25:I[10321,["/_next/static/chunks/3q3zujqgvmbhp.js","/_next/static/chunks/1sl4dwu7ouhir.js","/_next/static/chunks/3eaw1sz4hhkwg.js","/_next/static/chunks/0poobxhsa58tt.js","/_next/static/chunks/3utyn4akhmarc.js","/_next/static/chunks/3k0jjn7m8jtc5.js","/_next/static/chunks/3xfwong8gg51p.js","/_next/static/chunks/1kn_tf3p-ubex.js"],"ReportDetailWrapper"] 35:I[27201,["/_next/static/chunks/3q3zujqgvmbhp.js","/_next/static/chunks/1sl4dwu7ouhir.js","/_next/static/chunks/3eaw1sz4hhkwg.js","/_next/static/chunks/0poobxhsa58tt.js","/_next/static/chunks/3utyn4akhmarc.js"],"IconMark"] 24:T4ae,{"@context":"https://schema.org","@type":"TechArticle","headline":"Malicious — Falcon Sandbox Report 5ac4ee317ca3… — Score 100/100 — Sample e7219d2bff8a…","description":"Malicious verdict for sandbox report 5ac4ee317ca3…. Threat score 100/100. 3 malicious and 18 suspicious behavioral indicators across 42 signatures. Detonated in Windows 7 64 bit. View behavioral indicators, network activity, dropped files, and MITRE ATT\u0026CK mappings.","url":"/sample/e7219d2bff8a2e3f3d9ec5d3c821fbdcde017b71766381de037c5ff159c2d04e/5ac4ee317ca3e174051348f3","keywords":["Malicious","sandbox report","malware analysis","MITRE ATT\u0026CK","e7219d2bff8a2e3f3d9ec5d3c821fbdcde017b71766381de037c5ff159c2d04e"],"about":{"@type":"SoftwareApplication","name":"censitrac.exe","applicationCategory":"PE32 executable (GUI) Intel 80386, for MS Windows","identifier":"e7219d2bff8a2e3f3d9ec5d3c821fbdcde017b71766381de037c5ff159c2d04e","additionalType":"Malicious sample"},"threatScore":100,"sandboxEnvironment":"Windows 7 64 bit","behavioralIndicators":{"malicious":3,"suspicious":18,"totalSignatures":42},"publisher":{"@type":"Organization","name":"Hybrid Analysis","url":"https://www.hybrid-analysis.com"}}26:T400,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27:T400,AAABAAEAICAQAAAAAADoAgAAFgAAACgAAAAgAAAAQAAAAAEABAAAAAAAgAIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAAACAAAAAgIAAgAAAAIAAgACAgAAAgICAAMDAwAAAAP8AAP8AAAD//wD/AAAA/wD/AP//AAD///8AZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZ4h2ZmZmZmZmZmZmZmZmZmiIhmZmZmZmZmZmZmZmZmZoiIZmZmZmZmZmZmZmZmZmaIh2ZmZmZmZmZmZmZmZnd2ZmZndmZmZmZmZmZmZmeIh2ZmiIhmZmZmZmZmZmZniIdmZoiIZmZmZmZmZmZmZ4iHZmaIiGZmZmZmZmZmd2Z3ZmZmZ3ZmdmZmZmZmZ4iGZmaIh2ZmeIhmZmZmZmiIh2ZmiIhmZoiIdmZmZmZniIZmZoiIZmZ4iHZmZmZmZoh2ZmZ4h2ZmaIhmZmZniHZmZoiGZmZ4h2ZmZ4h2aIiGZmeIh2ZmiIhmZmiIdniIhmZniIdmZoiIZmZ4iIZoiHZmZoiHZmZ4h2ZmaIh2ZmZmd2ZmZnd2ZmZo+GZmZmZmZ4iGZmaIh2Zmj/92ZmZmZmiIh2ZniIhmZv//hmZmZmZniIZmZoiIZmaP/4ZmZmZmZndmZ3Z3dmZmaIhmZmZmZmZmZoiHZmZ4iGZmZmZmZmZmZmeIiGZmiIhmZmZmZmZmZmZniIdmZoiIZmZmZmZmZmZmZnh2ZmZ4h2ZmZmZmZmZmZmZmZniHZmZmZmZmZmZmZmZmZmaIiGZmZmZmZmZmZmZmZmZmiIhmZmZmZmZmZmZmZmZmZniHZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==28:T400,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29:T400,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2a:T400,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2b:T400,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2c:T400,AAABAAEAICAQAAAAAADoAgAAFgAAACgAAAAgAAAAQAAAAAEABAAAAAAAgAIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAAACAAAAAgIAAgAAAAIAAgACAgAAAgICAAMDAwAAAAP8AAP8AAAD//wD/AAAA/wD/AP//AAD///8AZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZ4h2ZmZmZmZmZmZmZmZmZmiIhmZmZmZmZmZmZmZmZmZoiIZmZmZmZmZmZmZmZmZmaIh2ZmZmZmZmZmZmZmZnd2ZmZndmZmZmZmZmZmZmeIh2ZmiIhmZmZmZmZmZmZniIdmZoiIZmZmZmZmZmZmZ4iHZmaIiGZmZmZmZmZmd2Z3ZmZmZ3ZmdmZmZmZmZ4iGZmaIh2ZmeIhmZmZmZmiIh2ZmiIhmZoiIdmZmZmZniIZmZoiIZmZ4iHZmZmZmZoh2ZmZ4h2ZmaIhmZmZniHZmZoiGZmZ4h2ZmZ4h2aIiGZmeIh2ZmiIhmZmiIdniIhmZniIdmZoiIZmZ4iIZoiHZmZoiHZmZ4h2ZmaIh2ZmZmd2ZmZnd2ZmZo+GZmZmZmZ4iGZmaIh2Zmj/92ZmZmZmiIh2ZniIhmZv//hmZmZmZniIZmZoiIZmaP/4ZmZmZmZndmZ3Z3dmZmaIhmZmZmZmZmZoiHZmZ4iGZmZmZmZmZmZmeIiGZmiIhmZmZmZmZmZmZniIdmZoiIZmZmZmZmZmZmZnh2ZmZ4h2ZmZmZmZmZmZmZmZniHZmZmZmZmZmZmZmZmZmaIiGZmZmZmZmZmZmZmZmZmiIhmZmZmZmZmZmZmZmZmZniHZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==2d:T400,AAABAAEAICAQAAAAAADoAgAAFgAAACgAAAAgAAAAQAAAAAEABAAAAAAAgAIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAAACAAAAAgIAAgAAAAIAAgACAgAAAgICAAMDAwAAAAP8AAP8AAAD//wD/AAAA/wD/AP//AAD///8AZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZ4h2ZmZmZmZmZmZmZmZmZmiIhmZmZmZmZmZmZmZmZmZoiIZmZmZmZmZmZmZmZmZmaIh2ZmZmZmZmZmZmZmZnd2ZmZndmZmZmZmZmZmZmeIh2ZmiIhmZmZmZmZmZmZniIdmZoiIZmZmZmZmZmZmZ4iHZmaIiGZmZmZmZmZmd2Z3ZmZmZ3ZmdmZmZmZmZ4iGZmaIh2ZmeIhmZmZmZmiIh2ZmiIhmZoiIdmZmZmZniIZmZoiIZmZ4iHZmZmZmZoh2ZmZ4h2ZmaIhmZmZniHZmZoiGZmZ4h2ZmZ4h2aIiGZmeIh2ZmiIhmZmiIdniIhmZniIdmZoiIZmZ4iIZoiHZmZoiHZmZ4h2ZmaIh2ZmZmd2ZmZnd2ZmZo+GZmZmZmZ4iGZmaIh2Zmj/92ZmZmZmiIh2ZniIhmZv//hmZmZmZniIZmZoiIZmaP/4ZmZmZmZndmZ3Z3dmZmaIhmZmZmZmZmZoiHZmZ4iGZmZmZmZmZmZmeIiGZmiIhmZmZmZmZmZmZniIdmZoiIZmZmZmZmZmZmZnh2ZmZ4h2ZmZmZmZmZmZmZmZniHZmZmZmZmZmZmZmZmZmaIiGZmZmZmZmZmZmZmZmZmiIhmZmZmZmZmZmZmZmZmZniHZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==2e:T2a7b,Process "dllhost.exe" (UID: 00017293-00004072) was launched with modified environment variables: "LOCALAPPDATA, TMP, PROCESSOR_ARCHITECTURE, USERDOMAIN, CommonProgramFiles, ProgramFiles, USERPROFILE, TEMP, APPDATA" Process "dllhost.exe" (UID: 00017293-00004072) was launched with missing environment variables: "PROMPT, LOGONSERVER, HOMEPATH, HOMEDRIVE, PROCESSOR_ARCHITEW6432" Process "Censitrac.exe" (UID: 00017318-00004372) was launched with new environment variables: "ALLUSERSPROFILE="C:\ProgramData", ProgramData="C:\ProgramData", HOMEPATH="\Users\nD0mf6s", PUBLIC="C:\Users\Public", PROMPT="$P$G", LOGONSERVER="\\HAPUBWS-PC", LOCALAPPDATA="C:\Users\nD0mf6s\AppData\Local", USERDOMAIN="2FR3idP3EE", COMPUTERNAME="2FR3idP3EE", USERPROFILE="C:\Users\nD0mf6s", ProgramFiles(x86)="C:\Program Files (x86)", PROCESSOR_ARCHITEW6432="AMD64", CommonProgramFiles="C:\Program Files (x86)\Common Files", ProgramW6432="C:\Program Files", ProgramFiles="C:\Program Files (x86)", HOMEDRIVE="C:", CommonProgramW6432="C:\Program Files\Common Files", CommonProgramFiles(x86)="C:\Program Files (x86)\Common Files", APPDATA="C:\Users\nD0mf6s\AppData\Roaming"" Process "Censitrac.exe" (UID: 00017318-00004372) was launched with modified environment variables: "TMP, PROCESSOR_ARCHITECTURE, USERNAME, TEMP" Process "VBoxService.exe" (UID: 00017401-00004600) was launched with new environment variables: "LOGONSERVER="\\HAPUBWS-PC", HOMEPATH="\Users\nD0mf6s", HOMEDRIVE="C:"" Process "VBoxService.exe" (UID: 00017401-00004600) was launched with modified environment variables: "LOCALAPPDATA, TMP, USERDOMAIN, Path, USERPROFILE, TEMP, APPDATA" Process "conhost.exe" (UID: 00017407-00002500) was launched with modified environment variables: "TMP, USERNAME, Path, TEMP" Process "conhost.exe" (UID: 00017407-00002500) was launched with missing environment variables: "ALLUSERSPROFILE, ProgramData, HOMEPATH, PUBLIC, LOGONSERVER, LOCALAPPDATA, USERDOMAIN, COMPUTERNAME, USERPROFILE, ProgramFiles(x86), CommonProgramFiles, ProgramW6432, ProgramFiles, HOMEDRIVE, CommonProgramW6432, CommonProgramFiles(x86), APPDATA" Process "conhost.exe" (UID: 00017873-00004020) was launched with modified environment variables: "TMP, PROCESSOR_ARCHITECTURE, USERNAME, TEMP" Process "conhost.exe" (UID: 00017873-00004020) was launched with missing environment variables: "ALLUSERSPROFILE, ProgramData, HOMEPATH, PUBLIC, PROMPT, LOGONSERVER, LOCALAPPDATA, USERDOMAIN, COMPUTERNAME, USERPROFILE, ProgramFiles(x86), PROCESSOR_ARCHITEW6432, CommonProgramFiles, ProgramW6432, ProgramFiles, HOMEDRIVE, CommonProgramW6432, CommonProgramFiles(x86), APPDATA" Process "cacls.exe" (UID: 00017900-00003632) was launched with new environment variables: "ALLUSERSPROFILE="C:\ProgramData", ProgramData="C:\ProgramData", HOMEPATH="\Users\nD0mf6s", PUBLIC="C:\Users\Public", PROMPT="$P$G", LOGONSERVER="\\HAPUBWS-PC", LOCALAPPDATA="C:\Users\nD0mf6s\AppData\Local", USERDOMAIN="2FR3idP3EE", COMPUTERNAME="2FR3idP3EE", USERPROFILE="C:\Users\nD0mf6s", ProgramFiles(x86)="C:\Program Files (x86)", PROCESSOR_ARCHITEW6432="AMD64", CommonProgramFiles="C:\Program Files (x86)\Common Files", ProgramW6432="C:\Program Files", ProgramFiles="C:\Program Files (x86)", HOMEDRIVE="C:", CommonProgramW6432="C:\Program Files\Common Files", CommonProgramFiles(x86)="C:\Program Files (x86)\Common Files", APPDATA="C:\Users\nD0mf6s\AppData\Roaming"" Process "cacls.exe" (UID: 00017900-00003632) was launched with modified environment variables: "TMP, PROCESSOR_ARCHITECTURE, USERNAME, TEMP" Process "conhost.exe" (UID: 00017909-00003268) was launched with modified environment variables: "TMP, PROCESSOR_ARCHITECTURE, USERNAME, TEMP" Process "conhost.exe" (UID: 00017909-00003268) was launched with missing environment variables: "ALLUSERSPROFILE, ProgramData, HOMEPATH, PUBLIC, PROMPT, LOGONSERVER, LOCALAPPDATA, USERDOMAIN, COMPUTERNAME, USERPROFILE, ProgramFiles(x86), PROCESSOR_ARCHITEW6432, CommonProgramFiles, ProgramW6432, ProgramFiles, HOMEDRIVE, CommonProgramW6432, CommonProgramFiles(x86), APPDATA" Process "regsvr32.exe" (UID: 00017949-00004764) was launched with new environment variables: "ALLUSERSPROFILE="C:\ProgramData", ProgramData="C:\ProgramData", HOMEPATH="\Users\nD0mf6s", PUBLIC="C:\Users\Public", PROMPT="$P$G", LOGONSERVER="\\HAPUBWS-PC", LOCALAPPDATA="C:\Users\nD0mf6s\AppData\Local", USERDOMAIN="2FR3idP3EE", COMPUTERNAME="2FR3idP3EE", USERPROFILE="C:\Users\nD0mf6s", ProgramFiles(x86)="C:\Program Files (x86)", PROCESSOR_ARCHITEW6432="AMD64", CommonProgramFiles="C:\Program Files (x86)\Common Files", ProgramW6432="C:\Program Files", ProgramFiles="C:\Program Files (x86)", HOMEDRIVE="C:", CommonProgramW6432="C:\Program Files\Common Files", CommonProgramFiles(x86)="C:\Program Files (x86)\Common Files", APPDATA="C:\Users\nD0mf6s\AppData\Roaming"" Process "regsvr32.exe" (UID: 00017949-00004764) was launched with modified environment variables: "TMP, PROCESSOR_ARCHITECTURE, USERNAME, TEMP" Process "dllhost.exe" (UID: 00018201-00003172) was launched with new environment variables: "SESSIONNAME="Console"" Process "dllhost.exe" (UID: 00018201-00003172) was launched with modified environment variables: "PROCESSOR_ARCHITECTURE, CommonProgramFiles, ProgramFiles, Path" Process "dllhost.exe" (UID: 00018201-00003172) was launched with missing environment variables: "PROMPT, PROCESSOR_ARCHITEW6432" Process "dllhost.exe" (UID: 00019450-00004428) was launched with modified environment variables: "LOCALAPPDATA, TMP, USERDOMAIN, Path, USERPROFILE, TEMP, APPDATA" Process "dllhost.exe" (UID: 00019450-00004428) was launched with missing environment variables: "LOGONSERVER, HOMEPATH, SESSIONNAME, HOMEDRIVE" Process "VBoxService.exe" (UID: 00019480-00002860) was launched with new environment variables: "LOGONSERVER="\\HAPUBWS-PC", HOMEPATH="\Users\nD0mf6s", HOMEDRIVE="C:"" Process "VBoxService.exe" (UID: 00019480-00002860) was launched with modified environment variables: "LOCALAPPDATA, TMP, USERDOMAIN, Path, USERPROFILE, TEMP, APPDATA" Process "conhost.exe" (UID: 00019483-00003628) was launched with modified environment variables: "TMP, USERNAME, Path, TEMP" Process "conhost.exe" (UID: 00019483-00003628) was launched with missing environment variables: "ALLUSERSPROFILE, ProgramData, HOMEPATH, PUBLIC, LOGONSERVER, LOCALAPPDATA, USERDOMAIN, COMPUTERNAME, USERPROFILE, ProgramFiles(x86), CommonProgramFiles, ProgramW6432, ProgramFiles, HOMEDRIVE, CommonProgramW6432, CommonProgramFiles(x86), APPDATA" Process "dllhost.exe" (UID: 00021772-00001640) was launched with new environment variables: "ALLUSERSPROFILE="C:\ProgramData", ProgramData="C:\ProgramData", HOMEPATH="\Users\nD0mf6s", PUBLIC="C:\Users\Public", LOGONSERVER="\\HAPUBWS-PC", LOCALAPPDATA="C:\Users\nD0mf6s\AppData\Local", USERDOMAIN="2FR3idP3EE", COMPUTERNAME="2FR3idP3EE", USERPROFILE="C:\Users\nD0mf6s", ProgramFiles(x86)="C:\Program Files (x86)", CommonProgramFiles="C:\Program Files\Common Files", ProgramW6432="C:\Program Files", ProgramFiles="C:\Program Files", HOMEDRIVE="C:", CommonProgramW6432="C:\Program Files\Common Files", CommonProgramFiles(x86)="C:\Program Files (x86)\Common Files", APPDATA="C:\Users\nD0mf6s\AppData\Roaming"" Process "dllhost.exe" (UID: 00021772-00001640) was launched with modified environment variables: "TMP, USERNAME, Path, TEMP" Process "dllhost.exe" (UID: 00022158-00004584) was launched with modified environment variables: "LOCALAPPDATA, TMP, USERDOMAIN, Path, USERPROFILE, TEMP, APPDATA" Process "dllhost.exe" (UID: 00022158-00004584) was launched with missing environment variables: "LOGONSERVER, HOMEPATH, HOMEDRIVE" Process "VBoxService.exe" (UID: 00022187-00002572) was launched with new environment variables: "LOGONSERVER="\\HAPUBWS-PC", HOMEPATH="\Users\nD0mf6s", HOMEDRIVE="C:"" Process "VBoxService.exe" (UID: 00022187-00002572) was launched with modified environment variables: "LOCALAPPDATA, TMP, USERDOMAIN, Path, USERPROFILE, TEMP, APPDATA" Process "conhost.exe" (UID: 00022190-00002580) was launched with modified environment variables: "TMP, USERNAME, Path, TEMP" Process "conhost.exe" (UID: 00022190-00002580) was launched with missing environment variables: "ALLUSERSPROFILE, ProgramData, HOMEPATH, PUBLIC, LOGONSERVER, LOCALAPPDATA, USERDOMAIN, COMPUTERNAME, USERPROFILE, ProgramFiles(x86), CommonProgramFiles, ProgramW6432, ProgramFiles, HOMEDRIVE, CommonProgramW6432, CommonProgramFiles(x86), APPDATA" Process "dllhost.exe" (UID: 00024206-00003764) was launched with new environment variables: "ALLUSERSPROFILE="C:\ProgramData", LOCALAPPDATA="C:\Windows\system32\config\systemprofile\AppData\Local", ProgramData="C:\ProgramData", USERDOMAIN="2FR3idP3E", COMPUTERNAME="2FR3idP3EE", PUBLIC="C:\Users\Public", USERPROFILE="C:\Windows\system32\config\systemprofile", ProgramFiles(x86)="C:\Program Files (x86)", CommonProgramFiles="C:\Program Files\Common Files", ProgramW6432="C:\Program Files", ProgramFiles="C:\Program Files", CommonProgramW6432="C:\Program Files\Common Files", CommonProgramFiles(x86)="C:\Program Files (x86)\Common Files", APPDATA="C:\Windows\system32\config\systemprofile\AppData\Roaming"" Process "dllhost.exe" (UID: 00024206-00003764) was launched with modified environment variables: "USERNAME" Process "VBoxService.exe" (UID: 00024233-00003952) was launched with new environment variables: "LOGONSERVER="\\HAPUBWS-PC", HOMEPATH="\Users\nD0mf6s", HOMEDRIVE="C:"" Process "VBoxService.exe" (UID: 00024233-00003952) was launched with modified environment variables: "LOCALAPPDATA, TMP, USERDOMAIN, Path, USERPROFILE, TEMP, APPDATA" Process "conhost.exe" (UID: 00024236-00001672) was launched with modified environment variables: "TMP, USERNAME, Path, TEMP" Process "conhost.exe" (UID: 00024236-00001672) was launched with missing environment variables: "ALLUSERSPROFILE, ProgramData, HOMEPATH, PUBLIC, LOGONSERVER, LOCALAPPDATA, USERDOMAIN, COMPUTERNAME, USERPROFILE, ProgramFiles(x86), CommonProgramFiles, ProgramW6432, ProgramFiles, HOMEDRIVE, CommonProgramW6432, CommonProgramFiles(x86), APPDATA" Process "dllhost.exe" (UID: 00025484-00004872) was launched with new environment variables: "ALLUSERSPROFILE="C:\ProgramData", ProgramData="C:\ProgramData", HOMEPATH="\Users\nD0mf6s", PUBLIC="C:\Users\Public", LOGONSERVER="\\HAPUBWS-PC", LOCALAPPDATA="C:\Users\nD0mf6s\AppData\Local", USERDOMAIN="2FR3idP3EE", COMPUTERNAME="2FR3idP3EE", USERPROFILE="C:\Users\nD0mf6s", ProgramFiles(x86)="C:\Program Files (x86)", CommonProgramFiles="C:\Program Files\Common Files", ProgramW6432="C:\Program Files", ProgramFiles="C:\Program Files", HOMEDRIVE="C:", CommonProgramW6432="C:\Program Files\Common Files", CommonProgramFiles(x86)="C:\Program Files (x86)\Common Files", APPDATA="C:\Users\nD0mf6s\AppData\Roaming"" Process "dllhost.exe" (UID: 00025484-00004872) was launched with modified environment variables: "TMP, USERNAME, Path, TEMP"2f:Ta9e,Spawned process "dllhost.exe" with commandline "/Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}" (UID: 00017293-00004072) Spawned process "Censitrac.exe" with commandline "/i" (UID: 00017318-00004372) Spawned process "VBoxService.exe" with commandline "guestsession --session-id=2 --session-proto=2 --user %OSUSER%" (UID: 00017401-00004600) Spawned process "conhost.exe" with commandline ""1326367788-74642697812112153561280963122988602996-2143904698-584606740-1730333015"" (UID: 00017407-00002500) Spawned process "cacls.exe" with commandline "cacls "%PROGRAMFILES%\(x86)\Censitrac" /T /E /C /p "Domain\Domain Users":F" (UID: 00017860-00003940) Spawned process "conhost.exe" with commandline ""-876518106564522501-17229483521280457337-190447950-4540262397756535531975067373"" (UID: 00017873-00004020) Spawned process "cacls.exe" with commandline "cacls "%PROGRAMFILES%\(x86)\Censitrac" /T /E /C /p "BUILTIN\Users":F" (UID: 00017900-00003632) Spawned process "conhost.exe" with commandline ""10650578335717743631451838221349842119929459374-561578266-396264015-794880881"" (UID: 00017909-00003268) Spawned process "regsvr32.exe" with commandline "regsvr32 -s -c "%PROGRAMFILES%\(x86)\Censitrac\WBCustomizer.dll"" (UID: 00017949-00004764) Spawned process "regsvr32.exe" with commandline "regsvr32 -s -c "%WINDIR%\system32\msflxgrd.ocx"" (UID: 00018008-00000728) Spawned process "regsvr32.exe" with commandline "regsvr32 -s -c "%WINDIR%\system32\mscomm32.ocx"" (UID: 00018083-00000436) Spawned process "dllhost.exe" with commandline "/Processid:{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}" (UID: 00018201-00003172) Spawned process "dllhost.exe" with commandline "/Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}" (UID: 00019450-00004428) Spawned process "VBoxService.exe" with commandline "guestsession --session-id=2 --session-proto=2 --user %OSUSER%" (UID: 00019480-00002860) Spawned process "conhost.exe" with commandline ""-1051413858-1364305440-535621194-141297315920313246441720585698-772470915-670479306"" (UID: 00019483-00003628) Spawned process "dllhost.exe" with commandline "/Processid:{F9717507-6651-4EDB-BFF7-AE615179BCCF}" (UID: 00021772-00001640) Spawned process "dllhost.exe" with commandline "/Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}" (UID: 00022158-00004584) Spawned process "VBoxService.exe" with commandline "guestsession --session-id=2 --session-proto=2 --user %OSUSER%" (UID: 00022187-00002572) Spawned process "conhost.exe" with commandline ""862242309-340269307416007485-493106922-1066022867185587731-2074273098886839108"" (UID: 00022190-00002580) Spawned process "dllhost.exe" with commandline "/Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}" (UID: 00024206-00003764)30:T446,"" touched file "C:\Windows\Globalization\Sorting\SortDefault.nls" "" touched file "C:\Windows\SysWOW64\rsaenh.dll" "" touched file "C:\Windows\SysWOW64\en-US\user32.dll.mui" "" touched file "C:\Windows\Fonts\StaticCache.dat" "" touched file "C:\Windows\SysWOW64\tzres.dll" "" touched file "C:\Windows\AppPatch\sysmain.sdb" "dllhost.exe" touched file "C:\Windows\System32\rsaenh.dll" "dllhost.exe" touched file "C:\Windows\Globalization\Sorting\SortDefault.nls" "Censitrac.exe" touched file "C:\Windows\Globalization\Sorting\SortDefault.nls" "Censitrac.exe" touched file "C:\Windows\SysWOW64\rsaenh.dll" "Censitrac.exe" touched file "C:\Windows\SysWOW64\en-US\user32.dll.mui" "Censitrac.exe" touched file "C:\Windows\Fonts\StaticCache.dat" "Censitrac.exe" touched file "C:\Windows\SysWOW64\en-US\msctf.dll.mui" "Censitrac.exe" touched file "C:\Windows\SysWOW64\tzres.dll" "Censitrac.exe" touched file "C:\Windows\AppPatch\sysmain.sdb" "Censitrac.exe" touched file "C:\Windows\SysWOW64\cacls.exe"31:T4d8,"" wrote 32 bytes to a remote process "C:\Program Files (x86)\Censitrac\Censitrac.exe" (Handle: 236) "" wrote 52 bytes to a remote process "C:\Program Files (x86)\Censitrac\Censitrac.exe" (Handle: 236) "" wrote 4 bytes to a remote process "C:\Program Files (x86)\Censitrac\Censitrac.exe" (Handle: 236) "" wrote 8 bytes to a remote process "C:\Program Files (x86)\Censitrac\Censitrac.exe" (Handle: 236) "Censitrac.exe" wrote 32 bytes to a remote process "C:\Windows\SysWOW64\cacls.exe" (Handle: 284) "Censitrac.exe" wrote 52 bytes to a remote process "C:\Windows\SysWOW64\cacls.exe" (Handle: 284) "Censitrac.exe" wrote 4 bytes to a remote process "C:\Windows\SysWOW64\cacls.exe" (Handle: 284) "Censitrac.exe" wrote 8 bytes to a remote process "C:\Windows\SysWOW64\cacls.exe" (Handle: 284) "Censitrac.exe" wrote 32 bytes to a remote process "C:\Windows\SysWOW64\cacls.exe" (Handle: 292) "Censitrac.exe" wrote 52 bytes to a remote process "C:\Windows\SysWOW64\cacls.exe" (Handle: 292) "Censitrac.exe" wrote 4 bytes to a remote process "C:\Windows\SysWOW64\cacls.exe" (Handle: 292) "Censitrac.exe" wrote 8 bytes to a remote process "C:\Windows\SysWOW64\cacls.exe" (Handle: 292)32:T1171,Spawned process "" (UID: 00016692-00004076) Spawned process "dllhost.exe" with commandline "/Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}" (UID: 00017293-00004072) Spawned process "Censitrac.exe" with commandline "/i" (UID: 00017318-00004372) Spawned process "VBoxService.exe" with commandline "guestsession --session-id=2 --session-proto=2 --user %OSUSER%" (UID: 00017401-00004600) Spawned process "conhost.exe" with commandline ""1326367788-74642697812112153561280963122988602996-2143904698-584606740-1730333015"" (UID: 00017407-00002500) Spawned process "cacls.exe" with commandline "cacls "%PROGRAMFILES%\(x86)\Censitrac" /T /E /C /p "Domain\Domain Users":F" (UID: 00017860-00003940) Spawned process "conhost.exe" with commandline ""-876518106564522501-17229483521280457337-190447950-4540262397756535531975067373"" (UID: 00017873-00004020) Spawned process "cacls.exe" with commandline "cacls "%PROGRAMFILES%\(x86)\Censitrac" /T /E /C /p "BUILTIN\Users":F" (UID: 00017900-00003632) Spawned process "conhost.exe" with commandline ""10650578335717743631451838221349842119929459374-561578266-396264015-794880881"" (UID: 00017909-00003268) Spawned process "regsvr32.exe" with commandline "regsvr32 -s -c "%PROGRAMFILES%\(x86)\Censitrac\WBCustomizer.dll"" (UID: 00017949-00004764) Spawned process "regsvr32.exe" with commandline "regsvr32 -s -c "%WINDIR%\system32\msflxgrd.ocx"" (UID: 00018008-00000728) Spawned process "regsvr32.exe" with commandline "regsvr32 -s -c "%WINDIR%\system32\mscomm32.ocx"" (UID: 00018083-00000436) Spawned process "dllhost.exe" with commandline "/Processid:{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}" (UID: 00018201-00003172) Spawned process "dllhost.exe" with commandline "/Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}" (UID: 00019450-00004428) Spawned process "VBoxService.exe" with commandline "guestsession --session-id=2 --session-proto=2 --user %OSUSER%" (UID: 00019480-00002860) Spawned process "conhost.exe" with commandline ""-1051413858-1364305440-535621194-141297315920313246441720585698-772470915-670479306"" (UID: 00019483-00003628) Spawned process "dllhost.exe" with commandline "/Processid:{F9717507-6651-4EDB-BFF7-AE615179BCCF}" (UID: 00021772-00001640) Spawned process "dllhost.exe" with commandline "/Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}" (UID: 00022158-00004584) Spawned process "VBoxService.exe" with commandline "guestsession --session-id=2 --session-proto=2 --user %OSUSER%" (UID: 00022187-00002572) Spawned process "conhost.exe" with commandline ""862242309-340269307416007485-493106922-1066022867185587731-2074273098886839108"" (UID: 00022190-00002580) Spawned process "dllhost.exe" with commandline "/Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}" (UID: 00024206-00003764) Spawned process "VBoxService.exe" with commandline "guestsession --session-id=2 --session-proto=2 --user %OSUSER%" (UID: 00024233-00003952) Spawned process "conhost.exe" with commandline ""-7811970441385472549-97066699910485250248614966277983147711138864092117884703"" (UID: 00024236-00001672) Spawned process "dllhost.exe" with commandline "/Processid:{F9717507-6651-4EDB-BFF7-AE615179BCCF}" (UID: 00025484-00004872) Spawned process "dllhost.exe" with commandline "/Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}" (UID: 00026248-00002056) Spawned process "VBoxService.exe" with commandline "guestsession --session-id=2 --session-proto=2 --user %OSUSER%" (UID: 00026274-00004728) Spawned process "conhost.exe" with commandline ""12836651951771131773-746475820718280578869200901-394534641-2141342183-2055056352"" (UID: 00026277-00001740) Spawned process "dllhost.exe" with commandline "/Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}" (UID: 00028296-00004104) Spawned process "VBoxService.exe" with commandline "guestsession --session-id=2 --session-proto=2 --user %OSUSER%" (UID: 00028329-00003800) Spawned process "conhost.exe" with commandline ""680449456-175740006512758202151653482812-432076267575777651983792-832048624"" (UID: 00028332-00003164) Spawned process "dllhost.exe" with commandline "/Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}" (UID: 00031004-00002756) Spawned process "VBoxService.exe" with commandline "guestsession --session-id=2 --session-proto=2 --user %OSUSER%" (UID: 00031032-00002088) Spawned process "conhost.exe" with commandline ""332839303-168839968132193513713792165012090701320-8268811101846841620-2065805961"" (UID: 00031035-00002268)33:T400,AAABAAEAICAQAAAAAADoAgAAFgAAACgAAAAgAAAAQAAAAAEABAAAAAAAgAIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAAACAAAAAgIAAgAAAAIAAgACAgAAAgICAAMDAwAAAAP8AAP8AAAD//wD/AAAA/wD/AP//AAD///8AZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZ4h2ZmZmZmZmZmZmZmZmZmiIhmZmZmZmZmZmZmZmZmZoiIZmZmZmZmZmZmZmZmZmaIh2ZmZmZmZmZmZmZmZnd2ZmZndmZmZmZmZmZmZmeIh2ZmiIhmZmZmZmZmZmZniIdmZoiIZmZmZmZmZmZmZ4iHZmaIiGZmZmZmZmZmd2Z3ZmZmZ3ZmdmZmZmZmZ4iGZmaIh2ZmeIhmZmZmZmiIh2ZmiIhmZoiIdmZmZmZniIZmZoiIZmZ4iHZmZmZmZoh2ZmZ4h2ZmaIhmZmZniHZmZoiGZmZ4h2ZmZ4h2aIiGZmeIh2ZmiIhmZmiIdniIhmZniIdmZoiIZmZ4iIZoiHZmZoiHZmZ4h2ZmaIh2ZmZmd2ZmZnd2ZmZo+GZmZmZmZ4iGZmaIh2Zmj/92ZmZmZmiIh2ZniIhmZv//hmZmZmZniIZmZoiIZmaP/4ZmZmZmZndmZ3Z3dmZmaIhmZmZmZmZmZoiHZmZ4iGZmZmZmZmZmZmeIiGZmiIhmZmZmZmZmZmZniIdmZoiIZmZmZmZmZmZmZnh2ZmZ4h2ZmZmZmZmZmZmZmZniHZmZmZmZmZmZmZmZmZmaIiGZmZmZmZmZmZmZmZmZmiIhmZmZmZmZmZmZmZmZmZniHZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==34:Td400,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1c:["$","$L2",null,{"children":[["$","script",null,{"type":"application/ld+json","dangerouslySetInnerHTML":{"__html":"$24"}}],["$","$L25",null,{"initialData":{"job_id":"5ac4ee317ca3e174051348f3","environment_id":120,"environment_description":"Windows 7 64 bit","size":1163264,"type":"PE32 executable (GUI) Intel 80386, for MS Windows","type_short":["peexe","executable"],"type_short_id":"exe","target_url":null,"state":"SUCCESS","error_type":null,"error_origin":null,"submit_name":"censitrac.exe","md5":"42ea87b5de1391bd0e8566a74b44a783","sha1":"9e079cff52ab60d7d4c89fc0af24eacfcdde187b","sha256":"e7219d2bff8a2e3f3d9ec5d3c821fbdcde017b71766381de037c5ff159c2d04e","sha512":"f4392ec3891363c3f52eea5e50d582d44ecb5b4a340dcf243f2e889bb52eaacac5351a2953ddced27e3eeff9fcd387eb49ff84fbaa4a1154b64c5f16c3ea5911","ssdeep":"24576:OS0sv0aJ8QI5u3uQdgcKNg7Iy4jU63PF:OXMQ5u3uQdg07Iy4N","imphash":"25982625b7bb95e1c4b379244e80e452","entrypoint":"0x407c5c","entrypoint_section":".text","image_base":null,"subsystem":null,"image_file_characteristics":[],"dll_characteristics":[],"major_os_version":null,"minor_os_version":null,"av_detect":null,"vx_family":null,"url_analysis":false,"analysis_start_time":"2018-04-04T17:59:00+00:00","threat_score":100,"interesting":false,"threat_level":2,"verdict":"malicious","certificates":[],"is_certificates_valid":false,"certificates_validation_message":"No signature was present in the subject. (0x800b0100)","domains":["w6cczp.com"],"compromised_hosts":[],"hosts":["2.21.242.227","172.227.102.35"],"total_network_connections":2,"total_processes":33,"total_signatures":42,"extracted_files":[{"name":"mscomm32.ocx","file_path":"%WINDIR%\\SysWOW64\\mscomm32.ocx","file_size":103744,"md5":"2c6119da3993f410e74b15112f840cb0","sha1":"9d7aaffc0bcf955cc75d4ecc228b1ceda8a1856c","sha256":"51a1d6812e445c26c71465e2709e6d1ad587f8513002d662cd160f424f48b37c","sha512":"053ece4eb2ddba51c0d683a7afd439ed88605ab83619de738f7ad2495bfe9e9f16fc3b829c7fc9c779b50f039b9fad66d16aed520a5adfd1522a711073f78208","type_tags":["pedll","executable"],"description":"PE32 executable (DLL) (GUI) Intel 80386 (stripped to external PDB), for MS Windows","runtime_process":"Censitrac.exe (PID: 4372)","threat_level":0,"threat_level_readable":"no specific threat","group":"clean","av_label":null,"av_matched":0,"av_total":14,"file_available_to_download":true,"download_link":"/bff/report/5ac4ee317ca3e174051348f3/download/dropped-file?key=7827f17779f1f4c796a49805d9f4bd7250f51b5963848e2ab0c080a81078870876152b333f588d033bf509f2983a94b46e7f9b7068688cf7f2049e024b7f0e762c84fefc092397","submit_link":"/bff/report/5ac4ee317ca3e174051348f3/submit/dropped-file?key=7827f17779f1f4c796a49805d9f4bd7250f51b5963848e2ab0c080a81078870876152b333f588d033bf509f2983a94b46e7f9b7068688cf7f2049e024b7f0e762c84fefc092397","has_overview":true,"extended_details":{"filename":"mscomm32.ocx","size":103744,"description":null,"architecture":"32 Bit","ssdeep":"3072:zsQgdI5Hh8p28XMehRYSdB/TYDY44UGyGfDnfra:zdgdI598jhRJpYDY4fefna","imphash":"25ddeed2b18ff5610b4342cb1a8a9638","authentihash":"361ef1e3f11405dcf2a83c857c9cb020347bf5f492664ccc0b052afa07406ebf","entrypoint_bytes":null,"packer":null,"version_info":[{"id":"LegalCopyright","value":"Copyright 1987-1998 Microsoft Corp."},{"id":"InternalName","value":"MSComm"},{"id":"FileVersion","value":"6.00.8169"},{"id":"CompanyName","value":"Microsoft Corporation"},{"id":"LegalTrademarks","value":"Microsoft is a registered trademark of Microsoft Corporation. Windows(tm) is a trademark of Microsoft Corporation."},{"id":"Comments","value":"June 18, 1998"},{"id":"ProductName","value":"MSComm"},{"id":"OLESelfRegister","value":null},{"id":"ProductVersion","value":"6.00.8169"},{"id":"FileDescription","value":"MSComm"},{"id":"Translation","value":"0x0409 0x04e4"}],"file_sections":[{"name":".text","entropy":6.52513731859,"virtual_address":"0x1000","virtual_size":"0xea7e","raw_size":"0xec00","md5":"68320c7d8943adb1d35c9ceda3713bf1"},{"name":".data","entropy":3.51178561987,"virtual_address":"0x10000","virtual_size":"0xc8c","raw_size":"0xe00","md5":"eb222f6398b0e5e8240ffa1463064950"},{"name":".rsrc","entropy":4.51215725666,"virtual_address":"0x11000","virtual_size":"0x6bbc","raw_size":"0x6c00","md5":"f0c130d43574dbfb4cf5ebd941914f7e"},{"name":".reloc","entropy":6.39236882967,"virtual_address":"0x18000","virtual_size":"0x1248","raw_size":"0x1400","md5":"5f34e96b064e69f502119a4b0dea637d"}],"file_imports":[{"module":"ADVAPI32.dll","functions":["RegCloseKey","RegCreateKeyExA","RegDeleteKeyA","RegDeleteValueA","RegEnumKeyExA","RegOpenKeyA","RegOpenKeyExA","RegQueryValueA","RegQueryValueExA","RegSetValueExA"]},{"module":"GDI32.dll","functions":["CreateDCA","CreateRectRgnIndirect","DeleteDC","GetDeviceCaps","GetViewportExtEx","GetWindowExtEx","LPtoDP","SetMapMode","SetViewportExtEx","SetViewportOrgEx","SetWindowExtEx","SetWindowOrgEx"]},{"module":"KERNEL32.dll","functions":["ClearCommBreak","ClearCommError","CloseHandle","CompareStringA","CompareStringW","CreateEventA","CreateFileA","CreateThread","DeleteCriticalSection","DisableThreadLibraryCalls","EnterCriticalSection","EscapeCommFunction","FindResourceA","FreeLibrary","GetCommModemStatus","GetCommProperties","GetCommState","GetFileAttributesA","GetLastError","GetLocaleInfoA","GetModuleFileNameA","GetOverlappedResult","GetProcAddress","GetProcessHeap","GetVersion","GetWindowsDirectoryA","GlobalAlloc","GlobalFree","GlobalLock","GlobalUnlock","HeapAlloc","HeapFree","HeapReAlloc","InitializeCriticalSection","InterlockedDecrement","InterlockedIncrement","IsBadWritePtr","IsDBCSLeadByte","LeaveCriticalSection","LoadLibraryA","LoadResource","LockResource","lstrcatA","lstrcmpA","lstrcmpiA","lstrcpyA","lstrcpynA","lstrlenA","lstrlenW","MultiByteToWideChar","PurgeComm","ReadFile","ResetEvent","SetCommBreak","SetCommMask","SetCommState","SetCommTimeouts","SetupComm","Sleep","WaitCommEvent","WaitForSingleObject","WideCharToMultiByte","WriteFile"]},{"module":"ole32.dll","functions":["CoCreateInstance","CoTaskMemAlloc","CoTaskMemFree","CreateOleAdviseHolder","ReleaseStgMedium"]},{"module":"OLEAUT32.dll","functions":["CreateErrorInfo","GetErrorInfo","LoadRegTypeLib","LoadTypeLib","LoadTypeLibEx","OleCreatePropertyFrame","OleLoadPicture","RegisterTypeLib","SafeArrayCreate","SafeArrayGetDim","SafeArrayGetElement","SafeArrayGetLBound","SafeArrayGetUBound","SafeArrayPutElement","SetErrorInfo","SysAllocString","SysAllocStringLen","SysFreeString","SysStringLen","UnRegisterTypeLib","VariantChangeType","VariantClear","VariantInit"]},{"module":"USER32.dll","functions":["BeginPaint","CharNextA","CheckDlgButton","ClientToScreen","CreateDialogIndirectParamA","CreateWindowExA","DefWindowProcA","DestroyIcon","DestroyWindow","DialogBoxParamA","DrawEdge","DrawIcon","EndDialog","EndPaint","EqualRect","GetActiveWindow","GetClientRect","GetDC","GetDlgItem","GetDlgItemInt","GetDlgItemTextA","GetKeyState","GetNextDlgTabItem","GetParent","GetSystemMetrics","GetWindow","GetWindowLongA","GetWindowRect","IntersectRect","IsChild","IsDialogMessageA","IsDlgButtonChecked","IsWindowEnabled","IsWindowVisible","LoadCursorA","LoadIconA","LoadStringA","MessageBoxA","MoveWindow","OffsetRect","PostMessageA","PtInRect","RegisterClassA","RegisterClipboardFormatA","ReleaseDC","SendMessageA","SetDlgItemInt","SetDlgItemTextA","SetFocus","SetParent","SetWindowLongA","SetWindowPos","SetWindowRgn","ShowWindow","UnregisterClassA","WinHelpA","wsprintfA"]}],"file_exports":[{"name":"DllCanUnloadNow","ordinal":1,"address":"0x21c11520"},{"name":"DllGetClassObject","ordinal":2,"address":"0x21c11613"},{"name":"DllRegisterServer","ordinal":3,"address":"0x21c19d41"},{"name":"DllUnregisterServer","ordinal":4,"address":"0x21c19d5e"},{"name":"DLLGetDocumentation","ordinal":5,"address":"0x21c173a4"}]}},{"name":"msflxgrd.ocx","file_path":"%WINDIR%\\SysWOW64\\msflxgrd.ocx","file_size":244232,"md5":"07bae8106a135df779abc46ec603ea09","sha1":"be98c98a35da6ced57b7fc3c2fc933efa84b4273","sha256":"4e592240b745546c15e95e26b2547cec86352a49ee1ef79b3e3d28df8b5a0e70","sha512":"6ab494ea9e1c633969d5fe6c14411ec20f7073e464e2738c545deefbdc5fb84fb26ff3e9641236cf1afb4d90633437cd312ff5c665c0c8f462c101a957fffbeb","type_tags":["pedll","executable"],"description":"PE32 executable (DLL) (GUI) Intel 80386 (stripped to external PDB), for MS Windows","runtime_process":"Censitrac.exe (PID: 4372)","threat_level":0,"threat_level_readable":"no specific threat","group":"clean","av_label":null,"av_matched":0,"av_total":15,"file_available_to_download":true,"download_link":"/bff/report/5ac4ee317ca3e174051348f3/download/dropped-file?key=5f3608f18cc40a0091f060044b93813d6b7868f620a5b6c6f330b183c04f8de237ba8c848052ff1f103c3c9a85075209be299afa7fdb9dd62143d484c5c554eac295d9af922be1","submit_link":"/bff/report/5ac4ee317ca3e174051348f3/submit/dropped-file?key=5f3608f18cc40a0091f060044b93813d6b7868f620a5b6c6f330b183c04f8de237ba8c848052ff1f103c3c9a85075209be299afa7fdb9dd62143d484c5c554eac295d9af922be1","has_overview":true,"extended_details":{"filename":"msflxgrd.ocx","size":244232,"description":null,"architecture":"32 Bit","ssdeep":"6144:vMV3LOqB4GvoBOCzYRpHGbBFYe0SwX6ktCfh13cBvT:vMzaGKOCzYRANKX6kQB67","imphash":"7c09f5eb58764a480376f5c877963803","authentihash":"7b973b1ebe7d0a1ed207301fa0ad58e9c8c2e8418654ac2401a63caef0bb27d5","entrypoint_bytes":null,"packer":null,"version_info":[{"id":"LegalCopyright","value":"Copyright 1987-1998 Microsoft Corp."},{"id":"InternalName","value":"FlexGrid.Ocx"},{"id":"FileVersion","value":"6.00.8418"},{"id":"CompanyName","value":"Microsoft Corporation"},{"id":"LegalTrademarks","value":"Microsoft is a registered trademark of Microsoft Corporation. Windows(tm) is a trademark of Microsoft Corporation."},{"id":"Comments","value":"February 22, 1999"},{"id":"ProductName","value":"Microsoft FlexGrid Control"},{"id":"OLESelfRegister","value":null},{"id":"ProductVersion","value":"6.00.8418"},{"id":"FileDescription","value":"MSFlexGrid"},{"id":"Translation","value":"0x0409 0x04e4"}],"file_sections":[{"name":".text","entropy":6.62659336963,"virtual_address":"0x1000","virtual_size":"0x20562","raw_size":"0x20600","md5":"f35a929f132d873eaa90420f7322fea4"},{"name":".data","entropy":1.06846738101,"virtual_address":"0x22000","virtual_size":"0x3538","raw_size":"0x3600","md5":"f5d09892758e590c6e135a8f0fd4c426"},{"name":".rsrc","entropy":4.62692666851,"virtual_address":"0x26000","virtual_size":"0x14078","raw_size":"0x14200","md5":"64856ace672c6d84c9686900862c4a55"},{"name":".reloc","entropy":6.55658024799,"virtual_address":"0x3b000","virtual_size":"0x1e58","raw_size":"0x2000","md5":"7bf3d2617aaf5f55984c6aee824b39fc"}],"file_imports":[{"module":"ADVAPI32.dll","functions":["RegCloseKey","RegCreateKeyExA","RegDeleteKeyA","RegDeleteValueA","RegEnumKeyExA","RegOpenKeyA","RegOpenKeyExA","RegQueryValueA","RegQueryValueExA","RegSetValueExA"]},{"module":"GDI32.dll","functions":["CopyEnhMetaFileA","CopyMetaFileA","CreateBitmap","CreateCompatibleBitmap","CreateCompatibleDC","CreateDCA","CreateDIBitmap","CreateFontIndirectA","CreatePalette","CreatePen","CreateRectRgnIndirect","CreateSolidBrush","DeleteDC","DeleteObject","DPtoLP","EnumFontFamiliesExA","ExcludeClipRect","GetBitmapBits","GetCurrentPositionEx","GetDeviceCaps","GetDIBits","GetNearestColor","GetObjectA","GetPaletteEntries","GetStockObject","GetTextColor","GetTextExtentPoint32A","GetTextMetricsA","GetViewportExtEx","GetWindowExtEx","LineTo","LPtoDP","MoveToEx","RealizePalette","RestoreDC","SaveDC","SelectObject","SelectPalette","SetBkMode","SetMapMode","SetTextColor","SetViewportExtEx","SetViewportOrgEx","SetWindowExtEx","SetWindowOrgEx","StretchBlt"]},{"module":"KERNEL32.dll","functions":["DeleteCriticalSection","DisableThreadLibraryCalls","EnterCriticalSection","ExitProcess","FindResourceA","FreeEnvironmentStringsA","FreeEnvironmentStringsW","FreeLibrary","GetACP","GetCommandLineA","GetCPInfo","GetCurrentProcess","GetEnvironmentStrings","GetEnvironmentStringsW","GetFileAttributesA","GetFileType","GetLastError","GetLocaleInfoA","GetModuleFileNameA","GetOEMCP","GetProcAddress","GetProcessHeap","GetProfileStringA","GetStartupInfoA","GetStdHandle","GetStringTypeA","GetStringTypeW","GetVersion","GetVersionExA","GetWindowsDirectoryA","GlobalAlloc","GlobalFree","GlobalLock","GlobalSize","GlobalUnlock","HeapAlloc","HeapCreate","HeapDestroy","HeapFree","HeapReAlloc","InitializeCriticalSection","InterlockedDecrement","InterlockedExchange","InterlockedIncrement","IsDBCSLeadByte","LCMapStringA","LCMapStringW","LeaveCriticalSection","LoadLibraryA","LoadResource","LockResource","lstrcatA","lstrcmpA","lstrcmpiA","lstrcpyA","lstrcpynA","lstrcpyW","lstrlenA","lstrlenW","MulDiv","MultiByteToWideChar","SetHandleCount","TerminateProcess","VirtualAlloc","VirtualFree","WideCharToMultiByte","WriteFile"]},{"module":"ole32.dll","functions":["CoCreateInstance","CoTaskMemAlloc","CoTaskMemFree","CoTaskMemRealloc","CreateOleAdviseHolder","DoDragDrop","OleLoadFromStream","OleSaveToStream","RegisterDragDrop","ReleaseStgMedium","RevokeDragDrop"]},{"module":"OLEAUT32.dll","functions":["CreateErrorInfo","GetErrorInfo","LoadRegTypeLib","LoadTypeLib","LoadTypeLibEx","OleCreateFontIndirect","OleCreatePictureIndirect","OleCreatePropertyFrame","OleTranslateColor","RegisterTypeLib","SafeArrayAccessData","SafeArrayCopy","SafeArrayCreate","SafeArrayDestroy","SafeArrayGetElement","SafeArrayGetLBound","SafeArrayGetUBound","SafeArrayPutElement","SafeArrayRedim","SafeArrayUnaccessData","SetErrorInfo","SysAllocString","SysAllocStringLen","SysFreeString","SysStringLen","UnRegisterTypeLib","VariantChangeType","VariantClear","VariantCopy","VariantCopyInd","VariantInit"]},{"module":"USER32.dll","functions":["BeginPaint","CharNextA","CheckDlgButton","ClientToScreen","CreateDialogIndirectParamA","CreateWindowExA","DefWindowProcA","DestroyWindow","DialogBoxParamA","DrawEdge","DrawFocusRect","DrawTextA","DrawTextExA","EnableWindow","EndDialog","EndPaint","EqualRect","FillRect","FrameRect","GetActiveWindow","GetClientRect","GetClipboardFormatNameA","GetCursorPos","GetDC","GetDlgItem","GetDlgItemInt","GetDlgItemTextA","GetFocus","GetKeyState","GetNextDlgTabItem","GetParent","GetScrollRange","GetSysColor","GetSystemMetrics","GetWindow","GetWindowLongA","GetWindowRect","InflateRect","IntersectRect","InvalidateRect","IsChild","IsDialogMessageA","IsDlgButtonChecked","IsWindow","IsWindowEnabled","IsWindowVisible","KillTimer","LoadCursorA","LoadStringA","MapWindowPoints","MessageBeep","MessageBoxA","MoveWindow","OffsetRect","PeekMessageA","PeekMessageW","PostMessageA","PostMessageW","PtInRect","RegisterClassA","RegisterClipboardFormatA","RegisterWindowMessageA","ReleaseCapture","ReleaseDC","ScreenToClient","ScrollWindow","SendDlgItemMessageA","SendMessageA","SetCapture","SetCursor","SetCursorPos","SetDlgItemInt","SetDlgItemTextA","SetFocus","SetParent","SetRect","SetScrollPos","SetScrollRange","SetTimer","SetWindowLongA","SetWindowPos","SetWindowRgn","ShowWindow","UnregisterClassA","UpdateWindow","WinHelpA","wsprintfA"]}],"file_exports":[{"name":"DLLGetDocumentation","ordinal":1,"address":"0x20db6d89"},{"name":"DllCanUnloadNow","ordinal":2,"address":"0x20da1908"},{"name":"DllGetClassObject","ordinal":3,"address":"0x20da280f"},{"name":"DllRegisterServer","ordinal":4,"address":"0x20dbaa95"},{"name":"DllUnregisterServer","ordinal":5,"address":"0x20dbaab2"}]}},{"name":"WBCustomizer.dll","file_path":"%PROGRAMFILES%\\(x86)\\Censitrac\\WBCustomizer.dll","file_size":45056,"md5":"6bb78f4281b4f670107be77c508a9aff","sha1":"fa33c476781be16538be470a36cbf8439f0e1ec2","sha256":"573d3bcd037a4e0e71c741c9339b6aef744d222f11d373c8ad09a996c884bd49","sha512":"dcfe8e0eb7dfcbf445a32cbb3d9cf047d2558ba6aa5abe3ec7716fa6c024a2fc981dc7c379d93998624ba591c0db6bad02914c9b242e5b30d6ba44e020a46711","type_tags":["pedll","executable"],"description":"PE32 executable (DLL) (GUI) Intel 80386, for MS Windows","runtime_process":"Censitrac.exe (PID: 4372)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative selection","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/5ac4ee317ca3e174051348f3/download/dropped-file?key=8cfdc20e40e5b74961e478e5d4cd3dd5d1452e467c17ae09c0da230ea04af95b2897ea75080a547c6c8d1da0edc5002957181a8c7c7b7b074a71eb66c14aa321618081c48660c25253c3ed","submit_link":"/bff/report/5ac4ee317ca3e174051348f3/submit/dropped-file?key=8cfdc20e40e5b74961e478e5d4cd3dd5d1452e467c17ae09c0da230ea04af95b2897ea75080a547c6c8d1da0edc5002957181a8c7c7b7b074a71eb66c14aa321618081c48660c25253c3ed","has_overview":true,"extended_details":{"filename":"WBCustomizer.dll","size":45056,"description":null,"architecture":"32 Bit","ssdeep":"384:OdRakuGhQZRY5vVuzlj7FjoY6xu0gdfMRIOZBy2QBUUjxvH6+GNqYysBj2s:OKGhQZRY50tFjZ89pdXmrlaXNx","imphash":"e2ad1f34b2e28b1f742ae98262c68cb7","authentihash":"578a62c773b49de1fd6a14f777e38f998b419dcea7bb2c9f606f80a6e2cf368b","entrypoint_bytes":null,"packer":null,"version_info":[{"id":"LegalCopyright","value":"Copyright 1997"},{"id":"InternalName","value":"WBCUSTOMIZER"},{"id":"FileVersion","value":"1, 0, 0, 3"},{"id":"CompanyName","value":null},{"id":"ProductName","value":"WBCustomizer Module"},{"id":"ProductVersion","value":"1, 0, 0, 3"},{"id":"FileDescription","value":"WBCustomizer Module"},{"id":"OriginalFilename","value":"WBCUSTOMIZER.DLL"},{"id":"Translation","value":"0x0409 0x04b0"}],"file_sections":[{"name":".text","entropy":5.71574099775,"virtual_address":"0x1000","virtual_size":"0x4111","raw_size":"0x5000","md5":"07b6f59423d8e620b49be859d129fc27"},{"name":".rdata","entropy":4.24354284104,"virtual_address":"0x6000","virtual_size":"0xbe9","raw_size":"0x1000","md5":"b26bb5f0ca5da966f72df7f14eb8b110"},{"name":".data","entropy":0.933020103334,"virtual_address":"0x7000","virtual_size":"0x302","raw_size":"0x1000","md5":"daad17429f02a64a88b9a9310f26eca9"},{"name":".rsrc","entropy":3.18032634363,"virtual_address":"0x8000","virtual_size":"0x13d8","raw_size":"0x2000","md5":"ad038ee136290896a3d583c0f8b30134"},{"name":".reloc","entropy":2.67902424966,"virtual_address":"0xa000","virtual_size":"0x55a","raw_size":"0x1000","md5":"74b2b4ba21df2ab69d004b633df284e1"}],"file_imports":[{"module":"ADVAPI32.dll","functions":["RegCloseKey","RegCreateKeyExA","RegDeleteKeyA","RegDeleteValueA","RegEnumKeyExA","RegEnumValueA","RegOpenKeyExA","RegQueryInfoKeyA","RegSetValueExA"]},{"module":"KERNEL32.dll","functions":["DebugBreak","DeleteCriticalSection","DisableThreadLibraryCalls","EnterCriticalSection","FindResourceA","FreeLibrary","GetLastError","GetModuleFileNameA","GetModuleHandleA","GetProcAddress","GetShortPathNameA","GetSystemInfo","GetVersionExA","HeapAlloc","HeapCreate","HeapDestroy","HeapFree","HeapReAlloc","InitializeCriticalSection","InterlockedDecrement","InterlockedIncrement","IsDBCSLeadByte","LeaveCriticalSection","LoadLibraryA","LoadLibraryExA","LoadResource","lstrcatA","lstrcmpiA","lstrcpyA","lstrcpynA","lstrlenA","lstrlenW","MultiByteToWideChar","SizeofResource","WideCharToMultiByte"]},{"module":"ole32.dll","functions":["CoCreateInstance","CoTaskMemAlloc","CoTaskMemFree","CoTaskMemRealloc"]},{"module":"OLEAUT32.dll","functions":["LoadRegTypeLib","LoadTypeLib","RegisterTypeLib","SysAllocString","SysFreeString","SysStringByteLen","SysStringLen","VariantClear","VarUI4FromStr"]},{"module":"USER32.dll","functions":["CharNextA","GetKeyState"]}],"file_exports":[{"name":"DllCanUnloadNow","ordinal":1,"address":"0x1000134b"},{"name":"DllGetClassObject","ordinal":2,"address":"0x10001357"},{"name":"DllRegisterServer","ordinal":3,"address":"0x10001370"},{"name":"DllUnregisterServer","ordinal":4,"address":"0x1000137f"}]}},{"name":"Censitrac.bmp","file_path":"%PROGRAMFILES%\\(x86)\\Censitrac\\Censitrac.bmp","file_size":2762,"md5":"1ebbce7ed3c1553d50a36724b3371b20","sha1":"822e5a42f53d3e51e3269b7d675230dd77ff5034","sha256":"c87144bd14d0a82f6e28591084d429e32df1fb2d9264dff6e1139f84c39c4e63","sha512":"93a62103ce781d1f1590d87a633978ae83621058632c25af4dbb29f0ac7fd82dad4b315f64de2dcd33f29820b87d8a97a4ae7068b5c479fb8c7330824db9770a","type_tags":["unknown"],"description":"PC bitmap, Windows 3.x format, 264 x 75 x 1","runtime_process":"Censitrac.exe (PID: 4372)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/5ac4ee317ca3e174051348f3/download/dropped-file?key=b4f6121fc6051926b137048b610a3768c2b71677bf7f9130c6c91e3621c1b7f079b4008b8c80a33317680cfa3972100676c729048399ec1681843300fb65155719322ff6cb135bc4","submit_link":"/bff/report/5ac4ee317ca3e174051348f3/submit/dropped-file?key=b4f6121fc6051926b137048b610a3768c2b71677bf7f9130c6c91e3621c1b7f079b4008b8c80a33317680cfa3972100676c729048399ec1681843300fb65155719322ff6cb135bc4","has_overview":false,"extended_details":null},{"name":"Censitrac.cab","file_path":"%PROGRAMFILES%\\(x86)\\Censitrac\\Censitrac.cab","file_size":220444,"md5":"c60b820af2088756a008a92ba19b8eec","sha1":"27649b2d9e25f714504c5895f77186112c785045","sha256":"b4f3e5c7b3657f215b4b4ec6d4435c4e46472a2e1c5d2d21b6d49b8309d6ac32","sha512":"2ca584ba918b7b2e62625616c5da8894986b90b3e1f78a63ab2674723fa19d31f5c5102cb2f32e73880916b3ed0ec1110585e459ab07dd9adb8d9d7423774877","type_tags":["data"],"description":"Microsoft Cabinet archive data, 220442 bytes, 5 files","runtime_process":"Censitrac.exe (PID: 4372)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/5ac4ee317ca3e174051348f3/download/dropped-file?key=699bda5883ba24dd196519c68676f26c2a113c282e1d15885908d7eb6e15612b870fb78188c48073e047185401332627ad00b029150fc54d81ebfe075149d530aa33767ed4183f2e","submit_link":"/bff/report/5ac4ee317ca3e174051348f3/submit/dropped-file?key=699bda5883ba24dd196519c68676f26c2a113c282e1d15885908d7eb6e15612b870fb78188c48073e047185401332627ad00b029150fc54d81ebfe075149d530aa33767ed4183f2e","has_overview":false,"extended_details":null},{"name":"Censitrac.exe","file_path":"%PROGRAMFILES%\\(x86)\\Censitrac\\Censitrac.exe","file_size":1163264,"md5":"42ea87b5de1391bd0e8566a74b44a783","sha1":"9e079cff52ab60d7d4c89fc0af24eacfcdde187b","sha256":"e7219d2bff8a2e3f3d9ec5d3c821fbdcde017b71766381de037c5ff159c2d04e","sha512":"f4392ec3891363c3f52eea5e50d582d44ecb5b4a340dcf243f2e889bb52eaacac5351a2953ddced27e3eeff9fcd387eb49ff84fbaa4a1154b64c5f16c3ea5911","type_tags":["peexe","executable"],"description":"PE32 executable (GUI) Intel 80386, for MS Windows","runtime_process":"censitrac.exe (PID: 4076)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/5ac4ee317ca3e174051348f3/download/dropped-file?key=7f44f4a74fdcc9e28a19e4f5c3d2b3c8317dd092040a5a793e661b316eecac689631b757b676a8218e781362ee5a70b5845fa5b0cba56c6f4acdc868badacbefbb9eb38d85b0de73","submit_link":"/bff/report/5ac4ee317ca3e174051348f3/submit/dropped-file?key=7f44f4a74fdcc9e28a19e4f5c3d2b3c8317dd092040a5a793e661b316eecac689631b757b676a8218e781362ee5a70b5845fa5b0cba56c6f4acdc868badacbefbb9eb38d85b0de73","has_overview":true,"extended_details":{"filename":"Censitrac.exe","size":1163264,"description":null,"architecture":"32 Bit","ssdeep":"24576:OS0sv0aJ8QI5u3uQdgcKNg7Iy4jU63PF:OXMQ5u3uQdg07Iy4N","imphash":"25982625b7bb95e1c4b379244e80e452","authentihash":"3b71ea76539737bbeb7f8efef8318461efb227803c70522dc7d90926c828daf5","entrypoint_bytes":null,"packer":null,"version_info":[{"id":"Translation","value":"0x0409 0x04b0"},{"id":"LegalCopyright","value":"Censis Technologies"},{"id":"InternalName","value":"Censitrac"},{"id":"FileVersion","value":"1.01.0238"},{"id":"CompanyName","value":"Censis Technologies"},{"id":"ProductName","value":"Censitrac"},{"id":"ProductVersion","value":"1.01.0238"},{"id":"OriginalFilename","value":"Censitrac.exe"}],"file_sections":[{"name":".text","entropy":5.9890786771,"virtual_address":"0x1000","virtual_size":"0xe1580","raw_size":"0xe2000","md5":"4336e046fd1ed99a5fed2f631a8b9472"},{"name":".data","entropy":0,"virtual_address":"0xe3000","virtual_size":"0x6c04","raw_size":"0x1000","md5":"620f0b67a91f7f74151bc5be745b7110"},{"name":".rsrc","entropy":7.89026509472,"virtual_address":"0xea000","virtual_size":"0x37d12","raw_size":"0x38000","md5":"942febe6147b7ed4dc03c9973f24bfa2"}],"file_imports":[{"module":"MSVBVM60.DLL","functions":["__vbaAryConstruct2","__vbaAryCopy","__vbaAryDestruct","__vbaAryLock","__vbaAryMove","__vbaAryUnlock","__vbaBoolVar","__vbaBoolVarNull","__vbaCastObj","__vbaCastObjVar","__vbaChkstk","__vbaCopyBytes","__vbaCyMulI2","__vbaCyVar","__vbaDateR8","__vbaDateVar","__vbaErase","__vbaErrorOverflow","__vbaExceptHandler","__vbaExitEachColl","__vbaExitProc","__vbaFileClose","__vbaFileCloseAll","__vbaFileOpen","__vbaFileSeek","__vbaForEachCollObj","__vbaFpCSngR4","__vbaFPException","__vbaFPFix","__vbaFpI2","__vbaFpI4","__vbaFPInt","__vbaFpR4","__vbaFpR8","__vbaFreeObj","__vbaFreeObjList","__vbaFreeStr","__vbaFreeStrList","__vbaFreeVar","__vbaFreeVarList","__vbaGenerateBoundsError","__vbaGet3","__vbaGet4","__vbaGetOwner3","__vbaHresultCheckObj","__vbaI2Cy","__vbaI2I4","__vbaI2Str","__vbaI2Var","__vbaI4Cy","__vbaI4ErrVar","__vbaI4Str","__vbaI4Var","__vbaInStr","__vbaInStrB","__vbaInStrVar","__vbaLateIdCall","__vbaLateIdCallLd","__vbaLateIdCallSt","__vbaLateIdSt","__vbaLateMemCall","__vbaLateMemCallLd","__vbaLateMemCallSt","__vbaLateMemSt","__vbaLbound","__vbaLenBstr","__vbaLenBstrB","__vbaLenVar","__vbaLineInputStr","__vbaLsetFixstr","__vbaMidStmtBstr","__vbaNameFile","__vbaNew","__vbaNew2","__vbaNextEachCollObj","__vbaObjIs","__vbaObjSet","__vbaObjSetAddref","__vbaObjVar","__vbaOnError","__vbaPowerR8","__vbaPrintFile","__vbaPrintObj","__vbaPut3","__vbaPutOwner3","__vbaR4Str","__vbaR4Var","__vbaR8Cy","__vbaR8ErrVar","__vbaR8FixI4","__vbaR8IntI2","__vbaR8IntI4","__vbaR8Str","__vbaRaiseEvent","__vbaRecAnsiToUni","__vbaRecDestruct","__vbaRecDestructAnsi","__vbaRecUniToAnsi","__vbaRedim","__vbaRedimPreserve","__vbaRefVarAry","__vbaResume","__vbaSetSystemError","__vbaStr2Vec","__vbaStrBool","__vbaStrCat","__vbaStrCmp","__vbaStrComp","__vbaStrCopy","__vbaStrErrVarCopy","__vbaStrI2","__vbaStrI4","__vbaStrMove","__vbaStrR4","__vbaStrR8","__vbaStrTextCmp","__vbaStrTextLike","__vbaStrToAnsi","__vbaStrToUnicode","__vbaStrUI1","__vbaStrVarCopy","__vbaStrVarMove","__vbaStrVarVal","__vbaUbound","__vbaUI1I2","__vbaUI1I4","__vbaUnkVar","__vbaVar2Vec","__vbaVarAbs","__vbaVarAdd","__vbaVarAnd","__vbaVarCat","__vbaVarCmpEq","__vbaVarCopy","__vbaVarDiv","__vbaVarDup","__vbaVarErrI4","__vbaVarFix","__vbaVargVar","__vbaVargVarMove","__vbaVarIndexLoad","__vbaVarIndexLoadRef","__vbaVarIndexLoadRefLock","__vbaVarIndexStore","__vbaVarLateMemCallLd","__vbaVarLateMemCallLdRf","__vbaVarLateMemSt","__vbaVarMove","__vbaVarMul","__vbaVarNot","__vbaVarOr","__vbaVarSetObjAddref","__vbaVarSetVar","__vbaVarSub","__vbaVarTextCmpEq","__vbaVarTextCmpGe","__vbaVarTextCmpGt","__vbaVarTextCmpLt","__vbaVarTextCmpNe","__vbaVarTextTstEq","__vbaVarTextTstGe","__vbaVarTextTstGt","__vbaVarTextTstLt","__vbaVarTextTstNe","__vbaVarTstNe","__vbaVarVargNofree","__vbaVarZero","_adj_fdiv_m16i","_adj_fdiv_m32","_adj_fdiv_m32i","_adj_fdiv_m64","_adj_fdiv_r","_adj_fdivr_m16i","_adj_fdivr_m32","_adj_fdivr_m32i","_adj_fdivr_m64","_adj_fpatan","_adj_fprem","_adj_fprem1","_adj_fptan","_allmul","_CIatan","_CIcos","_CIexp","_CIlog","_CIsin","_CIsqrt","_CItan","DllFunctionCall","EVENT_SINK_AddRef","EVENT_SINK_GetIDsOfNames","EVENT_SINK_Invoke","EVENT_SINK_QueryInterface","EVENT_SINK_Release","Zombie_GetTypeInfo","Zombie_GetTypeInfoCount"]}],"file_exports":[]}},{"name":"Install.log","file_path":"%PROGRAMFILES%\\(x86)\\Censitrac\\Install.log","file_size":227,"md5":"01f992134359ca91e1ba19ad30964e02","sha1":"931d039aaf7a6fd2d67ff7bfcd353c746f873072","sha256":"25e65450bf8eda17d91eacc4c9be1b0b8f495e1d47def050345a55376ad3fd9d","sha512":"aaae5af3112ef1f3a51d82b2de6c16407e92b6258d3d6017b511bf08205038997cc344abe9e43c97194545663a12879ba6bff0b3ed56c929679f6e77ff644f72","type_tags":["text"],"description":"ASCII text, with CRLF line terminators","runtime_process":"censitrac.exe (PID: 4076)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/5ac4ee317ca3e174051348f3/download/dropped-file?key=6b4fc9778cc23de09cc567cef7629f523801712d49cea67f0dbbea47bd671c68e77e1cfb02ad8663db0843853195b571194a1545d8b6e0c3eafde55ff6fc657fbb1dc68d22b0","submit_link":"/bff/report/5ac4ee317ca3e174051348f3/submit/dropped-file?key=6b4fc9778cc23de09cc567cef7629f523801712d49cea67f0dbbea47bd671c68e77e1cfb02ad8663db0843853195b571194a1545d8b6e0c3eafde55ff6fc657fbb1dc68d22b0","has_overview":false,"extended_details":null},{"name":"Censitrac.lnk","file_path":null,"file_size":1005,"md5":"964122ebbe9bc1150df1e8336c099109","sha1":"6b69c97704d9a6b1fd0b01ae75da458c959d3623","sha256":"6ac713ee29464f650436e4a1bc3ced86ad43ef0ad1b2c707f9d9afb7a51ac244","sha512":"3d940bd0f3bfb5913224fbfb051694842efc63bf80fcda589e1b73ac46e3cb6b37363d19a43bf04a2fe167122f9fff19bf849136fc58325f9604e5cd7abca52d","type_tags":["lnk"],"description":"MS Windows shortcut, Item id list present, Points to a file or directory, Has Description string, Has Relative path, Archive, ctime=Wed Apr 4 16:00:47 2018, mtime=Wed Apr 4 16:00:47 2018, atime=Wed Apr 4 16:01:05 2018, length=1163264, window=hideshowminimized","runtime_process":null,"threat_level":0,"threat_level_readable":"no specific threat","group":"informative","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/5ac4ee317ca3e174051348f3/download/dropped-file?key=8864445d6243696c1b345af7d30d1523e6855bcc791c4dfee359bb96dcf3d6f0fa266409cca6c26fb2cf500c90a3640a177a52422fcec1b084d803edbfbc33c1954730fff6a67fe9","submit_link":"/bff/report/5ac4ee317ca3e174051348f3/submit/dropped-file?key=8864445d6243696c1b345af7d30d1523e6855bcc791c4dfee359bb96dcf3d6f0fa266409cca6c26fb2cf500c90a3640a177a52422fcec1b084d803edbfbc33c1954730fff6a67fe9","has_overview":false,"extended_details":null}],"file_metadata":{"file_compositions":[],"imported_objects":[],"file_analysis":[],"total_file_compositions_imports":null},"processes":[{"uid":"00016692-00004076","parentuid":null,"name":"censitrac.exe","normalized_path":"C:\\censitrac.exe","command_line":null,"sha256":"e7219d2bff8a2e3f3d9ec5d3c821fbdcde017b71766381de037c5ff159c2d04e","av_label":null,"av_matched":null,"av_total":null,"pid":"4076","icon":"$26","process_flags":[{"name":"Extracted Streams","data":null}]},{"uid":"00017318-00004372","parentuid":"00016692-00004076","name":"Censitrac.exe","normalized_path":"%PROGRAMFILES%\\(x86)\\Censitrac\\Censitrac.exe","command_line":"/i","sha256":"e7219d2bff8a2e3f3d9ec5d3c821fbdcde017b71766381de037c5ff159c2d04e","av_label":null,"av_matched":null,"av_total":null,"pid":"4372","icon":null,"process_flags":[{"name":"Extracted Streams","data":null}]},{"uid":"00017860-00003940","parentuid":"00017318-00004372","name":"cacls.exe","normalized_path":"%WINDIR%\\SysWOW64\\cacls.exe","command_line":"cacls \"%PROGRAMFILES%\\(x86)\\Censitrac\" /T /E /C /p \"Domain\\Domain Users\":F","sha256":"439f7977a0d2b49fadec31db40dc6b0d8ded2ceded52cf3055260f7a1eeecae6","av_label":null,"av_matched":null,"av_total":null,"pid":"3940","icon":null,"process_flags":[{"name":"Reduced Monitoring","data":null}]},{"uid":"00017900-00003632","parentuid":"00017318-00004372","name":"cacls.exe","normalized_path":"%WINDIR%\\SysWOW64\\cacls.exe","command_line":"cacls \"%PROGRAMFILES%\\(x86)\\Censitrac\" /T /E /C /p \"BUILTIN\\Users\":F","sha256":"439f7977a0d2b49fadec31db40dc6b0d8ded2ceded52cf3055260f7a1eeecae6","av_label":null,"av_matched":null,"av_total":null,"pid":"3632","icon":null,"process_flags":[{"name":"Reduced Monitoring","data":null}]},{"uid":"00017949-00004764","parentuid":"00017318-00004372","name":"regsvr32.exe","normalized_path":"%WINDIR%\\SysWOW64\\regsvr32.exe","command_line":"regsvr32 -s -c \"%PROGRAMFILES%\\(x86)\\Censitrac\\WBCustomizer.dll\"","sha256":"890c1734ed1ef6b2422a9b21d6205cf91e014add8a7f41aa5a294fcf60631a7b","av_label":null,"av_matched":null,"av_total":null,"pid":"4764","icon":null,"process_flags":[{"name":"Reduced Monitoring","data":null}]},{"uid":"00018008-00000728","parentuid":"00017318-00004372","name":"regsvr32.exe","normalized_path":"%WINDIR%\\SysWOW64\\regsvr32.exe","command_line":"regsvr32 -s -c \"%WINDIR%\\system32\\msflxgrd.ocx\"","sha256":"890c1734ed1ef6b2422a9b21d6205cf91e014add8a7f41aa5a294fcf60631a7b","av_label":null,"av_matched":null,"av_total":null,"pid":"728","icon":null,"process_flags":[{"name":"Reduced Monitoring","data":null}]},{"uid":"00018083-00000436","parentuid":"00017318-00004372","name":"regsvr32.exe","normalized_path":"%WINDIR%\\SysWOW64\\regsvr32.exe","command_line":"regsvr32 -s -c \"%WINDIR%\\system32\\mscomm32.ocx\"","sha256":"890c1734ed1ef6b2422a9b21d6205cf91e014add8a7f41aa5a294fcf60631a7b","av_label":null,"av_matched":null,"av_total":null,"pid":"436","icon":null,"process_flags":[{"name":"Reduced Monitoring","data":null}]},{"uid":"00017293-00004072","parentuid":null,"name":"","normalized_path":null,"command_line":null,"sha256":null,"av_label":null,"av_matched":null,"av_total":null,"pid":"4072","icon":null,"process_flags":[]},{"uid":"00017401-00004600","parentuid":null,"name":"VBoxService.exe","normalized_path":"%WINDIR%\\System32\\VBoxService.exe","command_line":"guestsession --session-id=2 --session-proto=2 --user %OSUSER%","sha256":"42b57adee2f57587f05ad37e506221cb1f9dc87f43e418ff98040d7fd9fe6e5c","av_label":null,"av_matched":null,"av_total":null,"pid":"4600","icon":"$27","process_flags":[{"name":"Reduced Monitoring","data":null}]},{"uid":"00017407-00002500","parentuid":null,"name":"","normalized_path":null,"command_line":null,"sha256":null,"av_label":null,"av_matched":null,"av_total":null,"pid":"2500","icon":null,"process_flags":[]},{"uid":"00017873-00004020","parentuid":null,"name":"","normalized_path":null,"command_line":null,"sha256":null,"av_label":null,"av_matched":null,"av_total":null,"pid":"4020","icon":null,"process_flags":[]},{"uid":"00017909-00003268","parentuid":null,"name":"","normalized_path":null,"command_line":null,"sha256":null,"av_label":null,"av_matched":null,"av_total":null,"pid":"3268","icon":null,"process_flags":[]},{"uid":"00018201-00003172","parentuid":null,"name":"","normalized_path":null,"command_line":null,"sha256":null,"av_label":null,"av_matched":null,"av_total":null,"pid":"3172","icon":null,"process_flags":[]},{"uid":"00019450-00004428","parentuid":null,"name":"","normalized_path":null,"command_line":null,"sha256":null,"av_label":null,"av_matched":null,"av_total":null,"pid":"4428","icon":null,"process_flags":[]},{"uid":"00019480-00002860","parentuid":null,"name":"VBoxService.exe","normalized_path":"%WINDIR%\\System32\\VBoxService.exe","command_line":"guestsession --session-id=2 --session-proto=2 --user %OSUSER%","sha256":"42b57adee2f57587f05ad37e506221cb1f9dc87f43e418ff98040d7fd9fe6e5c","av_label":null,"av_matched":null,"av_total":null,"pid":"2860","icon":"$28","process_flags":[{"name":"Reduced Monitoring","data":null}]},{"uid":"00019483-00003628","parentuid":null,"name":"","normalized_path":null,"command_line":null,"sha256":null,"av_label":null,"av_matched":null,"av_total":null,"pid":"3628","icon":null,"process_flags":[]},{"uid":"00021772-00001640","parentuid":null,"name":"","normalized_path":null,"command_line":null,"sha256":null,"av_label":null,"av_matched":null,"av_total":null,"pid":"1640","icon":null,"process_flags":[]},{"uid":"00022158-00004584","parentuid":null,"name":"","normalized_path":null,"command_line":null,"sha256":null,"av_label":null,"av_matched":null,"av_total":null,"pid":"4584","icon":null,"process_flags":[]},{"uid":"00022187-00002572","parentuid":null,"name":"VBoxService.exe","normalized_path":"%WINDIR%\\System32\\VBoxService.exe","command_line":"guestsession --session-id=2 --session-proto=2 --user %OSUSER%","sha256":"42b57adee2f57587f05ad37e506221cb1f9dc87f43e418ff98040d7fd9fe6e5c","av_label":null,"av_matched":null,"av_total":null,"pid":"2572","icon":"$29","process_flags":[{"name":"Reduced Monitoring","data":null}]},{"uid":"00022190-00002580","parentuid":null,"name":"","normalized_path":null,"command_line":null,"sha256":null,"av_label":null,"av_matched":null,"av_total":null,"pid":"2580","icon":null,"process_flags":[]},{"uid":"00024206-00003764","parentuid":null,"name":"","normalized_path":null,"command_line":null,"sha256":null,"av_label":null,"av_matched":null,"av_total":null,"pid":"3764","icon":null,"process_flags":[]},{"uid":"00024233-00003952","parentuid":null,"name":"VBoxService.exe","normalized_path":"%WINDIR%\\System32\\VBoxService.exe","command_line":"guestsession --session-id=2 --session-proto=2 --user %OSUSER%","sha256":"42b57adee2f57587f05ad37e506221cb1f9dc87f43e418ff98040d7fd9fe6e5c","av_label":null,"av_matched":null,"av_total":null,"pid":"3952","icon":"$2a","process_flags":[{"name":"Reduced Monitoring","data":null}]},{"uid":"00024236-00001672","parentuid":null,"name":"","normalized_path":null,"command_line":null,"sha256":null,"av_label":null,"av_matched":null,"av_total":null,"pid":"1672","icon":null,"process_flags":[]},{"uid":"00025484-00004872","parentuid":null,"name":"","normalized_path":null,"command_line":null,"sha256":null,"av_label":null,"av_matched":null,"av_total":null,"pid":"4872","icon":null,"process_flags":[]},{"uid":"00026248-00002056","parentuid":null,"name":"","normalized_path":null,"command_line":null,"sha256":null,"av_label":null,"av_matched":null,"av_total":null,"pid":"2056","icon":null,"process_flags":[]},{"uid":"00026274-00004728","parentuid":null,"name":"VBoxService.exe","normalized_path":"%WINDIR%\\System32\\VBoxService.exe","command_line":"guestsession --session-id=2 --session-proto=2 --user %OSUSER%","sha256":"42b57adee2f57587f05ad37e506221cb1f9dc87f43e418ff98040d7fd9fe6e5c","av_label":null,"av_matched":null,"av_total":null,"pid":"4728","icon":"$2b","process_flags":[{"name":"Reduced Monitoring","data":null}]},{"uid":"00026277-00001740","parentuid":null,"name":"","normalized_path":null,"command_line":null,"sha256":null,"av_label":null,"av_matched":null,"av_total":null,"pid":"1740","icon":null,"process_flags":[]},{"uid":"00028296-00004104","parentuid":null,"name":"","normalized_path":null,"command_line":null,"sha256":null,"av_label":null,"av_matched":null,"av_total":null,"pid":"4104","icon":null,"process_flags":[]},{"uid":"00028329-00003800","parentuid":null,"name":"VBoxService.exe","normalized_path":"%WINDIR%\\System32\\VBoxService.exe","command_line":"guestsession --session-id=2 --session-proto=2 --user %OSUSER%","sha256":"42b57adee2f57587f05ad37e506221cb1f9dc87f43e418ff98040d7fd9fe6e5c","av_label":null,"av_matched":null,"av_total":null,"pid":"3800","icon":"$2c","process_flags":[{"name":"Reduced Monitoring","data":null}]},{"uid":"00028332-00003164","parentuid":null,"name":"","normalized_path":null,"command_line":null,"sha256":null,"av_label":null,"av_matched":null,"av_total":null,"pid":"3164","icon":null,"process_flags":[]},{"uid":"00031004-00002756","parentuid":null,"name":"","normalized_path":null,"command_line":null,"sha256":null,"av_label":null,"av_matched":null,"av_total":null,"pid":"2756","icon":null,"process_flags":[]},{"uid":"00031032-00002088","parentuid":null,"name":"VBoxService.exe","normalized_path":"%WINDIR%\\System32\\VBoxService.exe","command_line":"guestsession --session-id=2 --session-proto=2 --user %OSUSER%","sha256":"42b57adee2f57587f05ad37e506221cb1f9dc87f43e418ff98040d7fd9fe6e5c","av_label":null,"av_matched":null,"av_total":null,"pid":"2088","icon":"$2d","process_flags":[{"name":"Reduced Monitoring","data":null}]},{"uid":"00031035-00002268","parentuid":null,"name":"","normalized_path":null,"command_line":null,"sha256":null,"av_label":null,"av_matched":null,"av_total":null,"pid":"2268","icon":null,"process_flags":[]}],"mitre_attcks":[],"network_mode":"default","signatures":[{"threat_level":0,"threat_level_human":"informative","category":"Anti-Detection/Stealthyness","identifier":"registry-29","type":3,"relevance":3,"name":"Queries the internet cache settings (often used to hide footprints in index.dat or internet cache)","description":"\"dllhost.exe\" (Access type: \"QUERYVAL\"; Path: \"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\"; Key: \"DISABLECACHINGOFSSLPAGES\"; Value: \"00000000040000000400000000000000\")","description_v2":["\"dllhost.exe\" (Access type: \"QUERYVAL\"; Path: \"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\"; Key: \"DISABLECACHINGOFSSLPAGES\"; Value: \"00000000040000000400000000000000\")"],"description_v3":[{"type":"text","value":"\"dllhost.exe\" (Access type: \"QUERYVAL\"; Path: \"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\"; Key: \"DISABLECACHINGOFSSLPAGES\"; Value: \"00000000040000000400000000000000\")"}],"origin":"Registry Access","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Environment Awareness","identifier":"stream-3","type":1,"relevance":1,"name":"Contains ability to query the machine version","description":"GetVersion@kernel32.dll at 00017318-00004372-6687-414-0041A810\n GetVersionExA@kernel32.dll at 00017318-00004372-6687-345-0041AB58","description_v2":["GetVersion@kernel32.dll at 00017318-00004372-6687-414-0041A810","GetVersionExA@kernel32.dll at 00017318-00004372-6687-345-0041AB58"],"description_v3":[{"type":"text","value":"GetVersion@kernel32.dll"},{"type":"stream","stream_uid":"00017318-00004372-6687-414-0041A810","modal_link":"/bff/report/5ac4ee317ca3e174051348f3/processes/00016692-00004076/streams/0/00017318-00004372-6687-414-0041A810?childUid=00017318-00004372","process":{"name":"Censitrac.exe","process_uid":"00017318-00004372","pid":"4372"}},{"type":"linebreak"},{"type":"text","value":"GetVersionExA@kernel32.dll"},{"type":"stream","stream_uid":"00017318-00004372-6687-345-0041AB58","modal_link":"/bff/report/5ac4ee317ca3e174051348f3/processes/00016692-00004076/streams/0/00017318-00004372-6687-345-0041AB58?childUid=00017318-00004372","process":{"name":"Censitrac.exe","process_uid":"00017318-00004372","pid":"4372"}}],"origin":"Hybrid Analysis Technology","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":{"modal_link":"/bff/report/5ac4ee317ca3e174051348f3/processes/00016692-00004076/streams/0/00017318-00004372-6687-414-0041A810?childUid=00017318-00004372","name":"Censitrac.exe","pid":4372}},{"threat_level":0,"threat_level_human":"informative","category":"Environment Awareness","identifier":"registry-35","type":3,"relevance":5,"name":"Reads the active computer name","description":"\"dllhost.exe\" (Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\COMPUTERNAME\\ACTIVECOMPUTERNAME\"; Key: \"COMPUTERNAME\")\n \"cacls.exe\" (Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\COMPUTERNAME\\ACTIVECOMPUTERNAME\"; Key: \"COMPUTERNAME\")\n \"regsvr32.exe\" (Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\COMPUTERNAME\\ACTIVECOMPUTERNAME\"; Key: \"COMPUTERNAME\")","description_v2":["\"dllhost.exe\" (Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\COMPUTERNAME\\ACTIVECOMPUTERNAME\"; Key: \"COMPUTERNAME\")","\"cacls.exe\" (Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\COMPUTERNAME\\ACTIVECOMPUTERNAME\"; Key: \"COMPUTERNAME\")","\"regsvr32.exe\" (Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\COMPUTERNAME\\ACTIVECOMPUTERNAME\"; Key: \"COMPUTERNAME\")"],"description_v3":[{"type":"text","value":"\"dllhost.exe\" (Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\COMPUTERNAME\\ACTIVECOMPUTERNAME\"; Key: \"COMPUTERNAME\")"},{"type":"linebreak"},{"type":"text","value":"\"cacls.exe\" (Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\COMPUTERNAME\\ACTIVECOMPUTERNAME\"; Key: \"COMPUTERNAME\")"},{"type":"linebreak"},{"type":"text","value":"\"regsvr32.exe\" (Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\COMPUTERNAME\\ACTIVECOMPUTERNAME\"; Key: \"COMPUTERNAME\")"}],"origin":"Registry Access","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Environment Awareness","identifier":"registry-55","type":3,"relevance":10,"name":"Reads the registry for installed applications","description":"\"Censitrac.exe\" (Path: \"HKLM\\SOFTWARE\\WOW6432NODE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\APP PATHS\\PALM.EXE\")\n \"Censitrac.exe\" (Path: \"HKLM\\SOFTWARE\\WOW6432NODE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\UNINSTALL\")","description_v2":["\"Censitrac.exe\" (Path: \"HKLM\\SOFTWARE\\WOW6432NODE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\APP PATHS\\PALM.EXE\")","\"Censitrac.exe\" (Path: \"HKLM\\SOFTWARE\\WOW6432NODE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\UNINSTALL\")"],"description_v3":[{"type":"text","value":"\"Censitrac.exe\" (Path: \"HKLM\\SOFTWARE\\WOW6432NODE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\APP PATHS\\PALM.EXE\")"},{"type":"linebreak"},{"type":"text","value":"\"Censitrac.exe\" (Path: \"HKLM\\SOFTWARE\\WOW6432NODE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\UNINSTALL\")"}],"origin":"Registry Access","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"General","identifier":"network-0","type":7,"relevance":1,"name":"Contacts domains","description":"\"w6cczp.com\"","description_v2":["\"w6cczp.com\""],"description_v3":[{"type":"text","value":"\"w6cczp.com\""}],"origin":"Network Traffic","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"General","identifier":"network-1","type":7,"relevance":1,"name":"Contacts server","description":"\"2.21.242.227:80\"\n \"172.227.102.35:80\"","description_v2":["\"2.21.242.227:80\"","\"172.227.102.35:80\""],"description_v3":[{"type":"text","value":"\"2.21.242.227:80\""},{"type":"linebreak"},{"type":"text","value":"\"172.227.102.35:80\""}],"origin":"Network Traffic","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"General","identifier":"api-4","type":6,"relevance":1,"name":"Creates a writable file in a temporary directory","description":"\"\" created file \"%TEMP%\\~DF5EB92958D453502D.TMP\"\n \"Censitrac.exe\" created file \"%TEMP%\\~DF1B2F4CF0466CABE5.TMP\"","description_v2":["\"\" created file \"%TEMP%\\~DF5EB92958D453502D.TMP\"","\"Censitrac.exe\" created file \"%TEMP%\\~DF1B2F4CF0466CABE5.TMP\""],"description_v3":[{"type":"text","value":"\"\" created file \"%TEMP%\\~DF5EB92958D453502D.TMP\""},{"type":"linebreak"},{"type":"text","value":"\"Censitrac.exe\" created file \"%TEMP%\\~DF1B2F4CF0466CABE5.TMP\""}],"origin":"API Call","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"General","identifier":"mutant-0","type":4,"relevance":3,"name":"Creates mutants","description":"\"\\Sessions\\1\\BaseNamedObjects\\Local\\ZonesCacheCounterMutex\"\n \"\\Sessions\\1\\BaseNamedObjects\\Local\\ZonesLockedCacheCounterMutex\"","description_v2":["\"\\Sessions\\1\\BaseNamedObjects\\Local\\ZonesCacheCounterMutex\"","\"\\Sessions\\1\\BaseNamedObjects\\Local\\ZonesLockedCacheCounterMutex\""],"description_v3":[{"type":"text","value":"\"\\Sessions\\1\\BaseNamedObjects\\Local\\ZonesCacheCounterMutex\""},{"type":"linebreak"},{"type":"text","value":"\"\\Sessions\\1\\BaseNamedObjects\\Local\\ZonesLockedCacheCounterMutex\""}],"origin":"Created Mutant","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"General","identifier":"binary-16","type":8,"relevance":10,"name":"Drops files marked as clean","description":"Antivirus vendors marked dropped file \"mscomm32.ocx\" as clean (type is \"PE32 executable (DLL) (GUI) Intel 80386 (stripped to external PDB) for MS Windows\"), Antivirus vendors marked dropped file \"msflxgrd.ocx\" as clean (type is \"PE32 executable (DLL) (GUI) Intel 80386 (stripped to external PDB) for MS Windows\")","description_v2":["Antivirus vendors marked dropped file \"mscomm32.ocx\" as clean (type is \"PE32 executable (DLL) (GUI) Intel 80386 (stripped to external PDB) for MS Windows\"), Antivirus vendors marked dropped file \"msflxgrd.ocx\" as clean (type is \"PE32 executable (DLL) (GUI) Intel 80386 (stripped to external PDB) for MS Windows\")"],"description_v3":[{"type":"text","value":"Antivirus vendors marked dropped file \"mscomm32.ocx\" as clean (type is \"PE32 executable (DLL) (GUI) Intel 80386 (stripped to external PDB) for MS Windows\"), Antivirus vendors marked dropped file \"msflxgrd.ocx\" as clean (type is \"PE32 executable (DLL) (GUI) Intel 80386 (stripped to external PDB) for MS Windows\")"}],"origin":"Binary File","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"General","identifier":"module-0","type":10,"relevance":0,"name":"Loads the visual basic runtime environment","description":"\"\" loaded module \"%WINDIR%\\SysWOW64\\msvbvm60.dll\" at 72940000\n \"Censitrac.exe\" loaded module \"%WINDIR%\\SysWOW64\\msvbvm60.dll\" at 72940000","description_v2":["\"\" loaded module \"%WINDIR%\\SysWOW64\\msvbvm60.dll\" at 72940000","\"Censitrac.exe\" loaded module \"%WINDIR%\\SysWOW64\\msvbvm60.dll\" at 72940000"],"description_v3":[{"type":"text","value":"\"\" loaded module \"%WINDIR%\\SysWOW64\\msvbvm60.dll\" at 72940000"},{"type":"linebreak"},{"type":"text","value":"\"Censitrac.exe\" loaded module \"%WINDIR%\\SysWOW64\\msvbvm60.dll\" at 72940000"}],"origin":"Loaded Module","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"General","identifier":"target-67","type":9,"relevance":10,"name":"Process launched with changed environment","description":"$2e","description_v2":["Process \"dllhost.exe\" (UID: 00017293-00004072) was launched with modified environment variables: \"LOCALAPPDATA, TMP, PROCESSOR_ARCHITECTURE, USERDOMAIN, CommonProgramFiles, ProgramFiles, USERPROFILE, TEMP, APPDATA\"","Process \"dllhost.exe\" (UID: 00017293-00004072) was launched with missing environment variables: \"PROMPT, LOGONSERVER, HOMEPATH, HOMEDRIVE, PROCESSOR_ARCHITEW6432\"","Process \"Censitrac.exe\" (UID: 00017318-00004372) was launched with new environment variables: \"ALLUSERSPROFILE=\"C:\\ProgramData\", ProgramData=\"C:\\ProgramData\", HOMEPATH=\"\\Users\\nD0mf6s\", PUBLIC=\"C:\\Users\\Public\", PROMPT=\"$P$G\", LOGONSERVER=\"\\\\HAPUBWS-PC\", LOCALAPPDATA=\"C:\\Users\\nD0mf6s\\AppData\\Local\", USERDOMAIN=\"2FR3idP3EE\", COMPUTERNAME=\"2FR3idP3EE\", USERPROFILE=\"C:\\Users\\nD0mf6s\", ProgramFiles(x86)=\"C:\\Program Files (x86)\", PROCESSOR_ARCHITEW6432=\"AMD64\", CommonProgramFiles=\"C:\\Program Files (x86)\\Common Files\", ProgramW6432=\"C:\\Program Files\", ProgramFiles=\"C:\\Program Files (x86)\", HOMEDRIVE=\"C:\", CommonProgramW6432=\"C:\\Program Files\\Common Files\", CommonProgramFiles(x86)=\"C:\\Program Files (x86)\\Common Files\", APPDATA=\"C:\\Users\\nD0mf6s\\AppData\\Roaming\"\"","Process \"Censitrac.exe\" (UID: 00017318-00004372) was launched with modified environment variables: \"TMP, PROCESSOR_ARCHITECTURE, USERNAME, TEMP\"","Process \"VBoxService.exe\" (UID: 00017401-00004600) was launched with new environment variables: \"LOGONSERVER=\"\\\\HAPUBWS-PC\", HOMEPATH=\"\\Users\\nD0mf6s\", HOMEDRIVE=\"C:\"\"","Process \"VBoxService.exe\" (UID: 00017401-00004600) was launched with modified environment variables: \"LOCALAPPDATA, TMP, USERDOMAIN, Path, USERPROFILE, TEMP, APPDATA\"","Process \"conhost.exe\" (UID: 00017407-00002500) was launched with modified environment variables: \"TMP, USERNAME, Path, TEMP\"","Process \"conhost.exe\" (UID: 00017407-00002500) was launched with missing environment variables: \"ALLUSERSPROFILE, ProgramData, HOMEPATH, PUBLIC, LOGONSERVER, LOCALAPPDATA, USERDOMAIN, COMPUTERNAME, USERPROFILE, ProgramFiles(x86), CommonProgramFiles, ProgramW6432, ProgramFiles, HOMEDRIVE, CommonProgramW6432, CommonProgramFiles(x86), APPDATA\"","Process \"conhost.exe\" (UID: 00017873-00004020) was launched with modified environment variables: \"TMP, PROCESSOR_ARCHITECTURE, USERNAME, TEMP\"","Process \"conhost.exe\" (UID: 00017873-00004020) was launched with missing environment variables: \"ALLUSERSPROFILE, ProgramData, HOMEPATH, PUBLIC, PROMPT, LOGONSERVER, LOCALAPPDATA, USERDOMAIN, COMPUTERNAME, USERPROFILE, ProgramFiles(x86), PROCESSOR_ARCHITEW6432, CommonProgramFiles, ProgramW6432, ProgramFiles, HOMEDRIVE, CommonProgramW6432, CommonProgramFiles(x86), APPDATA\"","Process \"cacls.exe\" (UID: 00017900-00003632) was launched with new environment variables: \"ALLUSERSPROFILE=\"C:\\ProgramData\", ProgramData=\"C:\\ProgramData\", HOMEPATH=\"\\Users\\nD0mf6s\", PUBLIC=\"C:\\Users\\Public\", PROMPT=\"$P$G\", LOGONSERVER=\"\\\\HAPUBWS-PC\", LOCALAPPDATA=\"C:\\Users\\nD0mf6s\\AppData\\Local\", USERDOMAIN=\"2FR3idP3EE\", COMPUTERNAME=\"2FR3idP3EE\", USERPROFILE=\"C:\\Users\\nD0mf6s\", ProgramFiles(x86)=\"C:\\Program Files (x86)\", PROCESSOR_ARCHITEW6432=\"AMD64\", CommonProgramFiles=\"C:\\Program Files (x86)\\Common Files\", ProgramW6432=\"C:\\Program Files\", ProgramFiles=\"C:\\Program Files (x86)\", HOMEDRIVE=\"C:\", CommonProgramW6432=\"C:\\Program Files\\Common Files\", CommonProgramFiles(x86)=\"C:\\Program Files (x86)\\Common Files\", APPDATA=\"C:\\Users\\nD0mf6s\\AppData\\Roaming\"\"","Process \"cacls.exe\" (UID: 00017900-00003632) was launched with modified environment variables: \"TMP, PROCESSOR_ARCHITECTURE, USERNAME, TEMP\"","Process \"conhost.exe\" (UID: 00017909-00003268) was launched with modified environment variables: \"TMP, PROCESSOR_ARCHITECTURE, USERNAME, TEMP\"","Process \"conhost.exe\" (UID: 00017909-00003268) was launched with missing environment variables: \"ALLUSERSPROFILE, ProgramData, HOMEPATH, PUBLIC, PROMPT, LOGONSERVER, LOCALAPPDATA, USERDOMAIN, COMPUTERNAME, USERPROFILE, ProgramFiles(x86), PROCESSOR_ARCHITEW6432, CommonProgramFiles, ProgramW6432, ProgramFiles, HOMEDRIVE, CommonProgramW6432, CommonProgramFiles(x86), APPDATA\"","Process \"regsvr32.exe\" (UID: 00017949-00004764) was launched with new environment variables: \"ALLUSERSPROFILE=\"C:\\ProgramData\", ProgramData=\"C:\\ProgramData\", HOMEPATH=\"\\Users\\nD0mf6s\", PUBLIC=\"C:\\Users\\Public\", PROMPT=\"$P$G\", LOGONSERVER=\"\\\\HAPUBWS-PC\", LOCALAPPDATA=\"C:\\Users\\nD0mf6s\\AppData\\Local\", USERDOMAIN=\"2FR3idP3EE\", COMPUTERNAME=\"2FR3idP3EE\", USERPROFILE=\"C:\\Users\\nD0mf6s\", ProgramFiles(x86)=\"C:\\Program Files (x86)\", PROCESSOR_ARCHITEW6432=\"AMD64\", CommonProgramFiles=\"C:\\Program Files (x86)\\Common Files\", ProgramW6432=\"C:\\Program Files\", ProgramFiles=\"C:\\Program Files (x86)\", HOMEDRIVE=\"C:\", CommonProgramW6432=\"C:\\Program Files\\Common Files\", CommonProgramFiles(x86)=\"C:\\Program Files (x86)\\Common Files\", APPDATA=\"C:\\Users\\nD0mf6s\\AppData\\Roaming\"\"","Process \"regsvr32.exe\" (UID: 00017949-00004764) was launched with modified environment variables: \"TMP, PROCESSOR_ARCHITECTURE, USERNAME, TEMP\"","Process \"dllhost.exe\" (UID: 00018201-00003172) was launched with new environment variables: \"SESSIONNAME=\"Console\"\"","Process \"dllhost.exe\" (UID: 00018201-00003172) was launched with modified environment variables: \"PROCESSOR_ARCHITECTURE, CommonProgramFiles, ProgramFiles, Path\"","Process \"dllhost.exe\" (UID: 00018201-00003172) was launched with missing environment variables: \"PROMPT, PROCESSOR_ARCHITEW6432\"","Process \"dllhost.exe\" (UID: 00019450-00004428) was launched with modified environment variables: \"LOCALAPPDATA, TMP, USERDOMAIN, Path, USERPROFILE, TEMP, APPDATA\"","Process \"dllhost.exe\" (UID: 00019450-00004428) was launched with missing environment variables: \"LOGONSERVER, HOMEPATH, SESSIONNAME, HOMEDRIVE\"","Process \"VBoxService.exe\" (UID: 00019480-00002860) was launched with new environment variables: \"LOGONSERVER=\"\\\\HAPUBWS-PC\", HOMEPATH=\"\\Users\\nD0mf6s\", HOMEDRIVE=\"C:\"\"","Process \"VBoxService.exe\" (UID: 