: \"00000000-00006160.00000000.68598.00000000.00000004.mdmp\")"}],"origin":"File/Memory","attck_id":"T1070.001","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1070/001","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Anti-Detection/Stealthyness","identifier":"string-306","type":2,"relevance":1,"name":"Contains ability to impersonate access tokens (API string)","description":"Found reference to API \"OpenProcessTokenOpenSCManagerW\" (Indicator: \"OpenProcessToken\"; Source: \"00000000-00006160.00000000.68598.00000000.00000004.mdmp\")\n Found reference to API \"OpenThreadToken\" (Indicator: \"OpenThreadToken\"; Source: \"00000000-00006160.00000000.68598.00000000.00000004.mdmp\")\n Found reference to API \"SetServiceStatusSetThreadToken\" (Indicator: \"SetThreadToken\"; Source: \"00000000-00006160.00000000.68598.00000000.00000004.mdmp\")\n Found reference to API \"OpenProcessTokenRegCloseKey\" (Indicator: \"OpenProcessToken\"; Source: \"00000000-00006160.00000000.68598.00000000.00000004.mdmp\")\n Found reference to API \"OpenProcessToken\" (Indicator: \"OpenProcessToken\"; Source: \"00000000-00006160.00000000.68598.00000000.00000004.mdmp\")","description_v2":["Found reference to API \"OpenProcessTokenOpenSCManagerW\" (Indicator: \"OpenProcessToken\"; Source: \"00000000-00006160.00000000.68598.00000000.00000004.mdmp\")","Found reference to API \"OpenThreadToken\" (Indicator: \"OpenThreadToken\"; Source: \"00000000-00006160.00000000.68598.00000000.00000004.mdmp\")","Found reference to API \"SetServiceStatusSetThreadToken\" (Indicator: \"SetThreadToken\"; Source: \"00000000-00006160.00000000.68598.00000000.00000004.mdmp\")","Found reference to API \"OpenProcessTokenRegCloseKey\" (Indicator: \"OpenProcessToken\"; Source: \"00000000-00006160.00000000.68598.00000000.00000004.mdmp\")","Found reference to API \"OpenProcessToken\" (Indicator: \"OpenProcessToken\"; Source: \"00000000-00006160.00000000.68598.00000000.00000004.mdmp\")"],"description_v3":[{"type":"text","value":"Found reference to API \"OpenProcessTokenOpenSCManagerW\" (Indicator: \"OpenProcessToken\"; Source: \"00000000-00006160.00000000.68598.00000000.00000004.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"OpenThreadToken\" (Indicator: \"OpenThreadToken\"; Source: \"00000000-00006160.00000000.68598.00000000.00000004.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"SetServiceStatusSetThreadToken\" (Indicator: \"SetThreadToken\"; Source: \"00000000-00006160.00000000.68598.00000000.00000004.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"OpenProcessTokenRegCloseKey\" (Indicator: \"OpenProcessToken\"; Source: \"00000000-00006160.00000000.68598.00000000.00000004.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"OpenProcessToken\" (Indicator: \"OpenProcessToken\"; Source: \"00000000-00006160.00000000.68598.00000000.00000004.mdmp\")"}],"origin":"File/Memory","attck_id":"T1134.001","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1134/001","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Anti-Detection/Stealthyness","identifier":"string-92","type":2,"relevance":1,"name":"Contains ability to inject code into another process (API string)","description":"Found reference to API \"VirtualAlloc\" (Indicator: \"VirtualAlloc\"; Source: \"00000000-00006160.00000000.68598.00000000.00000004.mdmp\")\n Found reference to API \"VirtualFree\" (Indicator: \"VirtualFree\"; Source: \"00000000-00006160.00000000.68598.00000000.00000004.mdmp\")\n Found reference to API \"WTSFreeMemory\" (Indicator: \"FreeMemory\"; Source: \"00000000-00006160.00000000.68598.00000000.00000004.mdmp\")\n Found reference to API \"FwpmFreeMemory0\" (Indicator: \"FreeMemory\"; Source: \"00000000-00006160.00000000.68598.00000000.00000004.mdmp\")","description_v2":["Found reference to API \"VirtualAlloc\" (Indicator: \"VirtualAlloc\"; Source: \"00000000-00006160.00000000.68598.00000000.00000004.mdmp\")","Found reference to API \"VirtualFree\" (Indicator: \"VirtualFree\"; Source: \"00000000-00006160.00000000.68598.00000000.00000004.mdmp\")","Found reference to API \"WTSFreeMemory\" (Indicator: \"FreeMemory\"; Source: \"00000000-00006160.00000000.68598.00000000.00000004.mdmp\")","Found reference to API \"FwpmFreeMemory0\" (Indicator: \"FreeMemory\"; Source: \"00000000-00006160.00000000.68598.00000000.00000004.mdmp\")"],"description_v3":[{"type":"text","value":"Found reference to API \"VirtualAlloc\" (Indicator: \"VirtualAlloc\"; Source: \"00000000-00006160.00000000.68598.00000000.00000004.