24:I[10321,["/_next/static/chunks/1nkjstpmp978x.js","/_next/static/chunks/0g8d-v19n010u.js","/_next/static/chunks/2xonh_kqmr__3.js","/_next/static/chunks/3spet-0yezls2.js","/_next/static/chunks/3h6zdc-it88if.js","/_next/static/chunks/2vw2j18d9u3gs.js","/_next/static/chunks/3l_wb6il5gi_h.js"],"ReportDetailWrapper"] 2e:I[27201,["/_next/static/chunks/1nkjstpmp978x.js","/_next/static/chunks/0g8d-v19n010u.js","/_next/static/chunks/2xonh_kqmr__3.js","/_next/static/chunks/3spet-0yezls2.js"],"IconMark"] 23:T511,{"@context":"https://schema.org","@type":"TechArticle","headline":"Malicious Trojan.Generic — Falcon Sandbox Report — Score 100/100 — Sample 99f0875ce316…","description":"Malicious verdict for sandbox report 5a735a607ca3…. Malware family: Trojan.Generic. Threat score 100/100. 3 malicious and 13 suspicious behavioral indicators across 31 signatures. Detonated in Windows 7 64 bit. View behavioral indicators, network activity, dropped files, and MITRE ATT\u0026CK mappings.","url":"/sample/99f0875ce316761fe9dde48b1313486ba59e257f2db08d8040bee5b07067010c/5a735a607ca3e10828337ec4","keywords":["Malicious","Trojan.Generic","sandbox report","malware analysis","MITRE ATT\u0026CK","99f0875ce316761fe9dde48b1313486ba59e257f2db08d8040bee5b07067010c"],"about":{"@type":"SoftwareApplication","name":"cr-piriform.exe","applicationCategory":"PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed","identifier":"99f0875ce316761fe9dde48b1313486ba59e257f2db08d8040bee5b07067010c","additionalType":"Malicious sample"},"threatScore":100,"malwareFamily":"Trojan.Generic","sandboxEnvironment":"Windows 7 64 bit","behavioralIndicators":{"malicious":3,"suspicious":13,"totalSignatures":31},"publisher":{"@type":"Organization","name":"Hybrid Analysis","url":"https://www.hybrid-analysis.com"}}25:T400,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26:T400,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27:Tdca8,iVBORw0KGgoAAAANSUhEUgAABEwAAAJYCAIAAAD39ORaAACAAElEQVR42uy9f4hWZ7amvZAgIiGIBEdEJIiIhIyIR0RERBwJIiIiQUREREJGgjgiIQTJSERERERCEBEJISOOx3Ecx7aNSboz3ZlMn2jbIkFExE9EJAQREQkSRMQv3+lv+qz73lXrfXeVmtfyWlx/1FP717N/mFpX7XrvRMQBpaoFC4SI/YrWaGHWLOG3qpdeEiI2ZR5rRTxS1in3lMvKtsy330Ymxip+Ja9mTp2KTMRJ5Z3M2bORsTPasSMy168LEZszY8dGJuIX5aGyTJgSmQkThIgPhHmRGTFCmDpViGFK3Mo0zuj9zPr1kYm4pLyjLMnY1Xj0SIhZis7K7uDrrwvxH/+j8J/+k3DwoGC3cNs2YeFC4Z/+SRg/Xvj3/174D/9B+Hf/ThhMjRwp/Of/LPzud4L9U/nf/1v4y1+E//N/WlBve+aMYMe1Wf31r8L33wv/8i+C7fm77wSbla1se7Y52yT//GfBpmFztmkYtis7/fo6D+Z8jW++Eepp1CdoV1Kn8WetVk/3R1qPz0TF8eMFz+zn4P+iqB6roKinU0gOkoPkIDlIDpKD5CA5FIXkUEgOkoPkIDlIDpKD5CA5SA5FITkUkoPkIDlIDpKD5CA5SA6SQ1FIDoXkIDlIDpKD5CA5SA6Sg+RQSA5FDaK2bBHideHGDaHRqd8WRoSgPfF770XGWsaHD4VJkwTvp7W/tD1HLBfmRMYbaOWnn4QPPhBOnBDsQCtWRMba+tGjIxMvK3rZTRic2JL58MPI3L8vRNxQVMzshqpOzJghXLokRJxXxPHGjYuMPRt2rUxy1q4VIj7L2J6tnfZJThJMCO24MU6wPdsTO2yYEPGHzJ07kYm4K1jbVzdnNdbX2q5+/UGSqbf9wx8E63ptz7atdZ9ffy3Y0noa1tf+6U+C9cTW5toNtjnXnfq5c0Ir2TD++EfBtrUzamUXtRHZ0lYGaKdQ+5JN0la2M7I92zNp96g2XjuF+h9OeTVoMSkKyaGQHCQHyUFykBwkB8lBciiKQnIoJAfJQXKQHCQHyUFykByKopAcCslBcpAcJAfJQXKQHCSHopAcikJykBwkB8lBcpAcJAfJoSgkh6LihDAzMj/+KNy7J6xeLVjnumePYP3llSuC7TmmC5s3C5YvFXFK2amszbz5ZmRmzxZ27hQiVmX27YuMJWhFbFXWCK9FZv9+wTxt61bB4rUirmcsT8xWNjE7dEhYtUqwrLmYFoLelN27BROkRtN/P+M6oeYZj5V4oBxT1io/KJqfNiEyNg0/o/HC3LmCNVQxV9FJWpya/yrBurHaH6wZrZdaf2lZVXUYV51FVneQtbfU3XYdp1ZmZHUwosG0yNbW27b1pWt1NWypbVvblJ1+LQy1mdRS18rD66y5ViZWU59v+c+KFpOikJy/V9t8xebm/9hDN7vqL9FxAEmPFJKD5CA5SA6Sg+QgOUgORT1PktN9znuXbtDfDjtu3v3RW+2quTKSg+QgOUgOkoPkIDlIDpJDUUNccroUgO4lp88hkoPkIDlIDpKD5CA5SA6SQ1HUbyY5zW/293Km4xubPiWnuWH9NqkwsXpX/e0Wz0FykBwkB8lBcpAcJAfJoagXXXL6M5+OH5hpfr/LDbt8O9RxV91YEzWAeqSczSxfHpkYo3gzujczc2Zkpk8XIj7OWC/unasagsW4Xb0aGcsE81PQbS9ciMy8ecL69ULEd5kJEyJj8XGffx4ZU5GI9wWdc8RXgi31q7FL0JuybJngTX/8Sfk2Y4p7+LBgAXHbtwsRK5S/KA+VlZlRoyJj5zt+vGDXOSYrqtYR3yh7hF+PlVHJiXgrM3ZsZBpytVtQiY1YJ9Stm/VqdfdZL7Xmu6belYWP/e1vQu08dafequm3A1mcmm1rB6qz11o13/Vx67tQO14r97BpmOO1Uq96kvU9qq3GTLtWr1bRc3W0YHn6tJgU9Zx+JqdPOelePLrZYfd/z9blJkgOkoPkIDlIDpKD5CA5SA5FITldvXjpb80+faY/f3hKktNxDkgOkoPkIDlIDpKD5CA5SA5FITl9/5Valx9recaSM7CUAiQHyUFykBwkB8lBcpAcJIeiXlDJqRMFuvlrtIF9kKZLb+lmDqSrITlIDpKD5CA5SA6Sg+RQFJ/J6ZBj1ipdrctItD73383LmY5zGMD/sYfqXK+8IlhEWGPpdmF2CHFQ0LitiOPKtkwjMG1zxrteb81/zAwfHhnLBHv3XcFaZPuRap36rVuRWbRIaCSV7cjcvRuZiBvKEeGlyFg3EjMU7cXtJ7uHgA0XLOTNdPHRI+HVVwWbpCekxULlcGbkyMjEFCXmZxoP4V7lw4xn+sXJzC+/ROajjwRzPL8psUV4OQQtUz67+xYt2CGcyrBG1mTDlraSnFo2rFW1bW2pZZHVkWh1i1x3+a2y5uosMjuFOuOuNiKjbvrrWdVZc0Ydelbf0FaXzlY296jtotWe66X2mNlx27glLSZF9bjktHrP8xtWx/9X6TPeD5KD5CA5SA6Sg+QgOUgORVHPn+QgAxSSg+QgOUgOkoPkIDlIDkUNEcnhdQeF5CA5SA6Sg+QgOUgOkkNRQ/PP1SgKyUFykBwkB8lBcpAcJIeikBzqRShXkc8zmzZFJmJpphE+Jplga9dGJuJYZv78yET8JMwMQbd9553IeL6W96Y3M43jagqW5WvFm8p7mWHDImPJbI30rVWK1LhxQsRGQUPtdu8WPKhNm/5jxyJjyudean28p+d9n9m3LzIN85RL13gYlmXefz8yMVdRfVq4UIhYLOgdfKxlCmC5bfUdHDNGmDhRMJvatSsylq52+7bgZlILQ93W1w5gbV/dFNa5bXUjW7vWYLp8+z1EndtWh57ZNGzPtqs6bK1e2UTULp0d15banu1hqG/Zr31Dpr6h9VPXKnut9mE731pF6ses1axK5aPFpCgkh0JykBwkB8lBcpAcJAfJoSjq2UlOTljm69/2ayQHyUFykBwkB8lBcpAciqJ4k0MhOUgOkoPkIDlIDpKD5FAUkkNRSA6Sg+QgOUgOkoPkIDkUheRQlJT3W8MUjQiLWCOMDkGT2X7dd8bazYgHgqZ+3bgh7NwpjB8v2JytGY24o0iClq+sbb1pzMcfC2YmW7cKFh8XcSszYkRkIvYociWXLYuMZb5FrM/4dbZ79IawcqUQ8ZYwIYQ4q5xWRDYsXizmCadPCxcvCvZM2mW3C7ttW2Qsim3JEsGeSQumM5eOaSHoZV+8ODI+SbWaiPuKynPdMVvTXzfBdX9pWCNbN/0mDHW3XYuKUYtZfUatrlV9vrby118LJgx23D/+Uah9qTaTOkDMrpWtbLuqb1ktDHZxBpPaV99fu+x1UFv95NSuVV5nWkyK6mXJeVwWnTyF5CA5SA6Sg+QgOUgOkkNRL5zkdLl+n3vGqZAcJAfJQXKQHCQHyUFyKIrqRcmxL+rVOn6TQnKQHCQHyUFykBwkB8mhKOo3kxxb5+/Dbr6J5CA5SA6Sg+QgOUgOkoPkUBT13EhO/QWSM2RqfqaR3GXxYioMGk4V8bGg/XRMFfwZnRGZRvN9Q3mU+eGHyHjMl0Z1LV8u3LsnNGpzphHjJrFmO3ZExkTFA8TigKIhb79qT+LnnwULW2u4pcR8ffVVZCLeVb7JWPTcq68Kd+8KETuVDYr48PTpkTEH2LxZiNiVcQ+PwxmL+PNrpQ+D6WIjqE2vpAa1Ne6vuNbs2ZFp3BQrvQt1U2jdZx2nZl1gq6yquuut++n6uHX2WquQtzqLzPZ8/rxQH7fOuKuDvGrVrHvxVsF0rWLr6jOy06+VoKaW2FYhb/UZ2Zxr6gdYLzstJkUhOXwmB8lBcpAcJAfJQXKQHCSHoqjnW3L+sWc+k4PkIDlIDpKD5CA5SA6SQ1EUf65GITlIDpKD5CA5SA6Sg+RQFPUbSU5/GoPkIDlIDpKD5CA5SA6Sg+RQFPUcS07zkzakqw39si5/7FjBOuaIH5SbyrnM0qWRWbFCWLtWiPg5c+xYZEwnLE7NEpVMJxq96T3lvDAyMt98I0ybJsTLwsuKKV8jTs20bXXmxInINALi7BRWZY4fj0zDPbT5tvw0jWL74APhwQMhYqGyLmPRc5MmCRErM8OHRyZmK/qY+X/d1KUt487uvj3tV64IdlP+8IfImB5HHM2YPlkrbpd93rzIdIifapW9Vm9b61PdE587Jwwm9ctOwXZl+Vp2RvVSm3OrSdYxbvUZGTbJOjGsbs3tWtkvLYzaEOz066V2+vafwvpAdZpcKy036qfd/tUZdmF1V7SYFNXLkkNRSA6Sg+QgOUgOkoPkIDkUheRQFJKD5CA5SA6Sg+QgORRFITkUkoPkIDlIDpKD5CA5SA5FUUgOheQgOUgOkoPkIDlIDpJDURSSQz2TGjVKiOGK9vExXjh1Soi4oljtUH5U3hJ+7fwSW7YIhw4JEYcU8wdZaj8WIy4IKjk2Dcv1itdDcPeQ9K05cyITcSJz9Wpk4rGi12rv3shY0//KK5FphJDIPbJu+84dYdYs4dEjweTKvGXVqshELFB+UtYrVnLZ586NTON2H1fWKZL5ZhfHzUSf9h9/FEzpLeTNJjlypOA3pc7msqV//GPFyZPC6dOC9cS2bd3l152rXTvbsy2tM9/ahGJ5813bRX1GZRPs52uJYSbEtrLt2c63jiazE7Rt64fBbrfNuXaeOvKunobd7tpM7ATrlW2pTcNO0Jbaw6ArUxSF5FBIDpKD5CA5SA6Sg+QgORRFITkUkoPkIDlIDpKD5CA5SA5FUUgOheQgOUgOkoPkIDlIDpJDUUgORSE5SA6Sg+QgOUgOkoPkUBSSQ1GxW/ku89ZbkYnYnLl1KzL79gkuSHFL+T5z7VpkDh4UIq4rErb2ww+RsWgyayhtzjFGsEa2YQiSJ7ZzZ2QOHxasNV+8ODIWEBexP2MBcWPGCI28uMuZCxciE7Ekc+RIZExjIpZn3n47MjFTaFycS4J6moWPxSzBYtw2bRIaPvx2ZtiwyFy/LlimX8RS5ZSgirtmjWAWt3FjZI4eFeIVxU9BsRbZOjnDVrbGzla2jrmOn6pVpO5crc2t59xq5VZJZfUk6366dgA7rh3IlpoS2PnWuW12y2zPtqtW99fOqNan+rmqL87vfy/YUtu2Tt6rV/76a6GOFiwvHS0mRSE5FJKD5CA5SA6Sg+QgOUgORVHPjeRouzKQNbvfA4XkIDlIDpKD5CA5SA6SQ1HUs5Ac+6Ltmt3vgUJykBwkB8lBcpAcJAfJoSjqfz0bw8nD7r9ZfJ9CcpAcJAfJQXKQHCQHyaEoqlckp/4CyRkiZUrgeWIjlLgtjIuM9eIR3wi256nC3btCI27LBGm1MCGEuC+8FEJcy2zeHBkPiFNPe+01Yft2IWJFxmKuTAmWLo1MxJ8yjVmdzzTC5fRqaCaYh9rNjYxNMiYLkyYJfqD4XJgWgt5fSxsbPly4cUOI+DYzbVpkTLwbT454uJu2x+WJmJkvWTLb669HZvx4Yd06wf5pNGRyq2Btbt3IGnXeVJ3rVcd8WY/Yqhm1drP2JWuCv/xSsKtRO4+15vWls1lZEl3tS2ZilmNmB7LrbLuyU7BbVieG1UbUKm3MTqF+VOxhMF+yC2vTqDW1foDrh9+wM/riC0HvLy0mRSE5SA6Sg+QgOUgOkoPkIDlIDkVRz7fk/CNOoHsdQnKQHCQHyUFykBwkB8lBciiK4k0OheQgOUgOkoPkIDlIDpJDUUjOM0lX6/6bpKshOUgOkoPkIDlIDpKD5FAU1XOSY/+Xm8Jh+P/kDJ1qREidzTQ6yKPK28rdzJtvRsZ+eB0/LlhgWsSuzMSJkfGoLk8q01m5p51VpFO3A1nj/tFHQsRPgk9D7MICxBratkdR1xoegp+R5Kdt2BCZiNOKXNh4NTJbtwoRF4QpIagRuWrOUDTFLuIdQU+wIRvLMnb3Fy4ULJfvpZcEF2DNi/PkvTgn6CQ//FCwSzdnjnDzpvDxx0IHYbBu+8wZwVauZcOWDkaB/vmfhTq4rO6Jy+6zA6ZA5h62snXbls1lPXF9RnZcE6Q6Te6//3ehdku7ZbUv1XlxZhd2gobN2agvbL1y7fB2CqdOCfao1FJnZ2Qr6z2ixaSooS05FJKD5CA5SA6Sg+QgOUgORVFIDoXkIDlIDpKD5CA5SA6SQ1EUkkMhOUgOkoPkIDlIDpKD5FAUheRQSA6Sg+QgOUgOkoPkIDkUheRQVFe1TlmoaFbVKyFYqzoqhDiV2bMnMjFRWLBA8D1ra24rr18v2E/JiFWKNO7uHnOEESOEiBsZ33a2sHKl4N6iZhKxUvklY/Fi8bqwY4cQrykeiSa5XuPGRcbvoAe1rc2MHRuZUaOEiI2KuFZDrd9V5KkzUdm/X4g4kNm5MzI2q2PHBJcNdXh3LdM2FSTPT7NUtziZ8efK8sTqlrHuXM1q6qW1EtTRZDYNMwTzh1bNd6ulNquzZ4U6x6yOFzN+/3uhjlOz61zrRJ2uVjuPGa/dUJtGHcVW3+5a+ept61y+2kzsjOq8uNoAbSnpahSF5FBIDpKD5CA5SA6Sg+QgORRFITkUkoPkIDlIDpKD5CA5SA5FUUgOheQgOUgOkoPkIDlIDpJDUUgORSE5SA6Sg+QgOUgOkoPkUBSSQ1FS1slt2yZYI+tZVdoTW4MR8Wbmxo3IxCzBpmE0Ys0+Vt7KvPtuZEwJLMZt7drIWE9sSyM+VB5kLF/rl18E05iXX47M4sWCn6DHqakBagRcw1pPKGuUtUr1bHjTP1ex406NjG3rD4Pmtm3aJNgz6T7s9/emYva4TJH8NLuD+/YJEUeUQ8qbioXaHcwMHx6ZDi1yHZhmZmKNna1sWMRhHV1V51xZvFjdbtZdvu2qzpqzlW2pTcM65lq96rtgt8zMxGilBP/tvwl79wr/5b8IFtR28qRgqmkXx06wjkSz1ML/+l8F05jaLozaWm3lOhDP5my/OyhD/GgxKaq3JedxydOqx48ft/o+heQgOUgOkoPkIDlIDpJDUdRvIzm1pfxj6ROUnMf/Wn1+s17U/awoJAfJQXKQHCQHyUFykByK4k3Os3uT0zSZYli7DZKD5CA5SA6Sg+QgOUgOkkNRL7Tk9OkSZhHFO5M+X7b0uXnhHn36SVuDQnKQHCQHyUFykBwkB8lBcigKyeksOR3fmfT3db0CktMzpZlRy5YJMVywnzgexqUr+1LPm/ou08gik9b8cVnWbbswqE159trwiobES+f66aeRaeSnWU7d+ozletmBLDDtwQPhzTeFhk2Jia1YERk7QQume/hQiLibsXbLiJeU2KOcUupMP5XJNyJjd3DMGKERLifZaxs2RMYy7t5+OzIxTtE7eOlSZCJ+zOzaFRkzMQt58960jkQzQ7B/k3Vkll07awrrJrhOZrN20zrmOiPLtj16VLA+3tpcCz0zbTNsV6ZtR44IdiC7Z9ZA27Z2XJuk7co8zSTHno0TJ4T/8T8Em7NddtuVYRenTpOzafzzPwu2Z7OL2j3sptgJ/u53gk3S9mxzLrelxaSoIfznasVffPUpDP0t7bh5Wz/p+JoIyUFykBwkB8lBcpAcJAfJoSgkp53ktPqIf39vcuq/WBukCCE5SA6Sg+QgOUgOkoPkIDkUheS0k5wBvKhp5RvdiBCSg+QgOUgOkoPkIDlIDpJDUUhOu3S1bt7VDPIzOR3dqfs/dSNdDclBcpAcJAfJQXKQHCSHopCcAUrO005X6/jKiP9PztOu+8KwyNhPHIu98p54ghI3MvfvR8YOZC3yli3C3btCw5d2C69G5o03hEZJKJZbnGeRSS1cKDx6JLz/vmBLf/hBWLJE8IszR9ETjLioWGCapI1Zp2r+cP26YJ1MQ2MWC9NDsKUqoiZmV68Kvq2d0cgQ9GqYEFownZ3+rVtCvCLs3i24Hus9MkGwXfmsNE3O23rrxmzX1rlab/o//6dQ52vZ0rpHtKX2cFjjbm2uzdmOa+drx7WkMrM429b2bI5Xu1YdtlZHhNWZYLbUNLVODLNpmBIYtitTTTvB2j0sMM3mbLOypaZtNivb1g5k96gOHrSltmc7/fLfAi0mRfW25FAUkoPkIDlIDpKD5CA5SA5FITkUheQgOUgOkoPkIDlIDkVRSA6F5CA5SA6Sg+QgOUgOkkNRFJJDITlIDpKD5CA5SA6Sg+RQFIXkUM+itFc7f16I0cKPPwq3bwumQNZfNtKo7ijHMj/9FBlvCscrcU6YHEL8IbNnT2Qi/pSxLDI7weHDBTsFT+HQ07fkrkYk2o/KfuUvioaPaZ7Y5cuCu6Wmq925I2zfLpiYRXyrrMi88kpk7FGxpn/VKuHAASHiY6G0ml8VITNyZGQiDmXsBCO2KVKmQHYl7XlevVqwZDa/kqaL1udZH29mYg2lYW1fbTX1gerWvG76TXKscbdGtu62zaYsUKsOebOV6663lhybVX3pTDVr87RJ2i+W7LLbJO2M7EqabLR6rkwn6hA/e4C//16wpfZc1RJr07CVawWyi2NLkRyKQnIoJAfJQXKQHCQHyUFykByKopAcCslBcpAcJAfJQXKQHCSHoigkh0JykBwkB8lBcpAcJAfJoSgkh6KQHCQHyUFykBwkB8lBcigKyaEoKWtzLcfs558FazenThUsquvGDcH6PEtjsqC2t94S7OfvmDGCJaTFpMi4L8WRjGnMlStCxPnMp59GxoShoQQ7Mx9/HBkzIrsLEW9lGo37CUFD7Rp9/NuZtWsjYwFxO3YIpjEepmcRcLOUqYJd54jVGVdrcwAVpEbImybgqZZ7rJkF8Wm0oAXirVwp7N8vRHyQuXkzMp41N1Y4eFDwLrCmVhHrAmsFsobSetO6v7RpmBLYnusWue6nW82qPpAtNWGwPdfmWed62ba25zoCzm6ZHde2NcerJ2nXymZVh+nZpbNd1fZoB6qfSbvddo8Mu861eNu2upQWk6J6WnIel/x29f/9RrvN9ykkB8lBcpAcJAfJQXKQHIpCcp6A5AxAOepN/rH0CUrO//9HQH19s17U/ayQHCQHyUFykBwkB8lBciiK4k3Os3uT0zSZYli7DZKD5CA5SA6Sg+QgOUgOkkNRL8qbnL9/Ye9A+nQJs4jinUmfL1v63Lxwjz4n09agkBwkB8lBcpAcJAfJQXKQHIp6ESWnaRG15HR8Z9Lf1/UKSM4zqr17hRglbN0qxMuCtX0e5BXXlFPCtMjYz8GI95TLguaJxRjBfpZZzJdZnDnAm29GxqZhZvLOO5Gx45ohNFrzxYqu7CXpataN2K4s5cxi6yLmC3rp3PE0Isy8NOJBZubMyKxfL1jWXMRdQafhF0ctznPbbFs1z5gnLFokjBghROwQzOLiUsaNN24IEyPj/47satijY61q3edZU3jmjFD3tbYr600t5suiulrpU53cZYZgs7I91weqo7pqqbPjmsXVuV512pidb50JVt/9MiLMqWPNaqkzapmsM9+MVo93K4e3M6qvlc6KFpOiXpw3Od38oVctDAPY4cD8pONrIiQHyUFykBwkB8lBcpAcJIeikJx2ktPqI/79vcmp/2JtkCKE5CA5SA6Sg+QgOUgOkoPkUBSSE0/qBU7bNzlF5EDHj+4gOUgOkoPkIDlIDpKD5CA5FIXkdCs5/X1c58l+JqejO7WaLelqSA6Sg+QgOUgOkoPkIDkUheQMRHKedrpax1dG/H9yBlcamDZ/vnD1qtAwhFWC7sr6y9deE2xl6z69g9R8LcsE86yq+ErQrnf1asGSyuz0beXXXxcsXyviu8ymTZHxfwmTQ7CaITT+Fakh6Alu3iw05OrbjKfnxcGMZb7ZHdy1S7AD/fKLcPGicO+e4A6gdmENlSnftm2RsUnacc1pI24KmoEW8U6msav3M1OmRMYubCN5T9LzOoRE1QladW9qPaLt2bpAEyRb+te/CnagOlDLelM7I9v2iy+E48cFM6LaEH7/e8ESw2p9qoXQplHbRZ0XVxuCrWzHtUtnS+3XIbWZ2OnXp1A/ZnYKtcbYnM1b7EB2NQaji7otLSZF9bTkUBSSg+QgOUgOkoPkIDlIDkUhORSF5CA5SA6Sg+QgOUgORVFIDoXkIDlIDpKD5CA5SA6SQ1EUkkMhOUgOkoPkIDlIDpKD5FAUheRQz6S8Cb6j7Mps2RIZa76tJ7ZW1bK5PvhA2LhRaLT12ozqrNasiUwjuEz62suXI2PCMGlSZExFli0TIvYIHvdxXdBgOuuYR40SLNfKNObhQ+GNNwTrtt0843DGE+FmCSYqjUdla8bvfmzPWObb8uWCLV25Uog5ihqvTzLezRw4EBmfpN4Ue+oWLIjMpUvCuXNCzFbis8yDB5GJVxXr8+q2zxq7OhPMVj57VmgVmWUtY93ItvK0OmytDhCzaZw8WWEr24FsVuZaJgz1NOo+3jD1Mm+xPdsNtWfDtq0fBtu2zkCzOduTU0fPmajYrGzPtm196WzP9pjZCZb/rGgxKQrJoZAcJAfJQXKQHCQHyUFyKIpCcigkB8lBcpAcJAfJQXKQHIqikBwKyUFykBwkB8lBcpAcJIeikByKQnKQHCQHyUFykBwkB8mhKCSHeuHLGrv79yPzzjuC9UimMR5dVcaa2XFHjIhMxKXM4cORuXBBuHlTsFNoJMKJ1dy6FRnrZKZOFSIWZYYPj4w7jzbQY8cKq1YJdiXHjRMi1il/UUQnZsyIjOlTTFFiW8b6eE/PiyOC3t/duwUzIosXs/AxC1uLmJ/Zvj0yEX8Qfn1aMvFNxvqciDWCXo3G6Vvp6cepjOXybdgg2DPpDl93Y9Zt28qmE/YE102htZvm1nVyl21rbb1N0rrPOoyrDsWqj1tTz6oWldOnBVvZPK32UrtldURYbWK1AdZXstYYU6/6HrW6KfWca+wnkF2rOmnQUDGjxaSoXpacX39OFlAUkoPkIDlIDpKD5CA5SA5FITlPsoUu+ur+FuXv2BcUkoPkIDlIDpKD5CA5SA5FITk9JDnFsHYbJAfJQXKQHCQHyUFykBwkh6KQnG4l5+/+0OfblT7fuhTr9ykw/ZlMIT+8yUFykBwkB8lBcpAcJAfJoSgkZ1CS099blI5ft/UTJKfXSlrk8+cjc+2aYI3smDFCxAFBI6QsE8wOFLEy0/CHB5m1ayNjcmU/+EyuLD7OelMLH9uzJzIR+zKLF0fmyhXB0tWsy7cz8k59rGAtkxmCrWzhYw0H+JPgiXA/KHJDLbfNzeSNihMnhEbm2wXlvYxJbJ1xZ9d53TrBUt1GjxamTRNu3BAirmXsLixZIkQszBw6FBkzkQ6tm/XEdetmoW+2q7/+VagPVHeQ1pp//32F7erMGcH2bNvWjbu15vW1qq3GdlUv/d3vhDoEzKiz5uy49e2u49Rsz3bLavWqQ89qW66nYf85q58re3JsqZlnreXlk0NR1JB/k9PRKzp+v0s/Kd4OITlIDpKD5CA5SA6Sg+QgORSF5PSQ5GR1GaQIITlIDpKD5CA5SA6Sg+QgORSF5PTWm5zHjUJykBwkB8lBcpAcJAfJQXIoivrtJae/r7uRnLaCRLoakoPkIDlIDpKD5CA5SA5FITlPV3K6/PxMn/+7m/qdDP+fnF6pRYsEb+y8Cf4lYwoUsTfTaOt3Kx9mLARszRrh6FHBGnfrIOfOFWK8ou21Z6+9psSxjEeiqVxZ1/vuu4LbhZZfSU39anTbKkijQ9AL61FsGokW8W3m7bcj43dQ9cnaD5uGJZVt3So0hHCtoLuyK2lyZfL81lvCjh2CvVx+8CAydly7oQsXCg1Puy/86vwZvc4xPQTr8yyNqnYPa/uskzOsvW4VbFXPyg5kZ2RL7RRsz9aq1nu207e+tk5Iq53HTrB2gLqtt6XW5ddXw1Y26uCyVgZYn6+tbNeqvnT1xamxE6yt1ahT7HTPtJgU1cuSQ1FIDpKD5CA5SA6Sg+QgORSF5FAUkoPkIDlIDpKD5CA5FEUhORSSg+QgOUgOkoPkIDlIDkVRSA6F5CA5SA6Sg+QgOUgOkkNRFJJDPZP66CNh507Bstc89OxlRQ3BGsoVKyJjyWxTpwq3bgkRH2du345MXVu2CDFK8Jhz6001uKyRib4x88svkYn4XLmdsdY84oigx71zRzADXLpUiPhDZsSIyER8mnn55chYjtn27YKZmPuhKtDMmYJlzUV8k7l6NTIRuzImKqa4w4YJdgpuJnp/Ta3tOscMZZzg4XKxSNDHbOJEweXKurG6za1Tv+p+2ratvcX2bKFn1lDW6Vu2Z5uVhc3Vk7SVbWnd9Ntxaz+0XdU2VQthvbRVBlrtPDYrW1o7QL1tHXrWymrqh6FUkQ7BdLWl23Olp0CLSVFIDoXkIDlIDpKD5CA5SA6SQ1EUkkMhOUgOkoPkIDlIDpKD5FAUheRQSA6Sg+QgOUgOkoPkIDkUheRQFJKD5CA5SA6Sg+QgOUgORSE51AtfEyYIJhsxTLFsrpcUbXNjtrB4sfDGG4Lt2bK5fvpJiPgsYz/4IlZnXn01Mt6aazMacUiYFhmL2/IYt/gp0zCiUxmTnPHjBW+Ctem3bfftExr6tFc5pqxQRMzsfC1bL+J8xrz0xx+F1auF5cuFeEOpY9ymCnv3CqZAETsylhfXuFYLBX02XnpJsAdpwwahES34gyK5fB0MwTo5a0brnrju41u1udYj1s239Zf2T7Re2U7fbn+tT7bU9nz2rPAv/yLYtrZyfSXPnBFqB6jz4mzb+pa1ynyrQ/zsHtmubNv6Ea390C67TbJ+gOtsvXqS584JKu20mBSF5Aym/vyvNfid1N/veIgnMg0kB8lBcpAcJAfJQXKQHIqinoXk/LlRAxOGpyc5T1BmBiw5z/7EkRwkB8lBcpAcJAfJQXIoihq45Dw963jGkvP03uQgOUgOkoPkIDlIDpKD5CA5FPXcS87fv2+vd5ovfPJq/a3TfF/U56GbM2mukPfQ51HqI3Yzk+KlFp6D5CA5SA6Sg+QgOUgOkkNRz7fk9OkPfYpHn8OOXw9Acuqvuz908+t6BSTHy/rpAweEadOEXbuEeCz4Ug0fs37aMsEWLBBcgbSvtagu23bSJCHiXOa11yIzb55gu7p4UbAssilTBEufOnZMWLlSMAewH/QRJzNvvhkZj4CbpcTmzPXrkRk3Toh4N7NuXWQanibC4Klu4wXTVLM4y8ezy370qHDypODiPVmJ48pFRTVmSgj6XNllX7ZMsN8O2A2NuJvZuDEy9uS0a92sR6ybb3soDdvVX/8qWANdz8q6fGtz6z7edMJ2df68UIuKYbuyadQXx66G7dlOwQ70t78J9WVvdVPs9Otp1KdfT8O2ra+VTaPG9lzffTMTexjqadils5X18abFpKjn9DM5/fX3dd/fdqv6D8YGIzlPZBpIDpKD5CA5SA6Sg+QgOS+K5OSfzgwZ9vjwSX1Y/8WRnCKGAclBcpAcJAfJQXKQHCQHyWHIEMn5c5e60ptvcvhMDpKD5CA5SA6Sg+QgOUgOQ4ZITrsPw3T8X9B0FJun95mc4ogUkoPkIDlIDpKD5CA5SA5Dhj0tOW0/k1Os1ipdrRt/GJjkPI10NSRHav584d13BWtGr14VIg4o25TDmcmTI2OJYYsWRca6/Ij3lI+F10OIT5R1mY8+iox52iefCBEPlT9kOkWiySk0hOErReK2VqyIzOOyTCcizmbu34/M7t2C9aIRaxW5kjNnRmb9euHKFSHiqiLqZUpQy9XWrZGJ2JL55ZfI2LaecjZX0SfWtn3rrch4BFw8Uv6S2bMnMnYX3MTqDrJVi2yNnfW1lpBmSy30zPK1vvxSMC+3lc217LgW5GW9qe3ZXMse2Tqby2b19deCzcrmXF8NO4V6krbtV18JNo06fKxVuJydQqskOtvWzrd+kGrFreW5Xmr3qL4LRvnviI99U1SPBw/0wv/uppacXrCLHpkGkoPkIDlIDpKD5CA5vSI5/E6dIcNefpPzm0sO8oDkIDlIDpKD5CA5SA6Sw5AhwyEiObweQXKQHCQHyUFykBwkB8lhyJDh8yo5FJKD5CA5SA6Sg+QgOUgOQ4YMkRyqh+vIEcH6vIcPI2O9eENy9isSxmU/j6wpnDMnMjduCBHnM599FpkYLtRKcPBgZCLuKbeVo4o0/fWBIn5RRJBOnYqMCYP1xOaWZlONe7ROOZKx48Zo4fhxIUYKFy4Iy5cLFrb2+eeC3e6YFhm7dBZ5Z6F2U6cKEasyhw9Hxp66xj36OWNXcssWwbLXhg+PTMQN5VTGjrtvX2S8y6/bPuvV6sgsawptZWu+ra+tV67T1eyMbNu6ka37Wtu2PkFb2SSn3nOtXnatavWy0zdDsG3rFDubs21ba0x92W1XdqBWx61Xrr20VvpWp1Abvq7Mx74piuABCslBcpAcJAfJQXKQnKEmOfxOnSHD5yJCmq9/86+RHCQHyUFykBwkB8lBchgyZMifq1FIDpKD5CA5SA6Sg+QgOQwZIjkUheQgOUgOkoPkIDlIDpLDkCGSQ1FSo0YJEasVzTGLP2UamVHnMmPHRibiSubAgchEnBbGhzBd0dCzEycis22bYP3l3r2RsRN89dXIzJghmNQ1OuZFygfKRmFCCBbjNiUydiUnTBAWLhQal10cYO7cyFy/LliOWeMENU9sTGQuXhTsQDFPiTsZUy+TnLt3hYidGctAmzJFaGz7syI31ELe7ML61XgpBP2HYyubEfmurAm2Xq3uPq0LtJXNPepArVZtvVF3rnXsVd251hFh9axqQ7DLbqdQY9e57sWtca9b8zqZrdV1rpPZ7FrVymfbWoifPTm11dhSc4/BhOnVmmr3SLflY98U1dPBA//0TxXPsP5vO/Qc1xA4BSQHyUFykBwkB8lBcrqVHH6nzpBh777JGbTkaDMzqHWegYT0Oezv+4M/BJKD5CA5SA6Sg+QgOUgOQ4YMn0vJqfv7/P3Cc5695DyNQyM5SA6Sg+QgOUgOkoPkMGTI8PmWnAG8A+lznT73k42oz3dBjVaqenfU53eK79fHzYteUM9BcpAcJAfJQXKQHCSHdpMhQySnleT09/5nkF+3+nO1bvb5ZP/a7fn7BFL/EWGSKBUjIvPJJ8KGDYKZie3ZzGTaNKExjbsZa4J37RIWLBAmTxYsx8ySu37+WRg9Wmjkeh3MvPZaZG7dElauFCKOKUuUDUL+D8HjhhH9OpPEihWCy4aGrVkwnTnepk2CedqIEZFp5NRtVbYo8lz57fbzFV1ctiwyJoRmYha2FnEoYwpU/1swE5s9W4iJgu35o48E/+2ANbJ1YpgtNY2pm+/apuqMLOuJrXGv22s7bh3UVpuYzapeWu/ZOvU6E8yWWgNte64T8GxXlgBoe67PqBakOgGvlg2blVGrSKvMN7uDX30l2KNSB/HVt7t8RPnYN0UN4eCBtv19l38w1uWw176P5CA5SA6Sg+QgOUjOCyQ5/E6dIUPe5NRLO2pDn3+ZVr+BabU+koPkIDlIDpKD5CA5SA6Sw5AhktOuv2/lP13utksJeWZvhJAcJAfJQXKQHCQHyUFyGDJkOGTT1Qb5WZ2OH9EZ2GdmnuBncrqcOZKD5CA5SA6Sg+QgOUgOQ4YMh8j/J6fIQOsyabrLo3SfrtbMQ2v+eVurdLUXXXJu3hSmTxdihhI3M3bnTDYs9ipivrJc+V6R2Ksff4zMsWPCO+8IbggjI2NW88EHwuXLwoMHgsmVNe6tWuSIbxSVSXUPu+yNeyiNu/0ot5vSyWklIuy99yJz+7ZgYmZdkLX1EfsypotXrwoHDwr25Ng9Ml18443I7NwpNMLWJC3Ql6qlW/aaxbh9+qlgT44l/pl4xxdfCPasnD4t1HFqrWLN6sa9TjmrI7PqWVnnarOyJ6mVidXOUxugnWB9CqYErc63Pn3bc6uMO8Ou5NdfC7Uv1U+ObVtfjcGISr1nuzh2gvUp6NPOx74pqqeDB3rsxcBz/T+lGcApIDlIDpKD5CA5SA6S87xKDr9TZ8iwd9/kPOd/MBUUkoPkIDlIDpKD5CA5SA5DhkgOkkMhOUgOkoPkIDlIDpKD5DBkiORQFJKD5CA5SA6Sg+QgOUgOQ4ZIDjWEy1K/vOsdH0J8l3k8iBo2LDIRt5TdGdv2zp3IXL8uWDbX5s2C/VjcskWwbC5rr5csiUxD205k5s+PTEMntikSmGYhb7bto0eRiZnCZ58J1iGbLnaKNbPAtAeK3KMZMyIzZ45gB1qzJjLmPD4rPcFLlwSbs4UzNS77eUXuwvnzkbFnw5ZGrMnYhTVNtVlZxJ/bhXVjdVPYppPr0FC22nPdyNZGZM133dbXIW/1nmvqkDdToNqX6lOwC2u9uJ2RHcj2XPtSnZ5Xy4adrz059RnZnu0E621bhbzZgeoHqbZWPV8+9k1RBA9QSA6Sg+QgOUgOkoPkDDXJ4XfqDBnyJodCcpAcJAfJQXKQHCQHyWHIkCGSQyE5SA6Sg+QgOUgOkoPkMGTIEMmhkBwkB8lBcpAcJAfJQXIYMkRyKKp1eRc4NTKHDgkRP2UsfSviaubkychYT2wOEHFZ+YtyNmNW88svgnX5Ee9k3n47MhGLMx9/HJlfHTBz/35kJk0SLNXNMt9GjxbOnRMirijSi9tP5+3bBbtHdkPrcCa7RwsWCLYrc7wJE4SIn4W5kbFb5k/dvMhs2iRE7M3s3RuZiRMFu90RJzMmGx9+KHSKnpOHcNasyMQ0waLYIt7L+J7tJrVqVc09bFf17bdmtI5Ts5W//FKwgDhbWp9g3XzXrWptJrYra9zrnLratayftgPZc2a9eJ3qVl92O9/vvxfqu28naAeyPdu2tQ/XS+1a2e9d7O7bPar/LdTGa7estHQ+9k1RPR08YIGtjfzWZ9wzP5H9PJsDITlIDpKD5CA5SA6S80JLDr9TZ8iwd9/kDFpy9Kd5F83wQOXkSUnOEzwWkoPkIDlIDpKD5CA5SA7tJkOGQ1NyanPo0iiQHCQHyUFykBwkB8lBcpAchgwZ/vaSY7bQpzwMzDr6fPPT3xuh/l4WFW+Q8BwkB8lBcpAcJAfJQXKQHIYMkZyBS043f9LW38dm8hdP5Gsk5wnVBGHUKKFuRi0hbfx4IWKt8qHytvKZsl45mGkks30j6CTv3RO8N9VUt9WrIxNjFe22582LzMKFwrVrQsSfMmPHRiZiWcYu+4YNkbGMu5gdgs65Q+OuwWURhzPTp0emcdnvZ8x47UE6e1aIWJGxE3z/faHO1rOWqfHfKXnMGjflnDAnhJeEZcuE/fsFu4MROzI7d0bGM/2sV2vVQVrbZ0vrts9UxC5lnSd25oxgjaw133YKdfdZB7XVfW2dRFdfHDtBm6Sdgs3ZzrcOH7Nd1dl6tVzZUqNOSLNp2IWtLa7VM1lP0gzQdmUX1vZce6lRJuDxsW+KGsLBA23NoT/PGcAbof7+TK7j95EcJAfJQXKQHCQHyUFynoDk8Dt1hgxf5Dc53fyd2FOSnOIlEpKD5CA5SA6Sg+QgOUgOksOQIZLz/EkO2QNIDpKD5CA5SA6Sg+QgOQwZIjlPJl2t+Lqbj+U88c/kFFOikBwkB8lBcpAcJAfJQXIYMkRyomPiWZepaB2zB55SuhqS8wTq7l3h128oizKd4qf2Z27ejEzE6swrr0TGd/V6CC5IciBrvhvBVm9l1q+PjBmRNd87dkRm8mTB5vzgQWQaF+e6Yha3OWO+5Kc/JTIN97CSeDGbVcO1RCZt5aNHI9NIhLshvBGCpvZZ1J5ddjvujz9GJmKbMC6EGcKlS4KJ97ZtkbEwvU6nv0n5XHg5Mha1d+KE0K7btqUW1WV9bd2a27bWi1tTaHu21C+bZC1X1rnaNGoHqLPXbFd2INuVzcp2ZQlptudaRey4tnKtBPUNrdt627b2NJtGnTVnu6pDz+q7byvbxTFMgWpfqidZPvx87Juiejp4oMcSiYfSgZAcJAfJQXKQHCQHyRnKksPv1Bky7N03ORSF5CA5SA6Sg+QgOUgOksOQIZJDUUgOkoPkIDlIDpKD5NBuMmSI5FBIDpKD5CA5SA6Sg+QgOQwZMkRyqB4uiTVrdMwLMkuWRMa6wPv3I3PypOBN/687z2hPbNlcH3wg2K6sG/FItEmKtchxNDNjRmQi7ghqFzFciQPKtcz585GJuYL14tZP79sn2Olb6lfEXwTttiPuKaJedgcnThQijimybcOWTyv7lXcFvfsjRwp+YdVL/bnStMCIhRkT4BUrhE2bBGuK7JmM8cLnnwuW6nbgQGS2bxc6NGd1j9jKiAzTmLrNrZvRus01I6rDx+qlRp3NVetE3QTb0tq1apmsI+DsltnSVtFztabWD4OdguUh1idYPwz1XTDqM7IraSvX4XLl483HvimK4AEKyUFykBwkB8lBcpCcoSY5/E6dIUPe5FBIDpKD5CA5SA6Sg+QgOQwZMkRyKCQHyUFykBwkB8lBcpAchgwZIjkUkoPkIDlIDpKD5CA5SA5DhkgORbWuGzeE+fOFiO3CrBDih8zy5ZHx7lO77dmzBWv6X31VOHxYWLlS2LNHsPy0RoDYOWVP5vbtyHhyV6wStM2NmUo8zPj56p7tWr35ZmQsm8u89M6dyNjKtmfrKBoRYRszw4dHJuL7TCM+7ppyNjNvXmQasWaysmVT3bsn/PSTEHEo05iVBKaZLkacEPQO2iTraMFDhyITsSHjsxoTQt0E102hrdwq2KpuKOsmuDYxW9kkx8yknnOtBDZJ62vrGLfBtOa2qzNnhFr5zB9qMaudx+5g/ajYLbObYmdUW1wdAVdba23arW5K/cTWCqTwsW+K6unggb/9reIZ1v9tLZ7kDge/7ROfFZKD5CA5SA6Sg+QgOUNEcvidOkOGvfsmZ9CSo43BoNZ54tb0RLZFcpAcJAfJQXKQHCQHyUFyGDJ84SSnlgH7fperITlIDpKD5CA5SA6Sg+QgOQwZMvwNJKcbgRnYOv29/On4/Y6i0s2euxQzJAfJQXKQHCQHyUFykBzaTYYMkZwWktPn1x0/OVN8Ue+5+BwOktNHzZoljBghWDhVxKeZRhTblswPP0Qm4mNBM9DmzBEePhSsSbCW0SLR7CedJYbFNEXbevMHi4CbPl2waVj0XMQ3ygcZ6woirmS2bo1MxMXMrVuRsRQ7Cx/bu1ewOTci0SQ/be3ayNhdsNttHYVF3tlxX3opMna7I94U9IzsuLbnBw8i4146NTKffiqY8H/8sWBq3bCpR5mlSyMj/yl/HB4taF1vHV1l7aa1fdYy1jpRR3XV6mXTsK7RtrVp1E1wnQlW52vVvlQnlVnT3ypArO626wS82gHsBO3i1EZkV6Oelf0nqdanUhjaRbHV2KxsqT1XtZaXZ8THvilqCAcPdP+naPVncur9dNyqEKcu9zywCSA5SA6Sg+QgOUgOkvPiSg6/U2fIkDc5g1mnvz826yg5ze83/1oEyUFykBwkB8lBcpAcJAfJYcgQyfnNJKfL73f/JmeQr5KQHCQHyUFykBwkB8lBcmg3GTJ8UdLVinSybjSjm8/kdFyn41bFp3pIV0NykBwkB8lBcpAcJAfJYciQ/0/O41psWv1/crpJV+tvkyeerobk9F2rVwuLFgneq40UGtd6vvJzxjrIjRsFC2qL+DFz7Fhkrl8XbBqTJkUm4njGVl64MDLW5VtPHHMEyzGzJjimK3FJkdg6m5WZZ+M6SxbZwYORaQSIbc28/XZkfr3/mU6BaXuFXx04sWaNcPy4YKrpB9KsOZNJexgijmbGjImMnW/jjORh2LUrMo2VJR/PtM2ejVrq7Ik1qenQQA+mRbY91z1xHZlVN9C1AtnK1qnXvbgtrWO+bOV62zowrTaxOvPNtq2T6FrdhVZSV0/SDMH2XMe41Xpca6ptaydo2375pVAbYH01DN2Wj31TVE8HD/RMdfyMzW8+KwrJQXKQHCQHyUFykJx/kxx+p86QYe++yelV4UEikBwkB8lBcpAcJAfJQXIYMmSI5FBIDpKD5CA5SA6Sg+QgOQwZIjkUheQgOUgOkoPkIDlIDpLDkCGSQ1HejZlORGxQ3s8sXx6ZmKHEckUCxDZvjowZkYdiaS8+d25kIm4Lb4QwSYnNGWs3G22uhMvZ0okTI/O4rNOnIxOxP9M4rpzR+vWRmT1bMLuIOJ959CgydiWtj792LTI2K2t7xo8XIk5mRo2KjCnuTz8Jtiu7KVeuCBGXM3b69T2KOJCpA9M2bYpMxGHh5cjY+VrYWuP+yj3yTs56tTpdrVYgaxnrcCrrPmthsAPZNGrnqVPO6rituoGulcCmYbuq8wHr822lqbXV1KJSH6h2WjvBOj+tjjWzPde+VOcB1k+7TcMujl26Wo9t2zNnMnzsm6IIHqCQHCQHyUFykBwkB8kZapLD79QZMuRNDoXkIDlIDpKD5CA5SA6Sw5AhQySHQnKQHCQHyUFykBwkB8lhyJAhkkMhOUgOkoPkIDlIDpKD5DBkiORQVPsapsRdxdxjY8ZCwKyxu3s3MjFcsB9AMVGwpvDkychYi2xLzaYa/eXujMXH2Q/radMEi1OzjjniXmbOnMhYvFgdEBfxeebddyMTcVD5NjNzZmRinmDOM3myELFOkdttd7Ax5w+Vk8q+zOLFkfnwQ8GtxjVVxPvBg8jENKWcswfiaTLbvHmRiTiSqZ024r5yLmPNWLscM1vZDKHumOvEsO+/F6w3rQ3BdmWTtBPW/tL7WjsF+zdpZ1S3yNZt19va0rrLr+dcX406a862tWtV62IZINaBVqdfZ+vZ0lpi7amr0wLt9G3O9dUonZaPfVMUwQM9W3/+1xrwtk/7EEgOkoPkIDlIDpKD5PSu5PA7dYYMe/lNzp+1+vt+f516f9s+QQ95qpIz4OMWF+RZngKSg+QgOUgOkoPkIDlIDkOGSE6Hpvwfw25a88Fs2+OSM+BtkRwkB8lBcpAcJAfJQXIYMmQ4dCSnv3c7f//iH9/p74h523pX/c223rabE+9zkn2+0crrdzzoUPQcJAfJQXKQHCQHyUFyaDcZMnxhJKfPfRZ/zGaGUE+jm237tJ0BT7K/XRXrP+P3Ub9N7dkjRFzMNFq3rcomYUpkGttKx7x9e2RGjBDiVcGEwTTGjrtkifDJJ8Lo0cLu3ULEDxk/hfGRqdtcjzV7rJTXyurChchEvJlpXOfFirTm1jFamN6BA4K5VsQHGZfYEcKwYULE9swPP0TmcZuK2JnZti0y8Yqwdatgu2o4norZ2Mh0mpVedr2/EW8runKdKPXXvwp1opS1jPWerfusQ8BaZa/VuV71nutZ1fpkF8cMoQ49q1tzm7MlANanb7OyG1on0dVL7RTqML0aU4LaH+yG2k0x6ptSn29NfUPrED9dmY99U1SPBw88g8/kdC8q3TvYwFzoCe55MGeB5CA5SA6Sg+QgOUjOcy85/E6dIcPn6E3OYPrygSnHU5KcjoaG5CA5SA6Sg+QgOUgOkoPkMGSI5DxPkjPgv9NDcpAcJAfJQXKQHCQHyUFyGDJ8cSVn8H88Vnzipe223X8KqL+9dfNJoQFIztBMV0NykBwkB8lBcpAcJId2kyHD51FyBvOZnMIHbIViw47f6eYQXf7PcLrJfOtScp7e/zWoh2rkSMHarxkzIlP3eatWRcZVRAOmIuZnGglpEtTWWPppxqYxblxkIi5n3nsvMqNGCd6bzlQ0P61xLa9lJkyITKMnXqQcV5Zl1qyJjC31WWgWmR334cPIRFxXzioWEaYOoNrmJ6hLb90S1q0TIi5kjh+PTMSfMufORSZif2bDhshcuybYI7p+vdC43d9l7tyJzKuvCp5Epw/SoUNCxB7BurG6V6sTtL7+WqhbZFNea5FtGtYjWiNre65FxUysPlDduNtx7WrUl86a77ontm1ri7NZ1elqNXUwnV3J+vRbpbrV2Xq1ENrSOh+vVs1W27a6ZboyRVE9HjzwIletQE/kr/gGcAgkB8lBcpAcJAfJQXKeA8nhd+oMGfbymxyq1WeNhuj/2RPJQXKQHCQHyUFykBwkhyFDJOeFfOeD4SA5SA6Sg+QgOUgOkoPkMGSI5FBIDpKD5CA5SA6Sg+QgOQwZMkRyqOehbgq/ek7mZcFCsewHUMwQrKG0bWOqYD+OG0ogvjR/fmQijmVmz47M6dPCyy8L1tf6GWlbb21uQwmWZux89+4VrDk5cUKIOJ3xOWvqV8QJReLU7LgmSI3cttuZn3+OjEWx1ao5ZUpkYq4SVzOWcde4+xeUFcLEEMzENBDv8mXB4wH1MfNpvBYZ06ebN4WIBZmFCyNju/JurO7V6sSwWoGs27a2r+5cbc8WL1ZPo1Vbb8etu+1aVOz066A2+zdpS+vwsTqKrVV+WqtLZ8e106+j9moDtGtlc7aVzZeM+lrVkmPYrmxWdZagLdUnh499UxTBAxSSg+QgOUgOkoPkIDlDTXL4nTpDhj0eIZ0Tmfn6N/wayUFykBwkB8lBcpAcJIchQ4b8uRqF5CA5SA6Sg+QgOUgOksOQIZJDUUgOkoPkIDlIDpKD5CA5DBkiORQlVQemWdhaxNbM669HJsYIO3YI9YEWLIhMYxqmEw+V7Rnb1vraI0eEiFUZ0xiLnrOWyQ704YeRsaWmXmYXjx4Jtu0nn0Tmxx+FxYuFq1cFy5q7ckWIeEfZpqxTfsq4eo1Q1MQePBAmThSsGdu8WYjRwvbtggfixb7M+fORmT5dsKXmlrNmRca0zWL66sd7//7IjB0reK/WqmU02agb6Dq3zZrCOtfL7MI61zqKre7Ubc61bNi/Sduz7crO137/UTffdXxcfaBWKWf2ixY7/TrUzm5K7Q926epQuzqYrjaT+obWD5JtWzutTdIOZBdW98zHvimql4MH/lwWnXxu6bkISA6Sg+QgOUgOkoPk/Jvk8Dt1hgx79k3OICWnz9Y/f1Mbzr7b46J/LvrqLufzpOQEyUFykBwkB8lBcpAcJAfJYcjwRZEc6/7zd5qL6u/36UjdrIbkIDlIDpKD5CA5SA6Sg+QwZIjk/AaS042KtFrUVnL6exHUzfe7eT3V5wVBcpAcJAfJQXKQHCQHyWHIkOHz9+dq5iG9KTlmX928bhrw1y9GDRNMCd59V9iwQbDGPeKyImZy+HBkIv6SsVbNmmDvxaeHMFt5XTBR8TS5OKDcEGZFxtVL+3hbumxZZK5fF6xxnzxZaDie5LaZTUVcygwfHpmDBwVLoovYodzLdBLgPYLG5S1dKtjDYN1XxLlM40ALM3v2ROall4SIH5U1Gbt05uFHjwpr1woRGzKNIL6NGTsFk1gT0Q5NoV0so24K68issu1rF2xVB4jZcesTrBvoWnLqa1U7nu3KplFHddkZ1cpn/lCfQitfsotjK5um1rfs668FO1A9DdvWsG3rR6XV1ahFtPxVAh/7pqghHDxQS0790qOt5HT5mZy+eqpu/9qtm7+p6/L7SA6Sg+QgOUgOkoPkDHHJ4XfqDBkO+eCBVn+lNmDJGcxncvqTn/7+LK1+w9NxfSQHyUFykBwkB8lBcpAchgwZIjlPXXK62c+A39ggOUgOkoPkIDlIDpKD5DBkyHDoR0j3VLpaf38y13yl0+qzN7zJQXKQHCQHyUFykBwkh+6TIUP+Pzm/2f8np2OKWrH+AD5oNMTL3MMSpSIuZiz2yq+s51x9l2m0jKuUTcqVzIkTkYnYkrEO8t49wXQi4g+ZixcjEzFf+NWvMvGLMCMyU6cKFuQVwwW7dJZUZktv3YqMaYyd7759whtvCHb6jX8bcoKNpRJcZksbEvtWZsmSyOzeLdiuhg2LjC39+OPITJokRFzLNE7heqaTxb2ZsaVvvRWZmKTos/Haa0LEZ0LtAHXnav2leYs10NZeW6pdnc1Vd5B1ylktSEbduRq1xdmu7PTr5C5buZ5Vran1JOv72yp578svBbOL+riGGVEd8laHy9mjUmtqLcCtYtzqpY10NYqiejZ4gKKQHCQHyUFykBwkB8kZiOTwO3WGDHv2TQ5FITlIDpKD5CA5SA6Sg+QwZIjkUBSSg+QgOUgOkoPkIDm0mwwZIjkUkoPkIDlIDpKD5CA5SA5DhgyRHKqXa5GyPXPzZmRu3xYi3s2MGBEZl43Hwvz5wrVrQsQ3ggamvf++YA1lvKZoW3/uXGQuXBC8zX01MitXCtZeu9VMEKz5tPg427bRbV/IjB8fmYjVGRPRRq1QpNv+9NPING73aeV4ZufOyNj9feUVIeYJloBn9+j+fcEvjsYD2tJTpyJjS3/5JTIzZwoRazNuNfGecl9ZkGlcyQeCNYXWbVtTaC2jdXLWE9uu6nAq61xrX6q7/Frb6vAxO1Ddi9d7tl3Z+dYWV0/DrlWrELC6jzczqU/Q7pEtra21Dj2rBbi+krVstHKtVmdUu2U5Kz72TVEED1BIDpKD5CA5SA6Sg+QMNcnhd+oMGfImh0JykBwkB8lBcpAcJAfJYciQIZJDITlIDpKD5CA5SA6Sg+QwZMgQyaGQHCQHyUFykBwkB8lBchgyRHIoqnXZj/IVKwRrCi3Xq9GLf6vsFVRyLE8s4pLydubIkch0CsXaqZzK2MqNvnZdprFnKQs9a6y8OXPjRmQsPi5iV2by5MisXy9Y5lvjuBsz69ZFJmK5clYYFRmbxsGDQsR+RWr2bMEnqVlzMUuJ25lt2yITcSJTPwxffRUZc8tjx4T6djeWblBkVibetq0JoXdy1l/aP1Fbat123ZvaynX6Vt24mxJYB2nTaBWo1SqLrJWZ1HbRqkWu/bBVH1+vbM+GHajO1rNd1ZF3dWpf7Vp18p49ZrWotJqG7cqob5kel499U1QvBw98VNbz0m83+4oXeRpIDpKD5CA5SA6Sg+Q8C8nhd+oMGfbsm5wnIjkdf7iXP/H7/WY3Ww3ALvqcJ5KD5CA5SA6Sg+QgOUgOksOQIZLTR2ff9uvu9aBeAclBcpAcJAfJQXKQHCQHyWHIEMl5MpLTX1tfiMQTlJw+91m/EeooOf1t3s33O+7n718Xc0NykBwkB8lBcpAcJAfJYciQIZLjX/T5dfdz6+/rtuu3mtJzWdb22U8cS8E6cEBYvFh4+FCIOJmxPs9izSIOZY4fj4xtO3p0ZO7eFWojev31yDQ6102KpGDZyocPR8aWWrsVU4X9+4VFi4SYKViulx3o9OnIROxRdii3MkuWRCZGKmOEN94QbBrvvhuZiCWKKYFlkYlrLV0amUZdFaaHoHv2VDcTsxGRsTzAxrMhHm4PkjVjFy8KGzcKd+4IHRo7e5Kska2jq4xWLWPd19atuS0157Glrc7IuvxWl65uzU2IbVd2CnUDfeaMYMetNca2tfO1bW3OtREZdiC7GrWX1lF7NfUjWh+3jq2rkwa//FLQO8jHvilqCAcPDExynt5ncvqzkWJX3chMl8LW9vtIDpKD5CA5SA6Sg+Q8x5LD79QZMuRNzrN8k9PRl7oUsP7+/KzLNzwd10dykBwkB8lBcpAcJAfJYciQIZLTWXIGEzzQ5ekM+I0NkoPkIDlIDpKD5CA5SA5DhgxJVxv4Z3K6P1bHzZuvdFp99oY3OUgOkoPkIDlIDpKD5DBkyHCI/39ynut0tWL9LtPVhkhZZJZdCPuxaN5y7Vpk3nlHsE7d9mzpaidOCNu3C9blL1womGtZ5xqvCDaNZcsiE3E38/77kYk5iuaYLVgQmVmzhA0bhM8+E8ymrl6NjLXX1tjUH1Z79Cgy8+cLjefeAtM0H08FyeTq1CkhYrWgN8Uy3x48ECIOKGuU9zJ2gp9/LkRsVTYq5lqmuBLy1rhWKxRRLxPvTZsEVy9rN0026ows6/Pq5rtuGeu0MftvgZlJrSL1rOrwsTqKzaZhXb5h29bKZ6dQ57bVclWfvvXi9f394x+FeuU6iq0VtS3XJtbKeOtH1E6/vr/1XdBtKYrq5eABikJykBwkB8lBcpAcJGcgksPv1Bky7Nk3ORSF5CA5SA6Sg+QgOUgOksOQIZJDUUgOkoPkIDlIDpKD5NBuMmSI5FBIDpKD5CA5SA6Sg+QgOQwZMkRyqN4t77c0Ti3iaGbfvsjEy4pvuy2ze3dkYoLQ6CC3ZIYNi8xHHwm+7ashxOLM4zYV8WFm69bIRJxQvlLEEKwZsyCviO8zHnqmF7YxyYvKp8pR5YqgIrpypWABYpa9duiQELME01R7zBqnIKffyIu7lrGQt4hjmW3bItM4kDqP+XAcUTYruzONOygmZk+suaUJcIe8KWvOrCc2I7Jtbalta72pbVuriPWXdfpWPau66a8j4Gr3MOoYtzq3rVYRO8E6xs22tUnWKWe27ddfC7Vr1T5s1LfbdlU/ZjarViJa3+468c+MyO6+7pmPfVMUwQMUkoPkIDlIDpKD5CA5Q01y+J06Q4a8yaGQHCQHyUFykBwkB8lBchgyZIjkUEgOkoPkIDlIDpKD5CA5DBkyRHIoJAfJQXKQHCQHyUFykByGDJEcimpd1gVeuRIZW3rjRmSsnz56NDLe9E+PTKP7vJexuK0PPhAi3srYrh4+jMzkyULEd4oo0KJFkdm7V1i+XLDQM6NxgnI1GkuXKdcz770XGbOa27cjc+SIcPOmsHSpYNvWyvfpp5G5f1+wlS9fjkzEDmFiCCobfnF05cal25mxu18/7Sbeo0YJjV3JI+rTUAP85Rch3hB827qfrjPQ6j6vVY6ZHdcaynpWFvlX21SdvdYqi8xOoe7j7bj1rmp9qndVn2C9ci1mtYrUx7VHxVLO6knWolI/orUCtbL0+mmvb2i5lI99U1QvBw88PlPxnPbeQ/hwSA6Sg+QgOUgOkoPk9Irk8Dt1hgx79k3OE5Gc1Da0toInLgl97rD5zSd1XCQHyUFykBwkB8lBcpAcuk+GDIea5OQuv5uO/2lbAZKD5CA5SA6Sg+QgOUgOksOQIZIzcMkp5KHRUfg3+3Sk5kuhv3/d58uiYv1WktPnfrr8fqv5IzlIDpKD5CA5SA6Sg+QwZMjwuZecPr9uu36fDlPs5zefZzH/ISs5W7ZExjKyOsSaxfaMLx0Tmf37hZMnhXhdsF2NHh2ZefOEiF3K+4pkZFkUm895WAixMWORWb5nDZezWfmBRkdm7lwhhivxMHP8eGTu3hUiVivrM2PHRibibmbnzshEfJ65ejUyly4JdoIW1HbunBDjBAuXM7W2dsvO1zLfTOrGjBEiPlN+zly8GJlOQXyiqXYHDx4U7N+R92p1X1u3ubb07NmKOsfMZmXXvV75zBmhTtCqm37rxet+2tLGahP74gvBltbttVE7T32dDbvOdWCaLbXLXhtgnVTWyh5rM6kj4GzPtfJZYFqdU2dPjm2rx+Vj3xQ1hIMHanl4qt/v8rh9NuTdyMxTOi8kB8lBcpAcJAfJQXKGiOTwO3WGDF/MNzlPW3K6kZa2f1bXdv8d94PkIDlIDpKD5CA5SA6Sw5AhQyTnyb856X6eHVPg2r6xQXKQHCQHyUFykBwkB8lhyJDhEElXe4KfdekoFYN/k9Nq/4P57BCSg+QgOUgOkoPkIDlIDkOGDJ/X/09Ox78Ba5WuVv+52mDe5HSTotbNn8m1SnsbGnVfESXwa/RKCPFeZtOmyFhr7o3dVEUzsmbNikzE0Uzjzu3P1GFrEaczJiqNPW9QpCe2n+xmNdYiv/OO8PPPQsxS1PHmzBFMCK9fF+znvu2qYWLfKDuVb5UTGQ8Qe0mJ5ZkNGyLzySdCzFU8a+52xkLeOrnH28rWjF26iIOZN9+MTIxV9JmM+JMiQrh2bWRWrRK8N7U+r05Iq7vPugu0J7j2pVqu6lkZdatqmCHYtaqj2Oo+3rDW3ISwziKz069zzOq8uFYpZ+bDttTub51FVs/KrqSdUf3k1A5vD0NtcfUdrB9v+2elS/nYN0X1cvDAM/7/1VBIDpKD5CA5SA6Sg+QMEcnhd+oMGfbsmxwkh0JykBwkB8lBcpAcJAfJYcgQyUFyKCQHyUFykBwkB8lBcmg3GTJ88SSHQnKQHCQHyUFykBwkB8lhyJAhkkM9P/XZZ0KjKbym2NI/ZKy/vH07MjFDGD5csGSjVklW1kDHeCVuZW7dikzEvcyiRZFpHPf7zLBhkYm4mrFMMBOGy5cjE7FPGBWC7vnEichEnMwcPRoZ87T3349Mw2oOZd59NzIRexR5Nsw9LCHN9LhxYZcKpnw+SdHyPXsiY3tu3O5VmZEjI2OPSsTizIIFkVm5Umj8O5qfOX06Mv5s1L1pHdVVK5A17rWZ2HHLNKoOKWetAsSsVa2dp5XV1NQGaFiLXEtOfY8sbay2mlpU6mvV6v7aXainUV8co34I62ej3nOtMWZT5Zz52DdFvZjBAxSSg+QgOUgOkoPkIDlDWXL4nTpDhrzJoZAcJAfJQXKQHCQHyUFyGDJkiORQSA6Sg+QgOUgOkoPkIDkMGTJEcigkB8lBcpAcJAfJQXKQHIYMkRyKal+jhUb3eTzz9tuRMVGxdtOC2rZujUzEWkUa6CNHIuO5bSMVTQx77bXI7NwpRKzIWOhZxIWMqdeWLYJdq8aBflQ+zNi29sN68mTBVvYr+VixRLjpkbFdjR8fGVv600+RqZXPLo7n4/ktE52wPVtzEvFdZs2ayLhLqwLZCTYMcKNiqW4iV7WoWG/m8XF6rfx3B3UDXUdI1Q5gS63btj3Xx7We2OZcd8yt4uPqPDHb85dfCl98IdSSU8tkHfJWK199grbU9lw/DLUR1Xff7lF9RrXz1Me17LVWIW+tzqg+hVpEdVd87Juiejl44PHx4wUvSLfe3//Sh//VD5KD5CA5SA6Sg+QgOf1KDr9TZ8iwZ9/kDF5ytHt5Ao4xeLXo5y+VkBwkB8lBcpAcJAfJQXKQHIYMkZxn4idPzyW63DOSg+QgOUgOkoPkIDlIDpLDkCGS01kD+nuLYt9srpbX73Mnf/96YK9o+tthcaAn9cIKyUFykBwkB8lBcpAcJIchQ4bPseQ0NabPr+vXQd3spKNodTPsZob9Hf3FrfPnhXHjhHhZsGbUssgs5itib6bRIq/OWFLZvXtCxDeZKVMiY8FlnVpzbWQ1882EobHto0yjF9+UWbUqMqaL+/ZFxg704EFk7B41ZvVOZsaMyNjKy5ZFxqZhN2Xp0sg0jvuD8kmmcY+ky1+4MDIRCzM7dkTmwAHBkujsQJMmCfG6YKdw/XpkzJYjDisXlf2KBQ9KXpz9diBeU+q8KcM6dWtGrUWu07fqSDRrGe1xb2VTrXLM6hAwO67pk3W9da6XCVKtQHagOhHOjmt7tqX1Cdo0LJnNtq39oX5UatW0pa1S++yM6tOvM/3qB7j2f4IHKOoFDh7o+A6k8JlWK3f8ftu/N+v+QE/8U0NIDpKD5CA5SA6Sg+Q895LD79QZMhzCwQPFu5H6T9F+E8npZlb9vcnhL9aQHCQHyUFykBwkB8lBchgyfKElp/tXK89McgZ8IKwGyUFykBwkB8lBcpAcJIchwxc9Xa2/v157Up/JGbzktP3UUJefAkJykBwkB8lBcpAcJAfJYciQ4ZD9/+R0ma7WZ97awD7w0+rP1Yq/RiNdrat66SUh5ioabBVxSfh1/Yy2uSNGRMa8xXKuHpdlx12yJDLxquJJVsKv/xwyEVcyphPWQNfxYjE+hFilaOhZfJCZOjUyDx8Kj9vUhx9GxiLCbGWLCGt1oIhTGTvu9OlCY1vJmosRkZk7V7AMNFv66JFgbrlrl2AuHfFpZvToyCxeLNijculSZCIOZRrnKw+DP8CW4lcLQ919Wj9de4u1m3WuV52RZZgR1TZVC0Md1VX303VimPXTtajYxbHjtsr1spVrx6tP0OZc3327KfWDVM+qxi6dLa2D6eo7aLOqo9jsuKXE8rFviurl4AGKQnKQHCQHyUFykBwkZyCSw+/UGTLs2Tc5FIXkIDlIDpKD5CA5SA6Sw5AhkkNRSA6Sg+QgOUgOkoPk0G4yZIjkUEgOkoPkIDlIDpKD5CA5DBkyRHKoXq5dmUZzJiFRdddr3eeRI8KWLYIJUr3nH36ITMS5zMmTkYnYk1m/PjITJwqNUKzbiuS2nTgRmddfF2zOM2dGJuJuxhxvzx4h4n7mtdcic/WqUF86k42Itcoe5S+ZO3ciYzJpLZMZQsTizJUrkYm4p1QP4fLlkYlxSizJ+APcIS5vm+C2/IGyPNPJLSVMz0ML7ZcF1n5Z6lfd9lmfZ9R2Uad+2dLBHLfuxc097MGqu/w6T8zmXOeY1ZM0LGzNdmXTsG3tjGozsZVre6zvgi1tdTVsGmaedp1bpfbVD3+tMbar2tINXZmPfVMUwQMUkoPkIDlIDpKD5CA5Q01y+J06Q4a8yaGQHCQHyUFykBwkB8lBchgyZIjkUEgOkoPkIDlIDpKD5CA5DBkyRHIoJAfJQXKQHCQHyUFykByGDJEcihpASUSYZaBFLMw0esT3Mp5GNUyJPykXlY3K6syGDZE5cECwWdkPvoiHGVv52LHIRCxQLgien7Y5s2lTZMziNm8WIvZmbFaffRYZuymWzdVKct57T4g4qshlHzUqMpMnC3YHLUzPtl25Uti2TWiV6rZgQWSWLRPqK+m+FJcVSaIztR45UvB/C29EZto04fJlIWKHUHeQdT9tzWjd2NUxX62o23o7hVYZaHVyl61c9+L1yiZXtQG2ip6zuDzTCZPJWurqeLH6ptTUIX61INkp1Kl99Z7t4tiB7LLXIloH09nt/vrrDB/7pqheDh74f8qij6eQHCQHyUFykBwkB8npW3L4nTpDhj37JmeQkvOv/Wrf32m0tf/2zbxyn+vjD0gOkoPkIDlIDpKD5CA5DBky7EXJ6fj9Pr9GcpAcJAfJQXKQHCQHyUFyGDJk+DxJzj++7s928BwkB8lBcpAcJAfJQXKQHIYMGSI51LOv6YK1bo3Ur5uZjz+OjHW91vQ3BOlKZvbsyDRWXpNpLN2qSFTX++9H5uxZYexYISYomjYW8ZnyoSItsqWrWTJbzBZWrRJikmJhXPFDxq7zqVNCTFXcat7K+IW1abysxCPh16uXicOZ8eMjY7t6WTl+XDDVNMX99FPh/Hnh1i3hwgXBLN2C+N56S/A7OEsw87Qn1h+zOCJYY1c7T6tWtVagWkXq3tRac2tVrTetD1TLhu3ZVralrSzOdlWbmFH38fUp1Ctr893hDlqXXyufUT85Nuf6OtdpcrZtLSr1rOrj2k2pbVlFlI99U9QQDh5o+5mcLq0GyUFykBwkB8lBcpAcJKfXJYffqTNkyJuc5jq8yUFykBwkB8lBcpAcJAfJYciQIZJDITlIDpKD5CA5SA6Sg+QwZIjkPGXJKSKhO3oR6WpIDpKD5CA5SA6Sg+QgOQwZMuwtySk+e9Onq3T5GR4E4jmoOsnKfgBZ2NqsWZGxyCwzhK1bI2M5ZjdvRmbNGsGiq3buFDwyyzPQbiuiIo3Yq5OCBcSNVOIDwVZWu5g4UYi4m7Fp2F2wn852go1/um8K+T8ijxsrzwshzmZs5atXI+NBfDorn/MoxXXxVMG1a5ExjTFrjXiQsTnv3Svs2CHEa4JfqzGRmTFDMEu3NDm/Vq8rdbdthlC3yLUwmHu0Cj374guhPpC1qrUg1buyRtb2XKdvWXtdZ6DZ0vpqWD9tk7Rd2STrpbXU1Zpa326bZH2CtYi28mE7bu3h9iOnlUy2UmuFj31TVC8HD1AUkoPkIDlIDpKD5CA5A5EcfqfOkGHPvsmhKCQHyUFykBwkB8lBcpAchgyRHIpCcpAcJAfJQXKQHCSHdpMhQySHQnKQHCQHyUFykBwkB8lhyJAhkkP1br3zjmAd5KRJwq5dwuHDQswRGs33/owtHTUqMtZBvv22EHFQuaJcy8ybFxlzD5vGli2RqQPirF59NTIRVzO28k8/RSZiT2bFisi89JLw6JHQuM6iT1OmRObkScHavMauxA9tqbX1EaszHTwtjmdMRcweHz6MjD2xdWqfHWjx4shEbBHqB3h0ZMaNE65fF+IVRTMML14UOkRm1TFf1tjVWVXWqtbCcOaMUPfTtZlYb1ovtWeljhdrNQ07hbonrj3Ntq3vYO0t1sfbUjtQnYFm06jj1OooNjvfL78U6sveKuOuVahd/ajYpbOl5U3hY98URfAAheQgOUgOkoPkIDlIzlCTHH6nzpAhb3IoJAfJQXKQHCQHyUFykByGDBkiORSSg+QgOUgOkoPkIDlIDkOGDJEcCslBcpAcJAfJQXKQHCSHIUMkh6IGUDcyH34YmYhdgkZ1rV4tLFkivPGGYBlZc+cKCxcKEVuVG8oyZXnGGvdz54SIDwWPYrMWWdzDut5VqyITs5TJwpw5gp+CJncdOyaYmEWcz5gQnjghPHggXLokLFokxEuK5uNNmxaZ3bsFM167VvYwbN8uWNrY1KnC+vXCzJnC+PHC7dtCxNGM5fJZxF/E6Yydgh0ohiv6XNmc/dmIbwXrxqzts0a2Dqf69tsK25W1fbUv2bY2yTrIq27c61a1Dh+rs7lsGkZ9RnWcmgXE2bZ2IEsAtF2ZXNnSWq5s5dpq7D+Fdq1qf7ADtXLaWrzru9BKcuoDlXefj31TVC8HDxBaQCE5SA6Sg+QgOUgOkjMQyeF36gwZ9uybnEFKzr/+lUff32n8Mci/fTOv/PehrUYhOUgOkoPkIDlIDpKD5DBkyLAXJafj9/tbh0JykBwkB8lBcpAcJAfJYciQ4XMjOf/4utiWQnKQHCQHyUFykBwkB8lhyJAhkkM921q7VrD4qYbziANYRJg1hR9/HBlbOn16ZF55Rbh5U4jYLbwcmRs3hDffFCLOKe9nPvooMjFFsDkfORIZW7p1a2Qi1isiDP5noDMiYwFiP/8sROzN/PhjZCKWZu7ejUwdEGfNmGWCNf509VLm/v3IuMaoA9jK1pxEbBD0psQ4waTOA9P8LryXmT8/MnaCJoQxQXARVae1rLmIT5R7grX1teRYm1vHfNmu6gSteqntuZ5z3V9aq2p7rrt8e0ZNNmoFqo2o1gmbc51TV8tVHR9nK9c6YdOo737teK0y0Aybhl1YW7kOD6zvgglhqye2PEE+9k1RQzh4oO1ncmqfQXKQHCQHyUFykBwkB8l5biSH36kzZMibnOY6vMlBcpAcJAfJQXKQHCQHyWHIkCGSQyE5SA6Sg+QgOUgOkoPkMGSI5DxlyekzErowFtLVkBwkB8lBcpAcJAfJQXIYMmTYu5JTfPamy0/d2P8nh/9bznNTlrgzcqRQ98T2kyLiesafhtGRsf7ygw+EGKtoi/zee5FpPHYHFe2YtRltbHtS0RSsuKNczZjkrFghrFwpWKd+4YJgk9yyRdi4UbBJ2hlZExhxRNC4PNvWXCtimyIBcX4l9RQsTM/csj6uRcB5ypn6w6NHkVm6VLDctsbd/0lQxzMPt1vmdzAWKp9nbFbejVknV3eudVJZ7R5nzgh1j1gnWVmbWyuQBSDWu7Je3B7oOk3OTsGulR3ItjUlqNWrvjh1nJpN8uuvhVo2WqlIram1etW+VJt2nZ7Xyodbna/tyi67HpePfVNULwcPUBSSg+QgOUgOkoPkIDkDkRx+p86QYc++yaEoJAfJQXKQHCQHyUFykByGDJEcikJykBwkB8lBcpAcJId2kyFDJIdCcpAcJAfJQXKQHCQHyWHIkCGSQ/Vybco0osl2Zh4+jMzy5ULEOuVE5tChyMyeXWEZaJ99FhlrN/fuFWoxiziWOXgwMo0ULElmmzUrMqZtrnzjhcY0ZM8LF0bml1+EKVOE114TLOZrxgxhxAgh4rZyWbmRaUisBMSZD1ufY1dy+PDIROxXvsscPhyZCROEU6cEW3n3bmHdOsFOf9myyNg9sla8zouL2JWxla2/ijlKLTl161Y3lLYru6N1X1svrdPGWuW22Z5rqbMD1d22La2bfpvV738vDCK5y2dVm2dtF61EpVWoXR16Vuuizdn+5dRzrg9UK30d41arl06DoiiCBygkB8lBcpAcJAfJQXKGmuTwO3WGDHmTQyE5SA6Sg+QgOUgOkoPkMGTIEMmhkBwkB8lBcpAcJAfJQXIYMmSI5FBIDpKD5CA5SA6Sg+QgOQwZIjkU1bpu3xYi/t/2zj/0572//490kiSZJEmSZJJkkp2ZpJNMJp1OknQyyUxmJjM7M7NjMpOZmZmZmZlOksvlMpc5P67T1TpdneGSJEkmSZIkSTpJ8tW1764e9/uLx8fr4/z4nI/bo9sf53Her/frx/P1cj6P2/vtcz8fKJeE51NyJr4UnstJRse+fv0i0ziuTr3DQ1DXMgfYsUOoI+B27hQ6cq1bmd27I1Onyd25E5kbN4SRI4WIOcpXyl5BI9EitinTMnZWtuznzgmecac5dWPGRKahbeszljU3dargQ39Mz9j9taQyM5PHj4XGWcl7jxyJjGn5nj2RsV01ng15+E1T/R71E/wkLUCsHuttgrQwrnpibhXFZiOyxZqdOiXUqV9lsFU7q7E920nWU359kraxnaQlpNVyZcN37aW2sLXk2AXWN9Qu0M7KjmsPoZ2G3QVbDcvorJXPMv1qE7Nzrv+k2BXZe+2KdFf82jdFdeXggX8ri0meQnKQHCQHyUFykBwk58WSw2fqtLRd9pscJIdCcpAcJAfJQXKQHCQHyaGlRXIoCslBcpAcJAfJQXKQHMZNWto3QHJ+MRjE/00I8ct//mX7ittQSA6Sg+QgOUgOkoPkIDm0tLRdRXKaPmP/3Nwmv4Q4fJ9q4kRh1iwh4lGmf//I2Ohy+7YwerRgEWHz5glXrggWt2UzYsRGRUZkC+Myu3j4UNiyRYi4JwwN4W3F0+RmZxoWd1J5qpxQHmfsZ/fTp4JF3t28Kdy/L9h4vXBhZCw+zswk4pByJGP311TEjNeeOlNrm0ZMFy21L3pG5sIFoQ49iz6KPlf2bNgFrlolROzLNC5/ibJdqAfZOgWrnonr8fr0acHeW2PjtT2jNhPXuW31EGznbFdUR3XVNlWrSH0X7HrNPFvd0HrjOkCsvt4zZwTbc33LLMTQsuZq2ajvYK1PdchbHRDX6gHW0+DXvinqDQkeMEt5obS8yjYUkoPkIDlIDpKD5CA53wPJ4TN1Wto356+rNb/bednXO0gOkoPkIDlIDpKD5CA5SA4tLe33THJe+NfVkBwkB8lBcpAcJAfJQXKQHFpa2q4rOa/4LU0hOfxODpKD5CA5SA6Sg+QgOUgOLS3t90NyXuWvq5Gu1n3S1Vw2dAq8dk3o3VsYOFA4fFhYvVqwwDQ7q759hc2bhQ8/FMxMVq6MzEcfCfZey3wzI7JYs7lzI7Nxo2BzjtnFsWOCjYgLFgjmLTZAu3tMERradi5jI4SJiqd+jQ0h3hWGhaAHaiSk3VFs6D+QsUlm8GDh+TOrLMjUOV52GnPmRCbis4w9hDFQsLVyq3Eflsg7e+p8ZLSxz2bTOvXLNrZd2WNn2NrZe+toMjuNevpsFadmG9s522nYq/WB6mC61zFPm/LrG2oHqiXWrreV49lxDTPeelev48N2ILuiVgJc+1JpNQQPUNT3KHiAopAcJAfJQXKQHCQHyemM5PCZOi1tl/0mh6KQHCQHyUFykBwkB8lBcmhpkRyKQnKQHCQHyUFykBwkh3GTlhbJoZAcJAfJQXKQHCQHyUFyaGlpkRyqK9dmQSfmiPWZixcjE7E4Y4FpPjFrClZMUOK8ckoYFBnf8+gQ4nDm/PnIHDwouNQNV2K/MCIEjUTbty8yFlwW8VAYEpny52+MGSNEL8H0yaqRNqaiotfrC6sHstg629iMt5ackSMjM22aYI/ZiBFCxE5FgvhsRvJcPn1UJk8WTIAfPBDsibXMN1uN6dMjE2OER4+EDrylnqdtCjRfsvda3JZZzdmzgg2UdfiYvVrrU53MVo/I9WrUKmInWZ+z7cpercd6u4NmU/XS2XvtLtirtYnZw2B3oVVeXKuQtxq7IsMUqL77ZjW1EdlqKPzaN0URPEAhOUgOkoPkIDlIDpLT3SSHz9Rpafkmh0JykBwkB8lBcpAcJAfJoaWlRXIoJAfJQXKQHCQHyUFykBxaWlokh0JykBwkB8lBcpAcJAfJoaVFciiqE7Ur42NuzFOsJFDr3LnI3LwpxFtKrM00jntPWaPMVrYp9wW3qWuZxnFnCKoi9vO3ERAnqzF7dmQiVijLMhbFFrEw08h8k3gxu4SHDyMzbJgQcVKYGplTpwT3Ur2EHj0iY1Fs5jwRXynvCLVrxecZG8YsTc4i/mK8ogeyqT7iy8zjx5Ex4Y/+kXnWpiKOCzbm2nBWD9/1uGnvraf8OueqjoCzu1InwtUaU59VnRhmS2fvtcWpV9Kws7LVqDeuL7BOOWt1j1ote70atT98/LHwOvZomInVmW92F+pHxU5DdZFf+6aoLh088KyEopAcJAfJQXKQHCQHyXmh5PCZOi1t1/0m51mnXvrlJv4jmEJykBwkB8lBcpAcJAfJoaWl7QqS88LvcF5NcoqWQnKQHCQHyUFykBwkB8mhpaXtPpLzsm946n9pe3jhzv/3H/LGr77Pl21MITlIDpKD5CA5SA6Sg+TQ0iI5HXjIy/65cxu/bPuXvaXVCVCdqRkzhIgbiijB9euRuXRJiDiYefo0MvbeiDnKJmFSZGxGXLcuMps3C2PHClOmCJZy5g4wUPjgA8FH1aEhDBAsncje26dPZNavFwYNEiZNEuxnd8+eQmOdr2TsNNasiUzDxG5mLDHM7q8l4Nmz4RtbyJsJsKpXQ5CuKfIg2QVaYFpMFixdbe9eIeKBovl48SSzYkVkImZlOnCeVplR5azWwUxcj9d2XKOWnHpyrbO5ageo9ckuv14NG6DrtDE7K7te27jOuGtlU3Vgmh3INraTbCU5tlb1nlulq9lNsYW1k7T32oHqK6qjBcs0OX7tm6K6evDA60lOJ76EeXVTavXvO7FPCslBcpAcJAfJQXKQnE5KDp+p09K+Cd/kvOzvqr3wi5dOGFFbyXn1E6CQHCQHyUFykBwkB8lBcmhpkZyv4QuTTstMJ77JeZWTp5AcJAfJQXKQHCQHyUFyaGmJkG7xazOv+Ts59e/q1L+T0+EJUEgOkoPkIDlIDpKD5CA5tLTdS3Je438G2vSEZuJZp9PVbOPiayLS1b6DWrZM8PFrVAhxW9mXaeSJnc6MGxeZiC8UEaRGNpdkkdmoeuiQsGmTYDrhmWCxP7NxY2Sih2BGZGu1YUNk7LgmDI2/hbkgY+9tbHxBkXA5i2Kzs7J7dOuWMGSIELFBkVQ3m1VGjxbsnCdMiEzETmVjZsGCyNgsamPezp1CxHxFwgPtv4xmj/ZnwY57+bIQcT5z9Wpk4m3B7+CIEGwKtIgwox7c64m5zgSzV+t1r2fxOlCrzsiyjwfqPDHb1aefCvbeOmytvt46McwcoFZNu6G1AtWXYAeqhcEeszpdrd6VrXP9MNiu6j3Xj5ldQh21Z6+aaeur/No3RXXp4AGKQnKQHCQHyUFykBwkpxOSw2fqtLRd95scikJykBwkB8lBcpAcJAfJoaVFcigKyUFykBwkB8lBcpAcxk1aWiSHQnKQHCQHyUFykBwkB8mhpaVFcqiuW+MEm8aGDo2MJWj17y88eSJYdJXt2d5rP9pWrRIs5cwEyVK/YooSn2UePYrM6dNCDBdMnx48ECI2Z+zy+/YVTEV86h0TQlzKWJpcxH8JvUKIR8o5Zb1idTEzZ05kLl4U7BIasiEZaO++G5levQQPW4tDyucZWw3LTzt6VGjchdWC2vK1a0LEPEGT9xYvFmbOFCJOKWczfvfrtLF6NrUxt87Iqt2jHq/NPeysWqVg2bhpp2GXUIee1Vdks3g9T5t71IN77TymbbWZmCDZadiebenqIL76JO2KapeuAwAtAc+oE/DMLWtRqZfO3munUUbP8WvfFEXwAIXkIDlIDpKD5CA5SE53kxw+U6el5ZscCslBcpAcJAfJQXKQHCSHlpYWyaGQHCQHyUFykBwkB8lBcmhpaZEcCslBcpAcJAfJQXKQHCSHlhbJoaj21Vfx4cxG5NOK1TblPeWSsi5z4UJkzp4VFi4UIp5kVq6MTMQtZb+yJ/PWW5GJ2J5pxJotV2Q0b2z8vnJNkZw6iyaLnkJjz7LOe/dG5llZts4RDzMWIGbvHTEiMo2zmpnxV8dGxuVZHWDLlshMnSqMHy8MHiy8844QMUPZqtgTK2lyjQvcKwwLQXMIt20T5s0TLJbQRzcbZG3arkc3G3NtrrVBtpUv2Z7tuPWB7FU7bi1IZShWu2wue7V2rVaZYPVK2mnY0tUSWz8MdV5cfQftil7HaevbbddrV1SrZiuZrB+kUlP5tW+K6srBA8+eTxwvh0GeQnKQHCQHyUFykBwk58WSw2fqtLRd9pucwmReRXJ+8RP826hv7UAUkoPkIDlIDpKD5CA5SA4tbXeQnBd+h4PkUEgOkoPkIDlIDpKD5CA5tLRvruToz/TI/9zcwIzlhf/e9lPsENtAcpAcJAfJQXKQHCQHyaGlRXK+Ecl54bcuZkGd++fmNznFS9S3VHfuCCY5JhvmPI0p8Hhm5MjIWMpZxA7lRmbAgMhYnpgdd+LEyFy/LtjkGvGzzNy5kbE9HzkSmfPnBYti69NHsNWwA/muYlPm0qXIeMyX3iOLgLN1PncuMvLflOeMVFTMxo6NTCNAbF7J08zTp5GJWJExJYgBijrttGmRsVt2+3ZkIu5n6sS/hiDJexcsiEzEwkzjAq9m7O57mJ6NffWoaiOjDXatRMUOZCOjHcio47bqcdNG1TNnBBtza/eoT9JOo5YrWxwb623PtrB1Tl1tgHbcWlMti6ye8u0SWjlPfZK1xdlx6/fWMml7rq+3di1bOoIHKOp7FTzwrUlOh298lX+P2CA5SA6Sg+QgOUgOktMlJIfP1Glp+Sbn65Uc/roakoPkIDlIDpKD5CA5SA4tLZLT3SSHb3WQHCQHyUFykBwkB8lBcmhpkZxvMEL6m/idnFf862pIDpKD5CA5SA6Sg+QgOUgOLS2SIybzOv8z0LaS0zZdrfjLafx1te+4GipiGWhrFAkfi8mRefJEsGfFQrHmzBEi5ivTFAnFevQoMjFFsMA0m3pnzBBmzxY2bxYaDnBVMW37PNP4o2K5XoczN29Gxhzg1q3IRMzJ2IEsi8xe3bcvMn37CkuWCHbLbOMYIly8KJw8Kdy9K/TqJZgudhRqZ7F1F5RHwnPbTPTrJ/TvL5i32J+FxlmdVOT+Pn4cGTuQO48N3zac2ScN9mqdkVXHqdWDez0E18OoDf21ttkVtRIze6+dhkWE2Yhss7jtyl61Ebn2JTvQp58K9mq95/p6W2W+1besNoRW+lQft5Yce689SHZDy8A0f7WUSX7tm6K6cvDAt1bYCJKD5CA5SA6Sg+QgOd1KcvhMnZa2y36Tg+RQSA6Sg+QgOUgOkoPkIDm0tEgOkkMhOUgOkoPkIDlIDpLDuElL+8ZLDoXkIDlIDpKD5CA5SA6SQ0tLi+RQXbi2bxdOnBCip/DZZ8KDB4IFefXsKcR4JU5kZs2KzNatQsQXGR833w6hnD4tXuzePSHioSKyEW9Fxi9Q48XcxCYosUi5puzMWHLX5cuCzUgLFwq+Vs/lJBMrlSUZe695i+XULVoUmaNHBUtm87MaGhl/VZfdosgaWv4g42FrowRLz7M0uVGjBDOTMWOE+fMFs/RG9ppqWz3H1wFiRp1FVudc2a5soVtpTKscs3oYrU/SDlQP37Ya9XHrsd4coBakevg256k1tc6Lq+2xfq+Z2McfC/Vj1uoRrR/vOqfOnsk6mM7+y1j+KePXvimK4AEKyUFykBwkB8lBcpCc7iY5fKZOS8s3ORSSg+QgOUgOkoPkIDlIDi0tLZJDITlIDpKD5CA5SA6Sg+TQ0tIiORSSg+QgOUgOkoPkIDlIDi0tkkNR7Wu0EuuVywUffhiZbduEadOEU6cESzmL2JMZPjwyMViYN09oxF6dFwaGEPsEdZ6ItYr4UiMR7svM6NGRidivHMnYOVvIm12gm6fHi+0QdK0ilgojImMTxY0bQu2WU6ZEJnopcUAR97BddSBmMStjduFJZT2Exq5mKuKWtvGGDZGxV8eNi0zDtMXhY2IIsUuolcAmVxugbUSuo8lqUalVpJaNeoCux1w7DcNGVbv8WlRqnbCJ2TAjsg947BLsuHVeXB151yohrT5Qvc52y2ofrjeuD1Q/k/Vj1mo17B7Zadir+kxSFNWVgwcW9/6fgq99Lub/loPkIDlIDpKD5CA5SE43kRw+U6el7bLf5BQm8yqS05gEvlXJsb1hUEgOkoPkIDlIDpKD5CA5tLRIzv83mRd+h/OKktNKM75RyaGQHCQHyUFykBwkB8lBcmhpkZxvUHJe+A1Phxvkf/+yr4yKf/MqR3/1g1JIDpKD5CA5SA6Sg+QgObS0SI4YyAv/ucMNXrjxy47S9ugvNK6XaRhV16lMYyhcLNggO1y4eVOIeKrczKxeHZnBg4VPPhEi7ivbhT6RaVzC6Yzpk5nYsmWCX+8Y4VlZdtx9+yKzdq1gQW22q6FDI2OBeBEXlDsZW9iYrMTFzPXrkbHjvveesGaNEHFUuadcVOZnTK4stS9ieubu3cg8eSI07oJkr5mm2sYHD0Zm4kShsedTymNF7r4tbIxU6om5VYKWbWyDey0M9UBZT5/1EGyv2rhZj7l1rFk9uNcbm3rVg3s9x9eSU+fU1RFwdZ6YXUL95Fh+WqtgulaqaTJZPyqtHn47rp2V2aNR5gHya98U1cWDB15Tcjr8xuaFOvGK3lKbVSfkp9MHpZAcJAfJQXKQHCQHySFCmpb2jfsm52V/W+x1vpypberrkhz+uhqSg+QgOUgOkoPkIDlIDi0tkhOddpVOvPEb+sbmVY5FITlIDpKD5CA5SA6Sg+TQ0r5xEdId/lbMy/66Wud+J+cVv8mpd8jv5CA5SA6Sg+QgOUgOkoPk0NJ2Z8l5nf8ZaFMJivSzryVd7YWH6ES2G39d7fVLorouXoyMDXamMUuXCl99JTSGwg8y585FZscOIeJGxszk8WPBEuGOH4/MypVCB2ai2hbxnjA1MleuCI3rvaLIOnt8XCwThkVm0SLBDmTL3ru3sG6d4CfZPzL37gnP2pRloM2fH5mIJ5nx4yMT8YmyTZmtfJXp3z8yFnm3e3dkIvYKevnHjgkeH9dPsdi6mKc8EjTEr29foV1Ul41u9bhpA6VtbCNyq2CrOhLN9myXYNRxW61C3uqVtCm/jmKzXdXe0irUrl5Je9WEwRTILt/ssY5is/faB0t1jll9zrYa9UNou6pfrbFlr8VMT5Jf+6aorhw8QFFIDpKD5CA5SA6Sg+R0RnL4TJ2Wtst+k0NRSA6Sg+QgOUgOkoPkIDm0tEgORSE5SA6Sg+QgOUgOksO4SUuL5FBIDpKD5CA5SA6Sg+QgObS0tEgO1ZVra2b27MjYj8WRIwUfGWNGxsK4GjPx/szevZEZM0bwcVOD2kw2TL127RLWrxfmzRMiTiiHla8UHWQ15WzTpsicPy/Y4P7oUWQitggWxmVGpAN0xDllZaYWlWvXIhOxK+N3cGwUWI6ZjR8xQTAvNX+YMCEykyYJ9jCYHsdbkbFn0vMAewp2U/zyx0XG/qSYapogWaZfB5OrYaNbLQw2i9tQaK/WY309X9qu7Ips6rX31q8ap08LtRLU4WO2knYJtT/U2la7Vp1FZrO4UetTfUNbnVUd41Y/KnUAYP1c2WrYBRptNKa+R/zaN0URPEAhOUgOkoPkIDlIDpLT3SSHz9Rpafkmh0JykBwkB8lBcpAcJAfJoaWlRXIoJAfJQXKQHCQHyUFykBxaWlokh0JykBwkB8lBcpAcJAfJoaVFciiqdfnoNiAyjalXjCjGhxBfZDoK45Lh+8GDyPhM3ENRFbGf7JYSFAOF+qxmzIiMn/PzkTqxapVQz8SNy1+S6dcvMqdOCXfuCI20sfnKqoz5w5MnQsRV5bFyOtPRFS1SdmeePo2M5dRNny7cvStEHFXmZmzZLSDOhu2ItZlhwyJjl//225FZvlywB9jSAu0OdhDEZ3OenbQ93/Znw8LWan+w99ZyVU+9Rp0Y1mrKt9OwSLR6rrUhuL7AOmvOTtJGZHuv3QVbdjvns2eFVnehFpVa+epno6bVw1BvXD+T9Q21da4fhjppUNeZoqiuHDzwrISikBwkB8lBcpAcJAfJebHk8Jk6LW2X/SbnWadeetmg+4uJpYPtv7ah+hW2/+ZOhkJykBwkB8lBcpAcJIdxk5a2S0vOC7/DeUXJaTsYv85Q/fUqCpKD5CA5SA6Sg+QgOUgOkkNLi+S8qif877+3b12a38O8cLOX7bnY4IXf8NRHafWlEIXkIDlIDpKD5CA5SA6SQ0uL5FS+8cLNOi05TXUpNihOhmpX9oPAlMCmwOvXhcbjdk2xifmgMidjGWg2BQ4eHJktW4QbNwQLPRs9OjJ9+ggDBwouV7qrhw8jE/0FE6RG6pdc79GjkYnYk/EAMZXJS5eEqVMFiyYbMCAydhcsLm/HDiFiRWbUqMhEHMmYW9pYH3EoM3lyZOxRaejERxl7GOxR8cA0FaT6L8vWFrd2bWTslllu24YNQiMfT3IIO0j9qgOmbGSsp8BWyWy2cT2q2nhdD7I2fNeCZL5YD/01dXJXHcZlx7XFqVejxv7kmOTYadQPQ+3DdfJe7Uv2XBn1e8097IrqXdViZu+145o9lhFw/No3RXXx4IHXlJwX/vQvhOQVveXVfyenw520OgqF5CA5SA6Sg+QgOUjOK0kOn6nT0r6Zf13ta5eczh0LyUFykBwkB8lBcpAcJAfJoaVFcr4bycm/P4PkIDlIDpKD5CA5SA6Sg+TQ0tJ+NxHSX7vkvOI+X/aLPUgOkoPkIDlIDpKD5CA5SA4t7ZsuOa/zPwPtxO/kFJu1EqeXncarmxXpaq9ZCzL+HAyKjAeXxTpBM9CWLBFsz9OmRcZmhu3bBcvmGjRIaDy7tzMmZmZT9oPPd9UvMpY1d/GiYO/t2zcyNnzXqW62GocPC/beHj0is3u3ELE+s25dZBpLJ7Lhrw4PIU4qDxVxvPqcb90SGme1WPlEkQucODEyDZvan7HViCmC5bZFvJOxk7TnykLtYpyiAXHtBrs6jMvmvHpiruOn6ows23OrsDW7BDuu7eqzzwQbzet5uo7qsvfWl1/LRn2P7L1GrROtxnp71S7fFrZe9lZxavYw2D2qHzNbq1ZLV0fA2X9Gyz8p/No3RXXl4IGuGU2MPyA5SA6Sg+QgOUgOktPVJYfP1Glpu+w3ORgOheQgOUgOkoPkIDlIDpJDS4vkfFN6g+EgOUgOkoPkIDlIDpKD5NDS0na3b3IoJAfJQXKQHCQHyUFykBxaWlokh/puamvGZrWvvhIirmROnozM+fOCZXNF3Mj4IDshMvfvCzbX2s+yzZuFiPnK7owFiFlSmZ3VgweRMQcw57H3fvhhZI4dEyLeFzSo7d13BfO0gweFmCSYPUYszNj9vX1biDin3FdmZ/bujYzdlEbK2U8zV69GxpZu/PjIRDxQ5DRWrYpMQ5DmKRsUOSu7ZY1d7VSOKasyFglmmnr6tNDBPG2v1t5i02c9MtYjsh2o1bRdD6P1PF3rkyWk1bFmtdXUeXGGCUMdmGbjde0ttU7YStZJZfXlG7bOtePZxnWIX73nWnLqu99KzOpd6SXwa98URfAAheQgOUgOkoPkIDlITneTHD5Tp6XlmxwKyUFykBwkB8lBcpAcJIeWlhbJoZAcJAfJQXKQHCQHyUFyaGlpkRwKyUFykBwkB8lBcpAcJIeWFsmhqE6UjH0+2A0MQYPLIu5kNm2KjMVe+Z7zw/0s9u0TbOOjRyNjP99iT4YAACU3SURBVBYtMssMwSfmnoId6MCByNjQP2dOZCIuCpND0Kl3yJDI3L0rRGzKNNzjcsbOubHsInUxODJz5wo25dt733knMrawMVo4d04wYWgY78FMIxFuuaCPil+ga8wlQR9guwsrVggR1xXb863Ms7JsY1srS5NrN3x/+qlQ53rZns+cqbDj2jxtg2xtU/Vp2PRp2HFbTb11GFcrQ7Dj1rrYKonO3luvRqtLsIehdrz6iuo4tVayYRtbXF59RbVp2wNcxxIaeiB+7ZuiCB6gkBwkB8lBcpAcJAfJ6W6Sw2fqtLR8k0MhOUgOkoPkIDlIDpKD5NDS0iI5FJKD5CA5SA6Sg+QgOUgOLS0tkkMhOUgOkoPkIDlIDpKD5NDSIjkU1YmS8dpmNZsC7dXZsyNjry5fHpmVK4WIe4Kmq8VbSqzLmIrYcS9ejEyMEt56S7C0sYbUPVZE2+pcL1OC3r0Fixf7/HPBFvbePeHOHcHKLtCC6RqzuKWNWZyaqEjjvWuEEZFpbPyZMDYytjgRH2UsTe6jj4S+fYWIw5nJkyMzbpwQMSvTeET3ZOy5snC5GC/Y3W+sxhLB/MGGUZsCa3+oh9E6i6ye1O00bFf2BLcSBjuuJXfVsWb1eF1noNnGZo/10tlJ1spni1NfUav0PHtybM91rFk59PviWKidvWrXayfZ6jGrH5XaW2w16odBN+bXvimK4AEKyUFykBwkB8lBcpCc7iY5fKZOS8s3ORSSg+QgOUgOkoPkIDlIDi0tLZJDITlIDpKD5CA5SA6Sg+TQ0tIiORSSg+QgOUgOkoPkIDlIDi0tkkNRrWvqVCHii0xjOHua6dkzMhHvZ3r1ikzEgYwN7hFHle2CisqNG4Ils504IUTszVy/HhmTqzoy69ixyDQW5/NMI7lrvqLpW3EkM2JEZMyI7DRsJS9dEk6fFsxqBgyIjC2OXeCwYZGJWJaZMSMy0U9orJVmoMXSjG1s2Wv26vnzkRk4UKhv6MSJkTFBevw4MhHXlP/K2E2JuKBUetzB2FcrkE2f9bhpWM5VqyAvG0btNGpReZ0pv97Y5vhaCD/5RKgTw2q5sldt+LY/hHUImLlWHYlWi4o9OeZatZfWd7+ViNZLV8tV/fC3CpezV/WJ5de+KYrgAQrJQXKQHCQHyUFykJzuJjl8pk5Lyzc5FJKD5CA5SA6Sg+QgOUgOLS0tkkMhOUgOkoPkIDlIDpKD5NDS0iI5FJKD5CA5SA6Sg+QgOUgOLS2SQ1Ht65nw4YeCjeb1yBhxPPP0aWSOHBHsvfv3R8Ylp38ImoG2dq3QOKvaLmza3ppprMYMRabeJ08iY1FdjbM6l7FXT52KjF1g4zRuZ2xy27FDMD+MuJyx07ABI2KasjAzfHhkTJ8al/9QeC4YGTUxs9bGrlZkbIKyjS1sze7vo0dC40BzMmb4Lu2TBTuQ77lO0KpHxnoKtJGxxoShHihbnWQ9QNeRWfVxW+V61cpXj/V1Ilx9CUa9q/oka7uohaGm1R20A7WSjTo/rTb8WmJr4y3vAr/2TVEED1BIDpKD5CA5SA6Sg+R0N8nhM3VaWr7JoZAcJAfJQXKQHCQHyUFyaGlpkRwKyUFykBwkB8lBcpAcJIeWlhbJoZAcJAfJQXKQHCQHyUFyaGmRHIpqXbt2CZZztXlzZA4fFurwMRtVBw+OjMWpTZgQmYi1GRtz7UebmcmWLZGJMUrMzJhORKzJ2CDbSCoTE7PVsGyuIUMEc8vGPH0sYyPEw4dC9FDUPaJ3CPGeYr60K9OIF5N1tsi7xk15pKzMuGsNV+JqxlLddu4U7Knr00eotXzr1sj40sXPMrNnR8Y0ZuRIwUP8VJCmTYtMB4lhtRJYQppFZtmcZxvXyWz15GoHqifmOrftdY5bh4/VwlD7kh3Xpu36QPVqWH6aHcg2tjvYShdr462z9errNdcqg8s6sBo7qzNnBLtAW+faeezzHntyPv44w699UxTBAxSSg+QgOUgOkoPkIDndTXL4TJ2Wlm9yKCQHyUFykBwkB8lBcpAcWlpaJIdCcpAcJAfJQXKQHCQHyaGlpUVyKCQHyUFykBwkB8lBcpAcWlokh6I6UZsyNgVa3pSFRG3YIDQm9Z3CiBA01szeu359ZG7fFkyfYmpkbFfvvRcZn9TjScZMzHa1cWNkIj7KNC5/vyLnbBvPnx+ZGKRobF3E40zjuGczddpYxL7MnDmRaazVDWV6Zs+eyJgD2MhkkmPTyKhRgiluxCcZu6KGiB5RngrjI1Mb0cCBkdm2TXBtG6t4fJw4fLtItHoYrZ2n1QBtS1mfpD1n9XHrXdVDsJ1zvTh1MpsN0IbN8fXQX69GK42x99aGYCdpp2GvGvWuaiG0P7F1yll9F+p4wFr465OsF1ZvCr/2TVEED1BIDpKD5CA5SA6Sg+R0N8nhM3VaWr7JoZAcJAfJQXKQHCQHyUFyaGlpkRwKyUFykBwkB8lBcpAcJIeWlhbJoZAcJAfJQXKQHCQHyUFyaGmRHIpqXTbJNcLWrmXGjYuMxU8NHRqZmCB89JFgx71/PzJffSWMHy/Ye3v0iMykSYIlwtlP54kTBTOiQYMqbEQ2i7OTNH2yAdLGAAvyWrFCmDlTiLiTsdWImJvxBLy+QuO9S5U9mUuXInP8uGD2aOlqlmJn2Xq2GhFfZNx5hgpr1giNwLQVGTtnS0gzh2+Y5+GM3V9bHMsSdNW0Oc8ejjq6ynSiDraqs8hapbrVZmIBYnW6Wp1FZtSRaK38sJ6nbc9mj7Wo1Fdkt6y+hFoYbOM6W6922tdxS3uA7ZztvbWo2HtbJeC1cmndM7/2TVEED1BIDpKD5CA5SA6Sg+R0N8nhM3VaWr7JoZAcJAfJQXKQHCQHyUFyaGlpkRwKyUFykBwkB8lBcpAcJIeWlhbJoZAcJAfJQXKQHCQHyUFyaGmRHIpqX1OUmJ2xaezOnchE/FR4PhZnYnfGfg7ayLhwoTB5slCflZXNl/aqBcStWydEHyXmZWxX774bmYgdyq3M4sWRsRHZRnNLk3v8WLh7V9i9W7CT9Ek9DmaOHo2MZYK5EcX6zJMnkXn6VHjWpiLezXSwzgMFN89YIGjy3lQlxgmbNgmNklS36BXCSMHUetEiwa+oDuOqM8Fs+LYZsR4363CqVnO8nXOrPDE7ydpMbI6vL9A2rs+qzuay02ilBLaxYSdpKWf1w3DqlPDjHwv1BdbhcnUkmp1Vq6y5Wq3t1VbvrR+kcmH5tW+KIniAQnKQHCQHyUFykBwkp7tJDp+p09LyTQ6F5CA5SA6Sg+QgOUgOkkNLS4vkUEgOkoPkIDlIDpKD5CA5tLS0SA6F5CA5SA6Sg+QgOUgOkkNLi+RQVCfqUaYxfW7P2Dw9erTQs6fgu9IB2n4ARZxTdmbmz4/M3LnCjBmC7cpO0sUsnirvZ44ciYydlcdtvSUcPCjEECXuCppy5kuX/0PwzNXLjtu4g8sz5njRX4kZGb8E3djyxPys9HZbEF/jJI9n7FUbbKKfoi49YEBk7IYeOhQZC8SLWJ0xbYtYlVm2LDLnzgmWjxexOLNgQWQ6GKBrFallo86qsg8eavewXEI7rqW61clddRSbvWq7snOu5/g6a84OVIeP2XHrA5m31EN/nVNXL6y9aitZp6vZgWqrqYPp6qWzV2uLs/faFbWSSXuvPcB6IH7tm6IIHqCQHCQHyUFykBwkB8npbpLDZ+q0tHyTQyE5SA6Sg+QgOUgOkoPk0NLSIjkUkoPkIDlIDpKD5CA5SA4tLS2SQyE5SA6Sg+QgOUgOkoPk0NIiORTVujqKvTqZabx6SDF/OJoZPz4y9tPqxg0h4mqmoTFyII8IcyUQjZkyJTL37gkRXyhbFRHClSsjE5MUTQyLWKesyNjCLlkSmUePBMtea+Sn3czYcGKpbnZFw4ZFZs8eIeJhxn3Ja1GmR4/ITJ8u2OXbDbXViDgtDI/MhAlCxLLMtm2RidimSDLb+fORidiXWb06MnYJ06ZFZvhwwWPcLNiqNgQboFsNsjZQWjJbrSL2XvsDbLuqR2TbuJ6J7TQsT8zeaydZS06dn1anydWZb3ZDa5uqpc6oT6POTzt9WqjlyvZsS2d3sH6Q7L21h9cBcbWH2/XaTSmfSX7tm6IIHqCQHCQHyUFykBwkB8npbpLDZ+q0tHyTQyE5SA6Sg+QgOUgOkoPk0NLSIjkUkoPkIDlIDpKD5CA5SA4tLS2SQyE5SA6Sg+QgOUgOkoPk0NIiORTVuh4/Fp7/i4xNYxaoNWaMsGaNYKKyY0dkGhPkEUHTxuync8SWjE3b5gCmT2+/LURcUfYociAzIptre/eOzOXLggWXmRGNHStYTt3+/ULE2cykSZGxs9q6NTKTJwsWmGbpebZ09qodyOzRpnzblZ2VXZE9OYsWRSZiZmbt2sgMHSpEbM404vIk1e369cj06yfY9VpQW8P/N2Usis3Lxr56gLbBzl6tFcjea9hxbWSsI+Dq4bvWiTr0rB5VaweoFajWiXol643rk7Rd2XtbCYPtyqTO1tlizeoramWP9mptcfZee8zsDtZPey3edhdsY10Nfu2boggeoJAcJAfJQXKQHCQHyeluksNn6rS0fJNDITlIDpKD5CA5SA6Sg+TQ0tIiORSSg+QgOUgOkoPkIDlIDi0tLZJDITlIDpKD5CA5SA6Sg+TQ0iI5FNWJOqA8EDS6qjHJrc7Yq2Y1+/YJ164JBw8KBw4IMVCJ88pxRbylb9/I3LwpXLkiNJxnp/KJciozc2Zk6ti6+/cjE2OV2JtZvDgyEcuVXZm5cyMT/YSGAyzNNIx3t/JlppFjJkJ461ZkHjwQvvxSsMVZsSIyEScyJ05EJnopcUF5klm/PjKjRwsWxWZLZyNTI5dPLr8RTKcxffY819OYjW5GPV/aUPjJJ0KroDbDjmvYDbZp2wZou/zaEGoTs+PWdlGbmF2RnZUN3+YPtWvV/lAH09nnPfXGtcbUUWw//7lQG299CbURffqpYI9ovey1w9tNsWdD98yvfVMUwQMUkoPkIDlIDpKD5CA53U1y+EydlpZvcigkB8lBcpAcJAfJQXKQHFpaWiSHQnKQHCQHyUFykBwkB8mhpaVFcigkB8lBcpAcJAfJQXKQHFpaJIeiWteqVYIN0I3AtC8yFrYWowSbXA8fjoz9LDNvWbAgMhGzlFuZWbMiE7FRWaxIjNuSJZFxx+sdGbsiSwzzybWnsGGDEAOE2ogibmbu3InMkCGCmeeuXZGpD2RXZAl4tquI6cLUEGKJIiZmrmWqaRlomzcL9kxaGJVdgjltvKV4qpuUebgd10LtJk4UIh4K6ktuyzac2UDZKsfMqPOmahWp3aNO0LJ52q7I3lsfyBanntRrbbPxuo5Es+Paq7XG1GvVyrXqdbaTrCW2ftV2VXvL2bNCLaK2q3phWwXTvU7Unp4GRVEED1BIDpKD5CA5SA6Sg+R0N8nhM3VaWr7JoZAcJAfJQXKQHCQHyUFyaGlpkRwKyUFykBwkB8lBcpAcJIeWlhbJoZAcJAfJQXKQHCQHyUFyaGmRHIrqRInVHD0aGRs3G8P3tMzbb0fGU7A8mkx8Kd6OzLFjgg2yEZ8p+zL2s3v/fuGjj4SIOZnevSNj+Wk29DdW46uMjQHmAI1oMsuLW5F5553IROxQVmVu346M3aMtWyJz/Lhgx43nJ5aJtRkbtyIeZ+wujBsnRFzM2DQSsT3z/vuRsSfWJre7d4WpUwVznsYdPKRIUJttPGBAZMxpbWHNS+0u+NjXZjjrwGrsNhgnTwp2R+v8tPok7UB1QFx9Ca0Wp556TerqYLo6x6x2D9vzmTOCvWr/dbOlq6PY7FU7jddRgjq4rHba+g620pgaWytbHEtXK5eOX/umKIIHKCQHyUFykBwkB8lBcrqb5HSDz8W7yrTKtxO0fJNDITlIDpKD5CA5SA6Sg+QgObRIDkUhOUgOkoPkIDlIDpKD5CA5tEgORSE5SA6Sg+QgOUgOkoPkIDm0SA715lRj+hT3uHcvMhELlWOZ+/cjY2UzQ8TlzLlzkYm+SqwUxoegpxHxU2FsZCxNzmbiiA8yjSF4c2b27MiYPtl79+yJjO2qYXGSzdU4jYvKVeWg4KIieWJXr0YmhgtTpgh+Gs+floQ/Kv0V89JhkbGYPlNr02Nb9oityl1FQ94GhaAPYa1ANtc9fSpEzBb0AmOysGyZ4MO3zYg2nJkStJry63HThkIbKFtZjb23HmTtrOqTrC+/PpDdQvtTZ8e191pAXCsDrC+h3tj2bJfwk58ItWzUz0btaXb5dS6fvVo/onVsXf2q3cHa8WytGulqFEURPEAhOUgOkoPkIDlIDpLTrSSHz9Rpafkmh0JykBwkB8lBcpAcJAfJoaWlRXIoJAfJQXKQHCQHyUFykBxaWlokh0JykBwkB8lBcpAcJAfJoaVFciiqdY0aJaxcKSxcKMydK9iYu3mzsHOnsHy5EL2FRszX9UwjyEs1Rof+pUsj0xiCJTLLnCdinXJPua7sFNQQRo4ULCHt8WNh3z7B8uIse81Wwy7BErMi5mc+/DAyEWuEEZFpqNdq5UZmx47IPJ/chcEhxIPMe+9FZtIkwUzMbNlSzmbNEkxULDwwYmlmxozITJ4s2GO2fXtkrGydFy8W/AGux75aJ2xjezgs16vOm7JB1iZXO65tbKdhY259RfWu6gy0VvFidglmNbUQ1qpZ57bVJ1nP8XYgww5Uh9rVZlKbZyvjrZWvpva0+gLr0ygfQn7tm6IIHqCQHCQHyUFykBwkB8npbpLDZ+q0tHyTQyE5SA6Sg+QgOUgOkoPk0NLSIjkUkoPkIDlIDpKD5CA5SA4tLS2SQyE5SA6Sg+QgOUgOkoPk0NIiORTVuvr1EyJWKYsyw4ZFxoK8GiFgYginTkVGHu5njayqScooRQdoO25j2j6X2bQpMhbV9fbbwvDhQsQ2oVdk1q4VLlwQIk4q85XHmSVLImOhdnbLGsv+TqZPn8g0Nj6qvK+IHzYEaV5mxYrIjB4tWLqaOd6GDUKMVmKHskA5LGismTl8xG7BQ/yeKJuEoSHEzzJr1kTGTNvi4yZOFDoYoG0mrge72i5qatloFdXVStvqK2r13nqsr92jnuPN+Ot5uj6u3VC73a0C0+yW1bl8tis7bh0BV19Cq+PWal0/ZjUmZvVZ6e3m174piuABCslBcpAcJAfJQXKQnO4mOXymTkvLNzkUkoPkIDlIDpKD5CA5SA4tLS2SQyE5SA6Sg+QgOUgOkoPk0NLSIjkUkoPkIDlIDpKD5CA5SA4tLZJDUa1r/XrB89PilPJQGB9CLFb2KhKo1cgT26isFZ7bV8JmxEYKlp5k7MnMmROZGKDE/oz9DF20SLDQs1u3ItOjh3DtmvDJJ8K0acL9+0IMUmJJpuEtS5SVGdvYHM+yizxNbkgIcVU5mzlwIDKNk1yu/EyxOzgrY9pmgnT9urBtm2C2fOOGYOfsuXwjI2NLd+SI0FicA5levSLTLuXMRkYbvlsJw9mzgo3mtS/ZQPnpp4IJQz0x18lsrfSpzl6zha2j2OrrrQ2hjher31urV60idqD6HtV6XOeY1eFy9TrXa2Unae+1PVvSYv0Al3+O+LVviiJ4gEJykBwkB8lBcpAcJKe7SQ6fqdPS8k0OheQgOUgOkoPkIDlIDpJDS0uL5FBIDpKD5CA5SA6Sg+QgObS0tEgOheQgOUgOkoPkIDlIDpJDS4vkUFT70iQrH6/VPWwoinGCD7KeRrVFma1o7FXsFJ6rS2LQIGHWLMFm4oh1iiSVTZgQmaNHhcbkOkO5nLlzJzKNsV5i6+wSIj5XjmSGDo3Mxo1CTBE2bxZs6SzUbtkyYcQIIWJuZuTIyDQuUG6Zz/ExR7GsOU1IM08bExlTEbtlMViwmxIjFLVHj/jzJ/ajzJ49kbG4vCFDImOPiuXydTBuGnW+VqvIrPrVemPDXMvOqs7XqqPJ6iAvc4Ban+rUrzrHrL4pNm3XOWa1PdrS1cl79YFscWwl6z3bFdmrZ84IrdLVDDsro35y6vtrK2nnrBfIr31TFMEDFJKD5CA5SA6Sg+QgOd1NcvhMnZaWb3IoJAfJQXKQHCQHyUFykBxaWlokh0JykBwkB8lBcpAcJAfJoaWlRXIoJAfJQXKQHCQHyUFykBxaWiSHotqXDoW3bws2yPpAqUP/unWRMSOaMUO4ckWIWKNIJljv3pGJ+FKREfngwcisWCHYpG7DqP2EXbxYMF9qTPnnlPWZc+ci03jvbcXixeYpCzI2ftieFyyIzNKlQuNAcgmXLkXGDmSvWi7f1auCPWaNMD2RunnzItOzp2DHtVS36BtCf6FhrepaYyPTt69gD/+SJULD03Zkli+PjEXAdTDl//d/C3UmWD1Q1iOyHciwkdHm2pp6jjfsiur4uDpPrBazesq3XdXDd22etZjV1ELYKoqtlqv6HtURcHZWtlZ2By23zfZc39BW+Xj2qu1KN+bXvimK4AEKyUFykBwkB8lBcpCc7iY5fKZOS8s3ORSSg+QgOUgOkoPkIDlIDi0tLZJDITlIDpKD5CA5SA6Sg+TQ0tIiORSSg+QgOUgOkoPkIDlIDi0tkkNRrevQISFin/I4Y2OfzdM3b0bGflpF3M8MGxaZixcFS6NqDJRPMuYt/fsLu3cLllS2aJEQcVQ5nVm/PjIRTzO2OBF7M/v3R+bkSeGjj4Rp04RduwRbdrO46dOF48cFv94+gs3xHuP2tqJpYyaEK1cKH34oeNrYsMhYsNOmTcK4cYLFuJnFuU7EF5m1ayMTExXd2NTLnmdT+idPhIjzGVfNespvFV1lk/rrzMR1Cla9cT1et8pts8u3A9nS1WJm12sbW/pWbZ72ai0qtTDYBdaLUweI2Rxf77nVw/DJJ4J5i73XNq7Ns/al+tU6Tc4u3+Tq448z/No3RRE8QCE5SA6Sg+QgOUgOktPdJMc+Y6YoCsmhkBwkB8lBcpAcJAfJQXIoikJyKCQHyUFykBwkB8lBcpAciqKQHArJQXKQHCQHyUFykBwkh6KQHIp6lbqSefo0MhGbMja59ughRNxVLBNsZ2bq1MgcPizcvy/YeyOOKWJijQSti5mZMyNz44ZgdeyYMHy4YON1xNKM6YS911LsLJgu4qqyR5Hhe8KEyHhwWb8QRip6y2w4MZuytXr4ULCNXZDiXsbu0alTwrOyYkpkzPHMtAcNEmKosHWrEJMVfepmzYqMJcJZeGDEfGWJolFs9RxvQ2E9BNv0WQ+U9YHMaj79VKj3XF+RDaO1AtVRbCbErZLoWmlMbWJ2GvZeO6taRGuNqW+3rXOrODVTkfqcDfMHo/bSOpmtvgu1ttXn/JOfZBgxKQrJoZAcJAfJQXKQHCQHyUFyKIpCcigkB8lBcpAcJAfJQXKQHIqikBwKyUFykBwkB8lBcpAcJIeikByKQnKQHCQHyUFykBwkB8mhKCSHeuNr4EDBB8r+IcSXmZ49IxMDhAsXhIgZGRsKLXzswAEhxijxUFmtHMpcuRIZO1DE4sxXX0XGV8OHYNGnq1cj43liwwWfmEcLnibXS7h8WfBUN1srzU+LwcK77wqNkls2alRkIi5kLMUu4n1lecalbpzg4WOqfJMnRyZiW6aR6Xc2Y/l4vXsLEQ8yDW+RjwMsiq2xkrJxB3+s6kSpVjOiTYG1TthoXg/fdcxXrTH2qs6XHRzIhm/bVSt/sOHb5uk6qcyuyC6hVj5TkdoAbc92Gva5i0aEdXCBtuf6vf/xH4KlNP7gB4JtbB9anDghWLKk7dle/dGPhB/+sMLea5/Z2PX++McZRkyKQnIoJAfJQXKQHCQHyUFykByKopAcCslBcpAcJAfJQXKQHCSHoigkh0JykBwkB8lBcpAcJAfJoSgkh6KQHCQHyUFykBwkB8lBcigKyaGo3oJNgWYIMUTRrKqGA8wVNObr6FHB0rdiRGTsp5VvPCGEWKXMzNi46ToRlzI2bZsCjR0rzJ8vmE5E/FSZLqjkxCjBRPTiRSHiuqCqaffovfeE0aOFESOEOscsYkumkVOnZ6WPWfQQbCiKYcpbwt69wrVrQmOdDwhTQ4h3lQ3KO5nFiyOzebMwb55gF2gPg73XZ0Sb1Yz//E/BZkQbZC0SrT6Q3Qbb2LCZ2HTi5z8XzD3q49qezS7MEOx6TdvMPWw16gPVI7K5h+lE/apRp7rZFdWKa5dQx+XVWXN1xl2rHLMzZwS7Xttzrce25/oSbM/mw7oxIyZFITkUkoPkIDlIDpKD5CA5SA5FUUgOheQgOUgOkoPkIDlIDpJDURSSQyE5SA6Sg+QgOUgOkoPkUBSSQ1FIDpKD5CA5SA6Sg+QgORSF5FBvfE2cKFgYV8MupN5/X+ggjUozsiIeKf+V6dEjMhGbBZuYY6NyUHlHEfXylDPNMXOL8ytapKwUBoUQ7wmqMRs2CDFSie0ZU69Dh4SYpMRtoW9k3Ez8eiVd7enTyDx5IkScz/TrFxkbt2zZV60SVq8WIr7I9OkTmYifKduU/ZmVKyNjFmfJVWZTNl/dvy+41cQ65fOMR/zZcGbTmA2F9Txdz3mG7fncOcFmU8OGb9uVqUh9RSYq9l7buD5QHQFXJ8KVQ3C7sd6wk3wdf6ij9ur7a7uytbKNbTUMe68dt1ZNW1hbHMOC6er3trI4vSJGTIpCcigkB8lBcpAcJAfJQXKQHIqikBwKyUFykBwkB8lBcpAcJIeiKCSHQnKQHCQHyUFykBwkB8mhKCSHopAcJAfJQXKQHCQHyUFyKArJod74MlGJnoqO1/HcgjJxQtmjXFZ2K08zHramQW0Wa+YZWWYmsSAze3ZkGiXZa76rcYploGnql4fLWcqZZc3pSUZ8Jfh79yufKwsVW/ZDyvuKzOIjR0bGBgw7KxPgQYOEqVMFO+6AAVGwaZNw65Zg+XiNC9RUN18c8eFFiyLT8KXzini4GUHElxm31rif6d8/Mj5f2lBYR2YZNl/ae+1ANjHbrurxup7j7bi15JinWdjaD34g/OhHgj2FFgF34oRge7acuh//WLCN7fLtVfNjw07SQt5sV3X2mq1V7S22sS2OfTpiC3v4sGDnbLfboudsYeuHoZac+gLrrDnbld1BXVhGTIpCcigkB8lBcpAcJAfJQXKQHIqikBwKyUFykBwkB8lBcpAcJIeiKCSHQnKQHCQHyUFykBwkB8mhKCSHopAcJAfJQXKQHCQHyUFyKArJoahYkvG4Lc8T26ScVvYq95U5mc2bI9PIIrM9S0KaDXIRNxQ5rs/EpiJxUpEIOJcrUyDN5nIj0vw0i62z67WJohEfZ5O6BrXFPmWnIjZl99cWx/LTop8yTIn5mWvXIrNrl3D8eIVlvvlK6lpt2ybE20psEJ4rRML0yRzPVsNU5PJl4fFjwf5oPHgQmYgjGZu+OkgMq1WkVbxYLTlGHU1WY7OpTduffy6YA9jGNjHbPG0ibkFtNl7bcW1jswvDFtZ2VXupLU5tra1uaL2wdfKeeYuts6mXrbMJob1qbmlnZZdvJ2nL/sMfCv/8z8K//7tgPmxSZx+k6SUwYlIUkkMhOUgOkoPkIDlIDpKD5FBU96xnEb8EyaGQHCQHyUFykBwkB8lBcigKyUFyKCQHyUFykBwkB8lBcpAcikJyKArJQXKQHCQHyUFykBwkh6KQHIp608t+WH93tUNpVaaL+tp9oa5GNJnUypVCR+89lVmxIjLRQ7D3uj2a1ahM1ufsx50ktHtvm7Vqt87DQ7D6278VfvVXhcGDhW+tRo0SLC9v4kRh/Hjh139dmDZNsPeOHStMmiT81m8JtvGv/ZpgpzF3rrB8uWDKa4l4W7cKdo+2bBHsMxvb81//tWDvtQPt3CnYe//u74QPPxQ++KDij/5I+Iu/EP70T4U/+RPhz/+8BatXC7//+4L9V+b3fk9Ytkz43d8V1q8X1qwR/uAPBPvjbRv/4R9mushw+W8U9aYWwypFITlIDpKD5CA5SE63lZxIn6LT0r45LUVRSA6Sg+QgOUgOkoPk0NIiORSF5CA5SA6Sg+QgOUgOkkNLi+RQFJKD5CA5SA6Sg+QgOUgOLS2SQ31vqxwKT56MTGMoXJGx996+HRmPU4tVmQ4GyqnC0qWCvXfevMjYD/oePQR7761bkdm9W2hcgpQlV9VV76pRljV3T7ml2Ma3levKXeWhYu89q2xVbONpykVFA/H0/jZ2VTIghPhAqcqejUbEn5YGtXVU1xS7fAmmiz/7M8HGPhvONm4U/uqvBJsg7U+sPXY2uNu0bUlWf//3wj/8g/A3fyPYWf3lXwqthMHc44//WHj3XeF3fkf4lV8RevcWfvu3hZkzhX/5F+HAAcHSA/fsEezVHTsEW7p//Vfhn/5J+Md/FExyLGpw/35h717B/nNmF2iv2knaadj12nFNn8x4f+M3hN/8TcEU1zaePl0weV6wQLBLMEFS+LVviiJ4gEJykBwkB8lBcpAcJKe7SQ6fqdN2p/bZ8+nm//gOWySHQnKQHCQHyUFykBwkB8mhpUVyKArJQXKQHCQHyUFykBwkh5YWyaEoJAfJQXKQHCQHyUFykBxaJAfJod6EuqrsVRYpdxSben9WQlHUi8pGLhtkLW7LkrvMeUwntm8XbKynKOoXxW9mUxRFITlIDkUhORT1ZknO63yYvbj3//wSJIeiKArJoSgkB8mhKCQHyaEoikJyKArJQXIoCsmhKIqikByKQnIoCslBciiKorpT/T/vkNtdE5x4egAAAABJRU5ErkJggg==28:T79c,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29:T79c,PGNsaWVudHRva2VuPjx0b2tlbj48bmFtZT5DbGllbnRFdmVudDwvbmFtZT48dHlwZT5FdmVudFR5cGU8L3R5cGU+PHZhbHVlPjB4MDAwMDAwMTM8L3ZhbHVlPjwvdG9rZW4+PHRva2VuPjxuYW1lPkFETUlOOkZpcnN0VmFsaWRhdGlvbjwvbmFtZT48dHlwZT5JbmZvPC90eXBlPjx2YWx1ZT4wPC92YWx1ZT48L3Rva2VuPjx0b2tlbj48bmFtZT5BRE1JTjpNYWNoaW5lSWQ8L25hbWU+PHR5cGU+SW5mbzwvdHlwZT48dmFsdWU+SkovZzNNN0svaElnTnJWRm1ZQ1NwUjFEK1VOZWs4bEtqQ3VqSklvTGRmST08L3ZhbHVlPjwvdG9rZW4+PHRva2VuPjxuYW1lPkFETUlOOk51bWJlclRpbWVzTm9uR2VudWluZTwvbmFtZT48dHlwZT5JbmZvPC90eXBlPjx2YWx1ZT4wPC92YWx1ZT48L3Rva2VuPjx0b2tlbj48bmFtZT5BRE1JTjpSZW1haW5pbmdSZWFybUNvdW50PC9uYW1lPjx0eXBlPkluZm88L3R5cGU+PHZhbHVlPjM8L3ZhbHVlPjwvdG9rZW4+PHRva2VuPjxuYW1lPkFETUlOOlRpbWVOb25HZW51aW5lPC9uYW1lPjx0eXBlPkluZm88L3R5cGU+PHZhbHVlPjA8L3ZhbHVlPjwvdG9rZW4+PHRva2VuPjxuYW1lPkFETUlOOlRvdGFsVmFsaWRhdGlvbnM8L25hbWU+PHR5cGU+SW5mbzwvdHlwZT48dmFsdWU+MTwvdmFsdWU+PC90b2tlbj48dG9rZW4+PG5hbWU+QURNSU46VUdVSUQ8L25hbWU+PHR5cGU+SW5mbzwvdHlwZT48dmFsdWU+NGMwZDMzNDYtZjA2Mi00MzRhLTk1ZDUtMzNhMjhjZGM1OGQ0PC92YWx1ZT48L3Rva2VuPjx0b2tlbj48bmFtZT5BVU9wdGlvbnNMb2NhbDwvbmFtZT48dHlwZT5JbmZvPC90eXBlPjx2YWx1ZT40PC92YWx1ZT48L3Rva2VuPjx0b2tlbj48bmFtZT5BY3RpdmVQYXJ0aWFsUHJvZHVjdEtleTwvbmFtZT48dHlwZT5JbmZvPC90eXBlPjx2YWx1ZT5EN1AtWFFKSjItR1BERDQ8L3ZhbHVlPjwvdG9rZW4+PHRva2VuPjxuYW1lPkFjdGl2ZVByb2R1Y3RLZXlDaGFubmVsPC9uYW1lPjx0eXBlPkluZm88L3R5cGU+PHZhbHVlPlZvbHVtZTpHVkxLPC92YWx1ZT48L3Rva2VuPjx0b2tlbj48bmFtZT5BY3RpdmVQcm9kdWN0S2V5UGlkRXg8L25hbWU+PHR5cGU+SW5mbzwvdHlwZT48dmFsdWU+MDAzNzEtMDAxNzAtODY4LTAwMDAwMC0wMy0xMDMzLTc2MDEuMDAwMC0zMzgyMDE3PC92YWx1ZT48L3Rva2VuPjx0b2tlbj48bmFtZT5BcHBsaWNhdGlvbklkPC9uYW1lPjx0eXBlPkluZm88L3R5cGU+PHZhbHVlPjU1YzkyNzM0LWQ2ODItNGQ3MS05ODNlLWQ2ZWMzZjE2MDU5ZjwvdmFsdWU+PC90b2tlbj48dG9rZW4+PG5hbWU+Q29kZVNpZ25pbmc8L25hbWU+PHR5cGU+SW5mbzwvdHlwZT48dmFsdWU+U0lHTkVEX0lORk9fUFJTX1NJR05FRDwvdmFsdWU+PC90b2tlbj48dG9rZW4+PG5hbWU+RG9tYWluSm9pbmVkPC9uYW1lPjx0eXBlPkluZm88L3R5cGU+PHZhbHVlPmZhbHNlPC92YWx1ZT48L3Rva2VuPjx0b2tlbj48bmFtZT5FZGl0aW9uSWQ8L25hbWU+PHR5cGU+SW5mbzw=2a:T79c,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2b:T79c,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2c:T79c,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2d:T79c,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1b:["$","$L2",null,{"children":[["$","script",null,{"type":"application/ld+json","dangerouslySetInnerHTML":{"__html":"$23"}}],["$","$L24",null,{"initialData":{"job_id":"5a735a607ca3e10828337ec4","environment_id":120,"environment_description":"Windows 