00019480-00002860) was launched with modified environment variables: \"LOCALAPPDATA, TMP, USERDOMAIN, Path, USERPROFILE, TEMP, APPDATA\"","Process \"conhost.exe\" (UID: 00019483-00003628) was launched with modified environment variables: \"TMP, USERNAME, Path, TEMP\"","Process \"conhost.exe\" (UID: 00019483-00003628) was launched with missing environment variables: \"ALLUSERSPROFILE, ProgramData, HOMEPATH, PUBLIC, LOGONSERVER, LOCALAPPDATA, USERDOMAIN, COMPUTERNAME, USERPROFILE, ProgramFiles(x86), CommonProgramFiles, ProgramW6432, ProgramFiles, HOMEDRIVE, CommonProgramW6432, CommonProgramFiles(x86), APPDATA\"","Process \"dllhost.exe\" (UID: 00021772-00001640) was launched with new environment variables: \"ALLUSERSPROFILE=\"C:\\ProgramData\", ProgramData=\"C:\\ProgramData\", HOMEPATH=\"\\Users\\nD0mf6s\", PUBLIC=\"C:\\Users\\Public\", LOGONSERVER=\"\\\\HAPUBWS-PC\", LOCALAPPDATA=\"C:\\Users\\nD0mf6s\\AppData\\Local\", USERDOMAIN=\"2FR3idP3EE\", COMPUTERNAME=\"2FR3idP3EE\", USERPROFILE=\"C:\\Users\\nD0mf6s\", ProgramFiles(x86)=\"C:\\Program Files (x86)\", CommonProgramFiles=\"C:\\Program Files\\Common Files\", ProgramW6432=\"C:\\Program Files\", ProgramFiles=\"C:\\Program Files\", HOMEDRIVE=\"C:\", CommonProgramW6432=\"C:\\Program Files\\Common Files\", CommonProgramFiles(x86)=\"C:\\Program Files (x86)\\Common Files\", APPDATA=\"C:\\Users\\nD0mf6s\\AppData\\Roaming\"\"","Process \"dllhost.exe\" (UID: 00021772-00001640) was launched with modified environment variables: \"TMP, USERNAME, Path, TEMP\"","Process \"dllhost.exe\" (UID: 00022158-00004584) was launched with modified environment variables: \"LOCALAPPDATA, TMP, USERDOMAIN, Path, USERPROFILE, TEMP, APPDATA\"","Process \"dllhost.exe\" (UID: 00022158-00004584) was launched with missing environment variables: \"LOGONSERVER, HOMEPATH, HOMEDRIVE\"","Process \"VBoxService.exe\" (UID: 00022187-00002572) was launched with new environment variables: \"LOGONSERVER=\"\\\\HAPUBWS-PC\", HOMEPATH=\"\\Users\\nD0mf6s\", HOMEDRIVE=\"C:\"\"","Process \"VBoxService.exe\" (UID: 00022187-00002572) was launched with modified environment variables: \"LOCALAPPDATA, TMP, USERDOMAIN, Path, USERPROFILE, TEMP, APPDATA\"","Process \"conhost.exe\" (UID: 00022190-00002580) was launched with modified environment variables: \"TMP, USERNAME, Path, TEMP\"","Process \"conhost.exe\" (UID: 00022190-00002580) was launched with missing environment variables: \"ALLUSERSPROFILE, ProgramData, HOMEPATH, PUBLIC, LOGONSERVER, LOCALAPPDATA, USERDOMAIN, COMPUTERNAME, USERPROFILE, ProgramFiles(x86), CommonProgramFiles, ProgramW6432, ProgramFiles, HOMEDRIVE, CommonProgramW6432, CommonProgramFiles(x86), APPDATA\"","Process \"dllhost.exe\" (UID: 00024206-00003764) was launched with new environment variables: \"ALLUSERSPROFILE=\"C:\\ProgramData\", LOCALAPPDATA=\"C:\\Windows\\system32\\config\\systemprofile\\AppData\\Local\", ProgramData=\"C:\\ProgramData\", USERDOMAIN=\"2FR3idP3E\", COMPUTERNAME=\"2FR3idP3EE\", PUBLIC=\"C:\\Users\\Public\", USERPROFILE=\"C:\\Windows\\system32\\config\\systemprofile\", ProgramFiles(x86)=\"C:\\Program Files (x86)\", CommonProgramFiles=\"C:\\Program Files\\Common Files\", ProgramW6432=\"C:\\Program Files\", ProgramFiles=\"C:\\Program Files\", CommonProgramW6432=\"C:\\Program Files\\Common Files\", CommonProgramFiles(x86)=\"C:\\Program Files (x86)\\Common Files\", APPDATA=\"C:\\Windows\\system32\\config\\systemprofile\\AppData\\Roaming\"\"","Process \"dllhost.exe\" (UID: 00024206-00003764) was launched with modified environment variables: \"USERNAME\"","Process \"VBoxService.exe\" (UID: 00024233-00003952) was launched with new environment variables: \"LOGONSERVER=\"\\\\HAPUBWS-PC\", HOMEPATH=\"\\Users\\nD0mf6s\", HOMEDRIVE=\"C:\"\"","Process \"VBoxService.exe\" (UID: 00024233-00003952) was launched with modified environment variables: \"LOCALAPPDATA, TMP, USERDOMAIN, Path, USERPROFILE, TEMP, APPDATA\"","Process \"conhost.exe\" (UID: 00024236-00001672) was launched with modified environment variables: \"TMP, USERNAME, Path, TEMP\"","Process \"conhost.exe\" (UID: 00024236-00001672) was launched with missing environment variables: \"ALLUSERSPROFILE, ProgramData, HOMEPATH, PUBLIC, LOGONSERVER, LOCALAPPDATA, USERDOMAIN, COMPUTERNAME, USERPROFILE, ProgramFiles(x86), CommonProgramFiles, ProgramW6432, ProgramFiles, HOMEDRIVE, CommonProgramW6432, CommonProgramFiles(x86), APPDATA\"","Process \"dllhost.exe\" (UID: 00025484-00004872) was launched with new environment variables: \"ALLUSERSPROFILE=\"C:\\ProgramData\", ProgramData=\"C:\\ProgramData\", HOMEPATH=\"\\Users\\nD0mf6s\", PUBLIC=\"C:\\Users\\Public\", LOGONSERVER=\"\\\\HAPUBWS-PC\", LOCALAPPDATA=\"C:\\Users\\nD0mf6s\\AppData\\Local\", USERDOMAIN=\"2FR3idP3EE\", COMPUTERNAME=\"2FR3idP3EE\", USERPROFILE=\"C:\\Users\\nD0mf6s\", ProgramFiles(x86)=\"C:\\Program Files (x86)\", CommonProgramFiles=\"C:\\Program Files\\Common Files\", ProgramW6432=\"C:\\Program Files\", ProgramFiles=\"C:\\Program Files\", HOMEDRIVE=\"C:\", CommonProgramW6432=\"C:\\Program Files\\Common Files\", CommonProgramFiles(x86)=\"C:\\Program Files (x86)\\Common Files\", APPDATA=\"C:\\Users\\nD0mf6s\\AppData\\Roaming\"\"","Process \"dllhost.exe\" (UID: 00025484-00004872) was launched with modified environment variables: \"TMP, USERNAME, Path, TEMP\""],"description_v3":[{"type":"text","value":"Process \"dllhost.exe\""},{"type":"process","process_uid":"00017293-00004072","label":"Show Process"},{"type":"text","value":"was launched with modified environment variables: \"LOCALAPPDATA, TMP, PROCESSOR_ARCHITECTURE, USERDOMAIN, CommonProgramFiles, ProgramFiles, USERPROFILE, TEMP, APPDATA\""},{"type":"linebreak"},{"type":"text","value":"Process \"dllhost.exe\""},{"type":"process","process_uid":"00017293-00004072","label":"Show Process"},{"type":"text","value":"was launched with missing environment variables: \"PROMPT, LOGONSERVER, HOMEPATH, HOMEDRIVE, PROCESSOR_ARCHITEW6432\""},{"type":"linebreak"},{"type":"text","value":"Process \"Censitrac.exe\""},{"type":"process","process_uid":"00017318-00004372","label":"Show Process"},{"type":"text","value":"was launched with new environment variables: \"ALLUSERSPROFILE=\"%ALLUSERSPROFILE%\\, ProgramData=\"C:\\ProgramData\", HOMEPATH=\"\\Users\\nD0mf6s\", PUBLIC=\"C:\\Users\\%USERNAME%\\\\HAPUBWS-PC\", LOCALAPPDATA=\"C:\\Users\\%USERNAME%\\AppData\\Local\", USERDOMAIN=\"2FR3idP3EE\", COMPUTERNAME=\"2FR3idP3EE\", USERPROFILE=\"C:\\Users\\%USERNAME%\\Program Files (x86)\", PROCESSOR_ARCHITEW6432=\"AMD64\", CommonProgramFiles=\"C:\\Program Files (x86)\\Common Files\", ProgramW6432=\"C:\\Program Files\", ProgramFiles=\"C:\\Program Files (x86)\", HOMEDRIVE=\"C:\", CommonProgramW6432=\"C:\\Program Files\\Common Files\", CommonProgramFiles(x86)=\"C:\\Program Files (x86)\\Common Files\", APPDATA=\"C:\\Users\\%USERNAME%\\AppData\\Roaming\"\""},{"type":"linebreak"},{"type":"text","value":"Process \"Censitrac.exe\""},{"type":"process","process_uid":"00017318-00004372","label":"Show Process"},{"type":"text","value":"was launched with modified environment variables: \"TMP, PROCESSOR_ARCHITECTURE, USERNAME, TEMP\""},{"type":"linebreak"},{"type":"text","value":"Process \"VBoxService.exe\""},{"type":"process","process_uid":"00017401-00004600","label":"Show Process"},{"type":"text","value":"was launched with new environment variables: \"LOGONSERVER=\"\\\\HAPUBWS-PC\", HOMEPATH=\"\\Users\\nD0mf6s\", HOMEDRIVE=\"C:\"\""},{"type":"linebreak"},{"type":"text","value":"Process \"VBoxService.exe\""},{"type":"process","process_uid":"00017401-00004600","label":"Show Process"},{"type":"text","value":"was launched with modified environment variables: \"LOCALAPPDATA, TMP, USERDOMAIN, Path, USERPROFILE, TEMP, APPDATA\""},{"type":"linebreak"},{"type":"text","value":"Process \"conhost.exe\""},{"type":"process","process_uid":"00017407-00002500","label":"Show Process"},{"type":"text","value":"was launched with modified environment variables: \"TMP, USERNAME, Path, TEMP\""},{"type":"linebreak"},{"type":"text","value":"Process \"conhost.exe\""},{"type":"process","process_uid":"00017407-00002500","label":"Show Process"},{"type":"text","value":"was launched with missing environment variables: \"ALLUSERSPROFILE, ProgramData, HOMEPATH, PUBLIC, LOGONSERVER, LOCALAPPDATA, USERDOMAIN, COMPUTERNAME, USERPROFILE, ProgramFiles(x86), CommonProgramFiles, ProgramW6432, ProgramFiles, HOMEDRIVE, CommonProgramW6432, CommonProgramFiles(x86), APPDATA\""},{"type":"linebreak"},{"type":"text","value":"Process \"conhost.exe\""},{"type":"process","process_uid":"00017873-00004020","label":"Show Process"},{"type":"text","value":"was launched with modified environment variables: \"TMP, PROCESSOR_ARCHITECTURE, USERNAME, TEMP\""},{"type":"linebreak"},{"type":"text","value":"Process \"conhost.exe\""},{"type":"process","process_uid":"00017873-00004020","label":"Show Process"},{"type":"text","value":"was launched with missing environment variables: \"ALLUSERSPROFILE, ProgramData, HOMEPATH, PUBLIC, PROMPT, LOGONSERVER, LOCALAPPDATA, USERDOMAIN, COMPUTERNAME, USERPROFILE, ProgramFiles(x86), PROCESSOR_ARCHITEW6432, CommonProgramFiles, ProgramW6432, ProgramFiles, HOMEDRIVE, CommonProgramW6432, CommonProgramFiles(x86), APPDATA\""},{"type":"linebreak"},{"type":"text","value":"Process \"cacls.exe\""},{"type":"process","process_uid":"00017900-00003632","label":"Show Process"},{"type":"text","value":"was launched with new environment variables: \"ALLUSERSPROFILE=\"C:\\ProgramData\", ProgramData=\"C:\\ProgramData\", HOMEPATH=\"\\Users\\nD0mf6s\", PUBLIC=\"C:\\Users\\%USERNAME%\\\\HAPUBWS-PC\", LOCALAPPDATA=\"C:\\Users\\%USERNAME%\\AppData\\Local\", USERDOMAIN=\"2FR3idP3EE\", COMPUTERNAME=\"2FR3idP3EE\", USERPROFILE=\"C:\\Users\\%USERNAME%\\Program Files (x86)\", PROCESSOR_ARCHITEW6432=\"AMD64\", CommonProgramFiles=\"C:\\Program Files (x86)\\Common Files\", ProgramW6432=\"C:\\Program Files\", ProgramFiles=\"C:\\Program Files (x86)\", HOMEDRIVE=\"C:\", CommonProgramW6432=\"C:\\Program Files\\Common Files\", CommonProgramFiles(x86)=\"C:\\Program Files (x86)\\Common Files\", APPDATA=\"C:\\Users\\%USERNAME%\\AppData\\Roaming\"\""},{"type":"linebreak"},{"type":"text","value":"Process \"cacls.exe\""},{"type":"process","process_uid":"00017900-00003632","label":"Show Process"},{"type":"text","value":"was launched with modified environment variables: \"TMP, PROCESSOR_ARCHITECTURE, USERNAME, TEMP\""},{"type":"linebreak"},{"type":"text","value":"Process \"conhost.exe\""},{"type":"process","process_uid":"00017909-00003268","label":"Show Process"},{"type":"text","value":"was launched with modified environment variables: \"TMP, PROCESSOR_ARCHITECTURE, USERNAME, TEMP\""},{"type":"linebreak"},{"type":"text","value":"Process \"conhost.exe\""},{"type":"process","process_uid":"00017909-00003268","label":"Show Process"},{"type":"text","value":"was launched with missing environment variables: \"ALLUSERSPROFILE, ProgramData, HOMEPATH, PUBLIC, PROMPT, LOGONSERVER, LOCALAPPDATA, USERDOMAIN, COMPUTERNAME, USERPROFILE, ProgramFiles(x86), PROCESSOR_ARCHITEW6432, CommonProgramFiles, ProgramW6432, ProgramFiles, HOMEDRIVE, CommonProgramW6432, CommonProgramFiles(x86), APPDATA\""},{"type":"linebreak"},{"type":"text","value":"Process \"regsvr32.exe\""},{"type":"process","process_uid":"00017949-00004764","label":"Show Process"},{"type":"text","value":"was launched with new environment variables: \"ALLUSERSPROFILE=\"C:\\ProgramData\", ProgramData=\"C:\\ProgramData\", HOMEPATH=\"\\Users\\nD0mf6s\", PUBLIC=\"C:\\Users\\%USERNAME%\\\\HAPUBWS-PC\", LOCALAPPDATA=\"C:\\Users\\%USERNAME%\\AppData\\Local\", USERDOMAIN=\"2FR3idP3EE\", COMPUTERNAME=\"2FR3idP3EE\", USERPROFILE=\"C:\\Users\\%USERNAME%\\Program Files (x86)\", PROCESSOR_ARCHITEW6432=\"AMD64\", CommonProgramFiles=\"C:\\Program Files (x86)\\Common Files\", ProgramW6432=\"C:\\Program Files\", ProgramFiles=\"C:\\Program Files (x86)\", HOMEDRIVE=\"C:\", CommonProgramW6432=\"C:\\Program Files\\Common Files\", CommonProgramFiles(x86)=\"C:\\Program Files (x86)\\Common Files\", APPDATA=\"C:\\Users\\%USERNAME%\\AppData\\Roaming\"\""},{"type":"linebreak"},{"type":"text","value":"Process \"regsvr32.exe\""},{"type":"process","process_uid":"00017949-00004764","label":"Show Process"},{"type":"text","value":"was launched with modified environment variables: \"TMP, PROCESSOR_ARCHITECTURE, USERNAME, TEMP\""},{"type":"linebreak"},{"type":"text","value":"Process \"dllhost.exe\""},{"type":"process","process_uid":"00018201-00003172","label":"Show Process"},{"type":"text","value":"was launched with new environment variables: \"SESSIONNAME=\"Console\"\""},{"type":"linebreak"},{"type":"text","value":"Process \"dllhost.exe\""},{"type":"process","process_uid":"00018201-00003172","label":"Show Process"},{"type":"text","value":"was launched with modified environment variables: \"PROCESSOR_ARCHITECTURE, CommonProgramFiles, ProgramFiles, Path\""},{"type":"linebreak"},{"type":"text","value":"Process \"dllhost.exe\""},{"type":"process","process_uid":"00018201-00003172","label":"Show Process"},{"type":"text","value":"was launched with missing environment variables: \"PROMPT, PROCESSOR_ARCHITEW6432\""},{"type":"linebreak"},{"type":"text","value":"Process \"dllhost.exe\""},{"type":"process","process_uid":"00019450-00004428","label":"Show Process"},{"type":"text","value":"was launched with modified environment variables: \"LOCALAPPDATA, TMP, USERDOMAIN, Path, USERPROFILE, TEMP, APPDATA\""},{"type":"linebreak"},{"type":"text","value":"Process \"dllhost.exe\""},{"type":"process","process_uid":"00019450-00004428","label":"Show Process"},{"type":"text","value":"was launched with missing environment variables: \"LOGONSERVER, HOMEPATH, SESSIONNAME, HOMEDRIVE\""},{"type":"linebreak"},{"type":"text","value":"Process \"VBoxService.exe\""},{"type":"process","process_uid":"00019480-00002860","label":"Show Process"},{"type":"text","value":"was launched with new environment variables: \"LOGONSERVER=\"\\\\HAPUBWS-PC\", HOMEPATH=\"\\Users\\nD0mf6s\", HOMEDRIVE=\"C:\"\""},{"type":"linebreak"},{"type":"text","value":"Process \"VBoxService.exe\""},{"type":"process","process_uid":"00019480-00002860","label":"Show Process"},{"type":"text","value":"was launched with modified environment variables: \"LOCALAPPDATA, TMP, USERDOMAIN, Path, USERPROFILE, TEMP, APPDATA\""},{"type":"linebreak"},{"type":"text","value":"Process \"conhost.exe\""},{"type":"process","process_uid":"00019483-00003628","label":"Show Process"},{"type":"text","value":"was launched with modified environment variables: \"TMP, USERNAME, Path, TEMP\""},{"type":"linebreak"},{"type":"text","value":"Process \"conhost.exe\""},{"type":"process","process_uid":"00019483-00003628","label":"Show Process"},{"type":"text","value":"was launched with missing environment variables: \"ALLUSERSPROFILE, ProgramData, HOMEPATH, PUBLIC, LOGONSERVER, LOCALAPPDATA, USERDOMAIN, COMPUTERNAME, USERPROFILE, ProgramFiles(x86), CommonProgramFiles, ProgramW6432, ProgramFiles, HOMEDRIVE, CommonProgramW6432, CommonProgramFiles(x86), APPDATA\""},{"type":"linebreak"},{"type":"text","value":"Process \"dllhost.exe\""},{"type":"process","process_uid":"00021772-00001640","label":"Show Process"},{"type":"text","value":"was launched with new environment variables: \"ALLUSERSPROFILE=\"C:\\ProgramData\", ProgramData=\"C:\\ProgramData\", HOMEPATH=\"\\Users\\nD0mf6s\", PUBLIC=\"C:\\Users\\%USERNAME%\\\\HAPUBWS-PC\", LOCALAPPDATA=\"C:\\Users\\%USERNAME%\\AppData\\Local\", USERDOMAIN=\"2FR3idP3EE\", COMPUTERNAME=\"2FR3idP3EE\", USERPROFILE=\"C:\\Users\\%USERNAME%\\Program Files (x86)\", CommonProgramFiles=\"C:\\Program Files\\Common Files\", ProgramW6432=\"C:\\Program Files\", ProgramFiles=\"C:\\Program Files\", HOMEDRIVE=\"C:\", CommonProgramW6432=\"C:\\Program Files\\Common Files\", CommonProgramFiles(x86)=\"C:\\Program Files (x86)\\Common Files\", APPDATA=\"C:\\Users\\%USERNAME%\\AppData\\Roaming\"\""},{"type":"linebreak"},{"type":"text","value":"Process \"dllhost.exe\""},{"type":"process","process_uid":"00021772-00001640","label":"Show Process"},{"type":"text","value":"was launched with modified environment variables: \"TMP, USERNAME, Path, TEMP\""},{"type":"linebreak"},{"type":"text","value":"Process \"dllhost.exe\""},{"type":"process","process_uid":"00022158-00004584","label":"Show Process"},{"type":"text","value":"was launched with modified environment variables: \"LOCALAPPDATA, TMP, USERDOMAIN, Path, USERPROFILE, TEMP, APPDATA\""},{"type":"linebreak"},{"type":"text","value":"Process \"dllhost.exe\""},{"type":"process","process_uid":"00022158-00004584","label":"Show Process"},{"type":"text","value":"was launched with missing environment variables: \"LOGONSERVER, HOMEPATH, HOMEDRIVE\""},{"type":"linebreak"},{"type":"text","value":"Process \"VBoxService.exe\""},{"type":"process","process_uid":"00022187-00002572","label":"Show Process"},{"type":"text","value":"was launched with new environment variables: \"LOGONSERVER=\"\\\\HAPUBWS-PC\", HOMEPATH=\"\\Users\\nD0mf6s\", HOMEDRIVE=\"C:\"\""},{"type":"linebreak"},{"type":"text","value":"Process \"VBoxService.exe\""},{"type":"process","process_uid":"00022187-00002572","label":"Show Process"},{"type":"text","value":"was launched with modified environment variables: \"LOCALAPPDATA, TMP, USERDOMAIN, Path, USERPROFILE, TEMP, APPDATA\""},{"type":"linebreak"},{"type":"text","value":"Process \"conhost.exe\""},{"type":"process","process_uid":"00022190-00002580","label":"Show Process"},{"type":"text","value":"was launched with modified environment variables: \"TMP, USERNAME, Path, TEMP\""},{"type":"linebreak"},{"type":"text","value":"Process \"conhost.exe\""},{"type":"process","process_uid":"00022190-00002580","label":"Show Process"},{"type":"text","value":"was launched with missing environment variables: \"ALLUSERSPROFILE, ProgramData, HOMEPATH, PUBLIC, LOGONSERVER, LOCALAPPDATA, USERDOMAIN, COMPUTERNAME, USERPROFILE, ProgramFiles(x86), CommonProgramFiles, ProgramW6432, ProgramFiles, HOMEDRIVE, CommonProgramW6432, CommonProgramFiles(x86), APPDATA\""},{"type":"linebreak"},{"type":"text","value":"Process \"dllhost.exe\""},{"type":"process","process_uid":"00024206-00003764","label":"Show Process"},{"type":"text","value":"was launched with new environment variables: \"ALLUSERSPROFILE=\"C:\\ProgramData\", LOCALAPPDATA=\"C:\\Windows\\system32\\config\\systemprofile\\AppData\\Local\", ProgramData=\"C:\\ProgramData\", USERDOMAIN=\"2FR3idP3E\", COMPUTERNAME=\"2FR3idP3EE\", PUBLIC=\"C:\\Users\\%USERNAME%\\Windows\\system32\\config\\systemprofile\", ProgramFiles(x86)=\"C:\\Program Files (x86)\", CommonProgramFiles=\"C:\\Program Files\\Common Files\", ProgramW6432=\"C:\\Program Files\", ProgramFiles=\"C:\\Program Files\", CommonProgramW6432=\"C:\\Program Files\\Common Files\", CommonProgramFiles(x86)=\"C:\\Program Files (x86)\\Common Files\", APPDATA=\"C:\\Windows\\system32\\config\\systemprofile\\AppData\\Roaming\"\""},{"type":"linebreak"},{"type":"text","value":"Process \"dllhost.exe\""},{"type":"process","process_uid":"00024206-00003764","label":"Show Process"},{"type":"text","value":"was launched with modified environment variables: \"USERNAME\""},{"type":"linebreak"},{"type":"text","value":"Process \"VBoxService.exe\""},{"type":"process","process_uid":"00024233-00003952","label":"Show Process"},{"type":"text","value":"was launched with new environment variables: \"LOGONSERVER=\"\\\\HAPUBWS-PC\", HOMEPATH=\"\\Users\\nD0mf6s\", HOMEDRIVE=\"C:\"\""},{"type":"linebreak"},{"type":"text","value":"Process \"VBoxService.exe\""},{"type":"process","process_uid":"00024233-00003952","label":"Show Process"},{"type":"text","value":"was launched with modified environment variables: \"LOCALAPPDATA, TMP, USERDOMAIN, Path, USERPROFILE, TEMP, APPDATA\""},{"type":"linebreak"},{"type":"text","value":"Process \"conhost.exe\""},{"type":"process","process_uid":"00024236-00001672","label":"Show Process"},{"type":"text","value":"was launched with modified environment variables: \"TMP, USERNAME, Path, TEMP\""},{"type":"linebreak"},{"type":"text","value":"Process \"conhost.exe\""},{"type":"process","process_uid":"00024236-00001672","label":"Show Process"},{"type":"text","value":"was launched with missing environment variables: \"ALLUSERSPROFILE, ProgramData, HOMEPATH, PUBLIC, LOGONSERVER, LOCALAPPDATA, USERDOMAIN, COMPUTERNAME, USERPROFILE, ProgramFiles(x86), CommonProgramFiles, ProgramW6432, ProgramFiles, HOMEDRIVE, CommonProgramW6432, CommonProgramFiles(x86), APPDATA\""},{"type":"linebreak"},{"type":"text","value":"Process \"dllhost.exe\""},{"type":"process","process_uid":"00025484-00004872","label":"Show Process"},{"type":"text","value":"was launched with new environment variables: \"ALLUSERSPROFILE=\"C:\\ProgramData\", ProgramData=\"C:\\ProgramData\", HOMEPATH=\"\\Users\\nD0mf6s\", PUBLIC=\"C:\\Users\\%USERNAME%\\\\HAPUBWS-PC\", LOCALAPPDATA=\"C:\\Users\\%USERNAME%\\AppData\\Local\", USERDOMAIN=\"2FR3idP3EE\", COMPUTERNAME=\"2FR3idP3EE\", USERPROFILE=\"C:\\Users\\%USERNAME%\\Program Files (x86)\", CommonProgramFiles=\"C:\\Program Files\\Common Files\", ProgramW6432=\"C:\\Program Files\", ProgramFiles=\"C:\\Program Files\", HOMEDRIVE=\"C:\", CommonProgramW6432=\"C:\\Program Files\\Common Files\", CommonProgramFiles(x86)=\"C:\\Program Files (x86)\\Common Files\", APPDATA=\"C:\\Users\\%USERNAME%\\AppData\\Roaming\"\""},{"type":"linebreak"},{"type":"text","value":"Process \"dllhost.exe\""},{"type":"process","process_uid":"00025484-00004872","label":"Show Process"},{"type":"text","value":"was launched with modified environment variables: \"TMP, USERNAME, Path, TEMP\""}],"origin":"Monitored Target","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"General","identifier":"target-25","type":9,"relevance":3,"name":"Spawns new processes","description":"$2f","description_v2":["Spawned process \"dllhost.exe\" with commandline \"/Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}\" (UID: 00017293-00004072)","Spawned process \"Censitrac.exe\" with commandline \"/i\" (UID: 00017318-00004372)","Spawned process \"VBoxService.exe\" with commandline \"guestsession --session-id=2 --session-proto=2 --user %OSUSER%\" (UID: 00017401-00004600)","Spawned process \"conhost.exe\" with commandline \"\"1326367788-74642697812112153561280963122988602996-2143904698-584606740-1730333015\"\" (UID: 00017407-00002500)","Spawned process \"cacls.exe\" with commandline \"cacls \"%PROGRAMFILES%\\(x86)\\Censitrac\" /T /E /C /p \"Domain\\Domain Users\":F\" (UID: 00017860-00003940)","Spawned process \"conhost.exe\" with commandline \"\"-876518106564522501-17229483521280457337-190447950-4540262397756535531975067373\"\" (UID: 00017873-00004020)","Spawned process \"cacls.exe\" with commandline \"cacls \"%PROGRAMFILES%\\(x86)\\Censitrac\" /T /E /C /p \"BUILTIN\\Users\":F\" (UID: 00017900-00003632)","Spawned process \"conhost.exe\" with commandline \"\"10650578335717743631451838221349842119929459374-561578266-396264015-794880881\"\" (UID: 00017909-00003268)","Spawned process \"regsvr32.exe\" with commandline \"regsvr32 -s -c \"%PROGRAMFILES%\\(x86)\\Censitrac\\WBCustomizer.dll\"\" (UID: 00017949-00004764)","Spawned process \"regsvr32.exe\" with commandline \"regsvr32 -s -c \"%WINDIR%\\system32\\msflxgrd.ocx\"\" (UID: 00018008-00000728)","Spawned process \"regsvr32.exe\" with commandline \"regsvr32 -s -c \"%WINDIR%\\system32\\mscomm32.ocx\"\" (UID: 00018083-00000436)","Spawned process \"dllhost.exe\" with commandline \"/Processid:{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}\" (UID: 00018201-00003172)","Spawned process \"dllhost.exe\" with commandline \"/Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}\" (UID: 00019450-00004428)","Spawned process \"VBoxService.exe\" with commandline \"guestsession --session-id=2 --session-proto=2 --user %OSUSER%\" (UID: 00019480-00002860)","Spawned process \"conhost.exe\" with commandline \"\"-1051413858-1364305440-535621194-141297315920313246441720585698-772470915-670479306\"\" (UID: 00019483-00003628)","Spawned process \"dllhost.exe\" with commandline \"/Processid:{F9717507-6651-4EDB-BFF7-AE615179BCCF}\" (UID: 00021772-00001640)","Spawned process \"dllhost.exe\" with commandline \"/Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}\" (UID: 00022158-00004584)","Spawned process \"VBoxService.exe\" with commandline \"guestsession --session-id=2 --session-proto=2 --user %OSUSER%\" (UID: 00022187-00002572)","Spawned process \"conhost.exe\" with commandline \"\"862242309-340269307416007485-493106922-1066022867185587731-2074273098886839108\"\" (UID: 00022190-00002580)","Spawned process \"dllhost.exe\" with commandline \"/Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}\" (UID: 00024206-00003764)"],"description_v3":[{"type":"text","value":"Spawned process \"dllhost.exe\" with commandline \"/Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}\""},{"type":"process","process_uid":"00017293-00004072","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"Censitrac.exe\" with commandline \"/i\""},{"type":"process","process_uid":"00017318-00004372","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"VBoxService.exe\" with commandline \"guestsession --session-id=2 --session-proto=2 --user %OSUSER%\""},{"type":"process","process_uid":"00017401-00004600","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"conhost.exe\" with commandline \"\"1326367788-74642697812112153561280963122988602996-2143904698-584606740-1730333015\"\""},{"type":"process","process_uid":"00017407-00002500","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"cacls.exe\" with commandline \"cacls \"%PROGRAMFILES%\\(x86)\\Censitrac\" /T /E /C /p \"Domain\\Domain Users\":F\""},{"type":"process","process_uid":"00017860-00003940","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"conhost.exe\" with commandline \"\"-876518106564522501-17229483521280457337-190447950-4540262397756535531975067373\"\""},{"type":"process","process_uid":"00017873-00004020","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"cacls.exe\" with commandline \"cacls \"%PROGRAMFILES%\\(x86)\\Censitrac\" /T /E /C /p \"BUILTIN\\Users\":F\""},{"type":"process","process_uid":"00017900-00003632","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"conhost.exe\" with commandline \"\"10650578335717743631451838221349842119929459374-561578266-396264015-794880881\"\""},{"type":"process","process_uid":"00017909-00003268","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"regsvr32.exe\" with commandline \"regsvr32 -s -c \"%PROGRAMFILES%\\(x86)\\Censitrac\\WBCustomizer.dll\"\""},{"type":"process","process_uid":"00017949-00004764","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"regsvr32.exe\" with commandline \"regsvr32 -s -c \"%WINDIR%\\system32\\msflxgrd.ocx\"\""},{"type":"process","process_uid":"00018008-00000728","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"regsvr32.exe\" with commandline \"regsvr32 -s -c \"%WINDIR%\\system32\\mscomm32.ocx\"\""},{"type":"process","process_uid":"00018083-00000436","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"dllhost.exe\" with commandline \"/Processid:{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}\""},{"type":"process","process_uid":"00018201-00003172","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"dllhost.exe\" with commandline \"/Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}\""},{"type":"process","process_uid":"00019450-00004428","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"VBoxService.exe\" with commandline \"guestsession --session-id=2 --session-proto=2 --user %OSUSER%\""},{"type":"process","process_uid":"00019480-00002860","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"conhost.exe\" with commandline \"\"-1051413858-1364305440-535621194-141297315920313246441720585698-772470915-670479306\"\""},{"type":"process","process_uid":"00019483-00003628","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"dllhost.exe\" with commandline \"/Processid:{F9717507-6651-4EDB-BFF7-AE615179BCCF}\""},{"type":"process","process_uid":"00021772-00001640","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"dllhost.exe\" with commandline \"/Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}\""},{"type":"process","process_uid":"00022158-00004584","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"VBoxService.exe\" with commandline \"guestsession --session-id=2 --session-proto=2 --user %OSUSER%\""},{"type":"process","process_uid":"00022187-00002572","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"conhost.exe\" with commandline \"\"862242309-340269307416007485-493106922-1066022867185587731-2074273098886839108\"\""},{"type":"process","process_uid":"00022190-00002580","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"dllhost.exe\" with commandline \"/Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}\""},{"type":"process","process_uid":"00024206-00003764","label":"Show Process"}],"origin":"Monitored Target","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Installation/Persistance","identifier":"api-16","type":6,"relevance":1,"name":"Connects to LPC ports","description":"\"conhost.exe\" connecting to \"\\ThemeApiPort\"\n \"dllhost.exe\" connecting to \"\\ThemeApiPort\"","description_v2":["\"conhost.exe\" connecting to \"\\ThemeApiPort\"","\"dllhost.exe\" connecting to \"\\ThemeApiPort\""],"description_v3":[{"type":"text","value":"\"conhost.exe\" connecting to \"\\ThemeApiPort\""},{"type":"linebreak"},{"type":"text","value":"\"dllhost.exe\" connecting to \"\\ThemeApiPort\""}],"origin":"API Call","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Installation/Persistance","identifier":"binary-0","type":8,"relevance":3,"name":"Dropped files","description":"\"Censitrac.lnk\" has type \"MS Windows shortcut Item id list present Points to a file or directory Has Description string Has Relative path Archive ctime=Wed Apr 4 16:00:47 2018 mtime=Wed Apr 4 16:00:47 2018 atime=Wed Apr 4 16:01:05 2018 length=1163264 window=hideshowminimized\"\n \"Censitrac.exe\" has type \"PE32 executable (GUI) Intel 80386 for MS Windows\"\n \"WBCustomizer.dll\" has type \"PE32 executable (DLL) (GUI) Intel 80386 for MS Windows\"\n \"Censitrac.bmp\" has type \"PC bitmap Windows 3.x format 264 x 75 x 1\"\n \"mscomm32.ocx\" has type \"PE32 executable (DLL) (GUI) Intel 80386 (stripped to external PDB) for MS Windows\"\n \"Censitrac.cab\" has type \"Microsoft Cabinet archive data 220442 bytes 5 files\"\n \"msflxgrd.ocx\" has type \"PE32 executable (DLL) (GUI) Intel 80386 (stripped to external PDB) for MS Windows\"\n \"Install.log\" has type \"ASCII text with CRLF line terminators\"","description_v2":["\"Censitrac.lnk\" has type \"MS Windows shortcut Item id list present Points to a file or directory Has Description string Has Relative path Archive ctime=Wed Apr 4 16:00:47 2018 mtime=Wed Apr 4 16:00:47 2018 atime=Wed Apr 4 16:01:05 2018 length=1163264 window=hideshowminimized\"","\"Censitrac.exe\" has type \"PE32 executable (GUI) Intel 80386 for MS Windows\"","\"WBCustomizer.dll\" has type \"PE32 executable (DLL) (GUI) Intel 80386 for MS Windows\"","\"Censitrac.bmp\" has type \"PC bitmap Windows 3.x format 264 x 75 x 1\"","\"mscomm32.ocx\" has type \"PE32 executable (DLL) (GUI) Intel 80386 (stripped to external PDB) for MS Windows\"","\"Censitrac.cab\" has type \"Microsoft Cabinet archive data 220442 bytes 5 files\"","\"msflxgrd.ocx\" has type \"PE32 executable (DLL) (GUI) Intel 80386 (stripped to external PDB) for MS Windows\"","\"Install.log\" has type \"ASCII text with CRLF line terminators\""],"description_v3":[{"type":"text","value":"\"Censitrac.lnk\" has type \"MS Windows shortcut Item id list present Points to a file or directory Has Description string Has Relative path Archive ctime=Wed Apr 4 16:00:47 2018 mtime=Wed Apr 4 16:00:47 2018 atime=Wed Apr 4 16:01:05 2018 length=1163264 window=hideshowminimized\""},{"type":"linebreak"},{"type":"text","value":"\"Censitrac.exe\" has type \"PE32 executable (GUI) Intel 80386 for MS Windows\""},{"type":"linebreak"},{"type":"text","value":"\"WBCustomizer.dll\" has type \"PE32 executable (DLL) (GUI) Intel 80386 for MS Windows\""},{"type":"linebreak"},{"type":"text","value":"\"Censitrac.bmp\" has type \"PC bitmap Windows 3.x format 264 x 75 x 1\""},{"type":"linebreak"},{"type":"text","value":"\"mscomm32.ocx\" has type \"PE32 executable (DLL) (GUI) Intel 80386 (stripped to external PDB) for MS Windows\""},{"type":"linebreak"},{"type":"text","value":"\"Censitrac.cab\" has type \"Microsoft Cabinet archive data 220442 bytes 5 files\""},{"type":"linebreak"},{"type":"text","value":"\"msflxgrd.ocx\" has type \"PE32 executable (DLL) (GUI) Intel 80386 (stripped to external PDB) for MS Windows\""},{"type":"linebreak"},{"type":"text","value":"\"Install.log\" has type \"ASCII text with CRLF line terminators\""}],"origin":"Binary File","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Installation/Persistance","identifier":"api-12","type":6,"relevance":4,"name":"Monitors specific registry key for changes","description":"\"regsvr32.exe\" monitors \"\\REGISTRY\\MACHINE\\SYSTEM\\ControlSet001\\Control\\NetworkProvider\\HwOrder\" (Filter: 4; Subtree: 1367808)\n \"regsvr32.exe\" monitors \"\\REGISTRY\\MACHINE\\SYSTEM\\ControlSet001\\Control\\NetworkProvider\\HwOrder\" (Filter: 4; Subtree: 2612992)\n \"regsvr32.exe\" monitors \"\\REGISTRY\\MACHINE\\SYSTEM\\ControlSet001\\Control\\NetworkProvider\\HwOrder\" (Filter: 4; Subtree: 712960)\n \"dllhost.exe\" monitors \"\\REGISTRY\\MACHINE\\SYSTEM\\ControlSet001\\services\\WinSock2\\Parameters\\Protocol_Catalog9\" (Filter: 1; Subtree: 38395904)\n \"dllhost.exe\" monitors \"\\REGISTRY\\MACHINE\\SYSTEM\\ControlSet001\\services\\WinSock2\\Parameters\\NameSpace_Catalog5\" (Filter: 1; Subtree: 4265293312)\n \"dllhost.exe\" monitors \"\\REGISTRY\\MACHINE\\SYSTEM\\ControlSet001\\services\\WinSock2\\Parameters\\Protocol_Catalog9\" (Filter: 1; Subtree: 30663168)","description_v2":["\"regsvr32.exe\" monitors \"\\REGISTRY\\MACHINE\\SYSTEM\\ControlSet001\\Control\\NetworkProvider\\HwOrder\" (Filter: 4; Subtree: 1367808)","\"regsvr32.exe\" monitors \"\\REGISTRY\\MACHINE\\SYSTEM\\ControlSet001\\Control\\NetworkProvider\\HwOrder\" (Filter: 4; Subtree: 2612992)","\"regsvr32.exe\" monitors \"\\REGISTRY\\MACHINE\\SYSTEM\\ControlSet001\\Control\\NetworkProvider\\HwOrder\" (Filter: 4; Subtree: 712960)","\"dllhost.exe\" monitors \"\\REGISTRY\\MACHINE\\SYSTEM\\ControlSet001\\services\\WinSock2\\Parameters\\Protocol_Catalog9\" (Filter: 1; Subtree: 38395904)","\"dllhost.exe\" monitors \"\\REGISTRY\\MACHINE\\SYSTEM\\ControlSet001\\services\\WinSock2\\Parameters\\NameSpace_Catalog5\" (Filter: 1; Subtree: 4265293312)","\"dllhost.exe\" monitors \"\\REGISTRY\\MACHINE\\SYSTEM\\ControlSet001\\services\\WinSock2\\Parameters\\Protocol_Catalog9\" (Filter: 1; Subtree: 30663168)"],"description_v3":[{"type":"text","value":"\"regsvr32.exe\" monitors \"\\REGISTRY\\MACHINE\\SYSTEM\\ControlSet001\\Control\\NetworkProvider\\HwOrder\" (Filter: 4; Subtree: 1367808)"},{"type":"linebreak"},{"type":"text","value":"\"regsvr32.exe\" monitors \"\\REGISTRY\\MACHINE\\SYSTEM\\ControlSet001\\Control\\NetworkProvider\\HwOrder\" (Filter: 4; Subtree: 2612992)"},{"type":"linebreak"},{"type":"text","value":"\"regsvr32.exe\" monitors \"\\REGISTRY\\MACHINE\\SYSTEM\\ControlSet001\\Control\\NetworkProvider\\HwOrder\" (Filter: 4; Subtree: 712960)"},{"type":"linebreak"},{"type":"text","value":"\"dllhost.exe\" monitors \"\\REGISTRY\\MACHINE\\SYSTEM\\ControlSet001\\services\\WinSock2\\Parameters\\Protocol_Catalog9\" (Filter: 1; Subtree: 38395904)"},{"type":"linebreak"},{"type":"text","value":"\"dllhost.exe\" monitors \"\\REGISTRY\\MACHINE\\SYSTEM\\ControlSet001\\services\\WinSock2\\Parameters\\NameSpace_Catalog5\" (Filter: 1; Subtree: 4265293312)"},{"type":"linebreak"},{"type":"text","value":"\"dllhost.exe\" monitors \"\\REGISTRY\\MACHINE\\SYSTEM\\ControlSet001\\services\\WinSock2\\Parameters\\Protocol_Catalog9\" (Filter: 1; Subtree: 30663168)"}],"origin":"API Call","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Installation/Persistance","identifier":"api-55","type":6,"relevance":7,"name":"Touches files in the Windows directory","description":"$30","description_v2":["\"\" touched file \"C:\\Windows\\Globalization\\Sorting\\SortDefault.nls\"","\"\" touched file \"C:\\Windows\\SysWOW64\\rsaenh.dll\"","\"\" touched file \"C:\\Windows\\SysWOW64\\en-US\\user32.dll.mui\"","\"\" touched file \"C:\\Windows\\Fonts\\StaticCache.dat\"","\"\" touched file \"C:\\Windows\\SysWOW64\\tzres.dll\"","\"\" touched file \"C:\\Windows\\AppPatch\\sysmain.sdb\"","\"dllhost.exe\" touched file \"C:\\Windows\\System32\\rsaenh.dll\"","\"dllhost.exe\" touched file \"C:\\Windows\\Globalization\\Sorting\\SortDefault.nls\"","\"Censitrac.exe\" touched file \"C:\\Windows\\Globalization\\Sorting\\SortDefault.nls\"","\"Censitrac.exe\" touched file \"C:\\Windows\\SysWOW64\\rsaenh.dll\"","\"Censitrac.exe\" touched file \"C:\\Windows\\SysWOW64\\en-US\\user32.dll.mui\"","\"Censitrac.exe\" touched file \"C:\\Windows\\Fonts\\StaticCache.dat\"","\"Censitrac.exe\" touched file \"C:\\Windows\\SysWOW64\\en-US\\msctf.dll.mui\"","\"Censitrac.exe\" touched file \"C:\\Windows\\SysWOW64\\tzres.dll\"","\"Censitrac.exe\" touched file \"C:\\Windows\\AppPatch\\sysmain.sdb\"","\"Censitrac.exe\" touched file \"C:\\Windows\\SysWOW64\\cacls.exe\""],"description_v3":[{"type":"text","value":"\"\" touched file \"%WINDIR%\\Globalization\\Sorting\\SortDefault.nls\""},{"type":"linebreak"},{"type":"text","value":"\"\" touched file \"C:\\Windows\\SysWOW64\\rsaenh.dll\""},{"type":"linebreak"},{"type":"text","value":"\"\" touched file \"C:\\Windows\\SysWOW64\\en-US\\user32.dll.mui\""},{"type":"linebreak"},{"type":"text","value":"\"\" touched file \"C:\\Windows\\Fonts\\StaticCache.dat\""},{"type":"linebreak"},{"type":"text","value":"\"\" touched file \"C:\\Windows\\SysWOW64\\tzres.dll\""},{"type":"linebreak"},{"type":"text","value":"\"\" touched file \"C:\\Windows\\AppPatch\\sysmain.sdb\""},{"type":"linebreak"},{"type":"text","value":"\"dllhost.exe\" touched file \"C:\\Windows\\System32\\rsaenh.dll\""},{"type":"linebreak"},{"type":"text","value":"\"dllhost.exe\" touched file \"C:\\Windows\\Globalization\\Sorting\\SortDefault.nls\""},{"type":"linebreak"},{"type":"text","value":"\"Censitrac.exe\" touched file \"C:\\Windows\\Globalization\\Sorting\\SortDefault.nls\""},{"type":"linebreak"},{"type":"text","value":"\"Censitrac.exe\" touched file \"C:\\Windows\\SysWOW64\\rsaenh.dll\""},{"type":"linebreak"},{"type":"text","value":"\"Censitrac.exe\" touched file \"C:\\Windows\\SysWOW64\\en-US\\user32.dll.mui\""},{"type":"linebreak"},{"type":"text","value":"\"Censitrac.exe\" touched file \"C:\\Windows\\Fonts\\StaticCache.dat\""},{"type":"linebreak"},{"type":"text","value":"\"Censitrac.exe\" touched file \"C:\\Windows\\SysWOW64\\en-US\\msctf.dll.mui\""},{"type":"linebreak"},{"type":"text","value":"\"Censitrac.exe\" touched file \"C:\\Windows\\SysWOW64\\tzres.dll\""},{"type":"linebreak"},{"type":"text","value":"\"Censitrac.exe\" touched file \"C:\\Windows\\AppPatch\\sysmain.sdb\""},{"type":"linebreak"},{"type":"text","value":"\"Censitrac.exe\" touched file \"C:\\Windows\\SysWOW64\\cacls.exe\""}],"origin":"API Call","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Network Related","identifier":"string-3","type":2,"relevance":10,"name":"Found potential URL in binary/memory","description":"Heuristic match: \"HeaderHelpControl.value=getActiveFrame().id\"\n Pattern match: \"http://www.w3.org/TR/REC-html40\"\n Pattern match: \"http://ebhbuffer\"\n Heuristic match: \"w6cczp.com\"","description_v2":["Heuristic match: \"HeaderHelpControl.value=getActiveFrame().id\"","Pattern match: \"http://www.w3.org/TR/REC-html40\"","Pattern match: \"http://ebhbuffer\"","Heuristic match: \"w6cczp.com\""],"description_v3":[{"type":"text","value":"Heuristic match: \"HeaderHelpControl.value=getActiveFrame().id\""},{"type":"linebreak"},{"type":"text","value":"Pattern match: \"http://www.w3.org/TR/REC-html40\""},{"type":"linebreak"},{"type":"text","value":"Pattern match: \"http://ebhbuffer\""},{"type":"linebreak"},{"type":"text","value":"Heuristic match: \"w6cczp.com\""}],"origin":"File/Memory","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"System Security","identifier":"api-37","type":6,"relevance":10,"name":"Opens the Kernel Security Device Driver (KsecDD) of Windows","description":"\"\" opened \"\\Device\\KsecDD\"\n \"dllhost.exe\" opened \"\\Device\\KsecDD\"\n \"Censitrac.exe\" opened \"\\Device\\KsecDD\"\n \"regsvr32.exe\" opened \"\\Device\\KsecDD\"","description_v2":["\"\" opened \"\\Device\\KsecDD\"","\"dllhost.exe\" opened \"\\Device\\KsecDD\"","\"Censitrac.exe\" opened \"\\Device\\KsecDD\"","\"regsvr32.exe\" opened \"\\Device\\KsecDD\""],"description_v3":[{"type":"text","value":"\"\" opened \"\\Device\\KsecDD\""},{"type":"linebreak"},{"type":"text","value":"\"dllhost.exe\" opened \"\\Device\\KsecDD\""},{"type":"linebreak"},{"type":"text","value":"\"Censitrac.exe\" opened \"\\Device\\KsecDD\""},{"type":"linebreak"},{"type":"text","value":"\"regsvr32.exe\" opened \"\\Device\\KsecDD\""}],"origin":"API Call","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":1,"threat_level_human":"suspicious","category":"Anti-Detection/Stealthyness","identifier":"api-10","type":6,"relevance":6,"name":"Queries kernel debugger information","description":"\"\" at 00016692-00004076-00000033-62021034\n \"dllhost.exe\" at 00017293-00004072-00000033-62170116\n \"Censitrac.exe\" at 00017318-00004372-00000033-63932387\n \"dllhost.exe\" at 00018201-00003172-00000033-65406688\n \"dllhost.exe\" at 00019450-00004428-00000033-70155152\n \"dllhost.exe\" at 00021772-00001640-00000033-78956788\n \"dllhost.exe\" at 00022158-00004584-00000033-80409337\n \"dllhost.exe\" at 00024206-00003764-00000033-88300887\n \"dllhost.exe\" at 00025484-00004872-00000033-93223116\n \"dllhost.exe\" at 00026248-00002056-00000033-96156303\n \"dllhost.exe\" at 00028296-00004104-00000033-104065348","description_v2":["\"\" at 00016692-00004076-00000033-62021034","\"dllhost.exe\" at 00017293-00004072-00000033-62170116","\"Censitrac.exe\" at 00017318-00004372-00000033-63932387","\"dllhost.exe\" at 00018201-00003172-00000033-65406688","\"dllhost.exe\" at 00019450-00004428-00000033-70155152","\"dllhost.exe\" at 00021772-00001640-00000033-78956788","\"dllhost.exe\" at 00022158-00004584-00000033-80409337","\"dllhost.exe\" at 00024206-00003764-00000033-88300887","\"dllhost.exe\" at 00025484-00004872-00000033-93223116","\"dllhost.exe\" at 00026248-00002056-00000033-96156303","\"dllhost.exe\" at 00028296-00004104-00000033-104065348"],"description_v3":[{"type":"text","value":"\"\" at 00016692-00004076-00000033-62021034"},{"type":"linebreak"},{"type":"text","value":"\"dllhost.exe\" at 00017293-00004072-00000033-62170116"},{"type":"linebreak"},{"type":"text","value":"\"Censitrac.exe\" at 00017318-00004372-00000033-63932387"},{"type":"linebreak"},{"type":"text","value":"\"dllhost.exe\" at 00018201-00003172-00000033-65406688"},{"type":"linebreak"},{"type":"text","value":"\"dllhost.exe\" at 00019450-00004428-00000033-70155152"},{"type":"linebreak"},{"type":"text","value":"\"dllhost.exe\" at 00021772-00001640-00000033-78956788"},{"type":"linebreak"},{"type":"text","value":"\"dllhost.exe\" at 00022158-00004584-00000033-80409337"},{"type":"linebreak"},{"type":"text","value":"\"dllhost.exe\" at 00024206-00003764-00000033-88300887"},{"type":"linebreak"},{"type":"text","value":"\"dllhost.exe\" at 00025484-00004872-00000033-93223116"},{"type":"linebreak"},{"type":"text","value":"\"dllhost.exe\" at 00026248-00002056-00000033-96156303"},{"type":"linebreak"},{"type":"text","value":"\"dllhost.exe\" at 00028296-00004104-00000033-104065348"}],"origin":"API Call","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":1,"threat_level_human":"suspicious","category":"Anti-Reverse Engineering","identifier":"static-6","type":0,"relevance":10,"name":"PE file has unusual entropy sections","description":".rsrc\n .rsrc with unusual entropies 7.89026509472\n 7.89026509472","description_v2":[".rsrc",".rsrc with unusual entropies 7.89026509472","7.89026509472"],"description_v3":[{"type":"text","value":".rsrc"},{"type":"linebreak"},{"type":"text","value":".rsrc with unusual entropies 7.89026509472"},{"type":"linebreak"},{"type":"text","value":"7.89026509472"}],"origin":"Static Parser","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":1,"threat_level_human":"suspicious","category":"Environment Awareness","identifier":"stream-13","type":1,"relevance":10,"name":"Contains ability to query CPU information","description":"cpuid at 00017318-00004372-10393-37-004D90A0","description_v2":["cpuid at 00017318-00004372-10393-37-004D90A0"],"description_v3":[{"type":"text","value":"cpuid"},{"type":"stream","stream_uid":"00017318-00004372-10393-37-004D90A0","modal_link":"/bff/report/5ac4ee317ca3e174051348f3/processes/00016692-00004076/streams/0/00017318-00004372-10393-37-004D90A0?childUid=00017318-00004372","process":{"name":"Censitrac.exe","process_uid":"00017318-00004372","pid":"4372"}}],"origin":"Hybrid Analysis Technology","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":{"modal_link":"/bff/report/5ac4ee317ca3e174051348f3/processes/00016692-00004076/streams/0/00017318-00004372-10393-37-004D90A0?childUid=00017318-00004372","name":"Censitrac.exe","pid":4372}},{"threat_level":1,"threat_level_human":"suspicious","category":"Environment Awareness","identifier":"registry-1","type":3,"relevance":10,"name":"Reads the cryptographic machine GUID","description":"\"\" (Path: \"HKLM\\SOFTWARE\\MICROSOFT\\CRYPTOGRAPHY\"; Key: \"MACHINEGUID\")\n \"dllhost.exe\" (Path: \"HKLM\\SOFTWARE\\MICROSOFT\\CRYPTOGRAPHY\"; Key: \"MACHINEGUID\")\n \"Censitrac.exe\" (Path: \"HKLM\\SOFTWARE\\MICROSOFT\\CRYPTOGRAPHY\"; Key: \"MACHINEGUID\")","description_v2":["\"\" (Path: \"HKLM\\SOFTWARE\\MICROSOFT\\CRYPTOGRAPHY\"; Key: \"MACHINEGUID\")","\"dllhost.exe\" (Path: \"HKLM\\SOFTWARE\\MICROSOFT\\CRYPTOGRAPHY\"; Key: \"MACHINEGUID\")","\"Censitrac.exe\" (Path: \"HKLM\\SOFTWARE\\MICROSOFT\\CRYPTOGRAPHY\"; Key: \"MACHINEGUID\")"],"description_v3":[{"type":"text","value":"\"\" (Path: \"HKLM\\SOFTWARE\\MICROSOFT\\CRYPTOGRAPHY\"; Key: \"MACHINEGUID\")"},{"type":"linebreak"},{"type":"text","value":"\"dllhost.exe\" (Path: \"HKLM\\SOFTWARE\\MICROSOFT\\CRYPTOGRAPHY\"; Key: \"MACHINEGUID\")"},{"type":"linebreak"},{"type":"text","value":"\"Censitrac.exe\" (Path: \"HKLM\\SOFTWARE\\MICROSOFT\\CRYPTOGRAPHY\"; Key: \"MACHINEGUID\")"}],"origin":"Registry Access","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":1,"threat_level_human":"suspicious","category":"Installation/Persistance","identifier":"stream-17","type":1,"relevance":10,"name":"Contains ability to download files from the internet","description":"InternetReadFile@wininet.dll at 00017318-00004372-6687-170-0041DB68\n InternetReadFileExA@wininet.dll at 00017318-00004372-6687-196-0041DBB4","description_v2":["InternetReadFile@wininet.dll at 00017318-00004372-6687-170-0041DB68","InternetReadFileExA@wininet.dll at 00017318-00004372-6687-196-0041DBB4"],"description_v3":[{"type":"text","value":"InternetReadFile@wininet.dll"},{"type":"stream","stream_uid":"00017318-00004372-6687-170-0041DB68","modal_link":"/bff/report/5ac4ee317ca3e174051348f3/processes/00016692-00004076/streams/0/00017318-00004372-6687-170-0041DB68?childUid=00017318-00004372","process":{"name":"Censitrac.exe","process_uid":"00017318-00004372","pid":"4372"}},{"type":"linebreak"},{"type":"text","value":"InternetReadFileExA@wininet.dll"},{"type":"stream","stream_uid":"00017318-00004372-6687-196-0041DBB4","modal_link":"/bff/report/5ac4ee317ca3e174051348f3/processes/00016692-00004076/streams/0/00017318-00004372-6687-196-0041DBB4?childUid=00017318-00004372","process":{"name":"Censitrac.exe","process_uid":"00017318-00004372","pid":"4372"}}],"origin":"Hybrid Analysis Technology","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":{"modal_link":"/bff/report/5ac4ee317ca3e174051348f3/processes/00016692-00004076/streams/0/00017318-00004372-6687-170-0041DB68?childUid=00017318-00004372","name":"Censitrac.exe","pid":4372}},{"threat_level":1,"threat_level_human":"suspicious","category":"Installation/Persistance","identifier":"api-2","type":6,"relevance":8,"name":"Creates new processes","description":"\"\" is creating a new process (Name: \"%PROGRAMFILES%\\(x86)\\Censitrac\\Censitrac.exe\", Handle: 236), \"Censitrac.exe\" is creating a new process (Name: \"%PROGRAMFILES%\\(x86)\\Censitrac\\Censitrac.cab\", Handle: 284), \"Censitrac.exe\" is creating a new process (Name: \"%WINDIR%\\SysWOW64\\tzres.dll\", Handle: 292), \"Censitrac.exe\" is creating a new process (Name: \"%WINDIR%\\SysWOW64\\regsvr32.exe\"\n Handle: 312)","description_v2":["\"\" is creating a new process (Name: \"%PROGRAMFILES%\\(x86)\\Censitrac\\Censitrac.exe\", Handle: 236), \"Censitrac.exe\" is creating a new process (Name: \"%PROGRAMFILES%\\(x86)\\Censitrac\\Censitrac.cab\", Handle: 284), \"Censitrac.exe\" is creating a new process (Name: \"%WINDIR%\\SysWOW64\\tzres.dll\", Handle: 292), \"Censitrac.exe\" is creating a new process (Name: \"%WINDIR%\\SysWOW64\\regsvr32.exe\"","Handle: 312)"],"description_v3":[{"type":"text","value":"\"\" is creating a new process (Name: \"%PROGRAMFILES%\\(x86)\\Censitrac\\Censitrac.exe\", Handle: 236), \"Censitrac.exe\" is creating a new process (Name: \"%PROGRAMFILES%\\(x86)\\Censitrac\\Censitrac.cab\", Handle: 284), \"Censitrac.exe\" is creating a new process (Name: \"%WINDIR%\\SysWOW64\\tzres.dll\", Handle: 292), \"Censitrac.exe\" is creating a new process (Name: \"%WINDIR%\\SysWOW64\\regsvr32.exe\""},{"type":"linebreak"},{"type":"text","value":"Handle: 312)"}],"origin":"API Call","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":1,"threat_level_human":"suspicious","category":"Installation/Persistance","identifier":"binary-1","type":8,"relevance":10,"name":"Drops executable files","description":"\"Censitrac.exe\" has type \"PE32 executable (GUI) Intel 80386 for MS Windows\"\n \"WBCustomizer.dll\" has type \"PE32 executable (DLL) (GUI) Intel 80386 for MS Windows\"\n \"mscomm32.ocx\" has type \"PE32 executable (DLL) (GUI) Intel 80386 (stripped to external PDB) for MS Windows\"\n \"msflxgrd.ocx\" has type \"PE32 executable (DLL) (GUI) Intel 80386 (stripped to external PDB) for MS Windows\"","description_v2":["\"Censitrac.exe\" has type \"PE32 executable (GUI) Intel 80386 for MS Windows\"","\"WBCustomizer.dll\" has type \"PE32 executable (DLL) (GUI) Intel 80386 for MS Windows\"","\"mscomm32.ocx\" has type \"PE32 executable (DLL) (GUI) Intel 80386 (stripped to external PDB) for MS Windows\"","\"msflxgrd.ocx\" has type \"PE32 executable (DLL) (GUI) Intel 80386 (stripped to external PDB) for MS Windows\""],"description_v3":[{"type":"text","value":"\"Censitrac.exe\" has type \"PE32 executable (GUI) Intel 80386 for MS Windows\""},{"type":"linebreak"},{"type":"text","value":"\"WBCustomizer.dll\" has type \"PE32 executable (DLL) (GUI) Intel 80386 for MS Windows\""},{"type":"linebreak"},{"type":"text","value":"\"mscomm32.ocx\" has type \"PE32 executable (DLL) (GUI) Intel 80386 (stripped to external PDB) for MS Windows\""},{"type":"linebreak"},{"type":"text","value":"\"msflxgrd.ocx\" has type \"PE32 executable (DLL) (GUI) Intel 80386 (stripped to external PDB) for MS Windows\""}],"origin":"Binary File","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":1,"threat_level_human":"suspicious","category":"Network Related","identifier":"network-6","type":7,"relevance":5,"name":"Contacts Random Domain Names","description":"\"w6cczp.com\" seems to be random","description_v2":["\"w6cczp.com\" seems to be random"],"description_v3":[{"type":"text","value":"\"w6cczp.com\" seems to be random"}],"origin":"Network Traffic","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":1,"threat_level_human":"suspicious","category":"Pattern Matching","identifier":"stream-17","type":1,"relevance":10,"name":"Contains ability to download files from the internet","description":"InternetReadFile@wininet.dll at 00017318-00004372-6687-170-0041DB68\n InternetReadFileExA@wininet.dll at 00017318-00004372-6687-196-0041DBB4","description_v2":["InternetReadFile@wininet.dll at 00017318-00004372-6687-170-0041DB68","InternetReadFileExA@wininet.dll at 00017318-00004372-6687-196-0041DBB4"],"description_v3":[{"type":"text","value":"InternetReadFile@wininet.dll"},{"type":"stream","stream_uid":"00017318-00004372-6687-170-0041DB68","modal_link":"/bff/report/5ac4ee317ca3e174051348f3/processes/00016692-00004076/streams/0/00017318-00004372-6687-170-0041DB68?childUid=00017318-00004372","process":{"name":"Censitrac.exe","process_uid":"00017318-00004372","pid":"4372"}},{"type":"linebreak"},{"type":"text","value":"InternetReadFileExA@wininet.dll"},{"type":"stream","stream_uid":"00017318-00004372-6687-196-0041DBB4","modal_link":"/bff/report/5ac4ee317ca3e174051348f3/processes/00016692-00004076/streams/0/00017318-00004372-6687-196-0041DBB4?childUid=00017318-00004372","process":{"name":"Censitrac.exe","process_uid":"00017318-00004372","pid":"4372"}}],"origin":"Hybrid Analysis Technology","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":{"modal_link":"/bff/report/5ac4ee317ca3e174051348f3/processes/00016692-00004076/streams/0/00017318-00004372-6687-170-0041DB68?childUid=00017318-00004372","name":"Censitrac.exe","pid":4372}},{"threat_level":1,"threat_level_human":"suspicious","category":"Remote Access Related","identifier":"registry-61","type":3,"relevance":10,"name":"Reads terminal service related keys (often RDP related)","description":"\"\" (Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\TERMINAL SERVER\"; Key: \"TSUSERENABLED\")\n \"Censitrac.exe\" (Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\TERMINAL SERVER\"; Key: \"TSUSERENABLED\")","description_v2":["\"\" (Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\TERMINAL SERVER\"; Key: \"TSUSERENABLED\")","\"Censitrac.exe\" (Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\TERMINAL SERVER\"; Key: \"TSUSERENABLED\")"],"description_v3":[{"type":"text","value":"\"\" (Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\TERMINAL SERVER\"; Key: \"TSUSERENABLED\")"},{"type":"linebreak"},{"type":"text","value":"\"Censitrac.exe\" (Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\TERMINAL SERVER\"; Key: \"TSUSERENABLED\")"}],"origin":"Registry Access","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":1,"threat_level_human":"suspicious","category":"System Destruction","identifier":"api-26","type":6,"relevance":10,"name":"Marks file for deletion","description":"\"C:\\censitrac.exe\" marked \"%TEMP%\\~DF5EB92958D453502D.TMP\" for deletion\n \"%PROGRAMFILES%\\(x86)\\Censitrac\\Censitrac.exe\" marked \"C:\\Program Files (x86)\\Censitrac\\Censitrac.cab\" for deletion","description_v2":["\"C:\\censitrac.exe\" marked \"%TEMP%\\~DF5EB92958D453502D.TMP\" for deletion","\"%PROGRAMFILES%\\(x86)\\Censitrac\\Censitrac.exe\" marked \"C:\\Program Files (x86)\\Censitrac\\Censitrac.cab\" for deletion"],"description_v3":[{"type":"text","value":"\"C:\\censitrac.exe\" marked \"%TEMP%\\~DF5EB92958D453502D.TMP\" for deletion"},{"type":"linebreak"},{"type":"text","value":"\"%PROGRAMFILES%\\(x86)\\Censitrac\\Censitrac.exe\" marked \"%PROGRAMFILES%\\(x86)\\Censitrac\\Censitrac.cab\" for deletion"}],"origin":"API Call","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":1,"threat_level_human":"suspicious","category":"System Destruction","identifier":"api-25","type":6,"relevance":7,"name":"Opens file with deletion access rights","description":"\"\" opened \"%APPDATA%\\Microsoft\\Windows\\Start Menu\\Programs\\Censitrac\" with delete access\n \"Censitrac.exe\" opened \"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Censitrac\" with delete access\n \"Censitrac.exe\" opened \"C:\\Program Files (x86)\\Censitrac\\Censitrac.cab\" with delete access","description_v2":["\"\" opened \"%APPDATA%\\Microsoft\\Windows\\Start Menu\\Programs\\Censitrac\" with delete access","\"Censitrac.exe\" opened \"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Censitrac\" with delete access","\"Censitrac.exe\" opened \"C:\\Program Files (x86)\\Censitrac\\Censitrac.cab\" with delete access"],"description_v3":[{"type":"text","value":"\"\" opened \"%APPDATA%\\Microsoft\\Windows\\Start Menu\\Programs\\Censitrac\" with delete access"},{"type":"linebreak"},{"type":"text","value":"\"Censitrac.exe\" opened \"%ALLUSERSPROFILE%\\Microsoft\\Windows\\Start Menu\\Programs\\Censitrac\" with delete access"},{"type":"linebreak"},{"type":"text","value":"\"Censitrac.exe\" opened \"C:\\Program Files (x86)\\Censitrac\\Censitrac.cab\" with delete access"}],"origin":"API Call","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":1,"threat_level_human":"suspicious","category":"System Security","identifier":"target-12","type":9,"relevance":5,"name":"Modifies the access control lists of files","description":"Process \"cacls.exe\" with commandline \"cacls \"%PROGRAMFILES%\\(x86)\\Censitrac\" /T /E /C /p \"Domain\\Domain Users\":F\" (UID: 00017860-00003940)\n Process \"cacls.exe\" with commandline \"cacls \"%PROGRAMFILES%\\(x86)\\Censitrac\" /T /E /C /p \"BUILTIN\\Users\":F\" (UID: 00017900-00003632)","description_v2":["Process \"cacls.exe\" with commandline \"cacls \"%PROGRAMFILES%\\(x86)\\Censitrac\" /T /E /C /p \"Domain\\Domain Users\":F\" (UID: 00017860-00003940)","Process \"cacls.exe\" with commandline \"cacls \"%PROGRAMFILES%\\(x86)\\Censitrac\" /T /E /C /p \"BUILTIN\\Users\":F\" (UID: 00017900-00003632)"],"description_v3":[{"type":"text","value":"Process \"cacls.exe\" with commandline \"cacls \"%PROGRAMFILES%\\(x86)\\Censitrac\" /T /E /C /p \"Domain\\Domain Users\":F\""},{"type":"process","process_uid":"00017860-00003940","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Process \"cacls.exe\" with commandline \"cacls \"%PROGRAMFILES%\\(x86)\\Censitrac\" /T /E /C /p \"BUILTIN\\Users\":F\""},{"type":"process","process_uid":"00017900-00003632","label":"Show Process"}],"origin":"Monitored Target","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":1,"threat_level_human":"suspicious","category":"Unusual Characteristics","identifier":"static-0","type":0,"relevance":10,"name":"CRC value set in PE header does not match actual value","description":"\"WBCustomizer.dll\" claimed CRC 0 while the actual is CRC 1186781\n \"mscomm32.ocx\" claimed CRC 146501 while the actual is CRC 65557\n \"msflxgrd.ocx\" claimed CRC 282016 while the actual is CRC 146501","description_v2":["\"WBCustomizer.dll\" claimed CRC 0 while the actual is CRC 1186781","\"mscomm32.ocx\" claimed CRC 146501 while the actual is CRC 65557","\"msflxgrd.ocx\" claimed CRC 282016 while the actual is CRC 146501"],"description_v3":[{"type":"text","value":"\"WBCustomizer.dll\" claimed CRC 0 while the actual is CRC 1186781"},{"type":"linebreak"},{"type":"text","value":"\"mscomm32.ocx\" claimed CRC 146501 while the actual is CRC 65557"},{"type":"linebreak"},{"type":"text","value":"\"msflxgrd.ocx\" claimed CRC 282016 while the actual is CRC 146501"}],"origin":"Static Parser","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":1,"threat_level_human":"suspicious","category":"Unusual Characteristics","identifier":"static-1","type":0,"relevance":1,"name":"Imports suspicious APIs","description":"RegDeleteKeyA\n RegCloseKey\n RegDeleteValueA\n RegCreateKeyExA\n RegOpenKeyExA\n RegEnumKeyExA\n GetVersionExA\n GetModuleFileNameA\n LoadLibraryExA\n GetProcAddress\n GetModuleHandleA\n LoadLibraryA\n FindResourceA\n RegOpenKeyA\n LockResource\n CreateThread\n GetFileAttributesA\n WriteFile\n Sleep\n CreateFileA\n GetCommandLineA\n GetStartupInfoA\n TerminateProcess\n VirtualAlloc","description_v2":["RegDeleteKeyA","RegCloseKey","RegDeleteValueA","RegCreateKeyExA","RegOpenKeyExA","RegEnumKeyExA","GetVersionExA","GetModuleFileNameA","LoadLibraryExA","GetProcAddress","GetModuleHandleA","LoadLibraryA","FindResourceA","RegOpenKeyA","LockResource","CreateThread","GetFileAttributesA","WriteFile","Sleep","CreateFileA","GetCommandLineA","GetStartupInfoA","TerminateProcess","VirtualAlloc"],"description_v3":[{"type":"text","value":"RegDeleteKeyA"},{"type":"linebreak"},{"type":"text","value":"RegCloseKey"},{"type":"linebreak"},{"type":"text","value":"RegDeleteValueA"},{"type":"linebreak"},{"type":"text","value":"RegCreateKeyExA"},{"type":"linebreak"},{"type":"text","value":"RegOpenKeyExA"},{"type":"linebreak"},{"type":"text","value":"RegEnumKeyExA"},{"type":"linebreak"},{"type":"text","value":"GetVersionExA"},{"type":"linebreak"},{"type":"text","value":"GetModuleFileNameA"},{"type":"linebreak"},{"type":"text","value":"LoadLibraryExA"},{"type":"linebreak"},{"type":"text","value":"GetProcAddress"},{"type":"linebreak"},{"type":"text","value":"GetModuleHandleA"},{"type":"linebreak"},{"type":"text","value":"LoadLibraryA"},{"type":"linebreak"},{"type":"text","value":"FindResourceA"},{"type":"linebreak"},{"type":"text","value":"RegOpenKeyA"},{"type":"linebreak"},{"type":"text","value":"LockResource"},{"type":"linebreak"},{"type":"text","value":"CreateThread"},{"type":"linebreak"},{"type":"text","value":"GetFileAttributesA"},{"type":"linebreak"},{"type":"text","value":"WriteFile"},{"type":"linebreak"},{"type":"text","value":"Sleep"},{"type":"linebreak"},{"type":"text","value":"CreateFileA"},{"type":"linebreak"},{"type":"text","value":"GetCommandLineA"},{"type":"linebreak"},{"type":"text","value":"GetStartupInfoA"},{"type":"linebreak"},{"type":"text","value":"TerminateProcess"},{"type":"linebreak"},{"type":"text","value":"VirtualAlloc"}],"origin":"Static Parser","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":1,"threat_level_human":"suspicious","category":"Unusual Characteristics","identifier":"hooks-8","type":11,"relevance":10,"name":"Installs hooks/patches the running process","description":"\"\" wrote bytes \"711122027a3b2102ab8b02007f950200fc8c0200729602006cc805001ecd1e027d261e02\" to virtual address \"0x754707E4\" (part of module \"USER32.DLL\")\n \"regsvr32.exe\" wrote bytes \"711122027a3b2102ab8b02007f950200fc8c0200729602006cc805001ecd1e027d261e02\" to virtual address \"0x754707E4\" (part of module \"USER32.DLL\")","description_v2":["\"\" wrote bytes \"711122027a3b2102ab8b02007f950200fc8c0200729602006cc805001ecd1e027d261e02\" to virtual address \"0x754707E4\" (part of module \"USER32.DLL\")","\"regsvr32.exe\" wrote bytes \"711122027a3b2102ab8b02007f950200fc8c0200729602006cc805001ecd1e027d261e02\" to virtual address \"0x754707E4\" (part of module \"USER32.DLL\")"],"description_v3":[{"type":"text","value":"\"\" wrote bytes \"711122027a3b2102ab8b02007f950200fc8c0200729602006cc805001ecd1e027d261e02\" to virtual address \"0x754707E4\" (part of module \"USER32.DLL\")"},{"type":"linebreak"},{"type":"text","value":"\"regsvr32.exe\" wrote bytes \"711122027a3b2102ab8b02007f950200fc8c0200729602006cc805001ecd1e027d261e02\" to virtual address \"0x754707E4\" (part of module \"USER32.DLL\")"}],"origin":"Hook Detection","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":1,"threat_level_human":"suspicious","category":"Unusual Characteristics","identifier":"registry-25","type":3,"relevance":3,"name":"Reads information about supported languages","description":"\"\" (Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\NLS\\LOCALE\"; Key: \"00000409\")\n \"Censitrac.exe\" (Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\NLS\\LOCALE\"; Key: \"00000409\")\n \"VBoxService.exe\" (Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\NLS\\LOCALE\"; Key: \"00000409\")\n \"conhost.exe\" (Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\NLS\\LOCALE\"; Key: \"00000409\")\n \"cacls.exe\" (Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\NLS\\LOCALE\"; Key: \"00000409\")","description_v2":["\"\" (Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\NLS\\LOCALE\"; Key: \"00000409\")","\"Censitrac.exe\" (Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\NLS\\LOCALE\"; Key: \"00000409\")","\"VBoxService.exe\" (Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\NLS\\LOCALE\"; Key: \"00000409\")","\"conhost.exe\" (Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\NLS\\LOCALE\"; Key: \"00000409\")","\"cacls.exe\" (Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\NLS\\LOCALE\"; Key: \"00000409\")"],"description_v3":[{"type":"text","value":"\"\" (Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\NLS\\LOCALE\"; Key: \"00000409\")"},{"type":"linebreak"},{"type":"text","value":"\"Censitrac.exe\" (Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\NLS\\LOCALE\"; Key: \"00000409\")"},{"type":"linebreak"},{"type":"text","value":"\"VBoxService.exe\" (Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\NLS\\LOCALE\"; Key: \"00000409\")"},{"type":"linebreak"},{"type":"text","value":"\"conhost.exe\" (Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\NLS\\LOCALE\"; Key: \"00000409\")"},{"type":"linebreak"},{"type":"text","value":"\"cacls.exe\" (Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\NLS\\LOCALE\"; Key: \"00000409\")"}],"origin":"Registry Access","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":1,"threat_level_human":"suspicious","category":"Unusual Characteristics","identifier":"static-3","type":0,"relevance":10,"name":"Timestamp in PE header is very old or in the future","description":"\"mscomm32.ocx\" claims program is from Thu Jun 18 17:48:27 1998\n \"msflxgrd.ocx\" claims program is from Mon Feb 22 11:19:06 1999","description_v2":["\"mscomm32.ocx\" claims program is from Thu Jun 18 17:48:27 1998","\"msflxgrd.ocx\" claims program is from Mon Feb 22 11:19:06 1999"],"description_v3":[{"type":"text","value":"\"mscomm32.ocx\" claims program is from Thu Jun 18 17:48:27 1998"},{"type":"linebreak"},{"type":"text","value":"\"msflxgrd.ocx\" claims program is from Mon Feb 22 11:19:06 1999"}],"origin":"Static Parser","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":2,"threat_level_human":"malicious","category":"Installation/Persistance","identifier":"binary-7","type":8,"relevance":7,"name":"Drops executable files to the Windows system directory","description":"File type \"PE32 executable (DLL) (GUI) Intel 80386 (stripped to external PDB) for MS Windows\" was dropped at \"%WINDIR%\\SysWOW64\\mscomm32.ocx\"\n File type \"PE32 executable (DLL) (GUI) Intel 80386 (stripped to external PDB) for MS Windows\" was dropped at \"%WINDIR%\\SysWOW64\\msflxgrd.ocx\"","description_v2":["File type \"PE32 executable (DLL) (GUI) Intel 80386 (stripped to external PDB) for MS Windows\" was dropped at \"%WINDIR%\\SysWOW64\\mscomm32.ocx\"","File type \"PE32 executable (DLL) (GUI) Intel 80386 (stripped to external PDB) for MS Windows\" was dropped at \"%WINDIR%\\SysWOW64\\msflxgrd.ocx\""],"description_v3":[{"type":"text","value":"File type \"PE32 executable (DLL) (GUI) Intel 80386 (stripped to external PDB) for MS Windows\" was dropped at \"%WINDIR%\\SysWOW64\\mscomm32.ocx\""},{"type":"linebreak"},{"type":"text","value":"File type \"PE32 executable (DLL) (GUI) Intel 80386 (stripped to external PDB) for MS Windows\" was dropped at \"%WINDIR%\\SysWOW64\\msflxgrd.ocx\""}],"origin":"Binary File","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":2,"threat_level_human":"malicious","category":"Installation/Persistance","identifier":"api-0","type":6,"relevance":6,"name":"Writes data to a remote process","description":"$31","description_v2":["\"\" wrote 32 bytes to a remote process \"C:\\Program Files (x86)\\Censitrac\\Censitrac.exe\" (Handle: 236)","\"\" wrote 52 bytes to a remote process \"C:\\Program Files (x86)\\Censitrac\\Censitrac.exe\" (Handle: 236)","\"\" wrote 4 bytes to a remote process \"C:\\Program Files (x86)\\Censitrac\\Censitrac.exe\" (Handle: 236)","\"\" wrote 8 bytes to a remote process \"C:\\Program Files (x86)\\Censitrac\\Censitrac.exe\" (Handle: 236)","\"Censitrac.exe\" wrote 32 bytes to a remote process \"C:\\Windows\\SysWOW64\\cacls.exe\" (Handle: 284)","\"Censitrac.exe\" wrote 52 bytes to a remote process \"C:\\Windows\\SysWOW64\\cacls.exe\" (Handle: 284)","\"Censitrac.exe\" wrote 4 bytes to a remote process \"C:\\Windows\\SysWOW64\\cacls.exe\" (Handle: 284)","\"Censitrac.exe\" wrote 8 bytes to a remote process \"C:\\Windows\\SysWOW64\\cacls.exe\" (Handle: 284)","\"Censitrac.exe\" wrote 32 bytes to a remote process \"C:\\Windows\\SysWOW64\\cacls.exe\" (Handle: 292)","\"Censitrac.exe\" wrote 52 bytes to a remote process \"C:\\Windows\\SysWOW64\\cacls.exe\" (Handle: 292)","\"Censitrac.exe\" wrote 4 bytes to a remote process \"C:\\Windows\\SysWOW64\\cacls.exe\" (Handle: 292)","\"Censitrac.exe\" wrote 8 bytes to a remote process \"C:\\Windows\\SysWOW64\\cacls.exe\" (Handle: 292)"],"description_v3":[{"type":"text","value":"\"\" wrote 32 bytes to a remote process \"%PROGRAMFILES%\\(x86)\\Censitrac\\Censitrac.exe\" (Handle: 236)"},{"type":"linebreak"},{"type":"text","value":"\"\" wrote 52 bytes to a remote process \"C:\\Program Files (x86)\\Censitrac\\Censitrac.exe\" (Handle: 236)"},{"type":"linebreak"},{"type":"text","value":"\"\" wrote 4 bytes to a remote process \"C:\\Program Files (x86)\\Censitrac\\Censitrac.exe\" (Handle: 236)"},{"type":"linebreak"},{"type":"text","value":"\"\" wrote 8 bytes to a remote process \"C:\\Program Files (x86)\\Censitrac\\Censitrac.exe\" (Handle: 236)"},{"type":"linebreak"},{"type":"text","value":"\"Censitrac.exe\" wrote 32 bytes to a remote process \"C:\\Windows\\SysWOW64\\cacls.exe\" (Handle: 284)"},{"type":"linebreak"},{"type":"text","value":"\"Censitrac.exe\" wrote 52 bytes to a remote process \"C:\\Windows\\SysWOW64\\cacls.exe\" (Handle: 284)"},{"type":"linebreak"},{"type":"text","value":"\"Censitrac.exe\" wrote 4 bytes to a remote process \"C:\\Windows\\SysWOW64\\cacls.exe\" (Handle: 284)"},{"type":"linebreak"},{"type":"text","value":"\"Censitrac.exe\" wrote 8 bytes to a remote process \"C:\\Windows\\SysWOW64\\cacls.exe\" (Handle: 284)"},{"type":"linebreak"},{"type":"text","value":"\"Censitrac.exe\" wrote 32 bytes to a remote process \"C:\\Windows\\SysWOW64\\cacls.exe\" (Handle: 292)"},{"type":"linebreak"},{"type":"text","value":"\"Censitrac.exe\" wrote 52 bytes to a remote process \"C:\\Windows\\SysWOW64\\cacls.exe\" (Handle: 292)"},{"type":"linebreak"},{"type":"text","value":"\"Censitrac.exe\" wrote 4 bytes to a remote process \"C:\\Windows\\SysWOW64\\cacls.exe\" (Handle: 292)"},{"type":"linebreak"},{"type":"text","value":"\"Censitrac.exe\" wrote 8 bytes to a remote process \"C:\\Windows\\SysWOW64\\cacls.exe\" (Handle: 292)"}],"origin":"API Call","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":2,"threat_level_human":"malicious","category":"Unusual Characteristics","identifier":"target-14","type":9,"relevance":8,"name":"Spawns a lot of processes","description":"$32","description_v2":["Spawned process \"\" (UID: 00016692-00004076)","Spawned process \"dllhost.exe\" with commandline \"/Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}\" (UID: 00017293-00004072)","Spawned process \"Censitrac.exe\" with commandline \"/i\" (UID: 00017318-00004372)","Spawned process \"VBoxService.exe\" with commandline \"guestsession --session-id=2 --session-proto=2 --user %OSUSER%\" (UID: 00017401-00004600)","Spawned process \"conhost.exe\" with commandline \"\"1326367788-74642697812112153561280963122988602996-2143904698-584606740-1730333015\"\" (UID: 00017407-00002500)","Spawned process \"cacls.exe\" with commandline \"cacls \"%PROGRAMFILES%\\(x86)\\Censitrac\" /T /E /C /p \"Domain\\Domain Users\":F\" (UID: 00017860-00003940)","Spawned process \"conhost.exe\" with commandline \"\"-876518106564522501-17229483521280457337-190447950-4540262397756535531975067373\"\" (UID: 00017873-00004020)","Spawned process \"cacls.exe\" with commandline \"cacls \"%PROGRAMFILES%\\(x86)\\Censitrac\" /T /E /C /p \"BUILTIN\\Users\":F\" (UID: 00017900-00003632)","Spawned process \"conhost.exe\" with commandline \"\"10650578335717743631451838221349842119929459374-561578266-396264015-794880881\"\" (UID: 00017909-00003268)","Spawned process \"regsvr32.exe\" with commandline \"regsvr32 -s -c \"%PROGRAMFILES%\\(x86)\\Censitrac\\WBCustomizer.dll\"\" (UID: 00017949-00004764)","Spawned process \"regsvr32.exe\" with commandline \"regsvr32 -s -c \"%WINDIR%\\system32\\msflxgrd.ocx\"\" (UID: 00018008-00000728)","Spawned process \"regsvr32.exe\" with commandline \"regsvr32 -s -c \"%WINDIR%\\system32\\mscomm32.ocx\"\" (UID: 00018083-00000436)","Spawned process \"dllhost.exe\" with commandline \"/Processid:{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}\" (UID: 00018201-00003172)","Spawned process \"dllhost.exe\" with commandline \"/Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}\" (UID: 00019450-00004428)","Spawned process \"VBoxService.exe\" with commandline \"guestsession --session-id=2 --session-proto=2 --user %OSUSER%\" (UID: 00019480-00002860)","Spawned process \"conhost.exe\" with commandline \"\"-1051413858-1364305440-535621194-141297315920313246441720585698-772470915-670479306\"\" (UID: 00019483-00003628)","Spawned process \"dllhost.exe\" with commandline \"/Processid:{F9717507-6651-4EDB-BFF7-AE615179BCCF}\" (UID: 00021772-00001640)","Spawned process \"dllhost.exe\" with commandline \"/Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}\" (UID: 00022158-00004584)","Spawned process \"VBoxService.exe\" with commandline \"guestsession --session-id=2 --session-proto=2 --user %OSUSER%\" (UID: 00022187-00002572)","Spawned process \"conhost.exe\" with commandline \"\"862242309-340269307416007485-493106922-1066022867185587731-2074273098886839108\"\" (UID: 00022190-00002580)","Spawned process \"dllhost.exe\" with commandline \"/Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}\" (UID: 00024206-00003764)","Spawned process \"VBoxService.exe\" with commandline \"guestsession --session-id=2 --session-proto=2 --user %OSUSER%\" (UID: 00024233-00003952)","Spawned process \"conhost.exe\" with commandline \"\"-7811970441385472549-97066699910485250248614966277983147711138864092117884703\"\" (UID: 00024236-00001672)","Spawned process \"dllhost.exe\" with commandline \"/Processid:{F9717507-6651-4EDB-BFF7-AE615179BCCF}\" (UID: 00025484-00004872)","Spawned process \"dllhost.exe\" with commandline \"/Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}\" (UID: 00026248-00002056)","Spawned process \"VBoxService.exe\" with commandline \"guestsession --session-id=2 --session-proto=2 --user %OSUSER%\" (UID: 00026274-00004728)","Spawned process \"conhost.exe\" with commandline \"\"12836651951771131773-746475820718280578869200901-394534641-2141342183-2055056352\"\" (UID: 00026277-00001740)","Spawned process \"dllhost.exe\" with commandline \"/Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}\" (UID: 00028296-00004104)","Spawned process \"VBoxService.exe\" with commandline \"guestsession --session-id=2 --session-proto=2 --user %OSUSER%\" (UID: 00028329-00003800)","Spawned process \"conhost.exe\" with commandline \"\"680449456-175740006512758202151653482812-432076267575777651983792-832048624\"\" (UID: 00028332-00003164)","Spawned process \"dllhost.exe\" with commandline \"/Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}\" (UID: 00031004-00002756)","Spawned process \"VBoxService.exe\" with commandline \"guestsession --session-id=2 --session-proto=2 --user %OSUSER%\" (UID: 00031032-00002088)","Spawned process \"conhost.exe\" with commandline \"\"332839303-168839968132193513713792165012090701320-8268811101846841620-2065805961\"\" (UID: 00031035-00002268)"],"description_v3":[{"type":"text","value":"Spawned process \"\""},{"type":"process","process_uid":"00016692-00004076","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"dllhost.exe\" with commandline \"/Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}\""},{"type":"process","process_uid":"00017293-00004072","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"Censitrac.exe\" with commandline \"/i\""},{"type":"process","process_uid":"00017318-00004372","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"VBoxService.exe\" with commandline \"guestsession --session-id=2 --session-proto=2 --user %OSUSER%\""},{"type":"process","process_uid":"00017401-00004600","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"conhost.exe\" with commandline \"\"1326367788-74642697812112153561280963122988602996-2143904698-584606740-1730333015\"\""},{"type":"process","process_uid":"00017407-00002500","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"cacls.exe\" with commandline \"cacls \"%PROGRAMFILES%\\(x86)\\Censitrac\" /T /E /C /p \"Domain\\Domain Users\":F\""},{"type":"process","process_uid":"00017860-00003940","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"conhost.exe\" with commandline \"\"-876518106564522501-17229483521280457337-190447950-4540262397756535531975067373\"\""},{"type":"process","process_uid":"00017873-00004020","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"cacls.exe\" with commandline \"cacls \"%PROGRAMFILES%\\(x86)\\Censitrac\" /T /E /C /p \"BUILTIN\\Users\":F\""},{"type":"process","process_uid":"00017900-00003632","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"conhost.exe\" with commandline \"\"10650578335717743631451838221349842119929459374-561578266-396264015-794880881\"\""},{"type":"process","process_uid":"00017909-00003268","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"regsvr32.exe\" with commandline \"regsvr32 -s -c \"%PROGRAMFILES%\\(x86)\\Censitrac\\WBCustomizer.dll\"\""},{"type":"process","process_uid":"00017949-00004764","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"regsvr32.exe\" with commandline \"regsvr32 -s -c \"%WINDIR%\\system32\\msflxgrd.ocx\"\""},{"type":"process","process_uid":"00018008-00000728","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"regsvr32.exe\" with commandline \"regsvr32 -s -c \"%WINDIR%\\system32\\mscomm32.ocx\"\""},{"type":"process","process_uid":"00018083-00000436","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"dllhost.exe\" with commandline \"/Processid:{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}\""},{"type":"process","process_uid":"00018201-00003172","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"dllhost.exe\" with commandline \"/Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}\""},{"type":"process","process_uid":"00019450-00004428","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"VBoxService.exe\" with commandline \"guestsession --session-id=2 --session-proto=2 --user %OSUSER%\""},{"type":"process","process_uid":"00019480-00002860","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"conhost.exe\" with commandline \"\"-1051413858-1364305440-535621194-141297315920313246441720585698-772470915-670479306\"\""},{"type":"process","process_uid":"00019483-00003628","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"dllhost.exe\" with commandline \"/Processid:{F9717507-6651-4EDB-BFF7-AE615179BCCF}\""},{"type":"process","process_uid":"00021772-00001640","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"dllhost.exe\" with commandline \"/Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}\""},{"type":"process","process_uid":"00022158-00004584","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"VBoxService.exe\" with commandline \"guestsession --session-id=2 --session-proto=2 --user %OSUSER%\""},{"type":"process","process_uid":"00022187-00002572","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"conhost.exe\" with commandline \"\"862242309-340269307416007485-493106922-1066022867185587731-2074273098886839108\"\""},{"type":"process","process_uid":"00022190-00002580","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"dllhost.exe\" with commandline \"/Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}\""},{"type":"process","process_uid":"00024206-00003764","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"VBoxService.exe\" with commandline \"guestsession --session-id=2 --session-proto=2 --user %OSUSER%\""},{"type":"process","process_uid":"00024233-00003952","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"conhost.exe\" with commandline \"\"-7811970441385472549-97066699910485250248614966277983147711138864092117884703\"\""},{"type":"process","process_uid":"00024236-00001672","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"dllhost.exe\" with commandline \"/Processid:{F9717507-6651-4EDB-BFF7-AE615179BCCF}\""},{"type":"process","process_uid":"00025484-00004872","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"dllhost.exe\" with commandline \"/Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}\""},{"type":"process","process_uid":"00026248-00002056","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"VBoxService.exe\" with commandline \"guestsession --session-id=2 --session-proto=2 --user %OSUSER%\""},{"type":"process","process_uid":"00026274-00004728","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"conhost.exe\" with commandline \"\"12836651951771131773-746475820718280578869200901-394534641-2141342183-2055056352\"\""},{"type":"process","process_uid":"00026277-00001740","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"dllhost.exe\" with