25:I[10321,["/_next/static/chunks/3q3zujqgvmbhp.js","/_next/static/chunks/1sl4dwu7ouhir.js","/_next/static/chunks/3eaw1sz4hhkwg.js","/_next/static/chunks/0poobxhsa58tt.js","/_next/static/chunks/3utyn4akhmarc.js","/_next/static/chunks/3k0jjn7m8jtc5.js","/_next/static/chunks/3xfwong8gg51p.js","/_next/static/chunks/1kn_tf3p-ubex.js"],"ReportDetailWrapper"] 65:I[27201,["/_next/static/chunks/3q3zujqgvmbhp.js","/_next/static/chunks/1sl4dwu7ouhir.js","/_next/static/chunks/3eaw1sz4hhkwg.js","/_next/static/chunks/0poobxhsa58tt.js","/_next/static/chunks/3utyn4akhmarc.js"],"IconMark"] 24:T4bd,{"@context":"https://schema.org","@type":"TechArticle","headline":"Malicious — Falcon Sandbox Report 688bec64b905… — Score 85/100 — Sample d1f9ace720d8…","description":"Malicious verdict for sandbox report 688bec64b905…. Threat score 85/100. 4 malicious and 19 suspicious behavioral indicators across 171 signatures. Detonated in Windows 10 64 bit. View behavioral indicators, network activity, dropped files, and MITRE ATT\u0026CK mappings.","url":"/sample/d1f9ace720d863fd174753e89b9e889d2e2f71a287fde66158bb2b5752307474/688bec64b905e9af930423cc","keywords":["Malicious","sandbox report","malware analysis","MITRE ATT\u0026CK","d1f9ace720d863fd174753e89b9e889d2e2f71a287fde66158bb2b5752307474"],"about":{"@type":"SoftwareApplication","name":"encrypt.exe","applicationCategory":"PE32 executable (console) Intel 80386, for MS Windows, 6 sections","identifier":"d1f9ace720d863fd174753e89b9e889d2e2f71a287fde66158bb2b5752307474","additionalType":"Malicious sample"},"threatScore":85,"sandboxEnvironment":"Windows 10 64 bit","behavioralIndicators":{"malicious":4,"suspicious":19,"totalSignatures":171},"publisher":{"@type":"Organization","name":"Hybrid Analysis","url":"https://www.hybrid-analysis.com"}}26:T8a6,Found reference to API "QueryPerformanceFrequency" (Indicator: "QueryPerformanceFrequency"; File: "encrypt.exe") Found reference to API "QueryPerformanceCounter" (Indicator: "QueryPerformanceCounter"; File: "encrypt.exe") Found reference to API "GetSystemTimeAsFileTime" (Indicator: "GetSystemTimeAsFileTime"; File: "encrypt.exe") Found reference to API "WaitForSingleObjectEx" (Indicator: "WaitForSingleObject"; File: "encrypt.exe") Found reference to API "WaitForSingleObjectEx" (Indicator: "WaitForSingleObjectEx"; File: "encrypt.exe") Found reference to API "WaitForSingleObject" (Indicator: "WaitForSingleObject"; File: "encrypt.exe") Found reference to API "Timer: QueryPerformanceFrequency failed with error" (Indicator: "QueryPerformanceFrequency"; File: "encrypt.exe") Found reference to API "Timer: QueryPerformanceCounter failed with error" (Indicator: "QueryPerformanceCounter"; File: "encrypt.exe") Found reference to API "WaitForSingleObject" (Indicator: "WaitForSingleObject"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp") Found reference to API "QueryPerformanceCounter" (Indicator: "QueryPerformanceCounter"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp") Found reference to API "QueryPerformanceFrequency" (Indicator: "QueryPerformanceFrequency"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp") Found reference to API "WaitForSingleObjectEx" (Indicator: "WaitForSingleObject"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp") Found reference to API "WaitForSingleObjectEx" (Indicator: "WaitForSingleObjectEx"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp") Found reference to API "GetSystemTimeAsFileTime" (Indicator: "GetSystemTimeAsFileTime"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp") Found reference to API "Timer: QueryPerformanceFrequency failed with error" (Indicator: "QueryPerformanceFrequency"; Source: "00000000-00004700.00000001.240563.008D1000.00000020.mdmp") Found reference to API "Timer: QueryPerformanceCounter failed with error" (Indicator: "QueryPerformanceCounter"; Source: "00000000-00004700.00000001.240563.008D1000.00000020.mdmp")27:T70c,Found reference to "RandomNumberGenerator: IncorporateEntropy not implemented" (Indicator: "RandomNumberGenerator"; File: "encrypt.exe") Found reference to ".?AVBase@Rijndael@CryptoPP@@" (Indicator: "Rijndael"; File: "encrypt.exe") Found reference to ".?AV?$BlockCipherImpl@URijndael_Info@CryptoPP@@VBlockCipher@2@@CryptoPP@@" (Indicator: "Rijndael"; File: "encrypt.exe") Found reference to ".?AV?$AlgorithmImpl@V?$SimpleKeyingInterfaceImpl@V?$TwoBases@VBlockCipher@CryptoPP@@URijndael_Info@2@@CryptoPP@@V12@@CryptoPP@@V12@@CryptoPP@@" (Indicator: "Rijndael"; File: "encrypt.exe") Found reference to ".?AV?$SimpleKeyingInterfaceImpl@V?$TwoBases@VBlockCipher@CryptoPP@@URijndael_Info@2@@CryptoPP@@V12@@CryptoPP@@" (Indicator: "Rijndael"; File: "encrypt.exe") Found reference to ".?AV?$TwoBases@VBlockCipher@CryptoPP@@URijndael_Info@2@@CryptoPP@@" (Indicator: "Rijndael"; File: "encrypt.exe") Found reference to ".?AURijndael_Info@CryptoPP@@" (Indicator: "Rijndael"; File: "encrypt.exe") Found reference to ".?AVEnc@Rijndael@CryptoPP@@" (Indicator: "Rijndael"; File: "encrypt.exe") Found reference to ".?AV?$BlockCipherFinal@$0A@VEnc@Rijndael@CryptoPP@@@CryptoPP@@" (Indicator: "Rijndael"; File: "encrypt.exe") Found reference to ".?AV?$ClonableImpl@V?$BlockCipherFinal@$0A@VEnc@Rijndael@CryptoPP@@@CryptoPP@@VEnc@Rijndael@2@@CryptoPP@@" (Indicator: "Rijndael"; File: "encrypt.exe") Found reference to ".?AVAsymmetricAlgorithm@CryptoPP@@" (Indicator: "AsymmetricAlgorithm"; File: "encrypt.exe") Found reference to ".?AVRandomNumberGenerator@CryptoPP@@" (Indicator: "RandomNumberGenerator"; File: "encrypt.exe") Found reference to "RandomNumberGenerator: IncorporateEntropy not implemented" (Indicator: "RandomNumberGenerator"; Source: "00000000-00004700.00000001.240563.008D1000.00000020.mdmp")28:T1d0f,"encrypt.exe" renamed original file"C:\$WINDOWS.~BT\Sources\replacementmanifests\contentdeliverymanager.utilities-replacement.man" to "C:\$WINDOWS.~BT\Sources\replacementmanifests\contentdeliverymanager.utilities-replacement.man.x2anylock" "encrypt.exe" renamed original file"C:\$WINDOWS.~BT\Sources\replacementmanifests\devicedirectory-devicedirectoryclient-desktop-replacement.man" to "C:\$WINDOWS.~BT\Sources\replacementmanifests\devicedirectory-devicedirectoryclient-desktop-replacement.man.x2anylock" "encrypt.exe" renamed original file"C:\$WINDOWS.~BT\Sources\replacementmanifests\gpbase-replacement.man" to "C:\$WINDOWS.~BT\Sources\replacementmanifests\gpbase-replacement.man.x2anylock" "encrypt.exe" renamed original file"C:\$WINDOWS.~BT\Sources\replacementmanifests\microsoft-windows-advertisingid-replacement.man" to "C:\$WINDOWS.~BT\Sources\replacementmanifests\microsoft-windows-advertisingid-replacement.man.x2anylock" "encrypt.exe" renamed original file"C:\$WINDOWS.~BT\Sources\replacementmanifests\microsoft-windows-geolocation-replacement.man" to "C:\$WINDOWS.~BT\Sources\replacementmanifests\microsoft-windows-geolocation-replacement.man.x2anylock" "encrypt.exe" renamed original file"C:\$WINDOWS.~BT\Sources\replacementmanifests\microsoft-windows-ie-internetexplorer-repl-2.man" to "C:\$WINDOWS.~BT\Sources\replacementmanifests\microsoft-windows-ie-internetexplorer-repl-2.man.x2anylock" "encrypt.exe" renamed original file"C:\$WINDOWS.~BT\Sources\replacementmanifests\onecore_speechcommon-rep.man" to "C:\$WINDOWS.~BT\Sources\replacementmanifests\onecore_speechcommon-rep.man.x2anylock" "encrypt.exe" renamed original file"C:\found.000\dir0001.chk\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_af-za_75594e685e635a3e\syncres.dll.mui" to "C:\found.000\dir0001.chk\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_af-za_75594e685e635a3e\syncres.dll.mui.x2anylock" "encrypt.exe" renamed original file"C:\found.000\dir0001.chk\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_lb-lu_80b14902c4ca1fab\syncres.dll.mui" to "C:\found.000\dir0001.chk\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_lb-lu_80b14902c4ca1fab\syncres.dll.mui.x2anylock" "encrypt.exe" renamed original file"C:\found.000\dir0001.chk\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_mi-nz_25bb53edb6274a60\syncres.dll.mui" to "C:\found.000\dir0001.chk\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_mi-nz_25bb53edb6274a60\syncres.dll.mui.x2anylock" "encrypt.exe" renamed original file"C:\found.000\dir0001.chk\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_lo-la_77462a6ecae7305c.manifest" to "C:\found.000\dir0001.chk\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_lo-la_77462a6ecae7305c.manifest.x2anylock" "encrypt.exe" renamed original file"C:\found.000\dir0001.chk\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_lt-lt_7f7d233cc5a51216.manifest" to "C:\found.000\dir0001.chk\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_lt-lt_7f7d233cc5a51216.manifest.x2anylock" "encrypt.exe" renamed original file"C:\found.000\dir0001.chk\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_lv-lv_804a91c0c5235306.manifest" to "C:\found.000\dir0001.chk\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_lv-lv_804a91c0c5235306.manifest.x2anylock" "encrypt.exe" renamed original file"C:\found.000\dir0001.chk\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_mi-nz_25bb53edb6274a60.manifest" to "C:\found.000\dir0001.chk\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_mi-nz_25bb53edb6274a60.manifest.x2anylock" "encrypt.exe" renamed original file"C:\found.000\dir0001.chk\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_mk-mk_1efedf2bba7e24b8.manifest" to "C:\found.000\dir0001.chk\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_mk-mk_1efedf2bba7e24b8.manifest.x2anylock" "encrypt.exe" renamed original file"C:\found.000\dir0001.chk\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_ml-in_2048ffe9b9aae7ba.manifest" to "C:\found.000\dir0001.chk\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_ml-in_2048ffe9b9aae7ba.manifest.x2anylock" "encrypt.exe" renamed original file"C:\found.000\dir0001.chk\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_mn-mn_203304f1b9bb8620.manifest" to "C:\found.000\dir0001.chk\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_mn-mn_203304f1b9bb8620.manifest.x2anylock" "encrypt.exe" renamed original file"C:\found.000\dir0001.chk\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_mr-in_20082061b9db8f60.manifest" to "C:\found.000\dir0001.chk\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_mr-in_20082061b9db8f60.manifest.x2anylock" "encrypt.exe" renamed original file"C:\found.000\dir0001.chk\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_ms-my_24ddc44fb6c143a2.manifest" to "C:\found.000\dir0001.chk\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_ms-my_24ddc44fb6c143a2.manifest.x2anylock" "encrypt.exe" renamed original file"C:\found.000\dir0001.chk\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_mt-mt_229b507db83648f0.manifest" to "C:\found.000\dir0001.chk\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_mt-mt_229b507db83648f0.manifest.x2anylock" "encrypt.exe" renamed original file"C:\found.000\dir0001.chk\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_nb-no_c4447870aba27235.manifest" to "C:\found.000\dir0001.chk\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_nb-no_c4447870aba27235.manifest.x2anylock" "encrypt.exe" renamed original file"C:\found.000\dir0001.chk\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_ne-np_c4958fdaab71ca8f.manifest" to "C:\found.000\dir0001.chk\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_ne-np_c4958fdaab71ca8f.manifest.x2anylock" "encrypt.exe" renamed original file"C:\found.000\dir0001.chk\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_nl-nl_c283c3aeacce7c0a.manifest" to "C:\found.000\dir0001.chk\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_nl-nl_c283c3aeacce7c0a.manifest.x2anylock" "encrypt.exe" renamed original file"C:\found.000\dir0001.chk\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_nso-za_30759cdc1af7521b.manifest" to "C:\found.000\dir0001.chk\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_nso-za_30759cdc1af7521b.manifest.x2anylock" "encrypt.exe" renamed original file"C:\found.000\dir0001.chk\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_pa-..-pk_a75d382b17f9fbbf.manifest" to "C:\found.000\dir0001.chk\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_pa-..