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"VirtualFree\" (Indicator: \"VirtualFree\"; Source: \"00000000-00006160.00000000.68598.00000000.00000004.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"WTSFreeMemory\" (Indicator: \"FreeMemory\"; Source: \"00000000-00006160.00000000.68598.00000000.00000004.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"FwpmFreeMemory0\" (Indicator: \"FreeMemory\"; Source: \"00000000-00006160.00000000.68598.00000000.00000004.mdmp\")"}],"origin":"File/Memory","attck_id":"T1055","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1055","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Anti-Detection/Stealthyness","identifier":"string-318","type":2,"relevance":1,"name":"Contains ability to load/free library (API string)","description":"Found reference to API \"FreeLibrary\" (Indicator: \"FreeLibrary\"; Source: \"00000000-00006160.00000000.68598.00000000.00000004.mdmp\")\n Found reference to API \"LoadLibraryExW\" (Indicator: \"LoadLibrary\"; Source: \"00000000-00006160.00000000.68598.00000000.00000004.mdmp\")\n Found reference to API \"LoadLibraryW\" (Indicator: \"LoadLibrary\"; Source: \"00000000-00006160.00000000.68598.00000000.00000004.mdmp\")","description_v2":["Found reference to API \"FreeLibrary\" (Indicator: \"FreeLibrary\"; Source: \"00000000-00006160.00000000.68598.00000000.00000004.mdmp\")","Found reference to API \"LoadLibraryExW\" (Indicator: \"LoadLibrary\"; Source: \"00000000-00006160.00000000.68598.00000000.00000004.mdmp\")","Found reference to API \"LoadLibraryW\" (Indicator: \"LoadLibrary\"; Source: \"00000000-00006160.00000000.68598.00000000.00000004.mdmp\")"],"description_v3":[{"type":"text","value":"Found reference to API \"FreeLibrary\" (Indicator: \"FreeLibrary\"; Source: \"00000000-00006160.00000000.68598.00000000.00000004.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"LoadLibraryExW\" (Indicator: \"LoadLibrary\"; Source: \"00000000-00006160.00000000.68598.00000000.00000004.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"LoadLibraryW\" (Indicator: \"LoadLibrary\"; Source: \"00000000-00006160.00000000.68598.00000000.00000004.mdmp\")"}],"origin":"File/Memory","attck_id":"T1055.001","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1055/001","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Anti-Detection/Stealthyness","identifier":"string-304","type":2,"relevance":1,"name":"Contains ability to modify registry key/value (API string)","description":"Found reference to API \"RegLoadMUIStringRegSetValueExW\" (Indicator: \"RegSetValue\"; Source: \"00000000-00006160.00000000.68598.00000000.00000004.mdmp\")\n Found reference to API \"RegSetValueExW\" (Indicator: \"RegSetValue\"; Source: \"00000000-00006160.00000000.68598.00000000.00000004.mdmp\")","description_v2":["Found reference to API \"RegLoadMUIStringRegSetValueExW\" (Indicator: \"RegSetValue\"; Source: \"00000000-00006160.00000000.68598.00000000.00000004.mdmp\")","Found reference to API \"RegSetValueExW\" (Indicator: \"RegSetValue\"; Source: \"00000000-00006160.00000000.68598.00000000.00000004.mdmp\")"],"description_v3":[{"type":"text","value":"Found reference to API \"RegLoadMUIStringRegSetValueExW\" (Indicator: \"RegSetValue\"; Source: \"00000000-00006160.00000000.68598.00000000.00000004.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"RegSetValueExW\" (Indicator: \"RegSetValue\"; Source: \"00000000-00006160.00000000.68598.00000000.00000004.mdmp\")"}],"origin":"File/Memory","attck_id":"T1112","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1112","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Anti-Detection/Stealthyness","identifier":"string-544","type":2,"relevance":1,"name":"Contains ability to open a service (API string)","description":"Found reference to API \"OpenServiceW\" (Indicator: \"OpenService\"; Source: \"00000000-00006160.00000000.68598.00000000.00000004.mdmp\")","description_v2":["Found reference to API \"OpenServiceW\" (Indicator: \"OpenService\"; Source: \"00000000-00006160.00000000.68598.00000000.00000004.mdmp\")"],"description_v3":[{"type":"text","value":"Found reference to API \"OpenServiceW\" (Indicator: \"OpenService\"; Source: \"00000000-00006160.00000000.68598.00000000.00000004.mdmp\")"}],"origin":"File/Memory","attck_id":"T1569.002","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1569/002","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Anti-Detection/Stealthyness","identifier":"string-338","type":2,"relevance":1,"name":"Contains ability to perform Base64 encoding/decoding","description":"$27","description_v2":["Found string \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_bytes.Buffer: reader returned negative count from Read\" (Indicator: \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+\"; Source: \"00000000-00006160.00000000.68598.00000000.00000004.mdmp\")","Found string \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_bytes.Buffer: reader returned negative count from Read\" (Indicator: \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/\"; Source: \"00000000-00006160.00000000.68598.00000000.00000004.mdmp\")","Found string \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_bytes.Buffer: reader returned negative count from Read\" (Indicator: \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-\"; Source: \"00000000-00006160.00000000.68598.00000000.00000004.mdmp\")","Found string \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_bytes.Buffer: reader returned negative count from Read\" (Indicator: \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_\"; Source: \"00000000-00006160.00000000.68598.00000000.00000004.mdmp\")","Found string \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/\" (Indicator: \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+\"; Source: \"00000000-00006160.00000000.68598.00000000.00000004.mdmp\")","Found string \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/\" (Indicator: \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/\"; Source: \"00000000-00006160.00000000.68598.00000000.00000004.mdmp\")","Found string \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_\" (Indicator: \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-\"; Source: \"00000000-00006160.00000000.68598.00000000.00000004.mdmp\")","Found string \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_\" (Indicator: \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_\"; Source: \"00000000-00006160.00000000.68598.00000000.00000004.mdmp\")"],"description_v3":[{"type":"text","value":"Found string \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_bytes.Buffer: reader returned negative count from Read\" (Indicator: \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+\"; Source: \"00000000-00006160.00000000.68598.00000000.00000004.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found string \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_bytes.Buffer: reader returned negative count from Read\" (Indicator: \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/\"; Source: \"00000000-00006160.00000000.68598.00000000.00000004.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found string \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_bytes.Buffer: reader returned negative count from Read\" (Indicator: \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-\"; Source: \"00000000-00006160.00000000.68598.00000000.00000004.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found string \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_bytes.Buffer: reader returned negative count from Read\" (Indicator: \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_\"; Source: \"00000000-00006160.00000000.68598.00000000.00000004.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found string \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/\" (Indicator: \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+\"; Source: \"00000000-00006160.00000000.68598.00000000.00000004.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found string \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/\" (Indicator: \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/\"; Source: \"00000000-00006160.00000000.68598.00000000.00000004.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found string \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_\" (Indicator: \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-\"; Source: \"00000000-00006160.00000000.68598.00000000.00000004.