7 64 bit","size":450560,"type":"PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed","type_short":["peexe","executable"],"type_short_id":"exe","target_url":null,"state":"SUCCESS","error_type":null,"error_origin":null,"submit_name":"cr-piriform.exe","md5":"5ddc3474f5a1a20b33db76a83818518b","sha1":"3e1014cd25ea3d7274ed2c8e2c8690b2400db81b","sha256":"99f0875ce316761fe9dde48b1313486ba59e257f2db08d8040bee5b07067010c","sha512":"2fa027d0a3d30d843337676d90a911a45f0e55620d951f12f1849a7d476783c4d20169fb1e5b85e8658b9607da0936aa2d2b609c68c4dccdfb5be232d7774309","ssdeep":"12288:JL9jNy/nNFGshtYpG61yX1ri4rCmdjsKmF8H0aX:dAX5upkX1+4rrdAKmF8H","imphash":"826396532c541b85a60ce96ad02722b2","entrypoint":"0x4999c0","entrypoint_section":"UPX1","image_base":null,"subsystem":null,"image_file_characteristics":[],"dll_characteristics":[],"major_os_version":null,"minor_os_version":null,"av_detect":54,"vx_family":"Trojan.Generic","url_analysis":false,"analysis_start_time":"2018-03-19T01:11:39+00:00","threat_score":100,"interesting":false,"threat_level":2,"verdict":"malicious","certificates":[],"is_certificates_valid":false,"certificates_validation_message":"No signature was present in the subject. (0x800b0100)","domains":[],"compromised_hosts":[],"hosts":["92.122.122.136","92.122.122.155"],"total_network_connections":2,"total_processes":1,"total_signatures":31,"extracted_files":[{"name":"26d11347f364dc5545f420204b0203d2_6b06490d-f9fd-424c-8b6d-83edc4369e89","file_path":"%APPDATA%\\Microsoft\\Crypto\\RSA\\S-1-5-21-686412048-2446563785-1323799475-1001\\26d11347f364dc5545f420204b0203d2_6b06490d-f9fd-424c-8b6d-83edc4369e89","file_size":48,"md5":"d729387b9d882e061b76269030ed78ef","sha1":"dd16480096ba50fd8bdc79b71113d6e142b0368c","sha256":"9b5a95a8a5ee6a920fe0eb0aefd15c83ad2a94c518c9bf75c2975a974da2d9e5","sha512":"5fcf8aed3db1f02eca2d22f8fa5bf4069f3f5b7f4c1c10c54f1dc452d3885431062b6688a22ad23884d8af5155574a1f98b7893db5f1117de7d935cd14fcc8cb","type_tags":["data"],"description":"data","runtime_process":"cr-piriform.exe (PID: 3980)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/5a735a607ca3e10828337ec4/download/dropped-file?key=83db48e94b06354031cd57c9086b0ea732db8840d3c0680f4fbb179deaaf58a2971754fbc36449d88e421b3f8d102df551febbb6d0629c3e8fc7926b25e3937888dd02b49d9d312ff82d45f91ec1326a8c3e28affb692f0b728672fd81d007932e01d8933923018e55480fd720e925c0a0ed2c02f2883dc792ee66f3c69480","submit_link":"/bff/report/5a735a607ca3e10828337ec4/submit/dropped-file?key=83db48e94b06354031cd57c9086b0ea732db8840d3c0680f4fbb179deaaf58a2971754fbc36449d88e421b3f8d102df551febbb6d0629c3e8fc7926b25e3937888dd02b49d9d312ff82d45f91ec1326a8c3e28affb692f0b728672fd81d007932e01d8933923018e55480fd720e925c0a0ed2c02f2883dc792ee66f3c69480","has_overview":false,"extended_details":null}],"file_metadata":{"file_compositions":[],"imported_objects":[],"file_analysis":[],"total_file_compositions_imports":null},"processes":[{"uid":"00011430-00003980","parentuid":null,"name":"cr-piriform.exe","normalized_path":"C:\\cr-piriform.exe","command_line":null,"sha256":"99f0875ce316761fe9dde48b1313486ba59e257f2db08d8040bee5b07067010c","av_label":"Trojan.Generic","av_matched":40,"av_total":74,"pid":"3980","icon":"$25","process_flags":[{"name":"Extracted Streams","data":null},{"name":"Multiscan Match","data":"40/74"}]}],"mitre_attcks":[],"network_mode":"default","signatures":[{"threat_level":0,"threat_level_human":"informative","category":"Anti-Reverse Engineering","identifier":"stream-4","type":1,"relevance":1,"name":"Contains ability to register a top-level exception handler (often used as anti-debugging trick)","description":"SetUnhandledExceptionFilter@KERNEL32.DLL at 00011430-00003980-26514-1374-01380B16\n SetUnhandledExceptionFilter@KERNEL32.DLL at 00011430-00003980-26514-3977-01381526\n SetUnhandledExceptionFilter@KERNEL32.DLL at 00011430-00003980-26514-1467-01381394","description_v2":["SetUnhandledExceptionFilter@KERNEL32.DLL at 00011430-00003980-26514-1374-01380B16","SetUnhandledExceptionFilter@KERNEL32.DLL at 00011430-00003980-26514-3977-01381526","SetUnhandledExceptionFilter@KERNEL32.DLL at 00011430-00003980-26514-1467-01381394"],"description_v3":[{"type":"text","value":"SetUnhandledExceptionFilter@KERNEL32.DLL"},{"type":"stream","stream_uid":"00011430-00003980-26514-1374-01380B16","modal_link":"/bff/report/5a735a607ca3e10828337ec4/processes/00011430-00003980/streams/0/00011430-00003980-26514-1374-01380B16","process":{"name":"cr-piriform.exe","process_uid":"00011430-00003980","pid":"3980"}},{"type":"linebreak"},{"type":"text","value":"SetUnhandledExceptionFilter@KERNEL32.DLL"},{"type":"stream","stream_uid":"00011430-00003980-26514-3977-01381526","modal_link":"/bff/report/5a735a607ca3e10828337ec4/processes/00011430-00003980/streams/0/00011430-00003980-26514-3977-01381526","process":{"name":"cr-piriform.exe","process_uid":"00011430-00003980","pid":"3980"}},{"type":"linebreak"},{"type":"text","value":"SetUnhandledExceptionFilter@KERNEL32.DLL"},{"type":"stream","stream_uid":"00011430-00003980-26514-1467-01381394","modal_link":"/bff/report/5a735a607ca3e10828337ec4/processes/00011430-00003980/streams/0/00011430-00003980-26514-1467-01381394","process":{"name":"cr-piriform.exe","process_uid":"00011430-00003980","pid":"3980"}}],"origin":"Hybrid Analysis Technology","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":{"modal_link":"/bff/report/5a735a607ca3e10828337ec4/processes/00011430-00003980/streams/0/00011430-00003980-26514-1374-01380B16","name":"cr-piriform.exe","pid":3980}},{"threat_level":0,"threat_level_human":"informative","category":"Anti-Reverse Engineering","identifier":"stream-41","type":1,"relevance":10,"name":"Found strings in conjunction with a procedure lookup that resolve to a known API export symbol","description":"Found reference to API GetSysColor@USER32.DLL at 00011430-00003980-26514-1434-01376850\n Found reference to API GetLocaleInfoEx@KERNEL32.DLL at 00011430-00003980-26514-1581-01381E0C\n Found reference to API SleepConditionVariableCS@KERNEL32.DLL at 00011430-00003980-26514-1582-01381E8B\n Found reference to API FlsGetValue@KERNEL32.DLL at 00011430-00003980-26514-3957-01381AA9","description_v2":["Found reference to API GetSysColor@USER32.DLL at 00011430-00003980-26514-1434-01376850","Found reference to API GetLocaleInfoEx@KERNEL32.DLL at 00011430-00003980-26514-1581-01381E0C","Found reference to API SleepConditionVariableCS@KERNEL32.DLL at 00011430-00003980-26514-1582-01381E8B","Found reference to API FlsGetValue@KERNEL32.DLL at 00011430-00003980-26514-3957-01381AA9"],"description_v3":[{"type":"text","value":"Found reference to API GetSysColor@USER32.DLL"},{"type":"stream","stream_uid":"00011430-00003980-26514-1434-01376850","modal_link":"/bff/report/5a735a607ca3e10828337ec4/processes/00011430-00003980/streams/0/00011430-00003980-26514-1434-01376850","process":{"name":"cr-piriform.exe","process_uid":"00011430-00003980","pid":"3980"}},{"type":"linebreak"},{"type":"text","value":"Found reference to API GetLocaleInfoEx@KERNEL32.DLL"},{"type":"stream","stream_uid":"00011430-00003980-26514-1581-01381E0C","modal_link":"/bff/report/5a735a607ca3e10828337ec4/processes/00011430-00003980/streams/0/00011430-00003980-26514-1581-01381E0C","process":{"name":"cr-piriform.exe","process_uid":"00011430-00003980","pid":"3980"}},{"type":"linebreak"},{"type":"text","value":"Found reference to API SleepConditionVariableCS@KERNEL32.DLL"},{"type":"stream","stream_uid":"00011430-00003980-26514-1582-01381E8B","modal_link":"/bff/report/5a735a607ca3e10828337ec4/processes/00011430-00003980/streams/0/00011430-00003980-26514-1582-01381E8B","process":{"name":"cr-piriform.exe","process_uid":"00011430-00003980","pid":"3980"}},{"type":"linebreak"},{"type":"text","value":"Found reference to API FlsGetValue@KERNEL32.DLL"},{"type":"stream","stream_uid":"00011430-00003980-26514-3957-01381AA9","modal_link":"/bff/report/5a735a607ca3e10828337ec4/processes/00011430-00003980/streams/0/00011430-00003980-26514-3957-01381AA9","process":{"name":"cr-piriform.exe","process_uid":"00011430-00003980","pid":"3980"}}],"origin":"Hybrid Analysis Technology","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":{"modal_link":"/bff/report/5a735a607ca3e10828337ec4/processes/00011430-00003980/streams/0/00011430-00003980-26514-1434-01376850","name":"cr-piriform.exe","pid":3980}},{"threat_level":0,"threat_level_human":"informative","category":"Anti-Reverse Engineering","identifier":"static-5","type":0,"relevance":10,"name":"PE file contains zero-size sections","description":"Raw size of \"UPX0\" is zero","description_v2":["Raw size of \"UPX0\" is zero"],"description_v3":[{"type":"text","value":"Raw size of \"UPX0\" is zero"}],"origin":"Static Parser","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Environment Awareness","identifier":"stream-2","type":1,"relevance":1,"name":"Contains ability to query machine time","description":"GetSystemTimeAsFileTime@KERNEL32.DLL at 00011430-00003980-26514-1471-0138128C","description_v2":["GetSystemTimeAsFileTime@KERNEL32.DLL at 00011430-00003980-26514-1471-0138128C"],"description_v3":[{"type":"text","value":"GetSystemTimeAsFileTime@KERNEL32.DLL"},{"type":"stream","stream_uid":"00011430-00003980-26514-1471-0138128C","modal_link":"/bff/report/5a735a607ca3e10828337ec4/processes/00011430-00003980/streams/0/00011430-00003980-26514-1471-0138128C","process":{"name":"cr-piriform.exe","process_uid":"00011430-00003980","pid":"3980"}}],"origin":"Hybrid Analysis Technology","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":{"modal_link":"/bff/report/5a735a607ca3e10828337ec4/processes/00011430-00003980/streams/0/00011430-00003980-26514-1471-0138128C","name":"cr-piriform.exe","pid":3980}},{"threat_level":0,"threat_level_human":"informative","category":"General","identifier":"network-1","type":7,"relevance":1,"name":"Contacts server","description":"\"92.122.122.136:80\"\n \"92.122.122.155:80\"","description_v2":["\"92.122.122.136:80\"","\"92.122.122.155:80\""],"description_v3":[{"type":"text","value":"\"92.122.122.136:80\""},{"type":"linebreak"},{"type":"text","value":"\"92.122.122.155:80\""}],"origin":"Network Traffic","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Installation/Persistance","identifier":"binary-0","type":8,"relevance":3,"name":"Dropped files","description":"\"26d11347f364dc5545f420204b0203d2_6b06490d-f9fd-424c-8b6d-83edc4369e89\" has type \"data\"","description_v2":["\"26d11347f364dc5545f420204b0203d2_6b06490d-f9fd-424c-8b6d-83edc4369e89\" has type \"data\""],"description_v3":[{"type":"text","value":"\"26d11347f364dc5545f420204b0203d2_6b06490d-f9fd-424c-8b6d-83edc4369e89\" has type \"data\""}],"origin":"Binary File","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Installation/Persistance","identifier":"api-55","type":6,"relevance":7,"name":"Touches files in the Windows directory","description":"\"\" touched file \"%WINDIR%\\Globalization\\Sorting\\SortDefault.nls\"\n \"\" touched file \"%WINDIR%\\SysWOW64\\en-US\\msctf.dll.mui\"\n \"\" touched file \"%WINDIR%\\Fonts\\StaticCache.dat\"\n \"\" touched file \"%WINDIR%\\SysWOW64\\rsaenh.dll\"","description_v2":["\"\" touched file \"%WINDIR%\\Globalization\\Sorting\\SortDefault.nls\"","\"\" touched file \"%WINDIR%\\SysWOW64\\en-US\\msctf.dll.mui\"","\"\" touched file \"%WINDIR%\\Fonts\\StaticCache.dat\"","\"\" touched file \"%WINDIR%\\SysWOW64\\rsaenh.dll\""],"description_v3":[{"type":"text","value":"\"\" touched file \"%WINDIR%\\Globalization\\Sorting\\SortDefault.nls\""},{"type":"linebreak"},{"type":"text","value":"\"\" touched file \"%WINDIR%\\SysWOW64\\en-US\\msctf.dll.mui\""},{"type":"linebreak"},{"type":"text","value":"\"\" touched file \"%WINDIR%\\Fonts\\StaticCache.dat\""},{"type":"linebreak"},{"type":"text","value":"\"\" touched file \"%WINDIR%\\SysWOW64\\rsaenh.dll\""}],"origin":"API Call","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Network Related","identifier":"string-3","type":2,"relevance":10,"name":"Found potential URL in binary/memory","description":"Heuristic match: \"eserved.An\"\n Pattern match: \"https://validation.sls.microsoft.com/SLWGA/slwga.asmx\"\n Pattern match: \"5d.Lq/2R;aI\"\n Pattern match: \"http://genuine.microsoft.com/reporting/XmlEvent.ashx?v=3\"\n Pattern match: \"http://www.blambot.comhttp://www.blambot.com/license.shtmlAntigrav\"","description_v2":["Heuristic match: \"eserved.An\"","Pattern match: \"https://validation.sls.microsoft.com/SLWGA/slwga.asmx\"","Pattern match: \"5d.Lq/2R;aI\"","Pattern match: \"http://genuine.microsoft.com/reporting/XmlEvent.ashx?v=3\"","Pattern match: \"http://www.blambot.comhttp://www.blambot.com/license.shtmlAntigrav\""],"description_v3":[{"type":"text","value":"Heuristic match: \"eserved.An\""},{"type":"linebreak"},{"type":"text","value":"Pattern match: \"https://validation.sls.microsoft.com/SLWGA/slwga.asmx\""},{"type":"linebreak"},{"type":"text","value":"Pattern match: \"5d.Lq/2R;aI\""},{"type":"linebreak"},{"type":"text","value":"Pattern match: \"http://genuine.microsoft.com/reporting/XmlEvent.ashx?v=3\""},{"type":"linebreak"},{"type":"text","value":"Pattern match: \"http://www.blambot.comhttp://www.blambot.com/license.shtmlAntigrav\""}],"origin":"File/Memory","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"System Security","identifier":"api-37","type":6,"relevance":10,"name":"Opens the Kernel Security Device Driver (KsecDD) of Windows","description":"\"\" opened \"\\Device\\KsecDD\"","description_v2":["\"\" opened \"\\Device\\KsecDD\""],"description_v3":[{"type":"text","value":"\"\" opened \"\\Device\\KsecDD\""}],"origin":"API Call","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Unusual Characteristics","identifier":"static-18","type":0,"relevance":10,"name":"Matched Compiler/Packer signature","description":"\"cr-piriform.exe.bin\" was detected as \"Netopsystems FEAD Optimizer 1\"","description_v2":["\"cr-piriform.exe.bin\" was detected as \"Netopsystems FEAD Optimizer 1\""],"description_v3":[{"type":"text","value":"\"cr-piriform.exe.bin\" was detected as \"Netopsystems FEAD Optimizer 1\""}],"origin":"Static Parser","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":1,"threat_level_human":"suspicious","category":"Anti-Detection/Stealthyness","identifier":"api-10","type":6,"relevance":6,"name":"Queries kernel debugger information","description":"\"\" at 00011430-00003980-00000033-52989741","description_v2":["\"\" at 00011430-00003980-00000033-52989741"],"description_v3":[{"type":"text","value":"\"\" at 00011430-00003980-00000033-52989741"}],"origin":"API Call","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":1,"threat_level_human":"suspicious","category":"Anti-Reverse Engineering","identifier":"stream-40","type":1,"relevance":10,"name":"Looks up many procedures within the same disassembly stream (often used to hide usage)","description":"Found 37 calls to GetProcAddress@KERNEL32.DLL at 00011430-00003980-26514-3957-01381AA9","description_v2":["Found 37 calls to GetProcAddress@KERNEL32.DLL at 00011430-00003980-26514-3957-01381AA9"],"description_v3":[{"type":"text","value":"Found 37 calls to GetProcAddress@KERNEL32.DLL"},{"type":"stream","stream_uid":"00011430-00003980-26514-3957-01381AA9","modal_link":"/bff/report/5a735a607ca3e10828337ec4/processes/00011430-00003980/streams/0/00011430-00003980-26514-3957-01381AA9","process":{"name":"cr-piriform.exe","process_uid":"00011430-00003980","pid":"3980"}}],"origin":"Hybrid Analysis Technology","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":{"modal_link":"/bff/report/5a735a607ca3e10828337ec4/processes/00011430-00003980/streams/0/00011430-00003980-26514-3957-01381AA9","name":"cr-piriform.exe","pid":3980}},{"threat_level":1,"threat_level_human":"suspicious","category":"Anti-Reverse Engineering","identifier":"static-6","type":0,"relevance":10,"name":"PE file has unusual entropy sections","description":"UPX1 with unusual entropies 7.79210392216","description_v2":["UPX1 with unusual entropies 7.79210392216"],"description_v3":[{"type":"text","value":"UPX1 with unusual entropies 7.79210392216"}],"origin":"Static Parser","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":1,"threat_level_human":"suspicious","category":"Anti-Reverse Engineering","identifier":"static-7","type":0,"relevance":10,"name":"PE file is packed with UPX","description":"\"cr-piriform.exe.bin\" has a section named \"UPX0\"\n \"cr-piriform.exe.bin\" has a section named \"UPX1\"","description_v2":["\"cr-piriform.exe.bin\" has a section named \"UPX0\"","\"cr-piriform.exe.bin\" has a section named \"UPX1\""],"description_v3":[{"type":"text","value":"\"cr-piriform.exe.bin\" has a section named \"UPX0\""},{"type":"linebreak"},{"type":"text","value":"\"cr-piriform.exe.bin\" has a section named \"UPX1\""}],"origin":"Static Parser","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":1,"threat_level_human":"suspicious","category":"Cryptographic Related","identifier":"string-57","type":2,"relevance":10,"name":"Found a cryptographic related string","description":"\"Blowfish\" (Indicator: \"blowfish\"; File: \"00011430-00003980.00000002.15593.01370000.00000002.mdmp\")","description_v2":["\"Blowfish\" (Indicator: \"blowfish\"; File: \"00011430-00003980.00000002.15593.01370000.00000002.mdmp\")"],"description_v3":[{"type":"text","value":"\"Blowfish\" (Indicator: \"blowfish\"; File: \"00011430-00003980.00000002.15593.01370000.00000002.mdmp\")"}],"origin":"File/Memory","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":1,"threat_level_human":"suspicious","category":"Environment Awareness","identifier":"string-1","type":2,"relevance":4,"name":"Possibly tries to implement anti-virtualization techniques","description":"\"m:ManufacturerInfoinnotek GmbHWMI:Win32_ComputerSystem:ModelInfoVirtualBoxWMI:Win32_OperatingSystem:InstallDateInfo20171203120616.000000+060\" (Indicator: \"virtualbox\")","description_v2":["\"m:ManufacturerInfoinnotek GmbHWMI:Win32_ComputerSystem:ModelInfoVirtualBoxWMI:Win32_OperatingSystem:InstallDateInfo20171203120616.000000+060\" (Indicator: \"virtualbox\")"],"description_v3":[{"type":"text","value":"\"m:ManufacturerInfoinnotek GmbHWMI:Win32_ComputerSystem:ModelInfoVirtualBoxWMI:Win32_OperatingSystem:InstallDateInfo20171203120616.000000+060\" (Indicator: \"virtualbox\")"}],"origin":"File/Memory","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":1,"threat_level_human":"suspicious","category":"Environment Awareness","identifier":"registry-1","type":3,"relevance":10,"name":"Reads the cryptographic machine GUID","description":"\"\" (Path: \"HKLM\\SOFTWARE\\MICROSOFT\\CRYPTOGRAPHY\"; Key: \"MACHINEGUID\")","description_v2":["\"\" (Path: \"HKLM\\SOFTWARE\\MICROSOFT\\CRYPTOGRAPHY\"; Key: \"MACHINEGUID\")"],"description_v3":[{"type":"text","value":"\"\" (Path: \"HKLM\\SOFTWARE\\MICROSOFT\\CRYPTOGRAPHY\"; Key: \"MACHINEGUID\")"}],"origin":"Registry Access","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":1,"threat_level_human":"suspicious","category":"General","identifier":"stream-32","type":1,"relevance":1,"name":"Contains ability to find and load resources of a specific module","description":"FindResourceA@KERNEL32.DLL at 00011430-00003980-26514-1311-013785B0\n FindResourceA@KERNEL32.DLL at 00011430-00003980-26514-1342-01376AC0\n FindResourceA@KERNEL32.DLL at 00011430-00003980-26514-1360-01374CA0","description_v2":["FindResourceA@KERNEL32.DLL at 00011430-00003980-26514-1311-013785B0","FindResourceA@KERNEL32.DLL at 00011430-00003980-26514-1342-01376AC0","FindResourceA@KERNEL32.DLL at 00011430-00003980-26514-1360-01374CA0"],"description_v3":[{"type":"text","value":"FindResourceA@KERNEL32.DLL"},{"type":"stream","stream_uid":"00011430-00003980-26514-1311-013785B0","modal_link":"/bff/report/5a735a607ca3e10828337ec4/processes/00011430-00003980/streams/0/00011430-00003980-26514-1311-013785B0","process":{"name":"cr-piriform.exe","process_uid":"00011430-00003980","pid":"3980"}},{"type":"linebreak"},{"type":"text","value":"FindResourceA@KERNEL32.DLL"},{"type":"stream","stream_uid":"00011430-00003980-26514-1342-01376AC0","modal_link":"/bff/report/5a735a607ca3e10828337ec4/processes/00011430-00003980/streams/0/00011430-00003980-26514-1342-01376AC0","process":{"name":"cr-piriform.exe","process_uid":"00011430-00003980","pid":"3980"}},{"type":"linebreak"},{"type":"text","value":"FindResourceA@KERNEL32.DLL"},{"type":"stream","stream_uid":"00011430-00003980-26514-1360-01374CA0","modal_link":"/bff/report/5a735a607ca3e10828337ec4/processes/00011430-00003980/streams/0/00011430-00003980-26514-1360-01374CA0","process":{"name":"cr-piriform.exe","process_uid":"00011430-00003980","pid":"3980"}}],"origin":"Hybrid Analysis Technology","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":{"modal_link":"/bff/report/5a735a607ca3e10828337ec4/processes/00011430-00003980/streams/0/00011430-00003980-26514-1311-013785B0","name":"cr-piriform.exe","pid":3980}},{"threat_level":1,"threat_level_human":"suspicious","category":"General","identifier":"api-77","type":6,"relevance":10,"name":"Opened the service control manager","description":"\"\" called \"OpenSCManager\" requesting access rights \"SC_MANAGER_CONNECT\" (0x1)","description_v2":["\"\" called \"OpenSCManager\" requesting access rights \"SC_MANAGER_CONNECT\" (0x1)"],"description_v3":[{"type":"text","value":"\"\" called \"OpenSCManager\" requesting access rights \"SC_MANAGER_CONNECT\" (0x1)"}],"origin":"API Call","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":1,"threat_level_human":"suspicious","category":"Spyware/Information Retrieval","identifier":"stream-0","type":1,"relevance":10,"name":"Contains ability to open the clipboard","description":"OpenClipboard@USER32.DLL at 00011430-00003980-26514-1376-01374C30","description_v2":["OpenClipboard@USER32.DLL at 00011430-00003980-26514-1376-01374C30"],"description_v3":[{"type":"text","value":"OpenClipboard@USER32.DLL"},{"type":"stream","stream_uid":"00011430-00003980-26514-1376-01374C30","modal_link":"/bff/report/5a735a607ca3e10828337ec4/processes/00011430-00003980/streams/0/00011430-00003980-26514-1376-01374C30","process":{"name":"cr-piriform.exe","process_uid":"00011430-00003980","pid":"3980"}}],"origin":"Hybrid Analysis Technology","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":{"modal_link":"/bff/report/5a735a607ca3e10828337ec4/processes/00011430-00003980/streams/0/00011430-00003980-26514-1376-01374C30","name":"cr-piriform.exe","pid":3980}},{"threat_level":1,"threat_level_human":"suspicious","category":"Unusual Characteristics","identifier":"static-4","type":0,"relevance":10,"name":"Entrypoint in PE header is within an uncommon section","description":"\"cr-piriform.exe.bin\" has an entrypoint in section \"UPX1\"","description_v2":["\"cr-piriform.exe.bin\" has an entrypoint in section \"UPX1\""],"description_v3":[{"type":"text","value":"\"cr-piriform.exe.bin\" has an entrypoint in section \"UPX1\""}],"origin":"Static Parser","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":1,"threat_level_human":"suspicious","category":"Unusual Characteristics","identifier":"static-1","type":0,"relevance":1,"name":"Imports suspicious APIs","description":"VirtualProtect\n GetProcAddress\n VirtualAlloc\n LoadLibraryA","description_v2":["VirtualProtect","GetProcAddress","VirtualAlloc","LoadLibraryA"],"description_v3":[{"type":"text","value":"VirtualProtect"},{"type":"linebreak"},{"type":"text","value":"GetProcAddress"},{"type":"linebreak"},{"type":"text","value":"VirtualAlloc"},{"type":"linebreak"},{"type":"text","value":"LoadLibraryA"}],"origin":"Static Parser","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":1,"threat_level_human":"suspicious","category":"Unusual Characteristics","identifier":"registry-25","type":3,"relevance":3,"name":"Reads information about supported languages","description":"\"\" (Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\NLS\\LOCALE\"; Key: \"00000409\")","description_v2":["\"\" (Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\NLS\\LOCALE\"; Key: \"00000409\")"],"description_v3":[{"type":"text","value":"\"\" (Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\NLS\\LOCALE\"; Key: \"00000409\")"}],"origin":"Registry Access","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":2,"threat_level_human":"malicious","category":"External Systems","identifier":"avtest-3","type":12,"relevance":10,"name":"Sample was identified as malicious by a large number of Antivirus engines","description":"38/66 Antivirus vendors marked sample as malicious (57% detection rate)","description_v2":["38/66 Antivirus vendors marked sample as malicious (57% detection rate)"],"description_v3":[{"type":"text","value":"38/66 Antivirus vendors marked sample as malicious (57% detection rate)"}],"origin":"External System","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":2,"threat_level_human":"malicious","category":"External Systems","identifier":"avtest-0","type":12,"relevance":8,"name":"Sample was identified as malicious by at least one Antivirus engine","description":"38/66 Antivirus vendors marked sample as malicious (57% detection rate)\n 6/13 Antivirus vendors marked sample as malicious (46% detection rate)","description_v2":["38/66 Antivirus vendors marked sample as malicious (57% detection rate)","6/13 Antivirus vendors marked sample as malicious (46% detection rate)"],"description_v3":[{"type":"text","value":"38/66 Antivirus vendors marked sample as malicious (57% detection rate)"},{"type":"linebreak"},{"type":"text","value":"6/13 Antivirus vendors marked sample as malicious (46% detection rate)"}],"origin":"External System","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":2,"threat_level_human":"malicious","category":"Unusual Characteristics","identifier":"stream-22","type":1,"relevance":5,"name":"Contains native function calls","description":"NtdllDefWindowProc_A@NTDLL.DLL at 00011430-00003980-26514-1364-013756F0\n NtdllDefWindowProc_A@NTDLL.DLL at 00011430-00003980-26514-1431-01375C80\n NtdllDefWindowProc_A@NTDLL.DLL at 00011430-00003980-26514-1430-01375A50","description_v2":["NtdllDefWindowProc_A@NTDLL.DLL at 00011430-00003980-26514-1364-013756F0","NtdllDefWindowProc_A@NTDLL.DLL at 00011430-00003980-26514-1431-01375C80","NtdllDefWindowProc_A@NTDLL.DLL at 