commandline \"/Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}\""},{"type":"process","process_uid":"00028296-00004104","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"VBoxService.exe\" with commandline \"guestsession --session-id=2 --session-proto=2 --user %OSUSER%\""},{"type":"process","process_uid":"00028329-00003800","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"conhost.exe\" with commandline \"\"680449456-175740006512758202151653482812-432076267575777651983792-832048624\"\""},{"type":"process","process_uid":"00028332-00003164","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"dllhost.exe\" with commandline \"/Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}\""},{"type":"process","process_uid":"00031004-00002756","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"VBoxService.exe\" with commandline \"guestsession --session-id=2 --session-proto=2 --user %OSUSER%\""},{"type":"process","process_uid":"00031032-00002088","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"conhost.exe\" with commandline \"\"332839303-168839968132193513713792165012090701320-8268811101846841620-2065805961\"\""},{"type":"process","process_uid":"00031035-00002268","label":"Show Process"}],"origin":"Monitored Target","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null}],"detonation_parameters":{"action_script":"default","experimental_anti_evasion":true,"script_logging":false,"allow_sample_tampering":false,"network_mode":"default","custom_system_date_time":null,"custom_commandline":null,"document_password":null,"document_password_exists":false,"environment_variable":null,"dynamic_analysis_time":240,"comment":null},"falcon_mal_query_results":[],"falcon_intelligence_data":null,"search_tags":[],"execution_mode":"KERNELMODE","monitor_script":"default.au3","monitor_script_description":"Default analysis","windows_version_name":"Windows 7","windows_version_edition":"Professional","windows_version_service_pack":"Service Pack 1","windows_version_version":"6.1 (build 7601)","windows_version_bitness":"64","custom_date_time":null,"sandbox_version":"8.00","report_generator_version":null,"signature_engine_version":null,"mitre_version":null,"office_analysis":false,"office_version":null,"incidents":[{"name":"Remote Access","details":["Reads terminal service related keys (often RDP related)"]},{"name":"Persistence","details":["Writes data to a remote process","Spawns a lot of processes"]},{"name":"Fingerprint","details":["Reads the cryptographic machine GUID"]},{"name":"Network Behavior","details":["Contacts 1 domain and 1 host"]}],"icon":"$33","visualization":"$34","classification":["54.9% (.EXE) Win32 Executable Microsoft Visual Basic 6","20.8% (.EXE) Win32 Executable MS Visual C++ (generic)","18.4% (.EXE) Win64 Executable (generic)","3.0% (.EXE) Win32 Executable (generic)","1.3% (.EXE) Generic Win/DOS Executable"],"dns_requests":[{"compromised":false,"domain":"w6cczp.com","address":null,"ttl":899,"country":"-","registrar_name":null,"registrar_organization":null,"registrar_name_servers":null,"registrar_creation_date":null,"who_is":[],"associated_sha256s":[]}],"contacted_hosts":[{"compromised":false,"address":"2.21.242.227","port":80,"protocol":"TCP","associated_runtime":[{"name":"watadminsvc.exe","pid":"2876"}],"country":"European Union","associated_sha256s":[]},{"compromised":false,"address":"172.227.102.35","port":80,"protocol":"TCP","associated_runtime":[{"name":"watadminsvc.exe","pid":"2876"}],"country":"United States","associated_sha256s":[]}],"contacted_countries":{"countries":["EU","USA"],"coordinates":[{"origin":{"latitude":"51.65","longitude":"6.1833"},"destination":{"latitude":"47.0","longitude":"8.0"}},{"origin":{"latitude":"51.65","longitude":"6.1833"},"destination":{"latitude":"42.3626","longitude":"-71.0843"}}]},"port_infos":[{"port":80,"description":"Hypertext Transfer Protocol (HTTP)"}],"extracted_strings":{"all":[{"value":"ISEhIiIiIyMjJCQkJSUlJiYmJycnKCgoKSkpKioqKysrLCwsLS0tLi4uLy8vMDAwMTExMjIyMzMzNDQ0NTU1NjY2Nzc3ODg4OTk5Ojo6Ozs7PDw8PT09Pj4+Pz8/QEBAQUFBQkJCQ0NDRERERUVFRkZGR0dHSEhISUlJSkpKS0tLTExMTU1NTk5OT09PUFBQUVFRUlJSU1NTVFRUVVVVVlZWV1dXWFhYWVlZWlpaW1tbXFxcXV1dXl5eX19fYGBgYWFhYmJiY2NjZGRkZWVlZmZmZ2dnaGhoaWlpampqa2trbGxsbW1tbm5ub29vcHBwcXFxcnJyc3NzdHR0dXV1dnZ2d3d3eHh4eXl5enp6e3t7fHx8fX19fn5+","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"ISVXSU5ESVIlXFN5c1dvdzY0XG1zeG1sNC5kbGw=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"IUgiIyQlJicoKSorLC0uLzBIMTJISEhISEhISEhISEhISEhISEhISEhISEhISEhISEhISEhISEhISEhISEhISEhISEhISEhISEhISEhISEhISEhISEhISEhISEhISEhISEhISEhISEhISEhISEhISEhISEgzNDU2Nzg5Ojs8PT4/QEFCQ0RFRkc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"IVRoaXMgcHJvZ3JhbSBjYW5ub3QgYmUgcnVuIGluIERPUyBtb2RlLiQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"IiAvcWItISAvTGZld21vICI=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"IiAvVCAvRSAvQyAvcCAiQlVJTFRJTlxVc2VycyI6Rg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"IiAvVCAvRSAvQyAvcCAiRG9tYWluXERvbWFpbiBVc2VycyI6Rg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Ii0xMDUxNDEzODU4LTEzNjQzMDU0NDAtNTM1NjIxMTk0LTE0MTI5NzMxNTkyMDMxMzI0NjQ0MTcyMDU4NTY5OC03NzI0NzA5MTUtNjcwNDc5MzA2Ig==","type":"Ansi","source":"Process Commandline","process":null,"filename":"conhost.exe","compromised":null,"detection_total":null,"total":null},{"value":"Ii03ODExOTcwNDQxMzg1NDcyNTQ5LTk3MDY2Njk5OTEwNDg1MjUwMjQ4NjE0OTY2Mjc3OTgzMTQ3NzExMTM4ODY0MDkyMTE3ODg0NzAzIg==","type":"Ansi","source":"Process Commandline","process":null,"filename":"conhost.exe","compromised":null,"detection_total":null,"total":null},{"value":"Ii04NzY1MTgxMDY1NjQ1MjI1MDEtMTcyMjk0ODM1MjEyODA0NTczMzctMTkwNDQ3OTUwLTQ1NDAyNjIzOTc3NTY1MzU1MzE5NzUwNjczNzMi","type":"Ansi","source":"Process Commandline","process":null,"filename":"conhost.exe","compromised":null,"detection_total":null,"total":null},{"value":"IjEwNjUwNTc4MzM1NzE3NzQzNjMxNDUxODM4MjIxMzQ5ODQyMTE5OTI5NDU5Mzc0LTU2MTU3ODI2Ni0zOTYyNjQwMTUtNzk0ODgwODgxIg==","type":"Ansi","source":"Process Commandline","process":null,"filename":"conhost.exe","compromised":null,"detection_total":null,"total":null},{"value":"IjEyODM2NjUxOTUxNzcxMTMxNzczLTc0NjQ3NTgyMDcxODI4MDU3ODg2OTIwMDkwMS0zOTQ1MzQ2NDEtMjE0MTM0MjE4My0yMDU1MDU2MzUyIg==","type":"Ansi","source":"Process Commandline","process":null,"filename":"conhost.exe","compromised":null,"detection_total":null,"total":null},{"value":"IjEzMjYzNjc3ODgtNzQ2NDI2OTc4MTIxMTIxNTM1NjEyODA5NjMxMjI5ODg2MDI5OTYtMjE0MzkwNDY5OC01ODQ2MDY3NDAtMTczMDMzMzAxNSI=","type":"Ansi","source":"Process Commandline","process":null,"filename":"conhost.exe","compromised":null,"detection_total":null,"total":null},{"value":"IjMzMjgzOTMwMy0xNjg4Mzk5NjgxMzIxOTM1MTM3MTM3OTIxNjUwMTIwOTA3MDEzMjAtODI2ODgxMTEwMTg0Njg0MTYyMC0yMDY1ODA1OTYxIg==","type":"Ansi","source":"Process Commandline","process":null,"filename":"conhost.exe","compromised":null,"detection_total":null,"total":null},{"value":"IjY4MDQ0OTQ1Ni0xNzU3NDAwMDY1MTI3NTgyMDIxNTE2NTM0ODI4MTItNDMyMDc2MjY3NTc1Nzc3NjUxOTgzNzkyLTgzMjA0ODYyNCI=","type":"Ansi","source":"Process Commandline","process":null,"filename":"conhost.exe","compromised":null,"detection_total":null,"total":null},{"value":"Ijg2MjI0MjMwOS0zNDAyNjkzMDc0MTYwMDc0ODUtNDkzMTA2OTIyLTEwNjYwMjI4NjcxODU1ODc3MzEtMjA3NDI3MzA5ODg4NjgzOTEwOCI=","type":"Ansi","source":"Process Commandline","process":null,"filename":"conhost.exe","compromised":null,"detection_total":null,"total":null},{"value":"Ij48YnI+KFRvIGV4aXQgQ2Vuc2l0cmFjIHByZXNzIEFsdCtGNCk=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"IyMgS2V5c3Ryb2tlOg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"IyMgU2V0IEZvY3VzIGJhY2sgdG8gSUUh","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"JChBcHBQYXRoKQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"JChBc3NvY0FwcFBhdGgp","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"JChQcm9ncmFtRmlsZXMp","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"JChXaW5TeXNQYXRoKQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"JChXaW5TeXNQYXRoU3lzRmlsZSk=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"JXBlcnNvbmFsJQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"JVBST0dSQU1GSUxFUyVcKHg4NilcQ2Vuc2l0cmFjXA==","type":"Unicode","source":"Runtime Data","process":"regsvr32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"JXBTZXRTdGF0dXM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"JXMgT2JqZWN0","type":"Ansi","source":"Dropped File","process":null,"filename":"msflxgrd.ocx.3900053644","compromised":null,"detection_total":null,"total":null},{"value":"JXMuJXMuJWxk","type":"Ansi","source":"Dropped File","process":null,"filename":"msflxgrd.ocx.3900053644","compromised":null,"detection_total":null,"total":null},{"value":"JXMuJXNcQ3VyVmVy","type":"Ansi","source":"Dropped File","process":null,"filename":"msflxgrd.ocx.3900053644","compromised":null,"detection_total":null,"total":null},{"value":"JXNcSW5wcm9jU2VydmVy","type":"Ansi","source":"Dropped File","process":null,"filename":"msflxgrd.ocx.3900053644","compromised":null,"detection_total":null,"total":null},{"value":"JXVcJXMuZGxs","type":"Ansi","source":"Dropped File","process":null,"filename":"msflxgrd.ocx.3900053644","compromised":null,"detection_total":null,"total":null},{"value":"JVdJTkRJUiVcU3lzV293NjRcbXNjb21tMzIub2N4","type":"Unicode","source":"Runtime Data","process":"regsvr32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"JiYgS2V5c3Ryb2tlOg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Jkg4MDAwMDAxMiY=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"JlByaW50IEFsbCBQYWdlcw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"JnN0YXRpb249","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"JykgKyAnOyAn","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"J1R1cm4gT2ZmJzo=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"J1R1cm4gT24nOg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"KSB3YXMgbm90IGZvdW5kIHRvIGV4aXN0Lg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"LCAwLCAwLCAz","type":"Unicode","source":"Dropped File","process":null,"filename":"WBCustomizer.dll.3678178828","compromised":null,"detection_total":null,"total":null},{"value":"LCBpbnZhbGlkIHN0YXR1czo=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"LCB0b3RhbCBoZWlnaHQ9","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"LCxfLF9fXyxfLHEsXyxf","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_0.png","compromised":null,"detection_total":null,"total":null},{"value":"LDAsMSwxLDEsTiw=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"LDAsMSwyLDQsMTYsQiw=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"LDAsMSwyLDQsMzAsTiw=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"LDAsMywxLDEsTiw=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"LDEsMCxDLDBeQTAsMjUsMjBeRkQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"LDEsMCxDLDBeQTAsMjYsMjBeRkQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"LDEsMCxDLDBeQTAsMjgsMjZeRkQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"LDEsMCxDLDBeQTAsMzAsMzZeRkQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"LDEsMCxDLDBeQTAsMzYsMzZeRkQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"LDEsMCxMLDBeQTAsMjYsMjBeRkQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"LDEsMCxSLDBeQTAsMjYsMjBeRkQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"LDEsMCxSLDBeQTAsMjgsMjReRkQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"LDEsMCxSLDBeQTAsMzAsMzZeRkQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"LDIsMCxDLDBeQTAsMjAsMjheRkRDZW5zaXRyYWNeRlM=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"LDIsMCxDLDBeQTAsMjUsMjBeRkQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"LDIsMCxDLDBeQTAsMzYsMjReRkQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"LDIsMCxDLDBeQTAsMzYsMzZeRkQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"LDIwMCwsLCxeRkQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"LE4sTixBXkZE","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Li5cTWljcm9zb2Z0Lk5FVFxGcmFtZXdvcmtcdjEuMS40MzIyXGdkaXBsdXMuZGxs","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Lk9wdGlvbiBFWFBMSUNJVA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"LnByZXZpb3Vz","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"LlNldCBDYWJpbmV0ID0gb2Zm","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"LlNldCBDYWJpbmV0PW9u","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"LlNldCBDYWJpbmV0TmFtZVRlbXBsYXRlID0gIg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"LlNldCBDb21wcmVzcyA9IG9mZg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"LlNldCBDb21wcmVzcz1vbg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"LlNldCBDb21wcmVzc2lvbkxldmVsID0gNw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"LlNldCBDb21wcmVzc2lvbk1lbW9yeSA9IDIx","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"LlNldCBDb21wcmVzc2lvblR5cGUgPSBNU1pJUA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"LlNldCBEaXNrRGlyZWN0b3J5VGVtcGxhdGUgPSAiLiI=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"LlNldCBNYXhEaXNrU2l6ZSA9IDE0NTc2NjQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"LlNldCBSZXNlcnZlUGVyQ2FiaW5ldFNpemUgPSA2MTQ0","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Ln11WVAmdU5Z","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"L19TY3JpcHRMaWJyYXJ5L3JzLmh0bQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"L2M6Im1zaWluc3QgL2RlbGF5cmVib290cSI=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"L0V4aXRBcHAuYXNw","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"L2ltYWdlcy9sb2FkaW5nMi5naWY=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"L2ltYWdlcy9wcmludF9sb2dvLmdpZic+Jm5ic3A7Jm5ic3A7","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"L0ltYWdlU2F2ZS5hc3A/","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"L2luc3RhbGwv","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"L2luc3RhbGwvQ2Vuc2l0cmFjU3BlZWNoLm1zaQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"L0xvZ2luLmFzcA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"L0xvZ01zZy5hc3A=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"L25hdmNhbmNsLmh0bQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"L1Byb2Nlc3NpZDp7QUI4OTAyQjQtMDlDQS00QkI2LUI3OEQtQThGNTkwNzlBOEQ1fQ==","type":"Ansi","source":"Process Commandline","process":null,"filename":"dllhost.exe","compromised":null,"detection_total":null,"total":null},{"value":"L1Byb2Nlc3NpZDp7RTEwRjZDM0EtRjFBRS00QURDLUFBOUQtMkZFNjU1MjU2NjZFfQ==","type":"Ansi","source":"Process Commandline","process":null,"filename":"dllhost.exe","compromised":null,"detection_total":null,"total":null},{"value":"L1Byb2Nlc3NpZDp7Rjk3MTc1MDctNjY1MS00RURCLUJGRjctQUU2MTUxNzlCQ0NGfQ==","type":"Ansi","source":"Process Commandline","process":null,"filename":"dllhost.exe","compromised":null,"detection_total":null,"total":null},{"value":"MDAwNjAxMDEuMDAwNjAxMDE=","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"MS4wMS4wMjM4","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"MS4yMC4xODI3","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"MTAyNHg3NjggKDR4Myk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"MTE1Mng4NjQgKDR4Myk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"MTI4MHg3MjAgKDE2eDkp","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"MTI4MHg5NjAgKDR4Myk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"MTM2OHg3NzAgKDE2eDkp","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"MyBvZiA5IEJhcmNvZGU=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Mzg0MDAsTiw4LDE=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"M3g/fUV8TTNs","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Nm80bzJvNm8xbzU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"NzFCMzZGNEE=","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"ODAweDYwMCAoNHgzKQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"OTYwMCxuLDgsMQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"OTYwMCxOLDgsMQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"O2YzO2MxNztoMjt3MjtkMCwzMDs8RVRYPg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"O3cyOzxFVFg+","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"O3cyO2QwLDMwOzxFVFg+","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"PC9jZW50ZXI+","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"PC9kaXY+PGJyPjwvdGFibGU+","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"PC9TVFlMRT4=","type":"Unicode","source":"Dropped File","process":null,"filename":"Censitrac.exe.2918306370","compromised":null,"detection_total":null,"total":null},{"value":"PC90cj48L3RhYmxlPg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"PC94OkV4Y2VsV29ya2Jvb2s+","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"PC94OkV4Y2VsV29ya3NoZWV0Pg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"PC94OkV4Y2VsV29ya3NoZWV0cz4=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"PC94OldvcmtzaGVldE9wdGlvbnM+","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"PC94bWw+PCFbZW5kaWZdLS0+","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"PGJvZHkgbGluaz1ibHVlIHZsaW5rPXB1cnBsZT4=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"PGJyPjxpbnB1dCB0eXBlPWJ1dHRvbiB2YWx1ZT0nUmV0cnknIG9uY2xpY2s9Ig==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"PGh0bWwgeG1sbnM6bz0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6b2ZmaWNlIg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"PHNwYW4gc3R5bGU9J0ZPTlQtU0laRTogMjRwdDtmb250LXdlaWdodDpib2xkO0NPTE9SOiAjMDAwMDAwO0ZPTlQtRkFNSUxZOiBWZXJkYW5hLFRhaG9tYSxTYW5zLVNlcmlmOyc+TG9hZGluZy4uLjwvc3Bhbj4=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"PFNUWD48RVNDPkM8RVRYPjxTVFg+PEVTQz5QPEVUWD48U1RYPkU0O0Y0OzxFVFg+","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"PFNUWD48RVRCPjxFVFg+","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"PFNUWD48VVM+","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"PFNUWD5CNDtv","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"PFNUWD5CNjtv","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"PFNUWD5IMDtv","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"PFNUWD5IMTtv","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"PFNUWD5IMTtvMCwwO2QwLDE7PEVUWD4=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"PFNUWD5IMjtv","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"PFNUWD5IMztv","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"PFNUWD5INDtvMCwwO2QwLDE7PEVUWD4=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"PFNUWD5INTtv","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"PFNUWD5INztv","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"PFNUWD5IODtv","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"PFNUWD5SOzxFVFg+PFNUWD48U0k+Ri0xMDxFVFg+PFNUWD48RVNDPkU0PEVUWD48U1RYPjxDQU4+PEVUWD48U1RYPg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"PFNUWD5XMTA7bw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"PFNUWD5XMTE7bw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"PFNUWD5XMTI7bzAsMDto","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"PHRhYmxlIGlkPW1lbnVDb250ZW50VGFibGUgYm9yZGVyPTAgY2VsbHBhZGRpbmc9MCBjZWxsc3BhY2luZz0wIHdpZHRoPScxMDAlJz48dHI+PHRkIHZhbGlnbj10b3A+PGRpdiBhbGlnbj1jZW50ZXIgc3R5bGU9J2ZvbnQ6bm9ybWFsIG5vcm1hbCBib2xkIDEycHQgVmVyZGFuYSc+","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"PHRhYmxlIHdpZHRoPScxMDAlJz48dHIgYWxpZ249Y2VudGVyPjx0ZCBhbGlnbj1jZW50ZXIgaWQ9J1JlcG9ydEhlYWRlcic+PGltZyBzcmM9Jw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"PFRBQkxFIHg6c3RyIGJvcmRlcj0wIGNlbGxwYWRkaW5nPTAgY2VsbHNwYWNpbmc9MCBzdHlsZT0nYm9yZGVyLWNvbGxhcHNlOmNvbGxhcHNlO3RhYmxlLWxheW91dDpmaXhlZDsnPg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"PHg6RXhjZWxXb3JrYm9vaz4=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"PHg6RXhjZWxXb3Jrc2hlZXQ+","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"PHg6RXhjZWxXb3Jrc2hlZXRzPg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"PHg6TmFtZT5+cmVwb3J0PC94Ok5hbWU+","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"PHg6UHJvdGVjdENvbnRlbnRzPkZhbHNlPC94OlByb3RlY3RDb250ZW50cz4=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"PHg6UHJvdGVjdE9iamVjdHM+RmFsc2U8L3g6UHJvdGVjdE9iamVjdHM+","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"PHg6UHJvdGVjdFNjZW5hcmlvcz5GYWxzZTwveDpQcm90ZWN0U2NlbmFyaW9zPg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"PHg6UHJvdGVjdFN0cnVjdHVyZT5GYWxzZTwveDpQcm90ZWN0U3RydWN0dXJlPg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"PHg6UHJvdGVjdFdpbmRvd3M+RmFsc2U8L3g6UHJvdGVjdFdpbmRvd3M+","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"PHg6U2VsZWN0ZWQvPg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"PHg6VG9wUm93VmlzaWJsZT4wPC94OlRvcFJvd1Zpc2libGU+","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"PHg6V2luZG93SGVpZ2h0PjkxNTA8L3g6V2luZG93SGVpZ2h0Pg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"PHg6V2luZG93VG9wWD4wPC94OldpbmRvd1RvcFg+","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"PHg6V2luZG93VG9wWT4xMzY1PC94OldpbmRvd1RvcFk+","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"PHg6V2luZG93V2lkdGg+MTUzNjA8L3g6V2luZG93V2lkdGg+","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"PHg6V29ya3NoZWV0T3B0aW9ucz4=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"PmBQcmludEhUTUw=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"P19fX19fYz9fX19fX18/dj9fX19fX2M/X18wX19fX19fX19fMF9fX18wX19fX2M=","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_4.png","compromised":null,"detection_total":null,"total":null},{"value":"P19fX19fYz9fX19fX19fdj9fX19fX2M/X18wX19fX19fX19fMF9fX18wX19fX2M=","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_8.png","compromised":null,"detection_total":null,"total":null},{"value":"P19fX19fY2pfX19fP19fMDA/X19fMF8/P19fX19fXzBf","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_8.png","compromised":null,"detection_total":null,"total":null},{"value":"QG1lZGlhIGp1bms=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QG1lZGlhIHByaW50","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QG1lZGlhIHNjcmVlbg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"W2lmIGd0ZSBtc28gOV0+PHhtbD4=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"XGJhY2t1cFxhY2N1dHJhYy5wcmM=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"XGJhY2t1cFxjZW5zaXRyYWMucHJj","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"XGNlbnNpdHJhYw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"XENlbnNpdHJhYy5ibXA=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"XGNlbnNpdHJhYy5odG0=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"XENlbnNpdHJhY19PbmxpbmVfVXNlcl9NYW51YWwuY2ht","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"XENlbnNpdHJhY0ltYWdlLmpwZw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"XENlbnNpdHJhY0ltYWdlMi5qcGc=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"XENvbW1vbiBGaWxlcw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"XGhlYWRlcjEuYm1w","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"XElucHJvY1NlcnZlcjMy","type":"Ansi","source":"Dropped File","process":null,"filename":"msflxgrd.ocx.3900053644","compromised":null,"detection_total":null,"total":null},{"value":"XEluc3RhbGxc","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"XE9MRURyYWdNb2Rl","type":"Unicode","source":"Dropped File","process":null,"filename":"msflxgrd.ocx.3900053644","compromised":null,"detection_total":null,"total":null},{"value":"XFByb2dyYW1zXFN0YXJ0dXA=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"XHJlcG9ydC5odG0=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"XFJQQyBDb250cm9sXENvbnNvbGVMUEMtMHgwMDAwMDAwMDAwMDAwQ0M0LTEwNjUwNTc4MzM1NzE3NzQzNjMxNDUxODM4MjIxMzQ5ODQyMTE5OTI5NDU5Mzc0LTU2MTU3ODI2Ni0zOTYyNjQwMTUtNzk0ODgwODgx","type":"Unicode","source":"Runtime Data","process":"cacls.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFJQQyBDb250cm9sXENvbnNvbGVMUEMtMHgwMDAwMDAwMDAwMDAwRkI0LS04NzY1MTgxMDY1NjQ1MjI1MDEtMTcyMjk0ODM1MjEyODA0NTczMzctMTkwNDQ3OTUwLTQ1NDAyNjIzOTc3NTY1MzU1MzE5NzUwNjczNzM=","type":"Unicode","source":"Runtime Data","process":"cacls.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFNlc3Npb25zXDFcV2luZG93c1xBcGlQb3J0","type":"Unicode","source":"Runtime Data","process":"censitrac.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFNUNlVOU1QgIw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"XFN0cmluZ0ZpbGVJbmZvXA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"XFN5bmNMb2cudG1w","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"XFN5bmNMb2cudHh0","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"XHN5c3RlbTMy","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"XFRoZW1lQXBpUG9ydA==","type":"Unicode","source":"Runtime Data","process":"conhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFZhckZpbGVJbmZvXFRyYW5zbGF0aW9u","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"XFdpbmRvd3NcQXBpUG9ydA==","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XHdpemFyZHNcUERXaXphcmRcTWFrZUNhYi5leGU=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"XT5FWUhiQE9PIQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"XXBeK2NtZENhbmNlbA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"XkJDTiwsTixOLE4sQV5GRA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"XkJDTiwsWSxOLE4sQV5GRA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"XkJZMiwyLDE2XkJDTiwsWSxOLE4sQV5GRA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"XkJZMiwyLDMwXkJDTiwsTixOLE4sQV5GRA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"XkJZMiwyLDQwXkJDTiws","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"XkZPMCwwXkdC","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"XkZPNCw0XkJYTiw=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"XyZzeUdFIEpG","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X19fX18wX19fX19f","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_8.png","compromised":null,"detection_total":null,"total":null},{"value":"X19fX19fX19f","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_4.png","compromised":null,"detection_total":null,"total":null},{"value":"X19fX19fX19fX19fX18wP19fcF9MPzBfXyxfX19fX18wX19fX19fY2NfXw==","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_0.png","compromised":null,"detection_total":null,"total":null},{"value":"X19fX19fX19jXw==","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_4.png","compromised":null,"detection_total":null,"total":null},{"value":"X19fX19fX2Nf","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_8.png","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFBcnlDb25zdHJ1Y3Qy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFBcnlDb3B5","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFBcnlEZXN0cnVjdA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFBcnlMb2Nr","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFBcnlNb3Zl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFBcnlVbmxvY2s=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFCb29sVmFy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFCb29sVmFyTnVsbA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFDYXN0T2Jq","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFDYXN0T2JqVmFy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFDaGtzdGs=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFDb3B5Qnl0ZXM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFDeU11bEky","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFDeVZhcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFEYXRlUjg=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFEYXRlVmFy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFFcmFzZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFFcnJvck92ZXJmbG93","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFFeGNlcHRIYW5kbGVy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFFeGl0RWFjaENvbGw=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFFeGl0UHJvYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFGaWxlQ2xvc2U=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFGaWxlQ2xvc2VBbGw=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFGaWxlT3Blbg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFGaWxlU2Vlaw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFGb3JFYWNoQ29sbE9iag==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFGcENTbmdSNA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFGUEV4Y2VwdGlvbg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFGUEZpeA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFGcEky","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFGcEk0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFGUEludA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFGcFI0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFGcFI4","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFGcmVlT2Jq","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFGcmVlT2JqTGlzdA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFGcmVlU3Ry","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFGcmVlU3RyTGlzdA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFGcmVlVmFy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFGcmVlVmFyTGlzdA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFHZW5lcmF0ZUJvdW5kc0Vycm9y","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFHZXQz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFHZXQ0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFHZXRPd25lcjM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFIcmVzdWx0Q2hlY2tPYmo=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFJMkN5","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFJMkk0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFJMlN0cg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFJMlZhcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFJNEN5","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFJNEVyclZhcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFJNFN0cg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFJNFZhcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFJblN0cg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFJblN0ckI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFJblN0clZhcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFMYXRlSWRDYWxs","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFMYXRlSWRDYWxsTGQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFMYXRlSWRDYWxsU3Q=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFMYXRlSWRTdA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFMYXRlTWVtQ2FsbA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFMYXRlTWVtQ2FsbExk","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFMYXRlTWVtQ2FsbFN0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFMYXRlTWVtU3Q=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFMYm91bmQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFMZW5Cc3Ry","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFMZW5Cc3RyQg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFMZW5WYXI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFMaW5lSW5wdXRTdHI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFMc2V0Rml4c3Ry","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFNaWRTdG10QnN0cg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFOYW1lRmlsZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFOZXcy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFOZXh0RWFjaENvbGxPYmo=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFPYmpJcw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFPYmpTZXQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFPYmpTZXRBZGRyZWY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFPYmpWYXI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFPbkVycm9y","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFQb3dlclI4","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFQcmludEZpbGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFQcmludE9iag==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFQdXQz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFQdXRPd25lcjM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFSNFN0cg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFSNFZhcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFSOEN5","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFSOEVyclZhcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFSOEZpeEk0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFSOEludEky","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFSOEludEk0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFSOFN0cg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFSYWlzZUV2ZW50","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFSZWNBbnNpVG9Vbmk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFSZWNEZXN0cnVjdA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFSZWNEZXN0cnVjdEFuc2k=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFSZWNVbmlUb0Fuc2k=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFSZWRpbQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFSZWRpbVByZXNlcnZl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFSZWZWYXJBcnk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFSZXN1bWU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFTZXRTeXN0ZW1FcnJvcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFTdHIyVmVj","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFTdHJCb29s","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFTdHJDYXQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFTdHJDbXA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFTdHJDb21w","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFTdHJDb3B5","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFTdHJFcnJWYXJDb3B5","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFTdHJJMg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFTdHJJNA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFTdHJNb3Zl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFTdHJSNA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFTdHJSOA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFTdHJUZXh0Q21w","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFTdHJUZXh0TGlrZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFTdHJUb0Fuc2k=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFTdHJUb1VuaWNvZGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFTdHJVSTE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFTdHJWYXJDb3B5","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFTdHJWYXJNb3Zl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFTdHJWYXJWYWw=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFVYm91bmQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFVSTFJMg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFVSTFJNA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFVbmtWYXI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFWYXIyVmVj","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFWYXJBYnM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFWYXJBZGQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFWYXJBbmQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFWYXJDYXQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFWYXJDbXBFcQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFWYXJDb3B5","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFWYXJEaXY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFWYXJEdXA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFWYXJFcnJJNA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFWYXJGaXg=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFWYXJnVmFy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFWYXJnVmFyTW92ZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFWYXJJbmRleExvYWQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFWYXJJbmRleExvYWRSZWY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFWYXJJbmRleExvYWRSZWZMb2Nr","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFWYXJJbmRleFN0b3Jl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFWYXJMYXRlTWVtQ2FsbExk","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFWYXJMYXRlTWVtQ2FsbExkUmY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFWYXJMYXRlTWVtU3Q=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFWYXJNb3Zl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFWYXJNdWw=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFWYXJOb3Q=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFWYXJPcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFWYXJTZXRPYmpBZGRyZWY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFWYXJTZXRWYXI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFWYXJTdWI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFWYXJUZXh0Q21wRXE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFWYXJUZXh0Q21wR2U=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFWYXJUZXh0Q21wR3Q=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFWYXJUZXh0Q21wTHQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFWYXJUZXh0Q21wTmU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFWYXJUZXh0VHN0RXE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFWYXJUZXh0VHN0R2U=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFWYXJUZXh0VHN0R3Q=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFWYXJUZXh0VHN0THQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFWYXJUZXh0VHN0TmU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFWYXJUc3ROZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFWYXJWYXJnTm9mcmVl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFWYXJaZXJv","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X2Fkal9mZGl2X20xNmk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X2Fkal9mZGl2X20zMg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X2Fkal9mZGl2X20zMmk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X2Fkal9mZGl2X202NA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X2Fkal9mZGl2X3I=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X2Fkal9mZGl2cl9tMTZp","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X2Fkal9mZGl2cl9tMzI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X2Fkal9mZGl2cl9tMzJp","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X2Fkal9mZGl2cl9tNjQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X2Fkal9mcGF0YW4=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X2Fkal9mcHJlbQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X2Fkal9mcHJlbTE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X2Fkal9mcHRhbg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X2NlbnNsdHJhY18=","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_8.png","compromised":null,"detection_total":null,"total":null},{"value":"X2lfJywsMCwwX18sX2VfMA==","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_0.png","compromised":null,"detection_total":null,"total":null},{"value":"QSBQYXJpdHkgb3IgRnJhbWluZyBlcnJvciBvY2N1cnJlZCBvbiB0aGUgc2Nhbm5lciBzZXJpYWwgcG9ydC4gIENoZWNrIHRvIG1ha2Ugc3VyZSB0aGUgYmF1ZCByYXRlIGFuZCBvdGhlciBzZXJpYWwgc2V0dGluZ3MgYXJlIGNvcnJlY3Qu","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QSZ1ITgpJTU7","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"YWJvdXQ6Ymxhbms=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"YWJvdXQ6Ymxhbms/aGVscGluaXQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"YWJ5dFBvc3REYXRh","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QWNjZXNzIERlbmllZA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QWNjZXNzUGVybWlzc2lvbg==","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"QWNjdXRyYWMgV2ViIEJyb3dzZXI=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QWN0aXZhdGVBdFN0b3JhZ2U=","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"QWRkLW9uXGFjY3V0cmFjLnByYw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QWRkLW9uXENlbnNpdHJhYy5wcmM=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QWRkTXNnTGluZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QWRkUmVjdkxpbmU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QWRkcmVzc0NoYW5nZWQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QWRkcmVzc0ZhbWlseQ==","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"QWRkU2NhbkxpbmU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QWRkU2VuZExpbmU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QWRkVXBncmFkZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QWRtaW5UYWJQcm9jcw==","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"QURWQVBJMzIuZGxs","type":"Ansi","source":"Dropped File","process":null,"filename":"WBCustomizer.dll.3678178828","compromised":null,"detection_total":null,"total":null},{"value":"YWR2YXBpMzIuZGxs","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QWxpZ25tZW50","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QWxpZ25Ub0FsaWdubWVudA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QWxsIEZpbGVzfCouKg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QWxsIFVzZXJzXERlc2t0b3A=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QWxsIFVzZXJzXFN0YXJ0IE1lbnU=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QWxsIFVzZXJzXFN0YXJ0IE1lbnVcUHJvZ3JhbXM=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QWxsIFVzZXJzXFN0YXJ0IE1lbnVcUHJvZ3JhbXNcU3RhcnR1cA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QWxsb3dPbmx5RE5TUXVlcnlGb3JXUEFE","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"QWxyZWFkeSBleGlzdHMu","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QWx3YXlzRHJhaW5PblJlZGlyZWN0","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"QWx3YXlzVXNlRGVmYXVsdFByaW50ZXI=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QW1vdW50RG9uZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QW4gZXJyb3Igb2N1cnJlZCB3aGlsZSBkb3dubG9hZGluZywgaW52YWxpZCBzdGF0dXM6","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QW4gZXJyb3Igb2N1cnJlZCB3aGlsZSBkb3dubG9hZGluZzo=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QW4gb3ZlcnJ1biBvY2N1cnJlZCBvbiB0aGUgc2Nhbm5lciBzZXJpYWwgcG9ydC4gIFBsZWFzZSBzY2FuIHRoZSBpdGVtIGFnYWluLg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QW5zd2VyYm94","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QW55IHNldHRpbmdzIGNoYW5nZXMgeW91IG1hZGUgd2lsbCBiZSBsb3N0IHdoZW4gQ2Vuc2l0cmFjIGlzIHJlc3RhcnRlZA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QXBhcnRtZW50","type":"Unicode","source":"Runtime Data","process":"regsvr32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"QXBwSURGbGFncw==","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"QXBwbGljYXRpb24gRGF0YQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QXBwbGljYXRpb24gU2V0dXAgQ29tcGxldGU=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QXBwbGljYXRpb24gU2V0dXAgaW4gUHJvZ3Jlc3MuLi4=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QXBwbGljYXRpb25OYW1l","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QXJlIHlvdSBzdXJlIHlvdSB3YW50IHRvIHJlbW92ZSB0aGlzIGFwcGxpY2F0aW9uIGZyb20gdGhpcyBjb21wdXRlcj8=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QXJpYWwgQmxhY2s=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QXN5bmMgb3BlcmF0aW9uIGNvbXBsZXRlZA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QXR0cmlidXRlcw==","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"QXV0aGVudGljYXRpb25MZXZlbA==","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"QXV0aGVudGljb2RlRW5hYmxlZA==","type":"Unicode","source":"Runtime Data","process":"censitrac.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"QXV0b0xhYmVsUHJpbnQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QXV0b1Byb3h5RGV0ZWN0VHlwZQ==","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"QXV0b1NjYWxl","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QXV0b1NpemVHcmlk","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"YjQsNCxELGMxNCxyMTQsaA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"YmFja2dyb3VuZENvbG9y","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QmFkUHJveHlFeHBpcmVzVGltZQ==","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"YkFsbG93Q2FuY2Vs","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"YmFyY29kZSBpcyB0b28gbGFyZ2UgZm9yIGxhYmVs","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QmFyY29kZSBMYWJlbCBQcmludGVyOg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QmFyY29kZSBTY2FubmVy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QmFyY29kZVByaW50LmFzcA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QmFyY29kZVNjYW5uZXJQcmVmaXg=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QmFyY29kZVNjYW5uZXJQcmVmaXhDaGFuZ2Vk","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"YkFzUHJpbnRlZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QmF1ZCByYXRlLCBQYXJpdHksIERhdGEgQml0cywgU3RvcCBCaXRz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QkNERUZHSElK","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"YkNvbXBsZXRl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"YkRpc2FibGVUb29sVGlwcw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QmVlcCBvbiBSZXN1bHRz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QmVmb3JlIE5hdmlnYXRl","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"YkZvbnRCb2xk","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"YkZvbnRJdGFsaWM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"YkZvcmNlRGlyZWN0VG9QcmludGVy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"YkZvcmNlUHJldmlldw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"YmdsUjNJbml0IGZhaWxlZCB3aXRoIHJjPVZFUlJfT1BFTl9GQUlMRUQ=","type":"Ansi","source":"Runtime Data","process":"VBoxService.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"QmxhbmsgbG9va3VwIGRhdGEgZm9y","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"YkxvY2FsT25seQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Qm9sZENvbHVtbkhlYWRpbmdz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Qm9yZGVyV2lkdGg=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Qm94U2VydmljZS5leGU=","type":"Ansi","source":"Runtime Data","process":"VBoxService.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"QlAvQkFEe0NSfXtMRn0=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"YlByaW50Q3VycmVudFBhZ2VPbmx5","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QnJvd3NlclR5cGU=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"YlN5bmNFcnJvcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"YnRuRXhwb3J0","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QnVfbGQ3Nmls","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_8.png","compromised":null,"detection_total":null,"total":null},{"value":"QnlwYXNzSFRUUE5vQ2FjaGVDaGVjaw==","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"QnlwYXNzU1NMTm9DYWNoZUNoZWNr","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"YzpcY2Vuc2lzXGxhYmVsc1xsYWJlbHRlc3QuaXBs","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"YzpcbXkgZG9jdW1lbnRz","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"YzpcTXkgRG9jdW1lbnRz","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QzpcTXkgRG9jdW1lbnRzXA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"JVBST0dSQU1GSUxFUyVcKHg4NilcQ2Vuc2l0cmFjXFdCQ3VzdG9taXplci5kbGw=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"JVBST0dSQU1GSUxFUyVcKHg4NilcTWljcm9zb2Z0IFZpc3VhbCBTdHVkaW9cVkI5OFxpZWZyYW1lLm9jYQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"JVBST0dSQU1GSUxFUyVcKHg4NilcTWljcm9zb2Z0IFZpc3VhbCBTdHVkaW9cVkI5OFxWQjYuT0xC","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"JVdJTkRJUiVcU3lzV293NjRcTVNDT01NMzIub2Nh","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"JVdJTkRJUiVcU3lzV293NjRcTVNGTFhHUkQub2Nh","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"JVdJTkRJUiVcU3lzV09XNjRcbXNodG1sLnRsYg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"JVdJTkRJUiVcU3lzV09XNjRcbXN2YnZtNjAuZGxsXDM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2FiIEV4dHJhY3Q=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2FiIGZpbGUgbm90IGZvdW5kOg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2FjaGUgRW50cnkgRGVsZXRlZA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2FjaGUgUmVnIFNldHRpbmcgZmFpbGVkIDB4","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2FjaGVNb2Rl","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Y2FjbHMgIiVQUk9HUkFNRklMRVMlXCh4ODYpXENlbnNpdHJhYyIgL1QgL0UgL0MgL3AgIkJVSUxUSU5cVXNlcnMiOkY=","type":"Ansi","source":"Process Commandline","process":null,"filename":"cacls.exe","compromised":null,"detection_total":null,"total":null},{"value":"Y2FjbHMgIiVQUk9HUkFNRklMRVMlXCh4ODYpXENlbnNpdHJhYyIgL1QgL0UgL0MgL3AgIkRvbWFpblxEb21haW4gVXNlcnMiOkY=","type":"Ansi","source":"Process Commandline","process":null,"filename":"cacls.exe","compromised":null,"detection_total":null,"total":null},{"value":"Y2FjbHMuZXhl","type":"Unicode","source":"Runtime Data","process":"Censitrac.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q2FsY3VsYXRlUm93SGVpZ2h0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2FsbFdpbmRvd1Byb2NB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2FuY2VsIFN5bmM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2FuY2VsIHdhcyBzZWxlY3RlZA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2FuY2VsQnV0dG9u","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2FuY2VsRXJyb3I=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2FuY2VsbGVk","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2FuY2VsbGVkIEtleXN0cm9rZQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2FuY2VsbGluZy4uLg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2FwYWJpbGl0eQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2FwdGlvbkhlaWdodA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2FwdGlvbldJZHRo","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2F0ZWdvcnk=","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Y2JvQWRkcmVzcw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Y2JvRGF0YU1hdHJpeA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Y2JvTGFiZWxMYW5ndWFnZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Y2JvTWVkaWFUcmFja2luZw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Y2JvUHJpbnRlcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Y2JvUHJpbnRNb2Rl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Y2JvU2VyaWFsUG9ydA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q0VJUEVuYWJsZQ==","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Y2VsbEluZGV4","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2Vuc190cmFj","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_8.png","compromised":null,"detection_total":null,"total":null},{"value":"Q2Vuc2lzIENlbnRyYWwgU2VydmVy","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2Vuc2lzIFB1YmxpYyAx","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2Vuc2lzIFB1YmxpYyAy","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2Vuc2lzIFRlY2hub2xvZ2llcw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2Vuc2lzIFRlY2hub2xvZ2llcywgSW5j","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2Vuc2l0cmFj","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2Vuc2l0cmFjIGJ5IENlbnNpcyBUZWNobm9sb2dpZXM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2Vuc2l0cmFjIGRsbCB1cGdyYWRlIGZhaWxlZC4=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2Vuc2l0cmFjIEVuZC1Vc2VyIFdvcmtzdGF0aW9u","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2Vuc2l0cmFjIEhlbHAgaXMgYmVpbmcgdXBkYXRlZC4uLg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2Vuc2l0cmFjIGlzIGJlaW5nIHVwZGF0ZWQuLi4=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2Vuc2l0cmFjIExhYmVs","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2Vuc2l0cmFjIE9wdGlvbnM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2Vuc2l0cmFjIFBQQyBTZXR1cCBpcyBiZWluZyB1cGRhdGVkLi4u","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2Vuc2l0cmFjIFJlbW90ZSBUZXJtaW5hbA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2Vuc2l0cmFjIFJlcG9ydA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2Vuc2l0cmFjIFJlcG9ydCBFeHBvcnQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2Vuc2l0cmFjIFJlcG9ydGluZw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2Vuc2l0cmFjIHJlcXVpcmVzIGEgcHJpbnRlciwgYnV0IG5vIHByaW50ZXIgaXMgaW5zdGFsbGVkLiAgQ29udGFjdCBzdXBlcnZpc29yLg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2Vuc2l0cmFjIFN5bmMgQ29tcGxldGVkISEh","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2Vuc2l0cmFjIFRlc3QgU2NhbnM=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2Vuc2l0cmFjIHVwZ3JhZGUgZmFpbGVkLg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2Vuc2l0cmFjIFdvcmtzdGF0aW9u","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2Vuc2l0cmFjLmJtcA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2Vuc2l0cmFjLmJtcCwkKEFwcFBhdGgpLCxmYWxzZSxmYWxzZQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2Vuc2l0cmFjLmNhYg==","type":"Unicode","source":"Runtime Data","process":"Censitrac.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q2Vuc2l0cmFjLmRsbA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Y2Vuc2l0cmFjLmV4ZQ==","type":"Unicode","source":"Runtime Data","process":"censitrac.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q2Vuc2l0cmFjLmV4ZQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2Vuc2l0cmFjLmV4ZS5sbms=","type":"Unicode","source":"Runtime Data","process":"Censitrac.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Y2Vuc2l0cmFjLmh0bQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2Vuc2l0cmFjLmxuaw==","type":"Unicode","source":"Runtime Data","process":"Censitrac.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q2Vuc2l0cmFjX09ubGluZV9Vc2VyX01hbnVhbC5jaG0=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2Vuc2l0cmFjTG9va3Vw","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2Vuc2l0cmFjU2NhbnM=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2Vuc2l0cmFjU3BlZWNoIGluc3RhbGxlZA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2Vuc2l0cmFjU3BlZWNoIG1zaWV4ZWMgcmV0dXJuZWQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2Vuc2l0cmFjU3BlZWNoLm1zaQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2Vuc2l0cmFjU3luYy5kbGw=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2Vuc2l0cmFjU3luYy5kbGwsJChBcHBQYXRoKSxwYWxtLmV4ZSxmYWxzZSxmYWxzZQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2VudGVyRGlhbG9n","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2VudGVyRm9vdGVy","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2VudGVySGVhZGVy","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2VudGVySG9yaXpvbnRhbGx5","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2VudGVyVGl0bGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2VydENhY2hlTm9WYWxpZGF0ZQ==","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q2VydGlmaWNhdGVSZXZvY2F0aW9u","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q2hhck5leHRB","type":"Ansi","source":"Dropped File","process":null,"filename":"WBCustomizer.dll.3678178828","compromised":null,"detection_total":null,"total":null},{"value":"Q2hlY2tpbmcgQ2Vuc2l0cmFjIFBhbG0gU29mdHdhcmUgVmVyc2lvbg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2hlY2tTZXNzaW9u","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2hlY2tWZXJzaW9uSGVscA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2hlY2tWZXJzaW9uUFBDU2V0dXA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2hlY2tWZXJzaW9uUHJj","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2hpbGQgY2xhc3MgaXM=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Y2hpbGROb2Rlcw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Y2hrQXV0b0xhYmVsUHJpbnQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Y2hrRGlzYWJsZUVycm9yQmVlcA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Y2hrRGlzYWJsZVBkYQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Y2hrRGlzYWJsZVNwZWVjaA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Y2hrRGlzYWJsZVRvb2xUaXBz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Y2hrRGlzYWJsZVVwZ3JhZGVXYXJuaW5ncw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Y2hrRGlzcGxheUhvbWU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Y2hrRG14QmVlcA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Y2hrRG14RGVidWc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Y2hrTGFiZWxDYXB0aW9u","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Y2hrU2VyaWFsTG9n","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Y2hrU2l6aW5nRnJhbWU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Y2hrU29ydGVk","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2hvb3NlIENvbG9yIERpYWxvZyB3YXMgY2FuY2VsZWQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2hvb3NlQ29sb3JB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2hvb3NlRm9udEE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2hyIFRlc3Q=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2xlYXIgU3RhcnR1cCBTaXpl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2xlYXJpbmc=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2xpY2tEaWFsb2dCdXR0b24=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2xpZW50IFNvZnR3YXJlIFJlc291cmNlIHVwZGF0ZSBmYWlsZWQu","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2xpZW50QXV0aEJ1aWx0SW5VSQ==","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Y2xpZW50VmVyc2lvbg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Y2xpZW50VmVyc2lvbkNobQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Y2xpZW50VmVyc2lvbkRsbA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Y2xpZW50VmVyc2lvblByYw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2xvc2UgYWxsIGFwcGxpY2F0aW9ucyBhbmQgdHJ5IGFnYWluIG9yIGNvbnRhY3QgcHJvZHVjdCBzdXBwb3J0","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2xvc2UgYWxsIGFwcGxpY2F0aW9ucyBhbmQgdHJ5IGFnYWluLg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2xvc2UgYWxsIG90aGVyIGFwcGxpY2F0aW9ucyBhbmQgUmV0cnkgb3IgY29udGFjdCBQcm9kdWN0IFN1cHBvcnQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2xvc2VkIFNvY2tldCBUZXN0","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2xvc2VEbGcoRGxnQnRuMik=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2xvc2VIYW5kbGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2xvc2VQcmludGVy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Y2xvc2Vzb2NrZXQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2xvc2luZyBQcmV2aW91cyBJbnN0YW5jZQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2xyVXNlZDo=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q0xTSURcJXM=","type":"Ansi","source":"Dropped File","process":null,"filename":"msflxgrd.ocx.3900053644","compromised":null,"detection_total":null,"total":null},{"value":"Q0xTSURGcm9tU3RyaW5n","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Y2xzSW5ldENwcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Y2xzSW5ldENwci5HZXRNYWNBZGRy","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Y2xzV2ViU2luaw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Y21kQmFyY29kZVNjYW5uZXJEZWZhdWx0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Y21kQ2FuY2Vs","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Y21kQ2xlYXJQcmludGVy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Y21kQ29tbVJlZnJlc2g=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Y21kQ29uZmlybQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Y21kRGVsZXRl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Y21kUFBDU2V0dXA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Y21kUHJpbnRlclJlZnJlc2g=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Y21kUmVzdG9yZUhvbWU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Y21kU2F2ZUFkZHJlc3M=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Y21kU2F2ZUFz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Y21kU2F2ZVByaW50ZXI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Y21kU2VyaWFsQ21kVGVzdA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Y21kU2VyaWFsRGVmYXVsdHM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Y05DTWV0cmljcw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Y05ld0RpYWxvZw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q29DcmVhdGVJbnN0YW5jZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q29sb3JGbGFncw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q29sb3JUYWJsZTAw","type":"Unicode","source":"Runtime Data","process":"conhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29sb3JUYWJsZTAx","type":"Unicode","source":"Runtime Data","process":"conhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29sb3JUYWJsZTAy","type":"Unicode","source":"Runtime Data","process":"conhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29sb3JUYWJsZTAz","type":"Unicode","source":"Runtime Data","process":"conhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29sb3JUYWJsZTA0","type":"Unicode","source":"Runtime Data","process":"conhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29sb3JUYWJsZTA1","type":"Unicode","source":"Runtime Data","process":"conhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29sb3JUYWJsZTA2","type":"Unicode","source":"Runtime Data","process":"conhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29sb3JUYWJsZTA3","type":"Unicode","source":"Runtime Data","process":"conhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29sb3JUYWJsZTA4","type":"Unicode","source":"Runtime Data","process":"conhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29sb3JUYWJsZTA5","type":"Unicode","source":"Runtime Data","process":"conhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29sb3JUYWJsZTEw","type":"Unicode","source":"Runtime Data","process":"conhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29sb3JUYWJsZTEx","type":"Unicode","source":"Runtime Data","process":"conhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29sb3JUYWJsZTEy","type":"Unicode","source":"Runtime Data","process":"conhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29sb3JUYWJsZTEz","type":"Unicode","source":"Runtime Data","process":"conhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29sb3JUYWJsZTE0","type":"Unicode","source":"Runtime Data","process":"conhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29sb3JUYWJsZTE1","type":"Unicode","source":"Runtime Data","process":"conhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29sb3VyVHlwZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Y29sdW1uRGF0YXR5cGVz","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q29tK0VuYWJsZWQ=","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29tYmluZUZhbHNlU3RhcnREYXRh","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q09NRExHMzIuRExM","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Y29tbWFuZC5jb20gL2M=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q29tbURsZ0V4dGVuZGVkRXJyb3I=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q29tbWVyY2lhbERhdGFPcHRJbg==","type":"Unicode","source":"Runtime Data","process":"regsvr32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29tbW9uIEFwcERhdGE=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q29tbW9uIERlc2t0b3A=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q29tbW9uIFByb2dyYW1z","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q29tbW9uIFN0YXJ0IE1lbnU=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q29tbW9uIFN0YXJ0dXA=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q29tbW9uRmlsZXNEaXI=","type":"Unicode","source":"Runtime Data","process":"conhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29tbW9uRmlsZXNEaXIgKHg4Nik=","type":"Unicode","source":"Runtime Data","process":"conhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29tbW9uVzY0MzJEaXI=","type":"Unicode","source":"Runtime Data","process":"conhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29tcGFueU5hbWU=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q29tcGF0RGxs","type":"Unicode","source":"Runtime Data","process":"censitrac.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29tcGxldGVk","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q29tcHV0ZXI=","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_8.png","compromised":null,"detection_total":null,"total":null},{"value":"Q29tcHV0ZXJOYW1l","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29uZmlybWVk","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q29ubmVjdGVkIHN1Y2Nlc3NmdWxseQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q29ubmVjdGluZyB0byBSZW1vdGUgRGV2aWNlLi4u","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q29ubmVjdGluZyB0byBzb2NrZXQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q29ubmVjdGlvbiBjbG9zZWQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q29ubmVjdGlvbiBoYW5kbGUgdGVybWluYXRlZA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q29ubmVjdGlvbjogQ2xvc2U=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q29ubmVjdFJldHJpZXM=","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29ubmVjdFRpbWVPdXQ=","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29udGFjdCBDZW5zaXRyYWMgUHJvZHVjdCBTdXBwb3J0","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q29udGFjdCBwcm9kdWN0IHN1cHBvcnQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q29udGFjdCBQcm9kdWN0IFN1cHBvcnQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q29udGFjdCBwcm9kdWN0IHN1cHBvcnQu","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q29udGFjdCBQcm9kdWN0IFN1cHBvcnQuICBFcnJvciBudW1iZXI=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q29udGFjdCBQcm9kdWN0IFN1cHBvcnQ6","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q29udGFjdCBwcm9ncmFtbWVyOyBUaGUgZm9sbG93aW5nIGVycm9yIG9jY3VycmVkIHdoaWxlIGxvYWRpbmc6","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q29udGFpbmVycw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q29udGVudC1MZW5ndGg=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q29udGVudC1UeXBl","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q29udGVudC1UeXBlOiBhcHBsaWNhdGlvbi94LXd3dy1mb3JtLXVybGVuY29kZWQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q29udGVudExlbmd0aA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q29udGlub3VzIQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q29udmVydFRhZ3M=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q29weUZvbnRFbA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q29weVBvc2l0aW9uRWw=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q29weXJpZ2h0IChjKSAxOTk0","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q29UYXNrTWVtQWxsb2M=","type":"Ansi","source":"Dropped File","process":null,"filename":"WBCustomizer.dll.3678178828","compromised":null,"detection_total":null,"total":null},{"value":"Q29UYXNrTWVtRnJlZQ==","type":"Ansi","source":"Dropped File","process":null,"filename":"WBCustomizer.dll.3678178828","compromised":null,"detection_total":null,"total":null},{"value":"Q29UYXNrTWVtUmVhbGxvYw==","type":"Ansi","source":"Dropped File","process":null,"filename":"WBCustomizer.dll.3678178828","compromised":null,"detection_total":null,"total":null},{"value":"Q291bGQgbm90IGNvcHkgZXhlY3V0YWJsZSB0byBzdGFydCBpbnN0YWxsIHByb2Nlc3M7IENvbnRhY3QgcHJvZHVjdCBzdXBwb3J0","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q291bGQgbm90IGNyZWF0ZSBhcHBsaWNhdGlvbiBmb2xkZXIuICBNYWtlIHN1cmUgY3VycmVudCBsb2dvbiBoYXMgc3VmZmljaWVudCBhdXRob3JpdHkgdG8gaW5zdGFsbCBhcHBsaWNhdGlvbnMgb3IgY29udGFjdCBwcm9kdWN0IHN1cHBvcnQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q291bGQgbm90IGNyZWF0ZSBiYWNrdXAgb2YgY3VycmVudCB2ZXJzaW9uOyBDb250YWN0IHByb2R1Y3Qgc3VwcG9ydA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q291bnQsIEF2ZywgTWluLCBNYXg6","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q291bnRHcmlkUm93cw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q291bnRQYWdlcw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q3ByYXAgaGVhZGVyIG5vdCBmb3VuZA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlICZTcHJlYWRzaGVldA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlIFByb2Nlc3M=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlQml0bWFw","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlQ29tcGF0aWJsZUJpdG1hcA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlQ29tcGF0aWJsZURD","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlRGlyZWN0b3J5QQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlRm9udEluZGlyZWN0QQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlUHJvY2Vzc0E=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlUmVjdFJnbg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlUmVwb3J0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlUmVwb3J0T2xk","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlU29saWRCcnVzaA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlV2luZG93RXhB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q1QwMUowMDA1NQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q1QwMUowMDA1Ng==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q1QwMUowMDA1Nw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q1QwMUowMDA1OA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q1QwMUowMDA1OQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q1QwMUowMDA2MA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q1QwMUowMDA5OA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q1QwMUowMDA5OQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q1RTeXNCYWNrdXA=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q3VycmVudENoYWxsZW5nZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Y3VycmVudGx5Og==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Y3VycmVudFN0eWxl","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q3Vyc29yU2l6ZQ==","type":"Unicode","source":"Runtime Data","process":"conhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q3VzdG9tIEZvbnQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q3VzdG9tIFJlcG9ydA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q3VzdG9tQ29sb3I=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q3VzdG9tUHJpbnQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q3VzdG9tV0JfQWNjZWxlcmF0b3JLZXlEb3du","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q3VzdG9tV0JfU2hvd0NvbnRleHRNZW51","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q3VzdG9tV0JIZWxw","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q3VzdG9tV0JIZWxwX0FjY2VsZXJhdG9yS2V5RG93bg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q3VzdG9tV0JIZWxwX1Nob3dDb250ZXh0TWVudQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q1dESWxsZWdhbEluRExMU2VhcmNo","type":"Unicode","source":"Runtime Data","process":"censitrac.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Y3gofFJhPDli","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"ZDAsNTA7PEVUWD4=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"ZDAsNjA7PEVUWD4=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"ZDMsQ2Vuc2l0cmFjOzxFVFg+","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"REFUX0lNQUdFTkFUSVZFWEZFUiBGYWlsZWQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RGF0YUZpbGVQYXRo","type":"Unicode","source":"Runtime Data","process":"conhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"REFUQU1BVFJJWA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RGF0YU1hdHJpeFNpemU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RGF0YVNvdXJjZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"REFUQVZBTFVF","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RGVidWdCcmVhaw==","type":"Ansi","source":"Dropped File","process":null,"filename":"WBCustomizer.dll.3678178828","compromised":null,"detection_total":null,"total":null},{"value":"RGVjb2RlUXVlcnlTdHJpbmc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RGVmYXVsdCBUb29sIHRpbWU6","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RGVmYXVsdEFjY2Vzc1Blcm1pc3Npb24=","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGVmYXVsdENvbm5lY3Rpb25TZXR0aW5ncw==","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGVmYXVsdEV4dA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RGVsZXRlIHRoZSBzZWxlY3RlZCByb3cgaW4gdGhlIHNjYW4gbGlzdA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RGVsZXRlQ2FjaGVFbnRyeQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RGVsZXRlQ3JpdGljYWxTZWN0aW9u","type":"Ansi","source":"Dropped File","process":null,"filename":"WBCustomizer.dll.3678178828","compromised":null,"detection_total":null,"total":null},{"value":"RGVsZXRlaW5nIENhY2hlIEVudHJ5","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RGVsZXRlT2JqZWN0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RGVsZXRlVXJsQ2FjaGVFbnRyeUE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RGVzY3JpcHRpb24=","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGVzdHJveVdpbmRvdw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RGV2aWNlQWNxdWlyZQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RGV2aWNlTGlzdA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RGV2aWNlTmFtZQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RGV2aWNlUGF0aA==","type":"Unicode","source":"Runtime Data","process":"Censitrac.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGV2aWNlUXVhbGl0eQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RGV2aWNlU2VsZWN0","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RGlhbG9nIGZvdW5kOg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RGlhbG9nQ2xvc2U=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RGlhbG9nSG9vaw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RGlhbG9nVGl0bGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RGlhbHVwVXNlTGFuU2V0dGluZ3M=","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGlyZWN0VG9QcmludGVy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RGlzYWJsZSBFcnJvciBCZWVw","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RGlzYWJsZSBMYWJlbCBwcmludA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RGlzYWJsZSBQREEgU3VwcG9ydA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RGlzYWJsZSBTcGVlY2g=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RGlzYWJsZSBUb29sIFRpcHM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RGlzYWJsZSBVcGdyYWRlIFdhcm5pbmdz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RGlzYWJsZUJhc2ljT3ZlckNsZWFyQ2hhbm5lbA==","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGlzYWJsZUJyYW5jaENhY2hl","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGlzYWJsZUNhY2hpbmdPZlNTTFBhZ2Vz","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGlzYWJsZUVycm9yQmVlcA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RGlzYWJsZUZhbHNlU3RhcnRCbG9ja2xpc3Q=","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGlzYWJsZUtlZXBBbGl2ZQ==","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGlzYWJsZUxvY2FsT3ZlcnJpZGU=","type":"Unicode","source":"Runtime Data","process":"Censitrac.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGlzYWJsZU1ldGFGaWxlcw==","type":"Unicode","source":"Runtime Data","process":"censitrac.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGlzYWJsZU5UTE1QcmVBdXRo","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGlzYWJsZVJlYWRSYW5nZQ==","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGlzYWJsZVNvY2tldERpc2Nvbm5lY3Q=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RGlzYWJsZVNwZWVjaA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RGlzYWJsZVRocmVhZExpYnJhcnlDYWxscw==","type":"Ansi","source":"Dropped File","process":null,"filename":"WBCustomizer.dll.3678178828","compromised":null,"detection_total":null,"total":null},{"value":"RGlzYWJsZVRvb2xUaXBz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RGlzYWJsZVVwZ3JhZGVXYXJuaW5ncw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RGlzYWJsZVVzZXJNb2RlQ2FsbGJhY2tGaWx0ZXI=","type":"Unicode","source":"Runtime Data","process":"censitrac.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGlzY29ubmVjdA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RGlzY29ubmVjdFNvY2tldA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RGlzY29ubmVjdFNvY2tldCBGYWlsZWQgdG8gb2J0YWluIHNvY2tldCBoYW5kbGU=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RGlzcGF0Y2hNZXNzYWdlQQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RGlzcGxheSBIb21lIGluIFRpdGxlIEJhcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RGlzcGxheUhvbWU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RGlzcGxheU5hbWU=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RGlzcGxheVNjcmlwdERvd25sb2FkRmFpbHVyZVVJ","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGlzcGxheVN0cmluZw==","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGxsQ2FuVW5sb2FkTm93","type":"Ansi","source":"Dropped File","process":null,"filename":"WBCustomizer.dll.3678178828","compromised":null,"detection_total":null,"total":null},{"value":"RGxsRnVuY3Rpb25DYWxs","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RGxsR2V0Q2xhc3NPYmplY3Q=","type":"Ansi","source":"Dropped File","process":null,"filename":"WBCustomizer.dll.3678178828","compromised":null,"detection_total":null,"total":null},{"value":"RGxsSG9zdC5leGU=","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGxsUmVnaXN0ZXJTZXJ2ZXI=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RGxsU3Vycm9nYXRl","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGxsVW5yZWdpc3RlclNlcnZlcg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"ZG1PcmllbnRhdGlvbg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RE1TQ29tbUV2ZW50cw==","type":"Unicode","source":"Runtime Data","process":"regsvr32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RG14IEludGVydmFsIG11c3QgYmUgbnVtZXJpYw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RG14IFJlYWQgSW50ZXJ2YWwgKG1zKTo=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RG14IFNjYW5uZXI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RG14IFN1cGVybWFya2V0IFRpbWVvdXQgKG1zKTo=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RG14IFRpbWVvdXQgbXVzdCBiZSBudW1lcmlj","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RE14QXV0b0lE","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RE14QXV0b0lEKw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RG14SW50ZXJ2YWw=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RG14VGltZW91dA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RG5zQ2FjaGVFbmFibGVk","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RG5zQ2FjaGVFbnRyaWVz","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RG5zQ2FjaGVUaW1lb3V0","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RG8geW91IHdhbnQgdGhpcyBhcHBsaWNhdGlvbiB0byBzdGFydCBhdXRvbWF0aWNhbGx5Pw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RG8geW91IHdhbnQgdG8gb3ZlcndyaXRlPw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RG8geW91IHdhbnQgdG8gcmUtaW5zdGFsbCBub3c/","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RG8geW91IHdhbnQgdG8gcmVib290IG5vdz8=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RG8geW91IHdhbnQgdG8gc3RhcnQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RG9jRXJyb3JDaGVjayBiZ2NvbG9yOg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RG9jdW1lbnQ=","type":"Unicode","source":"Dropped File","process":null,"filename":"Censitrac.exe.2918306370","compromised":null,"detection_total":null,"total":null},{"value":"RG9jdW1lbnQgQ29tcGxldGU=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"ZG9jdW1lbnQuY29va2llID0gJ3drc3RuPScgKyBlc2NhcGUoJw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RG9jdW1lbnRQcm9wZXJ0aWVzQQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RG9udFVzZUROU0xvYWRCYWxhbmNpbmc=","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RG93bmxvYWQgYmVnaW4gZnJvbSB0aHJlYWQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RG93bmxvYWQgY29tcGxldGUgZnJvbSB0aHJlYWQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RG93bmxvYWQgSGVscGVyOg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RG93bmxvYWRpbmc=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"ZG93bmxvYWRpbmcgaGVscA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RG93bmxvYWRpbmcgUGFsbSBVcGdyYWRl","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RG93bmxvYWRpbmcgUmVzb3VyY2Vz","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RG93bmxvYWRpbmcgVXBncmFkZQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RG93bmxvYWRJbnN0YWxsRmlsZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RHJhd1RleHRB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RHJhd1RleHRFeEE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RFNNX0VudHJ5","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RHVvUHJvdG9jb2xz","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RHVwbGljYXRl","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RFdCQ3VzdG9taXplckV2ZW50cw==","type":"Unicode","source":"Runtime Data","process":"regsvr32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RW5hYmxlQW5jaG9yQ29udGV4dA==","type":"Unicode","source":"Runtime Data","process":"Censitrac.