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found string \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_\" (Indicator: \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_\"; Source: \"00000000-00006160.00000000.68598.00000000.00000004.mdmp\")"}],"origin":"File/Memory","attck_id":"T1132","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1132","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Anti-Detection/Stealthyness","identifier":"string-409","type":2,"relevance":1,"name":"Contains ability to set file time (API string)","description":"Found reference to API \"SetFileTime\" (Indicator: \"SetFileTime\"; Source: \"00000000-00006160.00000000.68598.00000000.00000004.mdmp\")","description_v2":["Found reference to API \"SetFileTime\" (Indicator: \"SetFileTime\"; Source: \"00000000-00006160.00000000.68598.00000000.00000004.mdmp\")"],"description_v3":[{"type":"text","value":"Found reference to API \"SetFileTime\" (Indicator: \"SetFileTime\"; Source: \"00000000-00006160.00000000.68598.00000000.00000004.mdmp\")"}],"origin":"File/Memory","attck_id":"T1070.006","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1070/006","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Anti-Detection/Stealthyness","identifier":"string-192","type":2,"relevance":1,"name":"Contains the ability to modify system service (API string)","description":"Found reference to API \"BuildSecurityDesControlService\" (Indicator: \"ControlService\"; Source: \"00000000-00006160.00000000.68598.00000000.00000004.mdmp\")\n Found reference to API \"AllocateAndInitializeSidBuildSecurityDescriptorWChangeServiceConfig2W\" (Indicator: \"ChangeServiceConfig\"; Source: \"00000000-00006160.00000000.68598.00000000.00000004.mdmp\")\n Found reference to API \"ChangeServiceConfigW\" (Indicator: \"ChangeServiceConfig\"; Source: \"00000000-00006160.00000000.68598.00000000.00000004.mdmp\")","description_v2":["Found reference to API \"BuildSecurityDesControlService\" (Indicator: \"ControlService\"; Source: \"00000000-00006160.00000000.68598.00000000.00000004.mdmp\")","Found reference to API \"AllocateAndInitializeSidBuildSecurityDescriptorWChangeServiceConfig2W\" (Indicator: \"ChangeServiceConfig\"; Source: \"00000000-00006160.00000000.68598.00000000.00000004.mdmp\")","Found reference to API \"ChangeServiceConfigW\" (Indicator: \"ChangeServiceConfig\"; Source: \"00000000-00006160.00000000.68598.00000000.00000004.mdmp\")"],"description_v3":[{"type":"text","value":"Found reference to API \"BuildSecurityDesControlService\" (Indicator: \"ControlService\"; Source: \"00000000-00006160.00000000.68598.00000000.00000004.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"AllocateAndInitializeSidBuildSecurityDescriptorWChangeServiceConfig2W\" (Indicator: \"ChangeServiceConfig\"; Source: \"00000000-00006160.00000000.68598.00000000.00000004.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"ChangeServiceConfigW\" (Indicator: \"ChangeServiceConfig\"; Source: \"00000000-00006160.00000000.68598.00000000.00000004.mdmp\")"}],"origin":"File/Memory","attck_id":"T1543.003","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1543/003","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Anti-Detection/Stealthyness","identifier":"string-145","type":2,"relevance":1,"name":"Found virtual disk drive like strings","description":"Found string - \\\\.\\IOBitUnlockerDevice; Source: \"00000000-00006160.00000000.68598.00000000.00000004.mdmp\")\n Found string - \\\\.\\IOBi; Source: \"00000000-00006160.00000000.68598.00000000.00000004.mdmp\")\n Found string - \\\\.\\IOBitUnlockeBM????; Source: \"00000000-00006160.00000000.68598.00000000.00000004.mdmp\")","description_v2":["Found string - \\\\.\\IOBitUnlockerDevice; Source: \"00000000-00006160.00000000.68598.00000000.00000004.mdmp\")","Found string - \\\\.\\IOBi; Source: \"00000000-00006160.00000000.68598.00000000.00000004.mdmp\")","Found string - \\\\.\\IOBitUnlockeBM????; Source: \"00000000-00006160.00000000.68598.00000000.00000004.mdmp\")"],"description_v3":[{"type":"text","value":"Found string - \\\\.\\IOBitUnlockerDevice; Source: \"00000000-00006160.00000000.68598.00000000.00000004.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found string - \\\\.\\IOBi; Source: \"00000000-00006160.00000000.68598.00000000.00000004.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found string - \\\\.