00011430-00003980-26514-1430-01375A50"],"description_v3":[{"type":"text","value":"NtdllDefWindowProc_A@NTDLL.DLL"},{"type":"stream","stream_uid":"00011430-00003980-26514-1364-013756F0","modal_link":"/bff/report/5a735a607ca3e10828337ec4/processes/00011430-00003980/streams/0/00011430-00003980-26514-1364-013756F0","process":{"name":"cr-piriform.exe","process_uid":"00011430-00003980","pid":"3980"}},{"type":"linebreak"},{"type":"text","value":"NtdllDefWindowProc_A@NTDLL.DLL"},{"type":"stream","stream_uid":"00011430-00003980-26514-1431-01375C80","modal_link":"/bff/report/5a735a607ca3e10828337ec4/processes/00011430-00003980/streams/0/00011430-00003980-26514-1431-01375C80","process":{"name":"cr-piriform.exe","process_uid":"00011430-00003980","pid":"3980"}},{"type":"linebreak"},{"type":"text","value":"NtdllDefWindowProc_A@NTDLL.DLL"},{"type":"stream","stream_uid":"00011430-00003980-26514-1430-01375A50","modal_link":"/bff/report/5a735a607ca3e10828337ec4/processes/00011430-00003980/streams/0/00011430-00003980-26514-1430-01375A50","process":{"name":"cr-piriform.exe","process_uid":"00011430-00003980","pid":"3980"}}],"origin":"Hybrid Analysis Technology","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":{"modal_link":"/bff/report/5a735a607ca3e10828337ec4/processes/00011430-00003980/streams/0/00011430-00003980-26514-1364-013756F0","name":"cr-piriform.exe","pid":3980}}],"detonation_parameters":{"action_script":"default","experimental_anti_evasion":true,"script_logging":false,"allow_sample_tampering":false,"network_mode":"default","custom_system_date_time":null,"custom_commandline":null,"document_password":null,"document_password_exists":false,"environment_variable":null,"dynamic_analysis_time":240,"comment":null},"falcon_mal_query_results":[],"falcon_intelligence_data":null,"search_tags":[],"execution_mode":"KERNELMODE","monitor_script":"default.au3","monitor_script_description":"Default analysis","windows_version_name":"Windows 7","windows_version_edition":"Professional","windows_version_service_pack":"Service Pack 1","windows_version_version":"6.1 (build 7601)","windows_version_bitness":"64","custom_date_time":null,"sandbox_version":"8.00","report_generator_version":null,"signature_engine_version":null,"mitre_version":null,"office_analysis":false,"office_version":null,"incidents":[{"name":"Fingerprint","details":["Reads the cryptographic machine GUID","Reads the active computer name"]}],"icon":"$26","visualization":"$27","classification":["42.3% (.EXE) UPX compressed Win32 Executable","36.7% (.EXE) Win32 EXE Yoda's Crypter","9.1% (.DLL) Win32 Dynamic Link Library (generic)","6.2% (.EXE) Win32 Executable (generic)","2.7% (.EXE) Generic Win/DOS Executable"],"dns_requests":[],"contacted_hosts":[{"compromised":false,"address":"92.122.122.136","port":80,"protocol":"TCP","associated_runtime":[{"name":"watadminsvc.exe","pid":"2032"}],"country":"European Union","associated_sha256s":[]},{"compromised":false,"address":"92.122.122.155","port":80,"protocol":"TCP","associated_runtime":[{"name":"watadminsvc.exe","pid":"2032"}],"country":"European Union","associated_sha256s":[]}],"contacted_countries":{"countries":["EU"],"coordinates":[{"origin":{"latitude":"51.65","longitude":"6.1833"},"destination":{"latitude":"47.0","longitude":"8.0"}},{"origin":{"latitude":"51.65","longitude":"6.1833"},"destination":{"latitude":"47.0","longitude":"8.0"}}]},"port_infos":[{"port":80,"description":"Hypertext Transfer Protocol (HTTP)"}],"extracted_strings":{"all":[{"value":"ISIjJCUmJygpKissLS4vMDEyMzQ1Njc4OTo7PD0+P0BBQkNERUZHSElKS0xNTk9QUVJTVFVWV1hZWltcXV5fYA==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"IUlzUmFuZG9tQWNjZXNzKCk=","type":"Unicode","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"IVRoaXMgcHJvZ3JhbSBjYW5ub3QgYmUgcnVuIGluIERPUyBtb2RlLiQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"IiBub3QgdXNlZA==","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Ii0zYThhMzMz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"IkE3ZFMxKXFi","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"I3dobnw4MTky","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"I3dobnw4MTkyTw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"JF1WPmlvbiAxLi5u","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"JTZTZXRVbmhhbmRsZWRFeGNlcHQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"JmlkYXRhJDUlcEM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Jywgc3RvcmVkICc=","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JywgdHJ5aW5nIHRvIHJldHJpZXZlICc=","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"KCYiJSJQKz4/amt3","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"KSovMzc6PEJHSVVaZGVmZw==","type":"Unicode","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"LCxfLF9fXyxfLHEsXyxf","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_0.png","compromised":null,"detection_total":null,"total":null},{"value":"LD0lSEglPSxIS0soIC04KUhIKDosSEpKKA==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"LEtXSjg+T108","type":"Unicode","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"LjAvckcva01NY2g=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Ljo6IENPUkUgOjou","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Ljo6IENPUkUgOjouOlByb2dyYW06UGlyaWZvcm0gTXVsdGlHZW46UHJvdGVjdGlvbjpCbG93ZmlzaC9TSEExOkdmeDp5YXlpejpTZng6U3Ryb2JlIC0gQ29yYTE0","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVUJsb2NraW5nSW5wdXRPbmx5QEJ1ZmZlcmVkVHJhbnNmb3JtYXRpb25AQ3J5cHRvUFBAQA==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVUJsb2NrUGFkZGluZ1NjaGVtZURlZkBDcnlwdG9QUEBA","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVUJsb3dmaXNoX0luZm9AQ3J5cHRvUFBAQA==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVUZpbHRlclB1dFNwYWNlSGVscGVyQENyeXB0b1BQQEA=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVUlucHV0UmVqZWN0ZWRAPyRJbnB1dFJlamVjdGluZ0BWQnVmZmVyZWRUcmFuc2Zvcm1hdGlvbkBDcnlwdG9QUEBAQENyeXB0b1BQQEA=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVU5vQ2hhbm5lbFN1cHBvcnRAQnVmZmVyZWRUcmFuc2Zvcm1hdGlvbkBDcnlwdG9QUEBA","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kQWxnb3JpdGhtSW1wbEBWPyRTaW1wbGVLZXlpbmdJbnRlcmZhY2VJbXBsQFY/JFR3b0Jhc2VzQFZCbG9ja0NpcGhlckBDcnlwdG9QUEBAVUJsb3dmaXNoX0luZm9AMkBAQ3J5cHRvUFBAQFYxMkBAQ3J5cHRvUFBAQFYxMkBAQ3J5cHRvUFBAQA==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kQWxnb3JpdGhtSW1wbEBWQ0JDX0VuY3J5cHRpb25AQ3J5cHRvUFBAQFY/JENpcGhlck1vZGVGaW5hbFRlbXBsYXRlX0NpcGhlckhvbGRlckBWPyRCbG9ja0NpcGhlckZpbmFsQCQwQUBWQmFzZUBCbG93ZmlzaEBDcnlwdG9QUEBAQENyeXB0b1BQQEBWQ0JDX0VuY3J5cHRpb25AMkBAMkBAQ3J5cHRvUFBAQA==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kQWxnb3JpdGhtUGFyYW1ldGVyc1RlbXBsYXRlQFZDb25zdEJ5dGVBcnJheVBhcmFtZXRlckBDcnlwdG9QUEBAQENyeXB0b1BQQEA=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kQWxnb3JpdGhtUGFyYW1ldGVyc1RlbXBsYXRlQFc0QmxvY2tQYWRkaW5nU2NoZW1lQEJsb2NrUGFkZGluZ1NjaGVtZURlZkBDcnlwdG9QUEBAQENyeXB0b1BQQEA=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kQXV0b1NpZ25hbGluZ0BWQnVmZmVyZWRUcmFuc2Zvcm1hdGlvbkBDcnlwdG9QUEBAQENyeXB0b1BQQEA=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kYmFzaWNfc3RyaW5nQERVPyRjaGFyX3RyYWl0c0BEQHN0ZEBAVj8kYWxsb2NhdG9yQERAMkBAc3RkQEA=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kQmxvY2tDaXBoZXJGaW5hbEAkMEFAVkJhc2VAQmxvd2Zpc2hAQ3J5cHRvUFBAQEBDcnlwdG9QUEBA","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kQmxvY2tDaXBoZXJJbXBsQFVCbG93ZmlzaF9JbmZvQENyeXB0b1BQQEBWQmxvY2tDaXBoZXJAMkBAQ3J5cHRvUFBAQA==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kQnVmZmVybGVzc0BWQnVmZmVyZWRUcmFuc2Zvcm1hdGlvbkBDcnlwdG9QUEBAQENyeXB0b1BQQEA=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kQnVmZmVybGVzc0BWU2lua0BDcnlwdG9QUEBAQENyeXB0b1BQQEA=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kQ2lwaGVyTW9kZUZpbmFsVGVtcGxhdGVfQ2lwaGVySG9sZGVyQFY/JEJsb2NrQ2lwaGVyRmluYWxAJDBBQFZCYXNlQEJsb3dmaXNoQENyeXB0b1BQQEBAQ3J5cHRvUFBAQFZDQkNfRW5jcnlwdGlvbkAyQEBDcnlwdG9QUEBA","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kQ2xvbmFibGVJbXBsQFY/JEJsb2NrQ2lwaGVyRmluYWxAJDBBQFZCYXNlQEJsb3dmaXNoQENyeXB0b1BQQEBAQ3J5cHRvUFBAQFZCYXNlQEJsb3dmaXNoQDJAQENyeXB0b1BQQEA=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kRml4ZWRCbG9ja1NpemVAJDA3QENyeXB0b1BQQEA=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kRml4ZWRSb3VuZHNAJDBCQUBAQ3J5cHRvUFBAQA==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kSW5wdXRSZWplY3RpbmdAVkJ1ZmZlcmVkVHJhbnNmb3JtYXRpb25AQ3J5cHRvUFBAQEBDcnlwdG9QUEBA","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kT2JqZWN0SG9sZGVyQFY/JEJsb2NrQ2lwaGVyRmluYWxAJDBBQFZCYXNlQEJsb3dmaXNoQENyeXB0b1BQQEBAQ3J5cHRvUFBAQEBDcnlwdG9QUEBA","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kU2ltcGxlS2V5aW5nSW50ZXJmYWNlSW1wbEBWPyRUd29CYXNlc0BWQmxvY2tDaXBoZXJAQ3J5cHRvUFBAQFVCbG93ZmlzaF9JbmZvQDJAQENyeXB0b1BQQEBWMTJAQENyeXB0b1BQQEA=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kVHdvQmFzZXNAVkJsb2NrQ2lwaGVyQENyeXB0b1BQQEBVQmxvd2Zpc2hfSW5mb0AyQEBDcnlwdG9QUEBA","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kVmFyaWFibGVLZXlMZW5ndGhAJDBCQUAkMDMkMERJQCQwMCQwMyQwQUBAQ3J5cHRvUFBAQA==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVkFsZ29yaXRobUBDcnlwdG9QUEBA","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVkFsZ29yaXRobVBhcmFtZXRlcnNAQ3J5cHRvUFBAQA==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVkFsZ29yaXRobVBhcmFtZXRlcnNCYXNlQENyeXB0b1BQQEA=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVkFycmF5U2lua0BDcnlwdG9QUEBA","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVkF1dGhlbnRpY2F0ZWRTeW1tZXRyaWNDaXBoZXJAQ3J5cHRvUFBAQA==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVmJhZF9hbGxvY0BzdGRAQA==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVmJhZF9hcnJheV9uZXdfbGVuZ3RoQHN0ZEBA","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVkJhc2VAQmxvd2Zpc2hAQ3J5cHRvUFBAQA==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVkJpdEJ1Y2tldEBDcnlwdG9QUEBA","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVkJpdG1hcEBHZGlwbHVzQEA=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVkJsb2NrQ2lwaGVyQENyeXB0b1BQQEA=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVkJsb2NrT3JpZW50ZWRDaXBoZXJNb2RlQmFzZUBDcnlwdG9QUEBA","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVkJsb2NrVHJhbnNmb3JtYXRpb25AQ3J5cHRvUFBAQA==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVkJ1ZmZlcmVkVHJhbnNmb3JtYXRpb25AQ3J5cHRvUFBAQA==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVkJ5dGVBcnJheVBhcmFtZXRlckBDcnlwdG9QUEBA","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVkJ5dGVRdWV1ZUBDcnlwdG9QUEBA","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVkNCQ19FbmNyeXB0aW9uQENyeXB0b1BQQEA=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVkNCQ19Nb2RlQmFzZUBDcnlwdG9QUEBA","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVkNpcGhlck1vZGVCYXNlQENyeXB0b1BQQEA=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVkNsb25hYmxlQENyeXB0b1BQQEA=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVkNvbnN0Qnl0ZUFycmF5UGFyYW1ldGVyQENyeXB0b1BQQEA=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVkV4Y2VwdGlvbkBDcnlwdG9QUEBA","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVmV4Y2VwdGlvbkBzdGRAQA==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVkZpbHRlckBDcnlwdG9QUEBA","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVkZpbHRlcldpdGhCdWZmZXJlZElucHV0QENyeXB0b1BQQEA=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVkdkaXBsdXNCYXNlQEdkaXBsdXNAQA==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVkltYWdlQEdkaXBsdXNAQA==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVkludmFsaWRBcmd1bWVudEBDcnlwdG9QUEBA","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVkludmFsaWRDaXBoZXJ0ZXh0QENyeXB0b1BQQEA=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVkludmFsaWREYXRhRm9ybWF0QENyeXB0b1BQQEA=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVkludmFsaWRLZXlMZW5ndGhAQ3J5cHRvUFBAQA==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVmxlbmd0aF9lcnJvckBzdGRAQA==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVmxvZ2ljX2Vycm9yQHN0ZEBA","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVk1lc3NhZ2VRdWV1ZUBDcnlwdG9QUEBA","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVk5hbWVWYWx1ZVBhaXJzQENyeXB0b1BQQEA=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVk5vdENvcHlhYmxlQENyeXB0b1BQQEA=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVk5vdEltcGxlbWVudGVkQENyeXB0b1BQQEA=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVk51bGxOYW1lVmFsdWVQYWlyc0BDcnlwdG9QUEBA","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVm91dF9vZl9yYW5nZUBzdGRAQA==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVlBhcmFtZXRlck5vdFVzZWRAQWxnb3JpdGhtUGFyYW1ldGVyc0Jhc2VAQ3J5cHRvUFBAQA==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVlNpbXBsZUtleWluZ0ludGVyZmFjZUBDcnlwdG9QUEBA","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVlNpbmtAQ3J5cHRvUFBAQA==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVlN0cmVhbVRyYW5zZm9ybWF0aW9uQENyeXB0b1BQQEA=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVlN0cmVhbVRyYW5zZm9ybWF0aW9uRmlsdGVyQENyeXB0b1BQQEA=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVlN5bW1ldHJpY0NpcGhlckBDcnlwdG9QUEBA","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVnR5cGVfaW5mb0BA","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVlZhbHVlVHlwZU1pc21hdGNoQE5hbWVWYWx1ZVBhaXJzQENyeXB0b1BQQEA=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVldhaXRhYmxlQENyeXB0b1BQQEA=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVldhbGtlckBCeXRlUXVldWVAQ3J5cHRvUFBAQA==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVzRCbG9ja1BhZGRpbmdTY2hlbWVAQmxvY2tQYWRkaW5nU2NoZW1lRGVmQENyeXB0b1BQQEA=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"LkNvcHlyaWdodCAoYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"LkNvcHlyaWdodCAoYykgMjAwNiBieSBOYXRlIFBpZWtvcy4gQmxhbWJvdC5jb20uIEFsbCByaWdodHMgcmVzZXJ2ZWQuQW50aWdyYXYgQkJSZWd1bGFyTmF0ZVBpZWtvcy5CbGFtYm90LmNvbTogQW50aWdyYXYgQkI6IDIwMDZBbnRpZ3JhdiBCQlZlcnNpb24gMS4wMDBBbnRpZ3JhdkJCQW50aWdyYXYgQkIgaXMgYSB0cmFkZW1hcmsgb2YgTmF0ZSBQaWVrb3MuIEJsYW1ib3QuY29tLk5hdGUgUGlla29zLiBCbGFtYm90LmNvbU5hdGUgUGlla29zQ29weXJpZ2h0IChjKSAyMDA2IGJ5IE5hdGUgUGlla29zLiBCbGFtYm90LmNvbS4gQWxsIHJpZ2h0cyByZXNlcnZlZC5odHRwOi8vd3d3LmJsYW1ib3QuY29taHR0cDovL3d3dy5ibGFtYm90LmNvbS9saWNlbnNlLnNodG1sQW50aWdyYXYgQkI=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":0,"total":131},{"value":"LkNSVCRYQ0FB","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"LkNSVCRYSUE=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"LkNSVCRYSUFB","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"LkNSVCRYSUFD","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"LkNSVCRYSVo=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"LkNSVCRYTEE=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"LkNSVCRYTFo=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"LkNSVCRYUEE=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"LkNSVCRYUFo=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"LmdmaWRzJHk=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"LnJkYXRhJHN4ZGF0YQ==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"LnJkYXRhJHp6emRiZw==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"LnVzaFBycGVzc1c=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"L2xpY2VucC5zPm1s","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"L1NIQTE2R2Z4KHlhfHo=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"$28","type":"Ansi","source":"PCAP Processing","process":null,"filename":"network.pcap","compromised":null,"detection_total":null,"total":null},{"value":"L3oqb3Q3LDd4","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"MF8wX18nX19fdQ==","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_2.png","compromised":null,"detection_total":null,"total":null},{"value":"MjZkMTEzNDdmMzY0ZGM1NTQ1ZjQyMDIwNGIwMjAzZDJfKg==","type":"Unicode","source":"Runtime Data","process":"cr-piriform.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"MkRFRUAyMiAwRg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"My0wNCQoX10=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"MzMzM2E5YDQ0NDRgOTk=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"M25ebGpgTGhi","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"NS4+YzAxNCA3b3Y=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"NnJeOU48clY8cA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"NzowMDYgYnkgTmF0ZSBQaWVrb3MuIEJsYW1ib3Q=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"OiBJViBsZW5ndGg=","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"OiBOb25ibG9ja2luZyBpbnB1dCBpcyBub3QgaW1wbGVtZW50ZWQgYnkgdGhpcyBvYmplY3Qu","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"OiB0aGlzIG9iamVjdCBjYW5ub3QgdXNlIGEgbnVsbCBJVg==","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"OiB0aGlzIG9iamVjdCBkb2VzJ3Qgc3VwcG9ydCBhIHNwZWNpYWwgbGFzdCBibG9jaw==","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"OiB0aGlzIG9iamVjdCBkb2Vzbid0IHN1cHBvcnQgbXVsdGlwbGUgY2hhbm5lbHM=","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"OiB0aGlzIG9iamVjdCBkb2Vzbid0IHN1cHBvcnQgcmVzeW5jaHJvbml6YXRpb24=","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"OiB0aGlzIG9iamVjdCByZXF1aXJlcyBhbiBJVg==","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Ojs8PT4/QEFCQ0RFRkdISUpLTE1OT1BRUlNUVVZXWFl9","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiIHN0YW5kYWxvbmU9InllcyI/Pjxhc3NlbWJseSB4bWxucz0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTphc20udjEiIG1hbmlmZXN0VmVyc2lvbj0iMS4wIj48YXNzZW1ibHlJZGVudGl0eSB2ZXJzaW9uPSIxLjAuMC4wIiBwcm9jZXNzb3JBcmNoaXRlY3R1cmU9Ing4NiIgbmFtZT0iQ09SRSIgdHlwZT0id2luMzIiIC8+IDxkZXNjcmlwdGlvbj5DT1JFPC9kZXNjcmlwdGlvbj48ZGVwZW5kZW5jeT48ZGVwZW5kZW50QXNzZW1ibHk+PGFzc2VtYmx5SWRlbnRpdHkgdHlwZT0id2luMzIiIG5hbWU9Ik1pY3Jvc29mdC5XaW5kb3dzLkNvbW1vbi1Db250cm9scyIgdmVyc2lvbj0iNi4wLjAuMCIgcHJvY2Vzc29yQXJjaGl0ZWN0dXJlPSJ4ODYiIHB1YmxpY0tleVRva2VuPSI2NTk1YjY0MTQ0Y2NmMWRmIiBsYW5ndWFnZT0iKiIgLz48L2RlcGVuZGVudEFzc2VtYmx5PjwvZGVwZW5kZW5jeT48L2Fzc2VtYmx5Pg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"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","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"$29","type":"Ansi","source":"PCAP Processing","process":null,"filename":"network.pcap","compromised":null,"detection_total":null,"total":null},{"value":"PExPMmZSKWQ=","type":"Ansi","source":"PCAP Processing","process":null,"filename":"network.pcap","compromised":null,"detection_total":null,"total":null},{"value":"PTVkLkxxLzJSO2FJ","type":"Ansi","source":"PCAP Processing","process":null,"filename":"network.pcap","compromised":null,"detection_total":null,"total":null},{"value":"P19fX19fX19fX19fMDBfX19fXw==","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_2.png","compromised":null,"detection_total":null,"total":null},{"value":"W2xYUnp5cyA7QQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"XFNlc3Npb25zXDFcV2luZG93c1xBcGlQb3J0","type":"Unicode","source":"Runtime Data","process":"cr-piriform.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XWwsYyFnRTss","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X18sLCwsXywsLCws","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_2.png","compromised":null,"detection_total":null,"total":null},{"value":"X19fX19fX19fX19fX18wP19fcF9MPzBfXyxfX19fX18wX19fX19fY2NfXw==","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_0.png","compromised":null,"detection_total":null,"total":null},{"value":"X19fX19fX19fX19fX19f","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_2.png","compromised":null,"detection_total":null,"total":null},{"value":"X19fX19fZV8wXzA=","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_2.png","compromised":null,"detection_total":null,"total":null},{"value":"X19fX0wwX18w","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_2.png","compromised":null,"detection_total":null,"total":null},{"value":"X19DeHhGcmFtZUhhbmRsZXIz","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"X19wX19jb21tb2Rl","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"X19SVER5bmFtaWNDYXN0","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"X19zZXR1c2VybWF0aGVycg==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"X19zdGRfZXhjZXB0aW9uX2NvcHk=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"X19zdGRfZXhjZXB0aW9uX2Rlc3Ryb3k=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"X19zdGRfdGVybWluYXRl","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"X19zdGRfdHlwZV9pbmZvX2NvbXBhcmU=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"X19zdGRfdHlwZV9pbmZvX25hbWU=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"X191bmNhdWdodF9leGNlcHRpb24=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"X192Y3J0X0luaXRpYWxpemVDcml0aWNhbFNlY3Rpb25FeA==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"X2FsaWduZWRfZnJlZQ==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"X2FsaWduZWRfbWFsbG9j","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"X2NhbGxuZXdo","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"X2NvbmZpZ3RocmVhZGxvY2FsZQ==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"X2NvbmZpZ3VyZV9uYXJyb3dfYXJndg==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"X2NvbnRyb2xmcF9z","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"X2NydF9hdGV4aXQ=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"X0N4eFRocm93RXhjZXB0aW9u","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"X0RIQiBKJGNh","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X2V4Y2VwdF9oYW5kbGVyNF9jb21tb24=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"X2dldF9uYXJyb3dfd2lubWFpbl9jb21tYW5kX2xpbmU=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"X2lfJywsMCwwX18sX2VfMA==","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_0.png","compromised":null,"detection_total":null,"total":null},{"value":"X2luaXRpYWxpemVfbmFycm93X2Vudmlyb25tZW50","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"X2luaXRpYWxpemVfb25leGl0X3RhYmxl","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"X2luaXR0ZXJt","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"X2luaXR0ZXJtX2U=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"X2ludmFsaWRfcGFyYW1ldGVyX25vaW5mbw==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"X2ludmFsaWRfcGFyYW1ldGVyX25vaW5mb19ub3JldHVybg==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"X2wwMGlfX19fX3ZfTDBfXzBl","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_2.png","compromised":null,"detection_total":null,"total":null},{"value":"X2xvY2tfbG9jYWxlcw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X01iV3lQZTJccA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X3B1cmVjYWxs","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"X3JlZ2lzdGVyX29uZXhpdF9mdW5jdGlvbg==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"X3JlZ2lzdGVyX3RocmVhZF9sb2NhbF9leGVfYXRleGl0X2NhbGxiYWNr","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"X3NlaF9maWx0ZXJfZXhl","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"X3NldF9hcHBfdHlwZQ==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"X3NldF9mbW9kZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X3NldF9uZXdfaGFuZGxlcg==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"X3NldF9uZXdfbW9kZQ==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"X3N0cnVwcl9z","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"X3VubG9ja19sb2NhbGVz","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YGhrMTA0W3Jo","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"YG82Sy5fOj1a","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"YFZ6VHc9Pjpy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QUJDREVGR0hJSktNTlBRUlNUVVZXWFlaMjM0NTY3ODk=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"QWNxdWlyZVNSV0xvY2tFeGNsdXNpdmU=","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"QWRkRm9udE1lbVJlc291cmNlRXg=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"QURWQVBJMzIuZGxs","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QUV4dGVuZGVkIE1vZHVsZTo=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QWxnb3JpdGhtUGFyYW1ldGVyc0Jhc2U6IHBhcmFtZXRlciAi","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"QWxJUHIwZ3JhbXM=","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_2.png","compromised":null,"detection_total":null,"total":null},{"value":"YW5zZm9ybWF0aW9uOiB0aGlzIG9iamVjdCBkb2Vzbid0IHN1cHBvcnQgcmFuZG9tIGFjY2Vzcw==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"QW50aWdyYXYgQkI=","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXBpLW1zLXdpbi1jcnQtaGVhcC1sMS0xLTAuZGxs","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"YXBpLW1zLXdpbi1jcnQtbG9jYWxlLWwxLTEtMC5kbGw=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"YXBpLW1zLXdpbi1jcnQtbWF0aC1sMS0xLTAuZGxs","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"YXBpLW1zLXdpbi1jcnQtcnVudGltZS1sMS0xLTAuZGxs","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"YXBpLW1zLXdpbi1jcnQtc3RkaW8tbDEtMS0wLmRsbA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"YXBpLW1zLXdpbi1jcnQtc3RyaW5nLWwxLTEtMC5kbGw=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"YXBpLW1zLXdpbi1jcnQtdGltZS1sMS0xLTAuZGxs","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"YXBpLW1zLXdpbi1jcnQtdXRpbGl0eS1sMS0xLTAuZGxs","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"YXJyYXkgbmV3","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QXJyYXlTaW5rOiBtaXNzaW5nIE91dHB1dEJ1ZmZlciBhcmd1bWVudA==","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"QXVkaW9TcnY=","type":"Unicode","source":"Runtime Data","process":"cr-piriform.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"YmFkIGFsbG9jYXRpb24=","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YmFkIGFycmF5IG5ldyBsZW5ndGg=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"QmVnaW5EZWZlcldpbmRvd1Bvcw==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"QmVnaW5QYWludA==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Qml0QnVja2V0","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"QklUTUFQLF5c","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QmxvY2tQYWRkaW5nU2NoZW1l","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Qmxvd2Zpc2g=","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"QnVmZmVyZWRUcmFuc2Zvcm1hdGlvbjogdGhpcyBvYmplY3QgZG9lc24ndCBhbGxvdyBpbnB1dA==","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"QnVmZmVyZWRUcmFuc2Zvcm1hdGlvbjogdGhpcyBvYmplY3QgaXMgbm90IGF0dGFjaGFibGU=","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Ylh0MSI6UTw1Tw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"YzpcY3J5cHRvcHA1NjJcY3J5cHRsaWIuaA==","type":"Unicode","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"QzpcY3J5cHRvcHA1NjJcbW9kZXMuaA==","type":"Unicode","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YzpcY3J5cHRvcHA1NjJcc2VjYmxvY2suaA==","type":"Unicode","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q2FsbFdpbmRvd1Byb2NB","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q0NsZWFuZXIgdjU=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q0VJUEVuYWJsZQ==","type":"Unicode","source":"Runtime Data","process":"cr-piriform.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q2lwaGVyTW9kZUJhc2U6IGZlZWRiYWNrIHNpemUgY2Fubm90IGJlIHNwZWNpZmllZCBmb3IgdGhpcyBjaXBoZXIgbW9kZQ==","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q2xvbmUoKSBpcyBub3QgaW1wbGVtZW50ZWQgeWV0Lg==","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q2xvc2VDbGlwYm9hcmQ=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q2xvc2VIYW5kbGU=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q2xvc2VUaHJlYWRwb29sVGltZXI=","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q2xvc2VUaHJlYWRwb29sV2FpdA==","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q2xvc2VUaHJlYWRwb29sV29yaw==","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q29tK0VuYWJsZWQ=","type":"Unicode","source":"Runtime Data","process":"cr-piriform.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q09NQ1RMMzIuZGxs","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q29tcGFyZVN0cmluZ0V4","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q29tcGF0RGxs","type":"Unicode","source":"Runtime Data","process":"cr-piriform.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29weVJlY3Q=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q09SRSBwcm91ZGx5IHByZXNlbnRzIFBpcmlmb3JtIE11bHRpR2VuLi4uICAgICAgICAgICAgICAgICBHcmVldHogdG8gbXkgbWF0ZXMsIHlvdSBrbm93IHdobyB5b3UgYXJlLi4u","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q291bGQgbm90IGNyZWF0ZSB3aW5kb3ch","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q291bGQgbm90IHJlZ2lzdGVyIGNsYXNzIQ==","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlQ29tcGF0aWJsZUJpdG1hcA==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlQ29tcGF0aWJsZURD","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlRXZlbnRFeFc=","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlRXZlbnRX","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlRm9udEE=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlUGF0dGVybkJydXNo","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlU2VtYXBob3JlRXhX","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlU2VtYXBob3JlVw==","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlU29saWRCcnVzaA==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlU3RyZWFtT25IR2xvYmFs","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlU3ltYm9saWNMaW5rVw==","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlVGhyZWFk","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlVGhyZWFkcG9vbFRpbWVy","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlVGhyZWFkcG9vbFdhaXQ=","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlVGhyZWFkcG9vbFdvcms=","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlV2luZG93RXhB","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q3J5cHRBY3F1aXJlQ29udGV4dEE=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q3J5cHRDcmVhdGVIYXNo","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q3J5cHREZXN0cm95SGFzaA==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q3J5cHRHZXRIYXNoUGFyYW0=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q3J5cHRIYXNoRGF0YQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q3J5cHRSZWxlYXNlQ29udGV4dA==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q1dESWxsZWdhbEluRExMU2VhcmNo","type":"Unicode","source":"Runtime Data","process":"cr-piriform.