-pk_a75d382b17f9fbbf.manifest.x2anylock"29:Tc90,Found XOR loop in file "eventemitter2.d.ts.x2anylock" at offset 1150; code bytes = 30d0 Found XOR loop in file "sample.bin" at offset 26298; code bytes = 30d0 Found XOR loop in file "sample.bin" at offset 33615; code bytes = 30d0 Found XOR loop in file "sample.bin" at offset 79514; code bytes = 30d0 Found XOR loop in file "sample.bin" at offset 649773; code bytes = 30d0 Found XOR loop in file "sample.bin" at offset 651259; code bytes = 30d0 Found XOR loop in file "sample.bin" at offset 653023; code bytes = 30d0 Found XOR loop in file "sample.bin" at offset 655031; code bytes = 30d0 Found XOR loop in file "sample.bin" at offset 655927; code bytes = 30d0 Found XOR loop in file "sample.bin" at offset 656815; code bytes = 30d0 Found XOR loop in file "sample.bin" at offset 669999; code bytes = 30d0 Found XOR loop in file "sample.bin" at offset 35190; code bytes = 33c1 Found XOR loop in file "sample.bin" at offset 42123; code bytes = 33c1 Found XOR loop in file "sample.bin" at offset 167500; code bytes = 33c1 Found XOR loop in file "sample.bin" at offset 226815; code bytes = 33c1 Found XOR loop in file "sample.bin" at offset 226878; code bytes = 33c1 Found XOR loop in file "sample.bin" at offset 293634; code bytes = 33c1 Found XOR loop in file "sample.bin" at offset 293684; code bytes = 33c1 Found XOR loop in file "sample.bin" at offset 293794; code bytes = 33c1 Found XOR loop in file "sample.bin" at offset 293918; code bytes = 33c1 Found XOR loop in file "sample.bin" at offset 315913; code bytes = 33c1 Found XOR loop in file "sample.bin" at offset 315948; code bytes = 33c1 Found XOR loop in file "sample.bin" at offset 316036; code bytes = 33c1 Found XOR loop in file "sample.bin" at offset 316052; code bytes = 33c1 Found XOR loop in file "sample.bin" at offset 316110; code bytes = 33c1 Found XOR loop in file "sample.bin" at offset 316131; code bytes = 33c1 Found XOR loop in file "sample.bin" at offset 368283; code bytes = 33c1 Found XOR loop in file "sample.bin" at offset 430766; code bytes = 33c1 Found XOR loop in file "sample.bin" at offset 431346; code bytes = 33c1 Found XOR loop in file "sample.bin" at offset 498546; code bytes = 33c1 Found XOR loop in file "sample.bin" at offset 657619; code bytes = 33c1 Found XOR loop in file "sample.bin" at offset 26232; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 27630; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 74460; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 80620; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 92970; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 529228; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 648770; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 649734; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 651240; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 653004; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 655016; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 668888; code bytes = 8030 Found XOR loop in file "sample.bin" at offset 669990; code bytes = 80302a:T5f6,Found reference to API "GetLocaleInfoW" (Indicator: "GetLocaleInfo"; File: "encrypt.exe") Found reference to API "EnumSystemLocalesW" (Indicator: "EnumSystemLocales"; File: "encrypt.exe") Found reference to API "GetUserDefaultLCID" (Indicator: "GetUserDefaultLCID"; File: "encrypt.exe") Found reference to API "GetLocaleInfoEx" (Indicator: "GetLocaleInfo"; File: "encrypt.exe") Found reference to API "EnumSystemLocalesEx" (Indicator: "EnumSystemLocales"; File: "encrypt.exe") Found reference to API "GetUserDefaultLocaleName" (Indicator: "GetUserDefaultLocaleName"; File: "encrypt.exe") Found reference to API "GetLocaleInfoEx" (Indicator: "GetLocaleInfo"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp, 00000000-00004700.00000001.240563.008D1000.00000020.mdmp") Found reference to API "GetLocaleInfoW" (Indicator: "GetLocaleInfo"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp") Found reference to API "GetUserDefaultLCID" (Indicator: "GetUserDefaultLCID"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp") Found reference to API "EnumSystemLocalesW" (Indicator: "EnumSystemLocales"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp") Found reference to API "EnumSystemLocalesEx" (Indicator: "EnumSystemLocales"; Source: "00000000-00004700.00000001.240563.008D1000.00000020.mdmp") Found reference to API "GetUserDefaultLocaleName" (Indicator: "GetUserDefaultLocaleName"; Source: "00000000-00004700.00000001.240563.008D1000.00000020.mdmp")2b:T113f,"encrypt.exe" called "RtlGetVersion" with parameter 140100000a00000000000000ab3f00000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 (UID: 00000000-00004700) "encrypt.exe" called "RtlGetVersion" with parameter 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 (UID: 00000000-00004700) "encrypt.exe" called "RtlGetVersion" with parameter 1c0100000a00000000000000ab3f00000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 (UID: 00000000-00004700) "encrypt.exe" called "RtlGetVersion" with parameter 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 (UID: 00000000-00004700) "encrypt.exe" called "RtlGetVersion" with parameter 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 (UID: 00000000-00004700) "encrypt.exe" called "RtlGetVersion" with parameter 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 (UID: 00000000-00004700) "encrypt.exe" called "RtlGetVersion" with parameter 140100000a00000000000000ab3f0000020000000000ed020f00000038c8cf00000000009e298d774842f2020000000000100000001000000000e50280c8cf0048004307600000003f005c0063000100feffffffd007820008100000d00782000000000000008200000001005b00820000080000100000002042f20200b4ed02000000000000000008000000000082003c038200141982000000000010198200b7168d0078c8cf0059168d77001000000800000000009c720000e50234c9cf0008100000000000000000000001020000020000000000e5020010000008000000a8c8cf009cc8cf00ee138d7701000000ee138d770800000000000000000000000800000028c9cf00ccc8cf0025aba2720000e502 (UID: 00000000-00004700)2c:T5fa,Found reference to API "SetVolumeMountPointW" (Indicator: "SetVolumeMountPoint"; File: "encrypt.exe") Found reference to API "FindNextVolumeW" (Indicator: "FindNextVolume"; File: "encrypt.exe") Found reference to API "FindFirstVolumeW" (Indicator: "FindFirstVolume"; File: "encrypt.exe") Found reference to API "FindVolumeClose" (Indicator: "FindVolumeClose"; File: "encrypt.exe") Found reference to API "GetVolumePathNamesForVolumeNameW" (Indicator: "GetVolumePathNamesForVolumeName"; File: "encrypt.exe") Found reference to API "GetVolumePathNamesForVolumeNameW" (Indicator: "GetVolumePathName"; File: "encrypt.exe") Found reference to API "FindFirstVolumeW" (Indicator: "FindFirstVolume"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp") Found reference to API "SetVolumeMountPointW" (Indicator: "SetVolumeMountPoint"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp") Found reference to API "FindVolumeClose" (Indicator: "FindVolumeClose"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp") Found reference to API "GetVolumePathNamesForVolumeNameW" (Indicator: "GetVolumePathNamesForVolumeName"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp") Found reference to API "GetVolumePathNamesForVolumeNameW" (Indicator: "GetVolumePathName"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp") Found reference to API "FindNextVolumeW" (Indicator: "FindNextVolume"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp")2d:T144c,"encrypt.exe" called "GetProcAddress" with a parameter InitializeCriticalSectionEx (UID: 00000000-00004700) "encrypt.exe" called "GetProcAddress" with a parameter FlsAlloc (UID: 00000000-00004700) "encrypt.exe" called "GetProcAddress" with a parameter FlsSetValue (UID: 00000000-00004700) "encrypt.exe" called "GetProcAddress" with a parameter FlsGetValue (UID: 00000000-00004700) "encrypt.exe" called "GetProcAddress" with a parameter LCMapStringEx (UID: 00000000-00004700) "encrypt.exe" called "GetProcAddress" with a parameter FlsFree (UID: 00000000-00004700) "encrypt.exe" called "GetProcAddress" with a parameter InitOnceExecuteOnce (UID: 00000000-00004700) "encrypt.exe" called "GetProcAddress" with a parameter CreateEventExW (UID: 00000000-00004700) "encrypt.exe" called "GetProcAddress" with a parameter CreateSemaphoreW (UID: 00000000-00004700) "encrypt.exe" called "GetProcAddress" with a parameter CreateSemaphoreExW (UID: 00000000-00004700) "encrypt.exe" called "GetProcAddress" with a parameter CreateThreadpoolTimer (UID: 00000000-00004700) "encrypt.exe" called "GetProcAddress" with a parameter SetThreadpoolTimer (UID: 00000000-00004700) "encrypt.exe" called "GetProcAddress" with a parameter WaitForThreadpoolTimerCallbacks (UID: 00000000-00004700) "encrypt.exe" called "GetProcAddress" with a parameter CloseThreadpoolTimer (UID: 00000000-00004700) "encrypt.exe" called "GetProcAddress" with a parameter CreateThreadpoolWait (UID: 00000000-00004700) "encrypt.exe" called "GetProcAddress" with a parameter SetThreadpoolWait (UID: 00000000-00004700) "encrypt.exe" called "GetProcAddress" with a parameter CloseThreadpoolWait (UID: 00000000-00004700) "encrypt.exe" called "GetProcAddress" with a parameter FlushProcessWriteBuffers (UID: 00000000-00004700) "encrypt.exe" called "GetProcAddress" with a parameter FreeLibraryWhenCallbackReturns (UID: 00000000-00004700) "encrypt.exe" called "GetProcAddress" with a parameter GetCurrentProcessorNumber (UID: 00000000-00004700) "encrypt.exe" called "GetProcAddress" with a parameter CreateSymbolicLinkW (UID: 00000000-00004700) "encrypt.exe" called "GetProcAddress" with a parameter GetCurrentPackageId (UID: 00000000-00004700) "encrypt.exe" called "GetProcAddress" with a parameter GetTickCount64 (UID: 00000000-00004700) "encrypt.exe" called "GetProcAddress" with a parameter GetFileInformationByHandleEx (UID: 00000000-00004700) "encrypt.exe" called "GetProcAddress" with a parameter SetFileInformationByHandle (UID: 00000000-00004700) "encrypt.exe" called "GetProcAddress" with a parameter GetSystemTimePreciseAsFileTime (UID: 00000000-00004700) "encrypt.exe" called "GetProcAddress" with a parameter InitializeConditionVariable (UID: 00000000-00004700) "encrypt.exe" called "GetProcAddress" with a parameter WakeConditionVariable (UID: 00000000-00004700) "encrypt.exe" called "GetProcAddress" with a parameter WakeAllConditionVariable (UID: 00000000-00004700) "encrypt.exe" called "GetProcAddress" with a parameter SleepConditionVariableCS (UID: 00000000-00004700) "encrypt.exe" called "GetProcAddress" with a parameter InitializeSRWLock (UID: 00000000-00004700) "encrypt.exe" called "GetProcAddress" with a parameter AcquireSRWLockExclusive (UID: 00000000-00004700) "encrypt.exe" called "GetProcAddress" with a parameter TryAcquireSRWLockExclusive (UID: 00000000-00004700) "encrypt.exe" called "GetProcAddress" with a parameter ReleaseSRWLockExclusive (UID: 00000000-00004700) "encrypt.exe" called "GetProcAddress" with a parameter SleepConditionVariableSRW (UID: 00000000-00004700) "encrypt.exe" called "GetProcAddress" with a parameter CreateThreadpoolWork (UID: 00000000-00004700) "encrypt.exe" called "GetProcAddress" with a parameter SubmitThreadpoolWork (UID: 00000000-00004700) "encrypt.exe" called "GetProcAddress" with a parameter CloseThreadpoolWork (UID: 00000000-00004700) "encrypt.exe" called "GetProcAddress" with a parameter CompareStringEx (UID: 00000000-00004700) "encrypt.exe" called "GetProcAddress" with a parameter GetLocaleInfoEx (UID: 00000000-00004700) "encrypt.exe" called "GetProcAddress" with a parameter AreFileApisANSI (UID: 00000000-00004700) "encrypt.exe" called "GetProcAddress" with a parameter RtlGetVersion (UID: 00000000-00004700) "encrypt.exe" called "GetProcAddress" with a parameter CoCreateInstance (UID: 00000000-00004700) "encrypt.exe" called "GetProcAddress" with a parameter CoCreateInstanceEx (UID: 00000000-00004700) "encrypt.exe" called "GetProcAddress" with a parameter CoGetClassObject (UID: 00000000-00004700) "encrypt.exe" called "GetProcAddress" with a parameter FlsGetValue2 (UID: 00000000-00004700) "encrypt.exe" called "GetProcAddress" with a parameter GetTempPath2W (UID: 00000000-00004700) "encrypt.exe" called "GetProcAddress" with a parameter IsWow64Process (UID: 00000000-00004700) "encrypt.exe" called "GetProcAddress" with a parameter Wow64DisableWow64FsRedirection (UID: 00000000-00004700) "encrypt.exe" called "GetProcAddress" with a parameter Wow64RevertWow64FsRedirection (UID: 00000000-00004700) "encrypt.exe" called "GetProcAddress" with a parameter AppPolicyGetThreadInitializationType (UID: 00000000-00004700)2e:T7b3e,Found reference to API (Indicator: "CloseServiceHandle"; File: "encrypt.exe") Found reference to API (Indicator: "OpenServiceA"; File: "encrypt.exe") Found reference to API (Indicator: "ControlService"; File: "encrypt.exe") Found reference to API (Indicator: "EnumDependentServicesA"; File: "encrypt.exe") Found reference to API (Indicator: "QueryServiceStatusEx"; File: "encrypt.exe") Found reference to API (Indicator: "OpenSCManagerA"; File: "encrypt.exe") Found reference to API (Indicator: "InterlockedPushEntrySList"; File: "encrypt.exe") Found reference to API (Indicator: "HeapSize"; File: "encrypt.exe") Found reference to API (Indicator: "SystemTimeToFileTime"; File: "encrypt.exe") Found reference to API (Indicator: "GetConsoleWindow"; File: "encrypt.exe") Found reference to API (Indicator: "GetTimeZoneInformation"; File: "encrypt.exe") Found reference to API (Indicator: "FlsSetValue"; File: "encrypt.exe") Found reference to API (Indicator: "GetLocaleInfoW"; File: "encrypt.exe") Found reference to API (Indicator: "QueryPerformanceFrequency"; File: "encrypt.exe") Found reference to API (Indicator: "GetCommandLineW"; File: "encrypt.exe") Found reference to API (Indicator: "GetCurrentProcess"; File: "encrypt.exe") Found reference to API (Indicator: "LCMapStringW"; File: "encrypt.exe") Found reference to API (Indicator: "FlsGetValue"; File: "encrypt.exe") Found reference to API (Indicator: "TryAcquireSRWLockExclusive"; File: "encrypt.exe") Found reference to API (Indicator: "HeapReAlloc"; File: "encrypt.exe") Found reference to API (Indicator: "FindClose"; File: "encrypt.exe") Found reference to API (Indicator: "GetModuleHandleW"; File: "encrypt.exe") Found reference to API (Indicator: "TlsFree"; File: "encrypt.exe") Found reference to API (Indicator: "FindNextFileW"; File: "encrypt.exe") Found reference to API (Indicator: "GetStdHandle"; File: "encrypt.exe") Found reference to API (Indicator: "VirtualProtect"; File: "encrypt.exe") Found reference to API (Indicator: "SetProcessShutdownParameters"; File: "encrypt.exe") Found