\\IOBitUnlockeBM????; Source: \"00000000-00006160.00000000.68598.00000000.00000004.mdmp\")"}],"origin":"File/Memory","attck_id":"T1564","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1564","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Anti-Detection/Stealthyness","identifier":"api-162","type":6,"relevance":1,"name":"Renames files","description":"$28","description_v2":["\"\" (Indicator: \"text/javascript\"; File: \"lockxx.recovery_data.hta\")\n Found string \"\" (Indicator: \"text/javascript\"; File: \"lockxx.recovery_data.hta\")","description_v2":["Found string \"\" (Indicator: \"text/javascript\"; File: \"lockxx.recovery_data.hta\")","Found string \"\" (Indicator: \"text/javascript\"; File: \"lockxx.recovery_data.hta\")"],"description_v3":[{"type":"text","value":"Found string \"\" (Indicator: \"text/javascript\"; File: \"lockxx.recovery_data.hta\")"},{"type":"linebreak"},{"type":"text","value":"Found string \"\" (Indicator: \"text/javascript\"; File: \"lockxx.recovery_data.hta\")"}],"origin":"File/Memory","attck_id":"T1059.007","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1059/007","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"General","identifier":"target-25","type":9,"relevance":3,"name":"Spawns new processes","description":"$39","description_v2":["Spawned process \"cmd.exe\" with commandline \"/c \"wmic shadowcopy delete /nointeractive\"\" (UID: 00000000-00000504)","Spawned process \"WMIC.exe\" with commandline \"wmic shadowcopy delete /nointeractive\" (UID: 00000000-00003724)","Spawned process \"cmd.exe\" with commandline \"/c \"bcdedit /set {default} recoveryenabled No\"\" (UID: 00000000-00007288)","Spawned process \"bcdedit.exe\" with commandline \"bcdedit /set {default} recoveryenabled No\" (UID: 00000000-00007584)","Spawned process \"cmd.exe\" with commandline \"/c \"bcdedit /set {default} bootstatuspolicy ignoreallfailures\"\" (UID: 00000000-00006312)","Spawned process \"bcdedit.exe\" with commandline \"bcdedit /set {default} bootstatuspolicy ignoreallfailures\" (UID: 00000000-00006256)","Spawned process \"cmd.exe\" with commandline \"/c \"vssadmin delete shadows /All /Quiet\"\" (UID: 00000000-00001752)","Spawned process \"vssadmin.exe\" with commandline \"vssadmin delete shadows /All /Quiet\" (UID: 00000000-00004364)","Spawned process \"cmd.exe\" with commandline \"/c schtasks /create /sc minute /mo 5 /tn \"Windows update00\" /tr ...\" (UID: 00000000-00006932)","Spawned process \"schtasks.exe\" with commandline \"schtasks /create /sc minute /mo 5 /tn \"Windows update00\" /tr \\\\ ...\" (UID: 00000000-00007708)","Spawned process \"cmd.exe\" with commandline \"/c schtasks /create /sc minute /mo 5 /tn \"Windows update01\" /tr ...\" (UID: 00000000-00006568)","Spawned process \"schtasks.exe\" with commandline \"schtasks /create /sc minute /mo 5 /tn \"Windows update01\" /tr \"P ...\" (UID: 00000000-00001468), Spawned process \"cmd.exe\" with commandline \"/c schtasks /delete /tn \"Windows update00\" /f\" (UID: 00000000-00006520), Spawned process \"schtasks.exe\" with commandline \"schtasks /delete /tn \"Windows update00\" /f\" (UID: 00000000-00007320), Spawned process \"cmd.exe\" with commandline \"/c schtasks /create /tn shutdown00 /tr \"shutdown -r -t 0\" /sc on ...\" (UID: 00000000-00001268), Spawned process \"schtasks.exe\" with commandline \"schtasks /create /tn shutdown00 /tr \"shutdown -r -t 0\" /sc once ...\" (UID: 00000000-00007504), Spawned process \"explorer.exe\" (UID: 00000000-00007812)"],"description_v3":[{"type":"text","value":"Spawned process \"cmd.exe\" with commandline \"/c \"wmic shadowcopy delete /nointeractive\"\""},{"type":"process","process_uid":"00000000-00000504","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"WMIC.exe\" with commandline \"wmic shadowcopy delete /nointeractive\""},{"type":"process","process_uid":"00000000-00003724","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"cmd.exe\" with commandline \"/c \"bcdedit /set {default} recoveryenabled No\"\""},{"type":"process","process_uid":"00000000-00007288","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"bcdedit.exe\" with commandline \"bcdedit /set {default} recoveryenabled No\""},{"type":"process","process_uid":"00000000-00007584","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"cmd.exe\" with commandline \"/c \"bcdedit /set {default} bootstatuspolicy