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"ZGN5IT0ials=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RGVidWdIZWFwRmxhZ3M=","type":"Unicode","source":"Runtime Data","process":"cr-piriform.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGVmZXJXaW5kb3dQb3M=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RGVmcmFnZ2xlciB2Mg==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RGVmV2luZG93UHJvY0E=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RGVsZXRlQ3JpdGljYWxTZWN0aW9u","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RGVsZXRlT2JqZWN0","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"ZGVxdWU8VD4gdG9vIGxvbmc=","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RGVzdHJveVdpbmRvdw==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"ZEZNO2hGUzF2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RGlzYWJsZU1ldGFGaWxlcw==","type":"Unicode","source":"Runtime Data","process":"cr-piriform.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGlzYWJsZVVzZXJNb2RlQ2FsbGJhY2tGaWx0ZXI=","type":"Unicode","source":"Runtime Data","process":"cr-piriform.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGlzcGF0Y2hNZXNzYWdlQQ==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"ZHBvb2xUaW1lclY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RHJhd1RleHRB","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RS1tYWxJTWU1NWE5ZQ==","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_2.png","compromised":null,"detection_total":null,"total":null},{"value":"RTRENDUyNjU5d0lu","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"ZWZQZ2dsIzI+REY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RW1wdHlDbGlwYm9hcmQ=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RW5hYmxlV2luZG93","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RW5kRGVmZXJXaW5kb3dQb3M=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RW50ZXJDcml0aWNhbFNlY3Rpb24=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"ZXNlcnZlZC5Bbg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"ZXNmNFF1WnlQ","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"ZXQpbmhxQz1J","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"ZXhjZWVkcyB0aGUgbWF4aW11bSBvZg==","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RXhpdFByb2Nlc3M=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RXh0ZW5kZWQgTW9kdWxlOiBDb3JhMTQ=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RltbRFtaRVtbRVpb","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"ZkFrRFtjTEFtdw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"ZmNxLUpQOCFP","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RmlsdGVyOEdDdXJyZW50UA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RmlsdGVyV2l0aEJ1ZmZlcmVkSW5wdXQ=","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RmlsdGVyV2l0aEJ1ZmZlcmVkSW5wdXQ6IGludmFsaWQgYnVmZmVyIHNpemU=","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RmluZFJlc291cmNlQQ==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Rmlwc0FsZ29yaXRobVBvbGljeQ==","type":"Unicode","source":"Runtime Data","process":"cr-piriform.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Rml4ZWRFZGl0","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RmxzR2V0VmFsdWU=","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RmxzU2V0VmFsdWU=","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Rmx1c2hQcm9jZXNzV3JpdGVCdWZmZXJz","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Rm9yY2VLZXlQcm90ZWN0aW9u","type":"Unicode","source":"Runtime Data","process":"cr-piriform.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RlAjdURgPkMj","type":"Ansi","source":"PCAP Processing","process":null,"filename":"network.pcap","compromised":null,"detection_total":null,"total":null},{"value":"RnJlZUxpYnJhcnlXaGVuQ2FsbGJhY2tSZXR1cm5z","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RnJlZVJlc291cmNl","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"ZyhTVFp1PWwl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R0RJMzIuZGxs","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2RpcEFsbG9j","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2RpcENsb25lSW1hZ2U=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2RpcENyZWF0ZUJpdG1hcEZyb21TdHJlYW0=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2RpcENyZWF0ZUhCSVRNQVBGcm9tQml0bWFw","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2RpcERpc3Bvc2VJbWFnZQ==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Z2RpcGx1cy5kbGw=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2RpcGx1c1NodXRkb3du","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2RpcGx1c1N0YXJ0dXA=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Z2VnZ2VlZy53YXY=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Z2VudWluZW1pY3Jvc29mdA==","type":"Ansi","source":"PCAP Processing","process":null,"filename":"network.pcap","compromised":null,"detection_total":null,"total":null},{"value":"R2V0Q2FwdHVyZQ==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0Q2xhc3NJbmZvQQ==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0Q2xpZW50UmVjdA==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0Q3VycmVudFBhY2thZ2VJZA==","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0Q3VycmVudFByb2Nlc3M=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0Q3VycmVudFByb2Nlc3NJZA==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0Q3VycmVudFByb2Nlc3Nvck51bWJlcg==","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0Q3VycmVudFRocmVhZElk","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RGV2aWNlQ2Fwcw==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RGxnSXRlbQ==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RGxnSXRlbVRleHRB","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RmlsZUluZm9ybWF0aW9uQnlIYW5kbGVFeA==","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0TGFzdEVycm9y","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0TG9jYWxlSW5mb0V4","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0TWVzc2FnZUE=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0TW9kdWxlSGFuZGxlVw==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0T2JqZWN0QQ==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0UGFyZW50","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0UHJvY0FkZHJlc3M=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0U3RhcnR1cEluZm9X","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0U3lzQ29sb3I=","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0U3lzdGVtTWV0cmljcw==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0U3lzdGVtVGltZUFzRmlsZVRpbWU=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0U3lzdGVtVGltZVByZWNpc2VBc0ZpbGVUaW1l","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0VGV4dEV4dGVudFBvaW50MzJB","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0VGlja0NvdW50","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0VGlja0NvdW50NjQ=","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0V2luZG93TG9uZ0E=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0V2luZG93UmVjdA==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0V2luZG93VGV4dEE=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0V2luZG93VGV4dExlbmd0aEE=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2xvYmFsQWxsb2M=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2xvYmFsTG9jaw==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2xvYmFsVW5sb2Nr","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SG92ZXJCdG4=","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SFRUUC8xLjEgMzAyIE1vdmVkIFRlbXBvcmFyaWx5Q2FjaGUtQ29udHJvbDogbm8tY2FjaGVQcmFnbWE6IG5vLWNhY2hlRXhwaXJlczogLTFMb2NhdGlvbjogaHR0cDovL2dlbnVpbmUubWljcm9zb2Z0LmNvbS9yZXBvcnRpbmcvWG1sRXZlbnQuYXNoeD92PTNTZXJ2ZXI6IE1pY3Jvc29mdC1JSVMvOC41WC1Bc3BOZXRNdmMtVmVyc2lvbjogNS4yWC1Bc3BOZXQtVmVyc2lvbjogNC4wLjMwMzE5WC1Qb3dlcmVkLUJ5OiBBU1AuTkVUQ29udGVudC1MZW5ndGg6IDBEYXRlOiBNb24sIDE5IE1hciAyMDE4IDAwOjE0OjU1IEdNVENvbm5lY3Rpb246IGtlZXAtYWxpdmU=","type":"Ansi","source":"PCAP Processing","process":null,"filename":"network.pcap","compromised":null,"detection_total":0,"total":66},{"value":"SFRUUC8xLjEgMzAyIE1vdmVkIFRlbXBvcmFyaWx5Q2FjaGUtQ29udHJvbDogbm8tY2FjaGVQcmFnbWE6IG5vLWNhY2hlRXhwaXJlczogLTFMb2NhdGlvbjogaHR0cHM6Ly92YWxpZGF0aW9uLnNscy5taWNyb3NvZnQuY29tL1NMV0dBL3Nsd2dhLmFzbXhTZXJ2ZXI6IE1pY3Jvc29mdC1JSVMvOC41WC1Bc3BOZXRNdmMtVmVyc2lvbjogNS4yWC1Bc3BOZXQtVmVyc2lvbjogNC4wLjMwMzE5WC1Qb3dlcmVkLUJ5OiBBU1AuTkVUQ29udGVudC1MZW5ndGg6IDBEYXRlOiBNb24sIDE5IE1hciAyMDE4IDAwOjE0OjUxIEdNVENvbm5lY3Rpb246IGtlZXAtYWxpdmU=","type":"Ansi","source":"PCAP Processing","process":null,"filename":"network.pcap","compromised":null,"detection_total":null,"total":null},{"value":"SFRUUC8xLjEgMzAyIE1vdmVkIFRlbXBvcmFyaWx5Q2FjaGUtQ29udHJvbDogbm8tY2FjaGVQcmFnbWE6IG5vLWNhY2hlRXhwaXJlczogLTFMb2NhdGlvbjogaHR0cHM6Ly92YWxpZGF0aW9uLnNscy5taWNyb3NvZnQuY29tL1NMV0dBL3Nsd2dhLmFzbXhTZXJ2ZXI6IE1pY3Jvc29mdC1JSVMvOC41WC1Bc3BOZXRNdmMtVmVyc2lvbjogNS4yWC1Bc3BOZXQtVmVyc2lvbjogNC4wLjMwMzE5WC1Qb3dlcmVkLUJ5OiBBU1AuTkVUQ29udGVudC1MZW5ndGg6IDBEYXRlOiBNb24sIDE5IE1hciAyMDE4IDAwOjE0OjU1IEdNVENvbm5lY3Rpb246IGtlZXAtYWxpdmU=","type":"Ansi","source":"PCAP Processing","process":null,"filename":"network.pcap","compromised":null,"detection_total":null,"total":null},{"value":"aWlUSFhNTDpjb20uYUcueG1w","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"aWlUWHRYTUw6Y29tLmFkb2JlLnhtcA==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SW1hZ2UgUGF0aA==","type":"Unicode","source":"Runtime Data","process":"cr-piriform.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SW5pdENvbW1vbkNvbnRyb2xzRXg=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SW5pdGlhbGl6ZUNvbmRpdGlvblZhcmlhYmxl","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SW5pdGlhbGl6ZUNyaXRpY2FsU2VjdGlvbkFuZFNwaW5Db3VudA==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SW5pdGlhbGl6ZUNyaXRpY2FsU2VjdGlvbkV4","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SW5pdGlhbGl6ZVNMaXN0SGVhZA==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SW5pdGlhbGl6ZVNSV0xvY2s=","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SW5pdE9uY2VFeGVjdXRlT25jZQ==","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SW50ZXJsb2NrZWRFeGNoYW5nZQ==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"aW52YWxpZCBzdHJpbmcgcG9zaXRpb24=","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SW52YWxpZGF0ZVJlY3Q=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SW9yJjJAR2py","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"aXMgbGVzcyB0aGFuIHRoZSBtaW5pbXVtIG9m","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"aXMgbm90IGEgdmFsaWQga2V5IGxlbmd0aA==","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SXNEZWJ1Z2dlclByZXNlbnQ=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SXNQcm9jZXNzb3JGZWF0dXJlUHJlc2VudA==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SltvTTYsU1VK","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"ak5Qd2NPOEA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"azQ8JUBfNCojfnl+","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"azprJkFjcXVpciE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"S0NTX1BARElORw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"S0VSTkVMMzIuRExM","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"a2VybmVsMzIuZGxs","type":"Unicode","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"S2V5Z2VuTGF5ZXI=","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"bCwwNDRELDhATCxIKGBM","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"bDVfSl90N24zbm1zSm5KLidfXydfcw==","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_2.png","compromised":null,"detection_total":null,"total":null},{"value":"bDZtTm9CLn5v","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TGFuZ3VhZ2UgSG90a2V5","type":"Unicode","source":"Runtime Data","process":"cr-piriform.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TGF5b3V0IEhvdGtleQ==","type":"Unicode","source":"Runtime Data","process":"cr-piriform.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TENNYXBTdHJpbmdFeA==","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"TGVhdmVDcml0aWNhbFNlY3Rpb24=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"bGlJMS9SRn1A","type":"Ansi","source":"PCAP Processing","process":null,"filename":"network.pcap","compromised":null,"detection_total":null,"total":null},{"value":"TG9hZEFwcEluaXRfRExMcw==","type":"Unicode","source":"Runtime Data","process":"cr-piriform.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TG9hZEN1cnNvckE=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"TG9hZEljb25B","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"TG9hZExpYnJhcnlB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TG9hZFJlc291cmNl","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"TG9ja1Jlc291cmNl","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"TE9PUDMzU0QwNw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TE9PUDMzU0QwNy53YXY=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"bFNQMHoiciBPPE83","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"bHN0cmNweUE=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"bH1GbHNBbGxvYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TSB5aWkoaVF1Jw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"bTpNYW51ZmFjdHVyZXI8L25hbWU+PHR5cGU+SW5mbzwvdHlwZT48dmFsdWU+aW5ub3RlayBHbWJIPC92YWx1ZT48L3Rva2VuPjx0b2tlbj48bmFtZT5XTUk6V2luMzJfQ29tcHV0ZXJTeXN0ZW06TW9kZWw8L25hbWU+PHR5cGU+SW5mbzwvdHlwZT48dmFsdWU+VmlydHVhbEJveDwvdmFsdWU+PC90b2tlbj48dG9rZW4+PG5hbWU+V01JOldpbjMyX09wZXJhdGluZ1N5c3RlbTpJbnN0YWxsRGF0ZTwvbmFtZT48dHlwZT5JbmZvPC90eXBlPjx2YWx1ZT4yMDE3MTIwMzEyMDYxNi4wMDAwMDArMDYwPC92YWx1ZT48L3Rva2VuPjwvY2xpZW50dG9rZW4+","type":"Ansi","source":"PCAP Processing","process":null,"filename":"network.pcap","compromised":null,"detection_total":null,"total":null},{"value":"bV9hbGxvY2F0ZWQ=","type":"Unicode","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"TV9jcjBzMCxfY2Vs","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_2.png","compromised":null,"detection_total":null,"total":null},{"value":"TV9jcjBzMCxXMHJk","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_2.png","compromised":null,"detection_total":null,"total":null},{"value":"bV9yZWdpc3Rlci5zaXplKCkgPiAw","type":"Unicode","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"bWFqb3JjaG9pci53YXY=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"TWFwV2luZG93UG9pbnRz","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"TWF4UnBjU2l6ZQ==","type":"Unicode","source":"Runtime Data","process":"cr-piriform.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWF4U3hTSGFzaENvdW50","type":"Unicode","source":"Runtime Data","process":"cr-piriform.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWVzc2FnZUJveEE=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"TWljcm9zb2Z0IEVuaGFuY2VkIENyeXB0b2dyYXBoaWMgUHJvdmlkZXIgdjEuMA==","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"TWlsa3lUMFFv","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"bWlub3JjaG9pci53YXY=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"TVMgU3lzdGVtRXg=","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"TmFtZVZhbHVlUGFpcnM6IHR5cGUgbWlzbWF0Y2ggZm9yICc=","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"TmV3QXBwMCxudG1lbnQ=","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_2.png","compromised":null,"detection_total":null,"total":null},{"value":"bmV3c2FtcGxlcy53YXY=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Tmd2Y29udGFjdA==","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_2.png","compromised":null,"detection_total":null,"total":null},{"value":"Tz98dn1xOyd2XA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"b2xlMzIuZGxs","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"T3BlbkNsaXBib2FyZA==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"b3JGZTBeNGtt","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"T3V0cHV0QnVmZmVy","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UE9TVCAvZndsaW5rLz9MaW5rSWQ9MTUxNjQyIEhUVFAvMS4xQ29ubmVjdGlvbjogS2VlcC1BbGl2ZUFjY2VwdDogdGV4dC8qVXNlci1BZ2VudDogU0xTU29hcENsaWVudENvbnRlbnQtTGVuZ3RoOiAwSG9zdDogZ28ubWljcm9zb2Z0LmNvbQ==","type":"Ansi","source":"PCAP Processing","process":null,"filename":"network.pcap","compromised":null,"detection_total":null,"total":null},{"value":"UE9TVCAvZndsaW5rLz9MaW5rSWQ9MTUxNjQ1IEhUVFAvMS4xQ29ubmVjdGlvbjogS2VlcC1BbGl2ZUFjY2VwdDogKi8qVXNlci1BZ2VudDogV0FUQ2xpZW50Q29udGVudC1MZW5ndGg6IDMyMjlIb3N0OiBnby5taWNyb3NvZnQuY29t","type":"Ansi","source":"PCAP Processing","process":null,"filename":"network.pcap","compromised":null,"detection_total":null,"total":null},{"value":"UG9zdE1lc3NhZ2VB","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UG9zdFF1aXRNZXNzYWdl","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UHJlZmVyRXh0ZXJuYWxNYW5pZmVzdA==","type":"Unicode","source":"Runtime Data","process":"cr-piriform.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJlc3MgZ2VuZXJhdGUuLi4=","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UHJpdmF0ZUtleUxpZmV0aW1lU2Vjb25kcw==","type":"Unicode","source":"Runtime Data","process":"cr-piriform.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJpdktleUNhY2hlTWF4SXRlbXM=","type":"Unicode","source":"Runtime Data","process":"cr-piriform.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJpdktleUNhY2hlUHVyZ2VJbnRlcnZhbFNlY29uZHM=","type":"Unicode","source":"Runtime Data","process":"cr-piriform.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"cHRaUjZVfkZr","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UFZBQkNERUZHSElKS01O","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"cVQhXzQ0KCNn","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UXVlcnlQZXJmb3JtYW5jZUNvdW50ZXI=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UmVjdXZhIHYx","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UmVnaXN0ZXJDbGFzc0E=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UmVnaXN0ZXJDbGFzc0V4QQ==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UmVsZWFzZUNhcHR1cmU=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UmVsZWFzZURD","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UmVsZWFzZVNSV0xvY2tFeGNsdXNpdmU=","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UmVtb3ZlRm9udE1lbVJlc291cmNlRXg=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UmVzZXRFdmVudA==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UmVzdG9yZURD","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"cm82c3MkVC5taW5SMw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UnsjKDpSPDUoM14=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"cy9GOyNNK0Q=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U19sdmVybF85aHQ=","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_2.png","compromised":null,"detection_total":null,"total":null},{"value":"U2FmZURsbFNlYXJjaE1vZGU=","type":"Unicode","source":"Runtime Data","process":"cr-piriform.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2FmZVByb2Nlc3NTZWFyY2hNb2Rl","type":"Unicode","source":"Runtime Data","process":"cr-piriform.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2VsZWN0T2JqZWN0","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U2VuZE1lc3NhZ2VB","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U2V0QmtNb2Rl","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U2V0QnJ1c2hPcmdFeA==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U2V0Q2FwdHVyZQ==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U2V0Q2xpcGJvYXJkRGF0YQ==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U2V0RGxnSXRlbVRleHRB","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U2V0RmlsZUluZm9ybWF0aW9uQnlIYW5kbGU=","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U2V0Rm9yZWdyb3VuZFdpbmRvdw==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U2V0TGF5ZXJlZFdpbmRvd0F0dHJpYnV0ZXM=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U2V0VGV4dENvbG9y","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U2V0VGhyZWFkcG9vbFRpbWVy","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U2V0VGhyZWFkcG9vbFdhaXQ=","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U2V0VGhyZWFkUHJpb3JpdHk=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U2V0VW5oYW5kbGVkRXhjZXB0aW9uRmlsdGVy","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U2V0V2luZG93TG9uZ0E=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U2V0V2luZG93UG9z","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U2hvd1dpbmRvdw==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U2l6ZW9mUmVzb3VyY2U=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U2xlZXBDb25kaXRpb25WYXJpYWJsZUNT","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U2xlZXBDb25kaXRpb25WYXJpYWJsZVNSVw==","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U3BlY2N5IHYx","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U3RyZWFtVHJhbnNmb3JtYXRpb246IHRoaXMgb2JqZWN0IGRvZXNuJ3Qgc3VwcG9ydCByYW5kb20gYWNjZXNz","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U3RyZWFtVHJhbnNmb3JtYXRpb25GaWx0ZXI6IGNpcGhlcnRleHQgbGVuZ3RoIGlzIG5vdCBhIG11bHRpcGxlIG9mIGJsb2NrIHNpemU=","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U3RyZWFtVHJhbnNmb3JtYXRpb25GaWx0ZXI6IGludmFsaWQgb25lcy1hbmQtemVyb3MgcGFkZGluZyBmb3VuZA==","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U3RyZWFtVHJhbnNmb3JtYXRpb25GaWx0ZXI6IGludmFsaWQgUEtDUyAjNyBibG9jayBwYWRkaW5nIGZvdW5k","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U3RyZWFtVHJhbnNmb3JtYXRpb25GaWx0ZXI6IFBLQ1NfUEFERElORyBhbmQgT05FX0FORF9aRVJPU19QQURESU5HIGNhbm5vdCBiZSB1c2VkIHdpdGg=","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U3RyZWFtVHJhbnNmb3JtYXRpb25GaWx0ZXI6IHBsYWludGV4dCBsZW5ndGggaXMgbm90IGEgbXVsdGlwbGUgb2YgYmxvY2sgc2l6ZSBhbmQgTk9fUEFERElORyBpcyBzcGVjaWZpZWQ=","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U3RyZWFtVHJhbnNmb3JtYXRpb25GaWx0ZXI6IHBsZWFzZSB1c2UgQXV0aGVudGljYXRlZEVuY3J5cHRpb25GaWx0ZXIgYW5kIEF1dGhlbnRpY2F0ZWREZWNyeXB0aW9uRmlsdGVyIGZvciBBdXRoZW50aWNhdGVkU3ltbWV0cmljQ2lwaGVy","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"c3RyaW5nIHRvbyBsb25n","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"c3RybmNweV9z","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U3VibWl0VGhyZWFkcG9vbFdvcms=","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"dCJyYXZSQlJlZ3Vccg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"dGVybWluYXRl","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VGVybWluYXRlUHJvY2Vzcw==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VGVybWluYXRlVGhyZWFk","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"dEVYdFNvZnR3YXJl","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VGhhZCdTeXNmbVRpbWVBczE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VHJhY2tNb3VzZUV2ZW50","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VHJhbnNsYXRlTWVzc2FnZQ==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VHJ5QWNxdWlyZVNSV0xvY2tFeGNsdXNpdmU=","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VFQ5ayIqI2l4","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VHVybk9mZlNQSUFuaW1hdGlvbnM=","type":"Unicode","source":"Runtime Data","process":"cr-piriform.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"dFZpYi9mQC9COCsm","type":"Unicode","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"dVxqSF5qWjUo","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VV8uIW0sYywwLDAsb3V0LDAwaywsbw==","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_2.png","compromised":null,"detection_total":null,"total":null},{"value":"VWtQVVwuPjNm","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VW5oYW5kbGVkRXhjZXB0aW9uRmlsdGVy","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VW5rbm93biBleGNlcHRpb24=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"dW50aXRsZWQud2F2","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"dW50aXRsZWQ0cS53YXY=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"dW50aXRsZWRhYWFhLndhdg==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"dW50aXRsZWRzaW4ud2F2","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VXBkYXRlTGF5ZXJlZFdpbmRvdw==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VXBkYXRlV2luZG93","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VVNFUjMyLmRsbA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"dXNlcjMyLmRsbA==","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VVUgZyw9JUhIJQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"ViEuWXN1Q3Yl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VjNzLm8+JjE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VmFsaWRhdGVSZWN0","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VmFsdWVOYW1lcw==","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VkNSVU5USU1FMTQwLmRsbA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VmlydHVhbEFsbG9j","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VmlydHVhbEZyZWU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VmlydHVhbFByb3RlY3Q=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VzVNME1wQ2VoaUh6MG17","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"V2FpdEZvclNpbmdsZU9iamVjdEV4","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"V2FpdEZvclRocmVhZHBvb2xUaW1lckNhbGxiYWNrcw==","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"V2FrZUFsbENvbmRpdGlvblZhcmlhYmxl","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"V2FrZUNvbmRpdGlvblZhcmlhYmxl","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"d2F2ZU91dENsb3Nl","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"d2F2ZU91dEdldFBvc2l0aW9u","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"d2F2ZU91dE9wZW4=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"d2F2ZU91dFByZXBhcmVIZWFkZXI=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"d2F2ZU91dFJlc2V0","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"d2F2ZU91dFVucHJlcGFyZUhlYWRlcg==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"d2F2ZU91dFdyaXRl","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"V0lOTU0uZGxs","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"WGt3YCgpICo=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"WFlaMjM0NTY3ODk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"eUxBY3F1TCk2Ow==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"eiMkJSYnKCkqKywtLi8wMTIzNDU2Nzg5","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"WltcXV5fYEFiYWg=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Wl9hXVQ6T3ZZ","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"ek5UY3prYzlkIj8+IDx4Og==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"e0xtLyx1Y0tJ","type":"Ansi","source":"PCAP Processing","process":null,"filename":"network.pcap","compromised":null,"detection_total":null,"total":null},{"value":"fXBBTVZEaXZwbG9i","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"fkI8X0NGOCB2NQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"fkRCQjwgWUJ0Q0M=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9","type":"Ansi","source":"Runtime Data","process":"cr-piriform.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9","type":"Ansi","source":"Runtime Data","process":"cr-piriform.