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RW5hYmxlQXV0b1Byb3h5UmVzdWx0Q2FjaGU=","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RW5hYmxlQ29sb3JTZWxlY3Rpb24=","type":"Unicode","source":"Runtime Data","process":"conhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RW5hYmxlRG14RGlhZ25vc3RpY0JlZXA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RW5hYmxlSHR0cDFfMQ==","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RW5hYmxlSHR0cFRyYWNl","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RW5hYmxlTGVnYWN5QXV0b1Byb3h5RmVhdHVyZXM=","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RW5hYmxlTmVnb3RpYXRl","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RW5hYmxlU3BkeURlYnVnQXNzZXJ0cw==","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RW5hYmxlV2luZG93","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RW5kRG9jUHJpbnRlcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RW5kUGFnZVByaW50ZXI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RW5mb3JjZVAzUFZhbGlkaXR5","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RW50ZXIgQ2Vuc2l0cmFjICdIb21lJyAoQnVmZmVyIE1hY2hpbmUgTmFtZTpQb3J0KQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RW50ZXIgZmlsZW5hbWUgYXMgaW5zdHJ1Y3RlZCBieSBQcm9kdWN0IFN1cHBvcnQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RW50ZXIgdGhlIG51bWJlciBvZiBjb3BpZXMgcmVxdWlyZWQ6","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RW50ZXJDcml0aWNhbFNlY3Rpb24=","type":"Ansi","source":"Dropped File","process":null,"filename":"WBCustomizer.dll.3678178828","compromised":null,"detection_total":null,"total":null},{"value":"ZW50cnkgcG9pbnQgbm90IGZvdW5k","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RW51bUNoaWxkV2luZG93cw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RW51bVByb3BzOg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RW51bVByb3BzQQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RW51bVRocmVhZFdpbmRvd3M=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RW51bVdpbmRvd3M=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RXF1aXBtZW50","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RXJyb3IgY2hhbmdpbmcgcHJpbnRlci4uLmN1cnJlbnQgcHJpbnRlciBpczo=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RXJyb3IgY3JlYXRpbmcgdGh1bWJuYWls","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RXJyb3IgRXh0cmFjdGluZyBDYWJpbmV0IFJlc291cmNlOg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RXJyb3IgaW4gQmVmb3JlTmF2aWdhdGU6","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RXJyb3IgaW4gRG9jdW1lbnRDb21wbGV0ZTo=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RXJyb3IgaW4gc2V0dXAsIGZpbGUgc2tpcHBlZDogZGVzdGluYXRpb24gZXhjZWVkcyBNQVhfUEFUSCBsZW5ndGg6","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RXJyb3IgaW4gc2V0dXAsIGZpbGUgc2tpcHBlZDogZmFpbGVkIHRvIGNyZWF0ZSBkZXN0aW5hdGlvbiBmb2xkZXI6","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RXJyb3IgaW4gc3RhcnQgdXAuLi5UaGUgYXBwbGljYXRpb24gaXMgbm90IHByb3Blcmx5IGluc3RhbGxlZC4=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RXJyb3IgaW4gU3RhdHVzVGV4dENoYW5nZTo=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RXJyb3IgaW4gV2luZG93Q2xvc2luZzo=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RXJyb3IgaW5zdGFsbGluZyBDZW5zaXRyYWNTcGVlY2ggd2l0aCBtc2kgYXV0b21hdGlvbjo=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RXJyb3IgaW5zdGFsbGluZyBDZW5zaXRyYWNTcGVlY2ggd2l0aCBtc2lleGVjOg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RXJyb3IgbG9hZGluZyBwaWN0dXJl","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RXJyb3IgT3BlbmluZyBTZXJpYWwgUG9ydA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RXJyb3Igc2V0dGluZyBMaW5nZXI=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RXJyb3IgU3luY1NoZWxsIGZhaWxlZCBmb3IgQ2Vuc2l0cmFjU3BlZWNoLm1zaSBjb21tYW5kIGxpbmU=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RXJyb3IgdHJ5aW5nIHRvIHdyaXRlIFN5c0JhY2t1cExvZzo=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RXJyb3Igd2hpbGUgdHJ5aW5nIHRvIHJlZHVjZSB0aGUgc2l6ZSBvZiB0aGUgc3luYyBsb2c6","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RXJyb3IsIGV4Y2VlZHMgTUFYX1BBVEg6","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RXJyb3IsIGZhaWxlZCB0byBjcmVhdGUgdGFyZ2V0IGZvbGRlcjo=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RXJyb3IsIFRyYW5zYWN0aW9uIG5vdCBjb25maXJtZWQgYnkgcGFnZQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RXJyb3I6IENhbm5vdCBwZXJmb3JtIGhvc3QtYmFzZWQgaW5zdGFsbHMgYmVjYXVzZSB0aGUgSG9tZSBhZGRyZXNzIGlzIGJsYW5r","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RXJyb3I6IENlbnNpdHJhYyBkbGwgdXBncmFkZSBub3QgaW5zdGFsbGVkIGJlY2F1c2UgdXNlciBsYWNrcyBmb2xkZXIgcGVybWlzc2lvbnM=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RXJyb3I6IENlbnNpdHJhYyB1cGdyYWRlIG5vdCBpbnN0YWxsZWQgYmVjYXVzZSB1c2VyIGxhY2tzIGZvbGRlciBwZXJtaXNzaW9ucw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RXJyb3I6IERldlBhdGggcmVxdWVzdGVkIGJ1dCBub3QgaW4gdGhlIGRldmVsb3BtZW50IGVudmlyb25tZW50","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RXJyb3I6IEhlbHAgREwgRmFpbGVkLA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RXJyb3I6IEhlbHAgaW52b2tlZCBidXQgZmlsZSBub3QgZm91bmQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RXJyb3I6IEhlbHAgdXBncmFkZSBmYWlsZWQgYmVjYXVzZSBjbGllbnRWZXJzaW9uQ2htIG5vdCBmb3VuZA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RXJyb3I6IFJlcG9ydCBFeHBvcnQgZmFpbGVkLg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RXJyb3I6IHdoaWxlIGRvd25sb2FkaW5n","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSFRUUF9DT09LSUVfREVDTElORUQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSFRUUF9DT09LSUVfTkVFRFNfQ09ORklSTUFUSU9O","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSFRUUF9ET1dOTEVWRUxfU0VSVkVS","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSFRUUF9IRUFERVJfQUxSRUFEWV9FWElTVFM=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSFRUUF9IRUFERVJfTk9UX0ZPVU5E","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSFRUUF9JTlZBTElEX0hFQURFUg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSFRUUF9JTlZBTElEX1FVRVJZX1JFUVVFU1Q=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSFRUUF9JTlZBTElEX1NFUlZFUl9SRVNQT05TRQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSFRUUF9OT1RfUkVESVJFQ1RFRA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSFRUUF9SRURJUkVDVF9GQUlMRUQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSFRUUF9SRURJUkVDVF9ORUVEU19DT05GSVJNQVRJT04=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfQVNZTkNfVEhSRUFEX0ZBSUxFRA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfQkFEX0FVVE9fUFJPWFlfU0NSSVBU","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfQkFEX09QVElPTl9MRU5HVEg=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfQkFEX1JFR0lTVFJZX1BBUkFNRVRFUg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfQ0FOTk9UX0NPTk5FQ1Q=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfQ0hHX1BPU1RfSVNfTk9OX1NFQ1VSRQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfQ0xJRU5UX0FVVEhfQ0VSVF9ORUVERUQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfQ0xJRU5UX0FVVEhfTk9UX1NFVFVQ","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfQ09OTkVDVElPTl9BQk9SVEVE","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfQ09OTkVDVElPTl9SRVNFVA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfRElBTE9HX1BFTkRJTkc=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfRElTQ09OTkVDVEVE","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfRVhURU5ERURfRVJST1I=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfRk9SQ0VfUkVUUlk=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfSEFORExFX0VYSVNUUw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfSFRUUF9UT19IVFRQU19PTl9SRURJUg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfSFRUUFNfSFRUUF9TVUJNSVRfUkVESVI=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfSFRUUFNfVE9fSFRUUF9PTl9SRURJUg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfSU5DT1JSRUNUX0ZPUk1BVA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfSU5DT1JSRUNUX0hBTkRMRV9TVEFURQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfSU5DT1JSRUNUX0hBTkRMRV9UWVBF","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfSU5DT1JSRUNUX1BBU1NXT1JE","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfSU5DT1JSRUNUX1VTRVJfTkFNRQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfSU5TRVJUX0NEUk9N","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfSU5URVJOQUxfRVJST1I=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfSU5WQUxJRF9DQQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfSU5WQUxJRF9PUEVSQVRJT04=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfSU5WQUxJRF9PUFRJT04=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfSU5WQUxJRF9QUk9YWV9SRVFVRVNU","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfSU5WQUxJRF9VUkw=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfSVRFTV9OT1RfRk9VTkQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfTE9HSU5fRkFJTFVSRQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfTUlYRURfU0VDVVJJVFk=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfTkFNRV9OT1RfUkVTT0xWRUQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfTkVFRF9VSQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfTk9fQ0FMTEJBQ0s=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfTk9fQ09OVEVYVA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfTk9fRElSRUNUX0FDQ0VTUw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfTk9UX1BST1hZX1JFUVVFU1Q=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfT1BFUkFUSU9OX0NBTkNFTExFRA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfT1BUSU9OX05PVF9TRVRUQUJMRQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfT1VUX09GX0hBTkRMRVM=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfUE9TVF9JU19OT05fU0VDVVJF","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfUFJPVE9DT0xfTk9UX0ZPVU5E","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfUFJPWFlfU0VSVkVSX1VOUkVBQ0hBQkxF","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfUkVESVJFQ1RfU0NIRU1FX0NIQU5HRQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfUkVHSVNUUllfVkFMVUVfTk9UX0ZPVU5E","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfUkVRVUVTVF9QRU5ESU5H","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfUkVUUllfRElBTE9H","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfU0VDX0NFUlRfQ05fSU5WQUxJRA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfU0VDX0NFUlRfREFURV9JTlZBTElE","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfU0VDX0NFUlRfUkVWT0tFRA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfU0VDX0lOVkFMSURfQ0VSVA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfU0VDVVJJVFlfQ0hBTk5FTF9FUlJPUg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfU0VSVkVSX1VOUkVBQ0hBQkxF","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfU0hVVERPV04=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfVENQSVBfTk9UX0lOU1RBTExFRA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfVElNRU9VVA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfVU5BQkxFX1RPX0NBQ0hFX0ZJTEU=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfVU5BQkxFX1RPX0RPV05MT0FEX1NDUklQVA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfVU5SRUNPR05JWkVEX1NDSEVNRQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RXJyb3JCZWVw","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RXJyb3JCZWVwRW5hYmxlZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RXJyb3JNZXNzYWdlRGl2","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVZFTlRfU0lOS19BZGRSZWY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVZFTlRfU0lOS19HZXRJRHNPZk5hbWVz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVZFTlRfU0lOS19JbnZva2U=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVZFTlRfU0lOS19RdWVyeUludGVyZmFjZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVZFTlRfU0lOS19SZWxlYXNl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RXhjZWwgU3ByZWFkc2hlZXQgKCoueGxzKXwqLnhsc3xUYWItRGVsaW1pdGVkIFNwcmVhZHNoZWV0ICgqLnR4dCl8Ki50eHR8Q29tbWEtU2VwYXJhdGVkIFNwcmVhZHNoZWV0ICgqLmNzdil8Ki5jc3Y=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RXhjZWwuQXBwbGljYXRpb24=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"ZXhlY1NjcmlwdA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RXhlY1NjcmlwdEFsbEZyYW1lcw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RXhpdEFwcC5hc3A=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RXhpdFdpbmRvd3NFeA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RXhwb3J0IGZhaWxlZC4=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RXhwb3J0UmVwb3J0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RXhwb3J0UmVwb3J0Q2xpY2tlZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RXh0ZW5kZWRFZGl0S2V5","type":"Unicode","source":"Runtime Data","process":"conhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RXh0ZW5kZWRFZGl0a2V5Q3VzdG9t","type":"Unicode","source":"Runtime Data","process":"conhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RXh0cmFJbmZv","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"ZjdPNi9XbEpzMQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RmFpbGVkIGZvcg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RmFpbGVkIHRvIGNoYW5nZSBkZWZhdWx0IHByaW50ZXIgaW4gUHJpbnRSZXBvcnQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RmFpbGVkIHRvIGNyZWF0ZSBTaGVsbCBvYmplY3QgaW4gUHJpbnRSZXBvcnQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RmFpbGVkIHRvIGNyZWF0ZSBzaG9ydGN1dCBpbg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RmFpbGVkIHRvIGNyZWF0ZSBzaG9ydGN1dCBpbiBDb21tb24gRGVza3RvcCBmb2xkZXI=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RmFpbGVkIHRvIGNyZWF0ZSBzaG9ydGN1dCBpbiBTdGFydCBNZW51","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RmFpbGVkIHRvIGNyZWF0ZSBzaG9ydGN1dCBpbiBTdGFydHVwIGZvbGRlcg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RmFpbGVkIHRvIGNyZWF0ZSBTeXN0ZW0gQmFja3VwIEZvbGRlcg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RmFpbGVkIHRvIGxvYWQgQ2Vuc2l0cmFjU3luYy5kbGw=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RmFpbGVkIHRvIHJlYWNoIENlbnNpdHJhYyBzZXJ2ZXIuICBQbGVhc2UgY29udGFjdCBQcm9kdWN0IFN1cHBvcnQu","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RmFpbGVkIHRvIHNhdmUgc2V0dGluZ3M=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"ZmFpbGVkIHRvIHNldCBzeXN0ZW0gcGFyYW1ldGVycw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RiVXSU5ESVIlXFN5c1dPVzY0XHN0ZG9sZTIudGxi","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RkVBVFVSRV9DTElFTlRBVVRIQ0VSVEZJTFRFUg==","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RmlsZSBFcnJvcjo=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RmlsZSBpbiBVc2U=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RmlsZSBJbiBVc2U6","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RmlsZSBNb3Zl","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RmlsZSBNb3ZlIGNlbnNpdHJhYy5leGUgIHRvICVQUk9HUkFNRklMRVMlXCh4ODYpXENlbnNpdHJhY1xDZW5zaXRyYWMuZXhlIHN0YXJ0ZWQgNjQ5ODIuNyBTdWNjZXNzIDY0OTgyLjg1","type":"Ansi","source":"Dropped File","process":null,"filename":"Install.log","compromised":null,"detection_total":null,"total":null},{"value":"RmlsZSBNb3ZlIERlbGV0ZQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RmlsZSBub3QgZm91bmQsIGNoZWNrIHlvdXIgdHlwaW5n","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RmlsZSBOb3QgRm91bmQ6","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RmlsZUNoYW5nZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RmlsZUZsYWdz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RmlsZUxpbmtWYWxpZA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RmlsZVRpdGxl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RmlsZVZlcnNpb24=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RmlsdGVySW5kZXg=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RmluZFJlc291cmNlQQ==","type":"Ansi","source":"Dropped File","process":null,"filename":"WBCustomizer.dll.3678178828","compromised":null,"detection_total":null,"total":null},{"value":"RmluZFdpbmRvd0E=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"ZmluZ2VycHJpbnQuZGxs","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Rmlwc0FsZ29yaXRobVBvbGljeQ==","type":"Unicode","source":"Runtime Data","process":"censitrac.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Rml0VG9QYWdlc1RhbGw=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Rml0VG9QYWdlc1dpZGU=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Rm9sZGVyQ2hhbmdl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Rm9sZGVyVHlwZUlE","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Rm9udCBTbW9vdGhpbmcgb3B0aW9uIG5vdCBmb3VuZC4gIEluc3RhbGwgdGhlIFBsdXMgUGFjayBhbmQgZW5hYmxlIHRoZSBGb250IFNtb290aGluZyBkaXNwbGF5IHByb3BlcnR5IGZvciBiZXN0IHJlc3VsdHMu","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Rm9udCBTbW9vdGhpbmcgUmVnIGZhaWxlZCAweA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Rm9udENoYW5nZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Rm9udENvbG9y","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Rm9udEZhbWlseQ==","type":"Unicode","source":"Runtime Data","process":"conhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Zm9udEZhbWlseQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Rm9udEZsYWdz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Rm9udEl0YWxpYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Rm9udE1heFNpemU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Rm9udE1pblNpemU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Rm9udFNpemU=","type":"Unicode","source":"Runtime Data","process":"conhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Zm9udFN0eWxl","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Zm9udFdlaWdodA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Rm9udFdlaWdodA==","type":"Unicode","source":"Runtime Data","process":"conhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Rm9yY2VDb21wbGV0ZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Rm9yY2VSZW1vdmU=","type":"Ansi","source":"Dropped File","process":null,"filename":"WBCustomizer.dll.3678178828","compromised":null,"detection_total":null,"total":null},{"value":"Rm9yZUNvbG9y","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Rm9ybSBLZXkgRG93bjo=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Rm9ybSBLZXkgVXA6","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Rm9ybWF0TWVzc2FnZUE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"ZnJhTG9hZGluZw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RnJhbWVNZXJnaW5n","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RnJhbWVUYWJXaW5kb3c=","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RnJlZUxpYnJhcnk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"ZnJtQXBwQWRkcmVzcw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"ZnJtTXNnYm94","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"ZnJtUHJpbnRpbmc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"ZnJtUHJvZ3Jlc3M=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"ZnJtUmVwb3J0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"ZnJtU2NhblNpbXVsYXRvcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"ZnJtU2VyaWFsTG9n","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"ZnJtU3luY0NvbmZpcm0=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"ZnJtV2ViQnJvd3Nlcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"ZnJvbSB0aHJlYWQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RnJvbUNhY2hlVGltZW91dA==","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RnRjIENvbm5lY3RlZA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RnRjIERpc2Nvbm5lY3RlZA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RnRjIEVycm9yOg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RnRjIE9wZW4gRmFpbGVkOg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RnRjRGF0YWJhc2VEZWxldGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RnRjRGF0YWJhc2VSZWFk","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RnRjRGF0YWJhc2VXcml0ZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RnRjRGJJbmZv","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RnRjREJMaXN0RW50cmllc0NvdW50","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RnRjREJMaXN0RW50cmllc0dldA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RnRjREJMaXN0TG9hZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RnRjSXNDb25uZWN0ZWQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RnRjTXNnV3JpdGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RnRjUmVjb3JkRGVsZXRl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RnRjUmVjb3JkUmVhZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RnRjUmVjb3JkV3JpdGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RnRjUmVzZXRDb25uZWN0aW9u","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RnRjU2Vzc2lvbkVuZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RnRjU3lzdGVtSW5mb1JlYWQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RnRjVHJhbnNhY3Rpb25SZWFk","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RnRwRGVmYXVsdEV4cGlyeVRpbWVTZWNz","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RnVsbHNjcmVlbg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"ZnVuY3Rpb24gZmFpbGVk","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R0RJKyBNb2R1bGU=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2RpcEJpdG1hcFNldFJlc29sdXRpb24=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2RpcENyZWF0ZUJpdG1hcEZyb21HZGlEaWI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2RpcENyZWF0ZUJpdG1hcEZyb21HZGlEaWIgRmFpbGVk","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2RpcENyZWF0ZUJpdG1hcEZyb21IQklUTUFQ","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2RpcENyZWF0ZUJpdG1hcEZyb21IQklUTUFQIEZhaWxlZA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2RpcENyZWF0ZUJpdG1hcEZyb21ISUNPTg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2RpcENyZWF0ZUZyb21IREM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2RpcENyZWF0ZU1ldGFmaWxlRnJvbUVtZg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2RpcENyZWF0ZU1ldGFmaWxlRnJvbVdtZg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2RpcERlbGV0ZUdyYXBoaWNz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2RpcERpc3Bvc2VJbWFnZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2RpcERyYXdJbWFnZVJlY3RJ","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2RpcERyYXdJbWFnZVJlY3RSZWN0SQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2RpcEdldEltYWdlRW5jb2RlcnM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2RpcEdldEltYWdlRW5jb2RlcnNTaXpl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2RpcEdldEltYWdlSGVpZ2h0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2RpcEdldEltYWdlUmF3Rm9ybWF0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2RpcEdldEltYWdlVGh1bWJuYWls","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2RpcEdldEltYWdlV2lkdGg=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2RpcEltYWdlUm90YXRlRmxpcA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2RpcExvYWRJbWFnZUZyb21GaWxl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Z2RpcGx1cy5kbGw=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2RpcGx1c1NodXRkb3du","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2RpcGx1c1N0YXJ0dXA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2RpcFJvdGF0ZVdvcmxkVHJhbnNmb3Jt","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2RpcFNhdmVJbWFnZVRvRmlsZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2RpcFNldEludGVycG9sYXRpb25Nb2Rl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0QWJzb2x1dGVQb3NpdGlvbkVs","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0QWN0aXZlRnJhbWVEb2M=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0QWN0aXZlRnJhbWVEb2NOYW1l","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0QWN0aXZlRnJhbWVXaW5kb3c=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0Q2FwdHVyZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0Q2xhc3NOYW1lQQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0Q2xpZW50UmVjdA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0Q29tbWFuZExpbmVB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0Q29tcHV0ZXJOYW1lQQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0Q3VycmVudFByb2Nlc3NJZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0Q3VycmVudFRocmVhZElk","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RGVza3RvcFdpbmRvdw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RGV2aWNlQ2Fwcw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RGlhbG9nQnV0dG9u","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RGlzcERvYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RGlzcEZyYW1l","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RGlzcEZyYW1lTmFtZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RGlzcFVybA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RGlzcFdpbmRvdw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RGxnQ3RybElE","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RGxnSXRlbQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RGxnSXRlbUludA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RGxnSXRlbVRleHRB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RG9jT2Jq","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RG9jVGV4dA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RG9jVGl0bGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Z2V0RWxlbWVudHNCeVRhZ05hbWU=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RXhpdENvZGVQcm9jZXNz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RmlsZVZlcnNpb25JbmZvQQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RmlsZVZlcnNpb25JbmZvU2l6ZUE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0Rm9yZWdyb3VuZFdpbmRvdw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0SGVhZGVy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0S2V5U3RhdGU=","type":"Ansi","source":"Dropped File","process":null,"filename":"WBCustomizer.dll.3678178828","compromised":null,"detection_total":null,"total":null},{"value":"R2V0TGFzdEVycm9y","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0TG9va3Vwcygn","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0TWFwTW9kZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0TWVudUl0ZW1Db3VudA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0TWVudUl0ZW1JRA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0TWVudVN0YXRl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0TWVudVN0cmluZ0E=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0TWVzc2FnZUE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0TWV0cmljcw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0TW9kdWxlRmlsZU5hbWVB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0TW9kdWxlSGFuZGxlQQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0T3BlbkZpbGVOYW1lQQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0UGFnZURvYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0UGFyZW50","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0UHJvY0FkZHJlc3M=","type":"Ansi","source":"Dropped File","process":null,"filename":"WBCustomizer.dll.3678178828","compromised":null,"detection_total":null,"total":null},{"value":"R2V0UHJvY2Vzc0hlYXA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0U2F2ZUZpbGVOYW1lQQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0U2hvcnRQYXRoTmFtZUE=","type":"Ansi","source":"Dropped File","process":null,"filename":"WBCustomizer.dll.3678178828","compromised":null,"detection_total":null,"total":null},{"value":"R2V0U3ViTWVudQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0U3lzQ29sb3I=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0U3lzdGVtRGlyZWN0b3J5QQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0U3lzdGVtSW5mbw==","type":"Ansi","source":"Dropped File","process":null,"filename":"WBCustomizer.dll.3678178828","compromised":null,"detection_total":null,"total":null},{"value":"R2V0U3lzdGVtTWVudQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0U3lzdGVtTWV0cmljcw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0VGFibGVDbGlw","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0VGFibGVGb3JtYXRTdHJpbmc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0VGFibGVSb3dDbGlw","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0VGVtcEZpbGVOYW1lQQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0VGVtcFBhdGhB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0VGV4dEV4dGVudEV4UG9pbnRB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0VHJhbnNhY3Rpb25FcnJvcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0VXJsQ2FjaGVFbnRyeUluZm9B","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0VmVyc2lvbg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0VmVyc2lvbkV4QQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0V2luZG93","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0V2luZG93TG9uZ0E=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0V2luZG93TW9kdWxlRmlsZU5hbWVB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0V2luZG93UGxhY2VtZW50","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0V2luZG93UmVjdA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0V2luZG93VGV4dEE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0V2luZG93VGhyZWFkUHJvY2Vzc0lk","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2lwQWN0aXZpdHlCeXBhc3M=","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"R2xvYmFsQWxsb2M=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2xvYmFsRnJlZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2xvYmFsTG9jaw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2xvYmFsU2Vzc2lvbg==","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"R2xvYmFsU2l6ZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2xvYmFsVW5sb2Nr","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Z290byBsb29w","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Z3JkUmVwb3J0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Z3JkUmVwb3J0Mg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R3JpZCBGb250IEhlaWdodDo=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Z3JpZF9jb2xvcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R3JpZEV4cGFuZFJvdw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R3JpZFNxdWVlemVDb2x1bW4=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R3JpZFRvdGFsQ29sV2lkdGg=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Z3RsZC1zZXJ2ZXJz","type":"Ansi","source":"PCAP Processing","process":null,"filename":"network.pcap","compromised":null,"detection_total":null,"total":null},{"value":"Z3Vlc3RzZXNzaW9uIC0tc2Vzc2lvbi1pZD0yIC0tc2Vzc2lvbi1wcm90bz0yIC0tdXNlciAlT1NVU0VSJQ==","type":"Ansi","source":"Process Commandline","process":null,"filename":"VBoxService.exe","compromised":null,"detection_total":null,"total":null},{"value":"aCx7IGpMbnxY","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SEFQVUJXUy1QQw==","type":"Ansi","source":"PCAP Processing","process":null,"filename":"network.pcap","compromised":null,"detection_total":null,"total":null},{"value":"aENvbm5lY3Rpb24=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SGVhZGVyQmVlcA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SGVhZGVyRXhjbHVzaW9uTGlzdEZvckNhY2hl","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SGVhZGVySGVscENtZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SGVhZGVySGVscENvbnRyb2w=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SGVhZGVySGVscENvbnRyb2wudmFsdWU9Z2V0QWN0aXZlRnJhbWUoKS5pZA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SGVhZGVyUHJpbnQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SGVhZGVyUHJpbnRDb250cm9s","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SGVhcEFsbG9j","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SGVhcENyZWF0ZQ==","type":"Ansi","source":"Dropped File","process":null,"filename":"WBCustomizer.dll.3678178828","compromised":null,"detection_total":null,"total":null},{"value":"SGVhcERlc3Ryb3k=","type":"Ansi","source":"Dropped File","process":null,"filename":"WBCustomizer.dll.3678178828","compromised":null,"detection_total":null,"total":null},{"value":"SGVhcFJlQWxsb2M=","type":"Ansi","source":"Dropped File","process":null,"filename":"WBCustomizer.dll.3678178828","compromised":null,"detection_total":null,"total":null},{"value":"SGVscCBDaHVuaw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SEVMUCBDbG9zaW5n","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SEVMUCBDbG9zaW5nOg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SGVscCBEb2N1bWVudCBDb21wbGV0ZQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SEVMUCBHb0JhY2s=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SGVscCBTdGFydCBDb21wbGV0ZTo=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SEVMUCBTdGFydDo=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SGVscGVyRGxsTmFtZQ==","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"aGVscEZyYW1l","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SGlkZUxvYWRpbmc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SGlzdG9yeUJ1ZmZlclNpemU=","type":"Unicode","source":"Runtime Data","process":"conhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SGlzdG9yeU5vRHVw","type":"Unicode","source":"Runtime Data","process":"conhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SGl0IEFsdCtUYWIgdGhlbiBIaXQgYW55IGtleSB0byB1cGdyYWRlIENlbnNpdHJhYw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SGl0IGFueSBrZXkgdG8gY2xvc2UgdGhlIGFwcGxpY2F0aW9u","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SGl0IFJldHJ5OyBpZiBlcnJvciBjb250aW51ZXMgY29udGFjdCBwcm9kdWN0IHN1cHBvcnQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"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","type":"Ansi","source":"Dropped File","process":null,"filename":"WBCustomizer.dll.3678178828","compromised":null,"detection_total":null,"total":null},{"value":"SEtFWV9DTEFTU0VTX1JPT1Q=","type":"Ansi","source":"Dropped File","process":null,"filename":"WBCustomizer.dll.3678178828","compromised":null,"detection_total":null,"total":null},{"value":"SEtFWV9DVVJSRU5UX0NPTkZJRw==","type":"Ansi","source":"Dropped File","process":null,"filename":"WBCustomizer.dll.3678178828","compromised":null,"detection_total":null,"total":null},{"value":"SEtFWV9DVVJSRU5UX1VTRVI=","type":"Ansi","source":"Dropped File","process":null,"filename":"WBCustomizer.dll.3678178828","compromised":null,"detection_total":null,"total":null},{"value":"SEtFWV9EWU5fREFUQQ==","type":"Ansi","source":"Dropped File","process":null,"filename":"WBCustomizer.dll.3678178828","compromised":null,"detection_total":null,"total":null},{"value":"SEtFWV9MT0NBTF9NQUNISU5F","type":"Ansi","source":"Dropped File","process":null,"filename":"WBCustomizer.dll.3678178828","compromised":null,"detection_total":null,"total":null},{"value":"SEtFWV9QRVJGT1JNQU5DRV9EQVRB","type":"Ansi","source":"Dropped File","process":null,"filename":"WBCustomizer.dll.3678178828","compromised":null,"detection_total":null,"total":null},{"value":"SEtFWV9VU0VSUw==","type":"Ansi","source":"Dropped File","process":null,"filename":"WBCustomizer.dll.3678178828","compromised":null,"detection_total":null,"total":null},{"value":"aG9tZS5pbmksJChBcHBQYXRoKSwsZmFsc2UsZmFsc2U=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SG9tZUluZGV4","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SG9tZU92ZXJyaWRl","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SHRtbEVzY2FwZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SFRUUCA0MDMuOQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SFRUUCByZWRpcmVjdGVk","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"aHR0cDovL2ViaGJ1ZmZlcg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SHR0cERlZmF1bHRFeHBpcnlUaW1lU2Vjcw==","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SHR0cEVuZFJlcXVlc3RB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SHR0cE9wZW5SZXF1ZXN0QQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SHR0cFF1ZXJ5SW5mb0E=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SHR0cFNlbmRSZXF1ZXN0QQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SHR0cFNlbmRSZXF1ZXN0RXhB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SWRuRW5hYmxlZA==","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SUUgZm91bmQ6","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SUUgSG9va2VkIQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"aWVmcmFtZS5kbGw=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"aUV0RXRVTWNjRjk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"aWYgRVJST1JMRVZFTCAxIGdvdG8gbG9vcA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"aWYgRVhJU1Q=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"aWYodHlwZW9mKHNjYW5uZXJfY2hhbmdlUHJlZml4KSE9J3VuZGVmaW5lZCcpc2Nhbm5lcl9jaGFuZ2VQcmVmaXgoJw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"aWYodHlwZW9mKHNjYW5uZXJfc2Nhbm5lZElEKSE9J3VuZGVmaW5lZCcpIHNjYW5uZXJfc2Nhbm5lZElEKCc=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"aWYodHlwZW9mKFpvb20pIT0ndW5kZWZpbmVkJykgWm9vbSgn","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"aUZvbnRTaXpl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SWdub3JlQ2VydENB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SWdub3JlQ2VydENO","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SW1hZ2UgUGF0aA==","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SW1hZ2UgUXVhbGl0eSBtdXN0IGJlIG51bWVyaWM=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SW1hZ2UgUXVhbGl0eSByYW5nZSBpcyAxLTEwMA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SW1hZ2UgU2F2ZWQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SW1hZ2UgU2NhbiBRdWFsaXR5Og==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"aW1hZ2UvanBlZw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SW1hZ2VGaWxlTmFtZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SW1hZ2VOYW1l","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SW1hZ2VRdWFsaXR5","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SW1wbGVtZW50ZWQgQ2F0ZWdvcmllcw==","type":"Ansi","source":"Dropped File","process":null,"filename":"msflxgrd.ocx.3900053644","compromised":null,"detection_total":null,"total":null},{"value":"SW1wbGllZCAvcyBEZXRlY3RlZCwgYXBwIGFscmVhZHkgZXhpc3Rz","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SW1wbGllZCAvcyBEZXRlY3RlZCwgb3RoZXIgaW5zdGFuY2UgZGV0ZWN0ZWQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SW5jcmVtZW50","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SW5ldEhlbHBUaW1lcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SW5pdERpYWxvZw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SW5pdEZvbGRlckhhbmRsZXI=","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SW5pdGlhbGl6ZUNyaXRpY2FsU2VjdGlvbg==","type":"Ansi","source":"Dropped File","process":null,"filename":"WBCustomizer.dll.3678178828","compromised":null,"detection_total":null,"total":null},{"value":"aW5uZXJIVE1M","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"aW5uZXJUZXh0","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SW5wcm9jU2VydmVyMzI=","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SW5zZXJ0TW9kZQ==","type":"Unicode","source":"Runtime Data","process":"conhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SW5zdEFpZGUuZGxs","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"aW5zdGFpZGUuZGxs","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SW5zdGFsbCBjZW5zaXRyYWMuZXhlICAgMS4xLjIzOCA0LzQvMjAxOCA2OjAzOjAyIFBNICg2NDk4Mi42OCk=","type":"Ansi","source":"Dropped File","process":null,"filename":"Install.log","compromised":null,"detection_total":null,"total":null},{"value":"SW5zdGFsbCBjZW5zaXRyYWMuZXhlICAgMS4xLjIzOCA0LzQvMjAxOCA2OjAzOjAyIFBNICg2NDk4Mi42OCljZW5zaXRyYWMuZXhlIFBoYXNlIEkgKENvcHkgdG8gSW5zdGFsbGVkQXBwUGF0aClGaWxlIE1vdmUgY2Vuc2l0cmFjLmV4ZSAgdG8gJVBST0dSQU1GSUxFUyVcKHg4NilcQ2Vuc2l0cmFjXENlbnNpdHJhYy5leGUgc3RhcnRlZCA2NDk4Mi43IFN1Y2Nlc3MgNjQ5ODIuODU=","type":"Ansi","source":"Runtime Data","process":"censitrac.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SW5zdGFsbCBmYWlsZWQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SW5zdGFsbCBmYWlsZWQgYW5kIGFwcGxpY2F0aW9uIG1heSBiZSBwYXJ0aWFsbHkgaW5zdGFsbGVk","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SW5zdGFsbCBmYWlsZWQgZm9y","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SW5zdGFsbCBGYWlsZWQgb24gQ2FiaW5ldCBFeHRyYWN0aW9uIGZvciB0aGUgZm9sbG93aW5nIGZpbGU6","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SW5zdGFsbCBmYWlsZWQsIGNvdWxkIG5vdCBjb3B5IGV4ZWN1dGFibGUgdG8gSW5zdGFsbGVkQXBwUGF0aA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SW5zdGFsbCBGYWlsZWQsIHVua25vd24gQ2FiaW5ldCBFeHRyYWN0aW9uIGVycm9y","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SW5zdGFsbCBTdWNjZWVkZWQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SW5zdGFsbC5sb2c=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SW5zdGFsbC50bXA=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"aW5zdGFsbC9DZW5zaXRyYWMuZGxs","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"aW5zdGFsbC9DZW5zaXRyYWMuZXhl","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"aW5zdGFsbC9DZW5zaXRyYWMucHJj","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"aW5zdGFsbC9DZW5zaXRyYWNfT25saW5lX1VzZXJfTWFudWFsLmNobQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"aW5zdGFsbC9QUENTZXR1cC5leGU=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SW5zdGFsbGVk","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SW5zdGFsbGVkLg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SW5zdGFsbGVyTG9jYXRpb24=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SW5zdGFsbGluZw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SW5zdGFsbGluZyBTeXN0ZW0gRmlsZQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SW5zdEJhcmNvZGVQcmludC5hc3A=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SW5zdE1zaUEuZXhl","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SW5zdE1zaVcuZXhl","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SW5zdHJ1bWVudHM=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJhY3RpdmU=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SW50ZXJsb2NrZWREZWNyZW1lbnQ=","type":"Ansi","source":"Dropped File","process":null,"filename":"WBCustomizer.dll.3678178828","compromised":null,"detection_total":null,"total":null},{"value":"SW50ZXJsb2NrZWRJbmNyZW1lbnQ=","type":"Ansi","source":"Dropped File","process":null,"filename":"WBCustomizer.dll.3678178828","compromised":null,"detection_total":null,"total":null},{"value":"SW50ZXJuYWxOYW1l","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SW50ZXJuZXQgRXhwbG9yZXJfU2VydmVy","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SW50ZXJuZXQgSW5mb3JtYXRpb24gU2VydmljZXM=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SW50ZXJuZXRDbG9zZUhhbmRsZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SW50ZXJuZXRDb25uZWN0QQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SW50ZXJuZXRDcmFja1VybEE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SW50ZXJuZXRDcmVhdGVVcmxB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SW50ZXJuZXRFcnJvckRsZw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SW50ZXJuZXRPcGVuQQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SW50ZXJuZXRPcGVuVXJsQQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SW50ZXJuZXRRdWVyeURhdGFBdmFpbGFibGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SW50ZXJuZXRRdWVyeU9wdGlvbkE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SW50ZXJuZXRSZWFkRmlsZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SW50ZXJuZXRSZWFkRmlsZUV4QQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SW50ZXJuZXRTZXRGaWxlUG9pbnRlcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SW50ZXJuZXRTZXRPcHRpb24gZmFpbGVkIHdpdGggMHg=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SW50ZXJuZXRTZXRPcHRpb25B","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SW50ZXJuZXRTZXRTdGF0dXNDYWxsYmFjaw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SW52YWxpZCBBcmd1bWVudHM=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SW52YWxpZCBkYXRhIHdhcyByZWNlaXZlZCBvbiB0aGUgc2Nhbm5lciBzZXJpYWwgcG9ydC4gIENoZWNrIHRvIG1ha2Ugc3VyZSB0aGUgYmF1ZCByYXRlIGFuZCBvdGhlciBzZXJpYWwgc2V0dGluZ3MgYXJlIGNvcnJlY3QuICg=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SW52YWxpZCBEZWxheSwgbXVzdCBiZSBpbnRlZ2Vy","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SW52YWxpZCBTZXJpYWwgU2V0dGluZ3M=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SW52YWxpZCBUcmFuc2FjdGlvbiBEZWxldGVkLi4u","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SVAgYWRkcmVzcyBmb3VuZA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SXNDb25uZWN0ZWQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SXNEQkNTTGVhZEJ5dGU=","type":"Ansi","source":"Dropped File","process":null,"filename":"WBCustomizer.dll.3678178828","compromised":null,"detection_total":null,"total":null},{"value":"SVZWM3pAZTQuIg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SVdCQ3VzdG9taXplcg==","type":"Unicode","source":"Runtime Data","process":"regsvr32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"S2VlcEFsaXZl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"S2VlcEFsaXZlVGltZW91dA==","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"S0VSTkVMMzIuZGxs","type":"Ansi","source":"Dropped File","process":null,"filename":"WBCustomizer.dll.3678178828","compromised":null,"detection_total":null,"total":null},{"value":"a2VybmVsMzIuZGxs","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TGFiZWwgRGF0YSBNYXRyaXg6","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TGFiZWwgSGVhZGVyIGJpdG1hcCBmaWxlIG5vdCBmb3VuZDo=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TGFiZWwgSGVpZ2h0IG11c3QgYmUgbnVtZXJpYw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TGFiZWwgTGVmdCBBZGp1c3Q6","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TGFiZWwgTGVmdCBBZGp1c3RtZW50IG11c3QgYmUgbnVtZXJpYw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TGFiZWwgUHJpbnQgQ29waWVz","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TGFiZWwgUHJpbnQgTW9kZTo=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TGFiZWwgU2VudCB0byBQcmludGVy","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TGFiZWwgU2l6ZSAoaW5jaGVzKTo=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TGFiZWwgVG9wIEFkanVzdDo=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TGFiZWwgVG9wIEFkanVzdG1lbnQgbXVzdCBiZSBudW1lcmlj","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TGFiZWwgV2lkdGggbXVzdCBiZSBudW1lcmlj","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TGFiZWxDYXB0aW9u","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TGFiZWxDb3BpZXM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TGFiZWxDb3BpZXNQcm9tcHQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TGFiZWxIZWlnaHQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TGFiZWxMYW5ndWFnZQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TGFiZWxMZWZ0","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"bGFiZWxQcmV2aWV3SUQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TGFiZWxQcmludA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TGFiZWxQcmludGVy","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TGFiZWxQcmludFByZXZpZXc=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TGFiZWxUb3A=","type":"Unicode","source":"Hybrid Analysis","process":"Censitrac.exe","filename":"00017318-00004372.00000001.19558.00400000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"TGFiZWxXaWR0aA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"bGFuZHNjYXBl","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TGFzdEVycm9y","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TGFzdEVycm9yTXNn","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TGF1bmNoUGVybWlzc2lvbg==","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"bGJsQ29ybmVy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"bGJsSGVhZGVy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"bGJsTG9hZGluZw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"bGJsU3RhdHVz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TGVhc2hMZWdhY3lDb29raWVz","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TGVhdmVDcml0aWNhbFNlY3Rpb24=","type":"Ansi","source":"Dropped File","process":null,"filename":"WBCustomizer.dll.3678178828","compromised":null,"detection_total":null,"total":null},{"value":"bGVmdE1hcmdpbg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TGVnYWN5QXV0aGVudGljYXRpb25MZXZlbA==","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TGVnYWN5SW1wZXJzb25hdGlvbkxldmVs","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TGVnYWxDb3B5cmlnaHQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TGlicmFyeVBhdGg=","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TG9hZCBMaWJyYXJ5IGZhaWxlZA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TG9hZEFwcEluaXRfRExMcw==","type":"Unicode","source":"Runtime Data","process":"censitrac.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TG9hZENvbkltZQ==","type":"Unicode","source":"Runtime Data","process":"conhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TG9hZEh0bWxNc2c=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TG9hZGluZy4uLg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TG9hZExpYnJhcnlB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TG9hZExpYnJhcnlFeEE=","type":"Ansi","source":"Dropped File","process":null,"filename":"WBCustomizer.dll.3678178828","compromised":null,"detection_total":null,"total":null},{"value":"TG9hZFByaW50ZXJz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TG9hZFJlc291cmNl","type":"Ansi","source":"Dropped File","process":null,"filename":"WBCustomizer.dll.3678178828","compromised":null,"detection_total":null,"total":null},{"value":"TG9hZFVzZXJTZXR0aW5ncw==","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TG9jYWxGaWxlVGltZVRvRmlsZVRpbWU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TG9jYWxpemVkTmFtZQ==","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TG9jYWxSZWRpcmVjdE9ubHk=","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TG9jYWxTZXJ2aWNl","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TG9jYXRpb25z","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TG9jYXRpb25VUkw=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TG9ja1dpbmRvd1VwZGF0ZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TG9nTWF4RmlsZVNpemU=","type":"Unicode","source":"Runtime Data","process":"Censitrac.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"bG9nb3V0LmFzcA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"bHN0TWFya2Vycw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"bHN0cmNtcGlB","type":"Ansi","source":"Dropped File","process":null,"filename":"WBCustomizer.dll.3678178828","compromised":null,"detection_total":null,"total":null},{"value":"bHN0cmNweUE=","type":"Ansi","source":"Dropped File","process":null,"filename":"WBCustomizer.dll.3678178828","compromised":null,"detection_total":null,"total":null},{"value":"bHN0cmNweW5B","type":"Ansi","source":"Dropped File","process":null,"filename":"WBCustomizer.dll.3678178828","compromised":null,"detection_total":null,"total":null},{"value":"bHN0UmVjZW50RmlsZXM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TWFjaGluZUd1aWQ=","type":"Unicode","source":"Runtime Data","process":"censitrac.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWFjaGluZVByZWZlcnJlZFVJTGFuZ3VhZ2Vz","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWFrZSBzdXJlIHRoaXMgZGxsIGlzIGxvY2F0ZWQgaW4gdGhlIHNhbWUgZGlyZWN0b3J5IGFzIHRoZSAuZXhlOg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TWFrZUNzdkNlbGw=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TWFrZVNlY3VyZVVybA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TWFya2VycyBhcmUgcm93cyB0aGF0IGJlZ2luIHdpdGggdGhlIHBvdW5kIHNpZ24gIyBmb3IgZWFzeSBtb3ZlbWVudCB0byBhIHNwb3QgaW4gdGhlIGxpc3Q=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TWF4Q29ubmVjdGlvbnNQZXIxXzBTZXJ2ZXI=","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWF4Q29ubmVjdGlvbnNQZXJQcm94eQ==","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWF4Q29ubmVjdGlvbnNQZXJTZXJ2ZXI=","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWF4SHR0cFJlZGlyZWN0cw==","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWF4UnBjU2l6ZQ==","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWF4U29ja2FkZHJMZW5ndGg=","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWF4U3hTSGFzaENvdW50","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TUJDU0FQSWZvckNyYWNr","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TUJDU1NlcnZlcm5hbWU=","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"bURpYWxvZ0hvb2s=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TWVkaWFUcmFja2luZw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TWVudUhlaWdodA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"bWVudUxvYWRpbmc=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"bWVudUxvYWRpbmcuc3R5bGUudmlzaWJpbGl0eSA9ICdoaWRkZW4nOyBtZW51Q29udGVudFJlc2l6ZSgp","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TWVudVdpZHRo","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TWV0aG9kTmVlZHNSZWY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TWljcm9zb2Z0IENvbW0gQ29udHJvbCA2LjA=","type":"Unicode","source":"Runtime Data","process":"regsvr32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWljcm9zb2Z0IFdlYkJyb3dzZXIgQ3VzdG9taXplciBTYW1wbGUgT2JqZWN0","type":"Unicode","source":"Runtime Data","process":"regsvr32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWljcm9zb2Z0IFhQUyBEb2N1bWVudCBXcml0ZXI=","type":"Unicode","source":"Runtime Data","process":"Censitrac.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWlncmF0ZWQgb2xkIGFwcCBzZXR0aW5ncw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TWlncmF0ZWQgb2xkIGhvbWUgc2V0dGluZzo=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TWltZUV4Y2x1c2lvbkxpc3RGb3JDYWNoZQ==","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWluU29ja2FkZHJMZW5ndGg=","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWlzY1N0YXR1cw==","type":"Ansi","source":"Dropped File","process":null,"filename":"msflxgrd.ocx.3900053644","compromised":null,"detection_total":null,"total":null},{"value":"bWl6ZXIgTW9kdWxl","type":"Unicode","source":"Dropped File","process":null,"filename":"WBCustomizer.dll.3678178828","compromised":null,"detection_total":null,"total":null},{"value":"bW1tIGQsIHl5eXkgaDpObiBBTS9QTQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"bW51Q2xlYXJTdGFydHVwU2l6ZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"bW51Q3VycmVudFBhZ2U=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"bW51Rmlyc3RQYWdl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"bW51TGFzdFBhZ2U=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"bW51TmV4dFBhZ2U=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"bW51UGFnZUNvdW50","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"bW51UGFnZVNldHVw","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"bW51UHJldmlldw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"bW51UHJldlBhZ2U=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"bW51UHJpbnRBbGw=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"bW51UHJpbnRDdXJyZW50","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"bW51UHJpbnRTcHJlYWRzaGVldA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"bW51U2V0dXBQcmludGVy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"bW51U2l6ZUl0ZW0=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"bW51U3BhY2Uy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"bW51U3BhY2Uz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"bW51U3BhY2U0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"bW51U3BhY2U1","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"bW9kQ2Vuc2l0cmFjU3luYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"bW9kR0RJUGx1c1Jlc2l6ZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"bW9kTXNnUHVtcA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"bW9kU2hlbGxMaW5r","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"bW9kV2ViQnJvd3Nlcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"bW9kWmVicmFQcmludA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TW92ZVdpbmRvdw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TW92aW5nIGJldHdlZW4gc2VjdXJlIGFuZCBub25zZWN1cmUgc2l0ZQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TVMgU2FucyBTZXJpZg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TVNDb21tIEV2ZW50Og==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TVNDb21tIEhhcmR3YXJlIFByb3BlcnR5IFBhZ2UgT2JqZWN0","type":"Unicode","source":"Runtime Data","process":"regsvr32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"bXNjb21tMzIub2N4","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TVNDT01NMzIuT0NY","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"bXNjb21tMzIub2N4LCQoV2luU3lzUGF0aCksLHRydWUsZmFsc2U=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TVNDb21tTGli","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TVNDb21tTGliLk1TQ29tbQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TVNGbGV4R3JpZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TVNGbGV4R3JpZExpYg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TVNGbGV4R3JpZExpYi5NU0ZsZXhHcmlk","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TVNGTFhHUkQuT0NY","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"bXNmbHhncmQub2N4","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"bXNmbHhncmQub2N4LCQoV2luU3lzUGF0aCksLHRydWUsZmFsc2U=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TVNHX0RJU0FCTEVEUyBGYWlsZWQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TVNHX0VORFhGRVIgRmFpbGVk","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TVNJIG5vdCBmb3VuZA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TVNJIHZlcnNpb24gaXMgdG9vIG9sZDo=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"bXNpZXhlYyAvaSAi","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TVNWQlZNNjAuRExM","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TXVsdGlCeXRlVG9XaWRlQ2hhcg==","type":"Ansi","source":"Dropped File","process":null,"filename":"WBCustomizer.dll.3678178828","compromised":null,"detection_total":null,"total":null},{"value":"TXkgUGljdHVyZXM=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TmFtZVNwYWNlX0NhbGxvdXQ=","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TmF2aWdhdGUgQ29tcGxldGUgZnJvbSB0aHJlYWQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TmF2aWdhdGUy","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TmRyT2xlRXh0RExM","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TmVnb3RpYXRl","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"bmV0YXBpMzIuZGxs","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TmV0Ymlvc05hbWVMb29rdXA=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TmV0Ymlvc05hbWVMb29rdXAgRmFpbGVk","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TmV3IGNsc1dlYlNpbmsgYWRkZWQgZm9yIGZyYW1l","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TmV3IGNvbm5lY3Rpb24gaGFuZGxlIGNyZWF0ZWQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TmV3IFNpdGUgQWRkcmVzczo=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TmV3Q2hhbGxlbmdl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TmV3ZXIgdmVyc2lvbiBvZiBDZW5zaXRyYWMgd2FzIGZvdW5kIG9uIHNlcnZlciwgYnV0IG5vdCBpbnN0YWxsZWQgYmVjYXVzZSB5b3UgbGFjayBmb2xkZXIgcGVybWlzc2lvbnMgdG8gQ2Vuc2l0cmFjLg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TmV4dF9DYXRhbG9nX0VudHJ5X0lE","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Tm8gTWV0aG9kIFNwZWNpZmllZA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Tm8gTmV0d29yayBBZGFwdGVycyBmb3VuZA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Tm8gU2NyaXB0IGZvdW5kIG9uIHRoaXMgcGFnZQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Tm9DaGVja0F1dG9kaWFsT3ZlclJpZGU=","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"bm9kZVZhbHVl","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Tm90IGEgdmFsaWQgYml0bWFwIGZpbGU6","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"bm90IGNvbm5lY3RlZA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Tm90IEV4aXN0cw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Tm90IEluc3RhbGxpbmcgU3lzdGVtIEZpbGUgZHVlIHRvIHByZXZpb3VzIGVycm9y","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Tm90IFVwZ3JhZGluZyBTeXN0ZW0gRmlsZQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"blBhZ2VDb3VudA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TnVtX0NhdGFsb2dfRW50cmllczY0","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TnVtYmVyIG9mIENvcGllcyBtdXN0IGJlIG51bWVyaWM=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TnVtYmVyIG9mIENvcGllczo=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TnVtYmVyT2ZIaXN0b3J5QnVmZmVycw==","type":"Unicode","source":"Runtime Data","process":"conhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"blZpcnRFeHRLZXk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"b2JqTWV0aG9k","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"b2NjdXJyZWQgd2hpbGUgaW5zdGFsbGluZyBDZW5zaXRyYWNTcGVlY2g=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"b0NlbnRlclRv","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"b2Zmc2V0SGVpZ2h0","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"b2Zmc2V0TGVmdA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"b2Zmc2V0UGFyZW50","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"b2Zmc2V0VG9w","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"b2Zmc2V0V2lkdGg=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"T0xFIEVycm9y","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"b2xlMzIuZGxs","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"b2xlYXV0MzIuZGxs","type":"Ansi","source":"Dropped File","process":null,"filename":"WBCustomizer.dll.3678178828","compromised":null,"detection_total":null,"total":null},{"value":"T0xFQVVUMzIuZGxs","type":"Ansi","source":"Dropped File","process":null,"filename":"WBCustomizer.dll.3678178828","compromised":null,"detection_total":null,"total":null},{"value":"T2xlQ3JlYXRlUGljdHVyZUluZGlyZWN0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"b2xlcHJvMzIuZGxs","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"b24gRnJhbWU=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"T25seSBIVFRQIFVybCdzIGNhbiBiZSBoYW5kbGVkIGJ5IHRoaXMgZnVuY3Rpb24=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"b25wcm9wZXJ0eWNoYW5nZQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"T25Tb2NrZXRDbG9zZWQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"T25Tb2NrZXRDb25uZWN0ZWQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"T09CRUluUHJvZ3Jlc3M=","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"T3BlbiBTb2NrZXQgVGVzdA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"T3BlblByaW50ZXJB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"T3BlblNlcmlhbA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"T3BlblVybEV4","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"T3BlblVybFJlcXVlc3Q=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"T3BlblVSTFRvRmlsZUFzeW5j","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"T3BlblVybFRvRmlsZUFzeW5jIENvbXBsZXRlLCBFbGFwc2VkIChzZWNvbmRzKSwgTWF4L01pbiBCdWZmU2l6ZSB3YXM=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"T3BlblVSTFRvRmlsZUFzeW5jUmVhZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"T3BlblVybFRvRmlsZUJ1c3k=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"T3BlblVybFRvRmlsZUNhbmNlbA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"T3BlblVybFRvRmlsZVByb2dyZXNz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"b3B0SW5zZXJ0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"b3B0UmVwbGFjZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"b3B0U2VyaWFs","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"b3JpZW50YXRpb24=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"T3JpZW50YXRpb24=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"T3JpZ2luYWxGaWxlbmFtZQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"b3V0ZXJIVE1M","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"b3duZXJGb3Jt","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"cDFLfFZ8SXxV","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UGFja2VkQ2F0YWxvZ0l0ZW0=","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UGFnZSAmUCBvZiAmTg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UGFnZUFsbG9jYXRvclN5c3RlbUhlYXBJc1ByaXZhdGU=","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UGFnZUFsbG9jYXRvclVzZVN5c3RlbUhlYXA=","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"cGFnZUZyYW1l","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UGFnZUhlaWdodA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UGFnZUxvYWRCdXN5","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UGFnZVByZXZpZXc=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UGFnZVByaW50","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UGFnZVNldHVw","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UGFnZVNldHVwRGxnQQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UGFpbnRQaWN0dXJl","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UGFsbSBIb3RTeW5jIFJlcXVpcmVkLiAgQ29udGFjdCBQcm9kdWN0IFN1cHBvcnQu","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UGFsbSBJbnN0YWxsIEVycm9y","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UGFsbSBJbnN0YWxsIGZhaWxlZCBmb3I=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UGFsbSBJbnN0YWxsIEZpbGUgRXJyb3I=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UGFsbSBJbnN0YWxsIEZpbGUgRXJyb3IgTWFzayBub3QgU2V0","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UGFsbSB1cGdyYWRlIGZhaWxlZC4=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UGFyZW50Rm9sZGVy","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"cGFyZW50V2luZG93","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UGFyc2VIZWxwVXJs","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UGFyc2luZ05hbWU=","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UERBRGlzYWJsZQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UGRhRW5hYmxlZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UEU9a0h0M3xj","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UGVla01lc3NhZ2VB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UGVyZm9ybWluZyBQYWxtIEhvdFN5bmMgdG8gdXBkYXRlIHRoZSBzb2Z0d2FyZQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UGhhc2UgSSAoQ29weSB0byBJbnN0YWxsZWRBcHBQYXRoKQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UGhhc2UgSUkgKEluc3RhbGwp","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"cGljUHJldmlldw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UGxlYXNlIHZlcmlmeSB0aGUgY29ycmVjdCBzZXR0aW5ncyBmb3IgeW91ciBzZXJpYWwgKFJTMjMyKSBTY2FubmVy","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UGx0R2V0VXNlcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UGx0R2V0VXNlckNvdW50","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UGx0R2V0VXNlckRpcmVjdG9yeQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UGx0SW5zdGFsbEZpbGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UGx0SXNJbnN0YWxsTWFza1NldA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UG9ja2V0IFBDIFNldHVwIFNvZnR3YXJlIHVwZGF0ZSBmYWlsZWQu","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UG9sYXIgV2FyZSBDdXN0YXJkIEN1cA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UG9wdXBDb2xvcnM=","type":"Unicode","source":"Runtime Data","process":"conhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UG9zdE1lc3NhZ2VB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UFBDIFNldHVw","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UFBDIFNldHVwIHVwZ3JhZGUgZmFpbGVkLg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UFBDU2V0dXAuZXhl","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UHJlJnZpZXcgTW9kZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UHJlQ29ubmVjdExpbWl0","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJlQ3JlYXRl","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJlZmVyRXh0ZXJuYWxNYW5pZmVzdA==","type":"Unicode","source":"Runtime Data","process":"Censitrac.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJlZmVycmVkU2VydmVyQml0bmVzcw==","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJlZmVycmVkVUlMYW5ndWFnZXM=","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJlUmVzb2x2ZUxpbWl0","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJldmlld1BhZ2U=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UHJpbnQgJkN1cnJlbnQgUGFnZSBPbmx5","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UHJpbnQgQmFyY29kZSBDYXB0aW9u","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UHJpbnQgU2l6aW5nIEZyYW1l","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UHJpbnQgdG8gU3ByZWFkc2hlZXQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UHJpbnREbGdB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UHJpbnREb2N1bWVudA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UHJpbnRlciBFcnJvcg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UHJpbnRlckFwcENvbGxhdGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UHJpbnRlckFwcENvcGllcw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UHJpbnRlckNvcGllcw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UHJpbnRlckZyb21QYWdl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UHJpbnRlck5hbWU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UHJpbnRlck9yaWVudGF0aW9u","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UHJpbnRlclN1cHBvcnRzQ29sbGF0aW9u","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UHJpbnRlclRvUGFnZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UHJpbnRHcmlkUGFnZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UHJpbnRHcmlkUm93cw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UHJpbnRNb2Rl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UHJpbnRQYWdl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UHJpbnRSZXBvcnQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UHJpbnRUaXRsZVJvd3M=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UHJpbnRUb0ZpbGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UHJpdmF0ZUtleUxpZmV0aW1lU2Vjb25kcw==","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJpdktleUNhY2hlTWF4SXRlbXM=","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJpdktleUNhY2hlUHVyZ2VJbnRlcnZhbFNlY29uZHM=","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJvY2Vzc2luZyBUcmFuc2FjdGlvbiBkYXRlZA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UHJvZHVjdCBTdXBwb3J0","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UHJvZHVjdE5hbWU=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UHJvZHVjdHM=","type":"Unicode","source":"Dropped File","process":null,"filename":"Censitrac.exe.2918306370","compromised":null,"detection_total":null,"total":null},{"value":"UHJvZHVjdFZlcnNpb24=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UHJvZmlsZXNcQWxsIFVzZXJzXEFwcGxpY2F0aW9uIERhdGE=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UHJvZ3JhbSBGaWxlcyAoeDg2KQ==","type":"Unicode","source":"Runtime Data","process":"Censitrac.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJvZ3JhbUZpbGVzRGly","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UHJvZ3JhbUZpbGVzRGlyICh4ODYp","type":"Unicode","source":"Runtime Data","process":"conhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJvZ3JhbW1lciBlcnJvcjogdW5zdXBwb3J0ZWQgdmFsdWUgdHlwZSBpbiBTZXRSZWdpc3RyeVZhbHVlOg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UHJvZ3JhbVc2NDMyRGly","type":"Unicode","source":"Runtime Data","process":"conhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJvdmlkZXJJZA==","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJvdmlkZXJJbmZv","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJveHkgZGV0ZWN0ZWQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UHJveHlIdHRwMS4x","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJveHlTZXR0aW5nc1BlclVzZXI=","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UFQwL0NvbW11bmljYXRpb24vSW50ZXJmYWNlcy9JbnB1dC9QcmVzZW50YXRpb24gbW9kZTpmYWxzZXtDUn17TEZ9e1JDfVBTMA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UFQwL0NvbW11bmljYXRpb24vSW50ZXJmYWNlcy9JbnB1dC9QcmVzZW50YXRpb24gbW9kZTp0cnVle0NSfXtMRn17UkN9UFM4","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UHVibGlzaEV4cGFuZGVkUGF0aA==","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UWleYV5lXm1eYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UXVlcnlTdGF0dXNXQg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UXVpY2tFZGl0","type":"Unicode","source":"Runtime Data","process":"conhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UmFpc2VEZWZhdWx0QXV0aG5MZXZlbA==","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UmVfY2xlODFu","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_8.png","compromised":null,"detection_total":null,"total":null},{"value":"UmVhZGluZyBDZW5zaXRyYWMgU2NhbnM=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVhZHlTdGF0ZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVib290IEluaXRpYXRlZA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVib290IHJlcXVpcmVkIGJ1dCBkZWZlcnJlZCBieSB1c2Vy","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVib290IHJlcXVpcmVkIGJ1dCBkZWZlcnJlZCBkdWUgdG8gc2lsZW50IGluc3RhbGwgc3dpdGNo","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVib290IFJlcXVpcmVkIGZvciBDZW5zaXRyYWNTcGVlY2g=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVib290IFJlcXVpcmVkIGZvciBNU0k=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVjZWl2ZVRpbWVPdXQ=","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UmVjZW50IEZpbGVzOg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVjaWV2ZWQgaW50ZXJtZWRpYXRlIHN0YXR1cw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVnQ2xvc2VLZXk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVnQ3JlYXRlS2V5RXhB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVnRGVsZXRlS2V5QQ==","type":"Ansi","source":"Dropped File","process":null,"filename":"WBCustomizer.dll.3678178828","compromised":null,"detection_total":null,"total":null},{"value":"UmVnRGVsZXRlVmFsdWVB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVnRW51bUtleUV4QQ==","type":"Ansi","source":"Dropped File","process":null,"filename":"WBCustomizer.dll.3678178828","compromised":null,"detection_total":null,"total":null},{"value":"UmVnRW51bVZhbHVlQQ==","type":"Ansi","source":"Dropped File","process":null,"filename":"WBCustomizer.dll.3678178828","compromised":null,"detection_total":null,"total":null},{"value":"UmVnaXN0cnkgZXJyb3I6IHVuc3VwcG9ydGVkIHZhbHVlIHR5cGUgaW4gR2V0UmVnaXN0cnlWYWx1ZTo=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVnT3BlbktleUV4QQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVnUXVlcnlJbmZvS2V5QQ==","type":"Ansi","source":"Dropped File","process":null,"filename":"WBCustomizer.dll.3678178828","compromised":null,"detection_total":null,"total":null},{"value":"UmVnUXVlcnlWYWx1ZUV4QQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVnU2V0VmFsdWVFeEE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"cmVnc3ZyMzIgLXMgLWM=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"cmVnc3ZyMzIgLXMgLWMgIiVQUk9HUkFNRklMRVMlXCh4ODYpXENlbnNpdHJhY1xXQkN1c3RvbWl6ZXIuZGxsIg==","type":"Ansi","source":"Process Commandline","process":null,"filename":"regsvr32.exe","compromised":null,"detection_total":null,"total":null},{"value":"cmVnc3ZyMzIgLXMgLWMgIiVXSU5ESVIlXHN5c3RlbTMyXG1zY29tbTMyLm9jeCI=","type":"Ansi","source":"Process Commandline","process":null,"filename":"regsvr32.exe","compromised":null,"detection_total":null,"total":null},{"value":"cmVnc3ZyMzIgLXMgLWMgIiVXSU5ESVIlXHN5c3RlbTMyXG1zZmx4Z3JkLm9jeCI=","type":"Ansi","source":"Process Commandline","process":null,"filename":"regsvr32.exe","compromised":null,"detection_total":null,"total":null},{"value":"cmVnc3ZyMzIgLXUgLXMgLWM=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVnU3ZyMzIgcmV0dXJuZWQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"cmVnc3ZyMzIuZXhl","type":"Unicode","source":"Runtime Data","process":"Censitrac.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UmVsYXRpdmVQYXRo","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UmVsb2FkQWRkcmVzcw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVtb3RlIERldmljZSBEaXNjb25uZWN0ZWQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVtb3RlUnBjRGxs","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UmVtb3RlU2NyaXB0UmVxdWVzdA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVtb3RlU2NyaXB0UmVxdWVzdCB0aHJlYWQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVtb3RlU2VydmVyTmFtZQ==","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UmVtb3ZlRGlyZWN0b3J5QQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"cmVwbGFjZWQgd2l0aA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVwb3J0IHNhdmVkIHRvIHRoZSBmb2xsb3dpbmcgc3ByZWFkc2hlZXQgZmlsZTo=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"cmVwb3J0X3dpZHRo","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"cmVwb3J0Qm9keQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVwb3J0SGVhZGVy","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVwb3J0TGlzdA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVwb3J0T3B0aW9ucw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVwb3J0UHJldmlldw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVwb3J0UHJpbnQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVwb3J0U3R5bGU=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVwb3J0VGFibGU=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVwb3J0VGl0bGU=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVwb3J0V2lkdGg=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVxdWVzdENvbm5lY3RlZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVxdWVzdElk","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVxdWVzdFRpbWVvdXQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"cmVzOi8vKi9uYXZjYW5jbC5odG0q","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"cmVzZXR0aW5nIFVTQiBjb25uZWN0aW9u","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"cmVzaXplIGVycm9y","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVzaXplUmVwb3J0R3JpZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVzb2x1dGlvbg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVzb2x2aW5nIElQIGFkZHJlc3M=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVzcG9uc2VDb2Rl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVzcG9uc2VJbmZv","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVzcG9uc2VUcnVuY2F0ZWQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVzcG9uc2VUcnVuY2F0ZWRTdHJpbmc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVzdG9yZSBIb21l","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVzdG9yaW5nIFByaW9yIFZlcnNpb24gKENvcHkgdG8gSW5zdGFsbGVkQXBwUGF0aCk=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmV0cmlldmluZw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmV0cmlldmluZyBUcmFuc2FjdGlvbi4uLg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmV0cnkgb3IgbWFudWFsbHkgZGVsZXRlIHRoaXMgZmlsZQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmV0cnkgb3IgbWFudWFsbHkgZGVsZXRlIHRoaXMgZmlsZSBsYXRlcg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"cmV0dXJuIGNvZGUgaXM=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"cmlnaHRNYXJnaW4=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Uk9URmxhZ3M=","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UnNDbWQgRXJyb3I6IGJhZCBwRGlzcCwgcnNkYXRhIG5vdCBmb3VuZA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UnNDbWQgcmVjZWl2ZWQgZm9y","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"cnNkYXRhIEF0dGFjaGVk","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"cnNkYXRhIG5vdCBmb3VuZA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UlNGU0JfQ29tcGxldGU=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UnRsTW92ZU1lbW9yeQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UnRsWmVyb01lbW9yeQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UnVuLXRpbWUgZXJyb3I=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2FmZURsbFNlYXJjaE1vZGU=","type":"Unicode","source":"Runtime Data","process":"censitrac.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2FmZVByb2Nlc3NTZWFyY2hNb2Rl","type":"Unicode","source":"Runtime Data","process":"censitrac.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2F2ZSBIb21l","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2F2ZXMgdGhlIGN1cnJlbnQgc2l0ZSBhZGRyZXNzIGFzIHRoZSBob21lIGFkZHJlc3MgdGhhdCBpcyB1c2VkIG9uIHN0YXJ0dXA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2F2ZVN0YXRzLmFzcA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2NhbGVIZWlnaHQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2NhbGVXaWR0aA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2NhbiBFbmFibGVk","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2NhbiBTZW5kIEVycm9yOg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2NhbiBTaW11bGF0b3I=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2NhbkVuYWJsZWQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"c2Nhbm5lcl9zY2FubmVkSUQoJw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"c2Nhbm5lckNvbnRyb2w=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2Nhbm5lclJlc2V0","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2Nhbm5lclR5cGU=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2NhblR3YWlu","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2NhdmVuZ2VDYWNoZUZpbGVMaWZlVGltZQ==","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2NhdmVuZ2VDYWNoZUZpbGVMaW1pdA==","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2NhdmVuZ2VDYWNoZUxvd2VyQm91bmQ=","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2NyZWVuQnVmZmVyU2l6ZQ==","type":"Unicode","source":"Runtime Data","process":"conhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2NyZWVuQ29sb3Jz","type":"Unicode","source":"Runtime Data","process":"conhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2NyZWVuVG9DbGllbnQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"c2NyaXB0aW9u","type":"Unicode","source":"Dropped File","process":null,"filename":"WBCustomizer.dll.3678178828","compromised":null,"detection_total":null,"total":null},{"value":"U2Nyb2xsYmFyU2l6ZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2Nyb2xsSGVpZ2h0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2Nyb2xsV2lkdGg=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2VjdXJlUHJvdG9jb2xz","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2VjdXJpdHk=","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2VjdXJpdHlfSEtMTV9vbmx5","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2VsZWN0IGEgc3RhcnRpbmcgcG9pbnQgaW4gdGhlIGxpc3Q=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2VsZWN0Q2xpcFJnbg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2VsZWN0T2JqZWN0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2VuZCBzY2FucyBjb250aW51b3VzbHkgdW50aWwgcmVhY2hpbmcgYSBub24tc2NhbiByb3c=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2VuZCBUbyBPbmVOb3RlIDIwMTA=","type":"Unicode","source":"Runtime Data","process":"Censitrac.