reference to API (Indicator: "TlsGetValue"; File: "encrypt.exe") Found reference to API (Indicator: "RtlUnwind"; File: "encrypt.exe") Found reference to API (Indicator: "Process32NextW"; File: "encrypt.exe") Found reference to API (Indicator: "TlsSetValue"; File: "encrypt.exe") Found reference to API (Indicator: "DeleteCriticalSection"; File: "encrypt.exe") Found reference to API (Indicator: "SetVolumeMountPointW"; File: "encrypt.exe") Found reference to API (Indicator: "ExitThread"; File: "encrypt.exe") Found reference to API (Indicator: "GetFileSizeEx"; File: "encrypt.exe") Found reference to API (Indicator: "MultiByteToWideChar"; File: "encrypt.exe") Found reference to API (Indicator: "GetStringTypeW"; File: "encrypt.exe") Found reference to API (Indicator: "QueryPerformanceCounter"; File: "encrypt.exe") Found reference to API (Indicator: "WakeAllConditionVariable"; File: "encrypt.exe") Found reference to API (Indicator: "FreeLibraryAndExitThread"; File: "encrypt.exe") Found reference to API (Indicator: "ExitProcess"; File: "encrypt.exe") Found reference to API (Indicator: "SetUnhandledExceptionFilter"; File: "encrypt.exe") Found reference to API (Indicator: "GetTickCount"; File: "encrypt.exe") Found reference to API (Indicator: "HeapFree"; File: "encrypt.exe") Found reference to API (Indicator: "Process32FirstW"; File: "encrypt.exe") Found reference to API (Indicator: "AcquireSRWLockExclusive"; File: "encrypt.exe") Found reference to API (Indicator: "lstrlenW"; File: "encrypt.exe") Found reference to API (Indicator: "GetProcAddress"; File: "encrypt.exe") Found reference to API (Indicator: "WideCharToMultiByte"; File: "encrypt.exe") Found reference to API (Indicator: "GetLastError"; File: "encrypt.exe") Found reference to API (Indicator: "MoveFileExW"; File: "encrypt.exe") Found reference to API (Indicator: "HeapQueryInformation"; File: "encrypt.exe") Found reference to API (Indicator: "CompareStringW"; File: "encrypt.exe") Found reference to API (Indicator: "GetComputerNameW"; File: "encrypt.exe") Found reference to API (Indicator: "SetEnvironmentVariableW"; File: "encrypt.exe") Found reference to API (Indicator: "InitializeCriticalSectionAndSpinCount"; File: "encrypt.exe") Found reference to API (Indicator: "GetModuleFileNameW"; File: "encrypt.exe") Found reference to API (Indicator: "GetExitCodeThread"; File: "encrypt.exe") Found reference to API (Indicator: "EncodePointer"; File: "encrypt.exe") Found reference to API (Indicator: "FindNextVolumeW"; File: "encrypt.exe") Found reference to API (Indicator: "GetCommandLineA"; File: "encrypt.exe") Found reference to API (Indicator: "DecodePointer"; File: "encrypt.exe") Found reference to API (Indicator: "GetCurrentProcessId"; File: "encrypt.exe") Found reference to API (Indicator: "LCMapStringEx"; File: "encrypt.exe") Found reference to API (Indicator: "GetEnvironmentStringsW"; File: "encrypt.exe") Found reference to API (Indicator: "FindFirstVolumeW"; File: "encrypt.exe") Found reference to API (Indicator: "EnumSystemLocalesW"; File: "encrypt.exe") Found reference to API (Indicator: "WriteFile"; File: "encrypt.exe") Found reference to API (Indicator: "WriteConsoleW"; File: "encrypt.exe") Found reference to API (Indicator: "GetSystemTimeAsFileTime"; File: "encrypt.exe") Found reference to API (Indicator: "FindVolumeClose"; File: "encrypt.exe") Found reference to API (Indicator: "WaitForSingleObjectEx"; File: "encrypt.exe") Found reference to API (Indicator: "MoveFileW"; File: "encrypt.exe") Found reference to API (Indicator: "SetStdHandle"; File: "encrypt.exe") Found reference to API (Indicator: "CloseHandle"; File: "encrypt.exe") Found reference to API (Indicator: "OpenProcess"; File: "encrypt.exe") Found reference to API (Indicator: "FreeLibrary"; File: "encrypt.exe") Found reference to API (Indicator: "UnhandledExceptionFilter"; File: "encrypt.exe") Found reference to API (Indicator: "GetDateFormatW"; File: "encrypt.exe") Found reference to API (Indicator: "GetModuleHandleExW"; File: "encrypt.exe") Found reference to API (Indicator: "lstrcmpiW"; File: "encrypt.exe") Found reference to API (Indicator: "TlsAlloc"; File: "encrypt.exe") Found reference to API (Indicator: "LeaveCriticalSection"; File: "encrypt.exe") Found reference to API (Indicator: "WakeConditionVariable"; File: "encrypt.exe") Found reference to API (Indicator: "IsProcessorFeaturePresent"; File: "encrypt.exe") Found reference to API (Indicator: "LoadLibraryA"; File: "encrypt.exe") Found reference to API (Indicator: "FreeEnvironmentStringsW"; File: "encrypt.exe") Found reference to API (Indicator: "GetStartupInfoW"; File: "encrypt.exe") Found reference to API (Indicator: "ReleaseSRWLockExclusive"; File: "encrypt.exe") Found reference to API (Indicator: "ReadFile"; File: "encrypt.exe") Found reference to API (Indicator: "InitializeSListHead"; File: "encrypt.exe") Found reference to API (Indicator: "SleepConditionVariableSRW"; File: "encrypt.exe") Found reference to API (Indicator: "GetFileType"; File: "encrypt.exe") Found reference to API (Indicator: "TerminateProcess"; File: "encrypt.exe") Found reference to API (Indicator: "GetACP"; File: "encrypt.exe") Found reference to API (Indicator: "lstrcmpW"; File: "encrypt.exe") Found reference to API (Indicator: "CreateFileW"; File: "encrypt.exe") Found reference to API (Indicator: "lstrlenA"; File: "encrypt.exe") Found reference to API (Indicator: "GetNativeSystemInfo"; File: "encrypt.exe") Found reference to API (Indicator: "SetLastError"; File: "encrypt.exe") Found reference to API (Indicator: "CreateThread"; File: "encrypt.exe") Found reference to API (Indicator: "SetEndOfFile"; File: "encrypt.exe") Found reference to API (Indicator: "GetVolumePathNamesForVolumeNameW"; File: "encrypt.exe") Found reference to API (Indicator: "CreateToolhelp32Snapshot"; File: "encrypt.exe") Found reference to API (Indicator: "GetProcessHeap"; File: "encrypt.exe") Found reference to API (Indicator: "WaitForSingleObject"; File: "encrypt.exe") Found reference to API (Indicator: "GetModuleHandleA"; File: "encrypt.exe") Found reference to API (Indicator: "GetCurrentThreadId"; File: "encrypt.exe") Found reference to API (Indicator: "FlsFree"; File: "encrypt.exe") Found reference to API (Indicator: "Sleep"; File: "encrypt.exe") Found reference to API (Indicator: "CompareFileTime"; File: "encrypt.exe") Found reference to API (Indicator: "GetDriveTypeW"; File: "encrypt.exe") Found reference to API (Indicator: "FindFirstFileExW"; File: "encrypt.exe") Found reference to API (Indicator: "IsValidLocale"; File: "encrypt.exe") Found reference to API (Indicator: "GetUserDefaultLCID"; File: "encrypt.exe") Found reference to API (Indicator: "RaiseException"; File: "encrypt.exe") Found reference to API (Indicator: "FlsAlloc"; File: "encrypt.exe") Found reference to API (Indicator: "InitializeCriticalSectionEx"; File: "encrypt.exe") Found reference to API (Indicator: "GetLocaleInfoEx"; File: "encrypt.exe") Found reference to API (Indicator: "GetConsoleOutputCP"; File: "encrypt.exe") Found reference to API (Indicator: "CompareStringEx"; File: "encrypt.exe") Found reference to API (Indicator: "SetFileAttributesW"; File: "encrypt.exe") Found reference to API (Indicator: "EnterCriticalSection"; File: "encrypt.exe") Found reference to API (Indicator: "LoadLibraryExW"; File: "encrypt.exe") Found reference to API (Indicator: "IsDebuggerPresent"; File: "encrypt.exe") Found reference to API (Indicator: "GetTimeFormatW"; File: "encrypt.exe") Found reference to API (Indicator: "HeapAlloc"; File: "encrypt.exe") Found reference to API (Indicator: "GetOEMCP"; File: "encrypt.exe") Found reference to API (Indicator: "SetFilePointerEx"; File: "encrypt.exe") Found reference to API (Indicator: "FindFirstFileW"; File: "encrypt.exe") Found reference to API (Indicator: "GetCPInfo"; File: "encrypt.exe") Found reference to API (Indicator: "IsValidCodePage"; File: "encrypt.exe") Found reference to API (Indicator: "FlushFileBuffers"; File: "encrypt.exe") Found reference to API (Indicator: "GetConsoleMode"; File: "encrypt.exe") Found reference to API (Indicator: "NetApiBufferFree"; File: "encrypt.exe") Found reference to API (Indicator: "NetShareEnum"; File: "encrypt.exe") Found reference to API (Indicator: "ShowWindow"; File: "encrypt.exe") Found reference to API (Indicator: "BCryptGenRandom"; File: "encrypt.exe") Found reference to API (Indicator: "BCryptOpenAlgorithmProvider"; File: "encrypt.exe") Found reference to API (Indicator: "BCryptCloseAlgorithmProvider"; File: "encrypt.exe") Found reference to API (Indicator: "CoUninitialize"; File: "encrypt.exe") Found reference to API (Indicator: "CoInitialize"; File: "encrypt.exe") Found reference to API (Indicator: "GetSystemTimePreciseAsFileTime"; File: "encrypt.exe") Found reference to API (Indicator: "AreFileApisANSI"; File: "encrypt.exe") Found reference to API (Indicator: "EnumSystemLocalesEx"; File: "encrypt.exe") Found reference to API (Indicator: "GetDateFormatEx"; File: "encrypt.exe") Found reference to API (Indicator: "GetTimeFormatEx"; File: "encrypt.exe") Found reference to API (Indicator: "GetUserDefaultLocaleName"; File: "encrypt.exe") Found reference to API (Indicator: "IsValidLocaleName"; File: "encrypt.exe") Found reference to API (Indicator: "LCIDToLocaleName"; File: "encrypt.exe") Found reference to API (Indicator: "LocaleNameToLCID"; File: "encrypt.exe") Found reference to API (Indicator: "IsWow64Process"; File: "encrypt.exe") Found reference to API (Indicator: "Wow64DisableWow64FsRedirection"; File: "encrypt.exe") Found reference to API (Indicator: "Wow64RevertWow64FsRedirection"; File: "encrypt.exe") Found reference to API (Indicator: "ReadFile"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp") Found reference to API (Indicator: "CompareFileTime"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp") Found reference to API (Indicator: "FindFirstFileW"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp") Found reference to API (Indicator: "GetFileSizeEx"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp") Found reference to API (Indicator: "FindFirstVolumeW"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp") Found reference to API (Indicator: "HeapFree"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp") Found reference to API (Indicator: "FindNextFileW"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp") Found reference to API (Indicator: "GetCurrentProcess"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp") Found reference to API (Indicator: "lstrlenW"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp") Found reference to API (Indicator: "WriteFile"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp") Found reference to API (Indicator: "TerminateProcess"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp") Found reference to API (Indicator: "SetProcessShutdownParameters"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp") Found reference to API (Indicator: "SetEndOfFile"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp") Found reference to API (Indicator: "lstrlenA"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp") Found reference to API (Indicator: "FindClose"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp") Found reference to API (Indicator: "WaitForSingleObject"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp") Found reference to API (Indicator: "CreateFileW"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp") Found reference to API (Indicator: "GetModuleHandleA"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp") Found reference to API (Indicator: "OpenProcess"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp") Found reference to API (Indicator: "SetFileAttributesW"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp") Found reference to API (Indicator: "CreateToolhelp32Snapshot"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp") Found reference to API (Indicator: "Sleep"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp") Found reference to API (Indicator: "GetLastError"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp") Found reference to API (Indicator: "Process32NextW"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp") Found reference to API (Indicator: "LoadLibraryA"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp") Found reference to API (Indicator: "Process32FirstW"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp") Found reference to API (Indicator: "CloseHandle"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp") Found reference to API (Indicator: "HeapAlloc"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp") Found reference to API (Indicator: "SetVolumeMountPointW"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp") Found reference to API (Indicator: "GetProcAddress"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp") Found reference to API (Indicator: "SetFilePointerEx"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp") Found reference to API (Indicator: "MoveFileExW"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp") Found reference to API (Indicator: "ExitProcess"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp") Found reference to API (Indicator: "GetComputerNameW"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp") Found reference to API (Indicator: "FindVolumeClose"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp") Found reference to API (Indicator: "GetCurrentProcessId"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp") Found