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9Ly/Dr8K/wr0=","type":"Ansi","source":"Runtime Data","process":"cr-piriform.exe","filename":null,"compromised":null,"detection_total":null,"total":null}],"interesting":[{"value":"LD0lSEglPSxIS0soIC04KUhIKDosSEpKKA==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Ljo6IENPUkUgOjou","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Ljo6IENPUkUgOjouOlByb2dyYW06UGlyaWZvcm0gTXVsdGlHZW46UHJvdGVjdGlvbjpCbG93ZmlzaC9TSEExOkdmeDp5YXlpejpTZng6U3Ryb2JlIC0gQ29yYTE0","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVUJsb2NraW5nSW5wdXRPbmx5QEJ1ZmZlcmVkVHJhbnNmb3JtYXRpb25AQ3J5cHRvUFBAQA==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVUJsb2NrUGFkZGluZ1NjaGVtZURlZkBDcnlwdG9QUEBA","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVUJsb3dmaXNoX0luZm9AQ3J5cHRvUFBAQA==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVUZpbHRlclB1dFNwYWNlSGVscGVyQENyeXB0b1BQQEA=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVUlucHV0UmVqZWN0ZWRAPyRJbnB1dFJlamVjdGluZ0BWQnVmZmVyZWRUcmFuc2Zvcm1hdGlvbkBDcnlwdG9QUEBAQENyeXB0b1BQQEA=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVU5vQ2hhbm5lbFN1cHBvcnRAQnVmZmVyZWRUcmFuc2Zvcm1hdGlvbkBDcnlwdG9QUEBA","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kQWxnb3JpdGhtSW1wbEBWPyRTaW1wbGVLZXlpbmdJbnRlcmZhY2VJbXBsQFY/JFR3b0Jhc2VzQFZCbG9ja0NpcGhlckBDcnlwdG9QUEBAVUJsb3dmaXNoX0luZm9AMkBAQ3J5cHRvUFBAQFYxMkBAQ3J5cHRvUFBAQFYxMkBAQ3J5cHRvUFBAQA==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kQWxnb3JpdGhtSW1wbEBWQ0JDX0VuY3J5cHRpb25AQ3J5cHRvUFBAQFY/JENpcGhlck1vZGVGaW5hbFRlbXBsYXRlX0NpcGhlckhvbGRlckBWPyRCbG9ja0NpcGhlckZpbmFsQCQwQUBWQmFzZUBCbG93ZmlzaEBDcnlwdG9QUEBAQENyeXB0b1BQQEBWQ0JDX0VuY3J5cHRpb25AMkBAMkBAQ3J5cHRvUFBAQA==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kQWxnb3JpdGhtUGFyYW1ldGVyc1RlbXBsYXRlQFZDb25zdEJ5dGVBcnJheVBhcmFtZXRlckBDcnlwdG9QUEBAQENyeXB0b1BQQEA=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kQWxnb3JpdGhtUGFyYW1ldGVyc1RlbXBsYXRlQFc0QmxvY2tQYWRkaW5nU2NoZW1lQEJsb2NrUGFkZGluZ1NjaGVtZURlZkBDcnlwdG9QUEBAQENyeXB0b1BQQEA=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kQXV0b1NpZ25hbGluZ0BWQnVmZmVyZWRUcmFuc2Zvcm1hdGlvbkBDcnlwdG9QUEBAQENyeXB0b1BQQEA=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kYmFzaWNfc3RyaW5nQERVPyRjaGFyX3RyYWl0c0BEQHN0ZEBAVj8kYWxsb2NhdG9yQERAMkBAc3RkQEA=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kQmxvY2tDaXBoZXJGaW5hbEAkMEFAVkJhc2VAQmxvd2Zpc2hAQ3J5cHRvUFBAQEBDcnlwdG9QUEBA","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kQmxvY2tDaXBoZXJJbXBsQFVCbG93ZmlzaF9JbmZvQENyeXB0b1BQQEBWQmxvY2tDaXBoZXJAMkBAQ3J5cHRvUFBAQA==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kQnVmZmVybGVzc0BWQnVmZmVyZWRUcmFuc2Zvcm1hdGlvbkBDcnlwdG9QUEBAQENyeXB0b1BQQEA=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kQnVmZmVybGVzc0BWU2lua0BDcnlwdG9QUEBAQENyeXB0b1BQQEA=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kQ2lwaGVyTW9kZUZpbmFsVGVtcGxhdGVfQ2lwaGVySG9sZGVyQFY/JEJsb2NrQ2lwaGVyRmluYWxAJDBBQFZCYXNlQEJsb3dmaXNoQENyeXB0b1BQQEBAQ3J5cHRvUFBAQFZDQkNfRW5jcnlwdGlvbkAyQEBDcnlwdG9QUEBA","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kQ2xvbmFibGVJbXBsQFY/JEJsb2NrQ2lwaGVyRmluYWxAJDBBQFZCYXNlQEJsb3dmaXNoQENyeXB0b1BQQEBAQ3J5cHRvUFBAQFZCYXNlQEJsb3dmaXNoQDJAQENyeXB0b1BQQEA=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kRml4ZWRCbG9ja1NpemVAJDA3QENyeXB0b1BQQEA=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kRml4ZWRSb3VuZHNAJDBCQUBAQ3J5cHRvUFBAQA==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kSW5wdXRSZWplY3RpbmdAVkJ1ZmZlcmVkVHJhbnNmb3JtYXRpb25AQ3J5cHRvUFBAQEBDcnlwdG9QUEBA","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kT2JqZWN0SG9sZGVyQFY/JEJsb2NrQ2lwaGVyRmluYWxAJDBBQFZCYXNlQEJsb3dmaXNoQENyeXB0b1BQQEBAQ3J5cHRvUFBAQEBDcnlwdG9QUEBA","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kU2ltcGxlS2V5aW5nSW50ZXJmYWNlSW1wbEBWPyRUd29CYXNlc0BWQmxvY2tDaXBoZXJAQ3J5cHRvUFBAQFVCbG93ZmlzaF9JbmZvQDJAQENyeXB0b1BQQEBWMTJAQENyeXB0b1BQQEA=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kVHdvQmFzZXNAVkJsb2NrQ2lwaGVyQENyeXB0b1BQQEBVQmxvd2Zpc2hfSW5mb0AyQEBDcnlwdG9QUEBA","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kVmFyaWFibGVLZXlMZW5ndGhAJDBCQUAkMDMkMERJQCQwMCQwMyQwQUBAQ3J5cHRvUFBAQA==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVkFsZ29yaXRobUBDcnlwdG9QUEBA","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVkFsZ29yaXRobVBhcmFtZXRlcnNAQ3J5cHRvUFBAQA==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVkFsZ29yaXRobVBhcmFtZXRlcnNCYXNlQENyeXB0b1BQQEA=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVkFycmF5U2lua0BDcnlwdG9QUEBA","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVkF1dGhlbnRpY2F0ZWRTeW1tZXRyaWNDaXBoZXJAQ3J5cHRvUFBAQA==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVmJhZF9hbGxvY0BzdGRAQA==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVmJhZF9hcnJheV9uZXdfbGVuZ3RoQHN0ZEBA","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVkJhc2VAQmxvd2Zpc2hAQ3J5cHRvUFBAQA==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVkJpdEJ1Y2tldEBDcnlwdG9QUEBA","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVkJpdG1hcEBHZGlwbHVzQEA=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVkJsb2NrQ2lwaGVyQENyeXB0b1BQQEA=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVkJsb2NrT3JpZW50ZWRDaXBoZXJNb2RlQmFzZUBDcnlwdG9QUEBA","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVkJsb2NrVHJhbnNmb3JtYXRpb25AQ3J5cHRvUFBAQA==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVkJ1ZmZlcmVkVHJhbnNmb3JtYXRpb25AQ3J5cHRvUFBAQA==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVkJ5dGVBcnJheVBhcmFtZXRlckBDcnlwdG9QUEBA","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVkJ5dGVRdWV1ZUBDcnlwdG9QUEBA","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVkNCQ19FbmNyeXB0aW9uQENyeXB0b1BQQEA=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVkNCQ19Nb2RlQmFzZUBDcnlwdG9QUEBA","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVkNpcGhlck1vZGVCYXNlQENyeXB0b1BQQEA=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVkNsb25hYmxlQENyeXB0b1BQQEA=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVkNvbnN0Qnl0ZUFycmF5UGFyYW1ldGVyQENyeXB0b1BQQEA=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVkV4Y2VwdGlvbkBDcnlwdG9QUEBA","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVmV4Y2VwdGlvbkBzdGRAQA==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVkZpbHRlckBDcnlwdG9QUEBA","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVkZpbHRlcldpdGhCdWZmZXJlZElucHV0QENyeXB0b1BQQEA=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVkdkaXBsdXNCYXNlQEdkaXBsdXNAQA==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVkltYWdlQEdkaXBsdXNAQA==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVkludmFsaWRBcmd1bWVudEBDcnlwdG9QUEBA","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVkludmFsaWRDaXBoZXJ0ZXh0QENyeXB0b1BQQEA=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVkludmFsaWREYXRhRm9ybWF0QENyeXB0b1BQQEA=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVkludmFsaWRLZXlMZW5ndGhAQ3J5cHRvUFBAQA==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVmxlbmd0aF9lcnJvckBzdGRAQA==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVmxvZ2ljX2Vycm9yQHN0ZEBA","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVk1lc3NhZ2VRdWV1ZUBDcnlwdG9QUEBA","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVk5hbWVWYWx1ZVBhaXJzQENyeXB0b1BQQEA=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVk5vdENvcHlhYmxlQENyeXB0b1BQQEA=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVk5vdEltcGxlbWVudGVkQENyeXB0b1BQQEA=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVk51bGxOYW1lVmFsdWVQYWlyc0BDcnlwdG9QUEBA","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVm91dF9vZl9yYW5nZUBzdGRAQA==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVlBhcmFtZXRlck5vdFVzZWRAQWxnb3JpdGhtUGFyYW1ldGVyc0Jhc2VAQ3J5cHRvUFBAQA==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVlNpbXBsZUtleWluZ0ludGVyZmFjZUBDcnlwdG9QUEBA","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVlNpbmtAQ3J5cHRvUFBAQA==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVlN0cmVhbVRyYW5zZm9ybWF0aW9uQENyeXB0b1BQQEA=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVlN0cmVhbVRyYW5zZm9ybWF0aW9uRmlsdGVyQENyeXB0b1BQQEA=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVlN5bW1ldHJpY0NpcGhlckBDcnlwdG9QUEBA","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVnR5cGVfaW5mb0BA","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVlZhbHVlVHlwZU1pc21hdGNoQE5hbWVWYWx1ZVBhaXJzQENyeXB0b1BQQEA=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVldhaXRhYmxlQENyeXB0b1BQQEA=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVldhbGtlckBCeXRlUXVldWVAQ3J5cHRvUFBAQA==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVzRCbG9ja1BhZGRpbmdTY2hlbWVAQmxvY2tQYWRkaW5nU2NoZW1lRGVmQENyeXB0b1BQQEA=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"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","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":0,"total":131},{"value":"$2a","type":"Ansi","source":"PCAP Processing","process":null,"filename":"network.pcap","compromised":null,"detection_total":null,"total":null},{"value":"OiB0aGlzIG9iamVjdCBkb2VzJ3Qgc3VwcG9ydCBhIHNwZWNpYWwgbGFzdCBibG9jaw==","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"OiB0aGlzIG9iamVjdCBkb2Vzbid0IHN1cHBvcnQgbXVsdGlwbGUgY2hhbm5lbHM=","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"OiB0aGlzIG9iamVjdCBkb2Vzbid0IHN1cHBvcnQgcmVzeW5jaHJvbml6YXRpb24=","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"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","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"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","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"$2b","type":"Ansi","source":"PCAP Processing","process":null,"filename":"network.pcap","compromised":null,"detection_total":null,"total":null},{"value":"PTVkLkxxLzJSO2FJ","type":"Ansi","source":"PCAP Processing","process":null,"filename":"network.pcap","compromised":null,"detection_total":null,"total":null},{"value":"XFNlc3Npb25zXDFcV2luZG93c1xBcGlQb3J0","type":"Unicode","source":"Runtime Data","process":"cr-piriform.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"X19DeHhGcmFtZUhhbmRsZXIz","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"X19wX19jb21tb2Rl","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"X19zdGRfdHlwZV9pbmZvX2NvbXBhcmU=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"X19zdGRfdHlwZV9pbmZvX25hbWU=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"X2NvbmZpZ3RocmVhZGxvY2FsZQ==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"X2V4Y2VwdF9oYW5kbGVyNF9jb21tb24=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"X2dldF9uYXJyb3dfd2lubWFpbl9jb21tYW5kX2xpbmU=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"X2ludmFsaWRfcGFyYW1ldGVyX25vaW5mbw==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"X2ludmFsaWRfcGFyYW1ldGVyX25vaW5mb19ub3JldHVybg==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"X2xvY2tfbG9jYWxlcw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X3JlZ2lzdGVyX29uZXhpdF9mdW5jdGlvbg==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"X3JlZ2lzdGVyX3RocmVhZF9sb2NhbF9leGVfYXRleGl0X2NhbGxiYWNr","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"X3NlaF9maWx0ZXJfZXhl","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"X3VubG9ja19sb2NhbGVz","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YW5zZm9ybWF0aW9uOiB0aGlzIG9iamVjdCBkb2Vzbid0IHN1cHBvcnQgcmFuZG9tIGFjY2Vzcw==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YXBpLW1zLXdpbi1jcnQtaGVhcC1sMS0xLTAuZGxs","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"YXBpLW1zLXdpbi1jcnQtbG9jYWxlLWwxLTEtMC5kbGw=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"YXBpLW1zLXdpbi1jcnQtbWF0aC1sMS0xLTAuZGxs","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"YXBpLW1zLXdpbi1jcnQtcnVudGltZS1sMS0xLTAuZGxs","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"YXBpLW1zLXdpbi1jcnQtc3RkaW8tbDEtMS0wLmRsbA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"YXBpLW1zLXdpbi1jcnQtc3RyaW5nLWwxLTEtMC5kbGw=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"YXBpLW1zLXdpbi1jcnQtdGltZS1sMS0xLTAuZGxs","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"YXBpLW1zLXdpbi1jcnQtdXRpbGl0eS1sMS0xLTAuZGxs","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Qmxvd2Zpc2g=","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YzpcY3J5cHRvcHA1NjJcY3J5cHRsaWIuaA==","type":"Unicode","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"QzpcY3J5cHRvcHA1NjJcbW9kZXMuaA==","type":"Unicode","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YzpcY3J5cHRvcHA1NjJcc2VjYmxvY2suaA==","type":"Unicode","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q29tK0VuYWJsZWQ=","type":"Unicode","source":"Runtime Data","process":"cr-piriform.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q09NQ1RMMzIuZGxs","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q29tcGFyZVN0cmluZ0V4","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q29tcGF0RGxs","type":"Unicode","source":"Runtime Data","process":"cr-piriform.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q09SRSBwcm91ZGx5IHByZXNlbnRzIFBpcmlmb3JtIE11bHRpR2VuLi4uICAgICAgICAgICAgICAgICBHcmVldHogdG8gbXkgbWF0ZXMsIHlvdSBrbm93IHdobyB5b3UgYXJlLi4u","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q291bGQgbm90IHJlZ2lzdGVyIGNsYXNzIQ==","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlQ29tcGF0aWJsZUJpdG1hcA==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlQ29tcGF0aWJsZURD","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q3J5cHRHZXRIYXNoUGFyYW0=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"ZXNlcnZlZC5Bbg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RXhpdFByb2Nlc3M=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RltbRFtaRVtbRVpb","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RmxzR2V0VmFsdWU=","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Rmx1c2hQcm9jZXNzV3JpdGVCdWZmZXJz","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Rm9yY2VLZXlQcm90ZWN0aW9u","type":"Unicode","source":"Runtime Data","process":"cr-piriform.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"R2RpcENyZWF0ZUJpdG1hcEZyb21TdHJlYW0=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0Q2FwdHVyZQ==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0Q2xhc3NJbmZvQQ==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0Q2xpZW50UmVjdA==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0Q3VycmVudFBhY2thZ2VJZA==","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0Q3VycmVudFByb2Nlc3M=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0Q3VycmVudFByb2Nlc3NJZA==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0Q3VycmVudFByb2Nlc3Nvck51bWJlcg==","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0Q3VycmVudFRocmVhZElk","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RGV2aWNlQ2Fwcw==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RGxnSXRlbQ==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RGxnSXRlbVRleHRB","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RmlsZUluZm9ybWF0aW9uQnlIYW5kbGVFeA==","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0TGFzdEVycm9y","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0TG9jYWxlSW5mb0V4","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0TWVzc2FnZUE=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0TW9kdWxlSGFuZGxlVw==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0T2JqZWN0QQ==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0UGFyZW50","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0UHJvY0FkZHJlc3M=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0U3RhcnR1cEluZm9X","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0U3lzQ29sb3I=","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0U3lzdGVtTWV0cmljcw==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0U3lzdGVtVGltZUFzRmlsZVRpbWU=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0U3lzdGVtVGltZVByZWNpc2VBc0ZpbGVUaW1l","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0VGV4dEV4dGVudFBvaW50MzJB","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0VGlja0NvdW50","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0VGlja0NvdW50NjQ=","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0V2luZG93TG9uZ0E=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0V2luZG93UmVjdA==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0V2luZG93VGV4dEE=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0V2luZG93VGV4dExlbmd0aEE=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SFRUUC8xLjEgMzAyIE1vdmVkIFRlbXBvcmFyaWx5Q2FjaGUtQ29udHJvbDogbm8tY2FjaGVQcmFnbWE6IG5vLWNhY2hlRXhwaXJlczogLTFMb2NhdGlvbjogaHR0cDovL2dlbnVpbmUubWljcm9zb2Z0LmNvbS9yZXBvcnRpbmcvWG1sRXZlbnQuYXNoeD92PTNTZXJ2ZXI6IE1pY3Jvc29mdC1JSVMvOC41WC1Bc3BOZXRNdmMtVmVyc2lvbjogNS4yWC1Bc3BOZXQtVmVyc2lvbjogNC4wLjMwMzE5WC1Qb3dlcmVkLUJ5OiBBU1AuTkVUQ29udGVudC1MZW5ndGg6IDBEYXRlOiBNb24sIDE5IE1hciAyMDE4IDAwOjE0OjU1IEdNVENvbm5lY3Rpb246IGtlZXAtYWxpdmU=","type":"Ansi","source":"PCAP Processing","process":null,"filename":"network.pcap","compromised":null,"detection_total":0,"total":66},{"value":"SFRUUC8xLjEgMzAyIE1vdmVkIFRlbXBvcmFyaWx5Q2FjaGUtQ29udHJvbDogbm8tY2FjaGVQcmFnbWE6IG5vLWNhY2hlRXhwaXJlczogLTFMb2NhdGlvbjogaHR0cHM6Ly92YWxpZGF0aW9uLnNscy5taWNyb3NvZnQuY29tL1NMV0dBL3Nsd2dhLmFzbXhTZXJ2ZXI6IE1pY3Jvc29mdC1JSVMvOC41WC1Bc3BOZXRNdmMtVmVyc2lvbjogNS4yWC1Bc3BOZXQtVmVyc2lvbjogNC4wLjMwMzE5WC1Qb3dlcmVkLUJ5OiBBU1AuTkVUQ29udGVudC1MZW5ndGg6IDBEYXRlOiBNb24sIDE5IE1hciAyMDE4IDAwOjE0OjUxIEdNVENvbm5lY3Rpb246IGtlZXAtYWxpdmU=","type":"Ansi","source":"PCAP Processing","process":null,"filename":"network.pcap","compromised":null,"detection_total":null,"total":null},{"value":"SFRUUC8xLjEgMzAyIE1vdmVkIFRlbXBvcmFyaWx5Q2FjaGUtQ29udHJvbDogbm8tY2FjaGVQcmFnbWE6IG5vLWNhY2hlRXhwaXJlczogLTFMb2NhdGlvbjogaHR0cHM6Ly92YWxpZGF0aW9uLnNscy5taWNyb3NvZnQuY29tL1NMV0dBL3Nsd2dhLmFzbXhTZXJ2ZXI6IE1pY3Jvc29mdC1JSVMvOC41WC1Bc3BOZXRNdmMtVmVyc2lvbjogNS4yWC1Bc3BOZXQtVmVyc2lvbjogNC4wLjMwMzE5WC1Qb3dlcmVkLUJ5OiBBU1AuTkVUQ29udGVudC1MZW5ndGg6IDBEYXRlOiBNb24sIDE5IE1hciAyMDE4IDAwOjE0OjU1IEdNVENvbm5lY3Rpb246IGtlZXAtYWxpdmU=","type":"Ansi","source":"PCAP Processing","process":null,"filename":"network.pcap","compromised":null,"detection_total":null,"total":null},{"value":"aWlUSFhNTDpjb20uYUcueG1w","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"aWlUWHRYTUw6Y29tLmFkb2JlLnhtcA==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SW5pdENvbW1vbkNvbnRyb2xzRXg=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SW5pdE9uY2VFeGVjdXRlT25jZQ==","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"aXMgbm90IGEgdmFsaWQga2V5IGxlbmd0aA==","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SXNQcm9jZXNzb3JGZWF0dXJlUHJlc2VudA==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"S2V5Z2VuTGF5ZXI=","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"TGFuZ3VhZ2UgSG90a2V5","type":"Unicode","source":"Runtime Data","process":"cr-piriform.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TGF5b3V0IEhvdGtleQ==","type":"Unicode","source":"Runtime Data","process":"cr-piriform.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"bTpNYW51ZmFjdHVyZXI8L25hbWU+PHR5cGU+SW5mbzwvdHlwZT48dmFsdWU+aW5ub3RlayBHbWJIPC92YWx1ZT48L3Rva2VuPjx0b2tlbj48bmFtZT5XTUk6V2luMzJfQ29tcHV0ZXJTeXN0ZW06TW9kZWw8L25hbWU+PHR5cGU+SW5mbzwvdHlwZT48dmFsdWU+VmlydHVhbEJveDwvdmFsdWU+PC90b2tlbj48dG9rZW4+PG5hbWU+V01JOldpbjMyX09wZXJhdGluZ1N5c3RlbTpJbnN0YWxsRGF0ZTwvbmFtZT48dHlwZT5JbmZvPC90eXBlPjx2YWx1ZT4yMDE3MTIwMzEyMDYxNi4wMDAwMDArMDYwPC92YWx1ZT48L3Rva2VuPjwvY2xpZW50dG9rZW4+","type":"Ansi","source":"PCAP Processing","process":null,"filename":"network.pcap","compromised":null,"detection_total":null,"total":null},{"value":"bV9yZWdpc3Rlci5zaXplKCkgPiAw","type":"Unicode","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UE9TVCAvZndsaW5rLz9MaW5rSWQ9MTUxNjQyIEhUVFAvMS4xQ29ubmVjdGlvbjogS2VlcC1BbGl2ZUFjY2VwdDogdGV4dC8qVXNlci1BZ2VudDogU0xTU29hcENsaWVudENvbnRlbnQtTGVuZ3RoOiAwSG9zdDogZ28ubWljcm9zb2Z0LmNvbQ==","type":"Ansi","source":"PCAP Processing","process":null,"filename":"network.pcap","compromised":null,"detection_total":null,"total":null},{"value":"UE9TVCAvZndsaW5rLz9MaW5rSWQ9MTUxNjQ1IEhUVFAvMS4xQ29ubmVjdGlvbjogS2VlcC1BbGl2ZUFjY2VwdDogKi8qVXNlci1BZ2VudDogV0FUQ2xpZW50Q29udGVudC1MZW5ndGg6IDMyMjlIb3N0OiBnby5taWNyb3NvZnQuY29t","type":"Ansi","source":"PCAP Processing","process":null,"filename":"network.pcap","compromised":null,"detection_total":null,"total":null},{"value":"UG9zdE1lc3NhZ2VB","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UG9zdFF1aXRNZXNzYWdl","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UHJpdmF0ZUtleUxpZmV0aW1lU2Vjb25kcw==","type":"Unicode","source":"Runtime Data","process":"cr-piriform.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJpdktleUNhY2hlTWF4SXRlbXM=","type":"Unicode","source":"Runtime Data","process":"cr-piriform.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJpdktleUNhY2hlUHVyZ2VJbnRlcnZhbFNlY29uZHM=","type":"Unicode","source":"Runtime Data","process":"cr-piriform.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UmVnaXN0ZXJDbGFzc0E=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UmVnaXN0ZXJDbGFzc0V4QQ==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UnsjKDpSPDUoM14=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2FmZVByb2Nlc3NTZWFyY2hNb2Rl","type":"Unicode","source":"Runtime Data","process":"cr-piriform.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2V0RmlsZUluZm9ybWF0aW9uQnlIYW5kbGU=","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U2V0Rm9yZWdyb3VuZFdpbmRvdw==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U3RyZWFtVHJhbnNmb3JtYXRpb246IHRoaXMgb2JqZWN0IGRvZXNuJ3Qgc3VwcG9ydCByYW5kb20gYWNjZXNz","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"dCJyYXZSQlJlZ3Vccg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VGVybWluYXRlUHJvY2Vzcw==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"d2F2ZU91dEdldFBvc2l0aW9u","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"eiMkJSYnKCkqKywtLi8wMTIzNDU2Nzg5","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null}],"targets":[{"name":"cr-piriform.exe:3980","strings":[{"value":"ISIjJCUmJygpKissLS4vMDEyMzQ1Njc4OTo7PD0+P0BBQkNERUZHSElKS0xNTk9QUVJTVFVWV1hZWltcXV5fYA==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"IUlzUmFuZG9tQWNjZXNzKCk=","type":"Unicode","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"IiBub3QgdXNlZA==","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"I3dobnw4MTky","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Jywgc3RvcmVkICc=","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"JywgdHJ5aW5nIHRvIHJldHJpZXZlICc=","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"KSovMzc6PEJHSVVaZGVmZw==","type":"Unicode","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"LD0lSEglPSxIS0soIC04KUhIKDosSEpKKA==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"LEtXSjg+T108","type":"Unicode","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Ljo6IENPUkUgOjou","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Ljo6IENPUkUgOjouOlByb2dyYW06UGlyaWZvcm0gTXVsdGlHZW46UHJvdGVjdGlvbjpCbG93ZmlzaC9TSEExOkdmeDp5YXlpejpTZng6U3Ryb2JlIC0gQ29yYTE0","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVUJsb2NraW5nSW5wdXRPbmx5QEJ1ZmZlcmVkVHJhbnNmb3JtYXRpb25AQ3J5cHRvUFBAQA==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVUJsb2NrUGFkZGluZ1NjaGVtZURlZkBDcnlwdG9QUEBA","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVUJsb3dmaXNoX0luZm9AQ3J5cHRvUFBAQA==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVUZpbHRlclB1dFNwYWNlSGVscGVyQENyeXB0b1BQQEA=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVUlucHV0UmVqZWN0ZWRAPyRJbnB1dFJlamVjdGluZ0BWQnVmZmVyZWRUcmFuc2Zvcm1hdGlvbkBDcnlwdG9QUEBAQENyeXB0b1BQQEA=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVU5vQ2hhbm5lbFN1cHBvcnRAQnVmZmVyZWRUcmFuc2Zvcm1hdGlvbkBDcnlwdG9QUEBA","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kQWxnb3JpdGhtSW1wbEBWPyRTaW1wbGVLZXlpbmdJbnRlcmZhY2VJbXBsQFY/JFR3b0Jhc2VzQFZCbG9ja0NpcGhlckBDcnlwdG9QUEBAVUJsb3dmaXNoX0luZm9AMkBAQ3J5cHRvUFBAQFYxMkBAQ3J5cHRvUFBAQFYxMkBAQ3J5cHRvUFBAQA==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kQWxnb3JpdGhtSW1wbEBWQ0JDX0VuY3J5cHRpb25AQ3J5cHRvUFBAQFY/JENpcGhlck1vZGVGaW5hbFRlbXBsYXRlX0NpcGhlckhvbGRlckBWPyRCbG9ja0NpcGhlckZpbmFsQCQwQUBWQmFzZUBCbG93ZmlzaEBDcnlwdG9QUEBAQENyeXB0b1BQQEBWQ0JDX0VuY3J5cHRpb25AMkBAMkBAQ3J5cHRvUFBAQA==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kQWxnb3JpdGhtUGFyYW1ldGVyc1RlbXBsYXRlQFZDb25zdEJ5dGVBcnJheVBhcmFtZXRlckBDcnlwdG9QUEBAQENyeXB0b1BQQEA=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kQWxnb3JpdGhtUGFyYW1ldGVyc1RlbXBsYXRlQFc0QmxvY2tQYWRkaW5nU2NoZW1lQEJsb2NrUGFkZGluZ1NjaGVtZURlZkBDcnlwdG9QUEBAQENyeXB0b1BQQEA=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kQXV0b1NpZ25hbGluZ0BWQnVmZmVyZWRUcmFuc2Zvcm1hdGlvbkBDcnlwdG9QUEBAQENyeXB0b1BQQEA=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kYmFzaWNfc3RyaW5nQERVPyRjaGFyX3RyYWl0c0BEQHN0ZEBAVj8kYWxsb2NhdG9yQERAMkBAc3RkQEA=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kQmxvY2tDaXBoZXJGaW5hbEAkMEFAVkJhc2VAQmxvd2Zpc2hAQ3J5cHRvUFBAQEBDcnlwdG9QUEBA","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kQmxvY2tDaXBoZXJJbXBsQFVCbG93ZmlzaF9JbmZvQENyeXB0b1BQQEBWQmxvY2tDaXBoZXJAMkBAQ3J5cHRvUFBAQA==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kQnVmZmVybGVzc0BWQnVmZmVyZWRUcmFuc2Zvcm1hdGlvbkBDcnlwdG9QUEBAQENyeXB0b1BQQEA=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kQnVmZmVybGVzc0BWU2lua0BDcnlwdG9QUEBAQENyeXB0b1BQQEA=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kQ2lwaGVyTW9kZUZpbmFsVGVtcGxhdGVfQ2lwaGVySG9sZGVyQFY/JEJsb2NrQ2lwaGVyRmluYWxAJDBBQFZCYXNlQEJsb3dmaXNoQENyeXB0b1BQQEBAQ3J5cHRvUFBAQFZDQkNfRW5jcnlwdGlvbkAyQEBDcnlwdG9QUEBA","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kQ2xvbmFibGVJbXBsQFY/JEJsb2NrQ2lwaGVyRmluYWxAJDBBQFZCYXNlQEJsb3dmaXNoQENyeXB0b1BQQEBAQ3J5cHRvUFBAQFZCYXNlQEJsb3dmaXNoQDJAQENyeXB0b1BQQEA=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kRml4ZWRCbG9ja1NpemVAJDA3QENyeXB0b1BQQEA=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kRml4ZWRSb3VuZHNAJDBCQUBAQ3J5cHRvUFBAQA==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kSW5wdXRSZWplY3RpbmdAVkJ1ZmZlcmVkVHJhbnNmb3JtYXRpb25AQ3J5cHRvUFBAQEBDcnlwdG9QUEBA","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kT2JqZWN0SG9sZGVyQFY/JEJsb2NrQ2lwaGVyRmluYWxAJDBBQFZCYXNlQEJsb3dmaXNoQENyeXB0b1BQQEBAQ3J5cHRvUFBAQEBDcnlwdG9QUEBA","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kU2ltcGxlS2V5aW5nSW50ZXJmYWNlSW1wbEBWPyRUd29CYXNlc0BWQmxvY2tDaXBoZXJAQ3J5cHRvUFBAQFVCbG93ZmlzaF9JbmZvQDJAQENyeXB0b1BQQEBWMTJAQENyeXB0b1BQQEA=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kVHdvQmFzZXNAVkJsb2NrQ2lwaGVyQENyeXB0b1BQQEBVQmxvd2Zpc2hfSW5mb0AyQEBDcnlwdG9QUEBA","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kVmFyaWFibGVLZXlMZW5ndGhAJDBCQUAkMDMkMERJQCQwMCQwMyQwQUBAQ3J5cHRvUFBAQA==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVkFsZ29yaXRobUBDcnlwdG9QUEBA","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVkFsZ29yaXRobVBhcmFtZXRlcnNAQ3J5cHRvUFBAQA==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVkFsZ29yaXRobVBhcmFtZXRlcnNCYXNlQENyeXB0b1BQQEA=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVkFycmF5U2lua0BDcnlwdG9QUEBA","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVkF1dGhlbnRpY2F0ZWRTeW1tZXRyaWNDaXBoZXJAQ3J5cHRvUFBAQA==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVmJhZF9hbGxvY0BzdGRAQA==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVmJhZF9hcnJheV9uZXdfbGVuZ3RoQHN0ZEBA","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVkJhc2VAQmxvd2Zpc2hAQ3J5cHRvUFBAQA==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVkJpdEJ1Y2tldEBDcnlwdG9QUEBA","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVkJpdG1hcEBHZGlwbHVzQEA=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVkJsb2NrQ2lwaGVyQENyeXB0b1BQQEA=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVkJsb2NrT3JpZW50ZWRDaXBoZXJNb2RlQmFzZUBDcnlwdG9QUEBA","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVkJsb2NrVHJhbnNmb3JtYXRpb25AQ3J5cHRvUFBAQA==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVkJ1ZmZlcmVkVHJhbnNmb3JtYXRpb25AQ3J5cHRvUFBAQA==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVkJ5dGVBcnJheVBhcmFtZXRlckBDcnlwdG9QUEBA","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVkJ5dGVRdWV1ZUBDcnlwdG9QUEBA","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVkNCQ19FbmNyeXB0aW9uQENyeXB0b1BQQEA=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVkNCQ19Nb2RlQmFzZUBDcnlwdG9QUEBA","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVkNpcGhlck1vZGVCYXNlQENyeXB0b1BQQEA=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVkNsb25hYmxlQENyeXB0b1BQQEA=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVkNvbnN0Qnl0ZUFycmF5UGFyYW1ldGVyQENyeXB0b1BQQEA=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVkV4Y2VwdGlvbkBDcnlwdG9QUEBA","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVmV4Y2VwdGlvbkBzdGRAQA==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVkZpbHRlckBDcnlwdG9QUEBA","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVkZpbHRlcldpdGhCdWZmZXJlZElucHV0QENyeXB0b1BQQEA=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVkdkaXBsdXNCYXNlQEdkaXBsdXNAQA==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVkltYWdlQEdkaXBsdXNAQA==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVkludmFsaWRBcmd1bWVudEBDcnlwdG9QUEBA","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVkludmFsaWRDaXBoZXJ0ZXh0QENyeXB0b1BQQEA=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVkludmFsaWREYXRhRm9ybWF0QENyeXB0b1BQQEA=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVkludmFsaWRLZXlMZW5ndGhAQ3J5cHRvUFBAQA==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVmxlbmd0aF9lcnJvckBzdGRAQA==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVmxvZ2ljX2Vycm9yQHN0ZEBA","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVk1lc3NhZ2VRdWV1ZUBDcnlwdG9QUEBA","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVk5hbWVWYWx1ZVBhaXJzQENyeXB0b1BQQEA=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVk5vdENvcHlhYmxlQENyeXB0b1BQQEA=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVk5vdEltcGxlbWVudGVkQENyeXB0b1BQQEA=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVk51bGxOYW1lVmFsdWVQYWlyc0BDcnlwdG9QUEBA","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVm91dF9vZl9yYW5nZUBzdGRAQA==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVlBhcmFtZXRlck5vdFVzZWRAQWxnb3JpdGhtUGFyYW1ldGVyc0Jhc2VAQ3J5cHRvUFBAQA==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVlNpbXBsZUtleWluZ0ludGVyZmFjZUBDcnlwdG9QUEBA","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVlNpbmtAQ3J5cHRvUFBAQA==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVlN0cmVhbVRyYW5zZm9ybWF0aW9uQENyeXB0b1BQQEA=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVlN0cmVhbVRyYW5zZm9ybWF0aW9uRmlsdGVyQENyeXB0b1BQQEA=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVlN5bW1ldHJpY0NpcGhlckBDcnlwdG9QUEBA","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVnR5cGVfaW5mb0BA","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVlZhbHVlVHlwZU1pc21hdGNoQE5hbWVWYWx1ZVBhaXJzQENyeXB0b1BQQEA=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVldhaXRhYmxlQENyeXB0b1BQQEA=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVldhbGtlckBCeXRlUXVldWVAQ3J5cHRvUFBAQA==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVzRCbG9ja1BhZGRpbmdTY2hlbWVAQmxvY2tQYWRkaW5nU2NoZW1lRGVmQENyeXB0b1BQQEA=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"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","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":0,"total":131},{"value":"LkNSVCRYQ0FB","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"LkNSVCRYSUE=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"LkNSVCRYSUFB","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"LkNSVCRYSUFD","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"LkNSVCRYSVo=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"LkNSVCRYTEE=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"LkNSVCRYTFo=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"LkNSVCRYUEE=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"LkNSVCRYUFo=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"LmdmaWRzJHk=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"LnJkYXRhJHN4ZGF0YQ==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"LnJkYXRhJHp6emRiZw==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"MjZkMTEzNDdmMzY0ZGM1NTQ1ZjQyMDIwNGIwMjAzZDJfKg==","type":"Unicode","source":"Runtime Data","process":"cr-piriform.