ignoreallfailures\"\""},{"type":"process","process_uid":"00000000-00006312","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"bcdedit.exe\" with commandline \"bcdedit /set {default} bootstatuspolicy ignoreallfailures\""},{"type":"process","process_uid":"00000000-00006256","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"cmd.exe\" with commandline \"/c \"vssadmin delete shadows /All /Quiet\"\""},{"type":"process","process_uid":"00000000-00001752","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"vssadmin.exe\" with commandline \"vssadmin delete shadows /All /Quiet\""},{"type":"process","process_uid":"00000000-00004364","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"cmd.exe\" with commandline \"/c schtasks /create /sc minute /mo 5 /tn \"Windows update00\" /tr ...\""},{"type":"process","process_uid":"00000000-00006932","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"schtasks.exe\" with commandline \"schtasks /create /sc minute /mo 5 /tn \"Windows update00\" /tr \\\\ ...\""},{"type":"process","process_uid":"00000000-00007708","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"cmd.exe\" with commandline \"/c schtasks /create /sc minute /mo 5 /tn \"Windows update01\" /tr ...\""},{"type":"process","process_uid":"00000000-00006568","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"schtasks.exe\" with commandline \"schtasks /create /sc minute /mo 5 /tn \"Windows update01\" /tr \"P ...\""},{"type":"process","process_uid":"00000000-00001468","label":"Show Process"},{"type":"text","value":", Spawned process \"cmd.exe\" with commandline \"/c schtasks /delete /tn \"Windows update00\" /f\""},{"type":"process","process_uid":"00000000-00006520","label":"Show Process"},{"type":"text","value":", Spawned process \"schtasks.exe\" with commandline \"schtasks /delete /tn \"Windows update00\" /f\""},{"type":"process","process_uid":"00000000-00007320","label":"Show Process"},{"type":"text","value":", Spawned process \"cmd.exe\" with commandline \"/c schtasks /create /tn shutdown00 /tr \"shutdown -r -t 0\" /sc on ...\""},{"type":"process","process_uid":"00000000-00001268","label":"Show Process"},{"type":"text","value":", Spawned process \"schtasks.exe\" with commandline \"schtasks /create /tn shutdown00 /tr \"shutdown -r -t 0\" /sc once ...\""},{"type":"process","process_uid":"00000000-00007504","label":"Show Process"},{"type":"text","value":", Spawned process \"explorer.exe\""},{"type":"process","process_uid":"00000000-00007812","label":"Show Process"}],"origin":"Monitored Target","attck_id":"T1057","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1057","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"General","identifier":"target-103","type":9,"relevance":3,"name":"Spawns new processes that are not known child processes","description":"$3a","description_v2":["Spawned process \"cmd.exe\" with commandline \"/c \"wmic shadowcopy delete /nointeractive\"\" (UID: 00000000-00000504)","Spawned process \"WMIC.exe\" with commandline \"wmic shadowcopy delete /nointeractive\" (UID: 00000000-00003724)","Spawned process \"cmd.exe\" with commandline \"/c \"bcdedit /set {default} recoveryenabled No\"\" (UID: 00000000-00007288)","Spawned process \"bcdedit.exe\" with commandline \"bcdedit /set {default} recoveryenabled No\" (UID: 00000000-00007584)","Spawned process \"cmd.exe\" with commandline \"/c \"bcdedit /set {default} bootstatuspolicy ignoreallfailures\"\" (UID: 00000000-00006312)","Spawned process \"bcdedit.exe\" with commandline \"bcdedit /set {default} bootstatuspolicy ignoreallfailures\" (UID: 00000000-00006256)","Spawned process \"cmd.exe\" with commandline \"/c \"vssadmin delete shadows /All /Quiet\"\" (UID: 00000000-00001752)","Spawned process \"vssadmin.exe\" with commandline \"vssadmin delete shadows /All /Quiet\" (UID: 00000000-00004364)","Spawned process \"cmd.exe\" with commandline \"/c schtasks /create /sc minute /mo 5 /tn \"Windows update00\" /tr ...\" (UID: 00000000-00006932)","Spawned process \"schtasks.exe\" with commandline \"schtasks /create /sc minute /mo 5 /tn \"Windows update00\" /tr \\\\ ...\" (UID: 00000000-00007708)","Spawned process \"cmd.exe\" with commandline \"/c schtasks /create /sc minute /mo 5 /tn \"Windows update01\" /tr ...\" (UID: 00000000-00006568)","Spawned process \"schtasks.exe\" with commandline \"schtasks /create /sc minute /mo 5 /tn \"Windows update01\" /tr \"P ...