reference to API (Indicator: "GetProcessHeap"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp") Found reference to API (Indicator: "SystemTimeToFileTime"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp") Found reference to API (Indicator: "GetConsoleWindow"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp") Found reference to API (Indicator: "GetVolumePathNamesForVolumeNameW"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp") Found reference to API (Indicator: "FindNextVolumeW"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp") Found reference to API (Indicator: "lstrcmpiW"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp") Found reference to API (Indicator: "GetTickCount"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp") Found reference to API (Indicator: "lstrcmpW"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp") Found reference to API (Indicator: "MoveFileW"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp") Found reference to API (Indicator: "GetDriveTypeW"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp") Found reference to API (Indicator: "ShowWindow"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp") Found reference to API (Indicator: "OpenServiceA"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp") Found reference to API (Indicator: "QueryServiceStatusEx"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp") Found reference to API (Indicator: "ControlService"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp") Found reference to API (Indicator: "OpenSCManagerA"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp") Found reference to API (Indicator: "CloseServiceHandle"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp") Found reference to API (Indicator: "EnumDependentServicesA"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp") Found reference to API (Indicator: "CoInitialize"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp") Found reference to API (Indicator: "CoUninitialize"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp") Found reference to API (Indicator: "BCryptOpenAlgorithmProvider"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp, 00000000-00004700.00000001.240563.008D1000.00000020.mdmp") Found reference to API (Indicator: "BCryptCloseAlgorithmProvider"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp") Found reference to API (Indicator: "BCryptGenRandom"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp, 00000000-00004700.00000001.240563.008D1000.00000020.mdmp") Found reference to API (Indicator: "NetShareEnum"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp") Found reference to API (Indicator: "NetApiBufferFree"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp") Found reference to API (Indicator: "SetLastError"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp") Found reference to API (Indicator: "QueryPerformanceCounter"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp") Found reference to API (Indicator: "QueryPerformanceFrequency"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp") Found reference to API (Indicator: "WakeConditionVariable"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp") Found reference to API (Indicator: "WakeAllConditionVariable"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp") Found reference to API (Indicator: "SleepConditionVariableSRW"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp") Found reference to API (Indicator: "GetCurrentThreadId"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp") Found reference to API (Indicator: "WaitForSingleObjectEx"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp") Found reference to API (Indicator: "GetExitCodeThread"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp") Found reference to API (Indicator: "GetNativeSystemInfo"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp") Found reference to API (Indicator: "MultiByteToWideChar"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp") Found reference to API (Indicator: "ReleaseSRWLockExclusive"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp") Found reference to API (Indicator: "AcquireSRWLockExclusive"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp") Found reference to API (Indicator: "TryAcquireSRWLockExclusive"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp") Found reference to API (Indicator: "WideCharToMultiByte"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp") Found reference to API (Indicator: "EnterCriticalSection"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp") Found reference to API (Indicator: "LeaveCriticalSection"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp") Found reference to API (Indicator: "InitializeCriticalSectionEx"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp, 00000000-00004700.00000001.240563.008D1000.00000020.mdmp") Found reference to API (Indicator: "DeleteCriticalSection"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp") Found reference to API (Indicator: "EncodePointer"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp") Found reference to API (Indicator: "DecodePointer"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp") Found reference to API (Indicator: "GetLocaleInfoEx"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp, 00000000-00004700.00000001.240563.008D1000.00000020.mdmp") Found reference to API (Indicator: "LCMapStringEx"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp, 00000000-00004700.00000001.240563.008D1000.00000020.mdmp") Found reference to API (Indicator: "GetSystemTimeAsFileTime"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp") Found reference to API (Indicator: "GetModuleHandleW"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp") Found reference to API (Indicator: "GetStringTypeW"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp") Found reference to API (Indicator: "CompareStringEx"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp, 00000000-00004700.00000001.240563.008D1000.00000020.mdmp") Found reference to API (Indicator: "GetCPInfo"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp") Found reference to API (Indicator: "UnhandledExceptionFilter"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp") Found reference to API (Indicator: "SetUnhandledExceptionFilter"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp") Found reference to API (Indicator: "IsProcessorFeaturePresent"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp") Found reference to API (Indicator: "InitializeSListHead"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp") Found reference to API (Indicator: "IsDebuggerPresent"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp") Found reference to API (Indicator: "GetStartupInfoW"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp") Found reference to API (Indicator: "RtlUnwind"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp") Found reference to API (Indicator: "RaiseException"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp") Found reference to API (Indicator: "InterlockedPushEntrySList"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp") Found reference to API (Indicator: "InitializeCriticalSectionAndSpinCount"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp") Found reference to API (Indicator: "TlsAlloc"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp") Found reference to API (Indicator: "TlsGetValue"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp") Found reference to API (Indicator: "TlsSetValue"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp") Found reference to API (Indicator: "TlsFree"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp") Found reference to API (Indicator: "FreeLibrary"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp") Found reference to API (Indicator: "LoadLibraryExW"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp") Found reference to API (Indicator: "CreateThread"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp") Found reference to API (Indicator: "ExitThread"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp") Found reference to API (Indicator: "FreeLibraryAndExitThread"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp") Found reference to API (Indicator: "GetModuleHandleExW"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp") Found reference to API (Indicator: "GetModuleFileNameW"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp") Found reference to API (Indicator: "GetStdHandle"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp") Found reference to API (Indicator: "GetCommandLineA"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp") Found reference to API (Indicator: "GetCommandLineW"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp") Found reference to API (Indicator: "FlsAlloc"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp, 00000000-00004700.00000001.240563.008D1000.00000020.mdmp") Found reference to API (Indicator: "FlsGetValue"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp, 00000000-00004700.00000001.240563.008D1000.00000020.mdmp") Found reference to API (Indicator: "FlsSetValue"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp, 00000000-00004700.00000001.240563.008D1000.00000020.mdmp") Found reference to API (Indicator: "FlsFree"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp, 00000000-00004700.00000001.240563.008D1000.00000020.mdmp") Found reference to API (Indicator: "VirtualProtect"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp") Found reference to API (Indicator: "GetDateFormatW"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp") Found reference to API (Indicator: "GetTimeFormatW"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp") Found reference to API (Indicator: "CompareStringW"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp") Found reference to API (Indicator: "LCMapStringW"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp") Found reference to API (Indicator: "GetLocaleInfoW"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp") Found reference to API (Indicator: "IsValidLocale"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp") Found reference to API (Indicator: "GetUserDefaultLCID"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp") Found reference to API (Indicator: "EnumSystemLocalesW"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp") Found reference to API (Indicator: "GetFileType"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp") Found reference to API (Indicator: "HeapReAlloc"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp") Found reference to API (Indicator: "HeapSize"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp") Found reference to API (Indicator: "HeapQueryInformation"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp") Found reference to API (Indicator: "GetTimeZoneInformation"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp") Found reference to API (Indicator: "FindFirstFileExW"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp") Found reference to API (Indicator: "IsValidCodePage"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp") Found reference to API (Indicator: "GetACP"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp") Found reference to API (Indicator: "GetOEMCP"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp") Found reference to API (Indicator: "GetEnvironmentStringsW"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp") Found reference to API (Indicator: "FreeEnvironmentStringsW"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp") Found reference to API (Indicator: "SetEnvironmentVariableW"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp") Found reference to API (Indicator: "SetStdHandle"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp") Found reference to API (Indicator: "FlushFileBuffers"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp") Found reference to API (Indicator: "GetConsoleOutputCP"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp") Found reference to API (Indicator: "GetConsoleMode"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp") Found reference to API (Indicator: "WriteConsoleW"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp") Found reference to API (Indicator: "GetSystemTimePreciseAsFileTime"; Source: "00000000-00004700.00000001.240563.008D1000.00000020.mdmp") Found reference to API (Indicator: "AreFileApisANSI"; Source: "00000000-00004700.00000001.240563.008D1000.00000020.mdmp") Found reference to API (Indicator: "EnumSystemLocalesEx"; Source: "00000000-00004700.00000001.240563.008D1000.00000020.mdmp") Found reference to API (Indicator: "GetDateFormatEx"; Source: "00000000-00004700.00000001.240563.008D1000.00000020.mdmp") Found reference to API (Indicator: "GetTimeFormatEx"; Source: "00000000-00004700.00000001.240563.008D1000.00000020.mdmp") Found reference to API (Indicator: "GetUserDefaultLocaleName"; Source: "00000000-00004700.00000001.240563.008D1000.00000020.mdmp") Found reference to API (Indicator: "IsValidLocaleName"; Source: "00000000-00004700.00000001.240563.008D1000.00000020.mdmp") Found reference to API (Indicator: "LCIDToLocaleName"; Source: "00000000-00004700.00000001.240563.008D1000.00000020.mdmp") Found reference to API (Indicator: "LocaleNameToLCID"; Source: "00000000-00004700.00000001.240563.008D1000.00000020.mdmp") Found reference to API (Indicator: "IsWow64Process"; Source: "00000000-00004700.00000001.240563.008D1000.00000020.mdmp") Found reference to API (Indicator: "Wow64DisableWow64FsRedirection"; Source: "00000000-00004700.00000001.240563.008D1000.00000020.mdmp") Found reference to API (Indicator: "Wow64RevertWow64FsRedirection"; Source: "00000000-00004700.00000001.240563.008D1000.00000020.mdmp")2f:T559,"\Sessions\1\BaseNamedObjects\RstrMgr-3887CAB8-533F-4C85-B0DC-3E5639F8D511-Session0004" "RstrMgr3887CAB8-533F-4C85-B0DC-3E5639F8D511" "Local\RstrMgr3887CAB8-533F-4C85-B0DC-3E5639F8D511" "RstrMgr-3887CAB8-533F-4C85-B0DC-3E5639F8D511-Session0000" "Local\SM0:4700:168:WilStaging_02" "RstrMgr-3887CAB8-533F-4C85-B0DC-3E5639F8D511-Session0002" "SM0:4700:64:WilError_01" "RstrMgr-3887CAB8-533F-4C85-B0DC-3E5639F8D511-Session0001" "RstrMgr-3887CAB8-533F-4C85-B0DC-3E5639F8D511-Session0007" "Local\SM0:4700:64:WilError_01" "RstrMgr-3887CAB8-533F-4C85-B0DC-3E5639F8D511-Session0003" "\Sessions\1\BaseNamedObjects\RstrMgr3887CAB8-533F-4C85-B0DC-3E5639F8D511" "\Sessions\1\BaseNamedObjects\RstrMgr-3887CAB8-533F-4C85-B0DC-3E5639F8D511-Session0000" "\Sessions\1\BaseNamedObjects\Local\SM0:4700:168:WilStaging_02" "\Sessions\1\BaseNamedObjects\Local\SM0:4700:64:WilError_01" "\Sessions\1\BaseNamedObjects\Local\RstrMgr3887CAB8-533F-4C85-B0DC-3E5639F8D511" "\Sessions\1\BaseNamedObjects\RstrMgr-3887CAB8-533F-4C85-B0DC-3E5639F8D511-Session0001" "\Sessions\1\BaseNamedObjects\RstrMgr-3887CAB8-533F-4C85-B0DC-3E5639F8D511-Session0003" "\Sessions\1\BaseNamedObjects\RstrMgr-3887CAB8-533F-4C85-B0DC-3E5639F8D511-Session0002" "\Sessions\1\BaseNamedObjects\RstrMgr-3887CAB8-533F-4C85-B0DC-3E5639F8D511-Session0007" "\Sessions\1\BaseNamedObjects\SM0:4700:64:WilError_01"30:T56e,"encrypt.exe" loaded module "API-MS-WIN-CORE-SYNCH-L1-2-0" at base 77000000 "encrypt.exe" loaded module "API-MS-WIN-CORE-FIBERS-L1-1-1" at base 77000000 "encrypt.exe" loaded module "API-MS-WIN-CORE-LOCALIZATION-L1-2-1" at base 77000000 "encrypt.exe" loaded module "KERNEL32" at base 77260000 "encrypt.exe" loaded module "API-MS-WIN-CORE-FIBERS-L1-1-2" at base 77000000 "encrypt.exe" loaded module "%WINDIR%\SYSTEM32\UXTHEME.DLL" at base 73d60000 "encrypt.exe" loaded module "SHELL32.DLL" at base 75be0000 "encrypt.exe" loaded module "%WINDIR%\SYSTEM32\WINDOWS.STORAGE.DLL" at base 755a0000 "encrypt.exe" loaded module "%WINDIR%\SYSTEM32\SHELL32.DLL" at base 75be0000 "encrypt.exe" loaded module "KERNEL32.DLL" at base 77260000 "encrypt.exe" loaded module "RPCRT4.DLL" at base 75340000 "encrypt.exe" loaded module "%WINDIR%\SYSTEM32\PROPSYS.DLL" at base 73800000 "encrypt.exe" loaded module "%WINDIR%\SYSTEM32\VSSAPI.DLL" at base 72e60000 "encrypt.exe" loaded module "%WINDIR%\SYSTEM32\MSXML3.DLL" at base 72a70000 "encrypt.exe" loaded module "API-MS-WIN-APPMODEL-RUNTIME-L1-1-2" at base 77330000 "encrypt.exe" loaded module "%WINDIR%\SYSTEM32\BCRYPTPRIMITIVES.DLL" at base 751a0000 "encrypt.exe" loaded module "CSCAPI.DLL" at base 73070000 "encrypt.exe" loaded module "NTDLL.DLL" at base 77890000 "encrypt.exe" loaded module "%WINDIR%\SYSTEM32\MSXML3.DLL" at base 729c000031:T50b,"encrypt.exe" touched "VSSCoordinator Class" (Path: "HKCU\WOW6432NODE\CLSID\{E579AB5F-1CC4-44B4-BED9-DE0991FF0623}") "encrypt.exe" touched "PSFactoryBuffer" (Path: "HKCU\CLSID\{F2C2787D-95AB-40D4-942D-298F5F757874}\TREATAS") "encrypt.exe" touched "Recycle Bin Manager" (Path: "HKCU\WOW6432NODE\CLSID\{4A04656D-52AA-49DE-8A09-CB178760E748}\INSTANCE") "encrypt.exe" touched "Copy/Move/Rename/Delete/Link Object" (Path: "HKCU\WOW6432NODE\CLSID\{3AD05575-8857-4850-9277-11B85BDB8E09}\TREATAS") "encrypt.exe" touched "Known Folder Manager" (Path: "HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{4DF0C730-DF9D-4AE3-9153-AA6B82E9795A}\INPROCSERVER32") "encrypt.exe" touched "Private Profile Object" (Path: "HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{75847177-F077-4171-BD2C-A6BB2164FBD0}\INPROCSERVER32") "encrypt.exe" touched "Memory Mapped Cache Mgr" (Path: "HKCU\WOW6432NODE\CLSID\{1F486A52-3CB1-48FD-8F50-B8DC300D9F9D}\TREATAS") "encrypt.exe" touched "Recycle Bin" (Path: "HKCU\WOW6432NODE\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\DEFAULTICON") "encrypt.exe" touched "VssModuleKeeper" (Path: "HKCU\WOW6432NODE\CLSID\{573BDF38-DF23-427F-ACB8-A67ABD702698}\TREATAS") "encrypt.exe" touched "XML DOM Document 3.0" (Path: "HKCU\WOW6432NODE\CLSID\{F5078F32-C551-11D3-89B9-0000F81FE221}\TREATAS")32:T5124,"cdosys.dll.mui.x2anylock" has type "DOS executable (COM) maybe with interrupt 22h start instruction 0xb8d3a311 72165320"- Location: [C:\found.000\dir0002.chk\amd64_microsoft-windows-cdosys.resources_31bf3856ad364e35_10.0.17134.1_it-it_d276206cf5455c73\cdosys.dll.mui.x2anylock]- [targetUID: 00000000-00004700] "syncres.dll.mui.x2anylock" has type "DOS executable (COM) start instruction 0xe9b574ef 38d623cd"- Location: [C:\found.000\dir0001.chk\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_lv-lv_804a91c0c5235306\syncres.dll.mui.x2anylock]- [targetUID: 00000000-00004700] "aphostres.dll.mui.x2anylock" has type "DOS executable (COM) start instruction 0xeb6f0439 1b331c1d"- Location: [C:\found.000\dir0001.chk\wow64_microsoft-windows-m..aphostres.resources_31bf3856ad364e35_10.0.17134.1_el-gr_637f00823a10b78d\aphostres.dll.mui.x2anylock]- [targetUID: 00000000-00004700] "source-map.debug.js.x2anylock" has type "DOS executable (COM) start instruction 0x8c9c7a73 ee3b2db1"- [targetUID: 00000000-00004700] "SFPATWT.INF.x2anylock" has type "DOS executable (COM) start instruction 0x8c456bf6 e5b6f6d2"- Location: [C:\$WINDOWS.~BT\Sources\SFPATWT.INF.x2anylock]- [targetUID: 00000000-00004700] "bootmgr.efi.mui.x2anylock" has type "DOS executable (COM) maybe with interrupt 22h start instruction 0x8c2550b3 86c2103e"- Location: [C:\found.000\dir0002.chk\amd64_microsoft-windows-b..nager-efi.resources_31bf3856ad364e35_10.0.17134.1_ro-ro_ab114d5ca4a18d30\bootmgr.efi.mui.x2anylock]- [targetUID: 00000000-00004700] "index.d.ts.x2anylock" has type "DOS executable (COM) start instruction 0x8c49d83e cce89f28"- Location: [C:\tempdir\node_modules\mongoose\types\index.d.ts.x2anylock]- [targetUID: 00000000-00004700] "README.md.x2anylock" has type "DOS executable (COM) start instruction 0xb8d04aae 6f27a800"- [targetUID: 00000000-00004700] "update.ts.x2anylock" has type "DOS executable (COM) start instruction 0xb8e80604 96fabed2"- Location: [C:\tempdir\node_modules\mongodb\src\operations\update.ts.x2anylock]- [targetUID: 00000000-00004700] "README.md.x2anylock" has type "DOS executable (COM) start instruction 0xb8b38b88 91fd821e"- Location: [C:\tempdir\node_modules\ansi-colors\README.md.x2anylock]- [targetUID: 00000000-00004700] "README.md.x2anylock" has type "DOS executable (COM) start instruction 0xb8053389 1588d401"- Location: [C:\tempdir\node_modules\kareem\README.md.x2anylock]- [targetUID: 00000000-00004700] "join.js.x2anylock" has type "DOS executable (COM) maybe with interrupt 22h start instruction 0x8c7397a5 b18ae6f8"- Location: [C:\tempdir\node_modules\bluebird\js\release\join.js.x2anylock]- [targetUID: 00000000-00004700] "pack-codec.js.x2anylock" has type "DOS executable (COM) start instruction 0xeb152696 bfada70a"- Location: [C:\tempdir\node_modules\js-git\lib\pack-codec.js.x2anylock]- [targetUID: 00000000-00004700] "layout.js.x2anylock" has type "DOS executable (COM) start instruction 0xb8fc799c d6fa3e4f"- Location: [C:\tempdir\node_modules\blessed\lib\widgets\layout.js.x2anylock]- [targetUID: 00000000-00004700] "internal.js.x2anylock" has type "DOS executable (COM) start instruction 0xeb24a73e f90dc799"- Location: [C:\tempdir\node_modules\iconv-lite\encodings\internal.js.x2anylock]- [targetUID: 00000000-00004700] "process.js.x2anylock" has type "DOS executable (COM) start instruction 0x8c209dac 8427ca67"- Location: [C:\tempdir\node_modules\karma\lib\launchers\process.js.x2anylock]- [targetUID: 00000000-00004700] "eventemitter2.d.ts.x2anylock" has type "MS-DOS executable"- Location: [C:\tempdir\node_modules\@pm2\js-api\node_modules\eventemitter2\eventemitter2.d.ts.x2anylock]- [targetUID: 00000000-00004700] "index.js.x2anylock" has type "DOS executable (COM) maybe with interrupt 22h start instruction 0x8ce6d394 b4cee2a1"- Location: [C:\tempdir\node_modules\content-type\index.js.x2anylock]- [targetUID: 00000000-00004700] "web-outgoing.js.x2anylock" has type "DOS executable (COM) start instruction 0xb85ab967 46834b3e"- Location: [C:\tempdir\node_modules\http-proxy\lib\http-proxy\passes\web-outgoing.js.x2anylock]- [targetUID: 00000000-00004700] "ast.js.x2anylock" has type "DOS executable (COM) start instruction 0x8c4981e2 f2cd7604"- Location: [C:\tempdir\node_modules\esutils\lib\ast.js.x2anylock]- [targetUID: 00000000-00004700] "node.js.x2anylock" has type "DOS executable (COM) start instruction 0xeb3f389b f9ee5fb3"- Location: [C:\tempdir\node_modules\engine.io\node_modules\debug\src\node.js.x2anylock]- [targetUID: 00000000-00004700] "ws-incoming.js.x2anylock" has type "DOS executable (COM) start instruction 0xb84efd65 19b93642"- Location: [C:\tempdir\node_modules\http-proxy\lib\http-proxy\passes\ws-incoming.js.x2anylock]- [targetUID: 00000000-00004700] "tg.js.x2anylock" has type "DOS executable (COM) start instruction 0xeb60e09b 9dd12d1f"- Location: [C:\tempdir\node_modules\moment\locale\tg.js.x2anylock]- [targetUID: 00000000-00004700] "es-us.js.x2anylock" has type "DOS executable (COM) start instruction 0xeb7b9314 f326b662"- Location: [C:\tempdir\node_modules\moment\locale\es-us.js.x2anylock]- [targetUID: 00000000-00004700] "compile.js.x2anylock" has type "DOS executable (COM) maybe with interrupt 22h start instruction 0xb8f76dca 8e7d1ace"- Location: [C:\tempdir\node_modules\degenerator\dist\compile.js.x2anylock]- [targetUID: 00000000-00004700] "CHANGELOG.md.x2anylock" has type "DOS executable (COM) start instruction 0x8c5dcc89 89d2ac49"- [targetUID: 00000000-00004700] "write_concern.js.x2anylock" has type "DOS executable (COM) start instruction 0xb840d3c2 35561760"- Location: [C:\tempdir\node_modules\mongodb\lib\write_concern.js.x2anylock]- [targetUID: 00000000-00004700] "package.json.x2anylock" has type "DOS executable (COM) start instruction 0xb86a67ed b52d8ed5"- [targetUID: 00000000-00004700] "bg.js.x2anylock" has type "MS-DOS executable MZ for MS-DOS"- Location: [C:\tempdir\node_modules\moment\src\locale\bg.js.x2anylock]- [targetUID: 00000000-00004700] "index.js.x2anylock" has type "DOS executable (COM) start instruction 0xb8a007aa d7818c73"- [targetUID: 00000000-00004700] "series.js.x2anylock" has type "DOS executable (COM) start instruction 0xb84cdbf2 ff0640cf"- Location: [C:\tempdir\node_modules\@pm2\js-api\node_modules\async\series.js.x2anylock]- [targetUID: 00000000-00004700] "uk.js.x2anylock" has type "DOS executable (COM) start instruction 0xb8c76963 1fd2f5db"- Location: [C:\tempdir\node_modules\@pm2\agent\node_modules\dayjs\esm\locale\uk.js.x2anylock]- [targetUID: 00000000-00004700] "client.d.ts.x2anylock" has type "SoftQuad troff Context intermediate"- [targetUID: 00000000-00004700] "How to decrypt my data.txt" has type "ASCII text with very long lines (351)"- Location: [C:\found.000\dir0001.chk\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_yo-ng_c2789c671a8ffaad\How to decrypt my data.txt]- [targetUID: 00000000-00004700] "README.md.x2anylock" has type "DOS executable (COM) start instruction 0x8c09a2ce 2dd04d0f"- Location: [C:\tempdir\node_modules\ee-first\README.md.x2anylock]- [targetUID: 00000000-00004700] "wow64_microsoft-windows-m..aphostres.resources_31bf3856ad364e35_10.0.17134.1_fi-fi_02c00a792f1a3e93.manifest.x2anylock" has type "DOS executable (COM) start instruction 0xb824939b 7866a175"- Location: [C:\found.000\dir0001.chk\wow64_microsoft-windows-m..aphostres.resources_31bf3856ad364e35_10.0.17134.1_fi-fi_02c00a792f1a3e93.manifest.x2anylock]- [targetUID: 00000000-00004700] "sr.js.x2anylock" has type "DOS executable (COM) start instruction 0xb88cfd39 8b2d58dd"- Location: [C:\tempdir\node_modules\dayjs\esm\locale\sr.js.x2anylock]- [targetUID: 00000000-00004700] "amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_gd-gb_4897be7c0d6eef46.manifest.x2anylock" has type "DOS executable (COM) maybe with interrupt 22h start instruction 0xb8403dbf 50f259e9"- Location: [C:\found.000\dir0001.chk\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_gd-gb_4897be7c0d6eef46.manifest.x2anylock]- [targetUID: 00000000-00004700] "wow64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_zh-tw_774f24663cb9f880.manifest.x2anylock" has type "DOS executable (COM) start instruction 0xb821ec49 e76dec15"- Location: [C:\found.000\dir0001.chk\wow64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_zh-tw_774f24663cb9f880.manifest.x2anylock]- [targetUID: 00000000-00004700] "timeRange.js.map.x2anylock" has type "DOS executable (COM) start instruction 0xb81101dd 97d0dc5e"- Location: [C:\tempdir\node_modules\pac-resolver\dist\timeRange.js.map.x2anylock]- [targetUID: 00000000-00004700] "compare.js.x2anylock" has type "DOS executable (COM) maybe with interrupt 22h start instruction 0xeb1e3130 16de1f36"- Location: [C:\tempdir\node_modules\moment\src\lib\moment\compare.js.x2anylock]- [targetUID: 00000000-00004700] "ga.js.x2anylock" has type "DOS executable (COM) start instruction 0x8c2fcb11 1627d708"- Location: [C:\tempdir\node_modules\moment\dist\locale\ga.js.x2anylock]- [targetUID: 00000000-00004700] "on_data.js.map.x2anylock" has type "DOS executable (COM) start instruction 0xb8824cc8 1cd3a353"- Location: [C:\tempdir\node_modules\mongodb\lib\cmap\wire_protocol\on_data.js.map.x2anylock]- [targetUID: 00000000-00004700] "tzm-latn.js.x2anylock" has type "DOS executable (COM) start instruction 0x8cd52b11 ad37e522"- Location: [C:\tempdir\node_modules\moment\locale\tzm-latn.js.x2anylock]- [targetUID: 00000000-00004700] "dispatchRequest.js.x2anylock" has type "DOS executable (COM) start instruction 0x8cd8a5cf 44945dca"- Location: [C:\tempdir\node_modules\axios\lib\core\dispatchRequest.js.x2anylock]- [targetUID: 00000000-00004700] "fclone.js.x2anylock" has type "DOS executable (COM) start instruction 0xb8206d9b b2717433"- Location: [C:\tempdir\node_modules\fclone\dist\fclone.js.x2anylock]- [targetUID: 00000000-00004700] "test.py.x2anylock" has type "DOS executable (COM) start instruction 0x8cdc0ed2 ec0bcfe2"- Location: [C:\tempdir\node_modules\flatted\python\test.py.x2anylock]- [targetUID: 00000000-00004700] "pt_BR.json.x2anylock" has type "DOS executable (COM) start instruction 0xb8737a7d 3632cf43"- [targetUID: 00000000-00004700] "tr.json.x2anylock" has type "DOS executable (COM) start instruction 0x8cc8485d c413beec"- [targetUID: 00000000-00004700] "includes.js.x2anylock" has type "DOS executable (COM) start instruction 0xeb33414b 645c38cb"- Location: [C:\tempdir\node_modules\lodash\includes.js.x2anylock]- [targetUID: 00000000-00004700] "tl-ph.js.x2anylock" has type "DOS executable (COM) start instruction 0xe9860604 04970760"- Location: [C:\tempdir\node_modules\moment\src\locale\tl-ph.js.x2anylock]- [targetUID: 00000000-00004700] "pa-in.js.x2anylock" has type "DOS executable (COM) start instruction 0xeb107c7c 844befc5"- Location: [C:\tempdir\node_modules\dayjs\locale\pa-in.js.x2anylock]- [targetUID: 00000000-00004700] "de-ch.js.x2anylock" has type "DOS executable (COM) start instruction 0x8c0ebfa1 b6c22196"- Location: [C:\tempdir\node_modules\dayjs\esm\locale\de-ch.js.x2anylock]- [targetUID: 00000000-00004700] "bn.js.x2anylock" has type "DOS executable (COM) start instruction 0xeb0954da 38b363d0"- Location: [C:\tempdir\node_modules\@pm2\agent\node_modules\dayjs\esm\locale\bn.js.x2anylock]- [targetUID: 00000000-00004700] "Readme.md.x2anylock" has type "DOS executable (COM) start instruction 0xb83e97b6 789a54fc"- Location: [C:\tempdir\node_modules\pm2-axon\lib\configurable\Readme.md.x2anylock]- [targetUID: 00000000-00004700] "zh-hk.js.x2anylock" has type "DOS executable (COM) start instruction 0x8c830bdd ae1d15c4"- Location: [C:\tempdir\node_modules\dayjs\locale\zh-hk.js.x2anylock]- [targetUID: 00000000-00004700] "pm2-init-amazon.sh.x2anylock" has type "DOS executable (COM) start instruction 0xb8012dd2 a7abad1f"- Location: [C:\tempdir\node_modules\pm2\lib\templates\init-scripts\pm2-init-amazon.sh.x2anylock]- [targetUID: 00000000-00004700] "estimated_document_count.js.x2anylock" has type "DOS executable (COM) start instruction 0xeb3ed979 ac25952d"- Location: [C:\tempdir\node_modules\mongodb\lib\operations\estimated_document_count.js.x2anylock]- [targetUID: 00000000-00004700] "index.d.ts.map.x2anylock" has type "DOS executable (COM) start instruction 0xeb025253 086521d8"- Location: [C:\tempdir\node_modules\https-proxy-agent\dist\index.d.ts.map.x2anylock]- [targetUID: 00000000-00004700] "mn.js.x2anylock" has type "DOS executable (COM) start instruction 0xb86af926 fcbdbbb1"- Location: [C:\tempdir\node_modules\@pm2\agent\node_modules\dayjs\esm\locale\mn.js.x2anylock]- [targetUID: 00000000-00004700] "settle.js.x2anylock" has type "DOS executable (COM) start instruction 0xb81197eb e10fd925"- Location: [C:\tempdir\node_modules\bluebird\js\release\settle.js.x2anylock]- [targetUID: 00000000-00004700] "mr.js.x2anylock" has type "DOS executable (COM) maybe with interrupt 22h start instruction 0xb8252a3b ecde11c5"- Location: [C:\tempdir\node_modules\dayjs\esm\locale\mr.js.x2anylock]- [targetUID: 00000000-00004700] "LICENSE.BSD.x2anylock" has type "DOS executable (COM) start instruction 0x8c691a30 d6803259"- Location: [C:\tempdir\node_modules\esutils\LICENSE.BSD.x2anylock]- [targetUID: 00000000-00004700] "404-13.htm.x2anylock" has type "DOS executable (COM) start instruction 0x8c4db14c 40bafd73"- Location: [C:\inetpub\custerr\en-US\404-13.htm.x2anylock]- [targetUID: 00000000-00004700] "_baseMatchesProperty.js.x2anylock" has type "DOS executable (COM) start instruction 0xb80275bf 9fe7b694"- Location: [C:\tempdir\node_modules\lodash\_baseMatchesProperty.js.x2anylock]- [targetUID: 00000000-00004700] "license.x2anylock" has type "DOS executable (COM) start instruction 0xb84c4f3d 61c7d6b6"- Location: [C:\tempdir\node_modules\locate-path\license.x2anylock]- [targetUID: 00000000-00004700] "package.json.x2anylock" has type "DOS executable (COM) start instruction 0xeb168d6d 51eaa933"- Location: [C:\tempdir\node_modules\path-root\package.json.x2anylock]- [targetUID: 00000000-00004700] "LICENSE.x2anylock" has type "DOS executable (COM) start instruction 0xb886ce6e b36f8fdc"- [targetUID: 00000000-00004700] "es.js.x2anylock" has type "DOS executable (COM) start instruction 0xeb3ab7c9 9ba85b7a"- Location: [C:\tempdir\node_modules\@pm2\agent\node_modules\dayjs\locale\es.js.x2anylock]- [targetUID: 00000000-00004700] "package.json.x2anylock" has type "DOS executable (COM) start instruction 0x8c53959f c90b4345"- Location: [C:\tempdir\node_modules\degenerator\package.json.x2anylock]- [targetUID: 00000000-00004700] "stats.js.map.x2anylock" has type "DOS executable (COM) start instruction 0xb8b65555 03de1286"- Location: [C:\tempdir\node_modules\mongodb\lib\operations\stats.js.map.x2anylock]- [targetUID: 00000000-00004700] "package.json.x2anylock" has type "DOS executable (COM) start instruction 0x8c614b3e 98c7daaa"- [targetUID: 00000000-00004700] "list_search_indexes_cursor.ts.x2anylock" has type "DOS executable (COM) start instruction 0xb8f9395a 522ea849"- Location: [C:\tempdir\node_modules\mongodb\src\cursor\list_search_indexes_cursor.ts.x2anylock]- [targetUID: 00000000-00004700] "adler32.js.x2anylock" has type "DOS executable (COM) start instruction 0xb81cad40 89fb633f"- Location: [C:\tempdir\node_modules\pako\lib\zlib\adler32.js.x2anylock]- [targetUID: 00000000-00004700] "utils.d.ts.x2anylock" has type "DOS executable (COM) start instruction 0x8c9be0b0 588b4f28"- [targetUID: 00000000-00004700] "rcd-openbsd.tpl.x2anylock" has type "DOS executable (COM) start instruction 0xb800b918 2c2f7f33"- Location: [C:\tempdir\node_modules\pm2\lib\templates\init-scripts\rcd-openbsd.tpl.x2anylock]- [targetUID: 00000000-00004700] "forEach.js.x2anylock" has type "DOS executable (COM) start instruction 0xb8dd3394 17dee5b0"- Location: [C:\tempdir\node_modules\lazy\test\forEach.js.x2anylock]- [targetUID: 00000000-00004700] "flattenDeep.js.x2anylock" has type "DOS executable (COM) start instruction 0x8ccd3b56 8a2ea598"- Location: [C:\tempdir\node_modules\lodash\flattenDeep.js.x2anylock]- [targetUID: 00000000-00004700] "FUNDING.yml.x2anylock" has type "DOS executable (COM) start instruction 0x8ce64e88 42c8d27d"- Location: [C:\tempdir\node_modules\es-errors\.github\FUNDING.yml.x2anylock]- [targetUID: 00000000-00004700] "bower.json.x2anylock" has type "DOS executable (COM) start instruction 0xb8ebbb86 4bd378ac"- Location: [C:\tempdir\node_modules\fclone\bower.json.x2anylock]- [targetUID: 00000000-00004700] "isUndefined.js.x2anylock" has type "DOS executable (COM) start instruction 0x8c200fbe 2ae38a3f"- Location: [C:\tempdir\node_modules\lodash\isUndefined.js.x2anylock]- [targetUID: 00000000-00004700] "_asciiWords.js.x2anylock" has type "DOS executable (COM) start instruction 0x8c92276f da38ddbe"- Location: [C:\tempdir\node_modules\lodash\_asciiWords.js.x2anylock]- [targetUID: 00000000-00004700] "mkdirp.x2anylock" has type "DOS executable (COM) start instruction 0xeb178808 9c6f0918"- Location: [C:\tempdir\node_modules\.bin\mkdirp.x2anylock]- [targetUID: 00000000-00004700] "amd64_microsoft-windows-comdlg32.resources_31bf3856ad364e35_10.0.17134.1_fr-fr_72f98d75cc1156cd.manifest.x2anylock" has type "DOS executable (COM) start instruction 0xeb72096f 3bdd3dac"- Location: [C:\found.000\dir0002.chk\amd64_microsoft-windows-comdlg32.resources_31bf3856ad364e35_10.0.17134.1_fr-fr_72f98d75cc1156cd.manifest.x2anylock]- [targetUID: 00000000-00004700] "weekdayRange.d.ts.map.x2anylock" has type "DOS executable (COM) start instruction 0x8c79aa14 77e107ed"- Location: [C:\tempdir\node_modules\pac-resolver\dist\weekdayRange.d.ts.map.x2anylock]- [targetUID: 00000000-00004700] "cleanPositionalOperators.js.x2anylock" has type "DOS executable (COM) start instruction 0xb83b09d9 3ac20f0c"- Location: [C:\tempdir\node_modules\mongoose\lib\helpers\schema\cleanPositionalOperators.js.x2anylock]- [targetUID: 00000000-00004700] "getIterator.js.x2anylock" has type "DOS executable (COM) start instruction 0x8ccc58cc ce04de4c"- Location: [C:\tempdir\node_modules\@pm2\js-api\node_modules\async\internal\getIterator.js.x2anylock]- [targetUID: 00000000-00004700] "oobe-button-template.html.x2anylock" has type "DOS executable (COM) start instruction 0xe997005a c0fcb8ca"- Location: [C:\found.000\dir0003.chk\oobe-button-template.html.x2anylock]- [targetUID: 00000000-00004700] "package.json.x2anylock" has type "DOS executable (COM) start instruction 0xb8092e91 eaaeb4b8"- [targetUID: 00000000-00004700] "bower.json.x2anylock" has type "DOS executable (COM) start instruction 0x8ccd8b1f e378359b"- Location: [C:\tempdir\node_modules\@pm2\js-api\node_modules\async\bower.json.x2anylock]- [targetUID: 00000000-00004700] "strLeftBack.js.x2anylock" has type "DOS executable (COM) start instruction 0x8cfa736e 825e71b6"- [targetUID: 00000000-00004700] "example.html.x2anylock" has type "DOS executable (COM) start instruction 0xb8db759a 1ffae46a"- Location: [C:\tempdir\node_modules\jsbn\example.html.x2anylock]- [targetUID: 00000000-00004700] "_Set.js.x2anylock" has type "DOS executable (COM) start instruction 0xb80c1273 bd5dc435"- Location: [C:\tempdir\node_modules\lodash\_Set.js.x2anylock]- [targetUID: 00000000-00004700] "chop.js.x2anylock" has type "DOS executable (COM) start instruction 0xb8d894f7 76739f66"- [targetUID: 00000000-00004700] "str.js.x2anylock" has type "DOS executable (COM) start instruction 0xb821b8b6 50b28ca3"- Location: [C:\tempdir\node_modules\pm2\node_modules\js-yaml\lib\type\str.js.x2anylock]- [targetUID: 00000000-00004700] "template.js.x2anylock" has type "DOS executable (COM) start instruction 0xb856378f b55569a5"- Location: [C:\tempdir\node_modules\lodash\fp\template.js.x2anylock]- [targetUID: 00000000-00004700] "flow.js.x2anylock" has type "DOS executable (COM) start instruction 0xb80a1758 b6f06947"- Location: [C:\tempdir\node_modules\lodash\fp\flow.js.x2anylock]- [targetUID: 00000000-00004700] "has.js.x2anylock" has type "DOS executable (COM) start instruction 0x8cc0fdca a480827c"- Location: [C:\tempdir\node_modules\lodash\fp\has.js.x2anylock]- [targetUID: 00000000-00004700] "lte.js.x2anylock" has type "DOS executable (COM) start instruction 0x8c3910db cb404f0e"- Location: [C:\tempdir\node_modules\@pm2\agent\node_modules\semver\functions\lte.js.x2anylock]- [targetUID: 00000000-00004700] "pm2-runtime.x2anylock" has type "DOS executable (COM) start instruction 0xeb419a39 7f1591d2"- Location: [C:\tempdir\node_modules\pm2\bin\pm2-runtime.x2anylock]- [targetUID: 00000000-00004700] "allPass.js.x2anylock" has type "DOS executable (COM) start instruction 0xeb4f2290 f9ba23eb"- Location: [C:\tempdir\node_modules\lodash\fp\allPass.js.x2anylock]- [targetUID: 00000000-00004700]33:T6ae,"encrypt.exe" (Access type: "OPEN"; Path: "HKLM\SYSTEM\CONTROLSET001\CONTROL\CRYPTOGRAPHY\PROVIDERS"; Key: ""; Value: "") "encrypt.exe" (Access type: "OPEN"; Path: "HKLM\SYSTEM\CONTROLSET001\CONTROL\CRYPTOGRAPHY\CONFIGURATION"; Key: ""; Value: "") "encrypt.exe" (Access type: "OPEN"; Path: "HKCU\SOFTWARE\MICROSOFT\RESTARTMANAGER\SESSION0000"; Key: ""; Value: "") "encrypt.exe" (Access type: "OPEN"; Path: "HKCU\WOW6432NODE\CLSID\{E579AB5F-1CC4-44B4-BED9-DE0991FF0623}"; Key: ""; Value: "") "encrypt.exe" (Access type: "OPEN"; Path: "HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{E579AB5F-1CC4-44B4-BED9-DE0991FF0623}"; Key: ""; Value: "") "encrypt.exe" (Access type: "OPEN"; Path: "HKCU\CLSID\{E579AB5F-1CC4-44B4-BED9-DE0991FF0623}"; Key: ""; Value: "") "encrypt.exe" (Access type: "OPEN"; Path: "HKLM\SOFTWARE\CLASSES\CLSID\{E579AB5F-1CC4-44B4-BED9-DE0991FF0623}"; Key: ""; Value: "") "encrypt.exe" (Access type: "OPEN"; Path: "HKCU\CLSID\{E579AB5F-1CC4-44B4-BED9-DE0991FF0623}\TREATAS"; Key: ""; Value: "") "encrypt.exe" (Access type: "OPEN"; Path: "HKLM\SOFTWARE\CLASSES\CLSID\{E579AB5F-1CC4-44B4-BED9-DE0991FF0623}\TREATAS"; Key: ""; Value: "") "encrypt.exe" (Access type: "OPEN"; Path: "HKCU\CLSID\{E579AB5F-1CC4-44B4-BED9-DE0991FF0623}\INPROCHANDLER32"; Key: ""; Value: "") "encrypt.exe" (Access type: "OPEN"; Path: "HKLM\SOFTWARE\CLASSES\CLSID\{E579AB5F-1CC4-44B4-BED9-DE0991FF0623}\INPROCHANDLER32"; Key: ""; Value: "") "encrypt.exe" (Access type: "OPEN"; Path: "HKCU\CLSID\{E579AB5F-1CC4-44B4-BED9-DE0991FF0623}\INPROCHANDLER"; Key: ""; Value: "") "encrypt.exe" (Access type: "OPEN"; Path: "HKLM\SOFTWARE\CLASSES\CLSID\{E579AB5F-1CC4-44B4-BED9-DE0991FF0623}\INPROCHANDLER"; Key: ""; Value: "")34:T497,"encrypt.exe" (Access type: "QUERYVAL"; Path: "HKCU\SOFTWARE\MICROSOFT\RESTARTMANAGER\SESSION0000"; Key: "SEQUENCE"; Value: "") "encrypt.exe" (Access type: "QUERYVAL"; Path: "HKCU\SOFTWARE\MICROSOFT\RESTARTMANAGER\SESSION0000"; Key: "REGFILES0000"; Value: "") "encrypt.exe" (Access type: "QUERYVAL"; Path: "HKCU\SOFTWARE\MICROSOFT\RESTARTMANAGER\SESSION0000"; Key: "REGFILES0001"; Value: "") "encrypt.exe" (Access type: "QUERYVAL"; Path: "HKCU\SOFTWARE\MICROSOFT\RESTARTMANAGER\SESSION0000"; Key: "REGFILESHASH"; Value: "") "encrypt.exe" (Access type: "QUERYVAL"; Path: "HKCU\SOFTWARE\MICROSOFT\RESTARTMANAGER\SESSION0000"; Key: "REGSVCS0000"; Value: "") "encrypt.exe" (Access type: "QUERYVAL"; Path: "HKCU\SOFTWARE\MICROSOFT\RESTARTMANAGER\SESSION0000"; Key: "REGPROCS0000"; Value: "") "encrypt.exe" (Access type: "QUERYVAL"; Path: "HKCU\SOFTWARE\MICROSOFT\RESTARTMANAGER\SESSION0000"; Key: "JSCOUNT"; Value: "") "encrypt.exe" (Access type: "QUERYVAL"; Path: "HKCU\SOFTWARE\MICROSOFT\RESTARTMANAGER\SESSION0000"; Key: "ESCOUNT"; Value: "") "encrypt.exe" (Access type: "QUERYVAL"; Path: "HKCU\SOFTWARE\MICROSOFT\RESTARTMANAGER\SESSION0000"; Key: "RRCOUNT"; Value: "")35:T1006,"encrypt.exe" reads file "c:\$windows.