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"MzMzM2E5YDQ0NDRgOTk=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"OiBJViBsZW5ndGg=","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"OiBOb25ibG9ja2luZyBpbnB1dCBpcyBub3QgaW1wbGVtZW50ZWQgYnkgdGhpcyBvYmplY3Qu","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"OiB0aGlzIG9iamVjdCBjYW5ub3QgdXNlIGEgbnVsbCBJVg==","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"OiB0aGlzIG9iamVjdCBkb2VzJ3Qgc3VwcG9ydCBhIHNwZWNpYWwgbGFzdCBibG9jaw==","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"OiB0aGlzIG9iamVjdCBkb2Vzbid0IHN1cHBvcnQgbXVsdGlwbGUgY2hhbm5lbHM=","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"OiB0aGlzIG9iamVjdCBkb2Vzbid0IHN1cHBvcnQgcmVzeW5jaHJvbml6YXRpb24=","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"OiB0aGlzIG9iamVjdCByZXF1aXJlcyBhbiBJVg==","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"XFNlc3Npb25zXDFcV2luZG93c1xBcGlQb3J0","type":"Unicode","source":"Runtime Data","process":"cr-piriform.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"X19DeHhGcmFtZUhhbmRsZXIz","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"X19wX19jb21tb2Rl","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"X19SVER5bmFtaWNDYXN0","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"X19zZXR1c2VybWF0aGVycg==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"X19zdGRfZXhjZXB0aW9uX2NvcHk=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"X19zdGRfZXhjZXB0aW9uX2Rlc3Ryb3k=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"X19zdGRfdGVybWluYXRl","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"X19zdGRfdHlwZV9pbmZvX2NvbXBhcmU=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"X19zdGRfdHlwZV9pbmZvX25hbWU=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"X191bmNhdWdodF9leGNlcHRpb24=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"X192Y3J0X0luaXRpYWxpemVDcml0aWNhbFNlY3Rpb25FeA==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"X2FsaWduZWRfZnJlZQ==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"X2FsaWduZWRfbWFsbG9j","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"X2NhbGxuZXdo","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"X2NvbmZpZ3RocmVhZGxvY2FsZQ==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"X2NvbmZpZ3VyZV9uYXJyb3dfYXJndg==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"X2NvbnRyb2xmcF9z","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"X2NydF9hdGV4aXQ=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"X0N4eFRocm93RXhjZXB0aW9u","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"X2V4Y2VwdF9oYW5kbGVyNF9jb21tb24=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"X2dldF9uYXJyb3dfd2lubWFpbl9jb21tYW5kX2xpbmU=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"X2luaXRpYWxpemVfbmFycm93X2Vudmlyb25tZW50","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"X2luaXRpYWxpemVfb25leGl0X3RhYmxl","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"X2luaXR0ZXJt","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"X2luaXR0ZXJtX2U=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"X2ludmFsaWRfcGFyYW1ldGVyX25vaW5mbw==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"X2ludmFsaWRfcGFyYW1ldGVyX25vaW5mb19ub3JldHVybg==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"X3B1cmVjYWxs","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"X3JlZ2lzdGVyX29uZXhpdF9mdW5jdGlvbg==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"X3JlZ2lzdGVyX3RocmVhZF9sb2NhbF9leGVfYXRleGl0X2NhbGxiYWNr","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"X3NlaF9maWx0ZXJfZXhl","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"X3NldF9hcHBfdHlwZQ==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"X3NldF9uZXdfaGFuZGxlcg==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"X3NldF9uZXdfbW9kZQ==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"X3N0cnVwcl9z","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"X3VubG9ja19sb2NhbGVz","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"QUJDREVGR0hJSktNTlBRUlNUVVZXWFlaMjM0NTY3ODk=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"QWNxdWlyZVNSV0xvY2tFeGNsdXNpdmU=","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"QWRkRm9udE1lbVJlc291cmNlRXg=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"QWxnb3JpdGhtUGFyYW1ldGVyc0Jhc2U6IHBhcmFtZXRlciAi","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YW5zZm9ybWF0aW9uOiB0aGlzIG9iamVjdCBkb2Vzbid0IHN1cHBvcnQgcmFuZG9tIGFjY2Vzcw==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"QW50aWdyYXYgQkI=","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"QXJyYXlTaW5rOiBtaXNzaW5nIE91dHB1dEJ1ZmZlciBhcmd1bWVudA==","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"QXVkaW9TcnY=","type":"Unicode","source":"Runtime Data","process":"cr-piriform.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"YmFkIGFsbG9jYXRpb24=","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YmFkIGFycmF5IG5ldyBsZW5ndGg=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"QmVnaW5EZWZlcldpbmRvd1Bvcw==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"QmVnaW5QYWludA==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Qml0QnVja2V0","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"QmxvY2tQYWRkaW5nU2NoZW1l","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Qmxvd2Zpc2g=","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"QnVmZmVyZWRUcmFuc2Zvcm1hdGlvbjogdGhpcyBvYmplY3QgZG9lc24ndCBhbGxvdyBpbnB1dA==","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"QnVmZmVyZWRUcmFuc2Zvcm1hdGlvbjogdGhpcyBvYmplY3QgaXMgbm90IGF0dGFjaGFibGU=","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YzpcY3J5cHRvcHA1NjJcY3J5cHRsaWIuaA==","type":"Unicode","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"QzpcY3J5cHRvcHA1NjJcbW9kZXMuaA==","type":"Unicode","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"YzpcY3J5cHRvcHA1NjJcc2VjYmxvY2suaA==","type":"Unicode","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q2FsbFdpbmRvd1Byb2NB","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q0NsZWFuZXIgdjU=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q0VJUEVuYWJsZQ==","type":"Unicode","source":"Runtime Data","process":"cr-piriform.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q2lwaGVyTW9kZUJhc2U6IGZlZWRiYWNrIHNpemUgY2Fubm90IGJlIHNwZWNpZmllZCBmb3IgdGhpcyBjaXBoZXIgbW9kZQ==","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q2xvbmUoKSBpcyBub3QgaW1wbGVtZW50ZWQgeWV0Lg==","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q2xvc2VDbGlwYm9hcmQ=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q2xvc2VIYW5kbGU=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q2xvc2VUaHJlYWRwb29sVGltZXI=","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q2xvc2VUaHJlYWRwb29sV2FpdA==","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q2xvc2VUaHJlYWRwb29sV29yaw==","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q29tK0VuYWJsZWQ=","type":"Unicode","source":"Runtime Data","process":"cr-piriform.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29tcGFyZVN0cmluZ0V4","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q29tcGF0RGxs","type":"Unicode","source":"Runtime Data","process":"cr-piriform.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29weVJlY3Q=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q09SRSBwcm91ZGx5IHByZXNlbnRzIFBpcmlmb3JtIE11bHRpR2VuLi4uICAgICAgICAgICAgICAgICBHcmVldHogdG8gbXkgbWF0ZXMsIHlvdSBrbm93IHdobyB5b3UgYXJlLi4u","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q291bGQgbm90IGNyZWF0ZSB3aW5kb3ch","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q291bGQgbm90IHJlZ2lzdGVyIGNsYXNzIQ==","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlQ29tcGF0aWJsZUJpdG1hcA==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlQ29tcGF0aWJsZURD","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlRXZlbnRFeFc=","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlRXZlbnRX","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlRm9udEE=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlUGF0dGVybkJydXNo","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlU2VtYXBob3JlRXhX","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlU2VtYXBob3JlVw==","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlU29saWRCcnVzaA==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlU3ltYm9saWNMaW5rVw==","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlVGhyZWFk","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlVGhyZWFkcG9vbFRpbWVy","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlVGhyZWFkcG9vbFdhaXQ=","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlVGhyZWFkcG9vbFdvcms=","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlV2luZG93RXhB","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q3J5cHRBY3F1aXJlQ29udGV4dEE=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q3J5cHRDcmVhdGVIYXNo","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q3J5cHREZXN0cm95SGFzaA==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q3J5cHRHZXRIYXNoUGFyYW0=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q3J5cHRSZWxlYXNlQ29udGV4dA==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Q1dESWxsZWdhbEluRExMU2VhcmNo","type":"Unicode","source":"Runtime Data","process":"cr-piriform.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGVidWdIZWFwRmxhZ3M=","type":"Unicode","source":"Runtime Data","process":"cr-piriform.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGVmZXJXaW5kb3dQb3M=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RGVmcmFnZ2xlciB2Mg==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RGVmV2luZG93UHJvY0E=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RGVsZXRlQ3JpdGljYWxTZWN0aW9u","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RGVsZXRlT2JqZWN0","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"ZGVxdWU8VD4gdG9vIGxvbmc=","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RGVzdHJveVdpbmRvdw==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RGlzYWJsZU1ldGFGaWxlcw==","type":"Unicode","source":"Runtime Data","process":"cr-piriform.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGlzYWJsZVVzZXJNb2RlQ2FsbGJhY2tGaWx0ZXI=","type":"Unicode","source":"Runtime Data","process":"cr-piriform.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGlzcGF0Y2hNZXNzYWdlQQ==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RHJhd1RleHRB","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RW1wdHlDbGlwYm9hcmQ=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RW5hYmxlV2luZG93","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RW5kRGVmZXJXaW5kb3dQb3M=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RW50ZXJDcml0aWNhbFNlY3Rpb24=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"ZXhjZWVkcyB0aGUgbWF4aW11bSBvZg==","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RXh0ZW5kZWQgTW9kdWxlOiBDb3JhMTQ=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RltbRFtaRVtbRVpb","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RmlsdGVyV2l0aEJ1ZmZlcmVkSW5wdXQ=","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RmlsdGVyV2l0aEJ1ZmZlcmVkSW5wdXQ6IGludmFsaWQgYnVmZmVyIHNpemU=","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RmluZFJlc291cmNlQQ==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Rmlwc0FsZ29yaXRobVBvbGljeQ==","type":"Unicode","source":"Runtime Data","process":"cr-piriform.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Rml4ZWRFZGl0","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RmxzR2V0VmFsdWU=","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RmxzU2V0VmFsdWU=","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Rmx1c2hQcm9jZXNzV3JpdGVCdWZmZXJz","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Rm9yY2VLZXlQcm90ZWN0aW9u","type":"Unicode","source":"Runtime Data","process":"cr-piriform.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RnJlZUxpYnJhcnlXaGVuQ2FsbGJhY2tSZXR1cm5z","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"RnJlZVJlc291cmNl","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2RpcEFsbG9j","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2RpcENsb25lSW1hZ2U=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2RpcENyZWF0ZUJpdG1hcEZyb21TdHJlYW0=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2RpcENyZWF0ZUhCSVRNQVBGcm9tQml0bWFw","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2RpcERpc3Bvc2VJbWFnZQ==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2RpcGx1c1NodXRkb3du","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2RpcGx1c1N0YXJ0dXA=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"Z2VnZ2VlZy53YXY=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0Q2FwdHVyZQ==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0Q2xhc3NJbmZvQQ==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0Q2xpZW50UmVjdA==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0Q3VycmVudFBhY2thZ2VJZA==","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0Q3VycmVudFByb2Nlc3M=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0Q3VycmVudFByb2Nlc3NJZA==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0Q3VycmVudFByb2Nlc3Nvck51bWJlcg==","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0Q3VycmVudFRocmVhZElk","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RGV2aWNlQ2Fwcw==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RGxnSXRlbQ==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RGxnSXRlbVRleHRB","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RmlsZUluZm9ybWF0aW9uQnlIYW5kbGVFeA==","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0TGFzdEVycm9y","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0TG9jYWxlSW5mb0V4","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0TWVzc2FnZUE=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0TW9kdWxlSGFuZGxlVw==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0T2JqZWN0QQ==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0UGFyZW50","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0U3RhcnR1cEluZm9X","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0U3lzQ29sb3I=","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0U3lzdGVtTWV0cmljcw==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0U3lzdGVtVGltZUFzRmlsZVRpbWU=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0U3lzdGVtVGltZVByZWNpc2VBc0ZpbGVUaW1l","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0VGV4dEV4dGVudFBvaW50MzJB","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0VGlja0NvdW50","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0VGlja0NvdW50NjQ=","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0V2luZG93TG9uZ0E=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0V2luZG93UmVjdA==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0V2luZG93VGV4dEE=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2V0V2luZG93VGV4dExlbmd0aEE=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2xvYmFsQWxsb2M=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2xvYmFsTG9jaw==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"R2xvYmFsVW5sb2Nr","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SG92ZXJCdG4=","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"aWlUWHRYTUw6Y29tLmFkb2JlLnhtcA==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SW1hZ2UgUGF0aA==","type":"Unicode","source":"Runtime Data","process":"cr-piriform.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SW5pdGlhbGl6ZUNvbmRpdGlvblZhcmlhYmxl","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SW5pdGlhbGl6ZUNyaXRpY2FsU2VjdGlvbkFuZFNwaW5Db3VudA==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SW5pdGlhbGl6ZUNyaXRpY2FsU2VjdGlvbkV4","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SW5pdGlhbGl6ZVNMaXN0SGVhZA==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SW5pdGlhbGl6ZVNSV0xvY2s=","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SW5pdE9uY2VFeGVjdXRlT25jZQ==","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SW50ZXJsb2NrZWRFeGNoYW5nZQ==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"aW52YWxpZCBzdHJpbmcgcG9zaXRpb24=","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SW52YWxpZGF0ZVJlY3Q=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"aXMgbGVzcyB0aGFuIHRoZSBtaW5pbXVtIG9m","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"aXMgbm90IGEgdmFsaWQga2V5IGxlbmd0aA==","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SXNEZWJ1Z2dlclByZXNlbnQ=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"SXNQcm9jZXNzb3JGZWF0dXJlUHJlc2VudA==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"a2VybmVsMzIuZGxs","type":"Unicode","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"S2V5Z2VuTGF5ZXI=","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"bCwwNDRELDhATCxIKGBM","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"TGFuZ3VhZ2UgSG90a2V5","type":"Unicode","source":"Runtime Data","process":"cr-piriform.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TGF5b3V0IEhvdGtleQ==","type":"Unicode","source":"Runtime Data","process":"cr-piriform.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TENNYXBTdHJpbmdFeA==","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"TGVhdmVDcml0aWNhbFNlY3Rpb24=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"TG9hZEFwcEluaXRfRExMcw==","type":"Unicode","source":"Runtime Data","process":"cr-piriform.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TG9hZEN1cnNvckE=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"TG9hZEljb25B","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"TG9hZFJlc291cmNl","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"TG9ja1Jlc291cmNl","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"TE9PUDMzU0QwNy53YXY=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"bHN0cmNweUE=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"bV9hbGxvY2F0ZWQ=","type":"Unicode","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"bV9yZWdpc3Rlci5zaXplKCkgPiAw","type":"Unicode","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"bWFqb3JjaG9pci53YXY=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"TWFwV2luZG93UG9pbnRz","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"TWF4UnBjU2l6ZQ==","type":"Unicode","source":"Runtime Data","process":"cr-piriform.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWF4U3hTSGFzaENvdW50","type":"Unicode","source":"Runtime Data","process":"cr-piriform.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWVzc2FnZUJveEE=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"TWljcm9zb2Z0IEVuaGFuY2VkIENyeXB0b2dyYXBoaWMgUHJvdmlkZXIgdjEuMA==","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"bWlub3JjaG9pci53YXY=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"TVMgU3lzdGVtRXg=","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"TmFtZVZhbHVlUGFpcnM6IHR5cGUgbWlzbWF0Y2ggZm9yICc=","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"bmV3c2FtcGxlcy53YXY=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"T3BlbkNsaXBib2FyZA==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"T3V0cHV0QnVmZmVy","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UG9zdE1lc3NhZ2VB","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UG9zdFF1aXRNZXNzYWdl","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UHJlZmVyRXh0ZXJuYWxNYW5pZmVzdA==","type":"Unicode","source":"Runtime Data","process":"cr-piriform.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJlc3MgZ2VuZXJhdGUuLi4=","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UHJpdmF0ZUtleUxpZmV0aW1lU2Vjb25kcw==","type":"Unicode","source":"Runtime Data","process":"cr-piriform.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJpdktleUNhY2hlTWF4SXRlbXM=","type":"Unicode","source":"Runtime Data","process":"cr-piriform.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJpdktleUNhY2hlUHVyZ2VJbnRlcnZhbFNlY29uZHM=","type":"Unicode","source":"Runtime Data","process":"cr-piriform.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UXVlcnlQZXJmb3JtYW5jZUNvdW50ZXI=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UmVjdXZhIHYx","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UmVnaXN0ZXJDbGFzc0E=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UmVnaXN0ZXJDbGFzc0V4QQ==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UmVsZWFzZUNhcHR1cmU=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UmVsZWFzZURD","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UmVsZWFzZVNSV0xvY2tFeGNsdXNpdmU=","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UmVtb3ZlRm9udE1lbVJlc291cmNlRXg=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UmVzZXRFdmVudA==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"UmVzdG9yZURD","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U2FmZURsbFNlYXJjaE1vZGU=","type":"Unicode","source":"Runtime Data","process":"cr-piriform.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2FmZVByb2Nlc3NTZWFyY2hNb2Rl","type":"Unicode","source":"Runtime Data","process":"cr-piriform.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2VsZWN0T2JqZWN0","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U2VuZE1lc3NhZ2VB","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U2V0QmtNb2Rl","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U2V0QnJ1c2hPcmdFeA==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U2V0Q2FwdHVyZQ==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U2V0Q2xpcGJvYXJkRGF0YQ==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U2V0RGxnSXRlbVRleHRB","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U2V0RmlsZUluZm9ybWF0aW9uQnlIYW5kbGU=","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U2V0Rm9yZWdyb3VuZFdpbmRvdw==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U2V0TGF5ZXJlZFdpbmRvd0F0dHJpYnV0ZXM=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U2V0VGV4dENvbG9y","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U2V0VGhyZWFkcG9vbFRpbWVy","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U2V0VGhyZWFkcG9vbFdhaXQ=","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U2V0VGhyZWFkUHJpb3JpdHk=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U2V0VW5oYW5kbGVkRXhjZXB0aW9uRmlsdGVy","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U2V0V2luZG93TG9uZ0E=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U2V0V2luZG93UG9z","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U2hvd1dpbmRvdw==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U2l6ZW9mUmVzb3VyY2U=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U2xlZXBDb25kaXRpb25WYXJpYWJsZUNT","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U2xlZXBDb25kaXRpb25WYXJpYWJsZVNSVw==","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U3BlY2N5IHYx","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U3RyZWFtVHJhbnNmb3JtYXRpb246IHRoaXMgb2JqZWN0IGRvZXNuJ3Qgc3VwcG9ydCByYW5kb20gYWNjZXNz","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U3RyZWFtVHJhbnNmb3JtYXRpb25GaWx0ZXI6IGNpcGhlcnRleHQgbGVuZ3RoIGlzIG5vdCBhIG11bHRpcGxlIG9mIGJsb2NrIHNpemU=","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U3RyZWFtVHJhbnNmb3JtYXRpb25GaWx0ZXI6IGludmFsaWQgb25lcy1hbmQtemVyb3MgcGFkZGluZyBmb3VuZA==","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U3RyZWFtVHJhbnNmb3JtYXRpb25GaWx0ZXI6IGludmFsaWQgUEtDUyAjNyBibG9jayBwYWRkaW5nIGZvdW5k","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U3RyZWFtVHJhbnNmb3JtYXRpb25GaWx0ZXI6IFBLQ1NfUEFERElORyBhbmQgT05FX0FORF9aRVJPU19QQURESU5HIGNhbm5vdCBiZSB1c2VkIHdpdGg=","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U3RyZWFtVHJhbnNmb3JtYXRpb25GaWx0ZXI6IHBsYWludGV4dCBsZW5ndGggaXMgbm90IGEgbXVsdGlwbGUgb2YgYmxvY2sgc2l6ZSBhbmQgTk9fUEFERElORyBpcyBzcGVjaWZpZWQ=","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U3RyZWFtVHJhbnNmb3JtYXRpb25GaWx0ZXI6IHBsZWFzZSB1c2UgQXV0aGVudGljYXRlZEVuY3J5cHRpb25GaWx0ZXIgYW5kIEF1dGhlbnRpY2F0ZWREZWNyeXB0aW9uRmlsdGVyIGZvciBBdXRoZW50aWNhdGVkU3ltbWV0cmljQ2lwaGVy","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"c3RyaW5nIHRvbyBsb25n","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"c3RybmNweV9z","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"U3VibWl0VGhyZWFkcG9vbFdvcms=","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"dGVybWluYXRl","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VGVybWluYXRlUHJvY2Vzcw==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VGVybWluYXRlVGhyZWFk","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"dEVYdFNvZnR3YXJl","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VHJhY2tNb3VzZUV2ZW50","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VHJhbnNsYXRlTWVzc2FnZQ==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VHJ5QWNxdWlyZVNSV0xvY2tFeGNsdXNpdmU=","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VHVybk9mZlNQSUFuaW1hdGlvbnM=","type":"Unicode","source":"Runtime Data","process":"cr-piriform.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"dFZpYi9mQC9COCsm","type":"Unicode","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VW5oYW5kbGVkRXhjZXB0aW9uRmlsdGVy","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VW5rbm93biBleGNlcHRpb24=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"dW50aXRsZWQud2F2","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"dW50aXRsZWQ0cS53YXY=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"dW50aXRsZWRhYWFhLndhdg==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"dW50aXRsZWRzaW4ud2F2","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VXBkYXRlTGF5ZXJlZFdpbmRvdw==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VXBkYXRlV2luZG93","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"dXNlcjMyLmRsbA==","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VmFsaWRhdGVSZWN0","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"VmFsdWVOYW1lcw==","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"V2FpdEZvclNpbmdsZU9iamVjdEV4","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"V2FpdEZvclRocmVhZHBvb2xUaW1lckNhbGxiYWNrcw==","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"V2FrZUFsbENvbmRpdGlvblZhcmlhYmxl","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"V2FrZUNvbmRpdGlvblZhcmlhYmxl","type":"Ansi","source":"Hybrid Analysis","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01370000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"d2F2ZU91dENsb3Nl","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"d2F2ZU91dEdldFBvc2l0aW9u","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"d2F2ZU91dFByZXBhcmVIZWFkZXI=","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"d2F2ZU91dFJlc2V0","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"d2F2ZU91dFVucHJlcGFyZUhlYWRlcg==","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"d2F2ZU91dFdyaXRl","type":"Ansi","source":"Memory/File Scan","process":"cr-piriform.exe","filename":"00011430-00003980.00000002.15593.01371000.00000040.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9","type":"Ansi","source":"Runtime Data","process":"cr-piriform.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9","type":"Ansi","source":"Runtime Data","process":"cr-piriform.