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2VuZEV4dHJhQ1JMRg==","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2VuZGluZyBtb3VzZSBjbGljayB0bw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"c2VuZGluZyBzY2FuOg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2VuZGluZyBzZXJ2ZXIgcmVxdWVzdA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2VuZExvZ01zZw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2VuZE1lc3NhZ2VB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2VuZE1lc3NhZ2VUaW1lb3V0QQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2VuZHMgdGhlIEJlZXAgY29tbWFuZCBzdHJpbmcgdG8gdGhlIHNlbGVjdGVkIFNlcmlhbCBwb3J0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2VuZFRpbWVPdXQ=","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2VyaWFsIExvZw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2VyaWFsIFNjYW5uZXI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2VyaWFsX0FjY2Vzc19OdW0=","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2VyaWFsQmVlcA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2VyaWFsQ21kQmVlcA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2VyaWFsQ21kT2Zm","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2VyaWFsQ21kT24=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2VyaWFsQ21kUmVhZHk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2VyaWFsUG9ydA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2VyaWFsUmVhZHk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2VyaWFsUmVzZXQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2VyaWFsU2V0dGluZ3M=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2VydmVyIGNvbm5lY3Rpb24gY2xvc2Vk","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2VydmVyIEVycm9yLCBjb250YWN0IFByb2R1Y3QgU3VwcG9ydA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2VydmVyIGlzIGJ1c3ksIHdhaXQgYSBtaW51dGUgYW5kIHRyeSBhZ2Fpbi4=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2VydmVyIHJlcXVlc3Qgc2VudA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2VydmVyIHJlc3BvbnNlIHJlY2lldmVk","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2VydmVySW5mb1RpbWVvdXQ=","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2Vzc2lvbk1lcmdpbmc=","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2Vzc2lvblN0YXJ0VGltZURlZmF1bHREZWx0YVNlY3M=","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2Vzc2lvblRpbWVkT3V0","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2V0QWN0aXZlV2luZG93","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2V0Q3VycmVudFBhZ2U=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2V0RGVmYXVsdFByaW50ZXI=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2V0RmlsZVRpbWU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2V0Rm9vdGVyRGF0ZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2V0Rm9vdEZvbnQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2V0Rm9yZWdyb3VuZFdpbmRvdw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2V0S2VlcENvbm5lY3Rpb25PcGVu","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2V0TWFwTW9kZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2V0TWV0cmljcw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2V0T3B0aW9ucw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2V0UGFnZUhlYWRlcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2V0UGFyZW50","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2V0UHJpbnRlckZyb21EaWFsb2c=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2V0UHJvZ3Jlc3M=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2V0UmVjdFJnbg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2V0UmVnaXN0cnlWYWx1ZSBmYWlsZWQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2V0UmVwb3J0Q29udGVudA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2V0UmVwb3J0SGVhZGVy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"c2V0c29ja29wdA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2V0U291cmNl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"c2V0VGltZW91dA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2V0dGluZ3M6","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2V0dXAgQ2FiIEZpbGU6","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2V0dXAgQ2FiIEluc3RhbGxlZDo=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2V0dXAgQ2FiIFByb2M6IDB4","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2V0dXAgQ2Vuc2l0cmFjIEhvbWU=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2V0dXAgRXJyb3I=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2V0dXAgRXJyb3IgaW4=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2V0dXAgUG9ja2V0IFBD","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2V0dXBJdGVyYXRlQ2FiaW5ldCBGYWlsZWQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2V0dXBJdGVyYXRlQ2FiaW5ldCBGYWlsZWQgb24gdGhlIGZvbGxvd2luZyBmaWxlOg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2V0dXBJdGVyYXRlQ2FiaW5ldEE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2V0V2luZG93TG9uZ0E=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2V0V2luZG93UGxhY2VtZW50","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2V0V2luZG93UG9z","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2V0V2luZG93VGV4dEE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"c0V4dHJhSW5mbw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"c0ZvbnRGYW1pbHk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U0hBZGRUb1JlY2VudERvY3M=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2hhcmVDcmVkc1dpdGhXaW5IdHRw","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U0hDaGFuZ2VOb3RpZnk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U0hEZWxldGVLZXlB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U0hEZWxldGVWYWx1ZUE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U0hEb2NWd0N0bA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U0hEb2NWd0N0bC5XZWJCcm93c2Vy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"c0hlYWRlck5hbWU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2hlbGwuRXhwbG9yZXI=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2hlbGxEb2NWaWV3IEhvb2tlZCE=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2hlbGxMaW5rIFNhbXBsZQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U0hFbnVtS2V5RXhB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U0hHZXRGb2xkZXJQYXRoQQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U0hHZXRQYXRoRnJvbUlETGlzdEE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U0hHZXRTcGVjaWFsRm9sZGVyTG9jYXRpb24=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U0hHZXRWYWx1ZUE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2hvcnRjdXQgY3JlYXRlZCBpbg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2hvcnRjdXQgY3JlYXRlZCBpbiBDb21tb24gRGVza3RvcCBmb2xkZXI=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2hvcnRjdXQgY3JlYXRlZCBpbiBTdGFydCBNZW51","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2hvcnRjdXQgY3JlYXRlZCBpbiBTdGFydHVwIGZvbGRlcg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2hvcnRjdXQgdG8=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2hvcnRjdXQgdG8gQ2Vuc2l0cmFjLmV4ZS5sbms=","type":"Unicode","source":"Runtime Data","process":"Censitrac.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2hvcnRjdXQgdG8gQ2Vuc2l0cmFjLmxuaw==","type":"Unicode","source":"Runtime Data","process":"Censitrac.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2hvdyBTY2FuIFJlc3VsdHM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2hvd0NlbnNpdHJhY0hlbHAoJycpOw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2hvd0NvbG9y","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2hvd0NvbmZpcm0=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"c2hvd2RhdGVmb290ZXI=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2hvd0RhdGVGb290ZXI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2hvd0RlYnVnSW5mbw==","type":"Unicode","source":"Runtime Data","process":"regsvr32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2hvd0RteERpYWdub3N0aWNz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2hvd0luZGljYXRvcnM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2hvd0xvYWRpbmc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2hvd0xvYWRpbmcgZnJvbSBUaHJlYWQ6","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2hvd1BhZ2UoLTEp","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2hvd1BhZ2VGb290ZXI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"c2hvd3BhZ2Vmb290ZXI=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2hvd1ByaW50","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U0hRdWVyeUluZm9LZXlB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U0hTZXRWYWx1ZUE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"c0ltYWdlRmlsZU5hbWU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2ltdWxhdGVkIFNjYW46","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2ltdWxhdGVkU2Nhbg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2l6ZW9mUmVzb3VyY2U=","type":"Ansi","source":"Dropped File","process":null,"filename":"WBCustomizer.dll.3678178828","compromised":null,"detection_total":null,"total":null},{"value":"c0xvZ0V4dHJh","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U01DYXB0aW9uSGVpZ2h0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U01DYXB0aW9uV0lkdGg=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U29ja2V0IGNsb3NlZCAweA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U29ja2V0IGlzIDB4","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U29ja2V0RGlzY29ubmVjdEVuYWJsZWQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U29ja2V0UmVjZWl2ZUJ1ZmZlckxlbmd0aA==","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U29ja2V0U2VuZEJ1ZmZlckxlbmd0aA==","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U29mdHdhcmVc","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U29mdHdhcmVcQWNjdXRyYWM=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U29mdHdhcmVcQ2Vuc2l0cmFj","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U29mdHdhcmVcQ2Vuc2l0cmFjU3BlZWNo","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U29mdHdhcmVcTWljcm9zb2Z0XEludGVybmV0IEV4cGxvcmVyXE1haW4=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U09GVFdBUkVcTWljcm9zb2Z0XFdpbmRvd3NcQ3VycmVudFZlcnNpb24=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U09GVFdBUkVcTWljcm9zb2Z0XFdpbmRvd3NcQ3VycmVudFZlcnNpb25cQXBwIFBhdGhz","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U09GVFdBUkVcTWljcm9zb2Z0XFdpbmRvd3NcQ3VycmVudFZlcnNpb25cRXhwbG9yZXJcU2hlbGwgRm9sZGVycw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U29mdHdhcmVcTWljcm9zb2Z0XFdpbmRvd3NcQ3VycmVudFZlcnNpb25cSW5zdGFsbGVy","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U29mdHdhcmVcTWljcm9zb2Z0XFdpbmRvd3NcQ3VycmVudFZlcnNpb25cSW50ZXJuZXQgU2V0dGluZ3M=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U09GVFdBUkVcTWljcm9zb2Z0XFdpbmRvd3NcQ3VycmVudFZlcnNpb25cU2hhcmVkRExMcw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U09GVFdBUkVcTWljcm9zb2Z0XFdpbmRvd3NcQ3VycmVudFZlcnNpb25cVW5pbnN0YWxs","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U29mdHdhcmVcVkIgYW5kIFZCQSBQcm9ncmFtIFNldHRpbmdzXEFjY3V0cmFj","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"c291bmRDb250cm9s","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U291cmNlTGlzdA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U291cmNlTmFtZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U291cmNlUGF0aA==","type":"Unicode","source":"Runtime Data","process":"regsvr32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"c1Bhc3N3b3Jk","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"c3BlZWNoQ29udHJvbA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U3BlZWNoQ29udHJvbA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U3BlZWNoRW5hYmxlZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"c1Bvc3REYXRh","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U3FtSHR0cFN0cmVhbVJhbmRvbVVwbG9hZFBvb2xTaXpl","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"c1F1ZXJ5U3RyaW5n","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U1JQVHJ1c3RMZXZlbA==","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U1Q2VU5TVCAj","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U3RhcnREb2NQcmludGVyQQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U3RhcnRQYWdlUHJpbnRlcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"c3RhdHVzIGJsb2NrZWQ6","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U3RhdHVzIHJlamVjdGVkOiB3ZSBhcmUgbm90IGRvbmUh","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U3RhdHVzLVRleHQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U3RhdHVzTXNn","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U1RFUk1FVEhPRA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U3RvcmVJbWFnZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U3RvcmVzU2VydmljZUNsYXNzSW5mbw==","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"c3RwdG1wLmJhdA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U3RyZWFtUmVzb3VyY2U=","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U3RyZWFtUmVzb3VyY2VUeXBl","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U3RyaW5nRmlsZUluZm8=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U3RyaW5nRnJvbUdVSUQy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"c3R5bGVTaGVldHM=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U1VdUjltakVJfWVpaV1JTQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U3VjY2VlZGVkIGZvcg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U3VwcG9ydGVkTmFtZVNwYWNl","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"c1VzZXJOYW1l","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"c1dlYkNvbG9y","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"c3luYy5TZXNzaW9uVGltZWRPdXQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U3luY0NoZWNrU2Vzc2lvbigp","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U3luY0Vycm9y","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U3luY0xvZy50bXAsJChBcHBQYXRoKSwsZmFsc2UsZmFsc2U=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U3luY0xvZy50eHQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U3luY0xvZy50eHQsJChBcHBQYXRoKSwsZmFsc2UsZmFsc2U=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U3luY01vZGU1","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U3luY1NoZWxsIGZhaWxlZCB0byBleGVjdXRlIFJlZ1N2cjMy","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U3lzQmFja3VwLmxvZw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U3lzQmFja3VwTG9nIE1zZzo=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U3lzdGVtUGFyYW1ldGVyc0luZm9B","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U3lzdGVtU2V0dXBJblByb2dyZXNz","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U3lzdGVtVGltZVRvRmlsZVRpbWU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VGFiLURlbGltaXRlZCBTcHJlYWRzaGVldCAoKi50eHQpfCoudHh0fENvbW1hLVNlcGFyYXRlZCBTcHJlYWRzaGVldCAoKi5jc3YpfCouY3N2","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VGFiUHJvY0dyb3d0aA==","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VGNwQXV0b3R1bmluZw==","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"dGVzdCBkYXRh","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VGVzdCBTY2Fucy50eHQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"dGVzdHAuYmlu","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VGVzdFN0YXRz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VGV4dCAoKi50eHQpfCoudHh0fENvbW1hLVNlcGFyYXRlZCBTcHJlYWRzaGVldCAoKi5jc3YpfCouY3N2","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VGV4dEhlaWdodA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VGV4dFdpZHRo","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VGhlICdIb21lJyBhZGRyZXNzIGlzIG5vdCB2YWxpZA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VGhlIGNvbXB1dGVyIG11c3QgYmUgcmVib290ZWQgZm9yIGFsbCBmZWF0dXJlcyB0byB3b3JrIGNvcnJlY3RseS4=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VGhlIGZvbGxvd2luZyBlcnJvciBvY2N1cnJlZDo=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VGhlIGxhYmVsIGNvdWxkIG5vdCBiZSBwcmludGVkIHRvIHlvdXIgbm9uLVplYnJhIHByaW50ZXIgZHVlIHRvIHRoZSBmb2xsb3dpbmcgZXJyb3I6","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VGhlIFByaW50ZXIgTmFtZSB5b3Ugc2VsZWN0ZWQgd2Fzbid0IHJlY29nbml6ZWQu","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VGhlIHNjYW5uZXIgc2VyaWFsIHBvcnQgcHJldmlvdXNseSBzZWxlY3RlZCBmb3IgdGhpcyBjb21wdXRlciAo","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VGhlIFdpbmRvd3MgQWR2YW5jZWQgR3JhcGhpY3MgTGlicmFyeSBpcyBub3QgaW5zdGFsbGVkIG9uIHRoaXMgbWFjaGluZS4gQ2VydGFpbiBvcHRpb25hbCBmZWF0dXJlcyBzdWNoIGFzIEF1dG8tU2NhbGluZyB3aWxsIG5vdCBiZSBhdmFpbGFibGUu","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VGhlbWVBcGlDb25uZWN0aW9uUmVxdWVzdA==","type":"Unicode","source":"Runtime Data","process":"conhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VGhlcmUgYXJlIG5vIHJlY29yZHMgaW4gdGhpcyByZXBvcnQu","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VGhpcyBpcyB1c3VhbGx5IGhhcHBlbnMgd2hlbiB5b3VyIFdpbmRvd3MgRGVmYXVsdCBQcmludGVyIGlzIG5vdCBhdmFpbGFibGUgb3IgaXMgbm90IGNvbmZpZ3VyZWQgY29ycmVjdGx5Lg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"dGhpcy5wYXJlbnRFbGVtZW50LmlubmVyVGV4dD0nJzsgaWYoIGxvY2F0aW9uLmhyZWYuc3Vic3RyKDAsNikudG9Mb3dlckNhc2UoKT09J3JlczovLycpIHdpbmRvdy5zZXRUaW1lb3V0KCdsb2NhdGlvbi5yZXBsYWNlKGxvY2F0aW9uLmhhc2guc3Vic3RyKDEpKScsMjAwKTsgZWxzZSB3aW5kb3cuc2V0VGltZW91dCgnbG9jYXRpb24ucmVwbGFjZShsb2NhdGlvbiknLDIwMCk=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VGhyZWFkaW5nTW9kZWw=","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VGltZW91dCB3YWl0aW5nIGZvciByZXNwb25zZQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VGltZXJSUyBSZW1vdGVTY3JpcHRSZXF1ZXN0IHRocmVhZA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VGltZXJTY2FuU2ltdWxhdG9y","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VGltZXN0YW1w","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VG9vIG1hbnkgdXNlcnM=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VG9vbGJveEJpdG1hcDMy","type":"Ansi","source":"Dropped File","process":null,"filename":"msflxgrd.ocx.3900053644","compromised":null,"detection_total":null,"total":null},{"value":"dG9vbHRpcHNfY2xhc3MzMg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VHJhbnNhY3Rpb24gY2FuY2VsbGVkIGJ5IFBhZ2U6","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VHJhbnNhY3Rpb24gQ2FuY2VsbGVkLi4u","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VHJhbnNhY3Rpb24gQ29tcGxldGVkLi4u","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VHJhbnNhY3Rpb25FcnJvcg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VHJhbnNsYXRlTWVzc2FnZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VHJhbnNsYXRpb24=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VHJhbnNwYXJlbnRFbmFibGVk","type":"Unicode","source":"Runtime Data","process":"censitrac.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VHJhbnNwb3J0cw==","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VHJpbUxlYWRpbmdaZXJvcw==","type":"Unicode","source":"Runtime Data","process":"conhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VFNBcHBDb21wYXQ=","type":"Unicode","source":"Runtime Data","process":"censitrac.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VFNVc2VyRW5hYmxlZA==","type":"Unicode","source":"Runtime Data","process":"censitrac.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VFQgV25kIEZvdW5kOg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VHVybk9mZlNQSUFuaW1hdGlvbnM=","type":"Unicode","source":"Runtime Data","process":"Censitrac.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"dFZlcnNpb24=","type":"Unicode","source":"Dropped File","process":null,"filename":"WBCustomizer.dll.3678178828","compromised":null,"detection_total":null,"total":null},{"value":"dHdhaW4gTVNHRElTQUJMRURT","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"dHdhaW4gbXNnZ2V0","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VFdBSU5fMzIuRExM","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VFdBSU5fTVNHX1dJTkRPVw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"dHh0QmFyY29kZVNjYW5uZXJQcmVmaXg=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"dHh0Q29waWVz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"dHh0RG14SW50ZXJ2YWw=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"dHh0RG14TXNn","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"dHh0RG14U3RhdHVz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"dHh0RG14VGltZW91dA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"dHh0RG93bmxvYWQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"dHh0SW1hZ2VRdWFsaXR5","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"dHh0TGFiZWxIZWlnaHQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"dHh0TGFiZWxXaWR0aA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"dHh0TGVmdEFkag==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"dHh0TG9va3Vwcw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"dHh0U2VyaWFsQ21kQmVlcA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"dHh0U2VyaWFsQ21kT2Zm","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"dHh0U2VyaWFsQ21kT24=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"dHh0U2VyaWFsQ21kUmVhZHk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"dHh0U2VyaWFsU2V0dGluZ3M=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"dHh0VG9wQWRq","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VHlwZSByZXBvcnRlZCBpczo=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VHlwZUNoYW5nZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VUV2ZW50X1Npbms=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VW5pbnN0YWxs","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VW5pbnN0YWxsIGZhaWxlZCBhbmQgYXBwbGljYXRpb24gbWF5IGJlIHBhcnRpYWxseSBpbnN0YWxsZWQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VW5pbnN0YWxsaW5nOg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VW5pbnN0YWxsU3RyaW5n","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VW5rbm93biBlcnJvcg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VW5rbm93biBTdGF0dXM=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VW5yZWdpc3Rlcg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VW5SZWdpc3RlclR5cGVMaWI=","type":"Ansi","source":"Dropped File","process":null,"filename":"WBCustomizer.dll.3678178828","compromised":null,"detection_total":null,"total":null},{"value":"VXBncmFkZSBmYWlsZWQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VXBncmFkZSBmYWlsZWQsIGFuZCBwcmlvciB2ZXJzaW9uIG5vdCBmb3VuZA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VXBncmFkZSBmYWlsZWQsIGNvdWxkIG5vdCBjcmVhdGUgYmFja3VwIG9mIGN1cnJlbnQgdmVyc2lvbg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VXBncmFkZSBmYWlsZWQsIGtlZXBpbmcgcHJpb3IgdmVyc2lvbg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VXBncmFkZSBmYWlsZWQsIHJlc3RvcmUgcHJpb3IgdmVyc2lvbiBmYWlsZWQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VXBncmFkZSBmYWlsZWQsIHJlc3RvcmluZyBwcmlvciB2ZXJzaW9u","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VXBncmFkaW5nIFN5c3RlbSBGaWxl","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VXJsIGNvdWxkIG5vdCBiZSBwYXJzZWQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"dXJsQ29udGV4dA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VVJMRW5jb2Rl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VXNlRGVsYXllZEFjY2VwdGFuY2U=","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VXNlRmlsdGVy","type":"Unicode","source":"Runtime Data","process":"censitrac.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VXNlRmlyc3RBdmFpbGFibGU=","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VXNlciBpbnB1dCByZXF1aXJlZA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VVNFUjMyLmRsbA==","type":"Ansi","source":"Dropped File","process":null,"filename":"WBCustomizer.dll.3678178828","compromised":null,"detection_total":null,"total":null},{"value":"dXNlcjMyLmRsbA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VVRGOFNlcnZlck5hbWVSZXM=","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VmFyRmlsZUluZm8=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VkJDb250cm9sQ2xpY2tlZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VmVHZXRJbmV0T2Jq","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"dmVyaXNpZ24tZ3Jz","type":"Ansi","source":"PCAP Processing","process":null,"filename":"network.pcap","compromised":null,"detection_total":null,"total":null},{"value":"VmVyUXVlcnlWYWx1ZUE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VmVyc2lvbiBDb21wYXJlIERzdA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VmVyc2lvbiBDb21wYXJlIFNyYw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"dmVyc2lvbi5kbGw=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VkVSU0lPTi5ETEw=","type":"Ansi","source":"Dropped File","process":null,"filename":"msflxgrd.ocx.3900053644","compromised":null,"detection_total":null,"total":null},{"value":"VmVyc2lvbkluZGVwZW5kZW50UHJvZ0lE","type":"Ansi","source":"Dropped File","process":null,"filename":"msflxgrd.ocx.3900053644","compromised":null,"detection_total":null,"total":null},{"value":"VmtLZXlTY2FuQQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"dk5ld1ZhbHVl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"dm50SW5kZXhLZXk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VlNfVkVSU0lPTl9JTkZP","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"dzZjY3pwLmNvbQ==","type":"Ansi","source":"PCAP Processing","process":null,"filename":"PCAP","compromised":null,"detection_total":null,"total":null},{"value":"V19uZDB3czc=","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_8.png","compromised":null,"detection_total":null,"total":null},{"value":"V2FpdEZvcklucHV0SWRsZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"V2FpdEZvclNpbmdsZU9iamVjdA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"V2FpdGluZyBmb3Igc2VydmVyIHJlc3BvbnNl","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"V2FybkFsd2F5c09uUG9zdA==","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V2Fybk9uQmFkQ2VydFJlY3Zpbmc=","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V2Fybk9uSFRUUFNUb0hUVFBSZWRpcmVjdA==","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V2Fybk9uUG9zdA==","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V2Fybk9uUG9zdFJlZGlyZWN0","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V2Fybk9uWm9uZUNyb3NzaW5n","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V0IgS2V5c3Ryb2tl","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"V0JDdXN0b21pemVy","type":"Unicode","source":"Dropped File","process":null,"filename":"WBCustomizer.dll.3678178828","compromised":null,"detection_total":null,"total":null},{"value":"V0JDdXN0b21pemVyIENsYXNz","type":"Unicode","source":"Runtime Data","process":"regsvr32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V0JDdXN0b21pemVyLmRsbA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"V0JDdXN0b21pemVyLkRMTA==","type":"Ansi","source":"Dropped File","process":null,"filename":"WBCustomizer.dll.3678178828","compromised":null,"detection_total":null,"total":null},{"value":"V0JDdXN0b21pemVyLmRsbCwkKEFwcFBhdGgpLCx0cnVlLGZhbHNl","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"V0JDdXN0b21pemVyLldCQ3VzdG9taXplcg==","type":"Unicode","source":"Runtime Data","process":"regsvr32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V0JDdXN0b21pemVyLldCQ3VzdG9taXplci4x","type":"Unicode","source":"Runtime Data","process":"regsvr32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V0JDdXN0b21pemVyTGli","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"V0JEb3dubG9hZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"V0JMb2FkaW5n","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"V2ViQnJvd3Nlcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"V2ViQnJvd3NlcjE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"V2ViVG9WQkNvbG9y","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"V2lkZUNoYXJUb011bHRpQnl0ZQ==","type":"Ansi","source":"Dropped File","process":null,"filename":"WBCustomizer.dll.3678178828","compromised":null,"detection_total":null,"total":null},{"value":"V2lsbCB0aGlzIHdvcmtzdGF0aW9uIGJlIHVzZWQgZm9yIENlbnNpdHJhYyBQYWxtLVBpbG90IFN5bmM/","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"d2luZG93LnBhcmVudC5IZWFkZXJNc2dib3g=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"V2luZG93UG9zaXRpb24=","type":"Unicode","source":"Runtime Data","process":"conhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V2luZG93c0luc3RhbGxlci5JbnN0YWxsZXI=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"V2luZG93U2l6ZQ==","type":"Unicode","source":"Runtime Data","process":"conhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V2luZG93U3RhdGU=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"d2luaW5ldC5kbGw=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"V2luU29jayAyLjAgUHJvdmlkZXIgSUQ=","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V2luU29ja19SZWdpc3RyeV9WZXJzaW9u","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"d2luc3Bvb2wuZHJ2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"V05ldEdldENvbm5lY3Rpb25B","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"V29yZERlbGltaXRlcnM=","type":"Unicode","source":"Runtime Data","process":"conhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V3BhZE92ZXJyaWRl","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V3BhZFNlYXJjaEFsbERvbWFpbnM=","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V3JpdGVGaWxl","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"V3JpdGVQcmludGVy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"V3JpdGluZyBDZW5zaXRyYWMgU2NhbnM=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"V3MyXzMyTnVtSGFuZGxlQnVja2V0cw==","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V3MyXzMyU3BpbkNvdW50","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V1NjcmlwdC5OZXR3b3Jr","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"d3NvY2szMi5kbGw=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"d3d3d3d3d3d3d3d3","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"d3d3d3d3d3d3d3d3d3A=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"eGBYJzYyNDFs","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"eGxQb3J0cmFpdA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"eG1sbnM6eD0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6ZXhjZWwi","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"eG1sbnM9Imh0dHA6Ly93d3cudzMub3JnL1RSL1JFQy1odG1sNDAiPg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"WFFRUVFRUVFZTA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"eFpWWmFUW1F6","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"eSBmb3IgbWV0aG9kPQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"eSlEUlBLKCFj","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"WW91IE11c3QgSW5pdGlhdGUgYSBQYWxtIEhvdFN5bmMgdG8gdXBkYXRlIHRoZSBDZW5zaXRyYWMgc29mdHdhcmUuICBDb250YWN0IFByb2R1Y3QgU3VwcG9ydC4gKFYxLjAp","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"WW91ciBXaW5kb3dzIGFjY291bnQgZG9lcyBub3QgaGF2ZSBwZXJtaXNzaW9ucyB0byBzYXZlIHNldHRpbmdz","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"eXl5eSBtbSBkZA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"WkRlc2lnbmVy","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"emRlc2lnbmVy","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"emVicmEgZXBs","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"emVyIE1vZHVsZQ==","type":"Unicode","source":"Dropped File","process":null,"filename":"WBCustomizer.dll.3678178828","compromised":null,"detection_total":null,"total":null},{"value":"Wm9tYmllX0dldFR5cGVJbmZv","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Wm9tYmllX0dldFR5cGVJbmZvQ291bnQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"elAtdE9De0c=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"eyUwOGxYLSUwNFgtJTA0WC0lMDJYJTAyWC0lMDJYJTAyWCUwMlglMDJYJTAyWCUwMlh9","type":"Ansi","source":"Dropped File","process":null,"filename":"msflxgrd.ocx.3900053644","compromised":null,"detection_total":null,"total":null},{"value":"ezAwMDIwNDIwLTAwMDAtMDAwMC1DMDAwLTAwMDAwMDAwMDA0Nn0=","type":"Unicode","source":"Runtime Data","process":"regsvr32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"ezAwMDIwNDI0LTAwMDAtMDAwMC1DMDAwLTAwMDAwMDAwMDA0Nn0=","type":"Unicode","source":"Runtime Data","process":"regsvr32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"ezFENUJFNEI1LUZBNEEtNDUyRC05Q0RELTVEQjM1MTA1RTdFQn0=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"ezY0OEE1NjAzLTJDNkUtMTAxQi04MkI2LTAwMDAwMDAwMDAxNH0=","type":"Unicode","source":"Runtime Data","process":"regsvr32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"ezhEMEVCMkQxLUE1OEUtNEVBOC1BQTE0LTEwODA3NEI3QjZGOX0=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"e0I5NkIzQ0FFLTA3MjgtMTFEMy05RDdCLTAwMDBGODFFRjMyRX0=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"e2JvcmRlcjouNXB0IHNvbGlkIHdpbmRvd3RleHQ7YmFja2dyb3VuZDpzaWx2ZXI7d2hpdGUtc3BhY2U6bm93cmFwO30=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"e0QzMTg0M0MzLUMyNzUtMTFEMS1BQkVFLTYwMjU0NkMxMUUwOH0=","type":"Unicode","source":"Runtime Data","process":"regsvr32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"e0QzMTg0M0QxLUMyNzUtMTFEMS1BQkVFLTYwMjU0NkMxMUUwOH0=","type":"Unicode","source":"Runtime Data","process":"regsvr32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"e21zby1kYXRhLXBsYWNlbWVudDpzYW1lLWNlbGw7fQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"e21zby1oZWlnaHQtc291cmNlOmF1dG87fQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"e21zby13aWR0aC1zb3VyY2U6YXV0bzt9","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"e3doaXRlLXNwYWNlOm5vd3JhcDt9","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"fDdxcnAqTXlh","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"fSBjfH44MD4+Sw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"fXlSMCJ3MjRP","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"w6/Cv8K9X8Ovwr/CvcOvwr/CvcOvwr/CvcOvwr/CvcOvwr/CvcOvwr/CvcOvwr/CvcOvwr/CvcOvwr/CvcOvwr/CvcOvwr/CvQ==","type":"Ansi","source":"Runtime Data","process":"VBoxService.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"w6/Cv8K9aX41w6/Cv8K9","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9","type":"Ansi","source":"Runtime Data","process":"censitrac.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9","type":"Ansi","source":"Runtime Data","process":"censitrac.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9fcOvwr/CvcOvwr/CvcOvwr/CvcOvwr/CvcOvwr/CvcOvwr/CvcOvwr/CvcOvwr/CvcOvwr/CvQ==","type":"Ansi","source":"Runtime Data","process":"Censitrac.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9","type":"Ansi","source":"Runtime Data","process":"cacls.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9","type":"Ansi","source":"Runtime Data","process":"conhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9","type":"Ansi","source":"Runtime Data","process":"VBoxService.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9","type":"Ansi","source":"Runtime Data","process":"censitrac.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9bw==","type":"Ansi","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9","type":"Ansi","source":"Runtime Data","process":"censitrac.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9","type":"Ansi","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9","type":"Ansi","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null}],"interesting":[{"value":"ISVXSU5ESVIlXFN5c1dvdzY0XG1zeG1sNC5kbGw=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"IUgiIyQlJicoKSorLC0uLzBIMTJISEhISEhISEhISEhISEhISEhISEhISEhISEhISEhISEhISEhISEhISEhISEhISEhISEhISEhISEhISEhISEhISEhISEhISEhISEhISEhISEhISEhISEhISEhISEhISEgzNDU2Nzg5Ojs8PT4/QEFCQ0RFRkc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"IiAvcWItISAvTGZld21vICI=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"IiAvVCAvRSAvQyAvcCAiQlVJTFRJTlxVc2VycyI6Rg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"IiAvVCAvRSAvQyAvcCAiRG9tYWluXERvbWFpbiBVc2VycyI6Rg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Ii0xMDUxNDEzODU4LTEzNjQzMDU0NDAtNTM1NjIxMTk0LTE0MTI5NzMxNTkyMDMxMzI0NjQ0MTcyMDU4NTY5OC03NzI0NzA5MTUtNjcwNDc5MzA2Ig==","type":"Ansi","source":"Process Commandline","process":null,"filename":"conhost.exe","compromised":null,"detection_total":null,"total":null},{"value":"Ii04NzY1MTgxMDY1NjQ1MjI1MDEtMTcyMjk0ODM1MjEyODA0NTczMzctMTkwNDQ3OTUwLTQ1NDAyNjIzOTc3NTY1MzU1MzE5NzUwNjczNzMi","type":"Ansi","source":"Process Commandline","process":null,"filename":"conhost.exe","compromised":null,"detection_total":null,"total":null},{"value":"IjEyODM2NjUxOTUxNzcxMTMxNzczLTc0NjQ3NTgyMDcxODI4MDU3ODg2OTIwMDkwMS0zOTQ1MzQ2NDEtMjE0MTM0MjE4My0yMDU1MDU2MzUyIg==","type":"Ansi","source":"Process Commandline","process":null,"filename":"conhost.exe","compromised":null,"detection_total":null,"total":null},{"value":"IjEzMjYzNjc3ODgtNzQ2NDI2OTc4MTIxMTIxNTM1NjEyODA5NjMxMjI5ODg2MDI5OTYtMjE0MzkwNDY5OC01ODQ2MDY3NDAtMTczMDMzMzAxNSI=","type":"Ansi","source":"Process Commandline","process":null,"filename":"conhost.exe","compromised":null,"detection_total":null,"total":null},{"value":"Ijg2MjI0MjMwOS0zNDAyNjkzMDc0MTYwMDc0ODUtNDkzMTA2OTIyLTEwNjYwMjI4NjcxODU1ODc3MzEtMjA3NDI3MzA5ODg4NjgzOTEwOCI=","type":"Ansi","source":"Process Commandline","process":null,"filename":"conhost.exe","compromised":null,"detection_total":null,"total":null},{"value":"IyMgS2V5c3Ryb2tlOg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"JChXaW5TeXNQYXRoKQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"JChXaW5TeXNQYXRoU3lzRmlsZSk=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"JVBST0dSQU1GSUxFUyVcKHg4NilcQ2Vuc2l0cmFjXA==","type":"Unicode","source":"Runtime Data","process":"regsvr32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"JVdJTkRJUiVcU3lzV293NjRcbXNjb21tMzIub2N4","type":"Unicode","source":"Runtime Data","process":"regsvr32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"JiYgS2V5c3Ryb2tlOg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Li5cTWljcm9zb2Z0Lk5FVFxGcmFtZXdvcmtcdjEuMS40MzIyXGdkaXBsdXMuZGxs","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"LlNldCBDYWJpbmV0ID0gb2Zm","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"LlNldCBDYWJpbmV0PW9u","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"LlNldCBDYWJpbmV0TmFtZVRlbXBsYXRlID0gIg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"LlNldCBDb21wcmVzcyA9IG9mZg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"LlNldCBDb21wcmVzcz1vbg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"LlNldCBDb21wcmVzc2lvbkxldmVsID0gNw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"LlNldCBDb21wcmVzc2lvbk1lbW9yeSA9IDIx","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"LlNldCBDb21wcmVzc2lvblR5cGUgPSBNU1pJUA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"LlNldCBSZXNlcnZlUGVyQ2FiaW5ldFNpemUgPSA2MTQ0","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"L19TY3JpcHRMaWJyYXJ5L3JzLmh0bQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"L2M6Im1zaWluc3QgL2RlbGF5cmVib290cSI=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"L0V4aXRBcHAuYXNw","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"L2ltYWdlcy9sb2FkaW5nMi5naWY=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"L2ltYWdlcy9wcmludF9sb2dvLmdpZic+Jm5ic3A7Jm5ic3A7","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"L0ltYWdlU2F2ZS5hc3A/","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"L2luc3RhbGwv","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"L2luc3RhbGwvQ2Vuc2l0cmFjU3BlZWNoLm1zaQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"L0xvZ2luLmFzcA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"L0xvZ01zZy5hc3A=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"L1Byb2Nlc3NpZDp7QUI4OTAyQjQtMDlDQS00QkI2LUI3OEQtQThGNTkwNzlBOEQ1fQ==","type":"Ansi","source":"Process Commandline","process":null,"filename":"dllhost.exe","compromised":null,"detection_total":null,"total":null},{"value":"L1Byb2Nlc3NpZDp7RTEwRjZDM0EtRjFBRS00QURDLUFBOUQtMkZFNjU1MjU2NjZFfQ==","type":"Ansi","source":"Process Commandline","process":null,"filename":"dllhost.exe","compromised":null,"detection_total":null,"total":null},{"value":"L1Byb2Nlc3NpZDp7Rjk3MTc1MDctNjY1MS00RURCLUJGRjctQUU2MTUxNzlCQ0NGfQ==","type":"Ansi","source":"Process Commandline","process":null,"filename":"dllhost.exe","compromised":null,"detection_total":null,"total":null},{"value":"PC94bWw+PCFbZW5kaWZdLS0+","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"PGh0bWwgeG1sbnM6bz0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6b2ZmaWNlIg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"PHNwYW4gc3R5bGU9J0ZPTlQtU0laRTogMjRwdDtmb250LXdlaWdodDpib2xkO0NPTE9SOiAjMDAwMDAwO0ZPTlQtRkFNSUxZOiBWZXJkYW5hLFRhaG9tYSxTYW5zLVNlcmlmOyc+TG9hZGluZy4uLjwvc3Bhbj4=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"PHRhYmxlIHdpZHRoPScxMDAlJz48dHIgYWxpZ249Y2VudGVyPjx0ZCBhbGlnbj1jZW50ZXIgaWQ9J1JlcG9ydEhlYWRlcic+PGltZyBzcmM9Jw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"PFRBQkxFIHg6c3RyIGJvcmRlcj0wIGNlbGxwYWRkaW5nPTAgY2VsbHNwYWNpbmc9MCBzdHlsZT0nYm9yZGVyLWNvbGxhcHNlOmNvbGxhcHNlO3RhYmxlLWxheW91dDpmaXhlZDsnPg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"PHg6TmFtZT5+cmVwb3J0PC94Ok5hbWU+","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QG1lZGlhIHNjcmVlbg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"XENlbnNpdHJhY0ltYWdlLmpwZw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"XENlbnNpdHJhY0ltYWdlMi5qcGc=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"XENvbW1vbiBGaWxlcw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"XEluc3RhbGxc","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"XHJlcG9ydC5odG0=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"XFJQQyBDb250cm9sXENvbnNvbGVMUEMtMHgwMDAwMDAwMDAwMDAwQ0M0LTEwNjUwNTc4MzM1NzE3NzQzNjMxNDUxODM4MjIxMzQ5ODQyMTE5OTI5NDU5Mzc0LTU2MTU3ODI2Ni0zOTYyNjQwMTUtNzk0ODgwODgx","type":"Unicode","source":"Runtime Data","process":"cacls.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFJQQyBDb250cm9sXENvbnNvbGVMUEMtMHgwMDAwMDAwMDAwMDAwRkI0LS04NzY1MTgxMDY1NjQ1MjI1MDEtMTcyMjk0ODM1MjEyODA0NTczMzctMTkwNDQ3OTUwLTQ1NDAyNjIzOTc3NTY1MzU1MzE5NzUwNjczNzM=","type":"Unicode","source":"Runtime Data","process":"cacls.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFNlc3Npb25zXDFcV2luZG93c1xBcGlQb3J0","type":"Unicode","source":"Runtime Data","process":"censitrac.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFN0cmluZ0ZpbGVJbmZvXA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"XFRoZW1lQXBpUG9ydA==","type":"Unicode","source":"Runtime Data","process":"conhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFZhckZpbGVJbmZvXFRyYW5zbGF0aW9u","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"XFdpbmRvd3NcQXBpUG9ydA==","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XHdpemFyZHNcUERXaXphcmRcTWFrZUNhYi5leGU=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"XXBeK2NtZENhbmNlbA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFFcnJvck92ZXJmbG93","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFHZW5lcmF0ZUJvdW5kc0Vycm9y","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFHZXQz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFHZXQ0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFHZXRPd25lcjM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFJblN0cg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFJblN0ckI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFJblN0clZhcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFMYXRlTWVtU3Q=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFPYmpTZXQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFPYmpTZXRBZGRyZWY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFPbkVycm9y","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFTZXRTeXN0ZW1FcnJvcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFTdHJDb21w","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFWYXJMYXRlTWVtU3Q=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QSBQYXJpdHkgb3IgRnJhbWluZyBlcnJvciBvY2N1cnJlZCBvbiB0aGUgc2Nhbm5lciBzZXJpYWwgcG9ydC4gIENoZWNrIHRvIG1ha2Ugc3VyZSB0aGUgYmF1ZCByYXRlIGFuZCBvdGhlciBzZXJpYWwgc2V0dGluZ3MgYXJlIGNvcnJlY3Qu","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"YWJ5dFBvc3REYXRh","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QWRkcmVzc0NoYW5nZWQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QWRkcmVzc0ZhbWlseQ==","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"QWRkU2NhbkxpbmU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QW4gZXJyb3Igb2N1cnJlZCB3aGlsZSBkb3dubG9hZGluZywgaW52YWxpZCBzdGF0dXM6","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QW4gZXJyb3Igb2N1cnJlZCB3aGlsZSBkb3dubG9hZGluZzo=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QW4gb3ZlcnJ1biBvY2N1cnJlZCBvbiB0aGUgc2Nhbm5lciBzZXJpYWwgcG9ydC4gIFBsZWFzZSBzY2FuIHRoZSBpdGVtIGFnYWluLg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QXBwbGljYXRpb24gU2V0dXAgQ29tcGxldGU=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QXJlIHlvdSBzdXJlIHlvdSB3YW50IHRvIHJlbW92ZSB0aGlzIGFwcGxpY2F0aW9uIGZyb20gdGhpcyBjb21wdXRlcj8=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QXN5bmMgb3BlcmF0aW9uIGNvbXBsZXRlZA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QmFyY29kZSBTY2FubmVy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QmFyY29kZVByaW50LmFzcA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QmFyY29kZVNjYW5uZXJQcmVmaXg=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QmFyY29kZVNjYW5uZXJQcmVmaXhDaGFuZ2Vk","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"YkNvbXBsZXRl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"YmdsUjNJbml0IGZhaWxlZCB3aXRoIHJjPVZFUlJfT1BFTl9GQUlMRUQ=","type":"Ansi","source":"Runtime Data","process":"VBoxService.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"QmxhbmsgbG9va3VwIGRhdGEgZm9y","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"YkxvY2FsT25seQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Qm94U2VydmljZS5leGU=","type":"Ansi","source":"Runtime Data","process":"VBoxService.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"QlAvQkFEe0NSfXtMRn0=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"YlN5bmNFcnJvcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"YnRuRXhwb3J0","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QnlwYXNzSFRUUE5vQ2FjaGVDaGVjaw==","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"YzpcY2Vuc2lzXGxhYmVsc1xsYWJlbHRlc3QuaXBs","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"JVBST0dSQU1GSUxFUyVcKHg4NilcQ2Vuc2l0cmFjXFdCQ3VzdG9taXplci5kbGw=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"JVBST0dSQU1GSUxFUyVcKHg4NilcTWljcm9zb2Z0IFZpc3VhbCBTdHVkaW9cVkI5OFxpZWZyYW1lLm9jYQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"JVBST0dSQU1GSUxFUyVcKHg4NilcTWljcm9zb2Z0IFZpc3VhbCBTdHVkaW9cVkI5OFxWQjYuT0xC","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"JVdJTkRJUiVcU3lzV293NjRcTVNDT01NMzIub2Nh","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"JVdJTkRJUiVcU3lzV293NjRcTVNGTFhHUkQub2Nh","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"JVdJTkRJUiVcU3lzV09XNjRcbXNodG1sLnRsYg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"JVdJTkRJUiVcU3lzV09XNjRcbXN2YnZtNjAuZGxsXDM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2FjaGUgUmVnIFNldHRpbmcgZmFpbGVkIDB4","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Y2FjbHMgIiVQUk9HUkFNRklMRVMlXCh4ODYpXENlbnNpdHJhYyIgL1QgL0UgL0MgL3AgIkJVSUxUSU5cVXNlcnMiOkY=","type":"Ansi","source":"Process Commandline","process":null,"filename":"cacls.exe","compromised":null,"detection_total":null,"total":null},{"value":"Y2FjbHMgIiVQUk9HUkFNRklMRVMlXCh4ODYpXENlbnNpdHJhYyIgL1QgL0UgL0MgL3AgIkRvbWFpblxEb21haW4gVXNlcnMiOkY=","type":"Ansi","source":"Process Commandline","process":null,"filename":"cacls.exe","compromised":null,"detection_total":null,"total":null},{"value":"Y2FjbHMuZXhl","type":"Unicode","source":"Runtime Data","process":"Censitrac.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q2FuY2VsRXJyb3I=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2FuY2VsbGVkIEtleXN0cm9rZQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Y2JvQWRkcmVzcw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Y2JvU2VyaWFsUG9ydA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2Vuc2l0cmFjIGRsbCB1cGdyYWRlIGZhaWxlZC4=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2Vuc2l0cmFjIFJlbW90ZSBUZXJtaW5hbA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2Vuc2l0cmFjIFJlcG9ydA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2Vuc2l0cmFjIFJlcG9ydCBFeHBvcnQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2Vuc2l0cmFjIFJlcG9ydGluZw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2Vuc2l0cmFjIHJlcXVpcmVzIGEgcHJpbnRlciwgYnV0IG5vIHByaW50ZXIgaXMgaW5zdGFsbGVkLiAgQ29udGFjdCBzdXBlcnZpc29yLg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2Vuc2l0cmFjIFN5bmMgQ29tcGxldGVkISEh","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2Vuc2l0cmFjIFRlc3QgU2NhbnM=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2Vuc2l0cmFjIHVwZ3JhZGUgZmFpbGVkLg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Y2Vuc2l0cmFjLmV4ZQ==","type":"Unicode","source":"Runtime Data","process":"censitrac.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q2Vuc2l0cmFjLmV4ZQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2Vuc2l0cmFjLmV4ZS5sbms=","type":"Unicode","source":"Runtime Data","process":"Censitrac.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q2Vuc2l0cmFjLmxuaw==","type":"Unicode","source":"Runtime Data","process":"Censitrac.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q2Vuc2l0cmFjTG9va3Vw","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2Vuc2l0cmFjU2NhbnM=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2Vuc2l0cmFjU3BlZWNoIGluc3RhbGxlZA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2Vuc2l0cmFjU3BlZWNoIG1zaWV4ZWMgcmV0dXJuZWQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2Vuc2l0cmFjU3BlZWNoLm1zaQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2Vuc2l0cmFjU3luYy5kbGwsJChBcHBQYXRoKSxwYWxtLmV4ZSxmYWxzZSxmYWxzZQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2hlY2tpbmcgQ2Vuc2l0cmFjIFBhbG0gU29mdHdhcmUgVmVyc2lvbg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2hlY2tWZXJzaW9uSGVscA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2hlY2tWZXJzaW9uUFBDU2V0dXA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2hlY2tWZXJzaW9uUHJj","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Y2hrRGlzYWJsZUVycm9yQmVlcA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Y2hrU2l6aW5nRnJhbWU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2xpZW50IFNvZnR3YXJlIFJlc291cmNlIHVwZGF0ZSBmYWlsZWQu","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Y2xpZW50VmVyc2lvbg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Y2xpZW50VmVyc2lvbkNobQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Y2xpZW50VmVyc2lvbkRsbA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Y2xpZW50VmVyc2lvblByYw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2xvc2UgYWxsIGFwcGxpY2F0aW9ucyBhbmQgdHJ5IGFnYWluIG9yIGNvbnRhY3QgcHJvZHVjdCBzdXBwb3J0","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2xvc2UgYWxsIG90aGVyIGFwcGxpY2F0aW9ucyBhbmQgUmV0cnkgb3IgY29udGFjdCBQcm9kdWN0IFN1cHBvcnQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2xvc2VkIFNvY2tldCBUZXN0","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2xvc2VEbGcoRGxnQnRuMik=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2xvc2luZyBQcmV2aW91cyBJbnN0YW5jZQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q0xTSURGcm9tU3RyaW5n","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Y2xzSW5ldENwci5HZXRNYWNBZGRy","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Y21kQmFyY29kZVNjYW5uZXJEZWZhdWx0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Y21kQ2FuY2Vs","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Y21kQ2xlYXJQcmludGVy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Y21kQ29tbVJlZnJlc2g=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Y21kQ29uZmlybQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Y21kRGVsZXRl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Y21kUFBDU2V0dXA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Y21kUHJpbnRlclJlZnJlc2g=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Y21kUmVzdG9yZUhvbWU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Y21kU2F2ZUFkZHJlc3M=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Y21kU2F2ZUFz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Y21kU2F2ZVByaW50ZXI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Y21kU2VyaWFsQ21kVGVzdA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Y21kU2VyaWFsRGVmYXVsdHM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q29DcmVhdGVJbnN0YW5jZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q29tK0VuYWJsZWQ=","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29tYmluZUZhbHNlU3RhcnREYXRh","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q09NRExHMzIuRExM","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Y29tbWFuZC5jb20gL2M=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q29tbURsZ0V4dGVuZGVkRXJyb3I=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q29tbWVyY2lhbERhdGFPcHRJbg==","type":"Unicode","source":"Runtime Data","process":"regsvr32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29tbW9uIEFwcERhdGE=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q29tbW9uIERlc2t0b3A=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q29tbW9uIFByb2dyYW1z","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q29tbW9uIFN0YXJ0IE1lbnU=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q29tbW9uIFN0YXJ0dXA=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q29tbW9uRmlsZXNEaXI=","type":"Unicode","source":"Runtime Data","process":"conhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29tbW9uRmlsZXNEaXIgKHg4Nik=","type":"Unicode","source":"Runtime Data","process":"conhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29tbW9uVzY0MzJEaXI=","type":"Unicode","source":"Runtime Data","process":"conhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29tcGFueU5hbWU=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q29tcGF0RGxs","type":"Unicode","source":"Runtime Data","process":"censitrac.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29tcGxldGVk","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q29tcHV0ZXI=","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_8.png","compromised":null,"detection_total":null,"total":null},{"value":"Q29tcHV0ZXJOYW1l","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29ubmVjdGluZyB0byBSZW1vdGUgRGV2aWNlLi4u","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q29ubmVjdGlvbiBjbG9zZWQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q29ubmVjdGlvbiBoYW5kbGUgdGVybWluYXRlZA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q29ubmVjdGlvbjogQ2xvc2U=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q29udGFjdCBDZW5zaXRyYWMgUHJvZHVjdCBTdXBwb3J0","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q29udGFjdCBwcm9kdWN0IHN1cHBvcnQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q29udGFjdCBQcm9kdWN0IFN1cHBvcnQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q29udGFjdCBwcm9kdWN0IHN1cHBvcnQu","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q29udGFjdCBQcm9kdWN0IFN1cHBvcnQuICBFcnJvciBudW1iZXI=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q29udGFjdCBQcm9kdWN0IFN1cHBvcnQ6","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q29udGFjdCBwcm9ncmFtbWVyOyBUaGUgZm9sbG93aW5nIGVycm9yIG9jY3VycmVkIHdoaWxlIGxvYWRpbmc6","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q29udGVudC1UeXBlOiBhcHBsaWNhdGlvbi94LXd3dy1mb3JtLXVybGVuY29kZWQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q291bGQgbm90IGNvcHkgZXhlY3V0YWJsZSB0byBzdGFydCBpbnN0YWxsIHByb2Nlc3M7IENvbnRhY3QgcHJvZHVjdCBzdXBwb3J0","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q291bGQgbm90IGNyZWF0ZSBhcHBsaWNhdGlvbiBmb2xkZXIuICBNYWtlIHN1cmUgY3VycmVudCBsb2dvbiBoYXMgc3VmZmljaWVudCBhdXRob3JpdHkgdG8gaW5zdGFsbCBhcHBsaWNhdGlvbnMgb3IgY29udGFjdCBwcm9kdWN0IHN1cHBvcnQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q291bGQgbm90IGNyZWF0ZSBiYWNrdXAgb2YgY3VycmVudCB2ZXJzaW9uOyBDb250YWN0IHByb2R1Y3Qgc3VwcG9ydA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlIFByb2Nlc3M=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlQ29tcGF0aWJsZUJpdG1hcA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlQ29tcGF0aWJsZURD","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlUHJvY2Vzc0E=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlUmVjdFJnbg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlUmVwb3J0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlUmVwb3J0T2xk","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q3VzdG9tIFJlcG9ydA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q3VzdG9tV0JfQWNjZWxlcmF0b3JLZXlEb3du","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q3VzdG9tV0JIZWxwX0FjY2VsZXJhdG9yS2V5RG93bg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"REFUX0lNQUdFTkFUSVZFWEZFUiBGYWlsZWQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RGVmYXVsdENvbm5lY3Rpb25TZXR0aW5ncw==","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGVsZXRlIHRoZSBzZWxlY3RlZCByb3cgaW4gdGhlIHNjYW4gbGlzdA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RGVzY3JpcHRpb24=","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGlzYWJsZSBFcnJvciBCZWVw","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RGlzYWJsZSBQREEgU3VwcG9ydA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RGlzYWJsZUVycm9yQmVlcA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RGlzYWJsZUxvY2FsT3ZlcnJpZGU=","type":"Unicode","source":"Runtime Data","process":"Censitrac.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGlzY29ubmVjdFNvY2tldCBGYWlsZWQgdG8gb2J0YWluIHNvY2tldCBoYW5kbGU=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RGlzcGxheVNjcmlwdERvd25sb2FkRmFpbHVyZVVJ","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGxsR2V0Q2xhc3NPYmplY3Q=","type":"Ansi","source":"Dropped File","process":null,"filename":"WBCustomizer.dll.3678178828","compromised":null,"detection_total":null,"total":null},{"value":"RGxsSG9zdC5leGU=","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGxsUmVnaXN0ZXJTZXJ2ZXI=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RGxsVW5yZWdpc3RlclNlcnZlcg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RE1TQ29tbUV2ZW50cw==","type":"Unicode","source":"Runtime Data","process":"regsvr32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RG14IFNjYW5uZXI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RG8geW91IHdhbnQgdG8gcmUtaW5zdGFsbCBub3c/","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RG9jRXJyb3JDaGVjayBiZ2NvbG9yOg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RG9jdW1lbnQgQ29tcGxldGU=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RG93bmxvYWQgY29tcGxldGUgZnJvbSB0aHJlYWQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RG93bmxvYWRJbnN0YWxsRmlsZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RHJhd1RleHRB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RW5hYmxlSHR0cDFfMQ==","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RW5hYmxlSHR0cFRyYWNl","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RW5hYmxlV2luZG93","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RW50ZXIgQ2Vuc2l0cmFjICdIb21lJyAoQnVmZmVyIE1hY2hpbmUgTmFtZTpQb3J0KQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RW50ZXIgZmlsZW5hbWUgYXMgaW5zdHJ1Y3RlZCBieSBQcm9kdWN0IFN1cHBvcnQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RXJyb3IgY2hhbmdpbmcgcHJpbnRlci4uLmN1cnJlbnQgcHJpbnRlciBpczo=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RXJyb3IgY3JlYXRpbmcgdGh1bWJuYWls","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RXJyb3IgRXh0cmFjdGluZyBDYWJpbmV0IFJlc291cmNlOg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RXJyb3IgaW4gQmVmb3JlTmF2aWdhdGU6","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RXJyb3IgaW4gRG9jdW1lbnRDb21wbGV0ZTo=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RXJyb3IgaW4gc2V0dXAsIGZpbGUgc2tpcHBlZDogZGVzdGluYXRpb24gZXhjZWVkcyBNQVhfUEFUSCBsZW5ndGg6","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RXJyb3IgaW4gc2V0dXAsIGZpbGUgc2tpcHBlZDogZmFpbGVkIHRvIGNyZWF0ZSBkZXN0aW5hdGlvbiBmb2xkZXI6","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RXJyb3IgaW4gc3RhcnQgdXAuLi5UaGUgYXBwbGljYXRpb24gaXMgbm90IHByb3Blcmx5IGluc3RhbGxlZC4=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RXJyb3IgaW4gU3RhdHVzVGV4dENoYW5nZTo=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RXJyb3IgaW4gV2luZG93Q2xvc2luZzo=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RXJyb3IgaW5zdGFsbGluZyBDZW5zaXRyYWNTcGVlY2ggd2l0aCBtc2kgYXV0b21hdGlvbjo=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RXJyb3IgaW5zdGFsbGluZyBDZW5zaXRyYWNTcGVlY2ggd2l0aCBtc2lleGVjOg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RXJyb3IgbG9hZGluZyBwaWN0dXJl","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RXJyb3IgT3BlbmluZyBTZXJpYWwgUG9ydA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RXJyb3Igc2V0dGluZyBMaW5nZXI=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RXJyb3IgU3luY1NoZWxsIGZhaWxlZCBmb3IgQ2Vuc2l0cmFjU3BlZWNoLm1zaSBjb21tYW5kIGxpbmU=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RXJyb3IgdHJ5aW5nIHRvIHdyaXRlIFN5c0JhY2t1cExvZzo=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RXJyb3Igd2hpbGUgdHJ5aW5nIHRvIHJlZHVjZSB0aGUgc2l6ZSBvZiB0aGUgc3luYyBsb2c6","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RXJyb3IsIGV4Y2VlZHMgTUFYX1BBVEg6","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RXJyb3IsIGZhaWxlZCB0byBjcmVhdGUgdGFyZ2V0IGZvbGRlcjo=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RXJyb3IsIFRyYW5zYWN0aW9uIG5vdCBjb25maXJtZWQgYnkgcGFnZQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RXJyb3I6IENhbm5vdCBwZXJmb3JtIGhvc3QtYmFzZWQgaW5zdGFsbHMgYmVjYXVzZSB0aGUgSG9tZSBhZGRyZXNzIGlzIGJsYW5r","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RXJyb3I6IENlbnNpdHJhYyBkbGwgdXBncmFkZSBub3QgaW5zdGFsbGVkIGJlY2F1c2UgdXNlciBsYWNrcyBmb2xkZXIgcGVybWlzc2lvbnM=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RXJyb3I6IENlbnNpdHJhYyB1cGdyYWRlIG5vdCBpbnN0YWxsZWQgYmVjYXVzZSB1c2VyIGxhY2tzIGZvbGRlciBwZXJtaXNzaW9ucw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RXJyb3I6IERldlBhdGggcmVxdWVzdGVkIGJ1dCBub3QgaW4gdGhlIGRldmVsb3BtZW50IGVudmlyb25tZW50","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RXJyb3I6IEhlbHAgREwgRmFpbGVkLA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RXJyb3I6IEhlbHAgaW52b2tlZCBidXQgZmlsZSBub3QgZm91bmQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RXJyb3I6IEhlbHAgdXBncmFkZSBmYWlsZWQgYmVjYXVzZSBjbGllbnRWZXJzaW9uQ2htIG5vdCBmb3VuZA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RXJyb3I6IFJlcG9ydCBFeHBvcnQgZmFpbGVkLg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RXJyb3I6IHdoaWxlIGRvd25sb2FkaW5n","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSFRUUF9DT09LSUVfREVDTElORUQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSFRUUF9DT09LSUVfTkVFRFNfQ09ORklSTUFUSU9O","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSFRUUF9ET1dOTEVWRUxfU0VSVkVS","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSFRUUF9IRUFERVJfQUxSRUFEWV9FWElTVFM=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSFRUUF9IRUFERVJfTk9UX0ZPVU5E","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSFRUUF9JTlZBTElEX0hFQURFUg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSFRUUF9JTlZBTElEX1FVRVJZX1JFUVVFU1Q=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSFRUUF9JTlZBTElEX1NFUlZFUl9SRVNQT05TRQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSFRUUF9OT1RfUkVESVJFQ1RFRA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSFRUUF9SRURJUkVDVF9GQUlMRUQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSFRUUF9SRURJUkVDVF9ORUVEU19DT05GSVJNQVRJT04=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfQVNZTkNfVEhSRUFEX0ZBSUxFRA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfQkFEX0FVVE9fUFJPWFlfU0NSSVBU","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfQkFEX09QVElPTl9MRU5HVEg=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfQkFEX1JFR0lTVFJZX1BBUkFNRVRFUg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfQ0FOTk9UX0NPTk5FQ1Q=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfQ0hHX1BPU1RfSVNfTk9OX1NFQ1VSRQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfQ0xJRU5UX0FVVEhfQ0VSVF9ORUVERUQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfQ0xJRU5UX0FVVEhfTk9UX1NFVFVQ","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfQ09OTkVDVElPTl9BQk9SVEVE","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfQ09OTkVDVElPTl9SRVNFVA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfRElBTE9HX1BFTkRJTkc=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfRElTQ09OTkVDVEVE","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfRVhURU5ERURfRVJST1I=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfRk9SQ0VfUkVUUlk=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfSEFORExFX0VYSVNUUw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfSFRUUF9UT19IVFRQU19PTl9SRURJUg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfSFRUUFNfSFRUUF9TVUJNSVRfUkVESVI=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfSFRUUFNfVE9fSFRUUF9PTl9SRURJUg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfSU5DT1JSRUNUX0ZPUk1BVA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfSU5DT1JSRUNUX0hBTkRMRV9TVEFURQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfSU5DT1JSRUNUX0hBTkRMRV9UWVBF","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfSU5DT1JSRUNUX1BBU1NXT1JE","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfSU5DT1JSRUNUX1VTRVJfTkFNRQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfSU5TRVJUX0NEUk9N","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfSU5URVJOQUxfRVJST1I=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfSU5WQUxJRF9DQQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfSU5WQUxJRF9PUEVSQVRJT04=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfSU5WQUxJRF9PUFRJT04=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfSU5WQUxJRF9QUk9YWV9SRVFVRVNU","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfSU5WQUxJRF9VUkw=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfSVRFTV9OT1RfRk9VTkQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfTE9HSU5fRkFJTFVSRQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfTUlYRURfU0VDVVJJVFk=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfTkFNRV9OT1RfUkVTT0xWRUQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfTkVFRF9VSQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfTk9fQ0FMTEJBQ0s=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfTk9fQ09OVEVYVA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfTk9fRElSRUNUX0FDQ0VTUw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfTk9UX1BST1hZX1JFUVVFU1Q=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfT1BFUkFUSU9OX0NBTkNFTExFRA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfT1BUSU9OX05PVF9TRVRUQUJMRQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfT1VUX09GX0hBTkRMRVM=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfUE9TVF9JU19OT05fU0VDVVJF","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfUFJPVE9DT0xfTk9UX0ZPVU5E","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfUFJPWFlfU0VSVkVSX1VOUkVBQ0hBQkxF","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfUkVESVJFQ1RfU0NIRU1FX0NIQU5HRQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfUkVHSVNUUllfVkFMVUVfTk9UX0ZPVU5E","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfUkVRVUVTVF9QRU5ESU5H","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfUkVUUllfRElBTE9H","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfU0VDX0NFUlRfQ05fSU5WQUxJRA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfU0VDX0NFUlRfREFURV9JTlZBTElE","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfU0VDX0NFUlRfUkVWT0tFRA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfU0VDX0lOVkFMSURfQ0VSVA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfU0VDVVJJVFlfQ0hBTk5FTF9FUlJPUg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfU0VSVkVSX1VOUkVBQ0hBQkxF","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfU0hVVERPV04=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfVENQSVBfTk9UX0lOU1RBTExFRA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfVElNRU9VVA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfVU5BQkxFX1RPX0NBQ0hFX0ZJTEU=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfVU5BQkxFX1RPX0RPV05MT0FEX1NDUklQVA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfVU5SRUNPR05JWkVEX1NDSEVNRQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RXJyb3JCZWVw","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RXJyb3JCZWVwRW5hYmxlZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RXJyb3JNZXNzYWdlRGl2","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVZFTlRfU0lOS19HZXRJRHNPZk5hbWVz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RXhjZWwgU3ByZWFkc2hlZXQgKCoueGxzKXwqLnhsc3xUYWItRGVsaW1pdGVkIFNwcmVhZHNoZWV0ICgqLnR4dCl8Ki50eHR8Q29tbWEtU2VwYXJhdGVkIFNwcmVhZHNoZWV0ICgqLmNzdil8Ki5jc3Y=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"ZXhlY1NjcmlwdA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RXhlY1NjcmlwdEFsbEZyYW1lcw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RXhpdEFwcC5hc3A=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RXhwb3J0IGZhaWxlZC4=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RXhwb3J0UmVwb3J0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RXhwb3J0UmVwb3J0Q2xpY2tlZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RXh0ZW5kZWRFZGl0S2V5","type":"Unicode","source":"Runtime Data","process":"conhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RXh0ZW5kZWRFZGl0a2V5Q3VzdG9t","type":"Unicode","source":"Runtime Data","process":"conhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RXh0cmFJbmZv","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RmFpbGVkIGZvcg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RmFpbGVkIHRvIGNoYW5nZSBkZWZhdWx0IHByaW50ZXIgaW4gUHJpbnRSZXBvcnQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RmFpbGVkIHRvIGNyZWF0ZSBTaGVsbCBvYmplY3QgaW4gUHJpbnRSZXBvcnQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RmFpbGVkIHRvIGNyZWF0ZSBzaG9ydGN1dCBpbg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RmFpbGVkIHRvIGNyZWF0ZSBzaG9ydGN1dCBpbiBDb21tb24gRGVza3RvcCBmb2xkZXI=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RmFpbGVkIHRvIGNyZWF0ZSBzaG9ydGN1dCBpbiBTdGFydCBNZW51","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RmFpbGVkIHRvIGNyZWF0ZSBzaG9ydGN1dCBpbiBTdGFydHVwIGZvbGRlcg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RmFpbGVkIHRvIGNyZWF0ZSBTeXN0ZW0gQmFja3VwIEZvbGRlcg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RmFpbGVkIHRvIGxvYWQgQ2Vuc2l0cmFjU3luYy5kbGw=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RmFpbGVkIHRvIHJlYWNoIENlbnNpdHJhYyBzZXJ2ZXIuICBQbGVhc2UgY29udGFjdCBQcm9kdWN0IFN1cHBvcnQu","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RmFpbGVkIHRvIHNhdmUgc2V0dGluZ3M=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"ZmFpbGVkIHRvIHNldCBzeXN0ZW0gcGFyYW1ldGVycw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RiVXSU5ESVIlXFN5c1dPVzY0XHN0ZG9sZTIudGxi","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RmlsZSBFcnJvcjo=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RmlsZSBNb3ZlIGNlbnNpdHJhYy5leGUgIHRvICVQUk9HUkFNRklMRVMlXCh4ODYpXENlbnNpdHJhY1xDZW5zaXRyYWMuZXhlIHN0YXJ0ZWQgNjQ5ODIuNyBTdWNjZXNzIDY0OTgyLjg1","type":"Ansi","source":"Dropped File","process":null,"filename":"Install.log","compromised":null,"detection_total":null,"total":null},{"value":"RmlsZVZlcnNpb24=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RmluZFdpbmRvd0E=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Rm9udCBTbW9vdGhpbmcgb3B0aW9uIG5vdCBmb3VuZC4gIEluc3RhbGwgdGhlIFBsdXMgUGFjayBhbmQgZW5hYmxlIHRoZSBGb250IFNtb290aGluZyBkaXNwbGF5IHByb3BlcnR5IGZvciBiZXN0IHJlc3VsdHMu","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Rm9udCBTbW9vdGhpbmcgUmVnIGZhaWxlZCAweA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Rm9udE1pblNpemU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Rm9yY2VDb21wbGV0ZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Rm9ybSBLZXkgRG93bjo=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Rm9ybSBLZXkgVXA6","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RnJhbWVNZXJnaW5n","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RnJhbWVUYWJXaW5kb3c=","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"ZnJtQXBwQWRkcmVzcw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"ZnJtUmVwb3J0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"ZnJtU2NhblNpbXVsYXRvcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RnRjIEVycm9yOg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RnRjIE9wZW4gRmFpbGVkOg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RnRjRGJJbmZv","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RnRjREJMaXN0RW50cmllc0NvdW50","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RnRjREJMaXN0RW50cmllc0dldA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RnRjUmVzZXRDb25uZWN0aW9u","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RnRjU3lzdGVtSW5mb1JlYWQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RnRwRGVmYXVsdEV4cGlyeVRpbWVTZWNz","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RnVsbHNjcmVlbg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"ZnVuY3Rpb24gZmFpbGVk","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2RpcENyZWF0ZUJpdG1hcEZyb21HZGlEaWIgRmFpbGVk","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2RpcENyZWF0ZUJpdG1hcEZyb21IQklUTUFQIEZhaWxlZA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2RpcEdldEltYWdlRW5jb2RlcnM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2RpcEdldEltYWdlRW5jb2RlcnNTaXpl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2RpcEdldEltYWdlSGVpZ2h0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2RpcEdldEltYWdlUmF3Rm9ybWF0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2RpcEdldEltYWdlVGh1bWJuYWls","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2RpcEdldEltYWdlV2lkdGg=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2RpcFNhdmVJbWFnZVRvRmlsZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0QWJzb2x1dGVQb3NpdGlvbkVs","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0QWN0aXZlRnJhbWVEb2M=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0QWN0aXZlRnJhbWVEb2NOYW1l","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0QWN0aXZlRnJhbWVXaW5kb3c=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0Q2FwdHVyZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0Q2xhc3NOYW1lQQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0Q2xpZW50UmVjdA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0Q29tbWFuZExpbmVB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0Q29tcHV0ZXJOYW1lQQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0Q3VycmVudFByb2Nlc3NJZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0Q3VycmVudFRocmVhZElk","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RGVza3RvcFdpbmRvdw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RGV2aWNlQ2Fwcw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RGlhbG9nQnV0dG9u","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RGlzcERvYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RGlzcEZyYW1l","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RGlzcEZyYW1lTmFtZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RGlzcFVybA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RGlzcFdpbmRvdw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RGxnQ3RybElE","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RGxnSXRlbQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RGxnSXRlbUludA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RGxnSXRlbVRleHRB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RG9jT2Jq","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RG9jVGV4dA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RG9jVGl0bGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Z2V0RWxlbWVudHNCeVRhZ05hbWU=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RXhpdENvZGVQcm9jZXNz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RmlsZVZlcnNpb25JbmZvQQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RmlsZVZlcnNpb25JbmZvU2l6ZUE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0Rm9yZWdyb3VuZFdpbmRvdw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0SGVhZGVy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0S2V5U3RhdGU=","type":"Ansi","source":"Dropped File","process":null,"filename":"WBCustomizer.dll.3678178828","compromised":null,"detection_total":null,"total":null},{"value":"R2V0TGFzdEVycm9y","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0TG9va3Vwcygn","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0TWFwTW9kZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0TWVudUl0ZW1Db3VudA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0TWVudUl0ZW1JRA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0TWVudVN0YXRl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0TWVudVN0cmluZ0E=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0TWVzc2FnZUE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0TWV0cmljcw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0TW9kdWxlRmlsZU5hbWVB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0TW9kdWxlSGFuZGxlQQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0T3BlbkZpbGVOYW1lQQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0UGFnZURvYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0UGFyZW50","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0UHJvY0FkZHJlc3M=","type":"Ansi","source":"Dropped File","process":null,"filename":"WBCustomizer.dll.3678178828","compromised":null,"detection_total":null,"total":null},{"value":"R2V0UHJvY2Vzc0hlYXA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0U2F2ZUZpbGVOYW1lQQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0U2hvcnRQYXRoTmFtZUE=","type":"Ansi","source":"Dropped File","process":null,"filename":"WBCustomizer.dll.3678178828","compromised":null,"detection_total":null,"total":null},{"value":"R2V0U3ViTWVudQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0U3lzQ29sb3I=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0U3lzdGVtRGlyZWN0b3J5QQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0U3lzdGVtSW5mbw==","type":"Ansi","source":"Dropped File","process":null,"filename":"WBCustomizer.dll.3678178828","compromised":null,"detection_total":null,"total":null},{"value":"R2V0U3lzdGVtTWVudQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0U3lzdGVtTWV0cmljcw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0VGFibGVDbGlw","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0VGFibGVGb3JtYXRTdHJpbmc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0VGFibGVSb3dDbGlw","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0VGVtcEZpbGVOYW1lQQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0VGVtcFBhdGhB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0VGV4dEV4dGVudEV4UG9pbnRB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0VHJhbnNhY3Rpb25FcnJvcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0VXJsQ2FjaGVFbnRyeUluZm9B","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0VmVyc2lvbg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0VmVyc2lvbkV4QQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0V2luZG93","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0V2luZG93TG9uZ0E=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0V2luZG93TW9kdWxlRmlsZU5hbWVB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0V2luZG93UGxhY2VtZW50","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0V2luZG93UmVjdA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0V2luZG93VGV4dEE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0V2luZG93VGhyZWFkUHJvY2Vzc0lk","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Z3JkUmVwb3J0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Z3JkUmVwb3J0Mg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Z3Vlc3RzZXNzaW9uIC0tc2Vzc2lvbi1pZD0yIC0tc2Vzc2lvbi1wcm90bz0yIC0tdXNlciAlT1NVU0VSJQ==","type":"Ansi","source":"Process Commandline","process":null,"filename":"VBoxService.exe","compromised":null,"detection_total":null,"total":null},{"value":"aENvbm5lY3Rpb24=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SGVhZGVySGVscENtZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SGVhZGVySGVscENvbnRyb2wudmFsdWU9Z2V0QWN0aXZlRnJhbWUoKS5pZA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SGVscCBEb2N1bWVudCBDb21wbGV0ZQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SGVscCBTdGFydCBDb21wbGV0ZTo=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"aGVscEZyYW1l","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SGl0IEFsdCtUYWIgdGhlbiBIaXQgYW55IGtleSB0byB1cGdyYWRlIENlbnNpdHJhYw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SGl0IGFueSBrZXkgdG8gY2xvc2UgdGhlIGFwcGxpY2F0aW9u","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SGl0IFJldHJ5OyBpZiBlcnJvciBjb250aW51ZXMgY29udGFjdCBwcm9kdWN0IHN1cHBvcnQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"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","type":"Ansi","source":"Dropped File","process":null,"filename":"WBCustomizer.dll.3678178828","compromised":null,"detection_total":null,"total":null},{"value":"SEtFWV9DTEFTU0VTX1JPT1Q=","type":"Ansi","source":"Dropped File","process":null,"filename":"WBCustomizer.dll.3678178828","compromised":null,"detection_total":null,"total":null},{"value":"SEtFWV9DVVJSRU5UX0NPTkZJRw==","type":"Ansi","source":"Dropped File","process":null,"filename":"WBCustomizer.dll.3678178828","compromised":null,"detection_total":null,"total":null},{"value":"SEtFWV9DVVJSRU5UX1VTRVI=","type":"Ansi","source":"Dropped File","process":null,"filename":"WBCustomizer.dll.3678178828","compromised":null,"detection_total":null,"total":null},{"value":"SEtFWV9EWU5fREFUQQ==","type":"Ansi","source":"Dropped File","process":null,"filename":"WBCustomizer.dll.3678178828","compromised":null,"detection_total":null,"total":null},{"value":"SEtFWV9MT0NBTF9NQUNISU5F","type":"Ansi","source":"Dropped File","process":null,"filename":"WBCustomizer.dll.3678178828","compromised":null,"detection_total":null,"total":null},{"value":"SEtFWV9QRVJGT1JNQU5DRV9EQVRB","type":"Ansi","source":"Dropped File","process":null,"filename":"WBCustomizer.dll.3678178828","compromised":null,"detection_total":null,"total":null},{"value":"SEtFWV9VU0VSUw==","type":"Ansi","source":"Dropped File","process":null,"filename":"WBCustomizer.dll.3678178828","compromised":null,"detection_total":null,"total":null},{"value":"SFRUUCA0MDMuOQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SFRUUCByZWRpcmVjdGVk","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"aHR0cDovL2ViaGJ1ZmZlcg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SHR0cERlZmF1bHRFeHBpcnlUaW1lU2Vjcw==","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SHR0cEVuZFJlcXVlc3RB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SHR0cE9wZW5SZXF1ZXN0QQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SHR0cFF1ZXJ5SW5mb0E=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SHR0cFNlbmRSZXF1ZXN0QQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SHR0cFNlbmRSZXF1ZXN0RXhB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"aWVmcmFtZS5kbGw=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"aWYgRVJST1JMRVZFTCAxIGdvdG8gbG9vcA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"aWYodHlwZW9mKHNjYW5uZXJfY2hhbmdlUHJlZml4KSE9J3VuZGVmaW5lZCcpc2Nhbm5lcl9jaGFuZ2VQcmVmaXgoJw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"aWYodHlwZW9mKHNjYW5uZXJfc2Nhbm5lZElEKSE9J3VuZGVmaW5lZCcpIHNjYW5uZXJfc2Nhbm5lZElEKCc=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"aWYodHlwZW9mKFpvb20pIT0ndW5kZWZpbmVkJykgWm9vbSgn","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SW1hZ2UgU2NhbiBRdWFsaXR5Og==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SW1wbGllZCAvcyBEZXRlY3RlZCwgb3RoZXIgaW5zdGFuY2UgZGV0ZWN0ZWQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SW5zZXJ0TW9kZQ==","type":"Unicode","source":"Runtime Data","process":"conhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SW5zdEFpZGUuZGxs","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"aW5zdGFpZGUuZGxs","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SW5zdGFsbCBjZW5zaXRyYWMuZXhlICAgMS4xLjIzOCA0LzQvMjAxOCA2OjAzOjAyIFBNICg2NDk4Mi42OCk=","type":"Ansi","source":"Dropped File","process":null,"filename":"Install.log","compromised":null,"detection_total":null,"total":null},{"value":"SW5zdGFsbCBjZW5zaXRyYWMuZXhlICAgMS4xLjIzOCA0LzQvMjAxOCA2OjAzOjAyIFBNICg2NDk4Mi42OCljZW5zaXRyYWMuZXhlIFBoYXNlIEkgKENvcHkgdG8gSW5zdGFsbGVkQXBwUGF0aClGaWxlIE1vdmUgY2Vuc2l0cmFjLmV4ZSAgdG8gJVBST0dSQU1GSUxFUyVcKHg4NilcQ2Vuc2l0cmFjXENlbnNpdHJhYy5leGUgc3RhcnRlZCA2NDk4Mi43IFN1Y2Nlc3MgNjQ5ODIuODU=","type":"Ansi","source":"Runtime Data","process":"censitrac.