~bt\sources\replacementmanifests\contentdeliverymanager.utilities-replacement.man.x2anylock" "encrypt.exe" reads file "c:\$windows.~bt\sources\replacementmanifests\devicedirectory-devicedirectoryclient-desktop-replacement.man.x2anylock" "encrypt.exe" reads file "c:\$windows.~bt\sources\replacementmanifests\gpbase-replacement.man.x2anylock" "encrypt.exe" reads file "c:\$windows.~bt\sources\replacementmanifests\microsoft-windows-advertisingid-replacement.man.x2anylock" "encrypt.exe" reads file "c:\$windows.~bt\sources\replacementmanifests\microsoft-windows-geolocation-replacement.man.x2anylock" "encrypt.exe" reads file "c:\$windows.~bt\sources\replacementmanifests\microsoft-windows-ie-internetexplorer-repl-2.man.x2anylock" "encrypt.exe" reads file "c:\found.000\dir0001.chk\amd64_microsoft-windows-m..ernetmail.resources_31bf3856ad364e35_10.0.17134.1_en-us_cf3c5a6654651d32\internetmail.dll.mui.x2anylock" "encrypt.exe" reads file "c:\$windows.~bt\sources\replacementmanifests\onecore_speechcommon-rep.man.x2anylock" "encrypt.exe" reads file "c:\found.000\dir0001.chk\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_af-za_75594e685e635a3e\syncres.dll.mui.x2anylock" "encrypt.exe" reads file "c:\found.000\dir0001.chk\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_lb-lu_80b14902c4ca1fab\syncres.dll.mui.x2anylock" "encrypt.exe" reads file "c:\found.000\dir0001.chk\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_lt-lt_7f7d233cc5a51216\syncres.dll.mui.x2anylock" "encrypt.exe" reads file "c:\found.000\dir0001.chk\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_mi-nz_25bb53edb6274a60\syncres.dll.mui.x2anylock" "encrypt.exe" reads file "c:\found.000\dir0001.chk\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_nl-nl_c283c3aeacce7c0a\syncres.dll.mui.x2anylock" "encrypt.exe" reads file "c:\found.000\dir0001.chk\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_or-in_6644a8739efdc9d2\syncres.dll.mui.x2anylock" "encrypt.exe" reads file "c:\found.000\dir0001.chk\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_pt-br_0b1408d4907a7da2\syncres.dll.mui.x2anylock" "encrypt.exe" reads file "c:\found.000\dir0001.chk\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_quz-pe_70168e91317ac39f\syncres.dll.mui.x2anylock" "encrypt.exe" reads file "c:\found.000\dir0001.chk\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_rw-rw_536658887449bc9a\syncres.dll.mui.x2anylock" "encrypt.exe" reads file "c:\found.000\dir0001.chk\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_sl-si_f0c610696a7f80b7\syncres.dll.mui.x2anylock" "encrypt.exe" reads file "c:\found.000\dir0001.chk\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_sr-..-rs_96f678addf9127e8\syncres.dll.mui.x2anylock" "encrypt.exe" reads file "c:\found.000\dir0001.chk\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_th-th_939df62c5d394346\syncres.dll.mui.x2anylock" "encrypt.exe" reads file "c:\found.000\dir0001.chk\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_lo-la_77462a6ecae7305c.manifest.x2anylock" "encrypt.exe" reads file "c:\found.000\dir0001.chk\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_uk-ua_3381016751e1ae42\syncres.dll.mui.x2anylock" "encrypt.exe" reads file "c:\found.000\dir0001.chk\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_lt-lt_7f7d233cc5a51216.manifest.x2anylock" "encrypt.exe" reads file "c:\found.000\dir0001.chk\wow64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_af-za_7fadf8ba92c41c39\syncres.dll.mui.x2anylock" "encrypt.exe" reads file "c:\found.000\dir0001.chk\wow64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_bg-bg_256cbaab83a50975\syncres.dll.mui.x2anylock"36:T45f,"encrypt.exe" trying to touch file "C:\windows\temp\VxOle32.dll" "encrypt.exe" trying to touch file "C:\WINDOWS\SYSTEM32\kernelbase.dll" "encrypt.exe" trying to touch file "C:\WINDOWS\system32\rpcss.dll" "encrypt.exe" trying to touch file "C:\WINDOWS\system32\uxtheme.dll" "encrypt.exe" trying to touch file "C:\WINDOWS\system32\shell32.dll" "encrypt.exe" trying to touch file "C:\$RECYCLE.BIN\S-1-5-21-735145574-3570218355-1207367261-1001" "encrypt.exe" trying to touch file "C:\WINDOWS\SYSTEM32\ntmarta.dll" "encrypt.exe" trying to touch file "C:\WINDOWS\system32\propsys.dll" "encrypt.exe" trying to touch file "C:\DSROLE.dll" "encrypt.exe" trying to touch file "C:\WINDOWS\SYSTEM32\DSROLE.dll" "encrypt.exe" trying to touch file "C:\WINDOWS\System32\msxml3.dll" "encrypt.exe" trying to touch file "C:\WINDOWS\System32\msxml3r.dll" "encrypt.exe" trying to touch file "C:\$WINDOWS.~BT\Sources\replacementmanifests\contentdeliverymanager.utilities-replacement.man" "encrypt.exe" trying to touch file "C:\$WINDOWS.~BT\Sources\replacementmanifests\contentdeliverymanager.utilities-replacement.man.x2anylock"37:T4e3,"ntiality: After the transaction, we will maintain strict confidentiality regarding this incident, ensuring no information is disclosed.====>If You Refuse to Pay:Permanent Data Loss: Encrypted files will remain inaccessible, leading to business disruptions and potential financial losses.Data Exposure: The sensitive data we have backed up may be publicly released or sold to third parties, severely damaging your reputation and customer trust.Ongoing Attacks: Your systems may face further attacks, causing even greater harm.====>How to Contact Us?Please reach out through the following secure channels for further instructions(When contacting us, please provide your decrypt ID):###Contact 1:Your decrypt ID: 220f9a9f-a9a6-41b2-8dbe-6ee0b05b8a32Dark Web Link: http://zfytizegsze6uiswodhbaalyy5rawaytv2nzyzdkt3susbewviqqh7yd.onion/touchus.htmlYour Chat Key: kyxszzkqjukpvmwwudqqtupkjwiymcbedbzoYou can visit our website and log in with your chat key to contact us. Please note that this website is a dark web webs" (Indicator: ".onion") in Source: encrypt.exe "Dark Web Link: http://zfytizegsze6uiswodhbaalyy5rawaytv2nzyzdkt3susbewviqqh7yd.onion/touchus.html" (Indicator: ".onion") in Source: 00000000-00004700.00000001.240563.008D1000.00000020.mdmp38:T424,"ntiality: After the transaction, we will maintain strict confidentiality regarding this incident, ensuring no information is disclosed.====>If You Refuse to Pay:Permanent Data Loss: Encrypted files will remain inaccessible, leading to business disruptions and potential financial losses.Data Exposure: The sensitive data we have backed up may be publicly released or sold to third parties, severely damaging your reputation and customer trust.Ongoing Attacks: Your systems may face further attacks, causing even greater harm.====>How to Contact Us?Please reach out through the following secure channels for further instructions(When contacting us, please provide your decrypt ID):###Contact 1:Your decrypt ID: 220f9a9f-a9a6-41b2-8dbe-6ee0b05b8a32Dark Web Link: http://zfytizegsze6uiswodhbaalyy5rawaytv2nzyzdkt3susbewviqqh7yd.onion/touchus.htmlYour Chat Key: kyxszzkqjukpvmwwudqqtupkjwiymcbedbzoYou can visit our website and log in with your chat key to contact us. Please note that this website is a dark web webs" (Indicator: ".onion") in Source: encrypt.exe39:T424,"ntiality: After the transaction, we will maintain strict confidentiality regarding this incident, ensuring no information is disclosed.====>If You Refuse to Pay:Permanent Data Loss: Encrypted files will remain inaccessible, leading to business disruptions and potential financial losses.Data Exposure: The sensitive data we have backed up may be publicly released or sold to third parties, severely damaging your reputation and customer trust.Ongoing Attacks: Your systems may face further attacks, causing even greater harm.====>How to Contact Us?Please reach out through the following secure channels for further instructions(When contacting us, please provide your decrypt ID):###Contact 1:Your decrypt ID: 220f9a9f-a9a6-41b2-8dbe-6ee0b05b8a32Dark Web Link: http://zfytizegsze6uiswodhbaalyy5rawaytv2nzyzdkt3susbewviqqh7yd.onion/touchus.htmlYour Chat Key: kyxszzkqjukpvmwwudqqtupkjwiymcbedbzoYou can visit our website and log in with your chat key to contact us. Please note that this website is a dark web webs" (Indicator: ".onion") in Source: encrypt.exe3a:T9aa,Pattern match: "http://zfytizegsze6uiswodhbaalyy5rawaytv2nzyzdkt3susbewviqqh7yd.onion/touchus.htmlyour" Pattern match: "https://www.torproject.org/" Pattern match: "4.ntw/[ho/n@^r\9\y;kc5;@oti=/^v{j" Pattern match: "w9l.k.us/kzetbojyhd6ehq8=row{fmy" Pattern match: "jjo.jysk/fir220f9a9f-a9a6-41b2-8dbe-6ee0b05b8a32" Heuristic match: ".dll.ms" Heuristic match: "\?\c:\found.000\dir0001.chk\update.cat" Heuristic match: "\?\c:\found.000\dir0001.chk\microsoft-onecore-applicationmodel-sync-desktop-fod-package~31bf3856ad364e35~wow64~~10.0.17134.1.cat" Heuristic match: "\?\c:\found.000\dir0001.chk\microsoft-onecore-applicationmodel-sync-desktop-fod-package~31bf3856ad364e35~amd64~~10.0.17134.1.cat" Heuristic match: "r0001.cu" Pattern match: "http://www.w3.org/2001/xmlschema-instance" Pattern match: "http://zfytizegsze6uiswodhbaalyy5rawaytv2nzyzdkt3susbewviqqh7yd.onion/touchus.html" Pattern match: "https://qtox.github.io/" Heuristic match: "\?\c:\tempdir\node_modules\http-proxy-agent\node_modules\ms\readme.md" Heuristic match: "\?\c:\tempdir\node_modules\js-git\doc\mixins\mem-db.md" Heuristic match: "\?\c:\tempdir\node_modules\isbinaryfile\readme.md" Heuristic match: "\?\c:\tempdir\node_modules\is-windows\readme.md" Heuristic match: "\?\c:\tempdir\node_modules\is-unc-path\readme.md" Heuristic match: "\?\c:\tempdir\node_modules\js-git\doc\lib\inflate.md" Heuristic match: "\?\c:\tempdir\node_modules\is-plain-object\readme.md" Heuristic match: "\?\c:\tempdir\node_modules\js-git\doc\mixins\fs-db.md" Heuristic match: "\?\c:\tempdir\node_modules\is-relative\readme.md" Heuristic match: "\?\c:\tempdir\node_modules\js-git\doc\lib\deflate.md" Heuristic match: "\?\c:\tempdir\node_modules\js-yaml\changelog.md" Heuristic match: "\?\c:\tempdir\node_modules\jsonfile\changelog.md" Heuristic match: "\?\c:\tempdir\node_modules\karma\issue_template.md" Heuristic match: "\?\c:\tempdir\node_modules\karma\code_of_conduct.md" Heuristic match: "\?\c:\tempdir\node_modules\kind-of\changelog.md" Heuristic match: "\?\c:\tempdir\node_modules\locate-path\readme.md" Heuristic match: "\?\c:\tempdir\node_modules\@pm2\io\license.md" Heuristic match: "\?\c:\tempdir\node_modules\@pm2\io\notes.md" Heuristic match: "\?\c:\tempdir\node_modules\@pm2\io\readme.md" Heuristic match: "\?\c:\tempdir\node_modules\@pm2\io\test.sh" Heuristic match: "\?\c:\tempdir\node_modules\abbrev\readme.md" Heuristic match: "\?\c:\tempdir\node_modules\jsbn\changelog.md"3b:T50a,Found string "\\?\C:\tempdir\node_modules\ast-types\.github\*" (Indicator: "github\"; Source: "00000000-00004700-00000C2D-16179293260") Found string "\\?\C:\tempdir\node_modules\ast-types\.github\workflows\*" (Indicator: "github\"; Source: "00000000-00004700-00000C2D-16180001336") Found string "\\?\C:\tempdir\node_modules\balanced-match\.github\*" (Indicator: "github\"; Source: "00000000-00004700-00000C2D-17092366146") Found string "\\?\C:\tempdir\node_modules\call-bind\.github\*" (Indicator: "github\"; Source: "00000000-00004700-00000C2D-17337029156") Found string "\\?\C:\tempdir\node_modules\define-data-property\.github\*" (Indicator: "github\"; Source: "00000000-00004700-00000C2D-18558335522") Found string "\\?\C:\tempdir\node_modules\ent\.github\*" (Indicator: "github\"; Source: "00000000-00004700-00000C2D-18781969922") Found string "\\?\C:\tempdir\node_modules\es-define-property\.github\*" (Indicator: "github\"; Source: "00000000-00004700-00000C2D-18789171952") Found string "\\?\C:\tempdir\node_modules\es-errors\.github\*" (Indicator: "github\"; Source: "00000000-00004700-00000C2D-18795007100") Found string "\?\C:\tempdir\node_modules\ast-types\.github\dependabot.yml" (Indicator: "github\"; Source: "00000000-00004700.00000001.240563.02E50000.00000004.mdmp")3c:T8d9,"encrypt.exe" called "FindFirstFileW" with parameter \\?\C:\* (UID: 00000000-00004700) "encrypt.exe" called "FindNextFileW" with parameter $Recycle.Bin (UID: 00000000-00004700) "encrypt.exe" called "FindNextFileW" with parameter $WINDOWS.~BT (UID: 00000000-00004700) "encrypt.exe" called "FindFirstFileW" with parameter \\?\C:\$WINDOWS.~BT\* (UID: 00000000-00004700) "encrypt.exe" called "FindNextFileW" with parameter .. (UID: 00000000-00004700) "encrypt.exe" called "FindNextFileW" with parameter DUDownload (UID: 00000000-00004700) "encrypt.exe" called "FindFirstFileW" with parameter \\?\C:\$WINDOWS.~BT\DUDownload\* (UID: 00000000-00004700) "encrypt.exe" called "FindNextFileW" with parameter Setup (UID: 00000000-00004700) "encrypt.exe" called "FindFirstFileW" with parameter \\?