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9Ly/Dr8K/wr0=","type":"Ansi","source":"Runtime Data","process":"cr-piriform.exe","filename":null,"compromised":null,"detection_total":null,"total":null}]},{"name":"cr-piriform.exe.bin","strings":[{"value":"IVRoaXMgcHJvZ3JhbSBjYW5ub3QgYmUgcnVuIGluIERPUyBtb2RlLiQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Ii0zYThhMzMz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"IkE3ZFMxKXFi","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"I3dobnw4MTkyTw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"JF1WPmlvbiAxLi5u","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"JTZTZXRVbmhhbmRsZWRFeGNlcHQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"JmlkYXRhJDUlcEM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"KCYiJSJQKz4/amt3","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"LjAvckcva01NY2g=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"LkNvcHlyaWdodCAoYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"LnVzaFBycGVzc1c=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"L2xpY2VucC5zPm1s","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"L1NIQTE2R2Z4KHlhfHo=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"L3oqb3Q3LDd4","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"MkRFRUAyMiAwRg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"My0wNCQoX10=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"M25ebGpgTGhi","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"NS4+YzAxNCA3b3Y=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"NnJeOU48clY8cA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"NzowMDYgYnkgTmF0ZSBQaWVrb3MuIEJsYW1ib3Q=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Ojs8PT4/QEFCQ0RFRkdISUpLTE1OT1BRUlNUVVZXWFl9","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"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","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiIHN0YW5kYWxvbmU9InllcyI/Pjxhc3NlbWJseSB4bWxucz0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTphc20udjEiIG1hbmlmZXN0VmVyc2lvbj0iMS4wIj48YXNzZW1ibHlJZGVudGl0eSB2ZXJzaW9uPSIxLjAuMC4wIiBwcm9jZXNzb3JBcmNoaXRlY3R1cmU9Ing4NiIgbmFtZT0iQ09SRSIgdHlwZT0id2luMzIiPjwvYXNzZW1ibHlJZGVudGl0eT48ZGVzY3JpcHRpb24+Q09SRTwvZGVzY3JpcHRpb24+PGRlcGVuZGVuY3k+PGRlcGVuZGVudEFzc2VtYmx5Pjxhc3NlbWJseUlkZW50aXR5IHR5cGU9IndpbjMyIiBuYW1lPSJNaWNyb3NvZnQuV2luZG93cy5Db21tb24tQ29udHJvbHMiIHZlcnNpb249IjYuMC4wLjAiIHByb2Nlc3NvckFyY2hpdGVjdHVyZT0ieDg2IiBwdWJsaWNLZXlUb2tlbj0iNjU5NWI2NDE0NGNjZjFkZiIgbGFuZ3VhZ2U9IioiPjwvYXNzZW1ibHlJZGVudGl0eT48L2RlcGVuZGVudEFzc2VtYmx5PjwvZGVwZW5kZW5jeT48dHJ1c3RJbmZvIHhtbG5zPSJ1cm46c2NoZW1hcy1taWNyb3NvZnQtY29tOmFzbS52MyI+PHNlY3VyaXR5PjxyZXF1ZXN0ZWRQcml2aWxlZ2VzPjxyZXF1ZXN0ZWRFeGVjdXRpb25MZXZlbCBsZXZlbD0iYXNJbnZva2VyIiB1aUFjY2Vzcz0iZmFsc2UiPjwvcmVxdWVzdGVkRXhlY3V0aW9uTGV2ZWw+PC9yZXF1ZXN0ZWRQcml2aWxlZ2VzPjwvc2VjdXJpdHk+PC90cnVzdEluZm8+PC9hc3NlbWJseT4=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"W2xYUnp5cyA7QQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"XWwsYyFnRTss","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X0RIQiBKJGNh","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X2xvY2tfbG9jYWxlcw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X01iV3lQZTJccA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X3NldF9mbW9kZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"YGhrMTA0W3Jo","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"YG82Sy5fOj1a","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"YFZ6VHc9Pjpy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QURWQVBJMzIuZGxs","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QUV4dGVuZGVkIE1vZHVsZTo=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"YXBpLW1zLXdpbi1jcnQtaGVhcC1sMS0xLTAuZGxs","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"YXBpLW1zLXdpbi1jcnQtbG9jYWxlLWwxLTEtMC5kbGw=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"YXBpLW1zLXdpbi1jcnQtbWF0aC1sMS0xLTAuZGxs","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"YXBpLW1zLXdpbi1jcnQtcnVudGltZS1sMS0xLTAuZGxs","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"YXBpLW1zLXdpbi1jcnQtc3RkaW8tbDEtMS0wLmRsbA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"YXBpLW1zLXdpbi1jcnQtc3RyaW5nLWwxLTEtMC5kbGw=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"YXBpLW1zLXdpbi1jcnQtdGltZS1sMS0xLTAuZGxs","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"YXBpLW1zLXdpbi1jcnQtdXRpbGl0eS1sMS0xLTAuZGxs","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"YXJyYXkgbmV3","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QklUTUFQLF5c","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Ylh0MSI6UTw1Tw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q09NQ1RMMzIuZGxs","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlU3RyZWFtT25IR2xvYmFs","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q3J5cHRIYXNoRGF0YQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"ZGN5IT0ials=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"ZEZNO2hGUzF2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"ZHBvb2xUaW1lclY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RTRENDUyNjU5d0lu","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"ZWZQZ2dsIzI+REY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"ZXNlcnZlZC5Bbg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"ZXNmNFF1WnlQ","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"ZXQpbmhxQz1J","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RXhpdFByb2Nlc3M=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"ZkFrRFtjTEFtdw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"ZmNxLUpQOCFP","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RmlsdGVyOEdDdXJyZW50UA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"ZyhTVFp1PWwl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R0RJMzIuZGxs","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Z2RpcGx1cy5kbGw=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0UHJvY0FkZHJlc3M=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"aWlUSFhNTDpjb20uYUcueG1w","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SW5pdENvbW1vbkNvbnRyb2xzRXg=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SW9yJjJAR2py","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SltvTTYsU1VK","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"ak5Qd2NPOEA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"azQ8JUBfNCojfnl+","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"azprJkFjcXVpciE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"S0NTX1BARElORw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"S0VSTkVMMzIuRExM","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"bDZtTm9CLn5v","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TG9hZExpYnJhcnlB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TE9PUDMzU0QwNw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"bFNQMHoiciBPPE83","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"bH1GbHNBbGxvYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TSB5aWkoaVF1Jw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TWlsa3lUMFFv","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Tz98dn1xOyd2XA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"b2xlMzIuZGxs","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"b3JGZTBeNGtt","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"cHRaUjZVfkZr","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UFZBQkNERUZHSElKS01O","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"cVQhXzQ0KCNn","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"cm82c3MkVC5taW5SMw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UnsjKDpSPDUoM14=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"cy9GOyNNK0Q=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"dCJyYXZSQlJlZ3Vccg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VGhhZCdTeXNmbVRpbWVBczE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VFQ5ayIqI2l4","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"dVxqSF5qWjUo","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VWtQVVwuPjNm","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VVNFUjMyLmRsbA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VVUgZyw9JUhIJQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"ViEuWXN1Q3Yl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VjNzLm8+JjE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VkNSVU5USU1FMTQwLmRsbA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VmlydHVhbEFsbG9j","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VmlydHVhbEZyZWU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VmlydHVhbFByb3RlY3Q=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VzVNME1wQ2VoaUh6MG17","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"d2F2ZU91dE9wZW4=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"V0lOTU0uZGxs","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"WGt3YCgpICo=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"WFlaMjM0NTY3ODk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"eUxBY3F1TCk2Ow==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"eiMkJSYnKCkqKywtLi8wMTIzNDU2Nzg5","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"WltcXV5fYEFiYWg=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Wl9hXVQ6T3ZZ","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"ek5UY3prYzlkIj8+IDx4Og==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"fXBBTVZEaXZwbG9i","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"fkI8X0NGOCB2NQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"fkRCQjwgWUJ0Q0M=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"cr-piriform.exe.bin","compromised":null,"detection_total":null,"total":null}]},{"name":"screen_0.png","strings":[{"value":"LCxfLF9fXyxfLHEsXyxf","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_0.png","compromised":null,"detection_total":null,"total":null},{"value":"X19fX19fX19fX19fX18wP19fcF9MPzBfXyxfX19fX18wX19fX19fY2NfXw==","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_0.png","compromised":null,"detection_total":null,"total":null},{"value":"X2lfJywsMCwwX18sX2VfMA==","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_0.png","compromised":null,"detection_total":null,"total":null}]},{"name":"network.pcap","strings":[{"value":"$2c","type":"Ansi","source":"PCAP Processing","process":null,"filename":"network.pcap","compromised":null,"detection_total":null,"total":null},{"value":"$2d","type":"Ansi","source":"PCAP Processing","process":null,"filename":"network.pcap","compromised":null,"detection_total":null,"total":null},{"value":"PExPMmZSKWQ=","type":"Ansi","source":"PCAP Processing","process":null,"filename":"network.pcap","compromised":null,"detection_total":null,"total":null},{"value":"PTVkLkxxLzJSO2FJ","type":"Ansi","source":"PCAP Processing","process":null,"filename":"network.pcap","compromised":null,"detection_total":null,"total":null},{"value":"RlAjdURgPkMj","type":"Ansi","source":"PCAP Processing","process":null,"filename":"network.pcap","compromised":null,"detection_total":null,"total":null},{"value":"Z2VudWluZW1pY3Jvc29mdA==","type":"Ansi","source":"PCAP Processing","process":null,"filename":"network.pcap","compromised":null,"detection_total":null,"total":null},{"value":"SFRUUC8xLjEgMzAyIE1vdmVkIFRlbXBvcmFyaWx5Q2FjaGUtQ29udHJvbDogbm8tY2FjaGVQcmFnbWE6IG5vLWNhY2hlRXhwaXJlczogLTFMb2NhdGlvbjogaHR0cDovL2dlbnVpbmUubWljcm9zb2Z0LmNvbS9yZXBvcnRpbmcvWG1sRXZlbnQuYXNoeD92PTNTZXJ2ZXI6IE1pY3Jvc29mdC1JSVMvOC41WC1Bc3BOZXRNdmMtVmVyc2lvbjogNS4yWC1Bc3BOZXQtVmVyc2lvbjogNC4wLjMwMzE5WC1Qb3dlcmVkLUJ5OiBBU1AuTkVUQ29udGVudC1MZW5ndGg6IDBEYXRlOiBNb24sIDE5IE1hciAyMDE4IDAwOjE0OjU1IEdNVENvbm5lY3Rpb246IGtlZXAtYWxpdmU=","type":"Ansi","source":"PCAP Processing","process":null,"filename":"network.pcap","compromised":null,"detection_total":0,"total":66},{"value":"SFRUUC8xLjEgMzAyIE1vdmVkIFRlbXBvcmFyaWx5Q2FjaGUtQ29udHJvbDogbm8tY2FjaGVQcmFnbWE6IG5vLWNhY2hlRXhwaXJlczogLTFMb2NhdGlvbjogaHR0cHM6Ly92YWxpZGF0aW9uLnNscy5taWNyb3NvZnQuY29tL1NMV0dBL3Nsd2dhLmFzbXhTZXJ2ZXI6IE1pY3Jvc29mdC1JSVMvOC41WC1Bc3BOZXRNdmMtVmVyc2lvbjogNS4yWC1Bc3BOZXQtVmVyc2lvbjogNC4wLjMwMzE5WC1Qb3dlcmVkLUJ5OiBBU1AuTkVUQ29udGVudC1MZW5ndGg6IDBEYXRlOiBNb24sIDE5IE1hciAyMDE4IDAwOjE0OjUxIEdNVENvbm5lY3Rpb246IGtlZXAtYWxpdmU=","type":"Ansi","source":"PCAP Processing","process":null,"filename":"network.pcap","compromised":null,"detection_total":null,"total":null},{"value":"SFRUUC8xLjEgMzAyIE1vdmVkIFRlbXBvcmFyaWx5Q2FjaGUtQ29udHJvbDogbm8tY2FjaGVQcmFnbWE6IG5vLWNhY2hlRXhwaXJlczogLTFMb2NhdGlvbjogaHR0cHM6Ly92YWxpZGF0aW9uLnNscy5taWNyb3NvZnQuY29tL1NMV0dBL3Nsd2dhLmFzbXhTZXJ2ZXI6IE1pY3Jvc29mdC1JSVMvOC41WC1Bc3BOZXRNdmMtVmVyc2lvbjogNS4yWC1Bc3BOZXQtVmVyc2lvbjogNC4wLjMwMzE5WC1Qb3dlcmVkLUJ5OiBBU1AuTkVUQ29udGVudC1MZW5ndGg6IDBEYXRlOiBNb24sIDE5IE1hciAyMDE4IDAwOjE0OjU1IEdNVENvbm5lY3Rpb246IGtlZXAtYWxpdmU=","type":"Ansi","source":"PCAP Processing","process":null,"filename":"network.pcap","compromised":null,"detection_total":null,"total":null},{"value":"bGlJMS9SRn1A","type":"Ansi","source":"PCAP Processing","process":null,"filename":"network.pcap","compromised":null,"detection_total":null,"total":null},{"value":"bTpNYW51ZmFjdHVyZXI8L25hbWU+PHR5cGU+SW5mbzwvdHlwZT48dmFsdWU+aW5ub3RlayBHbWJIPC92YWx1ZT48L3Rva2VuPjx0b2tlbj48bmFtZT5XTUk6V2luMzJfQ29tcHV0ZXJTeXN0ZW06TW9kZWw8L25hbWU+PHR5cGU+SW5mbzwvdHlwZT48dmFsdWU+VmlydHVhbEJveDwvdmFsdWU+PC90b2tlbj48dG9rZW4+PG5hbWU+V01JOldpbjMyX09wZXJhdGluZ1N5c3RlbTpJbnN0YWxsRGF0ZTwvbmFtZT48dHlwZT5JbmZvPC90eXBlPjx2YWx1ZT4yMDE3MTIwMzEyMDYxNi4wMDAwMDArMDYwPC92YWx1ZT48L3Rva2VuPjwvY2xpZW50dG9rZW4+","type":"Ansi","source":"PCAP Processing","process":null,"filename":"network.pcap","compromised":null,"detection_total":null,"total":null},{"value":"UE9TVCAvZndsaW5rLz9MaW5rSWQ9MTUxNjQyIEhUVFAvMS4xQ29ubmVjdGlvbjogS2VlcC1BbGl2ZUFjY2VwdDogdGV4dC8qVXNlci1BZ2VudDogU0xTU29hcENsaWVudENvbnRlbnQtTGVuZ3RoOiAwSG9zdDogZ28ubWljcm9zb2Z0LmNvbQ==","type":"Ansi","source":"PCAP Processing","process":null,"filename":"network.pcap","compromised":null,"detection_total":null,"total":null},{"value":"UE9TVCAvZndsaW5rLz9MaW5rSWQ9MTUxNjQ1IEhUVFAvMS4xQ29ubmVjdGlvbjogS2VlcC1BbGl2ZUFjY2VwdDogKi8qVXNlci1BZ2VudDogV0FUQ2xpZW50Q29udGVudC1MZW5ndGg6IDMyMjlIb3N0OiBnby5taWNyb3NvZnQuY29t","type":"Ansi","source":"PCAP Processing","process":null,"filename":"network.pcap","compromised":null,"detection_total":null,"total":null},{"value":"e0xtLyx1Y0tJ","type":"Ansi","source":"PCAP Processing","process":null,"filename":"network.pcap","compromised":null,"detection_total":null,"total":null}]},{"name":"screen_2.png","strings":[{"value":"MF8wX18nX19fdQ==","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_2.png","compromised":null,"detection_total":null,"total":null},{"value":"P19fX19fX19fX19fMDBfX19fXw==","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_2.png","compromised":null,"detection_total":null,"total":null},{"value":"X18sLCwsXywsLCws","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_2.png","compromised":null,"detection_total":null,"total":null},{"value":"X19fX19fX19fX19fX19f","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_2.png","compromised":null,"detection_total":null,"total":null},{"value":"X19fX19fZV8wXzA=","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_2.png","compromised":null,"detection_total":null,"total":null},{"value":"X19fX0wwX18w","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_2.png","compromised":null,"detection_total":null,"total":null},{"value":"X2wwMGlfX19fX3ZfTDBfXzBl","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_2.png","compromised":null,"detection_total":null,"total":null},{"value":"QWxJUHIwZ3JhbXM=","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_2.png","compromised":null,"detection_total":null,"total":null},{"value":"RS1tYWxJTWU1NWE5ZQ==","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_2.png","compromised":null,"detection_total":null,"total":null},{"value":"bDVfSl90N24zbm1zSm5KLidfXydfcw==","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_2.png","compromised":null,"detection_total":null,"total":null},{"value":"TV9jcjBzMCxfY2Vs","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_2.png","compromised":null,"detection_total":null,"total":null},{"value":"TV9jcjBzMCxXMHJk","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_2.png","compromised":null,"detection_total":null,"total":null},{"value":"TmV3QXBwMCxudG1lbnQ=","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_2.png","compromised":null,"detection_total":null,"total":null},{"value":"Tmd2Y29udGFjdA==","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_2.png","compromised":null,"detection_total":null,"total":null},{"value":"U19sdmVybF85aHQ=","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_2.png","compromised":null,"detection_total":null,"total":null},{"value":"VV8uIW0sYywwLDAsb3V0LDAwaywsbw==","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_2.png","compromised":null,"detection_total":null,"total":null}]}],"image":[]},"http_requests":[],"ftp_requests":[],"irc_requests":[],"strings_resources":[],"tags_details":[],"sample_flags":["Network Traffic","Extracted Files","User Comment"],"suricata_alerts":[],"version_info":[],"apk_info":null,"apps_info":[{"name":"Access","product":"Microsoft Office 2010","version":"14.0.4750.1000"},{"name":"Acrobat Reader","product":"Adobe Acrobat Reader DC","version":"18.9.20050.254034"},{"name":"Chrome","product":null,"version":null},{"name":"Excel","product":"Microsoft Office 2010","version":"14.0.4756.1000"},{"name":"Firefox","product":"Firefox","version":"57.0.1"},{"name":"Flash","product":"Shockwave Flash","version":"27,0,0,187"},{"name":"Hancom Office Hancell","product":null,"version":null},{"name":"Internet Explorer","product":"Internet Explorer","version":"11.00.9600.16428"},{"name":"Java","product":"Java(TM) Platform SE 8","version":"8.0.1510.12"},{"name":"OneNote","product":"Microsoft OneNote","version":"14.0.4763.1000"},{"name":"PowerPoint","product":"Microsoft Office 2010","version":"14.0.4754.1000"},{"name":"Word","product":"Microsoft Office 2010","version":"14.0.4762.1000"}],"architecture":"32 Bit","document":{"author":null,"creator":null,"producer":null,"title":null,"subject":null,"pages":0},"packer":"Netopsystems FEAD Optimizer 1","file_imports":[{"module":"ADVAPI32.dll","functions":["CryptHashData"]},{"module":"api-ms-win-crt-heap-l1-1-0.dll","functions":["free"]},{"module":"api-ms-win-crt-locale-l1-1-0.dll","functions":["_lock_locales"]},{"module":"api-ms-win-crt-math-l1-1-0.dll","functions":["pow"]},{"module":"api-ms-win-crt-runtime-l1-1-0.dll","functions":["exit"]},{"module":"api-ms-win-crt-stdio-l1-1-0.dll","functions":["_set_fmode"]},{"module":"api-ms-win-crt-string-l1-1-0.dll","functions":["toupper"]},{"module":"api-ms-win-crt-time-l1-1-0.dll","functions":["clock"]},{"module":"api-ms-win-crt-utility-l1-1-0.dll","functions":["abs"]},{"module":"COMCTL32.dll","functions":["InitCommonControlsEx"]},{"module":"GDI32.dll","functions":["PatBlt"]},{"module":"gdiplus.dll","functions":["GdipFree"]},{"module":"KERNEL32.DLL","functions":["ExitProcess","GetProcAddress","LoadLibraryA","VirtualAlloc","VirtualFree","VirtualProtect"]},{"module":"ole32.dll","functions":["CreateStreamOnHGlobal"]},{"module":"USER32.dll","functions":["GetDC"]},{"module":"VCRUNTIME140.dll","functions":["memset"]},{"module":"WINMM.dll","functions":["waveOutOpen"]}],"osint_tags":[],"osint_references":[],"memory_forensics":[],"language":"ENGLISH","authentihash":"33cd7d2cd8aa3289ad12797f9181660288f7f75e808bced88d4440f1258796f0","entrypoint_bytes":null,"pdb_timestamp":null,"pdb_pathway":null,"pdb_guid":null,"file_sections":[{"name":"UPX0","entropy":0,"virtual_address":"0x1000","virtual_size":"0x2d000","raw_size":"0x0","md5":"d41d8cd98f00b204e9800998ecf8427e","characteristics":[]},{"name":"UPX1","entropy":7.79210392216,"virtual_address":"0x2e000","virtual_size":"0x6c000","raw_size":"0x6be00","md5":"efe03f9194b877720bc950cfb53f58e3","characteristics":[]},{"name":".rsrc","entropy":5.31371592949,"virtual_address":"0x9a000","virtual_size":"0x2000","raw_size":"0x1e00","md5":"c1819de6da46ca34fb1a320645788f28","characteristics":[]}],"file_exports":[],"error":null,"yara_hits":[],"intelligence_mitre_mappings":[],"entrypoint_preview_count":0,"entrypoint_preview_instructions":[],"file_resources":[{"name":"RT_ICON","rva":"0x9a24c","size":"0x10a8","type":"data","language":"english"},{"name":"RT_FONTDIR","rva":"0x933c8","size":"0xb5","type":"data","language":"english"},{"name":"RT_FONT","rva":"0x8d268","size":"0x615c","type":"data","language":"english"},{"name":"RT_RCDATA","rva":"0x29310","size":"0x1db18","type":"empty","language":"english"},{"name":"RT_RCDATA","rva":"0x46e28","size":"0x40155","type":"data","language":"english"},{"name":"RT_RCDATA","rva":"0x86f80","size":"0x60b0","type":"data","language":"english"},{"name":"RT_GROUP_ICON","rva":"0x9b2f8","size":"0x14","type":"MS Windows icon resource - 1 icon, 32x32","language":"english"},{"name":"RT_MANIFEST","rva":"0x9b310","size":"0x2e9","type":"XML 1.0 document, UTF-8 Unicode (with BOM) text, with very long lines, with CRLF line terminators","language":"english"},{"name":"RT_MANIFEST","rva":"0x9b600","size":"0x235","type":"XML 1.0 document, ASCII text, with CRLF line terminators","language":"english"}],"file_permissions":[],"file_activities":[],"file_receivers":[],"file_data_directories":[],"elf_headers":[],"elf_static_symbols":null,"vba_macros":[],"verdict_source":null,"user_comments":[{"_id":"5e986312d8def722f54de9fb","content":"testing only\r\n","user":null,"created_at":"2019-08-26T05:48:18+00:00"}],"email_headers":null,"classification_tags":["evasive"],"tags":["evasive"],"submissions":[{"submission_id":"626bd1313ab46160c609c04c","filename":"cr-piriform.exe","url":null,"created_at":"2022-04-29T11:51:13+00:00"},{"submission_id":"60e48f2f201735560d135364","filename":"cr-piriform.exe","url":null,"created_at":"2021-07-06T17:13:19+00:00"},{"submission_id":"60daad42eb26a26ea0374f16","filename":"cr-piriform.exe","url":null,"created_at":"2021-06-29T05:18:58+00:00"},{"submission_id":"606b156bd44a4e0224267f83","filename":"cr-piriform.exe","url":null,"created_at":"2021-04-05T13:49:31+00:00"},{"submission_id":"60433fa1f202214ee71ec380","filename":"cr-piriform.exe","url":null,"created_at":"2021-03-06T08:38:57+00:00"},{"submission_id":"603b672c0ebe12718545c3f6","filename":"cr-piriform.exe","url":null,"created_at":"2021-02-28T09:49:32+00:00"},{"submission_id":"60270f447d55cc2a171801b7","filename":"cr-piriform.exe","url":null,"created_at":"2021-02-12T23:29:08+00:00"},{"submission_id":"60255f172a85cb17a10d92ab","filename":"cr-piriform.exe","url":null,"created_at":"2021-02-11T16:45:11+00:00"},{"submission_id":"601a81f81ffb3c2da72d66fc","filename":"cr-piriform.exe","url":null,"created_at":"2021-02-03T10:59:04+00:00"},{"submission_id":"5fe4b4a958ffc636cd30684b","filename":"cr-piriform.exe","url":null,"created_at":"2020-12-24T15:32:57+00:00"},{"submission_id":"5fe10f901241662102238ea7","filename":"cr-piriform.exe","url":null,"created_at":"2020-12-21T21:11:44+00:00"},{"submission_id":"5fd3036feb97e37ee25510a5","filename":"cr-piriform.exe","url":null,"created_at":"2020-12-11T05:28:15+00:00"},{"submission_id":"5fc60fa742ec2c29c663d0b4","filename":"cr-piriform.exe","url":null,"created_at":"2020-12-01T09:40:55+00:00"},{"submission_id":"5fa59d6b78e436651b7043b8","filename":"Keygen.exe","url":null,"created_at":"2020-11-06T19:00:59+00:00"},{"submission_id":"5fa1772484a65b365932984f","filename":"cr-piriform.exe","url":null,"created_at":"2020-11-03T15:28:36+00:00"},{"submission_id":"5ef5b5069e40ec006d0c1961","filename":"cr-piriform.exe","url":null,"created_at":"2020-06-26T08:42:46+00:00"},{"submission_id":"5ed4b4c92105946b560764f5","filename":"cr-piriform.exe","url":null,"created_at":"2020-06-01T07:56:57+00:00"},{"submission_id":"5ebf8c34275e7870c6432a63","filename":"cr-piriform.exe","url":null,"created_at":"2020-05-16T06:46:12+00:00"},{"submission_id":"5ebee4a96c13b046c9376f56","filename":"cr-piriform.exe","url":null,"created_at":"2020-05-15T18:51:21+00:00"},{"submission_id":"5d73ea94028838dc60c9b656","filename":"cr-piriform.exe","url":null,"created_at":"2019-09-07T17:36:20+00:00"}],"crowdstrike_ai":{"executable_process_memory_analysis":[],"analysis_related_urls":[]},"warnings":["Added comment to Virus Total report"],"report_related_files":{"report_json":{"file_name":"report.json","download_url":"/bff/report/5a735a607ca3e10828337ec4/download/files/report_json","file_size":182325},"memory_strings":{"file_name":"mstrings.zip","download_url":"/bff/report/5a735a607ca3e10828337ec4/download/files/memory_strings","file_size":6894},"certificate":null,"network_pcap":{"file_name":"network.pcap","download_url":"/bff/report/5a735a607ca3e10828337ec4/download/files/network_pcap","file_size":48517},"memory_dumps":null},"system_resource_monitor":{"cpu_usage":[{"x":0,"y":98.7692},{"x":1,"y":60},{"x":2,"y":12.1875},{"x":3,"y":12.1875},{"x":4,"y":14.0625},{"x":5,"y":12.6563},{"x":6,"y":6.40625},{"x":7,"y":11.5625},{"x":8,"y":12.6563},{"x":9,"y":10.625},{"x":10,"y":9.6875},{"x":11,"y":12.6563},{"x":12,"y":6.09375},{"x":13,"y":12.5},{"x":14,"y":11.5625},{"x":15,"y":11.0938},{"x":16,"y":11.5625},{"x":17,"y":6.70827},{"x":18,"y":9.53125},{"x":19,"y":10.625},{"x":20,"y":12.0313},{"x":21,"y":10.7812}],"memory_usage":[{"x":0,"y":19.8161},{"x":1,"y":18.1247},{"x":2,"y":18.1427},{"x":3,"y":17.9703},{"x":4,"y":17.6191},{"x":5,"y":17.696},{"x":6,"y":17.6965},{"x":7,"y":17.5054},{"x":8,"y":17.671},{"x":9,"y":17.3673},{"x":10,"y":17.3538},{"x":11,"y":17.3533},{"x":12,"y":17.3226},{"x":13,"y":17.3047},{"x":14,"y":17.3026},{"x":15,"y":17.2968},{"x":16,"y":17.2942},{"x":17,"y":17.4064},{"x":18,"y":17.272},{"x":19,"y":17.2791},{"x":20,"y":17.3292},{"x":21,"y":17.3346}],"disk_read":[{"x":0,"y":1459150},{"x":1,"y":391892},{"x":2,"y":649590},{"x":3,"y":491141},{"x":4,"y":56002.4},{"x":5,"y":38061.8},{"x":6,"y":61494.6},{"x":7,"y":62922.5},{"x":8,"y":119493},{"x":9,"y":71509.3},{"x":10,"y":15863.4},{"x":11,"y":432.175},{"x":12,"y":42234.4},{"x":13,"y":432.723},{"x":14,"y":432.453},{"x":15,"y":3437.79},{"x":16,"y":431.857},{"x":17,"y":421.617},{"x":18,"y":1715.68},{"x":19,"y":2140.88},{"x":20,"y":46904.6},{"x":21,"y":48455.5}],"disk_write":[{"x":0,"y":689865},{"x":1,"y":847973},{"x":2,"y":1398230},{"x":3,"y":1470770},{"x":4,"y":381202},{"x":5,"y":207938},{"x":6,"y":596292},{"x":7,"y":490289},{"x":8,"y":208084},{"x":9,"y":68344.2},{"x":10,"y":58308.8},{"x":11,"y":51482.9},{"x":12,"y":134094},{"x":13,"y":43164.1},{"x":14,"y":44056.2},{"x":15,"y":59409.3},{"x":16,"y":5344.23},{"x":17,"y":42583.3},{"x":18,"y":52703.6},{"x":19,"y":46189.5},{"x":20,"y":29956.3},{"x":21,"y":37211.7}],"network_packets":[{"x":0,"y":7.21027},{"x":1,"y":0.418602},{"x":2,"y":0},{"x":3,"y":0.740987},{"x":4,"y":2.71881},{"x":5,"y":9.26611},{"x":6,"y":0.411677},{"x":7,"y":2.20959},{"x":8,"y":3.06529},{"x":9,"y":0.314328},{"x":10,"y":0.31402},{"x":11,"y":0.422046},{"x":12,"y":0.309334},{"x":13,"y":4.96533},{"x":14,"y":0.422317},{"x":15,"y":0},{"x":16,"y":1.47607},{"x":17,"y":0},{"x":18,"y":0},{"x":19,"y":0},{"x":20,"y":0},{"x":21,"y":0}],"page_file":[{"x":0,"y":357859000},{"x":1,"y":292405000},{"x":2,"y":292790000},{"x":3,"y":286495000},{"x":4,"y":280134000},{"x":5,"y":282677000},{"x":6,"y":282423000},{"x":7,"y":276742000},{"x":8,"y":281088000},{"x":9,"y":272171000},{"x":10,"y":271847000},{"x":11,"y":271909000},{"x":12,"y":270914000},{"x":13,"y":270287000},{"x":14,"y":270291000},{"x":15,"y":270098000},{"x":16,"y":270090000},{"x":17,"y":273170000},{"x":18,"y":269152000},{"x":19,"y":269214000},{"x":20,"y":270385000},{"x":21,"y":270393000}]},"external_reports":null,"available_buttons":{"report_false_positive":true},"hashes_to_context_check":["99f0875ce316761fe9dde48b1313486ba59e257f2db08d8040bee5b07067010c","9b5a95a8a5ee6a920fe0eb0aefd15c83ad2a94c518c9bf75c2975a974da2d9e5"]}}]]}] 1e:null 22:[["$","title","0",{"children":"Malicious Trojan.Generic — Falcon Sandbox Report — Score 100/100 — Sample 99f0875ce316… | Hybrid Analysis"}],["$","meta","1",{"name":"description","content":"Malicious verdict for sandbox report 5a735a607ca3…. Malware family: Trojan.Generic. Threat score 100/100. 3 malicious and 13 suspicious behavioral indicators across 31 signatures. Detonated in Windows 7 64 bit. View behavioral indicators, network activity, dropped files, and MITRE ATT&CK mappings."}],["$","meta","2",{"name":"robots","content":"index, follow"}],["$","link","3",{"rel":"canonical","href":"https://www.hybrid-analysis.com/sample/99f0875ce316761fe9dde48b1313486ba59e257f2db08d8040bee5b07067010c/5a735a607ca3e10828337ec4"}],["$","meta","4",{"property":"og:title","content":"Malicious Trojan.Generic — Falcon Sandbox Report — Score 100/100 — Sample 99f0875ce316… | Hybrid Analysis"}],["$","meta","5",{"property":"og:description","content":"Malicious verdict for sandbox report 5a735a607ca3…. Malware family: Trojan.Generic. Threat score 100/100. 3 malicious and 13 suspicious behavioral indicators across 31 signatures. Detonated in Windows 7 64 bit. View behavioral indicators, network activity, dropped files, and MITRE ATT&CK mappings."}],["$","meta","6",{"property":"og:url","content":"https://www.hybrid-analysis.com/sample/99f0875ce316761fe9dde48b1313486ba59e257f2db08d8040bee5b07067010c/5a735a607ca3e10828337ec4"}],["$","meta","7",{"name":"twitter:card","content":"summary"}],["$","meta","8",{"name":"twitter:title","content":"Malicious Trojan.Generic — Falcon Sandbox Report — Score 100/100 — Sample 99f0875ce316… | Hybrid Analysis"}],["$","meta","9",{"name":"twitter:description","content":"Malicious verdict for sandbox report 5a735a607ca3…. Malware family: Trojan.Generic. Threat score 100/100. 3 malicious and 13 suspicious behavioral indicators across 31 signatures. Detonated in Windows 7 64 bit. View behavioral indicators, network activity, dropped files, and MITRE ATT&CK mappings."}],["$","link","10",{"rel":"icon","href":"/favicon.svg"}],["$","$L2e","11",{}]]