\" (UID: 00000000-00001468), Spawned process \"cmd.exe\" with commandline \"/c schtasks /delete /tn \"Windows update00\" /f\" (UID: 00000000-00006520), Spawned process \"schtasks.exe\" with commandline \"schtasks /delete /tn \"Windows update00\" /f\" (UID: 00000000-00007320), Spawned process \"cmd.exe\" with commandline \"/c schtasks /create /tn shutdown00 /tr \"shutdown -r -t 0\" /sc on ...\" (UID: 00000000-00001268), Spawned process \"schtasks.exe\" with commandline \"schtasks /create /tn shutdown00 /tr \"shutdown -r -t 0\" /sc once ...\" (UID: 00000000-00007504), Spawned process \"explorer.exe\" (UID: 00000000-00007812)"],"description_v3":[{"type":"text","value":"Spawned process \"cmd.exe\" with commandline \"/c \"wmic shadowcopy delete /nointeractive\"\""},{"type":"process","process_uid":"00000000-00000504","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"WMIC.exe\" with commandline \"wmic shadowcopy delete /nointeractive\""},{"type":"process","process_uid":"00000000-00003724","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"cmd.exe\" with commandline \"/c \"bcdedit /set {default} recoveryenabled No\"\""},{"type":"process","process_uid":"00000000-00007288","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"bcdedit.exe\" with commandline \"bcdedit /set {default} recoveryenabled No\""},{"type":"process","process_uid":"00000000-00007584","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"cmd.exe\" with commandline \"/c \"bcdedit /set {default} bootstatuspolicy ignoreallfailures\"\""},{"type":"process","process_uid":"00000000-00006312","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"bcdedit.exe\" with commandline \"bcdedit /set {default} bootstatuspolicy ignoreallfailures\""},{"type":"process","process_uid":"00000000-00006256","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"cmd.exe\" with commandline \"/c \"vssadmin delete shadows /All /Quiet\"\""},{"type":"process","process_uid":"00000000-00001752","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"vssadmin.exe\" with commandline \"vssadmin delete shadows /All /Quiet\""},{"type":"process","process_uid":"00000000-00004364","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"cmd.exe\" with commandline \"/c schtasks /create /sc minute /mo 5 /tn \"Windows update00\" /tr ...\""},{"type":"process","process_uid":"00000000-00006932","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"schtasks.exe\" with commandline \"schtasks /create /sc minute /mo 5 /tn \"Windows update00\" /tr \\\\ ...\""},{"type":"process","process_uid":"00000000-00007708","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"cmd.exe\" with commandline \"/c schtasks /create /sc minute /mo 5 /tn \"Windows update01\" /tr ...\""},{"type":"process","process_uid":"00000000-00006568","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"schtasks.exe\" with commandline \"schtasks /create /sc minute /mo 5 /tn \"Windows update01\" /tr \"P ...\""},{"type":"process","process_uid":"00000000-00001468","label":"Show Process"},{"type":"text","value":", Spawned process \"cmd.exe\" with commandline \"/c schtasks /delete /tn \"Windows update00\" /f\""},{"type":"process","process_uid":"00000000-00006520","label":"Show Process"},{"type":"text","value":", Spawned process \"schtasks.exe\" with commandline \"schtasks /delete /tn \"Windows update00\" /f\""},{"type":"process","process_uid":"00000000-00007320","label":"Show Process"},{"type":"text","value":", Spawned process \"cmd.exe\" with commandline \"/c schtasks /create /tn shutdown00 /tr \"shutdown -r -t 0\" /sc on ...\""},{"type":"process","process_uid":"00000000-00001268","label":"Show Process"},{"type":"text","value":", Spawned process \"schtasks.exe\" with commandline \"schtasks /create /tn shutdown00 /tr \"shutdown -r -t 0\" /sc once ...\""},{"type":"process","process_uid":"00000000-00007504","label":"Show Process"},{"type":"text","value":", Spawned process \"explorer.exe\""},{"type":"process","process_uid":"00000000-00007812","label":"Show Process"}],"origin":"Monitored Target","attck_id":"T1057","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1057","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"General","identifier":"api-248","type":6,"relevance":2,"name":"Tries to open documents files","description":"\"