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SW5zdGFsbCBmYWlsZWQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SW5zdGFsbCBmYWlsZWQgYW5kIGFwcGxpY2F0aW9uIG1heSBiZSBwYXJ0aWFsbHkgaW5zdGFsbGVk","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SW5zdGFsbCBmYWlsZWQgZm9y","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SW5zdGFsbCBGYWlsZWQgb24gQ2FiaW5ldCBFeHRyYWN0aW9uIGZvciB0aGUgZm9sbG93aW5nIGZpbGU6","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SW5zdGFsbCBmYWlsZWQsIGNvdWxkIG5vdCBjb3B5IGV4ZWN1dGFibGUgdG8gSW5zdGFsbGVkQXBwUGF0aA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SW5zdGFsbCBGYWlsZWQsIHVua25vd24gQ2FiaW5ldCBFeHRyYWN0aW9uIGVycm9y","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SW5zdGFsbCBTdWNjZWVkZWQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SW5zdGFsbC5sb2c=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SW5zdGFsbC50bXA=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"aW5zdGFsbC9DZW5zaXRyYWMuZGxs","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"aW5zdGFsbC9DZW5zaXRyYWMuZXhl","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"aW5zdGFsbC9DZW5zaXRyYWMucHJj","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"aW5zdGFsbC9DZW5zaXRyYWNfT25saW5lX1VzZXJfTWFudWFsLmNobQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"aW5zdGFsbC9QUENTZXR1cC5leGU=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SW5zdGFsbGVk","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SW5zdGFsbGVkLg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SW5zdGFsbGVyTG9jYXRpb24=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SW5zdGFsbGluZw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SW5zdGFsbGluZyBTeXN0ZW0gRmlsZQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SW5zdEJhcmNvZGVQcmludC5hc3A=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SW5zdE1zaUEuZXhl","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SW5zdE1zaVcuZXhl","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SW5zdHJ1bWVudHM=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SW50ZXJuZXQgSW5mb3JtYXRpb24gU2VydmljZXM=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SW50ZXJuZXRFcnJvckRsZw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SW50ZXJuZXRTZXRPcHRpb24gZmFpbGVkIHdpdGggMHg=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SW52YWxpZCBkYXRhIHdhcyByZWNlaXZlZCBvbiB0aGUgc2Nhbm5lciBzZXJpYWwgcG9ydC4gIENoZWNrIHRvIG1ha2Ugc3VyZSB0aGUgYmF1ZCByYXRlIGFuZCBvdGhlciBzZXJpYWwgc2V0dGluZ3MgYXJlIGNvcnJlY3QuICg=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SVAgYWRkcmVzcyBmb3VuZA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TGFzdEVycm9y","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TGFzdEVycm9yTXNn","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TG9hZCBMaWJyYXJ5IGZhaWxlZA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TG9jYWxGaWxlVGltZVRvRmlsZVRpbWU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TG9jYWxpemVkTmFtZQ==","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TG9jYWxSZWRpcmVjdE9ubHk=","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TG9jYWxTZXJ2aWNl","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TG9ja1dpbmRvd1VwZGF0ZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"bG9nb3V0LmFzcA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TWFrZSBzdXJlIHRoaXMgZGxsIGlzIGxvY2F0ZWQgaW4gdGhlIHNhbWUgZGlyZWN0b3J5IGFzIHRoZSAuZXhlOg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TWF4Q29ubmVjdGlvbnNQZXIxXzBTZXJ2ZXI=","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWF4Q29ubmVjdGlvbnNQZXJQcm94eQ==","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWF4Q29ubmVjdGlvbnNQZXJTZXJ2ZXI=","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWF4SHR0cFJlZGlyZWN0cw==","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TUJDU0FQSWZvckNyYWNr","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"bWVudUxvYWRpbmcuc3R5bGUudmlzaWJpbGl0eSA9ICdoaWRkZW4nOyBtZW51Q29udGVudFJlc2l6ZSgp","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TWljcm9zb2Z0IENvbW0gQ29udHJvbCA2LjA=","type":"Unicode","source":"Runtime Data","process":"regsvr32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWluU29ja2FkZHJMZW5ndGg=","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TVNDb21tIEV2ZW50Og==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TVNDb21tIEhhcmR3YXJlIFByb3BlcnR5IFBhZ2UgT2JqZWN0","type":"Unicode","source":"Runtime Data","process":"regsvr32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"bXNjb21tMzIub2N4","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TVNDT01NMzIuT0NY","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"bXNjb21tMzIub2N4LCQoV2luU3lzUGF0aCksLHRydWUsZmFsc2U=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TVNDb21tTGli","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TVNDb21tTGliLk1TQ29tbQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"bXNmbHhncmQub2N4LCQoV2luU3lzUGF0aCksLHRydWUsZmFsc2U=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TVNHX0RJU0FCTEVEUyBGYWlsZWQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TVNHX0VORFhGRVIgRmFpbGVk","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TVNJIG5vdCBmb3VuZA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TVNJIHZlcnNpb24gaXMgdG9vIG9sZDo=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"bXNpZXhlYyAvaSAi","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TmF2aWdhdGUgQ29tcGxldGUgZnJvbSB0aHJlYWQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TmV0Ymlvc05hbWVMb29rdXA=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TmV0Ymlvc05hbWVMb29rdXAgRmFpbGVk","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TmV3IGNsc1dlYlNpbmsgYWRkZWQgZm9yIGZyYW1l","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TmV3IGNvbm5lY3Rpb24gaGFuZGxlIGNyZWF0ZWQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TmV3IFNpdGUgQWRkcmVzczo=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TmV3ZXIgdmVyc2lvbiBvZiBDZW5zaXRyYWMgd2FzIGZvdW5kIG9uIHNlcnZlciwgYnV0IG5vdCBpbnN0YWxsZWQgYmVjYXVzZSB5b3UgbGFjayBmb2xkZXIgcGVybWlzc2lvbnMgdG8gQ2Vuc2l0cmFjLg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Tm8gU2NyaXB0IGZvdW5kIG9uIHRoaXMgcGFnZQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Tm90IEluc3RhbGxpbmcgU3lzdGVtIEZpbGUgZHVlIHRvIHByZXZpb3VzIGVycm9y","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"blZpcnRFeHRLZXk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"b2NjdXJyZWQgd2hpbGUgaW5zdGFsbGluZyBDZW5zaXRyYWNTcGVlY2g=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"T0xFIEVycm9y","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"b24gRnJhbWU=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"T25seSBIVFRQIFVybCdzIGNhbiBiZSBoYW5kbGVkIGJ5IHRoaXMgZnVuY3Rpb24=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"T25Tb2NrZXRDbG9zZWQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"T3BlblVybFRvRmlsZUFzeW5jIENvbXBsZXRlLCBFbGFwc2VkIChzZWNvbmRzKSwgTWF4L01pbiBCdWZmU2l6ZSB3YXM=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"b3B0SW5zZXJ0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"cGFnZUZyYW1l","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UGFsbSBIb3RTeW5jIFJlcXVpcmVkLiAgQ29udGFjdCBQcm9kdWN0IFN1cHBvcnQu","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UGFsbSBJbnN0YWxsIEVycm9y","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UGFsbSBJbnN0YWxsIGZhaWxlZCBmb3I=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UGFsbSBJbnN0YWxsIEZpbGUgRXJyb3I=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UGFsbSBJbnN0YWxsIEZpbGUgRXJyb3IgTWFzayBub3QgU2V0","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UGFsbSB1cGdyYWRlIGZhaWxlZC4=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UGhhc2UgSSAoQ29weSB0byBJbnN0YWxsZWRBcHBQYXRoKQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UGhhc2UgSUkgKEluc3RhbGwp","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UGxlYXNlIHZlcmlmeSB0aGUgY29ycmVjdCBzZXR0aW5ncyBmb3IgeW91ciBzZXJpYWwgKFJTMjMyKSBTY2FubmVy","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UGx0R2V0VXNlcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UGx0R2V0VXNlckNvdW50","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UGx0R2V0VXNlckRpcmVjdG9yeQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UGx0SW5zdGFsbEZpbGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UGx0SXNJbnN0YWxsTWFza1NldA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UG9ja2V0IFBDIFNldHVwIFNvZnR3YXJlIHVwZGF0ZSBmYWlsZWQu","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UG9zdE1lc3NhZ2VB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UFBDIFNldHVwIHVwZ3JhZGUgZmFpbGVkLg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UFBDU2V0dXAuZXhl","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UHJpbnQgU2l6aW5nIEZyYW1l","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UHJpbnRlciBFcnJvcg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UHJpbnRlclN1cHBvcnRzQ29sbGF0aW9u","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UHJpbnRSZXBvcnQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UHJpdmF0ZUtleUxpZmV0aW1lU2Vjb25kcw==","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJpdktleUNhY2hlTWF4SXRlbXM=","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJpdktleUNhY2hlUHVyZ2VJbnRlcnZhbFNlY29uZHM=","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJvY2Vzc2luZyBUcmFuc2FjdGlvbiBkYXRlZA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UHJvZHVjdCBTdXBwb3J0","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UHJvZHVjdFZlcnNpb24=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UHJvZ3JhbW1lciBlcnJvcjogdW5zdXBwb3J0ZWQgdmFsdWUgdHlwZSBpbiBTZXRSZWdpc3RyeVZhbHVlOg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UHJvdmlkZXJJbmZv","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJveHlIdHRwMS4x","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UFQwL0NvbW11bmljYXRpb24vSW50ZXJmYWNlcy9JbnB1dC9QcmVzZW50YXRpb24gbW9kZTpmYWxzZXtDUn17TEZ9e1JDfVBTMA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UFQwL0NvbW11bmljYXRpb24vSW50ZXJmYWNlcy9JbnB1dC9QcmVzZW50YXRpb24gbW9kZTp0cnVle0NSfXtMRn17UkN9UFM4","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVhZGluZyBDZW5zaXRyYWMgU2NhbnM=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVib290IHJlcXVpcmVkIGJ1dCBkZWZlcnJlZCBkdWUgdG8gc2lsZW50IGluc3RhbGwgc3dpdGNo","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVib290IFJlcXVpcmVkIGZvciBNU0k=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVnQ2xvc2VLZXk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVnQ3JlYXRlS2V5RXhB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVnRGVsZXRlS2V5QQ==","type":"Ansi","source":"Dropped File","process":null,"filename":"WBCustomizer.dll.3678178828","compromised":null,"detection_total":null,"total":null},{"value":"UmVnRGVsZXRlVmFsdWVB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVnRW51bUtleUV4QQ==","type":"Ansi","source":"Dropped File","process":null,"filename":"WBCustomizer.dll.3678178828","compromised":null,"detection_total":null,"total":null},{"value":"UmVnRW51bVZhbHVlQQ==","type":"Ansi","source":"Dropped File","process":null,"filename":"WBCustomizer.dll.3678178828","compromised":null,"detection_total":null,"total":null},{"value":"UmVnaXN0cnkgZXJyb3I6IHVuc3VwcG9ydGVkIHZhbHVlIHR5cGUgaW4gR2V0UmVnaXN0cnlWYWx1ZTo=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVnT3BlbktleUV4QQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVnUXVlcnlJbmZvS2V5QQ==","type":"Ansi","source":"Dropped File","process":null,"filename":"WBCustomizer.dll.3678178828","compromised":null,"detection_total":null,"total":null},{"value":"UmVnUXVlcnlWYWx1ZUV4QQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVnU2V0VmFsdWVFeEE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"cmVnc3ZyMzIgLXMgLWM=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"cmVnc3ZyMzIgLXMgLWMgIiVQUk9HUkFNRklMRVMlXCh4ODYpXENlbnNpdHJhY1xXQkN1c3RvbWl6ZXIuZGxsIg==","type":"Ansi","source":"Process Commandline","process":null,"filename":"regsvr32.exe","compromised":null,"detection_total":null,"total":null},{"value":"cmVnc3ZyMzIgLXMgLWMgIiVXSU5ESVIlXHN5c3RlbTMyXG1zY29tbTMyLm9jeCI=","type":"Ansi","source":"Process Commandline","process":null,"filename":"regsvr32.exe","compromised":null,"detection_total":null,"total":null},{"value":"cmVnc3ZyMzIgLXMgLWMgIiVXSU5ESVIlXHN5c3RlbTMyXG1zZmx4Z3JkLm9jeCI=","type":"Ansi","source":"Process Commandline","process":null,"filename":"regsvr32.exe","compromised":null,"detection_total":null,"total":null},{"value":"cmVnc3ZyMzIgLXUgLXMgLWM=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVnU3ZyMzIgcmV0dXJuZWQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"cmVnc3ZyMzIuZXhl","type":"Unicode","source":"Runtime Data","process":"Censitrac.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UmVsb2FkQWRkcmVzcw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVtb3RlIERldmljZSBEaXNjb25uZWN0ZWQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVtb3RlUnBjRGxs","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UmVtb3RlU2NyaXB0UmVxdWVzdA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVtb3RlU2NyaXB0UmVxdWVzdCB0aHJlYWQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVtb3RlU2VydmVyTmFtZQ==","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UmVwb3J0IHNhdmVkIHRvIHRoZSBmb2xsb3dpbmcgc3ByZWFkc2hlZXQgZmlsZTo=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"cmVwb3J0X3dpZHRo","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"cmVwb3J0Qm9keQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVwb3J0SGVhZGVy","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVwb3J0TGlzdA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVwb3J0T3B0aW9ucw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVwb3J0UHJldmlldw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVwb3J0UHJpbnQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVwb3J0U3R5bGU=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVwb3J0VGFibGU=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVwb3J0VGl0bGU=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVwb3J0V2lkdGg=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"cmVzOi8vKi9uYXZjYW5jbC5odG0q","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"cmVzZXR0aW5nIFVTQiBjb25uZWN0aW9u","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"cmVzaXplIGVycm9y","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVzaXplUmVwb3J0R3JpZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVzb2x2aW5nIElQIGFkZHJlc3M=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVzcG9uc2VJbmZv","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVzdG9yaW5nIFByaW9yIFZlcnNpb24gKENvcHkgdG8gSW5zdGFsbGVkQXBwUGF0aCk=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UnNDbWQgRXJyb3I6IGJhZCBwRGlzcCwgcnNkYXRhIG5vdCBmb3VuZA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UnNDbWQgcmVjZWl2ZWQgZm9y","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UlNGU0JfQ29tcGxldGU=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UnVuLXRpbWUgZXJyb3I=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2FmZVByb2Nlc3NTZWFyY2hNb2Rl","type":"Unicode","source":"Runtime Data","process":"censitrac.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2F2ZXMgdGhlIGN1cnJlbnQgc2l0ZSBhZGRyZXNzIGFzIHRoZSBob21lIGFkZHJlc3MgdGhhdCBpcyB1c2VkIG9uIHN0YXJ0dXA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2F2ZVN0YXRzLmFzcA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2NhbiBFbmFibGVk","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2NhbiBTZW5kIEVycm9yOg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2NhbiBTaW11bGF0b3I=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2NhbkVuYWJsZWQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"c2Nhbm5lcl9zY2FubmVkSUQoJw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"c2Nhbm5lckNvbnRyb2w=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2Nhbm5lclJlc2V0","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2Nhbm5lclR5cGU=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2NhblR3YWlu","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2NyZWVuQnVmZmVyU2l6ZQ==","type":"Unicode","source":"Runtime Data","process":"conhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2NyZWVuQ29sb3Jz","type":"Unicode","source":"Runtime Data","process":"conhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2NyZWVuVG9DbGllbnQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"c2NyaXB0aW9u","type":"Unicode","source":"Dropped File","process":null,"filename":"WBCustomizer.dll.3678178828","compromised":null,"detection_total":null,"total":null},{"value":"U2Nyb2xsYmFyU2l6ZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2Nyb2xsSGVpZ2h0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2Nyb2xsV2lkdGg=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2VsZWN0Q2xpcFJnbg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2VuZCBzY2FucyBjb250aW51b3VzbHkgdW50aWwgcmVhY2hpbmcgYSBub24tc2NhbiByb3c=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"c2VuZGluZyBzY2FuOg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2VuZE1lc3NhZ2VUaW1lb3V0QQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2VuZHMgdGhlIEJlZXAgY29tbWFuZCBzdHJpbmcgdG8gdGhlIHNlbGVjdGVkIFNlcmlhbCBwb3J0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2VyaWFsIFNjYW5uZXI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2VyaWFsQ21kQmVlcA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2VyaWFsQ21kT2Zm","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2VyaWFsQ21kT24=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2VyaWFsQ21kUmVhZHk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2VyaWFsUG9ydA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2VydmVyIGNvbm5lY3Rpb24gY2xvc2Vk","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2VydmVyIEVycm9yLCBjb250YWN0IFByb2R1Y3QgU3VwcG9ydA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2VydmVySW5mb1RpbWVvdXQ=","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2V0Rm9yZWdyb3VuZFdpbmRvdw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2V0S2VlcENvbm5lY3Rpb25PcGVu","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2V0TWFwTW9kZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2V0UmVjdFJnbg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2V0UmVnaXN0cnlWYWx1ZSBmYWlsZWQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2V0UmVwb3J0Q29udGVudA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2V0UmVwb3J0SGVhZGVy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2V0dXAgQ2FiIEluc3RhbGxlZDo=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2V0dXAgRXJyb3I=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2V0dXAgRXJyb3IgaW4=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2V0dXBJdGVyYXRlQ2FiaW5ldCBGYWlsZWQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2V0dXBJdGVyYXRlQ2FiaW5ldCBGYWlsZWQgb24gdGhlIGZvbGxvd2luZyBmaWxlOg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2V0dXBJdGVyYXRlQ2FiaW5ldEE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"c0V4dHJhSW5mbw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2hhcmVDcmVkc1dpdGhXaW5IdHRw","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U0hEZWxldGVLZXlB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U0hFbnVtS2V5RXhB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U0hHZXRGb2xkZXJQYXRoQQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U0hHZXRQYXRoRnJvbUlETGlzdEE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U0hHZXRTcGVjaWFsRm9sZGVyTG9jYXRpb24=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U0hHZXRWYWx1ZUE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2hvcnRjdXQgY3JlYXRlZCBpbiBDb21tb24gRGVza3RvcCBmb2xkZXI=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2hvcnRjdXQgdG8gQ2Vuc2l0cmFjLmV4ZS5sbms=","type":"Unicode","source":"Runtime Data","process":"Censitrac.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2hvcnRjdXQgdG8gQ2Vuc2l0cmFjLmxuaw==","type":"Unicode","source":"Runtime Data","process":"Censitrac.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2hvdyBTY2FuIFJlc3VsdHM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2hvd0RlYnVnSW5mbw==","type":"Unicode","source":"Runtime Data","process":"regsvr32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U0hRdWVyeUluZm9LZXlB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U0hTZXRWYWx1ZUE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2ltdWxhdGVkIFNjYW46","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2ltdWxhdGVkU2Nhbg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U29ja2V0IGNsb3NlZCAweA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U09GVFdBUkVcTWljcm9zb2Z0XFdpbmRvd3NcQ3VycmVudFZlcnNpb24=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U09GVFdBUkVcTWljcm9zb2Z0XFdpbmRvd3NcQ3VycmVudFZlcnNpb25cQXBwIFBhdGhz","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U09GVFdBUkVcTWljcm9zb2Z0XFdpbmRvd3NcQ3VycmVudFZlcnNpb25cRXhwbG9yZXJcU2hlbGwgRm9sZGVycw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U29mdHdhcmVcTWljcm9zb2Z0XFdpbmRvd3NcQ3VycmVudFZlcnNpb25cSW5zdGFsbGVy","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U29mdHdhcmVcTWljcm9zb2Z0XFdpbmRvd3NcQ3VycmVudFZlcnNpb25cSW50ZXJuZXQgU2V0dGluZ3M=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U09GVFdBUkVcTWljcm9zb2Z0XFdpbmRvd3NcQ3VycmVudFZlcnNpb25cU2hhcmVkRExMcw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U09GVFdBUkVcTWljcm9zb2Z0XFdpbmRvd3NcQ3VycmVudFZlcnNpb25cVW5pbnN0YWxs","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"c1Bvc3REYXRh","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U3FtSHR0cFN0cmVhbVJhbmRvbVVwbG9hZFBvb2xTaXpl","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U3RvcmVzU2VydmljZUNsYXNzSW5mbw==","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"c3RwdG1wLmJhdA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U3RyaW5nRmlsZUluZm8=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U3VwcG9ydGVkTmFtZVNwYWNl","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U3luY0Vycm9y","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U3luY1NoZWxsIGZhaWxlZCB0byBleGVjdXRlIFJlZ1N2cjMy","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U3lzdGVtUGFyYW1ldGVyc0luZm9B","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VGFiLURlbGltaXRlZCBTcHJlYWRzaGVldCAoKi50eHQpfCoudHh0fENvbW1hLVNlcGFyYXRlZCBTcHJlYWRzaGVldCAoKi5jc3YpfCouY3N2","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VGVzdCBTY2Fucy50eHQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"dGVzdHAuYmlu","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VGV4dCAoKi50eHQpfCoudHh0fENvbW1hLVNlcGFyYXRlZCBTcHJlYWRzaGVldCAoKi5jc3YpfCouY3N2","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VGhlICdIb21lJyBhZGRyZXNzIGlzIG5vdCB2YWxpZA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VGhlIGNvbXB1dGVyIG11c3QgYmUgcmVib290ZWQgZm9yIGFsbCBmZWF0dXJlcyB0byB3b3JrIGNvcnJlY3RseS4=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VGhlIGZvbGxvd2luZyBlcnJvciBvY2N1cnJlZDo=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VGhlIGxhYmVsIGNvdWxkIG5vdCBiZSBwcmludGVkIHRvIHlvdXIgbm9uLVplYnJhIHByaW50ZXIgZHVlIHRvIHRoZSBmb2xsb3dpbmcgZXJyb3I6","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VGhlIHNjYW5uZXIgc2VyaWFsIHBvcnQgcHJldmlvdXNseSBzZWxlY3RlZCBmb3IgdGhpcyBjb21wdXRlciAo","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VGhlIFdpbmRvd3MgQWR2YW5jZWQgR3JhcGhpY3MgTGlicmFyeSBpcyBub3QgaW5zdGFsbGVkIG9uIHRoaXMgbWFjaGluZS4gQ2VydGFpbiBvcHRpb25hbCBmZWF0dXJlcyBzdWNoIGFzIEF1dG8tU2NhbGluZyB3aWxsIG5vdCBiZSBhdmFpbGFibGUu","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VGhlbWVBcGlDb25uZWN0aW9uUmVxdWVzdA==","type":"Unicode","source":"Runtime Data","process":"conhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VGhlcmUgYXJlIG5vIHJlY29yZHMgaW4gdGhpcyByZXBvcnQu","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"dGhpcy5wYXJlbnRFbGVtZW50LmlubmVyVGV4dD0nJzsgaWYoIGxvY2F0aW9uLmhyZWYuc3Vic3RyKDAsNikudG9Mb3dlckNhc2UoKT09J3JlczovLycpIHdpbmRvdy5zZXRUaW1lb3V0KCdsb2NhdGlvbi5yZXBsYWNlKGxvY2F0aW9uLmhhc2guc3Vic3RyKDEpKScsMjAwKTsgZWxzZSB3aW5kb3cuc2V0VGltZW91dCgnbG9jYXRpb24ucmVwbGFjZShsb2NhdGlvbiknLDIwMCk=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VGltZXJSUyBSZW1vdGVTY3JpcHRSZXF1ZXN0IHRocmVhZA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VGltZXJTY2FuU2ltdWxhdG9y","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VHJhbnNhY3Rpb24gQ29tcGxldGVkLi4u","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VHJhbnNhY3Rpb25FcnJvcg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VHJhbnNwb3J0cw==","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VFNBcHBDb21wYXQ=","type":"Unicode","source":"Runtime Data","process":"censitrac.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"dFZlcnNpb24=","type":"Unicode","source":"Dropped File","process":null,"filename":"WBCustomizer.dll.3678178828","compromised":null,"detection_total":null,"total":null},{"value":"dHdhaW4gbXNnZ2V0","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"dHh0QmFyY29kZVNjYW5uZXJQcmVmaXg=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"dHh0TG9va3Vwcw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"dHh0U2VyaWFsQ21kQmVlcA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"dHh0U2VyaWFsQ21kT2Zm","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"dHh0U2VyaWFsQ21kT24=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"dHh0U2VyaWFsQ21kUmVhZHk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VHlwZSByZXBvcnRlZCBpczo=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VW5pbnN0YWxs","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VW5pbnN0YWxsIGZhaWxlZCBhbmQgYXBwbGljYXRpb24gbWF5IGJlIHBhcnRpYWxseSBpbnN0YWxsZWQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VW5pbnN0YWxsaW5nOg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VW5pbnN0YWxsU3RyaW5n","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VW5rbm93biBlcnJvcg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VW5yZWdpc3Rlcg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VW5SZWdpc3RlclR5cGVMaWI=","type":"Ansi","source":"Dropped File","process":null,"filename":"WBCustomizer.dll.3678178828","compromised":null,"detection_total":null,"total":null},{"value":"VXBncmFkZSBmYWlsZWQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VXBncmFkZSBmYWlsZWQsIGFuZCBwcmlvciB2ZXJzaW9uIG5vdCBmb3VuZA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VXBncmFkZSBmYWlsZWQsIGNvdWxkIG5vdCBjcmVhdGUgYmFja3VwIG9mIGN1cnJlbnQgdmVyc2lvbg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VXBncmFkZSBmYWlsZWQsIGtlZXBpbmcgcHJpb3IgdmVyc2lvbg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VXBncmFkZSBmYWlsZWQsIHJlc3RvcmUgcHJpb3IgdmVyc2lvbiBmYWlsZWQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VXBncmFkZSBmYWlsZWQsIHJlc3RvcmluZyBwcmlvciB2ZXJzaW9u","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VmFyRmlsZUluZm8=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VmVHZXRJbmV0T2Jq","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VmVyc2lvbiBDb21wYXJlIERzdA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VmVyc2lvbiBDb21wYXJlIFNyYw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"dmVyc2lvbi5kbGw=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VkVSU0lPTi5ETEw=","type":"Ansi","source":"Dropped File","process":null,"filename":"msflxgrd.ocx.3900053644","compromised":null,"detection_total":null,"total":null},{"value":"VmVyc2lvbkluZGVwZW5kZW50UHJvZ0lE","type":"Ansi","source":"Dropped File","process":null,"filename":"msflxgrd.ocx.3900053644","compromised":null,"detection_total":null,"total":null},{"value":"VmtLZXlTY2FuQQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"dm50SW5kZXhLZXk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VlNfVkVSU0lPTl9JTkZP","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"dzZjY3pwLmNvbQ==","type":"Ansi","source":"PCAP Processing","process":null,"filename":"PCAP","compromised":null,"detection_total":null,"total":null},{"value":"V2FybkFsd2F5c09uUG9zdA==","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V2Fybk9uSFRUUFNUb0hUVFBSZWRpcmVjdA==","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V2Fybk9uUG9zdA==","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V2Fybk9uUG9zdFJlZGlyZWN0","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V0IgS2V5c3Ryb2tl","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"V2luZG93c0luc3RhbGxlci5JbnN0YWxsZXI=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"V2luU29jayAyLjAgUHJvdmlkZXIgSUQ=","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V2luU29ja19SZWdpc3RyeV9WZXJzaW9u","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"d2luc3Bvb2wuZHJ2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"V05ldEdldENvbm5lY3Rpb25B","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"V3BhZFNlYXJjaEFsbERvbWFpbnM=","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V3JpdGluZyBDZW5zaXRyYWMgU2NhbnM=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"V1NjcmlwdC5OZXR3b3Jr","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"d3d3d3d3d3d3d3d3","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"d3d3d3d3d3d3d3d3d3A=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"eGxQb3J0cmFpdA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"eG1sbnM6eD0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6ZXhjZWwi","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"eG1sbnM9Imh0dHA6Ly93d3cudzMub3JnL1RSL1JFQy1odG1sNDAiPg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"WW91IE11c3QgSW5pdGlhdGUgYSBQYWxtIEhvdFN5bmMgdG8gdXBkYXRlIHRoZSBDZW5zaXRyYWMgc29mdHdhcmUuICBDb250YWN0IFByb2R1Y3QgU3VwcG9ydC4gKFYxLjAp","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Wm9tYmllX0dldFR5cGVJbmZv","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Wm9tYmllX0dldFR5cGVJbmZvQ291bnQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"eyUwOGxYLSUwNFgtJTA0WC0lMDJYJTAyWC0lMDJYJTAyWCUwMlglMDJYJTAyWCUwMlh9","type":"Ansi","source":"Dropped File","process":null,"filename":"msflxgrd.ocx.3900053644","compromised":null,"detection_total":null,"total":null},{"value":"ezAwMDIwNDIwLTAwMDAtMDAwMC1DMDAwLTAwMDAwMDAwMDA0Nn0=","type":"Unicode","source":"Runtime Data","process":"regsvr32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"ezAwMDIwNDI0LTAwMDAtMDAwMC1DMDAwLTAwMDAwMDAwMDA0Nn0=","type":"Unicode","source":"Runtime Data","process":"regsvr32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"ezFENUJFNEI1LUZBNEEtNDUyRC05Q0RELTVEQjM1MTA1RTdFQn0=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"ezY0OEE1NjAzLTJDNkUtMTAxQi04MkI2LTAwMDAwMDAwMDAxNH0=","type":"Unicode","source":"Runtime Data","process":"regsvr32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"ezhEMEVCMkQxLUE1OEUtNEVBOC1BQTE0LTEwODA3NEI3QjZGOX0=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"e0I5NkIzQ0FFLTA3MjgtMTFEMy05RDdCLTAwMDBGODFFRjMyRX0=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"e2JvcmRlcjouNXB0IHNvbGlkIHdpbmRvd3RleHQ7YmFja2dyb3VuZDpzaWx2ZXI7d2hpdGUtc3BhY2U6bm93cmFwO30=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"e0QzMTg0M0MzLUMyNzUtMTFEMS1BQkVFLTYwMjU0NkMxMUUwOH0=","type":"Unicode","source":"Runtime Data","process":"regsvr32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"e0QzMTg0M0QxLUMyNzUtMTFEMS1BQkVFLTYwMjU0NkMxMUUwOH0=","type":"Unicode","source":"Runtime Data","process":"regsvr32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"e21zby1kYXRhLXBsYWNlbWVudDpzYW1lLWNlbGw7fQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"e21zby1oZWlnaHQtc291cmNlOmF1dG87fQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"e21zby13aWR0aC1zb3VyY2U6YXV0bzt9","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"e3doaXRlLXNwYWNlOm5vd3JhcDt9","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null}],"targets":[{"name":"censitrac.exe.bin","strings":[{"value":"ISEhIiIiIyMjJCQkJSUlJiYmJycnKCgoKSkpKioqKysrLCwsLS0tLi4uLy8vMDAwMTExMjIyMzMzNDQ0NTU1NjY2Nzc3ODg4OTk5Ojo6Ozs7PDw8PT09Pj4+Pz8/QEBAQUFBQkJCQ0NDRERERUVFRkZGR0dHSEhISUlJSkpKS0tLTExMTU1NTk5OT09PUFBQUVFRUlJSU1NTVFRUVVVVVlZWV1dXWFhYWVlZWlpaW1tbXFxcXV1dXl5eX19fYGBgYWFhYmJiY2NjZGRkZWVlZmZmZ2dnaGhoaWlpampqa2trbGxsbW1tbm5ub29vcHBwcXFxcnJyc3NzdHR0dXV1dnZ2d3d3eHh4eXl5enp6e3t7fHx8fX19fn5+","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"ISVXSU5ESVIlXFN5c1dvdzY0XG1zeG1sNC5kbGw=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"IUgiIyQlJicoKSorLC0uLzBIMTJISEhISEhISEhISEhISEhISEhISEhISEhISEhISEhISEhISEhISEhISEhISEhISEhISEhISEhISEhISEhISEhISEhISEhISEhISEhISEhISEhISEhISEhISEhISEhISEgzNDU2Nzg5Ojs8PT4/QEFCQ0RFRkc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"IVRoaXMgcHJvZ3JhbSBjYW5ub3QgYmUgcnVuIGluIERPUyBtb2RlLiQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"IiAvcWItISAvTGZld21vICI=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"IiAvVCAvRSAvQyAvcCAiQlVJTFRJTlxVc2VycyI6Rg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"IiAvVCAvRSAvQyAvcCAiRG9tYWluXERvbWFpbiBVc2VycyI6Rg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Ij48YnI+KFRvIGV4aXQgQ2Vuc2l0cmFjIHByZXNzIEFsdCtGNCk=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"IyMgS2V5c3Ryb2tlOg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"IyMgU2V0IEZvY3VzIGJhY2sgdG8gSUUh","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"JChBcHBQYXRoKQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"JChBc3NvY0FwcFBhdGgp","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"JChQcm9ncmFtRmlsZXMp","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"JChXaW5TeXNQYXRoKQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"JChXaW5TeXNQYXRoU3lzRmlsZSk=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"JXBlcnNvbmFsJQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"JXBTZXRTdGF0dXM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"JiYgS2V5c3Ryb2tlOg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Jkg4MDAwMDAxMiY=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"JlByaW50IEFsbCBQYWdlcw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"JnN0YXRpb249","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"JykgKyAnOyAn","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"J1R1cm4gT2ZmJzo=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"J1R1cm4gT24nOg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"KSB3YXMgbm90IGZvdW5kIHRvIGV4aXN0Lg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"LCBpbnZhbGlkIHN0YXR1czo=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"LCB0b3RhbCBoZWlnaHQ9","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"LDAsMSwxLDEsTiw=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"LDAsMSwyLDQsMTYsQiw=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"LDAsMSwyLDQsMzAsTiw=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"LDAsMywxLDEsTiw=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"LDEsMCxDLDBeQTAsMjUsMjBeRkQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"LDEsMCxDLDBeQTAsMjYsMjBeRkQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"LDEsMCxDLDBeQTAsMjgsMjZeRkQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"LDEsMCxDLDBeQTAsMzAsMzZeRkQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"LDEsMCxDLDBeQTAsMzYsMzZeRkQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"LDEsMCxMLDBeQTAsMjYsMjBeRkQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"LDEsMCxSLDBeQTAsMjYsMjBeRkQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"LDEsMCxSLDBeQTAsMjgsMjReRkQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"LDEsMCxSLDBeQTAsMzAsMzZeRkQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"LDIsMCxDLDBeQTAsMjAsMjheRkRDZW5zaXRyYWNeRlM=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"LDIsMCxDLDBeQTAsMjUsMjBeRkQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"LDIsMCxDLDBeQTAsMzYsMjReRkQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"LDIsMCxDLDBeQTAsMzYsMzZeRkQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"LDIwMCwsLCxeRkQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"LE4sTixBXkZE","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Li5cTWljcm9zb2Z0Lk5FVFxGcmFtZXdvcmtcdjEuMS40MzIyXGdkaXBsdXMuZGxs","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Lk9wdGlvbiBFWFBMSUNJVA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"LnByZXZpb3Vz","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"LlNldCBDYWJpbmV0ID0gb2Zm","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"LlNldCBDYWJpbmV0PW9u","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"LlNldCBDYWJpbmV0TmFtZVRlbXBsYXRlID0gIg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"LlNldCBDb21wcmVzcyA9IG9mZg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"LlNldCBDb21wcmVzcz1vbg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"LlNldCBDb21wcmVzc2lvbkxldmVsID0gNw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"LlNldCBDb21wcmVzc2lvbk1lbW9yeSA9IDIx","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"LlNldCBDb21wcmVzc2lvblR5cGUgPSBNU1pJUA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"LlNldCBEaXNrRGlyZWN0b3J5VGVtcGxhdGUgPSAiLiI=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"LlNldCBNYXhEaXNrU2l6ZSA9IDE0NTc2NjQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"LlNldCBSZXNlcnZlUGVyQ2FiaW5ldFNpemUgPSA2MTQ0","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Ln11WVAmdU5Z","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"L19TY3JpcHRMaWJyYXJ5L3JzLmh0bQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"L2M6Im1zaWluc3QgL2RlbGF5cmVib290cSI=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"L0V4aXRBcHAuYXNw","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"L2ltYWdlcy9sb2FkaW5nMi5naWY=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"L2ltYWdlcy9wcmludF9sb2dvLmdpZic+Jm5ic3A7Jm5ic3A7","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"L0ltYWdlU2F2ZS5hc3A/","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"L2luc3RhbGwv","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"L2luc3RhbGwvQ2Vuc2l0cmFjU3BlZWNoLm1zaQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"L0xvZ2luLmFzcA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"L0xvZ01zZy5hc3A=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"L25hdmNhbmNsLmh0bQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"MS4wMS4wMjM4","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"MS4yMC4xODI3","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"MTAyNHg3NjggKDR4Myk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"MTE1Mng4NjQgKDR4Myk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"MTI4MHg3MjAgKDE2eDkp","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"MTI4MHg5NjAgKDR4Myk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"MTM2OHg3NzAgKDE2eDkp","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"MyBvZiA5IEJhcmNvZGU=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Mzg0MDAsTiw4LDE=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"M3g/fUV8TTNs","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Nm80bzJvNm8xbzU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"ODAweDYwMCAoNHgzKQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"OTYwMCxuLDgsMQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"OTYwMCxOLDgsMQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"O2YzO2MxNztoMjt3MjtkMCwzMDs8RVRYPg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"O3cyOzxFVFg+","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"O3cyO2QwLDMwOzxFVFg+","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"PC9jZW50ZXI+","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"PC9kaXY+PGJyPjwvdGFibGU+","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"PC90cj48L3RhYmxlPg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"PC94OkV4Y2VsV29ya2Jvb2s+","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"PC94OkV4Y2VsV29ya3NoZWV0Pg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"PC94OkV4Y2VsV29ya3NoZWV0cz4=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"PC94OldvcmtzaGVldE9wdGlvbnM+","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"PC94bWw+PCFbZW5kaWZdLS0+","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"PGJvZHkgbGluaz1ibHVlIHZsaW5rPXB1cnBsZT4=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"PGJyPjxpbnB1dCB0eXBlPWJ1dHRvbiB2YWx1ZT0nUmV0cnknIG9uY2xpY2s9Ig==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"PGh0bWwgeG1sbnM6bz0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6b2ZmaWNlIg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"PHNwYW4gc3R5bGU9J0ZPTlQtU0laRTogMjRwdDtmb250LXdlaWdodDpib2xkO0NPTE9SOiAjMDAwMDAwO0ZPTlQtRkFNSUxZOiBWZXJkYW5hLFRhaG9tYSxTYW5zLVNlcmlmOyc+TG9hZGluZy4uLjwvc3Bhbj4=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"PFNUWD48RVNDPkM8RVRYPjxTVFg+PEVTQz5QPEVUWD48U1RYPkU0O0Y0OzxFVFg+","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"PFNUWD48RVRCPjxFVFg+","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"PFNUWD48VVM+","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"PFNUWD5CNDtv","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"PFNUWD5CNjtv","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"PFNUWD5IMDtv","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"PFNUWD5IMTtv","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"PFNUWD5IMTtvMCwwO2QwLDE7PEVUWD4=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"PFNUWD5IMjtv","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"PFNUWD5IMztv","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"PFNUWD5INDtvMCwwO2QwLDE7PEVUWD4=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"PFNUWD5INTtv","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"PFNUWD5INztv","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"PFNUWD5IODtv","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"PFNUWD5SOzxFVFg+PFNUWD48U0k+Ri0xMDxFVFg+PFNUWD48RVNDPkU0PEVUWD48U1RYPjxDQU4+PEVUWD48U1RYPg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"PFNUWD5XMTA7bw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"PFNUWD5XMTE7bw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"PFNUWD5XMTI7bzAsMDto","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"PHRhYmxlIGlkPW1lbnVDb250ZW50VGFibGUgYm9yZGVyPTAgY2VsbHBhZGRpbmc9MCBjZWxsc3BhY2luZz0wIHdpZHRoPScxMDAlJz48dHI+PHRkIHZhbGlnbj10b3A+PGRpdiBhbGlnbj1jZW50ZXIgc3R5bGU9J2ZvbnQ6bm9ybWFsIG5vcm1hbCBib2xkIDEycHQgVmVyZGFuYSc+","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"PHRhYmxlIHdpZHRoPScxMDAlJz48dHIgYWxpZ249Y2VudGVyPjx0ZCBhbGlnbj1jZW50ZXIgaWQ9J1JlcG9ydEhlYWRlcic+PGltZyBzcmM9Jw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"PFRBQkxFIHg6c3RyIGJvcmRlcj0wIGNlbGxwYWRkaW5nPTAgY2VsbHNwYWNpbmc9MCBzdHlsZT0nYm9yZGVyLWNvbGxhcHNlOmNvbGxhcHNlO3RhYmxlLWxheW91dDpmaXhlZDsnPg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"PHg6RXhjZWxXb3JrYm9vaz4=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"PHg6RXhjZWxXb3Jrc2hlZXQ+","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"PHg6RXhjZWxXb3Jrc2hlZXRzPg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"PHg6TmFtZT5+cmVwb3J0PC94Ok5hbWU+","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"PHg6UHJvdGVjdENvbnRlbnRzPkZhbHNlPC94OlByb3RlY3RDb250ZW50cz4=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"PHg6UHJvdGVjdE9iamVjdHM+RmFsc2U8L3g6UHJvdGVjdE9iamVjdHM+","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"PHg6UHJvdGVjdFNjZW5hcmlvcz5GYWxzZTwveDpQcm90ZWN0U2NlbmFyaW9zPg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"PHg6UHJvdGVjdFN0cnVjdHVyZT5GYWxzZTwveDpQcm90ZWN0U3RydWN0dXJlPg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"PHg6UHJvdGVjdFdpbmRvd3M+RmFsc2U8L3g6UHJvdGVjdFdpbmRvd3M+","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"PHg6U2VsZWN0ZWQvPg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"PHg6VG9wUm93VmlzaWJsZT4wPC94OlRvcFJvd1Zpc2libGU+","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"PHg6V2luZG93SGVpZ2h0PjkxNTA8L3g6V2luZG93SGVpZ2h0Pg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"PHg6V2luZG93VG9wWD4wPC94OldpbmRvd1RvcFg+","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"PHg6V2luZG93VG9wWT4xMzY1PC94OldpbmRvd1RvcFk+","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"PHg6V2luZG93V2lkdGg+MTUzNjA8L3g6V2luZG93V2lkdGg+","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"PHg6V29ya3NoZWV0T3B0aW9ucz4=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"PmBQcmludEhUTUw=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QG1lZGlhIGp1bms=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QG1lZGlhIHByaW50","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QG1lZGlhIHNjcmVlbg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"W2lmIGd0ZSBtc28gOV0+PHhtbD4=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"XGJhY2t1cFxhY2N1dHJhYy5wcmM=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"XGJhY2t1cFxjZW5zaXRyYWMucHJj","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"XGNlbnNpdHJhYw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"XENlbnNpdHJhYy5ibXA=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"XGNlbnNpdHJhYy5odG0=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"XENlbnNpdHJhY19PbmxpbmVfVXNlcl9NYW51YWwuY2ht","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"XENlbnNpdHJhY0ltYWdlLmpwZw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"XENlbnNpdHJhY0ltYWdlMi5qcGc=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"XENvbW1vbiBGaWxlcw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"XGhlYWRlcjEuYm1w","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"XEluc3RhbGxc","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"XFByb2dyYW1zXFN0YXJ0dXA=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"XHJlcG9ydC5odG0=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"XFNUNlVOU1QgIw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"XFN0cmluZ0ZpbGVJbmZvXA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"XFN5bmNMb2cudG1w","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"XFN5bmNMb2cudHh0","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"XHN5c3RlbTMy","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"XFZhckZpbGVJbmZvXFRyYW5zbGF0aW9u","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"XHdpemFyZHNcUERXaXphcmRcTWFrZUNhYi5leGU=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"XT5FWUhiQE9PIQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"XXBeK2NtZENhbmNlbA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"XkJDTiwsTixOLE4sQV5GRA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"XkJDTiwsWSxOLE4sQV5GRA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"XkJZMiwyLDE2XkJDTiwsWSxOLE4sQV5GRA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"XkJZMiwyLDMwXkJDTiwsTixOLE4sQV5GRA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"XkJZMiwyLDQwXkJDTiws","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"XkZPMCwwXkdC","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"XkZPNCw0XkJYTiw=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"XyZzeUdFIEpG","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFBcnlDb25zdHJ1Y3Qy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFBcnlDb3B5","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFBcnlEZXN0cnVjdA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFBcnlMb2Nr","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFBcnlNb3Zl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFBcnlVbmxvY2s=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFCb29sVmFy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFCb29sVmFyTnVsbA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFDYXN0T2Jq","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFDYXN0T2JqVmFy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFDaGtzdGs=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFDb3B5Qnl0ZXM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFDeU11bEky","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFDeVZhcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFEYXRlUjg=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFEYXRlVmFy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFFcmFzZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFFcnJvck92ZXJmbG93","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFFeGNlcHRIYW5kbGVy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFFeGl0RWFjaENvbGw=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFFeGl0UHJvYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFGaWxlQ2xvc2U=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFGaWxlQ2xvc2VBbGw=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFGaWxlT3Blbg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFGaWxlU2Vlaw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFGb3JFYWNoQ29sbE9iag==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFGcENTbmdSNA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFGUEV4Y2VwdGlvbg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFGUEZpeA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFGcEky","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFGcEk0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFGUEludA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFGcFI0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFGcFI4","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFGcmVlT2Jq","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFGcmVlT2JqTGlzdA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFGcmVlU3Ry","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFGcmVlU3RyTGlzdA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFGcmVlVmFy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFGcmVlVmFyTGlzdA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFHZW5lcmF0ZUJvdW5kc0Vycm9y","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFHZXQz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFHZXQ0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFHZXRPd25lcjM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFIcmVzdWx0Q2hlY2tPYmo=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFJMkN5","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFJMkk0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFJMlN0cg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFJMlZhcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFJNEN5","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFJNEVyclZhcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFJNFN0cg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFJNFZhcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFJblN0cg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFJblN0ckI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFJblN0clZhcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFMYXRlSWRDYWxs","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFMYXRlSWRDYWxsTGQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFMYXRlSWRDYWxsU3Q=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFMYXRlSWRTdA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFMYXRlTWVtQ2FsbA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFMYXRlTWVtQ2FsbExk","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFMYXRlTWVtQ2FsbFN0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFMYXRlTWVtU3Q=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFMYm91bmQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFMZW5Cc3Ry","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFMZW5Cc3RyQg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFMZW5WYXI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFMaW5lSW5wdXRTdHI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFMc2V0Rml4c3Ry","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFNaWRTdG10QnN0cg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFOYW1lRmlsZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFOZXcy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFOZXh0RWFjaENvbGxPYmo=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFPYmpJcw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFPYmpTZXQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFPYmpTZXRBZGRyZWY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFPYmpWYXI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFPbkVycm9y","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFQb3dlclI4","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFQcmludEZpbGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFQcmludE9iag==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFQdXQz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFQdXRPd25lcjM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFSNFN0cg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFSNFZhcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFSOEN5","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFSOEVyclZhcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFSOEZpeEk0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFSOEludEky","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFSOEludEk0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFSOFN0cg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFSYWlzZUV2ZW50","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFSZWNBbnNpVG9Vbmk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFSZWNEZXN0cnVjdA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFSZWNEZXN0cnVjdEFuc2k=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFSZWNVbmlUb0Fuc2k=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFSZWRpbQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFSZWRpbVByZXNlcnZl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFSZWZWYXJBcnk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFSZXN1bWU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFTZXRTeXN0ZW1FcnJvcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFTdHIyVmVj","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFTdHJCb29s","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFTdHJDYXQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFTdHJDbXA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFTdHJDb21w","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFTdHJDb3B5","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFTdHJFcnJWYXJDb3B5","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFTdHJJMg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFTdHJJNA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFTdHJNb3Zl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFTdHJSNA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFTdHJSOA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFTdHJUZXh0Q21w","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFTdHJUZXh0TGlrZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFTdHJUb0Fuc2k=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFTdHJUb1VuaWNvZGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFTdHJVSTE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFTdHJWYXJDb3B5","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFTdHJWYXJNb3Zl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFTdHJWYXJWYWw=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFVYm91bmQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFVSTFJMg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFVSTFJNA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFVbmtWYXI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFWYXIyVmVj","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFWYXJBYnM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFWYXJBZGQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFWYXJBbmQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFWYXJDYXQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFWYXJDbXBFcQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFWYXJDb3B5","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFWYXJEaXY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFWYXJEdXA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFWYXJFcnJJNA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFWYXJGaXg=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFWYXJnVmFy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFWYXJnVmFyTW92ZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFWYXJJbmRleExvYWQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFWYXJJbmRleExvYWRSZWY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFWYXJJbmRleExvYWRSZWZMb2Nr","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFWYXJJbmRleFN0b3Jl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFWYXJMYXRlTWVtQ2FsbExk","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFWYXJMYXRlTWVtQ2FsbExkUmY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFWYXJMYXRlTWVtU3Q=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFWYXJNb3Zl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFWYXJNdWw=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFWYXJOb3Q=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFWYXJPcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFWYXJTZXRPYmpBZGRyZWY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFWYXJTZXRWYXI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFWYXJTdWI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFWYXJUZXh0Q21wRXE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFWYXJUZXh0Q21wR2U=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFWYXJUZXh0Q21wR3Q=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFWYXJUZXh0Q21wTHQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFWYXJUZXh0Q21wTmU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFWYXJUZXh0VHN0RXE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFWYXJUZXh0VHN0R2U=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFWYXJUZXh0VHN0R3Q=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFWYXJUZXh0VHN0THQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFWYXJUZXh0VHN0TmU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFWYXJUc3ROZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFWYXJWYXJnTm9mcmVl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X192YmFWYXJaZXJv","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X2Fkal9mZGl2X20xNmk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X2Fkal9mZGl2X20zMg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X2Fkal9mZGl2X20zMmk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X2Fkal9mZGl2X202NA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X2Fkal9mZGl2X3I=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X2Fkal9mZGl2cl9tMTZp","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X2Fkal9mZGl2cl9tMzI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X2Fkal9mZGl2cl9tMzJp","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X2Fkal9mZGl2cl9tNjQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X2Fkal9mcGF0YW4=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X2Fkal9mcHJlbQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X2Fkal9mcHJlbTE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"X2Fkal9mcHRhbg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QSBQYXJpdHkgb3IgRnJhbWluZyBlcnJvciBvY2N1cnJlZCBvbiB0aGUgc2Nhbm5lciBzZXJpYWwgcG9ydC4gIENoZWNrIHRvIG1ha2Ugc3VyZSB0aGUgYmF1ZCByYXRlIGFuZCBvdGhlciBzZXJpYWwgc2V0dGluZ3MgYXJlIGNvcnJlY3Qu","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QSZ1ITgpJTU7","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"YWJvdXQ6Ymxhbms=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"YWJvdXQ6Ymxhbms/aGVscGluaXQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"YWJ5dFBvc3REYXRh","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QWNjZXNzIERlbmllZA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QWNjdXRyYWMgV2ViIEJyb3dzZXI=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QWRkLW9uXGFjY3V0cmFjLnByYw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QWRkLW9uXENlbnNpdHJhYy5wcmM=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QWRkTXNnTGluZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QWRkUmVjdkxpbmU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QWRkcmVzc0NoYW5nZWQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QWRkU2NhbkxpbmU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QWRkU2VuZExpbmU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QWRkVXBncmFkZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"YWR2YXBpMzIuZGxs","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QWxpZ25tZW50","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QWxpZ25Ub0FsaWdubWVudA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QWxsIEZpbGVzfCouKg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QWxsIFVzZXJzXERlc2t0b3A=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QWxsIFVzZXJzXFN0YXJ0IE1lbnU=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QWxsIFVzZXJzXFN0YXJ0IE1lbnVcUHJvZ3JhbXM=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QWxsIFVzZXJzXFN0YXJ0IE1lbnVcUHJvZ3JhbXNcU3RhcnR1cA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QWxyZWFkeSBleGlzdHMu","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QWx3YXlzVXNlRGVmYXVsdFByaW50ZXI=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QW1vdW50RG9uZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QW4gZXJyb3Igb2N1cnJlZCB3aGlsZSBkb3dubG9hZGluZywgaW52YWxpZCBzdGF0dXM6","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QW4gZXJyb3Igb2N1cnJlZCB3aGlsZSBkb3dubG9hZGluZzo=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QW4gb3ZlcnJ1biBvY2N1cnJlZCBvbiB0aGUgc2Nhbm5lciBzZXJpYWwgcG9ydC4gIFBsZWFzZSBzY2FuIHRoZSBpdGVtIGFnYWluLg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QW5zd2VyYm94","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QW55IHNldHRpbmdzIGNoYW5nZXMgeW91IG1hZGUgd2lsbCBiZSBsb3N0IHdoZW4gQ2Vuc2l0cmFjIGlzIHJlc3RhcnRlZA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QXBwbGljYXRpb24gRGF0YQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QXBwbGljYXRpb24gU2V0dXAgQ29tcGxldGU=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QXBwbGljYXRpb24gU2V0dXAgaW4gUHJvZ3Jlc3MuLi4=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QXBwbGljYXRpb25OYW1l","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QXJlIHlvdSBzdXJlIHlvdSB3YW50IHRvIHJlbW92ZSB0aGlzIGFwcGxpY2F0aW9uIGZyb20gdGhpcyBjb21wdXRlcj8=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QXJpYWwgQmxhY2s=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QXN5bmMgb3BlcmF0aW9uIGNvbXBsZXRlZA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QXV0b0xhYmVsUHJpbnQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QXV0b1NjYWxl","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QXV0b1NpemVHcmlk","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"YjQsNCxELGMxNCxyMTQsaA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"YmFja2dyb3VuZENvbG9y","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"YkFsbG93Q2FuY2Vs","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"YmFyY29kZSBpcyB0b28gbGFyZ2UgZm9yIGxhYmVs","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QmFyY29kZSBMYWJlbCBQcmludGVyOg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QmFyY29kZSBTY2FubmVy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QmFyY29kZVByaW50LmFzcA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QmFyY29kZVNjYW5uZXJQcmVmaXg=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QmFyY29kZVNjYW5uZXJQcmVmaXhDaGFuZ2Vk","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"YkFzUHJpbnRlZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QmF1ZCByYXRlLCBQYXJpdHksIERhdGEgQml0cywgU3RvcCBCaXRz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QkNERUZHSElK","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"YkNvbXBsZXRl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"YkRpc2FibGVUb29sVGlwcw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QmVlcCBvbiBSZXN1bHRz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QmVmb3JlIE5hdmlnYXRl","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"YkZvbnRCb2xk","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"YkZvbnRJdGFsaWM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"YkZvcmNlRGlyZWN0VG9QcmludGVy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"YkZvcmNlUHJldmlldw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QmxhbmsgbG9va3VwIGRhdGEgZm9y","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"YkxvY2FsT25seQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Qm9sZENvbHVtbkhlYWRpbmdz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Qm9yZGVyV2lkdGg=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QlAvQkFEe0NSfXtMRn0=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"YlByaW50Q3VycmVudFBhZ2VPbmx5","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QnJvd3NlclR5cGU=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"YlN5bmNFcnJvcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"YnRuRXhwb3J0","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"YzpcY2Vuc2lzXGxhYmVsc1xsYWJlbHRlc3QuaXBs","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"YzpcbXkgZG9jdW1lbnRz","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"YzpcTXkgRG9jdW1lbnRz","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"QzpcTXkgRG9jdW1lbnRzXA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"JVBST0dSQU1GSUxFUyVcKHg4NilcQ2Vuc2l0cmFjXFdCQ3VzdG9taXplci5kbGw=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"JVBST0dSQU1GSUxFUyVcKHg4NilcTWljcm9zb2Z0IFZpc3VhbCBTdHVkaW9cVkI5OFxpZWZyYW1lLm9jYQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"JVBST0dSQU1GSUxFUyVcKHg4NilcTWljcm9zb2Z0IFZpc3VhbCBTdHVkaW9cVkI5OFxWQjYuT0xC","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"JVdJTkRJUiVcU3lzV293NjRcTVNDT01NMzIub2Nh","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"JVdJTkRJUiVcU3lzV293NjRcTVNGTFhHUkQub2Nh","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"JVdJTkRJUiVcU3lzV09XNjRcbXNodG1sLnRsYg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"JVdJTkRJUiVcU3lzV09XNjRcbXN2YnZtNjAuZGxsXDM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2FiIEV4dHJhY3Q=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2FiIGZpbGUgbm90IGZvdW5kOg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2FjaGUgRW50cnkgRGVsZXRlZA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2FjaGUgUmVnIFNldHRpbmcgZmFpbGVkIDB4","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2FsY3VsYXRlUm93SGVpZ2h0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2FsbFdpbmRvd1Byb2NB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2FuY2VsIFN5bmM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2FuY2VsIHdhcyBzZWxlY3RlZA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2FuY2VsQnV0dG9u","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2FuY2VsRXJyb3I=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2FuY2VsbGVk","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2FuY2VsbGVkIEtleXN0cm9rZQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2FuY2VsbGluZy4uLg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2FwYWJpbGl0eQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2FwdGlvbkhlaWdodA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2FwdGlvbldJZHRo","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Y2JvQWRkcmVzcw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Y2JvRGF0YU1hdHJpeA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Y2JvTGFiZWxMYW5ndWFnZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Y2JvTWVkaWFUcmFja2luZw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Y2JvUHJpbnRlcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Y2JvUHJpbnRNb2Rl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Y2JvU2VyaWFsUG9ydA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Y2VsbEluZGV4","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2Vuc2lzIENlbnRyYWwgU2VydmVy","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2Vuc2lzIFB1YmxpYyAx","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2Vuc2lzIFB1YmxpYyAy","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2Vuc2lzIFRlY2hub2xvZ2llcw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2Vuc2lzIFRlY2hub2xvZ2llcywgSW5j","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2Vuc2l0cmFj","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2Vuc2l0cmFjIGJ5IENlbnNpcyBUZWNobm9sb2dpZXM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2Vuc2l0cmFjIGRsbCB1cGdyYWRlIGZhaWxlZC4=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2Vuc2l0cmFjIEVuZC1Vc2VyIFdvcmtzdGF0aW9u","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2Vuc2l0cmFjIEhlbHAgaXMgYmVpbmcgdXBkYXRlZC4uLg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2Vuc2l0cmFjIGlzIGJlaW5nIHVwZGF0ZWQuLi4=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2Vuc2l0cmFjIExhYmVs","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2Vuc2l0cmFjIE9wdGlvbnM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2Vuc2l0cmFjIFBQQyBTZXR1cCBpcyBiZWluZyB1cGRhdGVkLi4u","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2Vuc2l0cmFjIFJlbW90ZSBUZXJtaW5hbA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2Vuc2l0cmFjIFJlcG9ydA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2Vuc2l0cmFjIFJlcG9ydCBFeHBvcnQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2Vuc2l0cmFjIFJlcG9ydGluZw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2Vuc2l0cmFjIHJlcXVpcmVzIGEgcHJpbnRlciwgYnV0IG5vIHByaW50ZXIgaXMgaW5zdGFsbGVkLiAgQ29udGFjdCBzdXBlcnZpc29yLg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2Vuc2l0cmFjIFN5bmMgQ29tcGxldGVkISEh","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2Vuc2l0cmFjIFRlc3QgU2NhbnM=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2Vuc2l0cmFjIHVwZ3JhZGUgZmFpbGVkLg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2Vuc2l0cmFjIFdvcmtzdGF0aW9u","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2Vuc2l0cmFjLmJtcA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2Vuc2l0cmFjLmJtcCwkKEFwcFBhdGgpLCxmYWxzZSxmYWxzZQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2Vuc2l0cmFjLmRsbA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2Vuc2l0cmFjLmV4ZQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Y2Vuc2l0cmFjLmh0bQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2Vuc2l0cmFjX09ubGluZV9Vc2VyX01hbnVhbC5jaG0=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2Vuc2l0cmFjTG9va3Vw","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2Vuc2l0cmFjU2NhbnM=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2Vuc2l0cmFjU3BlZWNoIGluc3RhbGxlZA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2Vuc2l0cmFjU3BlZWNoIG1zaWV4ZWMgcmV0dXJuZWQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2Vuc2l0cmFjU3BlZWNoLm1zaQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2Vuc2l0cmFjU3luYy5kbGw=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2Vuc2l0cmFjU3luYy5kbGwsJChBcHBQYXRoKSxwYWxtLmV4ZSxmYWxzZSxmYWxzZQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2VudGVyRGlhbG9n","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2VudGVyRm9vdGVy","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2VudGVySGVhZGVy","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2VudGVySG9yaXpvbnRhbGx5","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2VudGVyVGl0bGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2hlY2tpbmcgQ2Vuc2l0cmFjIFBhbG0gU29mdHdhcmUgVmVyc2lvbg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2hlY2tTZXNzaW9u","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2hlY2tWZXJzaW9uSGVscA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2hlY2tWZXJzaW9uUFBDU2V0dXA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2hlY2tWZXJzaW9uUHJj","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2hpbGQgY2xhc3MgaXM=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Y2hpbGROb2Rlcw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Y2hrQXV0b0xhYmVsUHJpbnQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Y2hrRGlzYWJsZUVycm9yQmVlcA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Y2hrRGlzYWJsZVBkYQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Y2hrRGlzYWJsZVNwZWVjaA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Y2hrRGlzYWJsZVRvb2xUaXBz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Y2hrRGlzYWJsZVVwZ3JhZGVXYXJuaW5ncw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Y2hrRGlzcGxheUhvbWU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Y2hrRG14QmVlcA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Y2hrRG14RGVidWc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Y2hrTGFiZWxDYXB0aW9u","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Y2hrU2VyaWFsTG9n","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Y2hrU2l6aW5nRnJhbWU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Y2hrU29ydGVk","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2hvb3NlIENvbG9yIERpYWxvZyB3YXMgY2FuY2VsZWQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2hvb3NlQ29sb3JB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2hvb3NlRm9udEE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2hyIFRlc3Q=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2xlYXIgU3RhcnR1cCBTaXpl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2xlYXJpbmc=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2xpY2tEaWFsb2dCdXR0b24=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2xpZW50IFNvZnR3YXJlIFJlc291cmNlIHVwZGF0ZSBmYWlsZWQu","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Y2xpZW50VmVyc2lvbg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Y2xpZW50VmVyc2lvbkNobQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Y2xpZW50VmVyc2lvbkRsbA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Y2xpZW50VmVyc2lvblByYw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2xvc2UgYWxsIGFwcGxpY2F0aW9ucyBhbmQgdHJ5IGFnYWluIG9yIGNvbnRhY3QgcHJvZHVjdCBzdXBwb3J0","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2xvc2UgYWxsIGFwcGxpY2F0aW9ucyBhbmQgdHJ5IGFnYWluLg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2xvc2UgYWxsIG90aGVyIGFwcGxpY2F0aW9ucyBhbmQgUmV0cnkgb3IgY29udGFjdCBQcm9kdWN0IFN1cHBvcnQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2xvc2VkIFNvY2tldCBUZXN0","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2xvc2VEbGcoRGxnQnRuMik=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2xvc2VIYW5kbGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2xvc2VQcmludGVy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Y2xvc2Vzb2NrZXQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2xvc2luZyBQcmV2aW91cyBJbnN0YW5jZQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q2xyVXNlZDo=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q0xTSURGcm9tU3RyaW5n","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Y2xzSW5ldENwcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Y2xzSW5ldENwci5HZXRNYWNBZGRy","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Y2xzV2ViU2luaw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Y21kQmFyY29kZVNjYW5uZXJEZWZhdWx0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Y21kQ2FuY2Vs","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Y21kQ2xlYXJQcmludGVy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Y21kQ29tbVJlZnJlc2g=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Y21kQ29uZmlybQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Y21kRGVsZXRl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Y21kUFBDU2V0dXA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Y21kUHJpbnRlclJlZnJlc2g=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Y21kUmVzdG9yZUhvbWU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Y21kU2F2ZUFkZHJlc3M=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Y21kU2F2ZUFz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Y21kU2F2ZVByaW50ZXI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Y21kU2VyaWFsQ21kVGVzdA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Y21kU2VyaWFsRGVmYXVsdHM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Y05DTWV0cmljcw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Y05ld0RpYWxvZw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q29DcmVhdGVJbnN0YW5jZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q29sb3JGbGFncw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q29sb3VyVHlwZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Y29sdW1uRGF0YXR5cGVz","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q09NRExHMzIuRExM","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Y29tbWFuZC5jb20gL2M=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q29tbURsZ0V4dGVuZGVkRXJyb3I=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q29tbW9uIEFwcERhdGE=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q29tbW9uIERlc2t0b3A=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q29tbW9uIFByb2dyYW1z","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q29tbW9uIFN0YXJ0IE1lbnU=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q29tbW9uIFN0YXJ0dXA=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q29tcGFueU5hbWU=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q29tcGxldGVk","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q29uZmlybWVk","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q29ubmVjdGVkIHN1Y2Nlc3NmdWxseQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q29ubmVjdGluZyB0byBSZW1vdGUgRGV2aWNlLi4u","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q29ubmVjdGluZyB0byBzb2NrZXQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q29ubmVjdGlvbiBjbG9zZWQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q29ubmVjdGlvbiBoYW5kbGUgdGVybWluYXRlZA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q29ubmVjdGlvbjogQ2xvc2U=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q29udGFjdCBDZW5zaXRyYWMgUHJvZHVjdCBTdXBwb3J0","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q29udGFjdCBwcm9kdWN0IHN1cHBvcnQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q29udGFjdCBQcm9kdWN0IFN1cHBvcnQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q29udGFjdCBwcm9kdWN0IHN1cHBvcnQu","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q29udGFjdCBQcm9kdWN0IFN1cHBvcnQuICBFcnJvciBudW1iZXI=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q29udGFjdCBQcm9kdWN0IFN1cHBvcnQ6","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q29udGFjdCBwcm9ncmFtbWVyOyBUaGUgZm9sbG93aW5nIGVycm9yIG9jY3VycmVkIHdoaWxlIGxvYWRpbmc6","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q29udGFpbmVycw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q29udGVudC1MZW5ndGg=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q29udGVudC1UeXBl","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q29udGVudC1UeXBlOiBhcHBsaWNhdGlvbi94LXd3dy1mb3JtLXVybGVuY29kZWQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q29udGVudExlbmd0aA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q29udGlub3VzIQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q29udmVydFRhZ3M=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q29weUZvbnRFbA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q29weVBvc2l0aW9uRWw=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q29weXJpZ2h0IChjKSAxOTk0","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q291bGQgbm90IGNvcHkgZXhlY3V0YWJsZSB0byBzdGFydCBpbnN0YWxsIHByb2Nlc3M7IENvbnRhY3QgcHJvZHVjdCBzdXBwb3J0","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q291bGQgbm90IGNyZWF0ZSBhcHBsaWNhdGlvbiBmb2xkZXIuICBNYWtlIHN1cmUgY3VycmVudCBsb2dvbiBoYXMgc3VmZmljaWVudCBhdXRob3JpdHkgdG8gaW5zdGFsbCBhcHBsaWNhdGlvbnMgb3IgY29udGFjdCBwcm9kdWN0IHN1cHBvcnQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q291bGQgbm90IGNyZWF0ZSBiYWNrdXAgb2YgY3VycmVudCB2ZXJzaW9uOyBDb250YWN0IHByb2R1Y3Qgc3VwcG9ydA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q291bnQsIEF2ZywgTWluLCBNYXg6","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q291bnRHcmlkUm93cw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q291bnRQYWdlcw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q3ByYXAgaGVhZGVyIG5vdCBmb3VuZA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlICZTcHJlYWRzaGVldA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlIFByb2Nlc3M=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlQml0bWFw","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlQ29tcGF0aWJsZUJpdG1hcA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlQ29tcGF0aWJsZURD","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlRGlyZWN0b3J5QQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlRm9udEluZGlyZWN0QQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlUHJvY2Vzc0E=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlUmVjdFJnbg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlUmVwb3J0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlUmVwb3J0T2xk","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlU29saWRCcnVzaA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlV2luZG93RXhB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q1QwMUowMDA1NQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q1QwMUowMDA1Ng==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q1QwMUowMDA1Nw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q1QwMUowMDA1OA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q1QwMUowMDA1OQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q1QwMUowMDA2MA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q1QwMUowMDA5OA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q1QwMUowMDA5OQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q1RTeXNCYWNrdXA=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q3VycmVudENoYWxsZW5nZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Y3VycmVudGx5Og==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Y3VycmVudFN0eWxl","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q3VzdG9tIEZvbnQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q3VzdG9tIFJlcG9ydA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q3VzdG9tQ29sb3I=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q3VzdG9tUHJpbnQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q3VzdG9tV0JfQWNjZWxlcmF0b3JLZXlEb3du","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q3VzdG9tV0JfU2hvd0NvbnRleHRNZW51","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q3VzdG9tV0JIZWxw","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q3VzdG9tV0JIZWxwX0FjY2VsZXJhdG9yS2V5RG93bg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Q3VzdG9tV0JIZWxwX1Nob3dDb250ZXh0TWVudQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Y3gofFJhPDli","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"ZDAsNTA7PEVUWD4=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"ZDAsNjA7PEVUWD4=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"ZDMsQ2Vuc2l0cmFjOzxFVFg+","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"REFUX0lNQUdFTkFUSVZFWEZFUiBGYWlsZWQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"REFUQU1BVFJJWA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RGF0YU1hdHJpeFNpemU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RGF0YVNvdXJjZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"REFUQVZBTFVF","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RGVjb2RlUXVlcnlTdHJpbmc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RGVmYXVsdCBUb29sIHRpbWU6","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RGVmYXVsdEV4dA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RGVsZXRlIHRoZSBzZWxlY3RlZCByb3cgaW4gdGhlIHNjYW4gbGlzdA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RGVsZXRlQ2FjaGVFbnRyeQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RGVsZXRlaW5nIENhY2hlIEVudHJ5","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RGVsZXRlT2JqZWN0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RGVsZXRlVXJsQ2FjaGVFbnRyeUE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RGVzdHJveVdpbmRvdw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RGV2aWNlQWNxdWlyZQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RGV2aWNlTGlzdA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RGV2aWNlTmFtZQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RGV2aWNlUXVhbGl0eQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RGV2aWNlU2VsZWN0","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RGlhbG9nIGZvdW5kOg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RGlhbG9nQ2xvc2U=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RGlhbG9nSG9vaw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RGlhbG9nVGl0bGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RGlyZWN0VG9QcmludGVy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RGlzYWJsZSBFcnJvciBCZWVw","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RGlzYWJsZSBMYWJlbCBwcmludA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RGlzYWJsZSBQREEgU3VwcG9ydA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RGlzYWJsZSBTcGVlY2g=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RGlzYWJsZSBUb29sIFRpcHM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RGlzYWJsZSBVcGdyYWRlIFdhcm5pbmdz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RGlzYWJsZUVycm9yQmVlcA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RGlzYWJsZVNvY2tldERpc2Nvbm5lY3Q=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RGlzYWJsZVNwZWVjaA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RGlzYWJsZVRvb2xUaXBz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RGlzYWJsZVVwZ3JhZGVXYXJuaW5ncw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RGlzY29ubmVjdA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RGlzY29ubmVjdFNvY2tldA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RGlzY29ubmVjdFNvY2tldCBGYWlsZWQgdG8gb2J0YWluIHNvY2tldCBoYW5kbGU=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RGlzcGF0Y2hNZXNzYWdlQQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RGlzcGxheSBIb21lIGluIFRpdGxlIEJhcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RGlzcGxheUhvbWU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RGlzcGxheU5hbWU=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RGxsRnVuY3Rpb25DYWxs","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RGxsUmVnaXN0ZXJTZXJ2ZXI=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RGxsVW5yZWdpc3RlclNlcnZlcg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"ZG1PcmllbnRhdGlvbg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RG14IEludGVydmFsIG11c3QgYmUgbnVtZXJpYw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RG14IFJlYWQgSW50ZXJ2YWwgKG1zKTo=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RG14IFNjYW5uZXI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RG14IFN1cGVybWFya2V0IFRpbWVvdXQgKG1zKTo=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RG14IFRpbWVvdXQgbXVzdCBiZSBudW1lcmlj","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RE14QXV0b0lE","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RE14QXV0b0lEKw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RG14SW50ZXJ2YWw=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RG14VGltZW91dA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RG8geW91IHdhbnQgdGhpcyBhcHBsaWNhdGlvbiB0byBzdGFydCBhdXRvbWF0aWNhbGx5Pw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RG8geW91IHdhbnQgdG8gb3ZlcndyaXRlPw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RG8geW91IHdhbnQgdG8gcmUtaW5zdGFsbCBub3c/","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RG8geW91IHdhbnQgdG8gcmVib290IG5vdz8=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RG8geW91IHdhbnQgdG8gc3RhcnQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RG9jRXJyb3JDaGVjayBiZ2NvbG9yOg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RG9jdW1lbnQgQ29tcGxldGU=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"ZG9jdW1lbnQuY29va2llID0gJ3drc3RuPScgKyBlc2NhcGUoJw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RG9jdW1lbnRQcm9wZXJ0aWVzQQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RG93bmxvYWQgYmVnaW4gZnJvbSB0aHJlYWQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RG93bmxvYWQgY29tcGxldGUgZnJvbSB0aHJlYWQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RG93bmxvYWQgSGVscGVyOg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RG93bmxvYWRpbmc=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"ZG93bmxvYWRpbmcgaGVscA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RG93bmxvYWRpbmcgUGFsbSBVcGdyYWRl","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RG93bmxvYWRpbmcgUmVzb3VyY2Vz","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RG93bmxvYWRpbmcgVXBncmFkZQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RG93bmxvYWRJbnN0YWxsRmlsZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RHJhd1RleHRB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RHJhd1RleHRFeEE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RFNNX0VudHJ5","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RHVwbGljYXRl","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RW5hYmxlRG14RGlhZ25vc3RpY0JlZXA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RW5hYmxlV2luZG93","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RW5kRG9jUHJpbnRlcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RW5kUGFnZVByaW50ZXI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RW50ZXIgQ2Vuc2l0cmFjICdIb21lJyAoQnVmZmVyIE1hY2hpbmUgTmFtZTpQb3J0KQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RW50ZXIgZmlsZW5hbWUgYXMgaW5zdHJ1Y3RlZCBieSBQcm9kdWN0IFN1cHBvcnQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RW50ZXIgdGhlIG51bWJlciBvZiBjb3BpZXMgcmVxdWlyZWQ6","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"ZW50cnkgcG9pbnQgbm90IGZvdW5k","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RW51bUNoaWxkV2luZG93cw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RW51bVByb3BzOg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RW51bVByb3BzQQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RW51bVRocmVhZFdpbmRvd3M=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RW51bVdpbmRvd3M=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RXF1aXBtZW50","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RXJyb3IgY2hhbmdpbmcgcHJpbnRlci4uLmN1cnJlbnQgcHJpbnRlciBpczo=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RXJyb3IgY3JlYXRpbmcgdGh1bWJuYWls","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RXJyb3IgRXh0cmFjdGluZyBDYWJpbmV0IFJlc291cmNlOg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RXJyb3IgaW4gQmVmb3JlTmF2aWdhdGU6","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RXJyb3IgaW4gRG9jdW1lbnRDb21wbGV0ZTo=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RXJyb3IgaW4gc2V0dXAsIGZpbGUgc2tpcHBlZDogZGVzdGluYXRpb24gZXhjZWVkcyBNQVhfUEFUSCBsZW5ndGg6","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RXJyb3IgaW4gc2V0dXAsIGZpbGUgc2tpcHBlZDogZmFpbGVkIHRvIGNyZWF0ZSBkZXN0aW5hdGlvbiBmb2xkZXI6","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RXJyb3IgaW4gc3RhcnQgdXAuLi5UaGUgYXBwbGljYXRpb24gaXMgbm90IHByb3Blcmx5IGluc3RhbGxlZC4=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RXJyb3IgaW4gU3RhdHVzVGV4dENoYW5nZTo=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RXJyb3IgaW4gV2luZG93Q2xvc2luZzo=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RXJyb3IgaW5zdGFsbGluZyBDZW5zaXRyYWNTcGVlY2ggd2l0aCBtc2kgYXV0b21hdGlvbjo=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RXJyb3IgaW5zdGFsbGluZyBDZW5zaXRyYWNTcGVlY2ggd2l0aCBtc2lleGVjOg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RXJyb3IgbG9hZGluZyBwaWN0dXJl","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RXJyb3IgT3BlbmluZyBTZXJpYWwgUG9ydA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RXJyb3Igc2V0dGluZyBMaW5nZXI=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RXJyb3IgU3luY1NoZWxsIGZhaWxlZCBmb3IgQ2Vuc2l0cmFjU3BlZWNoLm1zaSBjb21tYW5kIGxpbmU=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RXJyb3IgdHJ5aW5nIHRvIHdyaXRlIFN5c0JhY2t1cExvZzo=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RXJyb3Igd2hpbGUgdHJ5aW5nIHRvIHJlZHVjZSB0aGUgc2l6ZSBvZiB0aGUgc3luYyBsb2c6","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RXJyb3IsIGV4Y2VlZHMgTUFYX1BBVEg6","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RXJyb3IsIGZhaWxlZCB0byBjcmVhdGUgdGFyZ2V0IGZvbGRlcjo=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RXJyb3IsIFRyYW5zYWN0aW9uIG5vdCBjb25maXJtZWQgYnkgcGFnZQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RXJyb3I6IENhbm5vdCBwZXJmb3JtIGhvc3QtYmFzZWQgaW5zdGFsbHMgYmVjYXVzZSB0aGUgSG9tZSBhZGRyZXNzIGlzIGJsYW5r","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RXJyb3I6IENlbnNpdHJhYyBkbGwgdXBncmFkZSBub3QgaW5zdGFsbGVkIGJlY2F1c2UgdXNlciBsYWNrcyBmb2xkZXIgcGVybWlzc2lvbnM=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RXJyb3I6IENlbnNpdHJhYyB1cGdyYWRlIG5vdCBpbnN0YWxsZWQgYmVjYXVzZSB1c2VyIGxhY2tzIGZvbGRlciBwZXJtaXNzaW9ucw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RXJyb3I6IERldlBhdGggcmVxdWVzdGVkIGJ1dCBub3QgaW4gdGhlIGRldmVsb3BtZW50IGVudmlyb25tZW50","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RXJyb3I6IEhlbHAgREwgRmFpbGVkLA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RXJyb3I6IEhlbHAgaW52b2tlZCBidXQgZmlsZSBub3QgZm91bmQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RXJyb3I6IEhlbHAgdXBncmFkZSBmYWlsZWQgYmVjYXVzZSBjbGllbnRWZXJzaW9uQ2htIG5vdCBmb3VuZA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RXJyb3I6IFJlcG9ydCBFeHBvcnQgZmFpbGVkLg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RXJyb3I6IHdoaWxlIGRvd25sb2FkaW5n","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSFRUUF9DT09LSUVfREVDTElORUQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSFRUUF9DT09LSUVfTkVFRFNfQ09ORklSTUFUSU9O","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSFRUUF9ET1dOTEVWRUxfU0VSVkVS","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSFRUUF9IRUFERVJfQUxSRUFEWV9FWElTVFM=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSFRUUF9IRUFERVJfTk9UX0ZPVU5E","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSFRUUF9JTlZBTElEX0hFQURFUg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSFRUUF9JTlZBTElEX1FVRVJZX1JFUVVFU1Q=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSFRUUF9JTlZBTElEX1NFUlZFUl9SRVNQT05TRQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSFRUUF9OT1RfUkVESVJFQ1RFRA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSFRUUF9SRURJUkVDVF9GQUlMRUQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSFRUUF9SRURJUkVDVF9ORUVEU19DT05GSVJNQVRJT04=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfQVNZTkNfVEhSRUFEX0ZBSUxFRA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfQkFEX0FVVE9fUFJPWFlfU0NSSVBU","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfQkFEX09QVElPTl9MRU5HVEg=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfQkFEX1JFR0lTVFJZX1BBUkFNRVRFUg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfQ0FOTk9UX0NPTk5FQ1Q=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfQ0hHX1BPU1RfSVNfTk9OX1NFQ1VSRQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfQ0xJRU5UX0FVVEhfQ0VSVF9ORUVERUQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfQ0xJRU5UX0FVVEhfTk9UX1NFVFVQ","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfQ09OTkVDVElPTl9BQk9SVEVE","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfQ09OTkVDVElPTl9SRVNFVA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfRElBTE9HX1BFTkRJTkc=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfRElTQ09OTkVDVEVE","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfRVhURU5ERURfRVJST1I=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfRk9SQ0VfUkVUUlk=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfSEFORExFX0VYSVNUUw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfSFRUUF9UT19IVFRQU19PTl9SRURJUg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfSFRUUFNfSFRUUF9TVUJNSVRfUkVESVI=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfSFRUUFNfVE9fSFRUUF9PTl9SRURJUg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfSU5DT1JSRUNUX0ZPUk1BVA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfSU5DT1JSRUNUX0hBTkRMRV9TVEFURQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfSU5DT1JSRUNUX0hBTkRMRV9UWVBF","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfSU5DT1JSRUNUX1BBU1NXT1JE","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfSU5DT1JSRUNUX1VTRVJfTkFNRQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfSU5TRVJUX0NEUk9N","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfSU5URVJOQUxfRVJST1I=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfSU5WQUxJRF9DQQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfSU5WQUxJRF9PUEVSQVRJT04=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfSU5WQUxJRF9PUFRJT04=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfSU5WQUxJRF9QUk9YWV9SRVFVRVNU","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfSU5WQUxJRF9VUkw=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfSVRFTV9OT1RfRk9VTkQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfTE9HSU5fRkFJTFVSRQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfTUlYRURfU0VDVVJJVFk=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfTkFNRV9OT1RfUkVTT0xWRUQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfTkVFRF9VSQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfTk9fQ0FMTEJBQ0s=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfTk9fQ09OVEVYVA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfTk9fRElSRUNUX0FDQ0VTUw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfTk9UX1BST1hZX1JFUVVFU1Q=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfT1BFUkFUSU9OX0NBTkNFTExFRA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfT1BUSU9OX05PVF9TRVRUQUJMRQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfT1VUX09GX0hBTkRMRVM=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfUE9TVF9JU19OT05fU0VDVVJF","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfUFJPVE9DT0xfTk9UX0ZPVU5E","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfUFJPWFlfU0VSVkVSX1VOUkVBQ0hBQkxF","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfUkVESVJFQ1RfU0NIRU1FX0NIQU5HRQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfUkVHSVNUUllfVkFMVUVfTk9UX0ZPVU5E","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfUkVRVUVTVF9QRU5ESU5H","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfUkVUUllfRElBTE9H","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfU0VDX0NFUlRfQ05fSU5WQUxJRA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfU0VDX0NFUlRfREFURV9JTlZBTElE","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfU0VDX0NFUlRfUkVWT0tFRA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfU0VDX0lOVkFMSURfQ0VSVA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfU0VDVVJJVFlfQ0hBTk5FTF9FUlJPUg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfU0VSVkVSX1VOUkVBQ0hBQkxF","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfU0hVVERPV04=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfVENQSVBfTk9UX0lOU1RBTExFRA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfVElNRU9VVA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfVU5BQkxFX1RPX0NBQ0hFX0ZJTEU=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfVU5BQkxFX1RPX0RPV05MT0FEX1NDUklQVA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVJST1JfSU5URVJORVRfVU5SRUNPR05JWkVEX1NDSEVNRQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RXJyb3JCZWVw","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RXJyb3JCZWVwRW5hYmxlZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RXJyb3JNZXNzYWdlRGl2","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVZFTlRfU0lOS19BZGRSZWY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVZFTlRfU0lOS19HZXRJRHNPZk5hbWVz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVZFTlRfU0lOS19JbnZva2U=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVZFTlRfU0lOS19RdWVyeUludGVyZmFjZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RVZFTlRfU0lOS19SZWxlYXNl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RXhjZWwgU3ByZWFkc2hlZXQgKCoueGxzKXwqLnhsc3xUYWItRGVsaW1pdGVkIFNwcmVhZHNoZWV0ICgqLnR4dCl8Ki50eHR8Q29tbWEtU2VwYXJhdGVkIFNwcmVhZHNoZWV0ICgqLmNzdil8Ki5jc3Y=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RXhjZWwuQXBwbGljYXRpb24=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"ZXhlY1NjcmlwdA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RXhlY1NjcmlwdEFsbEZyYW1lcw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RXhpdEFwcC5hc3A=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RXhpdFdpbmRvd3NFeA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RXhwb3J0IGZhaWxlZC4=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RXhwb3J0UmVwb3J0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RXhwb3J0UmVwb3J0Q2xpY2tlZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RXh0cmFJbmZv","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"ZjdPNi9XbEpzMQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RmFpbGVkIGZvcg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RmFpbGVkIHRvIGNoYW5nZSBkZWZhdWx0IHByaW50ZXIgaW4gUHJpbnRSZXBvcnQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RmFpbGVkIHRvIGNyZWF0ZSBTaGVsbCBvYmplY3QgaW4gUHJpbnRSZXBvcnQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RmFpbGVkIHRvIGNyZWF0ZSBzaG9ydGN1dCBpbg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RmFpbGVkIHRvIGNyZWF0ZSBzaG9ydGN1dCBpbiBDb21tb24gRGVza3RvcCBmb2xkZXI=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RmFpbGVkIHRvIGNyZWF0ZSBzaG9ydGN1dCBpbiBTdGFydCBNZW51","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RmFpbGVkIHRvIGNyZWF0ZSBzaG9ydGN1dCBpbiBTdGFydHVwIGZvbGRlcg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RmFpbGVkIHRvIGNyZWF0ZSBTeXN0ZW0gQmFja3VwIEZvbGRlcg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RmFpbGVkIHRvIGxvYWQgQ2Vuc2l0cmFjU3luYy5kbGw=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RmFpbGVkIHRvIHJlYWNoIENlbnNpdHJhYyBzZXJ2ZXIuICBQbGVhc2UgY29udGFjdCBQcm9kdWN0IFN1cHBvcnQu","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RmFpbGVkIHRvIHNhdmUgc2V0dGluZ3M=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"ZmFpbGVkIHRvIHNldCBzeXN0ZW0gcGFyYW1ldGVycw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RiVXSU5ESVIlXFN5c1dPVzY0XHN0ZG9sZTIudGxi","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RmlsZSBFcnJvcjo=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RmlsZSBpbiBVc2U=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RmlsZSBJbiBVc2U6","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RmlsZSBNb3Zl","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RmlsZSBNb3ZlIERlbGV0ZQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RmlsZSBub3QgZm91bmQsIGNoZWNrIHlvdXIgdHlwaW5n","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RmlsZSBOb3QgRm91bmQ6","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RmlsZUNoYW5nZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RmlsZUZsYWdz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RmlsZUxpbmtWYWxpZA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RmlsZVRpdGxl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RmlsZVZlcnNpb24=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RmlsdGVySW5kZXg=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RmluZFdpbmRvd0E=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"ZmluZ2VycHJpbnQuZGxs","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Rml0VG9QYWdlc1RhbGw=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Rml0VG9QYWdlc1dpZGU=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Rm9sZGVyQ2hhbmdl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Rm9udCBTbW9vdGhpbmcgb3B0aW9uIG5vdCBmb3VuZC4gIEluc3RhbGwgdGhlIFBsdXMgUGFjayBhbmQgZW5hYmxlIHRoZSBGb250IFNtb290aGluZyBkaXNwbGF5IHByb3BlcnR5IGZvciBiZXN0IHJlc3VsdHMu","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Rm9udCBTbW9vdGhpbmcgUmVnIGZhaWxlZCAweA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Rm9udENoYW5nZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Rm9udENvbG9y","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Zm9udEZhbWlseQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Rm9udEZsYWdz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Rm9udEl0YWxpYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Rm9udE1heFNpemU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Rm9udE1pblNpemU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Zm9udFN0eWxl","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Zm9udFdlaWdodA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Rm9yY2VDb21wbGV0ZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Rm9yZUNvbG9y","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Rm9ybSBLZXkgRG93bjo=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Rm9ybSBLZXkgVXA6","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Rm9ybWF0TWVzc2FnZUE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"ZnJhTG9hZGluZw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RnJlZUxpYnJhcnk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"ZnJtQXBwQWRkcmVzcw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"ZnJtTXNnYm94","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"ZnJtUHJpbnRpbmc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"ZnJtUHJvZ3Jlc3M=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"ZnJtUmVwb3J0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"ZnJtU2NhblNpbXVsYXRvcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"ZnJtU2VyaWFsTG9n","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"ZnJtU3luY0NvbmZpcm0=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"ZnJtV2ViQnJvd3Nlcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"ZnJvbSB0aHJlYWQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RnRjIENvbm5lY3RlZA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RnRjIERpc2Nvbm5lY3RlZA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RnRjIEVycm9yOg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RnRjIE9wZW4gRmFpbGVkOg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RnRjRGF0YWJhc2VEZWxldGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RnRjRGF0YWJhc2VSZWFk","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RnRjRGF0YWJhc2VXcml0ZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RnRjRGJJbmZv","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RnRjREJMaXN0RW50cmllc0NvdW50","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RnRjREJMaXN0RW50cmllc0dldA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RnRjREJMaXN0TG9hZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RnRjSXNDb25uZWN0ZWQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RnRjTXNnV3JpdGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RnRjUmVjb3JkRGVsZXRl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RnRjUmVjb3JkUmVhZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RnRjUmVjb3JkV3JpdGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RnRjUmVzZXRDb25uZWN0aW9u","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RnRjU2Vzc2lvbkVuZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RnRjU3lzdGVtSW5mb1JlYWQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RnRjVHJhbnNhY3Rpb25SZWFk","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"RnVsbHNjcmVlbg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"ZnVuY3Rpb24gZmFpbGVk","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R0RJKyBNb2R1bGU=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2RpcEJpdG1hcFNldFJlc29sdXRpb24=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2RpcENyZWF0ZUJpdG1hcEZyb21HZGlEaWI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2RpcENyZWF0ZUJpdG1hcEZyb21HZGlEaWIgRmFpbGVk","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2RpcENyZWF0ZUJpdG1hcEZyb21IQklUTUFQ","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2RpcENyZWF0ZUJpdG1hcEZyb21IQklUTUFQIEZhaWxlZA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2RpcENyZWF0ZUJpdG1hcEZyb21ISUNPTg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2RpcENyZWF0ZUZyb21IREM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2RpcENyZWF0ZU1ldGFmaWxlRnJvbUVtZg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2RpcENyZWF0ZU1ldGFmaWxlRnJvbVdtZg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2RpcERlbGV0ZUdyYXBoaWNz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2RpcERpc3Bvc2VJbWFnZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2RpcERyYXdJbWFnZVJlY3RJ","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2RpcERyYXdJbWFnZVJlY3RSZWN0SQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2RpcEdldEltYWdlRW5jb2RlcnM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2RpcEdldEltYWdlRW5jb2RlcnNTaXpl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2RpcEdldEltYWdlSGVpZ2h0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2RpcEdldEltYWdlUmF3Rm9ybWF0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2RpcEdldEltYWdlVGh1bWJuYWls","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2RpcEdldEltYWdlV2lkdGg=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2RpcEltYWdlUm90YXRlRmxpcA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2RpcExvYWRJbWFnZUZyb21GaWxl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Z2RpcGx1cy5kbGw=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2RpcGx1c1NodXRkb3du","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2RpcGx1c1N0YXJ0dXA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2RpcFJvdGF0ZVdvcmxkVHJhbnNmb3Jt","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2RpcFNhdmVJbWFnZVRvRmlsZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2RpcFNldEludGVycG9sYXRpb25Nb2Rl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0QWJzb2x1dGVQb3NpdGlvbkVs","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0QWN0aXZlRnJhbWVEb2M=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0QWN0aXZlRnJhbWVEb2NOYW1l","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0QWN0aXZlRnJhbWVXaW5kb3c=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0Q2FwdHVyZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0Q2xhc3NOYW1lQQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0Q2xpZW50UmVjdA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0Q29tbWFuZExpbmVB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0Q29tcHV0ZXJOYW1lQQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0Q3VycmVudFByb2Nlc3NJZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0Q3VycmVudFRocmVhZElk","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RGVza3RvcFdpbmRvdw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RGV2aWNlQ2Fwcw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RGlhbG9nQnV0dG9u","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RGlzcERvYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RGlzcEZyYW1l","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RGlzcEZyYW1lTmFtZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RGlzcFVybA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RGlzcFdpbmRvdw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RGxnQ3RybElE","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RGxnSXRlbQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RGxnSXRlbUludA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RGxnSXRlbVRleHRB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RG9jT2Jq","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RG9jVGV4dA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RG9jVGl0bGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Z2V0RWxlbWVudHNCeVRhZ05hbWU=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RXhpdENvZGVQcm9jZXNz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RmlsZVZlcnNpb25JbmZvQQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RmlsZVZlcnNpb25JbmZvU2l6ZUE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0Rm9yZWdyb3VuZFdpbmRvdw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0SGVhZGVy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0TGFzdEVycm9y","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0TG9va3Vwcygn","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0TWFwTW9kZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0TWVudUl0ZW1Db3VudA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0TWVudUl0ZW1JRA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0TWVudVN0YXRl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0TWVudVN0cmluZ0E=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0TWVzc2FnZUE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0TWV0cmljcw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0TW9kdWxlRmlsZU5hbWVB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0TW9kdWxlSGFuZGxlQQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0T3BlbkZpbGVOYW1lQQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0UGFnZURvYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0UGFyZW50","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0UHJvY2Vzc0hlYXA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0U2F2ZUZpbGVOYW1lQQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0U3ViTWVudQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0U3lzQ29sb3I=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0U3lzdGVtRGlyZWN0b3J5QQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0U3lzdGVtTWVudQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0U3lzdGVtTWV0cmljcw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0VGFibGVDbGlw","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0VGFibGVGb3JtYXRTdHJpbmc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0VGFibGVSb3dDbGlw","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0VGVtcEZpbGVOYW1lQQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0VGVtcFBhdGhB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0VGV4dEV4dGVudEV4UG9pbnRB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0VHJhbnNhY3Rpb25FcnJvcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0VXJsQ2FjaGVFbnRyeUluZm9B","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0VmVyc2lvbg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0VmVyc2lvbkV4QQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0V2luZG93","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0V2luZG93TG9uZ0E=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0V2luZG93TW9kdWxlRmlsZU5hbWVB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0V2luZG93UGxhY2VtZW50","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0V2luZG93UmVjdA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0V2luZG93VGV4dEE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2V0V2luZG93VGhyZWFkUHJvY2Vzc0lk","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2xvYmFsQWxsb2M=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2xvYmFsRnJlZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2xvYmFsTG9jaw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2xvYmFsU2l6ZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R2xvYmFsVW5sb2Nr","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Z290byBsb29w","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Z3JkUmVwb3J0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Z3JkUmVwb3J0Mg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R3JpZCBGb250IEhlaWdodDo=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Z3JpZF9jb2xvcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R3JpZEV4cGFuZFJvdw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R3JpZFNxdWVlemVDb2x1bW4=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"R3JpZFRvdGFsQ29sV2lkdGg=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"aCx7IGpMbnxY","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"aENvbm5lY3Rpb24=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SGVhZGVyQmVlcA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SGVhZGVySGVscENtZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SGVhZGVySGVscENvbnRyb2w=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SGVhZGVySGVscENvbnRyb2wudmFsdWU9Z2V0QWN0aXZlRnJhbWUoKS5pZA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SGVhZGVyUHJpbnQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SGVhZGVyUHJpbnRDb250cm9s","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SGVhcEFsbG9j","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SGVscCBDaHVuaw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SEVMUCBDbG9zaW5n","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SEVMUCBDbG9zaW5nOg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SGVscCBEb2N1bWVudCBDb21wbGV0ZQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SEVMUCBHb0JhY2s=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SGVscCBTdGFydCBDb21wbGV0ZTo=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SEVMUCBTdGFydDo=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"aGVscEZyYW1l","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SGlkZUxvYWRpbmc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SGl0IEFsdCtUYWIgdGhlbiBIaXQgYW55IGtleSB0byB1cGdyYWRlIENlbnNpdHJhYw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SGl0IGFueSBrZXkgdG8gY2xvc2UgdGhlIGFwcGxpY2F0aW9u","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SGl0IFJldHJ5OyBpZiBlcnJvciBjb250aW51ZXMgY29udGFjdCBwcm9kdWN0IHN1cHBvcnQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"aG9tZS5pbmksJChBcHBQYXRoKSwsZmFsc2UsZmFsc2U=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SG9tZUluZGV4","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SG9tZU92ZXJyaWRl","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SHRtbEVzY2FwZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SFRUUCA0MDMuOQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SFRUUCByZWRpcmVjdGVk","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"aHR0cDovL2ViaGJ1ZmZlcg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SHR0cEVuZFJlcXVlc3RB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SHR0cE9wZW5SZXF1ZXN0QQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SHR0cFF1ZXJ5SW5mb0E=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SHR0cFNlbmRSZXF1ZXN0QQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SHR0cFNlbmRSZXF1ZXN0RXhB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SUUgZm91bmQ6","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SUUgSG9va2VkIQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"aWVmcmFtZS5kbGw=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"aUV0RXRVTWNjRjk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"aWYgRVJST1JMRVZFTCAxIGdvdG8gbG9vcA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"aWYgRVhJU1Q=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"aWYodHlwZW9mKHNjYW5uZXJfY2hhbmdlUHJlZml4KSE9J3VuZGVmaW5lZCcpc2Nhbm5lcl9jaGFuZ2VQcmVmaXgoJw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"aWYodHlwZW9mKHNjYW5uZXJfc2Nhbm5lZElEKSE9J3VuZGVmaW5lZCcpIHNjYW5uZXJfc2Nhbm5lZElEKCc=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"aWYodHlwZW9mKFpvb20pIT0ndW5kZWZpbmVkJykgWm9vbSgn","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"aUZvbnRTaXpl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SWdub3JlQ2VydENB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SWdub3JlQ2VydENO","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SW1hZ2UgUXVhbGl0eSBtdXN0IGJlIG51bWVyaWM=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SW1hZ2UgUXVhbGl0eSByYW5nZSBpcyAxLTEwMA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SW1hZ2UgU2F2ZWQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SW1hZ2UgU2NhbiBRdWFsaXR5Og==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"aW1hZ2UvanBlZw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SW1hZ2VGaWxlTmFtZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SW1hZ2VOYW1l","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SW1hZ2VRdWFsaXR5","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SW1wbGllZCAvcyBEZXRlY3RlZCwgYXBwIGFscmVhZHkgZXhpc3Rz","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SW1wbGllZCAvcyBEZXRlY3RlZCwgb3RoZXIgaW5zdGFuY2UgZGV0ZWN0ZWQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SW5jcmVtZW50","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SW5ldEhlbHBUaW1lcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SW5pdERpYWxvZw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"aW5uZXJIVE1M","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"aW5uZXJUZXh0","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SW5zdEFpZGUuZGxs","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"aW5zdGFpZGUuZGxs","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SW5zdGFsbCBmYWlsZWQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SW5zdGFsbCBmYWlsZWQgYW5kIGFwcGxpY2F0aW9uIG1heSBiZSBwYXJ0aWFsbHkgaW5zdGFsbGVk","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SW5zdGFsbCBmYWlsZWQgZm9y","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SW5zdGFsbCBGYWlsZWQgb24gQ2FiaW5ldCBFeHRyYWN0aW9uIGZvciB0aGUgZm9sbG93aW5nIGZpbGU6","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SW5zdGFsbCBmYWlsZWQsIGNvdWxkIG5vdCBjb3B5IGV4ZWN1dGFibGUgdG8gSW5zdGFsbGVkQXBwUGF0aA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SW5zdGFsbCBGYWlsZWQsIHVua25vd24gQ2FiaW5ldCBFeHRyYWN0aW9uIGVycm9y","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SW5zdGFsbCBTdWNjZWVkZWQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SW5zdGFsbC5sb2c=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SW5zdGFsbC50bXA=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"aW5zdGFsbC9DZW5zaXRyYWMuZGxs","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"aW5zdGFsbC9DZW5zaXRyYWMuZXhl","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"aW5zdGFsbC9DZW5zaXRyYWMucHJj","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"aW5zdGFsbC9DZW5zaXRyYWNfT25saW5lX1VzZXJfTWFudWFsLmNobQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"aW5zdGFsbC9QUENTZXR1cC5leGU=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SW5zdGFsbGVk","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SW5zdGFsbGVkLg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SW5zdGFsbGVyTG9jYXRpb24=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SW5zdGFsbGluZw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SW5zdGFsbGluZyBTeXN0ZW0gRmlsZQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SW5zdEJhcmNvZGVQcmludC5hc3A=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SW5zdE1zaUEuZXhl","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SW5zdE1zaVcuZXhl","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SW5zdHJ1bWVudHM=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJhY3RpdmU=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SW50ZXJuYWxOYW1l","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SW50ZXJuZXQgRXhwbG9yZXJfU2VydmVy","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SW50ZXJuZXQgSW5mb3JtYXRpb24gU2VydmljZXM=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SW50ZXJuZXRDbG9zZUhhbmRsZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SW50ZXJuZXRDb25uZWN0QQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SW50ZXJuZXRDcmFja1VybEE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SW50ZXJuZXRDcmVhdGVVcmxB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SW50ZXJuZXRFcnJvckRsZw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SW50ZXJuZXRPcGVuQQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SW50ZXJuZXRPcGVuVXJsQQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SW50ZXJuZXRRdWVyeURhdGFBdmFpbGFibGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SW50ZXJuZXRRdWVyeU9wdGlvbkE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SW50ZXJuZXRSZWFkRmlsZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SW50ZXJuZXRSZWFkRmlsZUV4QQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SW50ZXJuZXRTZXRGaWxlUG9pbnRlcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SW50ZXJuZXRTZXRPcHRpb24gZmFpbGVkIHdpdGggMHg=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SW50ZXJuZXRTZXRPcHRpb25B","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SW50ZXJuZXRTZXRTdGF0dXNDYWxsYmFjaw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SW52YWxpZCBBcmd1bWVudHM=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SW52YWxpZCBkYXRhIHdhcyByZWNlaXZlZCBvbiB0aGUgc2Nhbm5lciBzZXJpYWwgcG9ydC4gIENoZWNrIHRvIG1ha2Ugc3VyZSB0aGUgYmF1ZCByYXRlIGFuZCBvdGhlciBzZXJpYWwgc2V0dGluZ3MgYXJlIGNvcnJlY3QuICg=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SW52YWxpZCBEZWxheSwgbXVzdCBiZSBpbnRlZ2Vy","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SW52YWxpZCBTZXJpYWwgU2V0dGluZ3M=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SW52YWxpZCBUcmFuc2FjdGlvbiBEZWxldGVkLi4u","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SVAgYWRkcmVzcyBmb3VuZA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SXNDb25uZWN0ZWQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"SVZWM3pAZTQuIg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"S2VlcEFsaXZl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"a2VybmVsMzIuZGxs","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TGFiZWwgRGF0YSBNYXRyaXg6","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TGFiZWwgSGVhZGVyIGJpdG1hcCBmaWxlIG5vdCBmb3VuZDo=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TGFiZWwgSGVpZ2h0IG11c3QgYmUgbnVtZXJpYw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TGFiZWwgTGVmdCBBZGp1c3Q6","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TGFiZWwgTGVmdCBBZGp1c3RtZW50IG11c3QgYmUgbnVtZXJpYw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TGFiZWwgUHJpbnQgQ29waWVz","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TGFiZWwgUHJpbnQgTW9kZTo=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TGFiZWwgU2VudCB0byBQcmludGVy","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TGFiZWwgU2l6ZSAoaW5jaGVzKTo=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TGFiZWwgVG9wIEFkanVzdDo=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TGFiZWwgVG9wIEFkanVzdG1lbnQgbXVzdCBiZSBudW1lcmlj","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TGFiZWwgV2lkdGggbXVzdCBiZSBudW1lcmlj","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TGFiZWxDYXB0aW9u","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TGFiZWxDb3BpZXM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TGFiZWxDb3BpZXNQcm9tcHQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TGFiZWxIZWlnaHQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TGFiZWxMYW5ndWFnZQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TGFiZWxMZWZ0","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"bGFiZWxQcmV2aWV3SUQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TGFiZWxQcmludA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TGFiZWxQcmludGVy","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TGFiZWxQcmludFByZXZpZXc=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TGFiZWxXaWR0aA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"bGFuZHNjYXBl","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TGFzdEVycm9y","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TGFzdEVycm9yTXNn","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"bGJsQ29ybmVy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"bGJsSGVhZGVy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"bGJsTG9hZGluZw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"bGJsU3RhdHVz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"bGVmdE1hcmdpbg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TGVnYWxDb3B5cmlnaHQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TG9hZCBMaWJyYXJ5IGZhaWxlZA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TG9hZEh0bWxNc2c=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TG9hZGluZy4uLg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TG9hZExpYnJhcnlB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TG9hZFByaW50ZXJz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TG9jYWxGaWxlVGltZVRvRmlsZVRpbWU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TG9jYXRpb25z","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TG9jYXRpb25VUkw=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TG9ja1dpbmRvd1VwZGF0ZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"bG9nb3V0LmFzcA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"bHN0TWFya2Vycw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"bHN0UmVjZW50RmlsZXM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TWFrZSBzdXJlIHRoaXMgZGxsIGlzIGxvY2F0ZWQgaW4gdGhlIHNhbWUgZGlyZWN0b3J5IGFzIHRoZSAuZXhlOg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TWFrZUNzdkNlbGw=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TWFrZVNlY3VyZVVybA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TWFya2VycyBhcmUgcm93cyB0aGF0IGJlZ2luIHdpdGggdGhlIHBvdW5kIHNpZ24gIyBmb3IgZWFzeSBtb3ZlbWVudCB0byBhIHNwb3QgaW4gdGhlIGxpc3Q=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"bURpYWxvZ0hvb2s=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TWVkaWFUcmFja2luZw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TWVudUhlaWdodA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"bWVudUxvYWRpbmc=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"bWVudUxvYWRpbmcuc3R5bGUudmlzaWJpbGl0eSA9ICdoaWRkZW4nOyBtZW51Q29udGVudFJlc2l6ZSgp","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TWVudVdpZHRo","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TWV0aG9kTmVlZHNSZWY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TWlncmF0ZWQgb2xkIGFwcCBzZXR0aW5ncw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TWlncmF0ZWQgb2xkIGhvbWUgc2V0dGluZzo=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"bW1tIGQsIHl5eXkgaDpObiBBTS9QTQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"bW51Q2xlYXJTdGFydHVwU2l6ZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"bW51Q3VycmVudFBhZ2U=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"bW51Rmlyc3RQYWdl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"bW51TGFzdFBhZ2U=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"bW51TmV4dFBhZ2U=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"bW51UGFnZUNvdW50","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"bW51UGFnZVNldHVw","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"bW51UHJldmlldw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"bW51UHJldlBhZ2U=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"bW51UHJpbnRBbGw=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"bW51UHJpbnRDdXJyZW50","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"bW51UHJpbnRTcHJlYWRzaGVldA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"bW51U2V0dXBQcmludGVy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"bW51U2l6ZUl0ZW0=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"bW51U3BhY2Uy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"bW51U3BhY2Uz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"bW51U3BhY2U0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"bW51U3BhY2U1","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"bW9kQ2Vuc2l0cmFjU3luYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"bW9kR0RJUGx1c1Jlc2l6ZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"bW9kTXNnUHVtcA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"bW9kU2hlbGxMaW5r","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"bW9kV2ViQnJvd3Nlcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"bW9kWmVicmFQcmludA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TW92ZVdpbmRvdw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TW92aW5nIGJldHdlZW4gc2VjdXJlIGFuZCBub25zZWN1cmUgc2l0ZQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TVMgU2FucyBTZXJpZg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TVNDb21tIEV2ZW50Og==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"bXNjb21tMzIub2N4","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TVNDT01NMzIuT0NY","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"bXNjb21tMzIub2N4LCQoV2luU3lzUGF0aCksLHRydWUsZmFsc2U=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TVNDb21tTGli","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TVNDb21tTGliLk1TQ29tbQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TVNGbGV4R3JpZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TVNGbGV4R3JpZExpYg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TVNGbGV4R3JpZExpYi5NU0ZsZXhHcmlk","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TVNGTFhHUkQuT0NY","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"bXNmbHhncmQub2N4","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"bXNmbHhncmQub2N4LCQoV2luU3lzUGF0aCksLHRydWUsZmFsc2U=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TVNHX0RJU0FCTEVEUyBGYWlsZWQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TVNHX0VORFhGRVIgRmFpbGVk","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TVNJIG5vdCBmb3VuZA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TVNJIHZlcnNpb24gaXMgdG9vIG9sZDo=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"bXNpZXhlYyAvaSAi","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TVNWQlZNNjAuRExM","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TXkgUGljdHVyZXM=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TmF2aWdhdGUgQ29tcGxldGUgZnJvbSB0aHJlYWQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TmF2aWdhdGUy","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TmVnb3RpYXRl","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"bmV0YXBpMzIuZGxs","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TmV0Ymlvc05hbWVMb29rdXA=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TmV0Ymlvc05hbWVMb29rdXAgRmFpbGVk","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TmV3IGNsc1dlYlNpbmsgYWRkZWQgZm9yIGZyYW1l","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TmV3IGNvbm5lY3Rpb24gaGFuZGxlIGNyZWF0ZWQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TmV3IFNpdGUgQWRkcmVzczo=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TmV3Q2hhbGxlbmdl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TmV3ZXIgdmVyc2lvbiBvZiBDZW5zaXRyYWMgd2FzIGZvdW5kIG9uIHNlcnZlciwgYnV0IG5vdCBpbnN0YWxsZWQgYmVjYXVzZSB5b3UgbGFjayBmb2xkZXIgcGVybWlzc2lvbnMgdG8gQ2Vuc2l0cmFjLg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Tm8gTWV0aG9kIFNwZWNpZmllZA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Tm8gTmV0d29yayBBZGFwdGVycyBmb3VuZA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Tm8gU2NyaXB0IGZvdW5kIG9uIHRoaXMgcGFnZQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"bm9kZVZhbHVl","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Tm90IGEgdmFsaWQgYml0bWFwIGZpbGU6","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"bm90IGNvbm5lY3RlZA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Tm90IEV4aXN0cw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Tm90IEluc3RhbGxpbmcgU3lzdGVtIEZpbGUgZHVlIHRvIHByZXZpb3VzIGVycm9y","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Tm90IFVwZ3JhZGluZyBTeXN0ZW0gRmlsZQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"blBhZ2VDb3VudA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TnVtYmVyIG9mIENvcGllcyBtdXN0IGJlIG51bWVyaWM=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"TnVtYmVyIG9mIENvcGllczo=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"blZpcnRFeHRLZXk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"b2JqTWV0aG9k","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"b2NjdXJyZWQgd2hpbGUgaW5zdGFsbGluZyBDZW5zaXRyYWNTcGVlY2g=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"b0NlbnRlclRv","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"b2Zmc2V0SGVpZ2h0","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"b2Zmc2V0TGVmdA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"b2Zmc2V0UGFyZW50","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"b2Zmc2V0VG9w","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"b2Zmc2V0V2lkdGg=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"T0xFIEVycm9y","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"b2xlMzIuZGxs","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"T2xlQ3JlYXRlUGljdHVyZUluZGlyZWN0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"b2xlcHJvMzIuZGxs","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"b24gRnJhbWU=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"T25seSBIVFRQIFVybCdzIGNhbiBiZSBoYW5kbGVkIGJ5IHRoaXMgZnVuY3Rpb24=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"b25wcm9wZXJ0eWNoYW5nZQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"T25Tb2NrZXRDbG9zZWQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"T25Tb2NrZXRDb25uZWN0ZWQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"T3BlbiBTb2NrZXQgVGVzdA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"T3BlblByaW50ZXJB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"T3BlblNlcmlhbA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"T3BlblVybEV4","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"T3BlblVybFJlcXVlc3Q=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"T3BlblVSTFRvRmlsZUFzeW5j","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"T3BlblVybFRvRmlsZUFzeW5jIENvbXBsZXRlLCBFbGFwc2VkIChzZWNvbmRzKSwgTWF4L01pbiBCdWZmU2l6ZSB3YXM=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"T3BlblVSTFRvRmlsZUFzeW5jUmVhZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"T3BlblVybFRvRmlsZUJ1c3k=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"T3BlblVybFRvRmlsZUNhbmNlbA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"T3BlblVybFRvRmlsZVByb2dyZXNz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"b3B0SW5zZXJ0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"b3B0UmVwbGFjZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"b3B0U2VyaWFs","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"b3JpZW50YXRpb24=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"T3JpZW50YXRpb24=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"T3JpZ2luYWxGaWxlbmFtZQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"b3V0ZXJIVE1M","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"b3duZXJGb3Jt","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"cDFLfFZ8SXxV","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UGFnZSAmUCBvZiAmTg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"cGFnZUZyYW1l","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UGFnZUhlaWdodA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UGFnZUxvYWRCdXN5","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UGFnZVByZXZpZXc=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UGFnZVByaW50","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UGFnZVNldHVw","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UGFnZVNldHVwRGxnQQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UGFpbnRQaWN0dXJl","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UGFsbSBIb3RTeW5jIFJlcXVpcmVkLiAgQ29udGFjdCBQcm9kdWN0IFN1cHBvcnQu","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UGFsbSBJbnN0YWxsIEVycm9y","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UGFsbSBJbnN0YWxsIGZhaWxlZCBmb3I=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UGFsbSBJbnN0YWxsIEZpbGUgRXJyb3I=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UGFsbSBJbnN0YWxsIEZpbGUgRXJyb3IgTWFzayBub3QgU2V0","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UGFsbSB1cGdyYWRlIGZhaWxlZC4=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"cGFyZW50V2luZG93","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UGFyc2VIZWxwVXJs","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UERBRGlzYWJsZQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UGRhRW5hYmxlZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UEU9a0h0M3xj","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UGVla01lc3NhZ2VB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UGVyZm9ybWluZyBQYWxtIEhvdFN5bmMgdG8gdXBkYXRlIHRoZSBzb2Z0d2FyZQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UGhhc2UgSSAoQ29weSB0byBJbnN0YWxsZWRBcHBQYXRoKQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UGhhc2UgSUkgKEluc3RhbGwp","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"cGljUHJldmlldw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UGxlYXNlIHZlcmlmeSB0aGUgY29ycmVjdCBzZXR0aW5ncyBmb3IgeW91ciBzZXJpYWwgKFJTMjMyKSBTY2FubmVy","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UGx0R2V0VXNlcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UGx0R2V0VXNlckNvdW50","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UGx0R2V0VXNlckRpcmVjdG9yeQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UGx0SW5zdGFsbEZpbGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UGx0SXNJbnN0YWxsTWFza1NldA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UG9ja2V0IFBDIFNldHVwIFNvZnR3YXJlIHVwZGF0ZSBmYWlsZWQu","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UG9sYXIgV2FyZSBDdXN0YXJkIEN1cA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UG9zdE1lc3NhZ2VB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UFBDIFNldHVw","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UFBDIFNldHVwIHVwZ3JhZGUgZmFpbGVkLg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UFBDU2V0dXAuZXhl","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UHJlJnZpZXcgTW9kZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UHJldmlld1BhZ2U=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UHJpbnQgJkN1cnJlbnQgUGFnZSBPbmx5","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UHJpbnQgQmFyY29kZSBDYXB0aW9u","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UHJpbnQgU2l6aW5nIEZyYW1l","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UHJpbnQgdG8gU3ByZWFkc2hlZXQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UHJpbnREbGdB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UHJpbnREb2N1bWVudA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UHJpbnRlciBFcnJvcg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UHJpbnRlckFwcENvbGxhdGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UHJpbnRlckFwcENvcGllcw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UHJpbnRlckNvcGllcw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UHJpbnRlckZyb21QYWdl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UHJpbnRlck5hbWU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UHJpbnRlck9yaWVudGF0aW9u","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UHJpbnRlclN1cHBvcnRzQ29sbGF0aW9u","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UHJpbnRlclRvUGFnZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UHJpbnRHcmlkUGFnZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UHJpbnRHcmlkUm93cw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UHJpbnRNb2Rl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UHJpbnRQYWdl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UHJpbnRSZXBvcnQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UHJpbnRUaXRsZVJvd3M=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UHJpbnRUb0ZpbGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UHJvY2Vzc2luZyBUcmFuc2FjdGlvbiBkYXRlZA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UHJvZHVjdCBTdXBwb3J0","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UHJvZHVjdE5hbWU=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UHJvZHVjdFZlcnNpb24=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UHJvZmlsZXNcQWxsIFVzZXJzXEFwcGxpY2F0aW9uIERhdGE=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UHJvZ3JhbUZpbGVzRGly","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UHJvZ3JhbW1lciBlcnJvcjogdW5zdXBwb3J0ZWQgdmFsdWUgdHlwZSBpbiBTZXRSZWdpc3RyeVZhbHVlOg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UHJveHkgZGV0ZWN0ZWQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UFQwL0NvbW11bmljYXRpb24vSW50ZXJmYWNlcy9JbnB1dC9QcmVzZW50YXRpb24gbW9kZTpmYWxzZXtDUn17TEZ9e1JDfVBTMA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UFQwL0NvbW11bmljYXRpb24vSW50ZXJmYWNlcy9JbnB1dC9QcmVzZW50YXRpb24gbW9kZTp0cnVle0NSfXtMRn17UkN9UFM4","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UWleYV5lXm1eYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UXVlcnlTdGF0dXNXQg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVhZGluZyBDZW5zaXRyYWMgU2NhbnM=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVhZHlTdGF0ZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVib290IEluaXRpYXRlZA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVib290IHJlcXVpcmVkIGJ1dCBkZWZlcnJlZCBieSB1c2Vy","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVib290IHJlcXVpcmVkIGJ1dCBkZWZlcnJlZCBkdWUgdG8gc2lsZW50IGluc3RhbGwgc3dpdGNo","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVib290IFJlcXVpcmVkIGZvciBDZW5zaXRyYWNTcGVlY2g=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVib290IFJlcXVpcmVkIGZvciBNU0k=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVjZW50IEZpbGVzOg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVjaWV2ZWQgaW50ZXJtZWRpYXRlIHN0YXR1cw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVnQ2xvc2VLZXk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVnQ3JlYXRlS2V5RXhB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVnRGVsZXRlVmFsdWVB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVnaXN0cnkgZXJyb3I6IHVuc3VwcG9ydGVkIHZhbHVlIHR5cGUgaW4gR2V0UmVnaXN0cnlWYWx1ZTo=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVnT3BlbktleUV4QQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVnUXVlcnlWYWx1ZUV4QQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVnU2V0VmFsdWVFeEE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"cmVnc3ZyMzIgLXMgLWM=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"cmVnc3ZyMzIgLXUgLXMgLWM=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVnU3ZyMzIgcmV0dXJuZWQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVsb2FkQWRkcmVzcw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVtb3RlIERldmljZSBEaXNjb25uZWN0ZWQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVtb3RlU2NyaXB0UmVxdWVzdA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVtb3RlU2NyaXB0UmVxdWVzdCB0aHJlYWQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVtb3ZlRGlyZWN0b3J5QQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"cmVwbGFjZWQgd2l0aA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVwb3J0IHNhdmVkIHRvIHRoZSBmb2xsb3dpbmcgc3ByZWFkc2hlZXQgZmlsZTo=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"cmVwb3J0X3dpZHRo","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"cmVwb3J0Qm9keQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVwb3J0SGVhZGVy","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVwb3J0TGlzdA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVwb3J0T3B0aW9ucw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVwb3J0UHJldmlldw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVwb3J0UHJpbnQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVwb3J0U3R5bGU=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVwb3J0VGFibGU=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVwb3J0VGl0bGU=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVwb3J0V2lkdGg=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVxdWVzdENvbm5lY3RlZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVxdWVzdElk","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVxdWVzdFRpbWVvdXQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"cmVzOi8vKi9uYXZjYW5jbC5odG0q","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"cmVzZXR0aW5nIFVTQiBjb25uZWN0aW9u","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"cmVzaXplIGVycm9y","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVzaXplUmVwb3J0R3JpZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVzb2x1dGlvbg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVzb2x2aW5nIElQIGFkZHJlc3M=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVzcG9uc2VDb2Rl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVzcG9uc2VJbmZv","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVzcG9uc2VUcnVuY2F0ZWQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVzcG9uc2VUcnVuY2F0ZWRTdHJpbmc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVzdG9yZSBIb21l","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmVzdG9yaW5nIFByaW9yIFZlcnNpb24gKENvcHkgdG8gSW5zdGFsbGVkQXBwUGF0aCk=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmV0cmlldmluZw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmV0cmlldmluZyBUcmFuc2FjdGlvbi4uLg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmV0cnkgb3IgbWFudWFsbHkgZGVsZXRlIHRoaXMgZmlsZQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UmV0cnkgb3IgbWFudWFsbHkgZGVsZXRlIHRoaXMgZmlsZSBsYXRlcg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"cmV0dXJuIGNvZGUgaXM=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"cmlnaHRNYXJnaW4=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UnNDbWQgRXJyb3I6IGJhZCBwRGlzcCwgcnNkYXRhIG5vdCBmb3VuZA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UnNDbWQgcmVjZWl2ZWQgZm9y","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"cnNkYXRhIEF0dGFjaGVk","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"cnNkYXRhIG5vdCBmb3VuZA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UlNGU0JfQ29tcGxldGU=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UnRsTW92ZU1lbW9yeQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UnRsWmVyb01lbW9yeQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"UnVuLXRpbWUgZXJyb3I=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2F2ZSBIb21l","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2F2ZXMgdGhlIGN1cnJlbnQgc2l0ZSBhZGRyZXNzIGFzIHRoZSBob21lIGFkZHJlc3MgdGhhdCBpcyB1c2VkIG9uIHN0YXJ0dXA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2F2ZVN0YXRzLmFzcA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2NhbGVIZWlnaHQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2NhbGVXaWR0aA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2NhbiBFbmFibGVk","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2NhbiBTZW5kIEVycm9yOg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2NhbiBTaW11bGF0b3I=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2NhbkVuYWJsZWQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"c2Nhbm5lcl9zY2FubmVkSUQoJw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"c2Nhbm5lckNvbnRyb2w=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2Nhbm5lclJlc2V0","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2Nhbm5lclR5cGU=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2NhblR3YWlu","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2NyZWVuVG9DbGllbnQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2Nyb2xsYmFyU2l6ZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2Nyb2xsSGVpZ2h0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2Nyb2xsV2lkdGg=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2VsZWN0IGEgc3RhcnRpbmcgcG9pbnQgaW4gdGhlIGxpc3Q=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2VsZWN0Q2xpcFJnbg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2VsZWN0T2JqZWN0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2VuZCBzY2FucyBjb250aW51b3VzbHkgdW50aWwgcmVhY2hpbmcgYSBub24tc2NhbiByb3c=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2VuZGluZyBtb3VzZSBjbGljayB0bw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"c2VuZGluZyBzY2FuOg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2VuZGluZyBzZXJ2ZXIgcmVxdWVzdA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2VuZExvZ01zZw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2VuZE1lc3NhZ2VB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2VuZE1lc3NhZ2VUaW1lb3V0QQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2VuZHMgdGhlIEJlZXAgY29tbWFuZCBzdHJpbmcgdG8gdGhlIHNlbGVjdGVkIFNlcmlhbCBwb3J0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2VyaWFsIExvZw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2VyaWFsIFNjYW5uZXI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2VyaWFsQmVlcA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2VyaWFsQ21kQmVlcA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2VyaWFsQ21kT2Zm","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2VyaWFsQ21kT24=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2VyaWFsQ21kUmVhZHk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2VyaWFsUG9ydA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2VyaWFsUmVhZHk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2VyaWFsUmVzZXQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2VyaWFsU2V0dGluZ3M=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2VydmVyIGNvbm5lY3Rpb24gY2xvc2Vk","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2VydmVyIEVycm9yLCBjb250YWN0IFByb2R1Y3QgU3VwcG9ydA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2VydmVyIGlzIGJ1c3ksIHdhaXQgYSBtaW51dGUgYW5kIHRyeSBhZ2Fpbi4=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2VydmVyIHJlcXVlc3Qgc2VudA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2VydmVyIHJlc3BvbnNlIHJlY2lldmVk","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2Vzc2lvblRpbWVkT3V0","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2V0QWN0aXZlV2luZG93","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2V0Q3VycmVudFBhZ2U=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2V0RGVmYXVsdFByaW50ZXI=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2V0RmlsZVRpbWU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2V0Rm9vdGVyRGF0ZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2V0Rm9vdEZvbnQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2V0Rm9yZWdyb3VuZFdpbmRvdw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2V0S2VlcENvbm5lY3Rpb25PcGVu","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2V0TWFwTW9kZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2V0TWV0cmljcw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2V0T3B0aW9ucw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2V0UGFnZUhlYWRlcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2V0UGFyZW50","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2V0UHJpbnRlckZyb21EaWFsb2c=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2V0UHJvZ3Jlc3M=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2V0UmVjdFJnbg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2V0UmVnaXN0cnlWYWx1ZSBmYWlsZWQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2V0UmVwb3J0Q29udGVudA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2V0UmVwb3J0SGVhZGVy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"c2V0c29ja29wdA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2V0U291cmNl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"c2V0VGltZW91dA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2V0dGluZ3M6","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2V0dXAgQ2FiIEZpbGU6","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2V0dXAgQ2FiIEluc3RhbGxlZDo=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2V0dXAgQ2FiIFByb2M6IDB4","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2V0dXAgQ2Vuc2l0cmFjIEhvbWU=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2V0dXAgRXJyb3I=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2V0dXAgRXJyb3IgaW4=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2V0dXAgUG9ja2V0IFBD","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2V0dXBJdGVyYXRlQ2FiaW5ldCBGYWlsZWQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2V0dXBJdGVyYXRlQ2FiaW5ldCBGYWlsZWQgb24gdGhlIGZvbGxvd2luZyBmaWxlOg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2V0dXBJdGVyYXRlQ2FiaW5ldEE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2V0V2luZG93TG9uZ0E=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2V0V2luZG93UGxhY2VtZW50","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2V0V2luZG93UG9z","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2V0V2luZG93VGV4dEE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"c0V4dHJhSW5mbw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"c0ZvbnRGYW1pbHk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U0hBZGRUb1JlY2VudERvY3M=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U0hDaGFuZ2VOb3RpZnk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U0hEZWxldGVLZXlB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U0hEZWxldGVWYWx1ZUE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U0hEb2NWd0N0bA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U0hEb2NWd0N0bC5XZWJCcm93c2Vy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"c0hlYWRlck5hbWU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2hlbGwuRXhwbG9yZXI=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2hlbGxEb2NWaWV3IEhvb2tlZCE=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2hlbGxMaW5rIFNhbXBsZQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U0hFbnVtS2V5RXhB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U0hHZXRGb2xkZXJQYXRoQQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U0hHZXRQYXRoRnJvbUlETGlzdEE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U0hHZXRTcGVjaWFsRm9sZGVyTG9jYXRpb24=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U0hHZXRWYWx1ZUE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2hvcnRjdXQgY3JlYXRlZCBpbg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2hvcnRjdXQgY3JlYXRlZCBpbiBDb21tb24gRGVza3RvcCBmb2xkZXI=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2hvcnRjdXQgY3JlYXRlZCBpbiBTdGFydCBNZW51","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2hvcnRjdXQgY3JlYXRlZCBpbiBTdGFydHVwIGZvbGRlcg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2hvcnRjdXQgdG8=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2hvdyBTY2FuIFJlc3VsdHM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2hvd0NlbnNpdHJhY0hlbHAoJycpOw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2hvd0NvbG9y","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2hvd0NvbmZpcm0=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"c2hvd2RhdGVmb290ZXI=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2hvd0RhdGVGb290ZXI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2hvd0RteERpYWdub3N0aWNz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2hvd0luZGljYXRvcnM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2hvd0xvYWRpbmc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2hvd0xvYWRpbmcgZnJvbSBUaHJlYWQ6","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2hvd1BhZ2UoLTEp","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2hvd1BhZ2VGb290ZXI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"c2hvd3BhZ2Vmb290ZXI=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2hvd1ByaW50","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U0hRdWVyeUluZm9LZXlB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U0hTZXRWYWx1ZUE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"c0ltYWdlRmlsZU5hbWU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2ltdWxhdGVkIFNjYW46","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U2ltdWxhdGVkU2Nhbg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"c0xvZ0V4dHJh","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U01DYXB0aW9uSGVpZ2h0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U01DYXB0aW9uV0lkdGg=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U29ja2V0IGNsb3NlZCAweA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U29ja2V0IGlzIDB4","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U29ja2V0RGlzY29ubmVjdEVuYWJsZWQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U29mdHdhcmVc","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U29mdHdhcmVcQWNjdXRyYWM=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U29mdHdhcmVcQ2Vuc2l0cmFj","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U29mdHdhcmVcQ2Vuc2l0cmFjU3BlZWNo","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U29mdHdhcmVcTWljcm9zb2Z0XEludGVybmV0IEV4cGxvcmVyXE1haW4=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U09GVFdBUkVcTWljcm9zb2Z0XFdpbmRvd3NcQ3VycmVudFZlcnNpb24=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U09GVFdBUkVcTWljcm9zb2Z0XFdpbmRvd3NcQ3VycmVudFZlcnNpb25cQXBwIFBhdGhz","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U09GVFdBUkVcTWljcm9zb2Z0XFdpbmRvd3NcQ3VycmVudFZlcnNpb25cRXhwbG9yZXJcU2hlbGwgRm9sZGVycw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U29mdHdhcmVcTWljcm9zb2Z0XFdpbmRvd3NcQ3VycmVudFZlcnNpb25cSW5zdGFsbGVy","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U29mdHdhcmVcTWljcm9zb2Z0XFdpbmRvd3NcQ3VycmVudFZlcnNpb25cSW50ZXJuZXQgU2V0dGluZ3M=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U09GVFdBUkVcTWljcm9zb2Z0XFdpbmRvd3NcQ3VycmVudFZlcnNpb25cU2hhcmVkRExMcw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U09GVFdBUkVcTWljcm9zb2Z0XFdpbmRvd3NcQ3VycmVudFZlcnNpb25cVW5pbnN0YWxs","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U29mdHdhcmVcVkIgYW5kIFZCQSBQcm9ncmFtIFNldHRpbmdzXEFjY3V0cmFj","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"c291bmRDb250cm9s","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U291cmNlTGlzdA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U291cmNlTmFtZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"c1Bhc3N3b3Jk","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"c3BlZWNoQ29udHJvbA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U3BlZWNoQ29udHJvbA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U3BlZWNoRW5hYmxlZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"c1Bvc3REYXRh","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"c1F1ZXJ5U3RyaW5n","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U1Q2VU5TVCAj","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U3RhcnREb2NQcmludGVyQQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U3RhcnRQYWdlUHJpbnRlcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"c3RhdHVzIGJsb2NrZWQ6","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U3RhdHVzIHJlamVjdGVkOiB3ZSBhcmUgbm90IGRvbmUh","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U3RhdHVzLVRleHQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U3RhdHVzTXNn","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U1RFUk1FVEhPRA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U3RvcmVJbWFnZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"c3RwdG1wLmJhdA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U3RyaW5nRmlsZUluZm8=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U3RyaW5nRnJvbUdVSUQy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"c3R5bGVTaGVldHM=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U1VdUjltakVJfWVpaV1JTQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U3VjY2VlZGVkIGZvcg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"c1VzZXJOYW1l","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"c1dlYkNvbG9y","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"c3luYy5TZXNzaW9uVGltZWRPdXQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U3luY0NoZWNrU2Vzc2lvbigp","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U3luY0Vycm9y","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U3luY0xvZy50bXAsJChBcHBQYXRoKSwsZmFsc2UsZmFsc2U=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U3luY0xvZy50eHQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U3luY0xvZy50eHQsJChBcHBQYXRoKSwsZmFsc2UsZmFsc2U=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U3luY01vZGU1","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U3luY1NoZWxsIGZhaWxlZCB0byBleGVjdXRlIFJlZ1N2cjMy","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U3lzQmFja3VwLmxvZw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U3lzQmFja3VwTG9nIE1zZzo=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U3lzdGVtUGFyYW1ldGVyc0luZm9B","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"U3lzdGVtVGltZVRvRmlsZVRpbWU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VGFiLURlbGltaXRlZCBTcHJlYWRzaGVldCAoKi50eHQpfCoudHh0fENvbW1hLVNlcGFyYXRlZCBTcHJlYWRzaGVldCAoKi5jc3YpfCouY3N2","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"dGVzdCBkYXRh","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VGVzdCBTY2Fucy50eHQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"dGVzdHAuYmlu","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VGVzdFN0YXRz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VGV4dCAoKi50eHQpfCoudHh0fENvbW1hLVNlcGFyYXRlZCBTcHJlYWRzaGVldCAoKi5jc3YpfCouY3N2","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VGV4dEhlaWdodA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VGV4dFdpZHRo","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VGhlICdIb21lJyBhZGRyZXNzIGlzIG5vdCB2YWxpZA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VGhlIGNvbXB1dGVyIG11c3QgYmUgcmVib290ZWQgZm9yIGFsbCBmZWF0dXJlcyB0byB3b3JrIGNvcnJlY3RseS4=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VGhlIGZvbGxvd2luZyBlcnJvciBvY2N1cnJlZDo=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VGhlIGxhYmVsIGNvdWxkIG5vdCBiZSBwcmludGVkIHRvIHlvdXIgbm9uLVplYnJhIHByaW50ZXIgZHVlIHRvIHRoZSBmb2xsb3dpbmcgZXJyb3I6","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VGhlIFByaW50ZXIgTmFtZSB5b3Ugc2VsZWN0ZWQgd2Fzbid0IHJlY29nbml6ZWQu","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VGhlIHNjYW5uZXIgc2VyaWFsIHBvcnQgcHJldmlvdXNseSBzZWxlY3RlZCBmb3IgdGhpcyBjb21wdXRlciAo","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VGhlIFdpbmRvd3MgQWR2YW5jZWQgR3JhcGhpY3MgTGlicmFyeSBpcyBub3QgaW5zdGFsbGVkIG9uIHRoaXMgbWFjaGluZS4gQ2VydGFpbiBvcHRpb25hbCBmZWF0dXJlcyBzdWNoIGFzIEF1dG8tU2NhbGluZyB3aWxsIG5vdCBiZSBhdmFpbGFibGUu","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VGhlcmUgYXJlIG5vIHJlY29yZHMgaW4gdGhpcyByZXBvcnQu","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VGhpcyBpcyB1c3VhbGx5IGhhcHBlbnMgd2hlbiB5b3VyIFdpbmRvd3MgRGVmYXVsdCBQcmludGVyIGlzIG5vdCBhdmFpbGFibGUgb3IgaXMgbm90IGNvbmZpZ3VyZWQgY29ycmVjdGx5Lg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"dGhpcy5wYXJlbnRFbGVtZW50LmlubmVyVGV4dD0nJzsgaWYoIGxvY2F0aW9uLmhyZWYuc3Vic3RyKDAsNikudG9Mb3dlckNhc2UoKT09J3JlczovLycpIHdpbmRvdy5zZXRUaW1lb3V0KCdsb2NhdGlvbi5yZXBsYWNlKGxvY2F0aW9uLmhhc2guc3Vic3RyKDEpKScsMjAwKTsgZWxzZSB3aW5kb3cuc2V0VGltZW91dCgnbG9jYXRpb24ucmVwbGFjZShsb2NhdGlvbiknLDIwMCk=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VGltZW91dCB3YWl0aW5nIGZvciByZXNwb25zZQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VGltZXJSUyBSZW1vdGVTY3JpcHRSZXF1ZXN0IHRocmVhZA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VGltZXJTY2FuU2ltdWxhdG9y","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VGltZXN0YW1w","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VG9vIG1hbnkgdXNlcnM=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"dG9vbHRpcHNfY2xhc3MzMg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VHJhbnNhY3Rpb24gY2FuY2VsbGVkIGJ5IFBhZ2U6","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VHJhbnNhY3Rpb24gQ2FuY2VsbGVkLi4u","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VHJhbnNhY3Rpb24gQ29tcGxldGVkLi4u","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VHJhbnNhY3Rpb25FcnJvcg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VHJhbnNsYXRlTWVzc2FnZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VHJhbnNsYXRpb24=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VFQgV25kIEZvdW5kOg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"dHdhaW4gTVNHRElTQUJMRURT","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"dHdhaW4gbXNnZ2V0","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VFdBSU5fMzIuRExM","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VFdBSU5fTVNHX1dJTkRPVw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"dHh0QmFyY29kZVNjYW5uZXJQcmVmaXg=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"dHh0Q29waWVz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"dHh0RG14SW50ZXJ2YWw=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"dHh0RG14TXNn","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"dHh0RG14U3RhdHVz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"dHh0RG14VGltZW91dA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"dHh0RG93bmxvYWQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"dHh0SW1hZ2VRdWFsaXR5","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"dHh0TGFiZWxIZWlnaHQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"dHh0TGFiZWxXaWR0aA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"dHh0TGVmdEFkag==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"dHh0TG9va3Vwcw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"dHh0U2VyaWFsQ21kQmVlcA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"dHh0U2VyaWFsQ21kT2Zm","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"dHh0U2VyaWFsQ21kT24=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"dHh0U2VyaWFsQ21kUmVhZHk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"dHh0U2VyaWFsU2V0dGluZ3M=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"dHh0VG9wQWRq","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VHlwZSByZXBvcnRlZCBpczo=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VHlwZUNoYW5nZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VUV2ZW50X1Npbms=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VW5pbnN0YWxs","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VW5pbnN0YWxsIGZhaWxlZCBhbmQgYXBwbGljYXRpb24gbWF5IGJlIHBhcnRpYWxseSBpbnN0YWxsZWQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VW5pbnN0YWxsaW5nOg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VW5pbnN0YWxsU3RyaW5n","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VW5rbm93biBlcnJvcg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VW5rbm93biBTdGF0dXM=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VW5yZWdpc3Rlcg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VXBncmFkZSBmYWlsZWQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VXBncmFkZSBmYWlsZWQsIGFuZCBwcmlvciB2ZXJzaW9uIG5vdCBmb3VuZA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VXBncmFkZSBmYWlsZWQsIGNvdWxkIG5vdCBjcmVhdGUgYmFja3VwIG9mIGN1cnJlbnQgdmVyc2lvbg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VXBncmFkZSBmYWlsZWQsIGtlZXBpbmcgcHJpb3IgdmVyc2lvbg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VXBncmFkZSBmYWlsZWQsIHJlc3RvcmUgcHJpb3IgdmVyc2lvbiBmYWlsZWQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VXBncmFkZSBmYWlsZWQsIHJlc3RvcmluZyBwcmlvciB2ZXJzaW9u","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VXBncmFkaW5nIFN5c3RlbSBGaWxl","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VXJsIGNvdWxkIG5vdCBiZSBwYXJzZWQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"dXJsQ29udGV4dA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VVJMRW5jb2Rl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VXNlciBpbnB1dCByZXF1aXJlZA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"dXNlcjMyLmRsbA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VmFyRmlsZUluZm8=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VkJDb250cm9sQ2xpY2tlZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VmVHZXRJbmV0T2Jq","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VmVyUXVlcnlWYWx1ZUE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VmVyc2lvbiBDb21wYXJlIERzdA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VmVyc2lvbiBDb21wYXJlIFNyYw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"dmVyc2lvbi5kbGw=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VmtLZXlTY2FuQQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"dk5ld1ZhbHVl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"dm50SW5kZXhLZXk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"VlNfVkVSU0lPTl9JTkZP","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"V2FpdEZvcklucHV0SWRsZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"V2FpdEZvclNpbmdsZU9iamVjdA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"V2FpdGluZyBmb3Igc2VydmVyIHJlc3BvbnNl","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"V0IgS2V5c3Ryb2tl","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"V0JDdXN0b21pemVyLmRsbA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"V0JDdXN0b21pemVyLmRsbCwkKEFwcFBhdGgpLCx0cnVlLGZhbHNl","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"V0JDdXN0b21pemVyTGli","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"V0JEb3dubG9hZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"V0JMb2FkaW5n","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"V2ViQnJvd3Nlcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"V2ViQnJvd3NlcjE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"V2ViVG9WQkNvbG9y","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"V2lsbCB0aGlzIHdvcmtzdGF0aW9uIGJlIHVzZWQgZm9yIENlbnNpdHJhYyBQYWxtLVBpbG90IFN5bmM/","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"d2luZG93LnBhcmVudC5IZWFkZXJNc2dib3g=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"V2luZG93c0luc3RhbGxlci5JbnN0YWxsZXI=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"V2luZG93U3RhdGU=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"d2luaW5ldC5kbGw=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"d2luc3Bvb2wuZHJ2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"V05ldEdldENvbm5lY3Rpb25B","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"V3JpdGVGaWxl","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"V3JpdGVQcmludGVy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"V3JpdGluZyBDZW5zaXRyYWMgU2NhbnM=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"V1NjcmlwdC5OZXR3b3Jr","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"d3NvY2szMi5kbGw=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"d3d3d3d3d3d3d3d3","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"d3d3d3d3d3d3d3d3d3A=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"eGBYJzYyNDFs","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"eGxQb3J0cmFpdA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"eG1sbnM6eD0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6ZXhjZWwi","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"eG1sbnM9Imh0dHA6Ly93d3cudzMub3JnL1RSL1JFQy1odG1sNDAiPg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"WFFRUVFRUVFZTA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"eFpWWmFUW1F6","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"eSBmb3IgbWV0aG9kPQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"eSlEUlBLKCFj","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"WW91IE11c3QgSW5pdGlhdGUgYSBQYWxtIEhvdFN5bmMgdG8gdXBkYXRlIHRoZSBDZW5zaXRyYWMgc29mdHdhcmUuICBDb250YWN0IFByb2R1Y3QgU3VwcG9ydC4gKFYxLjAp","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"WW91ciBXaW5kb3dzIGFjY291bnQgZG9lcyBub3QgaGF2ZSBwZXJtaXNzaW9ucyB0byBzYXZlIHNldHRpbmdz","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"eXl5eSBtbSBkZA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"WkRlc2lnbmVy","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"emRlc2lnbmVy","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"emVicmEgZXBs","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Wm9tYmllX0dldFR5cGVJbmZv","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"Wm9tYmllX0dldFR5cGVJbmZvQ291bnQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"elAtdE9De0c=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"ezFENUJFNEI1LUZBNEEtNDUyRC05Q0RELTVEQjM1MTA1RTdFQn0=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"ezhEMEVCMkQxLUE1OEUtNEVBOC1BQTE0LTEwODA3NEI3QjZGOX0=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"e0I5NkIzQ0FFLTA3MjgtMTFEMy05RDdCLTAwMDBGODFFRjMyRX0=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"e2JvcmRlcjouNXB0IHNvbGlkIHdpbmRvd3RleHQ7YmFja2dyb3VuZDpzaWx2ZXI7d2hpdGUtc3BhY2U6bm93cmFwO30=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"e21zby1kYXRhLXBsYWNlbWVudDpzYW1lLWNlbGw7fQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"e21zby1oZWlnaHQtc291cmNlOmF1dG87fQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"e21zby13aWR0aC1zb3VyY2U6YXV0bzt9","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"e3doaXRlLXNwYWNlOm5vd3JhcDt9","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"fDdxcnAqTXlh","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"fSBjfH44MD4+Sw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null},{"value":"fXlSMCJ3MjRP","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"censitrac.exe.bin","compromised":null,"detection_total":null,"total":null}]},{"name":"conhost.exe","strings":[{"value":"Ii0xMDUxNDEzODU4LTEzNjQzMDU0NDAtNTM1NjIxMTk0LTE0MTI5NzMxNTkyMDMxMzI0NjQ0MTcyMDU4NTY5OC03NzI0NzA5MTUtNjcwNDc5MzA2Ig==","type":"Ansi","source":"Process Commandline","process":null,"filename":"conhost.exe","compromised":null,"detection_total":null,"total":null},{"value":"Ii03ODExOTcwNDQxMzg1NDcyNTQ5LTk3MDY2Njk5OTEwNDg1MjUwMjQ4NjE0OTY2Mjc3OTgzMTQ3NzExMTM4ODY0MDkyMTE3ODg0NzAzIg==","type":"Ansi","source":"Process Commandline","process":null,"filename":"conhost.exe","compromised":null,"detection_total":null,"total":null},{"value":"Ii04NzY1MTgxMDY1NjQ1MjI1MDEtMTcyMjk0ODM1MjEyODA0NTczMzctMTkwNDQ3OTUwLTQ1NDAyNjIzOTc3NTY1MzU1MzE5NzUwNjczNzMi","type":"Ansi","source":"Process Commandline","process":null,"filename":"conhost.exe","compromised":null,"detection_total":null,"total":null},{"value":"IjEwNjUwNTc4MzM1NzE3NzQzNjMxNDUxODM4MjIxMzQ5ODQyMTE5OTI5NDU5Mzc0LTU2MTU3ODI2Ni0zOTYyNjQwMTUtNzk0ODgwODgxIg==","type":"Ansi","source":"Process Commandline","process":null,"filename":"conhost.exe","compromised":null,"detection_total":null,"total":null},{"value":"IjEyODM2NjUxOTUxNzcxMTMxNzczLTc0NjQ3NTgyMDcxODI4MDU3ODg2OTIwMDkwMS0zOTQ1MzQ2NDEtMjE0MTM0MjE4My0yMDU1MDU2MzUyIg==","type":"Ansi","source":"Process Commandline","process":null,"filename":"conhost.exe","compromised":null,"detection_total":null,"total":null},{"value":"IjEzMjYzNjc3ODgtNzQ2NDI2OTc4MTIxMTIxNTM1NjEyODA5NjMxMjI5ODg2MDI5OTYtMjE0MzkwNDY5OC01ODQ2MDY3NDAtMTczMDMzMzAxNSI=","type":"Ansi","source":"Process Commandline","process":null,"filename":"conhost.exe","compromised":null,"detection_total":null,"total":null},{"value":"IjMzMjgzOTMwMy0xNjg4Mzk5NjgxMzIxOTM1MTM3MTM3OTIxNjUwMTIwOTA3MDEzMjAtODI2ODgxMTEwMTg0Njg0MTYyMC0yMDY1ODA1OTYxIg==","type":"Ansi","source":"Process Commandline","process":null,"filename":"conhost.exe","compromised":null,"detection_total":null,"total":null},{"value":"IjY4MDQ0OTQ1Ni0xNzU3NDAwMDY1MTI3NTgyMDIxNTE2NTM0ODI4MTItNDMyMDc2MjY3NTc1Nzc3NjUxOTgzNzkyLTgzMjA0ODYyNCI=","type":"Ansi","source":"Process Commandline","process":null,"filename":"conhost.exe","compromised":null,"detection_total":null,"total":null},{"value":"Ijg2MjI0MjMwOS0zNDAyNjkzMDc0MTYwMDc0ODUtNDkzMTA2OTIyLTEwNjYwMjI4NjcxODU1ODc3MzEtMjA3NDI3MzA5ODg4NjgzOTEwOCI=","type":"Ansi","source":"Process Commandline","process":null,"filename":"conhost.exe","compromised":null,"detection_total":null,"total":null}]},{"name":"regsvr32.exe:4764","strings":[{"value":"JVBST0dSQU1GSUxFUyVcKHg4NilcQ2Vuc2l0cmFjXA==","type":"Unicode","source":"Runtime Data","process":"regsvr32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"QXBhcnRtZW50","type":"Unicode","source":"Runtime Data","process":"regsvr32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29tbWVyY2lhbERhdGFPcHRJbg==","type":"Unicode","source":"Runtime Data","process":"regsvr32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RFdCQ3VzdG9taXplckV2ZW50cw==","type":"Unicode","source":"Runtime Data","process":"regsvr32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SVdCQ3VzdG9taXplcg==","type":"Unicode","source":"Runtime Data","process":"regsvr32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWljcm9zb2Z0IFdlYkJyb3dzZXIgQ3VzdG9taXplciBTYW1wbGUgT2JqZWN0","type":"Unicode","source":"Runtime Data","process":"regsvr32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2hvd0RlYnVnSW5mbw==","type":"Unicode","source":"Runtime Data","process":"regsvr32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U291cmNlUGF0aA==","type":"Unicode","source":"Runtime Data","process":"regsvr32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V0JDdXN0b21pemVyIENsYXNz","type":"Unicode","source":"Runtime Data","process":"regsvr32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V0JDdXN0b21pemVyLldCQ3VzdG9taXplcg==","type":"Unicode","source":"Runtime Data","process":"regsvr32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V0JDdXN0b21pemVyLldCQ3VzdG9taXplci4x","type":"Unicode","source":"Runtime Data","process":"regsvr32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"ezAwMDIwNDIwLTAwMDAtMDAwMC1DMDAwLTAwMDAwMDAwMDA0Nn0=","type":"Unicode","source":"Runtime Data","process":"regsvr32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"ezAwMDIwNDI0LTAwMDAtMDAwMC1DMDAwLTAwMDAwMDAwMDA0Nn0=","type":"Unicode","source":"Runtime Data","process":"regsvr32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"e0QzMTg0M0MzLUMyNzUtMTFEMS1BQkVFLTYwMjU0NkMxMUUwOH0=","type":"Unicode","source":"Runtime Data","process":"regsvr32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"e0QzMTg0M0QxLUMyNzUtMTFEMS1BQkVFLTYwMjU0NkMxMUUwOH0=","type":"Unicode","source":"Runtime Data","process":"regsvr32.exe","filename":null,"compromised":null,"detection_total":null,"total":null}]},{"name":"msflxgrd.ocx.3900053644","strings":[{"value":"JXMgT2JqZWN0","type":"Ansi","source":"Dropped File","process":null,"filename":"msflxgrd.ocx.3900053644","compromised":null,"detection_total":null,"total":null},{"value":"JXMuJXMuJWxk","type":"Ansi","source":"Dropped File","process":null,"filename":"msflxgrd.ocx.3900053644","compromised":null,"detection_total":null,"total":null},{"value":"JXMuJXNcQ3VyVmVy","type":"Ansi","source":"Dropped File","process":null,"filename":"msflxgrd.ocx.3900053644","compromised":null,"detection_total":null,"total":null},{"value":"JXNcSW5wcm9jU2VydmVy","type":"Ansi","source":"Dropped File","process":null,"filename":"msflxgrd.ocx.3900053644","compromised":null,"detection_total":null,"total":null},{"value":"JXVcJXMuZGxs","type":"Ansi","source":"Dropped File","process":null,"filename":"msflxgrd.ocx.3900053644","compromised":null,"detection_total":null,"total":null},{"value":"XElucHJvY1NlcnZlcjMy","type":"Ansi","source":"Dropped File","process":null,"filename":"msflxgrd.ocx.3900053644","compromised":null,"detection_total":null,"total":null},{"value":"XE9MRURyYWdNb2Rl","type":"Unicode","source":"Dropped File","process":null,"filename":"msflxgrd.ocx.3900053644","compromised":null,"detection_total":null,"total":null},{"value":"Q0xTSURcJXM=","type":"Ansi","source":"Dropped File","process":null,"filename":"msflxgrd.ocx.3900053644","compromised":null,"detection_total":null,"total":null},{"value":"SW1wbGVtZW50ZWQgQ2F0ZWdvcmllcw==","type":"Ansi","source":"Dropped File","process":null,"filename":"msflxgrd.ocx.3900053644","compromised":null,"detection_total":null,"total":null},{"value":"TWlzY1N0YXR1cw==","type":"Ansi","source":"Dropped File","process":null,"filename":"msflxgrd.ocx.3900053644","compromised":null,"detection_total":null,"total":null},{"value":"VG9vbGJveEJpdG1hcDMy","type":"Ansi","source":"Dropped File","process":null,"filename":"msflxgrd.ocx.3900053644","compromised":null,"detection_total":null,"total":null},{"value":"VkVSU0lPTi5ETEw=","type":"Ansi","source":"Dropped File","process":null,"filename":"msflxgrd.ocx.3900053644","compromised":null,"detection_total":null,"total":null},{"value":"VmVyc2lvbkluZGVwZW5kZW50UHJvZ0lE","type":"Ansi","source":"Dropped File","process":null,"filename":"msflxgrd.ocx.3900053644","compromised":null,"detection_total":null,"total":null},{"value":"eyUwOGxYLSUwNFgtJTA0WC0lMDJYJTAyWC0lMDJYJTAyWCUwMlglMDJYJTAyWCUwMlh9","type":"Ansi","source":"Dropped File","process":null,"filename":"msflxgrd.ocx.3900053644","compromised":null,"detection_total":null,"total":null}]},{"name":"regsvr32.exe:436","strings":[{"value":"JVdJTkRJUiVcU3lzV293NjRcbXNjb21tMzIub2N4","type":"Unicode","source":"Runtime Data","process":"regsvr32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RE1TQ29tbUV2ZW50cw==","type":"Unicode","source":"Runtime Data","process":"regsvr32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWljcm9zb2Z0IENvbW0gQ29udHJvbCA2LjA=","type":"Unicode","source":"Runtime Data","process":"regsvr32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TVNDb21tIEhhcmR3YXJlIFByb3BlcnR5IFBhZ2UgT2JqZWN0","type":"Unicode","source":"Runtime Data","process":"regsvr32.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"ezY0OEE1NjAzLTJDNkUtMTAxQi04MkI2LTAwMDAwMDAwMDAxNH0=","type":"Unicode","source":"Runtime Data","process":"regsvr32.exe","filename":null,"compromised":null,"detection_total":null,"total":null}]},{"name":"WBCustomizer.dll.3678178828","strings":[{"value":"LCAwLCAwLCAz","type":"Unicode","source":"Dropped File","process":null,"filename":"WBCustomizer.dll.3678178828","compromised":null,"detection_total":null,"total":null},{"value":"QURWQVBJMzIuZGxs","type":"Ansi","source":"Dropped File","process":null,"filename":"WBCustomizer.dll.3678178828","compromised":null,"detection_total":null,"total":null},{"value":"Q2hhck5leHRB","type":"Ansi","source":"Dropped File","process":null,"filename":"WBCustomizer.dll.3678178828","compromised":null,"detection_total":null,"total":null},{"value":"Q29UYXNrTWVtQWxsb2M=","type":"Ansi","source":"Dropped File","process":null,"filename":"WBCustomizer.dll.3678178828","compromised":null,"detection_total":null,"total":null},{"value":"Q29UYXNrTWVtRnJlZQ==","type":"Ansi","source":"Dropped File","process":null,"filename":"WBCustomizer.dll.3678178828","compromised":null,"detection_total":null,"total":null},{"value":"Q29UYXNrTWVtUmVhbGxvYw==","type":"Ansi","source":"Dropped File","process":null,"filename":"WBCustomizer.dll.3678178828","compromised":null,"detection_total":null,"total":null},{"value":"RGVidWdCcmVhaw==","type":"Ansi","source":"Dropped File","process":null,"filename":"WBCustomizer.dll.3678178828","compromised":null,"detection_total":null,"total":null},{"value":"RGVsZXRlQ3JpdGljYWxTZWN0aW9u","type":"Ansi","source":"Dropped File","process":null,"filename":"WBCustomizer.dll.3678178828","compromised":null,"detection_total":null,"total":null},{"value":"RGlzYWJsZVRocmVhZExpYnJhcnlDYWxscw==","type":"Ansi","source":"Dropped File","process":null,"filename":"WBCustomizer.dll.3678178828","compromised":null,"detection_total":null,"total":null},{"value":"RGxsQ2FuVW5sb2FkTm93","type":"Ansi","source":"Dropped File","process":null,"filename":"WBCustomizer.dll.3678178828","compromised":null,"detection_total":null,"total":null},{"value":"RGxsR2V0Q2xhc3NPYmplY3Q=","type":"Ansi","source":"Dropped File","process":null,"filename":"WBCustomizer.dll.3678178828","compromised":null,"detection_total":null,"total":null},{"value":"RW50ZXJDcml0aWNhbFNlY3Rpb24=","type":"Ansi","source":"Dropped File","process":null,"filename":"WBCustomizer.dll.3678178828","compromised":null,"detection_total":null,"total":null},{"value":"RmluZFJlc291cmNlQQ==","type":"Ansi","source":"Dropped File","process":null,"filename":"WBCustomizer.dll.3678178828","compromised":null,"detection_total":null,"total":null},{"value":"Rm9yY2VSZW1vdmU=","type":"Ansi","source":"Dropped File","process":null,"filename":"WBCustomizer.dll.3678178828","compromised":null,"detection_total":null,"total":null},{"value":"R2V0S2V5U3RhdGU=","type":"Ansi","source":"Dropped File","process":null,"filename":"WBCustomizer.dll.3678178828","compromised":null,"detection_total":null,"total":null},{"value":"R2V0UHJvY0FkZHJlc3M=","type":"Ansi","source":"Dropped File","process":null,"filename":"WBCustomizer.dll.3678178828","compromised":null,"detection_total":null,"total":null},{"value":"R2V0U2hvcnRQYXRoTmFtZUE=","type":"Ansi","source":"Dropped File","process":null,"filename":"WBCustomizer.dll.3678178828","compromised":null,"detection_total":null,"total":null},{"value":"R2V0U3lzdGVtSW5mbw==","type":"Ansi","source":"Dropped File","process":null,"filename":"WBCustomizer.dll.3678178828","compromised":null,"detection_total":null,"total":null},{"value":"SGVhcENyZWF0ZQ==","type":"Ansi","source":"Dropped File","process":null,"filename":"WBCustomizer.dll.3678178828","compromised":null,"detection_total":null,"total":null},{"value":"SGVhcERlc3Ryb3k=","type":"Ansi","source":"Dropped File","process":null,"filename":"WBCustomizer.dll.3678178828","compromised":null,"detection_total":null,"total":null},{"value":"SGVhcFJlQWxsb2M=","type":"Ansi","source":"Dropped File","process":null,"filename":"WBCustomizer.dll.3678178828","compromised":null,"detection_total":null,"total":null},{"value":"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","type":"Ansi","source":"Dropped File","process":null,"filename":"WBCustomizer.dll.3678178828","compromised":null,"detection_total":null,"total":null},{"value":"SEtFWV9DTEFTU0VTX1JPT1Q=","type":"Ansi","source":"Dropped File","process":null,"filename":"WBCustomizer.dll.3678178828","compromised":null,"detection_total":null,"total":null},{"value":"SEtFWV9DVVJSRU5UX0NPTkZJRw==","type":"Ansi","source":"Dropped File","process":null,"filename":"WBCustomizer.dll.3678178828","compromised":null,"detection_total":null,"total":null},{"value":"SEtFWV9DVVJSRU5UX1VTRVI=","type":"Ansi","source":"Dropped File","process":null,"filename":"WBCustomizer.dll.3678178828","compromised":null,"detection_total":null,"total":null},{"value":"SEtFWV9EWU5fREFUQQ==","type":"Ansi","source":"Dropped File","process":null,"filename":"WBCustomizer.dll.3678178828","compromised":null,"detection_total":null,"total":null},{"value":"SEtFWV9MT0NBTF9NQUNISU5F","type":"Ansi","source":"Dropped File","process":null,"filename":"WBCustomizer.dll.3678178828","compromised":null,"detection_total":null,"total":null},{"value":"SEtFWV9QRVJGT1JNQU5DRV9EQVRB","type":"Ansi","source":"Dropped File","process":null,"filename":"WBCustomizer.dll.3678178828","compromised":null,"detection_total":null,"total":null},{"value":"SEtFWV9VU0VSUw==","type":"Ansi","source":"Dropped File","process":null,"filename":"WBCustomizer.dll.3678178828","compromised":null,"detection_total":null,"total":null},{"value":"SW5pdGlhbGl6ZUNyaXRpY2FsU2VjdGlvbg==","type":"Ansi","source":"Dropped File","process":null,"filename":"WBCustomizer.dll.3678178828","compromised":null,"detection_total":null,"total":null},{"value":"SW50ZXJsb2NrZWREZWNyZW1lbnQ=","type":"Ansi","source":"Dropped File","process":null,"filename":"WBCustomizer.dll.3678178828","compromised":null,"detection_total":null,"total":null},{"value":"SW50ZXJsb2NrZWRJbmNyZW1lbnQ=","type":"Ansi","source":"Dropped File","process":null,"filename":"WBCustomizer.dll.3678178828","compromised":null,"detection_total":null,"total":null},{"value":"SXNEQkNTTGVhZEJ5dGU=","type":"Ansi","source":"Dropped File","process":null,"filename":"WBCustomizer.dll.3678178828","compromised":null,"detection_total":null,"total":null},{"value":"S0VSTkVMMzIuZGxs","type":"Ansi","source":"Dropped File","process":null,"filename":"WBCustomizer.dll.3678178828","compromised":null,"detection_total":null,"total":null},{"value":"TGVhdmVDcml0aWNhbFNlY3Rpb24=","type":"Ansi","source":"Dropped File","process":null,"filename":"WBCustomizer.dll.3678178828","compromised":null,"detection_total":null,"total":null},{"value":"TG9hZExpYnJhcnlFeEE=","type":"Ansi","source":"Dropped File","process":null,"filename":"WBCustomizer.dll.3678178828","compromised":null,"detection_total":null,"total":null},{"value":"TG9hZFJlc291cmNl","type":"Ansi","source":"Dropped File","process":null,"filename":"WBCustomizer.dll.3678178828","compromised":null,"detection_total":null,"total":null},{"value":"bHN0cmNtcGlB","type":"Ansi","source":"Dropped File","process":null,"filename":"WBCustomizer.dll.3678178828","compromised":null,"detection_total":null,"total":null},{"value":"bHN0cmNweUE=","type":"Ansi","source":"Dropped File","process":null,"filename":"WBCustomizer.dll.3678178828","compromised":null,"detection_total":null,"total":null},{"value":"bHN0cmNweW5B","type":"Ansi","source":"Dropped File","process":null,"filename":"WBCustomizer.dll.3678178828","compromised":null,"detection_total":null,"total":null},{"value":"bWl6ZXIgTW9kdWxl","type":"Unicode","source":"Dropped File","process":null,"filename":"WBCustomizer.dll.3678178828","compromised":null,"detection_total":null,"total":null},{"value":"TXVsdGlCeXRlVG9XaWRlQ2hhcg==","type":"Ansi","source":"Dropped File","process":null,"filename":"WBCustomizer.dll.3678178828","compromised":null,"detection_total":null,"total":null},{"value":"b2xlYXV0MzIuZGxs","type":"Ansi","source":"Dropped File","process":null,"filename":"WBCustomizer.dll.3678178828","compromised":null,"detection_total":null,"total":null},{"value":"T0xFQVVUMzIuZGxs","type":"Ansi","source":"Dropped File","process":null,"filename":"WBCustomizer.dll.3678178828","compromised":null,"detection_total":null,"total":null},{"value":"UmVnRGVsZXRlS2V5QQ==","type":"Ansi","source":"Dropped File","process":null,"filename":"WBCustomizer.dll.3678178828","compromised":null,"detection_total":null,"total":null},{"value":"UmVnRW51bUtleUV4QQ==","type":"Ansi","source":"Dropped File","process":null,"filename":"WBCustomizer.dll.3678178828","compromised":null,"detection_total":null,"total":null},{"value":"UmVnRW51bVZhbHVlQQ==","type":"Ansi","source":"Dropped File","process":null,"filename":"WBCustomizer.dll.3678178828","compromised":null,"detection_total":null,"total":null},{"value":"UmVnUXVlcnlJbmZvS2V5QQ==","type":"Ansi","source":"Dropped File","process":null,"filename":"WBCustomizer.dll.3678178828","compromised":null,"detection_total":null,"total":null},{"value":"c2NyaXB0aW9u","type":"Unicode","source":"Dropped File","process":null,"filename":"WBCustomizer.dll.3678178828","compromised":null,"detection_total":null,"total":null},{"value":"U2l6ZW9mUmVzb3VyY2U=","type":"Ansi","source":"Dropped File","process":null,"filename":"WBCustomizer.dll.3678178828","compromised":null,"detection_total":null,"total":null},{"value":"dFZlcnNpb24=","type":"Unicode","source":"Dropped File","process":null,"filename":"WBCustomizer.dll.3678178828","compromised":null,"detection_total":null,"total":null},{"value":"VW5SZWdpc3RlclR5cGVMaWI=","type":"Ansi","source":"Dropped File","process":null,"filename":"WBCustomizer.dll.3678178828","compromised":null,"detection_total":null,"total":null},{"value":"VVNFUjMyLmRsbA==","type":"Ansi","source":"Dropped File","process":null,"filename":"WBCustomizer.dll.3678178828","compromised":null,"detection_total":null,"total":null},{"value":"V0JDdXN0b21pemVy","type":"Unicode","source":"Dropped File","process":null,"filename":"WBCustomizer.dll.3678178828","compromised":null,"detection_total":null,"total":null},{"value":"V0JDdXN0b21pemVyLkRMTA==","type":"Ansi","source":"Dropped File","process":null,"filename":"WBCustomizer.dll.3678178828","compromised":null,"detection_total":null,"total":null},{"value":"V2lkZUNoYXJUb011bHRpQnl0ZQ==","type":"Ansi","source":"Dropped File","process":null,"filename":"WBCustomizer.dll.3678178828","compromised":null,"detection_total":null,"total":null},{"value":"emVyIE1vZHVsZQ==","type":"Unicode","source":"Dropped File","process":null,"filename":"WBCustomizer.dll.3678178828","compromised":null,"detection_total":null,"total":null}]},{"name":"screen_0.png","strings":[{"value":"LCxfLF9fXyxfLHEsXyxf","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_0.png","compromised":null,"detection_total":null,"total":null},{"value":"X19fX19fX19fX19fX18wP19fcF9MPzBfXyxfX19fX18wX19fX19fY2NfXw==","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_0.png","compromised":null,"detection_total":null,"total":null},{"value":"X2lfJywsMCwwX18sX2VfMA==","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_0.png","compromised":null,"detection_total":null,"total":null}]},{"name":"dllhost.exe","strings":[{"value":"L1Byb2Nlc3NpZDp7QUI4OTAyQjQtMDlDQS00QkI2LUI3OEQtQThGNTkwNzlBOEQ1fQ==","type":"Ansi","source":"Process Commandline","process":null,"filename":"dllhost.exe","compromised":null,"detection_total":null,"total":null},{"value":"L1Byb2Nlc3NpZDp7RTEwRjZDM0EtRjFBRS00QURDLUFBOUQtMkZFNjU1MjU2NjZFfQ==","type":"Ansi","source":"Process Commandline","process":null,"filename":"dllhost.exe","compromised":null,"detection_total":null,"total":null},{"value":"L1Byb2Nlc3NpZDp7Rjk3MTc1MDctNjY1MS00RURCLUJGRjctQUU2MTUxNzlCQ0NGfQ==","type":"Ansi","source":"Process Commandline","process":null,"filename":"dllhost.exe","compromised":null,"detection_total":null,"total":null}]},{"name":"dllhost.exe:4072","strings":[{"value":"MDAwNjAxMDEuMDAwNjAxMDE=","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"NzFCMzZGNEE=","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFdpbmRvd3NcQXBpUG9ydA==","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"QWNjZXNzUGVybWlzc2lvbg==","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"QWN0aXZhdGVBdFN0b3JhZ2U=","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"QXBwSURGbGFncw==","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"QXV0aGVudGljYXRpb25MZXZlbA==","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q0VJUEVuYWJsZQ==","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29tK0VuYWJsZWQ=","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29tcHV0ZXJOYW1l","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGVmYXVsdEFjY2Vzc1Blcm1pc3Npb24=","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGxsU3Vycm9nYXRl","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"R2lwQWN0aXZpdHlCeXBhc3M=","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"R2xvYmFsU2Vzc2lvbg==","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SW1hZ2UgUGF0aA==","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SW5wcm9jU2VydmVyMzI=","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TGF1bmNoUGVybWlzc2lvbg==","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TGVnYWN5QXV0aGVudGljYXRpb25MZXZlbA==","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TGVnYWN5SW1wZXJzb25hdGlvbkxldmVs","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TG9hZFVzZXJTZXR0aW5ncw==","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TG9jYWxTZXJ2aWNl","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWFjaGluZVByZWZlcnJlZFVJTGFuZ3VhZ2Vz","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWF4UnBjU2l6ZQ==","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWF4U3hTSGFzaENvdW50","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TmRyT2xlRXh0RExM","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"T09CRUluUHJvZ3Jlc3M=","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UGFnZUFsbG9jYXRvclN5c3RlbUhlYXBJc1ByaXZhdGU=","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UGFnZUFsbG9jYXRvclVzZVN5c3RlbUhlYXA=","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJlZmVycmVkU2VydmVyQml0bmVzcw==","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJlZmVycmVkVUlMYW5ndWFnZXM=","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJpdmF0ZUtleUxpZmV0aW1lU2Vjb25kcw==","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJpdktleUNhY2hlTWF4SXRlbXM=","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJpdktleUNhY2hlUHVyZ2VJbnRlcnZhbFNlY29uZHM=","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UmFpc2VEZWZhdWx0QXV0aG5MZXZlbA==","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UmVtb3RlUnBjRGxs","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UmVtb3RlU2VydmVyTmFtZQ==","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Uk9URmxhZ3M=","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U1JQVHJ1c3RMZXZlbA==","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U3lzdGVtU2V0dXBJblByb2dyZXNz","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VGhyZWFkaW5nTW9kZWw=","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9","type":"Ansi","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null}]},{"name":"Censitrac.exe.2918306370","strings":[{"value":"PC9TVFlMRT4=","type":"Unicode","source":"Dropped File","process":null,"filename":"Censitrac.exe.2918306370","compromised":null,"detection_total":null,"total":null},{"value":"RG9jdW1lbnQ=","type":"Unicode","source":"Dropped File","process":null,"filename":"Censitrac.exe.2918306370","compromised":null,"detection_total":null,"total":null},{"value":"UHJvZHVjdHM=","type":"Unicode","source":"Dropped File","process":null,"filename":"Censitrac.exe.2918306370","compromised":null,"detection_total":null,"total":null}]},{"name":"screen_4.png","strings":[{"value":"P19fX19fYz9fX19fX18/dj9fX19fX2M/X18wX19fX19fX19fMF9fX18wX19fX2M=","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_4.png","compromised":null,"detection_total":null,"total":null},{"value":"X19fX19fX19f","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_4.png","compromised":null,"detection_total":null,"total":null},{"value":"X19fX19fX19jXw==","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_4.png","compromised":null,"detection_total":null,"total":null}]},{"name":"screen_8.png","strings":[{"value":"P19fX19fYz9fX19fX19fdj9fX19fX2M/X18wX19fX19fX19fMF9fX18wX19fX2M=","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_8.png","compromised":null,"detection_total":null,"total":null},{"value":"P19fX19fY2pfX19fP19fMDA/X19fMF8/P19fX19fXzBf","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_8.png","compromised":null,"detection_total":null,"total":null},{"value":"X19fX18wX19fX19f","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_8.png","compromised":null,"detection_total":null,"total":null},{"value":"X19fX19fX2Nf","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_8.png","compromised":null,"detection_total":null,"total":null},{"value":"X2NlbnNsdHJhY18=","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_8.png","compromised":null,"detection_total":null,"total":null},{"value":"QnVfbGQ3Nmls","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_8.png","compromised":null,"detection_total":null,"total":null},{"value":"Q2Vuc190cmFj","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_8.png","compromised":null,"detection_total":null,"total":null},{"value":"Q29tcHV0ZXI=","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_8.png","compromised":null,"detection_total":null,"total":null},{"value":"UmVfY2xlODFu","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_8.png","compromised":null,"detection_total":null,"total":null},{"value":"V19uZDB3czc=","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_8.png","compromised":null,"detection_total":null,"total":null}]},{"name":"cacls.exe:3632","strings":[{"value":"XFJQQyBDb250cm9sXENvbnNvbGVMUEMtMHgwMDAwMDAwMDAwMDAwQ0M0LTEwNjUwNTc4MzM1NzE3NzQzNjMxNDUxODM4MjIxMzQ5ODQyMTE5OTI5NDU5Mzc0LTU2MTU3ODI2Ni0zOTYyNjQwMTUtNzk0ODgwODgx","type":"Unicode","source":"Runtime Data","process":"cacls.exe","filename":null,"compromised":null,"detection_total":null,"total":null}]},{"name":"cacls.exe:3940","strings":[{"value":"XFJQQyBDb250cm9sXENvbnNvbGVMUEMtMHgwMDAwMDAwMDAwMDAwRkI0LS04NzY1MTgxMDY1NjQ1MjI1MDEtMTcyMjk0ODM1MjEyODA0NTczMzctMTkwNDQ3OTUwLTQ1NDAyNjIzOTc3NTY1MzU1MzE5NzUwNjczNzM=","type":"Unicode","source":"Runtime Data","process":"cacls.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9","type":"Ansi","source":"Runtime Data","process":"cacls.exe","filename":null,"compromised":null,"detection_total":null,"total":null}]},{"name":"censitrac.exe:4076","strings":[{"value":"XFNlc3Npb25zXDFcV2luZG93c1xBcGlQb3J0","type":"Unicode","source":"Runtime Data","process":"censitrac.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"QXV0aGVudGljb2RlRW5hYmxlZA==","type":"Unicode","source":"Runtime Data","process":"censitrac.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Y2Vuc2l0cmFjLmV4ZQ==","type":"Unicode","source":"Runtime Data","process":"censitrac.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29tcGF0RGxs","type":"Unicode","source":"Runtime Data","process":"censitrac.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q1dESWxsZWdhbEluRExMU2VhcmNo","type":"Unicode","source":"Runtime Data","process":"censitrac.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGlzYWJsZU1ldGFGaWxlcw==","type":"Unicode","source":"Runtime Data","process":"censitrac.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGlzYWJsZVVzZXJNb2RlQ2FsbGJhY2tGaWx0ZXI=","type":"Unicode","source":"Runtime Data","process":"censitrac.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Rmlwc0FsZ29yaXRobVBvbGljeQ==","type":"Unicode","source":"Runtime Data","process":"censitrac.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SW5zdGFsbCBjZW5zaXRyYWMuZXhlICAgMS4xLjIzOCA0LzQvMjAxOCA2OjAzOjAyIFBNICg2NDk4Mi42OCljZW5zaXRyYWMuZXhlIFBoYXNlIEkgKENvcHkgdG8gSW5zdGFsbGVkQXBwUGF0aClGaWxlIE1vdmUgY2Vuc2l0cmFjLmV4ZSAgdG8gJVBST0dSQU1GSUxFUyVcKHg4NilcQ2Vuc2l0cmFjXENlbnNpdHJhYy5leGUgc3RhcnRlZCA2NDk4Mi43IFN1Y2Nlc3MgNjQ5ODIuODU=","type":"Ansi","source":"Runtime Data","process":"censitrac.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TG9hZEFwcEluaXRfRExMcw==","type":"Unicode","source":"Runtime Data","process":"censitrac.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWFjaGluZUd1aWQ=","type":"Unicode","source":"Runtime Data","process":"censitrac.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2FmZURsbFNlYXJjaE1vZGU=","type":"Unicode","source":"Runtime Data","process":"censitrac.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2FmZVByb2Nlc3NTZWFyY2hNb2Rl","type":"Unicode","source":"Runtime Data","process":"censitrac.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VHJhbnNwYXJlbnRFbmFibGVk","type":"Unicode","source":"Runtime Data","process":"censitrac.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VFNBcHBDb21wYXQ=","type":"Unicode","source":"Runtime Data","process":"censitrac.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VFNVc2VyRW5hYmxlZA==","type":"Unicode","source":"Runtime Data","process":"censitrac.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VXNlRmlsdGVy","type":"Unicode","source":"Runtime Data","process":"censitrac.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9","type":"Ansi","source":"Runtime Data","process":"censitrac.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9","type":"Ansi","source":"Runtime Data","process":"censitrac.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9","type":"Ansi","source":"Runtime Data","process":"censitrac.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9","type":"Ansi","source":"Runtime Data","process":"censitrac.exe","filename":null,"compromised":null,"detection_total":null,"total":null}]},{"name":"conhost.exe:2500","strings":[{"value":"XFRoZW1lQXBpUG9ydA==","type":"Unicode","source":"Runtime Data","process":"conhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29sb3JUYWJsZTAw","type":"Unicode","source":"Runtime Data","process":"conhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29sb3JUYWJsZTAx","type":"Unicode","source":"Runtime Data","process":"conhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29sb3JUYWJsZTAy","type":"Unicode","source":"Runtime Data","process":"conhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29sb3JUYWJsZTAz","type":"Unicode","source":"Runtime Data","process":"conhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29sb3JUYWJsZTA0","type":"Unicode","source":"Runtime Data","process":"conhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29sb3JUYWJsZTA1","type":"Unicode","source":"Runtime Data","process":"conhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29sb3JUYWJsZTA2","type":"Unicode","source":"Runtime Data","process":"conhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29sb3JUYWJsZTA3","type":"Unicode","source":"Runtime Data","process":"conhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29sb3JUYWJsZTA4","type":"Unicode","source":"Runtime Data","process":"conhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29sb3JUYWJsZTA5","type":"Unicode","source":"Runtime Data","process":"conhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29sb3JUYWJsZTEw","type":"Unicode","source":"Runtime Data","process":"conhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29sb3JUYWJsZTEx","type":"Unicode","source":"Runtime Data","process":"conhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29sb3JUYWJsZTEy","type":"Unicode","source":"Runtime Data","process":"conhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29sb3JUYWJsZTEz","type":"Unicode","source":"Runtime Data","process":"conhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29sb3JUYWJsZTE0","type":"Unicode","source":"Runtime Data","process":"conhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29sb3JUYWJsZTE1","type":"Unicode","source":"Runtime Data","process":"conhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29tbW9uRmlsZXNEaXI=","type":"Unicode","source":"Runtime Data","process":"conhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29tbW9uRmlsZXNEaXIgKHg4Nik=","type":"Unicode","source":"Runtime Data","process":"conhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29tbW9uVzY0MzJEaXI=","type":"Unicode","source":"Runtime Data","process":"conhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q3Vyc29yU2l6ZQ==","type":"Unicode","source":"Runtime Data","process":"conhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGF0YUZpbGVQYXRo","type":"Unicode","source":"Runtime Data","process":"conhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RW5hYmxlQ29sb3JTZWxlY3Rpb24=","type":"Unicode","source":"Runtime Data","process":"conhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RXh0ZW5kZWRFZGl0S2V5","type":"Unicode","source":"Runtime Data","process":"conhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RXh0ZW5kZWRFZGl0a2V5Q3VzdG9t","type":"Unicode","source":"Runtime Data","process":"conhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Rm9udEZhbWlseQ==","type":"Unicode","source":"Runtime Data","process":"conhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Rm9udFNpemU=","type":"Unicode","source":"Runtime Data","process":"conhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Rm9udFdlaWdodA==","type":"Unicode","source":"Runtime Data","process":"conhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SGlzdG9yeUJ1ZmZlclNpemU=","type":"Unicode","source":"Runtime Data","process":"conhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SGlzdG9yeU5vRHVw","type":"Unicode","source":"Runtime Data","process":"conhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SW5zZXJ0TW9kZQ==","type":"Unicode","source":"Runtime Data","process":"conhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TG9hZENvbkltZQ==","type":"Unicode","source":"Runtime Data","process":"conhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TnVtYmVyT2ZIaXN0b3J5QnVmZmVycw==","type":"Unicode","source":"Runtime Data","process":"conhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UG9wdXBDb2xvcnM=","type":"Unicode","source":"Runtime Data","process":"conhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJvZ3JhbUZpbGVzRGlyICh4ODYp","type":"Unicode","source":"Runtime Data","process":"conhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJvZ3JhbVc2NDMyRGly","type":"Unicode","source":"Runtime Data","process":"conhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UXVpY2tFZGl0","type":"Unicode","source":"Runtime Data","process":"conhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2NyZWVuQnVmZmVyU2l6ZQ==","type":"Unicode","source":"Runtime Data","process":"conhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2NyZWVuQ29sb3Jz","type":"Unicode","source":"Runtime Data","process":"conhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VGhlbWVBcGlDb25uZWN0aW9uUmVxdWVzdA==","type":"Unicode","source":"Runtime Data","process":"conhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VHJpbUxlYWRpbmdaZXJvcw==","type":"Unicode","source":"Runtime Data","process":"conhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V2luZG93UG9zaXRpb24=","type":"Unicode","source":"Runtime Data","process":"conhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V2luZG93U2l6ZQ==","type":"Unicode","source":"Runtime Data","process":"conhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V29yZERlbGltaXRlcnM=","type":"Unicode","source":"Runtime Data","process":"conhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null}]},{"name":"dllhost.exe:1640","strings":[{"value":"QWRkcmVzc0ZhbWlseQ==","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"QWRtaW5UYWJQcm9jcw==","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"QWxsb3dPbmx5RE5TUXVlcnlGb3JXUEFE","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"QWx3YXlzRHJhaW5PblJlZGlyZWN0","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"QXR0cmlidXRlcw==","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"QXV0b1Byb3h5RGV0ZWN0VHlwZQ==","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"QmFkUHJveHlFeHBpcmVzVGltZQ==","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"QnlwYXNzSFRUUE5vQ2FjaGVDaGVjaw==","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"QnlwYXNzU1NMTm9DYWNoZUNoZWNr","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q2FjaGVNb2Rl","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q2F0ZWdvcnk=","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q2VydENhY2hlTm9WYWxpZGF0ZQ==","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q2VydGlmaWNhdGVSZXZvY2F0aW9u","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q2xpZW50QXV0aEJ1aWx0SW5VSQ==","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29tYmluZUZhbHNlU3RhcnREYXRh","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29ubmVjdFJldHJpZXM=","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29ubmVjdFRpbWVPdXQ=","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGVmYXVsdENvbm5lY3Rpb25TZXR0aW5ncw==","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGVzY3JpcHRpb24=","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGlhbHVwVXNlTGFuU2V0dGluZ3M=","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGlzYWJsZUJhc2ljT3ZlckNsZWFyQ2hhbm5lbA==","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGlzYWJsZUJyYW5jaENhY2hl","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGlzYWJsZUNhY2hpbmdPZlNTTFBhZ2Vz","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGlzYWJsZUZhbHNlU3RhcnRCbG9ja2xpc3Q=","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGlzYWJsZUtlZXBBbGl2ZQ==","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGlzYWJsZU5UTE1QcmVBdXRo","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGlzYWJsZVJlYWRSYW5nZQ==","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGlzcGxheVNjcmlwdERvd25sb2FkRmFpbHVyZVVJ","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGlzcGxheVN0cmluZw==","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGxsSG9zdC5leGU=","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RG5zQ2FjaGVFbmFibGVk","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RG5zQ2FjaGVFbnRyaWVz","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RG5zQ2FjaGVUaW1lb3V0","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RG9udFVzZUROU0xvYWRCYWxhbmNpbmc=","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RHVvUHJvdG9jb2xz","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RW5hYmxlQXV0b1Byb3h5UmVzdWx0Q2FjaGU=","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RW5hYmxlSHR0cDFfMQ==","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RW5hYmxlSHR0cFRyYWNl","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RW5hYmxlTGVnYWN5QXV0b1Byb3h5RmVhdHVyZXM=","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RW5hYmxlTmVnb3RpYXRl","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RW5hYmxlU3BkeURlYnVnQXNzZXJ0cw==","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RW5mb3JjZVAzUFZhbGlkaXR5","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RkVBVFVSRV9DTElFTlRBVVRIQ0VSVEZJTFRFUg==","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Rm9sZGVyVHlwZUlE","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RnJhbWVNZXJnaW5n","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RnJhbWVUYWJXaW5kb3c=","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RnJvbUNhY2hlVGltZW91dA==","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RnRwRGVmYXVsdEV4cGlyeVRpbWVTZWNz","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SGVhZGVyRXhjbHVzaW9uTGlzdEZvckNhY2hl","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SGVscGVyRGxsTmFtZQ==","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SHR0cERlZmF1bHRFeHBpcnlUaW1lU2Vjcw==","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SWRuRW5hYmxlZA==","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SW5pdEZvbGRlckhhbmRsZXI=","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"S2VlcEFsaXZlVGltZW91dA==","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TGVhc2hMZWdhY3lDb29raWVz","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TGlicmFyeVBhdGg=","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TG9jYWxpemVkTmFtZQ==","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TG9jYWxSZWRpcmVjdE9ubHk=","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWF4Q29ubmVjdGlvbnNQZXIxXzBTZXJ2ZXI=","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWF4Q29ubmVjdGlvbnNQZXJQcm94eQ==","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWF4Q29ubmVjdGlvbnNQZXJTZXJ2ZXI=","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWF4SHR0cFJlZGlyZWN0cw==","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWF4U29ja2FkZHJMZW5ndGg=","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TUJDU0FQSWZvckNyYWNr","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TUJDU1NlcnZlcm5hbWU=","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWltZUV4Y2x1c2lvbkxpc3RGb3JDYWNoZQ==","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWluU29ja2FkZHJMZW5ndGg=","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TmFtZVNwYWNlX0NhbGxvdXQ=","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TmV4dF9DYXRhbG9nX0VudHJ5X0lE","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Tm9DaGVja0F1dG9kaWFsT3ZlclJpZGU=","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TnVtX0NhdGFsb2dfRW50cmllczY0","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UGFja2VkQ2F0YWxvZ0l0ZW0=","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UGFyZW50Rm9sZGVy","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UGFyc2luZ05hbWU=","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJlQ29ubmVjdExpbWl0","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJlQ3JlYXRl","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJlUmVzb2x2ZUxpbWl0","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJvdmlkZXJJZA==","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJvdmlkZXJJbmZv","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJveHlIdHRwMS4x","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJveHlTZXR0aW5nc1BlclVzZXI=","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHVibGlzaEV4cGFuZGVkUGF0aA==","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UmVjZWl2ZVRpbWVPdXQ=","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UmVsYXRpdmVQYXRo","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2NhdmVuZ2VDYWNoZUZpbGVMaWZlVGltZQ==","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2NhdmVuZ2VDYWNoZUZpbGVMaW1pdA==","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2NhdmVuZ2VDYWNoZUxvd2VyQm91bmQ=","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2VjdXJlUHJvdG9jb2xz","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2VjdXJpdHk=","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2VjdXJpdHlfSEtMTV9vbmx5","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2VuZEV4dHJhQ1JMRg==","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2VuZFRpbWVPdXQ=","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2VyaWFsX0FjY2Vzc19OdW0=","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2VydmVySW5mb1RpbWVvdXQ=","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2Vzc2lvbk1lcmdpbmc=","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2Vzc2lvblN0YXJ0VGltZURlZmF1bHREZWx0YVNlY3M=","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2hhcmVDcmVkc1dpdGhXaW5IdHRw","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U29ja2V0UmVjZWl2ZUJ1ZmZlckxlbmd0aA==","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U29ja2V0U2VuZEJ1ZmZlckxlbmd0aA==","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U3FtSHR0cFN0cmVhbVJhbmRvbVVwbG9hZFBvb2xTaXpl","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U3RvcmVzU2VydmljZUNsYXNzSW5mbw==","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U3RyZWFtUmVzb3VyY2U=","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U3RyZWFtUmVzb3VyY2VUeXBl","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U3VwcG9ydGVkTmFtZVNwYWNl","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VGFiUHJvY0dyb3d0aA==","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VGNwQXV0b3R1bmluZw==","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VHJhbnNwb3J0cw==","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VXNlRGVsYXllZEFjY2VwdGFuY2U=","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VXNlRmlyc3RBdmFpbGFibGU=","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VVRGOFNlcnZlck5hbWVSZXM=","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V2FybkFsd2F5c09uUG9zdA==","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V2Fybk9uQmFkQ2VydFJlY3Zpbmc=","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V2Fybk9uSFRUUFNUb0hUVFBSZWRpcmVjdA==","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V2Fybk9uUG9zdA==","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V2Fybk9uUG9zdFJlZGlyZWN0","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V2Fybk9uWm9uZUNyb3NzaW5n","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V2luU29jayAyLjAgUHJvdmlkZXIgSUQ=","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V2luU29ja19SZWdpc3RyeV9WZXJzaW9u","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V3BhZE92ZXJyaWRl","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V3BhZFNlYXJjaEFsbERvbWFpbnM=","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V3MyXzMyTnVtSGFuZGxlQnVja2V0cw==","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V3MyXzMyU3BpbkNvdW50","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9bw==","type":"Ansi","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null}]},{"name":"VBoxService.exe:4600","strings":[{"value":"YmdsUjNJbml0IGZhaWxlZCB3aXRoIHJjPVZFUlJfT1BFTl9GQUlMRUQ=","type":"Ansi","source":"Runtime Data","process":"VBoxService.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Qm94U2VydmljZS5leGU=","type":"Ansi","source":"Runtime Data","process":"VBoxService.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9","type":"Ansi","source":"Runtime Data","process":"VBoxService.exe","filename":null,"compromised":null,"detection_total":null,"total":null}]},{"name":"cacls.exe","strings":[{"value":"Y2FjbHMgIiVQUk9HUkFNRklMRVMlXCh4ODYpXENlbnNpdHJhYyIgL1QgL0UgL0MgL3AgIkJVSUxUSU5cVXNlcnMiOkY=","type":"Ansi","source":"Process Commandline","process":null,"filename":"cacls.exe","compromised":null,"detection_total":null,"total":null},{"value":"Y2FjbHMgIiVQUk9HUkFNRklMRVMlXCh4ODYpXENlbnNpdHJhYyIgL1QgL0UgL0MgL3AgIkRvbWFpblxEb21haW4gVXNlcnMiOkY=","type":"Ansi","source":"Process Commandline","process":null,"filename":"cacls.exe","compromised":null,"detection_total":null,"total":null}]},{"name":"Censitrac.exe:4372","strings":[{"value":"Y2FjbHMuZXhl","type":"Unicode","source":"Runtime Data","process":"Censitrac.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q2Vuc2l0cmFjLmNhYg==","type":"Unicode","source":"Runtime Data","process":"Censitrac.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q2Vuc2l0cmFjLmV4ZS5sbms=","type":"Unicode","source":"Runtime Data","process":"Censitrac.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q2Vuc2l0cmFjLmxuaw==","type":"Unicode","source":"Runtime Data","process":"Censitrac.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGV2aWNlUGF0aA==","type":"Unicode","source":"Runtime Data","process":"Censitrac.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGlzYWJsZUxvY2FsT3ZlcnJpZGU=","type":"Unicode","source":"Runtime Data","process":"Censitrac.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RW5hYmxlQW5jaG9yQ29udGV4dA==","type":"Unicode","source":"Runtime Data","process":"Censitrac.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TGFiZWxUb3A=","type":"Unicode","source":"Hybrid Analysis","process":"Censitrac.exe","filename":"00017318-00004372.00000001.19558.00400000.00000002.mdmp","compromised":null,"detection_total":null,"total":null},{"value":"TG9nTWF4RmlsZVNpemU=","type":"Unicode","source":"Runtime Data","process":"Censitrac.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWljcm9zb2Z0IFhQUyBEb2N1bWVudCBXcml0ZXI=","type":"Unicode","source":"Runtime Data","process":"Censitrac.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJlZmVyRXh0ZXJuYWxNYW5pZmVzdA==","type":"Unicode","source":"Runtime Data","process":"Censitrac.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJvZ3JhbSBGaWxlcyAoeDg2KQ==","type":"Unicode","source":"Runtime Data","process":"Censitrac.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"cmVnc3ZyMzIuZXhl","type":"Unicode","source":"Runtime Data","process":"Censitrac.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2VuZCBUbyBPbmVOb3RlIDIwMTA=","type":"Unicode","source":"Runtime Data","process":"Censitrac.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2hvcnRjdXQgdG8gQ2Vuc2l0cmFjLmV4ZS5sbms=","type":"Unicode","source":"Runtime Data","process":"Censitrac.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2hvcnRjdXQgdG8gQ2Vuc2l0cmFjLmxuaw==","type":"Unicode","source":"Runtime Data","process":"Censitrac.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"VHVybk9mZlNQSUFuaW1hdGlvbnM=","type":"Unicode","source":"Runtime Data","process":"Censitrac.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9fcOvwr/CvcOvwr/CvcOvwr/CvcOvwr/CvcOvwr/CvcOvwr/CvcOvwr/CvcOvwr/CvcOvwr/CvQ==","type":"Ansi","source":"Runtime Data","process":"Censitrac.exe","filename":null,"compromised":null,"detection_total":null,"total":null}]},{"name":"Install.log","strings":[{"value":"RmlsZSBNb3ZlIGNlbnNpdHJhYy5leGUgIHRvICVQUk9HUkFNRklMRVMlXCh4ODYpXENlbnNpdHJhY1xDZW5zaXRyYWMuZXhlIHN0YXJ0ZWQgNjQ5ODIuNyBTdWNjZXNzIDY0OTgyLjg1","type":"Ansi","source":"Dropped File","process":null,"filename":"Install.log","compromised":null,"detection_total":null,"total":null},{"value":"SW5zdGFsbCBjZW5zaXRyYWMuZXhlICAgMS4xLjIzOCA0LzQvMjAxOCA2OjAzOjAyIFBNICg2NDk4Mi42OCk=","type":"Ansi","source":"Dropped File","process":null,"filename":"Install.log","compromised":null,"detection_total":null,"total":null}]},{"name":"network.pcap","strings":[{"value":"Z3RsZC1zZXJ2ZXJz","type":"Ansi","source":"PCAP Processing","process":null,"filename":"network.pcap","compromised":null,"detection_total":null,"total":null},{"value":"SEFQVUJXUy1QQw==","type":"Ansi","source":"PCAP Processing","process":null,"filename":"network.pcap","compromised":null,"detection_total":null,"total":null},{"value":"dmVyaXNpZ24tZ3Jz","type":"Ansi","source":"PCAP Processing","process":null,"filename":"network.pcap","compromised":null,"detection_total":null,"total":null}]},{"name":"VBoxService.exe","strings":[{"value":"Z3Vlc3RzZXNzaW9uIC0tc2Vzc2lvbi1pZD0yIC0tc2Vzc2lvbi1wcm90bz0yIC0tdXNlciAlT1NVU0VSJQ==","type":"Ansi","source":"Process Commandline","process":null,"filename":"VBoxService.exe","compromised":null,"detection_total":null,"total":null}]},{"name":"regsvr32.exe","strings":[{"value":"cmVnc3ZyMzIgLXMgLWMgIiVQUk9HUkFNRklMRVMlXCh4ODYpXENlbnNpdHJhY1xXQkN1c3RvbWl6ZXIuZGxsIg==","type":"Ansi","source":"Process Commandline","process":null,"filename":"regsvr32.exe","compromised":null,"detection_total":null,"total":null},{"value":"cmVnc3ZyMzIgLXMgLWMgIiVXSU5ESVIlXHN5c3RlbTMyXG1zY29tbTMyLm9jeCI=","type":"Ansi","source":"Process Commandline","process":null,"filename":"regsvr32.exe","compromised":null,"detection_total":null,"total":null},{"value":"cmVnc3ZyMzIgLXMgLWMgIiVXSU5ESVIlXHN5c3RlbTMyXG1zZmx4Z3JkLm9jeCI=","type":"Ansi","source":"Process Commandline","process":null,"filename":"regsvr32.exe","compromised":null,"detection_total":null,"total":null}]},{"name":"PCAP","strings":[{"value":"dzZjY3pwLmNvbQ==","type":"Ansi","source":"PCAP Processing","process":null,"filename":"PCAP","compromised":null,"detection_total":null,"total":null}]},{"name":"VBoxService.exe:2860","strings":[{"value":"w6/Cv8K9X8Ovwr/CvcOvwr/CvcOvwr/CvcOvwr/CvcOvwr/CvcOvwr/CvcOvwr/CvcOvwr/CvcOvwr/CvcOvwr/CvcOvwr/CvQ==","type":"Ansi","source":"Runtime Data","process":"VBoxService.exe","filename":null,"compromised":null,"detection_total":null,"total":null}]},{"name":"dllhost.exe:4584","strings":[{"value":"w6/Cv8K9aX41w6/Cv8K9","type":"Unicode","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null}]},{"name":"conhost.exe:3268","strings":[{"value":"w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9","type":"Ansi","source":"Runtime Data","process":"conhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null}]},{"name":"dllhost.exe:4872","strings":[{"value":"w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9w6/Cv8K9","type":"Ansi","source":"Runtime Data","process":"dllhost.exe","filename":null,"compromised":null,"detection_total":null,"total":null}]}],"image":[]},"http_requests":[],"ftp_requests":[],"irc_requests":[],"strings_resources":[],"tags_details":[],"sample_flags":["Multi-Process","Network Traffic","Extracted Files"],"suricata_alerts":[],"version_info":[{"id":"Translation","value":"0x0409 0x04b0"},{"id":"LegalCopyright","value":"Censis Technologies"},{"id":"InternalName","value":"Censitrac"},{"id":"FileVersion","value":"1.01.0238"},{"id":"CompanyName","value":"Censis Technologies"},{"id":"ProductName","value":"Censitrac"},{"id":"ProductVersion","value":"1.01.0238"},{"id":"OriginalFilename","value":"Censitrac.exe"}],"apk_info":null,"apps_info":[{"name":"Access","product":"Microsoft Office 2010","version":"14.0.4750.1000"},{"name":"Acrobat Reader","product":"Adobe Acrobat Reader DC","version":"18.9.20050.254034"},{"name":"Chrome","product":null,"version":null},{"name":"Excel","product":"Microsoft Office 2010","version":"14.0.4756.1000"},{"name":"Firefox","product":"Firefox","version":"57.0.1"},{"name":"Flash","product":"Shockwave Flash","version":"27,0,0,187"},{"name":"Hancom Office Hancell","product":null,"version":null},{"name":"Internet Explorer","product":"Internet Explorer","version":"11.00.9600.16428"},{"name":"Java","product":"Java(TM) Platform SE 8","version":"8.0.1510.12"},{"name":"OneNote","product":"Microsoft OneNote","version":"14.0.4763.1000"},{"name":"PowerPoint","product":"Microsoft Office 2010","version":"14.0.4754.1000"},{"name":"Word","product":"Microsoft Office 2010","version":"14.0.4762.1000"}],"architecture":"32 Bit","document":{"author":null,"creator":null,"producer":null,"title":null,"subject":null,"pages":0},"packer":null,"file_imports":[{"module":"MSVBVM60.DLL","functions":["__vbaAryConstruct2","__vbaAryCopy","__vbaAryDestruct","__vbaAryLock","__vbaAryMove","__vbaAryUnlock","__vbaBoolVar","__vbaBoolVarNull","__vbaCastObj","__vbaCastObjVar","__vbaChkstk","__vbaCopyBytes","__vbaCyMulI2","__vbaCyVar","__vbaDateR8","__vbaDateVar","__vbaErase","__vbaErrorOverflow","__vbaExceptHandler","__vbaExitEachColl","__vbaExitProc","__vbaFileClose","__vbaFileCloseAll","__vbaFileOpen","__vbaFileSeek","__vbaForEachCollObj","__vbaFpCSngR4","__vbaFPException","__vbaFPFix","__vbaFpI2","__vbaFpI4","__vbaFPInt","__vbaFpR4","__vbaFpR8","__vbaFreeObj","__vbaFreeObjList","__vbaFreeStr","__vbaFreeStrList","__vbaFreeVar","__vbaFreeVarList","__vbaGenerateBoundsError","__vbaGet3","__vbaGet4","__vbaGetOwner3","__vbaHresultCheckObj","__vbaI2Cy","__vbaI2I4","__vbaI2Str","__vbaI2Var","__vbaI4Cy","__vbaI4ErrVar","__vbaI4Str","__vbaI4Var","__vbaInStr","__vbaInStrB","__vbaInStrVar","__vbaLateIdCall","__vbaLateIdCallLd","__vbaLateIdCallSt","__vbaLateIdSt","__vbaLateMemCall","__vbaLateMemCallLd","__vbaLateMemCallSt","__vbaLateMemSt","__vbaLbound","__vbaLenBstr","__vbaLenBstrB","__vbaLenVar","__vbaLineInputStr","__vbaLsetFixstr","__vbaMidStmtBstr","__vbaNameFile","__vbaNew","__vbaNew2","__vbaNextEachCollObj","__vbaObjIs","__vbaObjSet","__vbaObjSetAddref","__vbaObjVar","__vbaOnError","__vbaPowerR8","__vbaPrintFile","__vbaPrintObj","__vbaPut3","__vbaPutOwner3","__vbaR4Str","__vbaR4Var","__vbaR8Cy","__vbaR8ErrVar","__vbaR8FixI4","__vbaR8IntI2","__vbaR8IntI4","__vbaR8Str","__vbaRaiseEvent","__vbaRecAnsiToUni","__vbaRecDestruct","__vbaRecDestructAnsi","__vbaRecUniToAnsi","__vbaRedim","__vbaRedimPreserve","__vbaRefVarAry","__vbaResume","__vbaSetSystemError","__vbaStr2Vec","__vbaStrBool","__vbaStrCat","__vbaStrCmp","__vbaStrComp","__vbaStrCopy","__vbaStrErrVarCopy","__vbaStrI2","__vbaStrI4","__vbaStrMove","__vbaStrR4","__vbaStrR8","__vbaStrTextCmp","__vbaStrTextLike","__vbaStrToAnsi","__vbaStrToUnicode","__vbaStrUI1","__vbaStrVarCopy","__vbaStrVarMove","__vbaStrVarVal","__vbaUbound","__vbaUI1I2","__vbaUI1I4","__vbaUnkVar","__vbaVar2Vec","__vbaVarAbs","__vbaVarAdd","__vbaVarAnd","__vbaVarCat","__vbaVarCmpEq","__vbaVarCopy","__vbaVarDiv","__vbaVarDup","__vbaVarErrI4","__vbaVarFix","__vbaVargVar","__vbaVargVarMove","__vbaVarIndexLoad","__vbaVarIndexLoadRef","__vbaVarIndexLoadRefLock","__vbaVarIndexStore","__vbaVarLateMemCallLd","__vbaVarLateMemCallLdRf","__vbaVarLateMemSt","__vbaVarMove","__vbaVarMul","__vbaVarNot","__vbaVarOr","__vbaVarSetObjAddref","__vbaVarSetVar","__vbaVarSub","__vbaVarTextCmpEq","__vbaVarTextCmpGe","__vbaVarTextCmpGt","__vbaVarTextCmpLt","__vbaVarTextCmpNe","__vbaVarTextTstEq","__vbaVarTextTstGe","__vbaVarTextTstGt","__vbaVarTextTstLt","__vbaVarTextTstNe","__vbaVarTstNe","__vbaVarVargNofree","__vbaVarZero","_adj_fdiv_m16i","_adj_fdiv_m32","_adj_fdiv_m32i","_adj_fdiv_m64","_adj_fdiv_r","_adj_fdivr_m16i","_adj_fdivr_m32","_adj_fdivr_m32i","_adj_fdivr_m64","_adj_fpatan","_adj_fprem","_adj_fprem1","_adj_fptan","_allmul","_CIatan","_CIcos","_CIexp","_CIlog","_CIsin","_CIsqrt","_CItan","DllFunctionCall","EVENT_SINK_AddRef","EVENT_SINK_GetIDsOfNames","EVENT_SINK_Invoke","EVENT_SINK_QueryInterface","EVENT_SINK_Release","Zombie_GetTypeInfo","Zombie_GetTypeInfoCount"]}],"osint_tags":[],"osint_references":[],"memory_forensics":[{"value":"command.com","stream_uid":"00017318-00004372-6687-413-004AD270","stream_modal_data_link":"/bff/report/5ac4ee317ca3e174051348f3/processes/00016692-00004076/streams/0/00017318-00004372-6687-413-004AD270?childUid=00017318-00004372"}],"language":"NEUTRAL","authentihash":"3b71ea76539737bbeb7f8efef8318461efb227803c70522dc7d90926c828daf5","entrypoint_bytes":null,"pdb_timestamp":null,"pdb_pathway":null,"pdb_guid":null,"file_sections":[{"name":".text","entropy":5.9890786771,"virtual_address":"0x1000","virtual_size":"0xe1580","raw_size":"0xe2000","md5":"4336e046fd1ed99a5fed2f631a8b9472","characteristics":[]},{"name":".data","entropy":0,"virtual_address":"0xe3000","virtual_size":"0x6c04","raw_size":"0x1000","md5":"620f0b67a91f7f74151bc5be745b7110","characteristics":[]},{"name":".rsrc","entropy":7.89026509472,"virtual_address":"0xea000","virtual_size":"0x37d12","raw_size":"0x38000","md5":"942febe6147b7ed4dc03c9973f24bfa2","characteristics":[]}],"file_exports":[],"error":null,"yara_hits":[],"intelligence_mitre_mappings":[],"entrypoint_preview_count":0,"entrypoint_preview_instructions":[],"file_resources":[{"name":"CUSTOM","rva":"0xebff6","size":"0x35d1c","type":"Microsoft Cabinet archive data, 220442 bytes, 5 files","language":"neutral"},{"name":"RT_ICON","rva":"0xeb14e","size":"0xea8","type":"data","language":"neutral"},{"name":"RT_ICON","rva":"0xea8a6","size":"0x8a8","type":"data","language":"neutral"},{"name":"RT_ICON","rva":"0xea77e","size":"0x128","type":"GLS_BINARY_LSB_FIRST","language":"neutral"},{"name":"RT_ICON","rva":"0xea496","size":"0x2e8","type":"data","language":"neutral"},{"name":"RT_GROUP_ICON","rva":"0xea458","size":"0x3e","type":"MS Windows icon resource - 4 icons, 48x48, 256-colors","language":"neutral"},{"name":"RT_VERSION","rva":"0xea1d0","size":"0x288","type":"data","language":"english"}],"file_permissions":[],"file_activities":[],"file_receivers":[],"file_data_directories":[],"elf_headers":[],"elf_static_symbols":null,"vba_macros":[],"verdict_source":null,"user_comments":[],"email_headers":null,"classification_tags":[],"tags":[],"submissions":[{"submission_id":"5ac4ee317ca3e174051348f2","filename":"censitrac.exe","url":"http://1467.censis.net/install/censitrac.exe","created_at":"2018-04-04T10:24:33-05:00"}],"crowdstrike_ai":{"executable_process_memory_analysis":[],"analysis_related_urls":[]},"warnings":["Not all sources for indicator ID \"api-55\" are available in the report","Not all sources for indicator ID \"registry-1\" are available in the report","Not all sources for indicator ID \"registry-25\" are available in the report","Not all sources for indicator ID \"string-64\" are available in the report","Not all sources for indicator ID \"target-25\" are available in the report","Not all sources for indicator ID \"target-67\" are available in the report","Some low-level data is hidden, as this is only a slim report","Some runtime data of duplicate spawned processes are suppressed from the report"],"report_related_files":{"report_json":{"file_name":"report.json","download_url":"/bff/report/5ac4ee317ca3e174051348f3/download/files/report_json","file_size":2292683},"memory_strings":{"file_name":"mstrings.zip","download_url":"/bff/report/5ac4ee317ca3e174051348f3/download/files/memory_strings","file_size":23985},"certificate":{"file_name":"certificate.crt","download_url":"/bff/report/5ac4ee317ca3e174051348f3/download/files/certificate","file_size":5360},"network_pcap":{"file_name":"network.pcap","download_url":"/bff/report/5ac4ee317ca3e174051348f3/download/files/network_pcap","file_size":1136},"memory_dumps":null},"system_resource_monitor":{"cpu_usage":[{"x":0,"y":97.2534},{"x":1,"y":96.9404},{"x":2,"y":7.96875},{"x":3,"y":83.875},{"x":4,"y":8.75},{"x":5,"y":15.1563},{"x":6,"y":10},{"x":7,"y":91.6493},{"x":8,"y":83.0938},{"x":9,"y":81.4063},{"x":10,"y":4.84375},{"x":11,"y":90.4861},{"x":12,"y":7.65625},{"x":13,"y":90.5556},{"x":14,"y":82.7813},{"x":15,"y":81.5},{"x":16,"y":7.03125},{"x":17,"y":90.4514},{"x":18,"y":9.0625},{"x":19,"y":80.875},{"x":20,"y":7.96875},{"x":21,"y":90.6771}],"memory_usage":[{"x":0,"y":17.4678},{"x":1,"y":17.8842},{"x":2,"y":17.8064},{"x":3,"y":17.9522},{"x":4,"y":17.8567},{"x":5,"y":18.0159},{"x":6,"y":18.0444},{"x":7,"y":18.2296},{"x":8,"y":18.2665},{"x":9,"y":18.2641},{"x":10,"y":18.2539},{"x":11,"y":18.4007},{"x":12,"y":18.4004},{"x":13,"y":18.4671},{"x":14,"y":18.5745},{"x":15,"y":18.5681},{"x":16,"y":18.509},{"x":17,"y":18.6988},{"x":18,"y":18.6376},{"x":19,"y":18.6329},{"x":20,"y":18.6273},{"x":21,"y":18.8374}],"disk_read":[{"x":0,"y":718712},{"x":1,"y":738251},{"x":2,"y":338169},{"x":3,"y":186770},{"x":4,"y":71680.7},{"x":5,"y":831685},{"x":6,"y":60471.6},{"x":7,"y":566418},{"x":8,"y":101888},{"x":9,"y":6963.35},{"x":10,"y":8191.98},{"x":11,"y":70347.6},{"x":12,"y":3276.79},{"x":13,"y":37580.3},{"x":14,"y":36761.7},{"x":15,"y":1638.38},{"x":16,"y":6553.56},{"x":17,"y":60928.1},{"x":18,"y":3686.34},{"x":19,"y":1638.4},{"x":20,"y":2047.96},{"x":21,"y":34712.5}],"disk_write":[{"x":0,"y":804248},{"x":1,"y":1447760},{"x":2,"y":1355800},{"x":3,"y":326028},{"x":4,"y":1003430},{"x":5,"y":186110},{"x":6,"y":53815.1},{"x":7,"y":878274},{"x":8,"y":496640},{"x":9,"y":58420.4},{"x":10,"y":74188.6},{"x":11,"y":262088},{"x":12,"y":48691},{"x":13,"y":272892},{"x":14,"y":174900},{"x":15,"y":96152.5},{"x":16,"y":42239.7},{"x":17,"y":159744},{"x":18,"y":135575},{"x":19,"y":48076.7},{"x":20,"y":30770.6},{"x":21,"y":73162.4}],"network_packets":[{"x":0,"y":1.3922},{"x":1,"y":3.68262},{"x":2,"y":3.59992},{"x":3,"y":0.799967},{"x":4,"y":0.600006},{"x":5,"y":2.89997},{"x":6,"y":4.30031},{"x":7,"y":7.4999},{"x":8,"y":0.7},{"x":9,"y":0.100002},{"x":10,"y":0.399999},{"x":11,"y":0.0999982},{"x":12,"y":0.299999},{"x":13,"y":1.89997},{"x":14,"y":6.30002},{"x":15,"y":6.19993},{"x":16,"y":3.19998},{"x":17,"y":2.1},{"x":18,"y":1.49998},{"x":19,"y":0.0999997},{"x":20,"y":0.199996},{"x":21,"y":1.39995}],"page_file":[{"x":0,"y":255558000},{"x":1,"y":257982000},{"x":2,"y":255783000},{"x":3,"y":255627000},{"x":4,"y":252965000},{"x":5,"y":259416000},{"x":6,"y":260178000},{"x":7,"y":263610000},{"x":8,"y":260489000},{"x":9,"y":260383000},{"x":10,"y":260342000},{"x":11,"y":260305000},{"x":12,"y":260350000},{"x":13,"y":260223000},{"x":14,"y":259654000},{"x":15,"y":259445000},{"x":16,"y":259424000},{"x":17,"y":260956000},{"x":18,"y":259228000},{"x":19,"y":259113000},{"x":20,"y":258978000},{"x":21,"y":261063000}]},"external_reports":null,"available_buttons":{"report_false_positive":true},"hashes_to_context_check":["e7219d2bff8a2e3f3d9ec5d3c821fbdcde017b71766381de037c5ff159c2d04e","51a1d6812e445c26c71465e2709e6d1ad587f8513002d662cd160f424f48b37c","4e592240b745546c15e95e26b2547cec86352a49ee1ef79b3e3d28df8b5a0e70","573d3bcd037a4e0e71c741c9339b6aef744d222f11d373c8ad09a996c884bd49","c87144bd14d0a82f6e28591084d429e32df1fb2d9264dff6e1139f84c39c4e63","b4f3e5c7b3657f215b4b4ec6d4435c4e46472a2e1c5d2d21b6d49b8309d6ac32","25e65450bf8eda17d91eacc4c9be1b0b8f495e1d47def050345a55376ad3fd9d","6ac713ee29464f650436e4a1bc3ced86ad43ef0ad1b2c707f9d9afb7a51ac244","439f7977a0d2b49fadec31db40dc6b0d8ded2ceded52cf3055260f7a1eeecae6","890c1734ed1ef6b2422a9b21d6205cf91e014add8a7f41aa5a294fcf60631a7b","42b57adee2f57587f05ad37e506221cb1f9dc87f43e418ff98040d7fd9fe6e5c"]}}]]}] 1f:null 23:[["$","title","0",{"children":"Malicious — Falcon Sandbox Report 5ac4ee317ca3… — Score 100/100 — Sample e7219d2bff8a… | Hybrid Analysis"}],["$","meta","1",{"name":"description","content":"Malicious verdict for sandbox report 5ac4ee317ca3…. Threat score 100/100. 3 malicious and 18 suspicious behavioral indicators across 42 signatures. Detonated in Windows 7 64 bit. View behavioral indicators, network activity, dropped files, and MITRE ATT&CK mappings."}],["$","meta","2",{"name":"robots","content":"index, follow"}],["$","link","3",{"rel":"canonical","href":"https://www.hybrid-analysis.com/sample/e7219d2bff8a2e3f3d9ec5d3c821fbdcde017b71766381de037c5ff159c2d04e/5ac4ee317ca3e174051348f3"}],["$","meta","4",{"property":"og:title","content":"Malicious — Falcon Sandbox Report 5ac4ee317ca3… — Score 100/100 — Sample e7219d2bff8a… | Hybrid Analysis"}],["$","meta","5",{"property":"og:description","content":"Malicious verdict for sandbox report 5ac4ee317ca3…. Threat score 100/100. 3 malicious and 18 suspicious behavioral indicators across 42 signatures. Detonated in Windows 7 64 bit. View behavioral indicators, network activity, dropped files, and MITRE ATT&CK mappings."}],["$","meta","6",{"property":"og:url","content":"https://www.hybrid-analysis.com/sample/e7219d2bff8a2e3f3d9ec5d3c821fbdcde017b71766381de037c5ff159c2d04e/5ac4ee317ca3e174051348f3"}],["$","meta","7",{"name":"twitter:card","content":"summary"}],["$","meta","8",{"name":"twitter:title","content":"Malicious — Falcon Sandbox Report 5ac4ee317ca3… — Score 100/100 — Sample e7219d2bff8a… | Hybrid Analysis"}],["$","meta","9",{"name":"twitter:description","content":"Malicious verdict for sandbox report 5ac4ee317ca3…. Threat score 100/100. 3 malicious and 18 suspicious behavioral indicators across 42 signatures. Detonated in Windows 7 64 bit. View behavioral indicators, network activity, dropped files, and MITRE ATT&CK mappings."}],["$","link","10",{"rel":"icon","href":"/favicon.svg"}],["$","$L35","11",{}]]