\C:\$WINDOWS.~BT\DUDownload\Setup\* (UID: 00000000-00004700) "encrypt.exe" called "FindNextFileW" with parameter acmigration.dll (UID: 00000000-00004700) "encrypt.exe" called "FindNextFileW" with parameter appraiser.sdb (UID: 00000000-00004700) "encrypt.exe" called "FindNextFileW" with parameter diagtrack.dll (UID: 00000000-00004700) "encrypt.exe" called "FindNextFileW" with parameter mediasetupuimgr.dll (UID: 00000000-00004700) "encrypt.exe" called "FindNextFileW" with parameter migcore.dll (UID: 00000000-00004700) "encrypt.exe" called "FindNextFileW" with parameter reagent.dll (UID: 00000000-00004700) "encrypt.exe" called "FindNextFileW" with parameter replacementmanifests (UID: 00000000-00004700) "encrypt.exe" called "FindFirstFileW" with parameter \\?\C:\$WINDOWS.~BT\DUDownload\Setup\replacementmanifests\* (UID: 00000000-00004700) "encrypt.exe" called "FindNextFileW" with parameter contentdeliverymanager.utilities-replacement.man (UID: 00000000-00004700) "encrypt.exe" called "FindNextFileW" with parameter devicedirectory-devicedirectoryclient-desktop-replacement.man (UID: 00000000-00004700) "encrypt.exe" called "FindNextFileW" with parameter gpbase-replacement.man (UID: 00000000-00004700) "encrypt.exe" called "FindNextFileW" with parameter microsoft-windows-advertisingid-replacement.man (UID: 00000000-00004700) "encrypt.exe" called "FindNextFileW" with parameter microsoft-windows-geolocation-replacement.man (UID: 00000000-00004700)3d:Tcde,Found string "AESNI" (Indicator: "aes"; File: "encrypt.exe") Found string "C:\Program Files\Microsoft Visual Studio\2022\Community\VC\vcpkg\buildtrees\cryptopp\src\TOPP_8_9_0-a1a9be497e.clean\chacha_avx.cpp" (Indicator: "chacha"; File: "encrypt.exe") Found string "C:\Program Files\Microsoft Visual Studio\2022\Community\VC\vcpkg\buildtrees\cryptopp\src\TOPP_8_9_0-a1a9be497e.clean\chacha_simd.cpp" (Indicator: "chacha"; File: "encrypt.exe") Found string "C:\Program Files\Microsoft Visual Studio\2022\Community\VC\vcpkg\buildtrees\cryptopp\src\TOPP_8_9_0-a1a9be497e.clean\rijndael_simd.cpp" (Indicator: "rijndael"; File: "encrypt.exe") Found string "ChaCha" (Indicator: "chacha"; File: "encrypt.exe") Found string ".?AVBase@Rijndael@CryptoPP@@" (Indicator: "rijndael"; File: "encrypt.exe") Found string ".?AV?$BlockCipherImpl@URijndael_Info@CryptoPP@@VBlockCipher@2@@CryptoPP@@" (Indicator: "rijndael"; File: "encrypt.exe") Found string ".?AV?$AlgorithmImpl@V?$SimpleKeyingInterfaceImpl@V?$TwoBases@VBlockCipher@CryptoPP@@URijndael_Info@2@@CryptoPP@@V12@@CryptoPP@@V12@@CryptoPP@@" (Indicator: "rijndael"; File: "encrypt.exe") Found string ".?AV?$SimpleKeyingInterfaceImpl@V?$TwoBases@VBlockCipher@CryptoPP@@URijndael_Info@2@@CryptoPP@@V12@@CryptoPP@@" (Indicator: "rijndael"; File: "encrypt.exe") Found string ".?AV?$TwoBases@VBlockCipher@CryptoPP@@URijndael_Info@2@@CryptoPP@@" (Indicator: "rijndael"; File: "encrypt.exe") Found string ".?AURijndael_Info@CryptoPP@@" (Indicator: "rijndael"; File: "encrypt.exe") Found string ".?AVEnc@Rijndael@CryptoPP@@" (Indicator: "rijndael"; File: "encrypt.exe") Found string ".?AV?$BlockCipherFinal@$0A@VEnc@Rijndael@CryptoPP@@@CryptoPP@@" (Indicator: "rijndael"; File: "encrypt.exe") Found string ".?AV?$ClonableImpl@V?$BlockCipherFinal@$0A@VEnc@Rijndael@CryptoPP@@@CryptoPP@@VEnc@Rijndael@2@@CryptoPP@@" (Indicator: "rijndael"; File: "encrypt.exe") Found string ".?AVChaCha_Policy@CryptoPP@@" (Indicator: "chacha"; File: "encrypt.exe") file/memory contains long string with (Indicator: "chacha"; File: "encrypt.exe") Found string ".?AV?$ConcretePolicyHolder@VChaCha_Policy@CryptoPP@@V?$AdditiveCipherTemplate@V?$AbstractPolicyHolder@UAdditiveCipherAbstractPolicy@CryptoPP@@VSymmetricCipher@2@@CryptoPP@@@2@UAdditiveCipherAbstractPolicy@2@@CryptoPP@@" (Indicator: "chacha"; File: "encrypt.exe") Found string "AESNI" (Indicator: "aes"; Source: "00000000-00004700.00000001.240563.008D1000.00000020.mdmp") Found string "C:\Program Files\Microsoft Visual Studio\2022\Community\VC\vcpkg\buildtrees\cryptopp\src\TOPP_8_9_0-a1a9be497e.clean\chacha_avx.cpp" (Indicator: "chacha"; Source: "00000000-00004700.00000001.240563.008D1000.00000020.mdmp") Found string "C:\Program Files\Microsoft Visual Studio\2022\Community\VC\vcpkg\buildtrees\cryptopp\src\TOPP_8_9_0-a1a9be497e.clean\chacha_simd.cpp" (Indicator: "chacha"; Source: "00000000-00004700.00000001.240563.008D1000.00000020.mdmp") Found string "C:\Program Files\Microsoft Visual Studio\2022\Community\VC\vcpkg\buildtrees\cryptopp\src\TOPP_8_9_0-a1a9be497e.clean\rijndael_simd.cpp" (Indicator: "rijndael"; Source: "00000000-00004700.00000001.240563.008D1000.00000020.mdmp") Found string "ChaCha" (Indicator: "chacha"; Source: "00000000-00004700.00000001.240563.008D1000.00000020.mdmp")3e:T723,Found reference to API "" (Indicator: "GetDC"; Source: "00000000-00004700.00000000.238642.02E50000.00000004.mdmp, 00000000-00004700.00000001.240563.02E50000.00000004.mdmp") Found reference to API "" (Indicator: "GetDC"; Source: "00000000-00004700.00000000.238642.02E50000.00000004.mdmp, 00000000-00004700.00000001.240563.02E50000.00000004.mdmp") Found reference to API "" (Indicator: "GetWindowDC"; Source: "00000000-00004700.00000000.238642.02E50000.00000004.mdmp, 00000000-00004700.00000001.240563.02E50000.00000004.mdmp") Found reference to API "" (Indicator: "CreateDC"; Source: "00000000-00004700.00000000.238642.02E50000.00000004.mdmp, 00000000-00004700.00000001.240563.02E50000.00000004.mdmp") Found reference to API "" (Indicator: "CreateDC"; Source: "00000000-00004700.00000000.238642.02E50000.00000004.mdmp, 00000000-00004700.00000001.240563.02E50000.00000004.mdmp") Found reference to API "" (Indicator: "CreateCompatibleBitmap"; Source: "00000000-00004700.00000000.238642.02E50000.00000004.mdmp, 00000000-00004700.00000001.240563.02E50000.00000004.mdmp") Found reference to API "" (Indicator: "BitBlt"; Source: "00000000-00004700.00000000.238642.02E50000.00000004.mdmp, 00000000-00004700.00000001.240563.02E50000.00000004.mdmp") Found reference to API "" (Indicator: "CreateCompatibleDC"; Source: "00000000-00004700.00000000.238642.02E50000.00000004.mdmp, 00000000-00004700.00000001.240563.02E50000.00000004.mdmp")3f:Td77,Found reference to API "FindNextFileW" (Indicator: "FindNextFile"; File: "encrypt.exe") Found reference to API "FindFirstFileExW" (Indicator: "FindFirstFile"; File: "encrypt.exe") Found reference to API "FindFirstFileW" (Indicator: "FindFirstFile"; File: "encrypt.exe") Found reference to API "FindFirstFileW" (Indicator: "FindFirstFile"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp") Found reference to API "FindNextFileW" (Indicator: "FindNextFile"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp") Found reference to API "FindFirstFileExW" (Indicator: "FindFirstFile"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp") Found reference to API "11385055370,2864,3119,,FindNextFileW,kernel32.dll,"01:02:08.765",RX=0,PX=0" (Indicator: "FindNextFile"; Source: "00000000-00004700.00000000.238642.02E50000.00000004.mdmp") Found reference to API "11382196500,2864,3119,,FindNextFileW,kernel32.dll,"01:02:08.765",RX=0,PX=0" (Indicator: "FindNextFile"; Source: "00000000-00004700.00000000.238642.02E50000.00000004.mdmp") Found reference to API "11383224354,2864,3119,,FindNextFileW,kernel32.dll,"01:02:08.765",RX=0,PX=0" (Indicator: "FindNextFile"; Source: "00000000-00004700.00000000.238642.02E50000.00000004.mdmp") Found reference to API "11383132376,2864,3119,,FindNextFileW,kernel32.dll,"01:02:08.765",RX=0,PX=0" (Indicator: "FindNextFile"; Source: "00000000-00004700.00000000.238642.02E50000.00000004.mdmp") Found reference to API "11390105850,2864,3119,,FindNextFileW,kernel32.dll,"01:02:08.765",RX=0,PX=0" (Indicator: "FindNextFile"; Source: "00000000-00004700.00000000.238642.02E50000.00000004.mdmp") Found reference to API "11366370666,2864,3117,,FindFirstFileW,kernel32.dll,"01:02:08.765",RX=0,PX=0" (Indicator: "FindFirstFile"; Source: "00000000-00004700.00000000.238642.02E50000.00000004.mdmp") Found reference to API "11395177370,2864,3119,,FindNextFileW,kernel32.dll,"01:02:08.781",RX=0,PX=0" (Indicator: "FindNextFile"; Source: "00000000-00004700.00000000.238642.02E50000.00000004.mdmp") Found reference to API "11384345386,2864,3119,,FindNextFileW,kernel32.dll,"01:02:08.765",RX=0,PX=0" (Indicator: "FindNextFile"; Source: "00000000-00004700.00000000.238642.02E50000.00000004.mdmp") Found reference to API "11395353962,2864,3119,,FindNextFileW,kernel32.dll,"01:02:08.781",RX=0,PX=0" (Indicator: "FindNextFile"; Source: "00000000-00004700.00000000.238642.02E50000.00000004.mdmp") Found reference to API "11384117956,2864,3119,,FindNextFileW,kernel32.dll,"01:02:08.765",RX=0,PX=0" (Indicator: "FindNextFile"; Source: "00000000-00004700.00000000.238642.02E50000.00000004.mdmp") Found reference to API "11389061146,2864,3117,,FindFirstFileW,kernel32.dll,"01:02:08.765",RX=0,PX=0" (Indicator: "FindFirstFile"; Source: "00000000-00004700.00000000.238642.02E50000.00000004.mdmp") Found reference to API "11390201984,2864,3119,,FindNextFileW,kernel32.dll,"01:02:08.765",RX=0,PX=0" (Indicator: "FindNextFile"; Source: "00000000-00004700.00000000.238642.02E50000.00000004.mdmp") Found reference to API "11389441736,2864,3119,,FindNextFileW,kernel32.dll,"01:02:08.765",RX=0,PX=0" (Indicator: "FindNextFile"; Source: "00000000-00004700.00000000.238642.02E50000.00000004.mdmp") Found reference to API "11389822498,2864,3119,,FindNextFileW,kernel32.dll,"01:02:08.765",RX=0,PX=0" (Indicator: "FindNextFile"; Source: "00000000-00004700.00000000.238642.02E50000.00000004.mdmp")40:T895,Found reference to API "GetCurrentProcess" (Indicator: "GetCurrentProcess"; File: "encrypt.exe") Found reference to API "GetModuleHandleW" (Indicator: "GetModuleHandle"; File: "encrypt.exe") Found reference to API "Process32NextW" (Indicator: "Process32Next"; File: "encrypt.exe") Found reference to API "Process32FirstW" (Indicator: "Process32First"; File: "encrypt.exe") Found reference to API "GetCurrentProcessId" (Indicator: "GetCurrentProcess"; File: "encrypt.exe") Found reference to API "GetEnvironmentStringsW" (Indicator: "GetEnvironmentStrings"; File: "encrypt.exe") Found reference to API "GetModuleHandleExW" (Indicator: "GetModuleHandle"; File: "encrypt.exe") Found reference to API "CreateToolhelp32Snapshot" (Indicator: "CreateToolhelp32Snapshot"; File: "encrypt.exe") Found reference to API "GetModuleHandleA" (Indicator: "GetModuleHandle"; File: "encrypt.exe") Found reference to API "GetCurrentProcess" (Indicator: "GetCurrentProcess"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp") Found reference to API "GetModuleHandleA" (Indicator: "GetModuleHandle"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp") Found reference to API "CreateToolhelp32Snapshot" (Indicator: "CreateToolhelp32Snapshot"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp") Found reference to API "Process32NextW" (Indicator: "Process32Next"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp") Found reference to API "Process32FirstW" (Indicator: "Process32First"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp") Found reference to API "GetCurrentProcessId" (Indicator: "GetCurrentProcess"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp") Found reference to API "GetModuleHandleW" (Indicator: "GetModuleHandle"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp") Found reference to API "GetModuleHandleExW" (Indicator: "GetModuleHandle"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp") Found reference to API "GetEnvironmentStringsW" (Indicator: "GetEnvironmentStrings"; Source: "00000000-00004700.00000000.238642.00971000.00000002.mdmp")41:T1d0f,"encrypt.exe" renamed original file"C:\$WINDOWS.~BT\Sources\replacementmanifests\contentdeliverymanager.utilities-replacement.man" to "C:\$WINDOWS.~BT\Sources\replacementmanifests\contentdeliverymanager.utilities-replacement.man.x2anylock" "encrypt.exe" renamed original file"C:\$WINDOWS.~BT\Sources\replacementmanifests\devicedirectory-devicedirectoryclient-desktop-replacement.man" to "C:\$WINDOWS.~BT\Sources\replacementmanifests\devicedirectory-devicedirectoryclient-desktop-replacement.man.x2anylock" "encrypt.exe" renamed original file"C:\$WINDOWS.~BT\Sources\replacementmanifests\gpbase-replacement.man" to "C:\$WINDOWS.~BT\Sources\replacementmanifests\gpbase-replacement.man.x2anylock" "encrypt.exe" renamed original file"C:\$WINDOWS.~BT\Sources\replacementmanifests\microsoft-windows-advertisingid-replacement.man" to "C:\$WINDOWS.~BT\Sources\replacementmanifests\microsoft-windows-advertisingid-replacement.man.x2anylock" "encrypt.exe" renamed original file"C:\$WINDOWS.~BT\Sources\replacementmanifests\microsoft-windows-geolocation-replacement.man" to "C:\$WINDOWS.~BT\Sources\replacementmanifests\microsoft-windows-geolocation-replacement.man.x2anylock" "encrypt.exe" renamed original file"C:\$WINDOWS.~BT\Sources\replacementmanifests\microsoft-windows-ie-internetexplorer-repl-2.man" to "C:\$WINDOWS.~BT\Sources\replacementmanifests\microsoft-windows-ie-internetexplorer-repl-2.man.x2anylock" "encrypt.exe" renamed original file"C:\$WINDOWS.~BT\Sources\replacementmanifests\onecore_speechcommon-rep.man" to "C:\$WINDOWS.~BT\Sources\replacementmanifests\onecore_speechcommon-rep.man.x2anylock" "encrypt.exe" renamed original file"C:\found.000\dir0001.chk\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_af-za_75594e685e635a3e\syncres.dll.mui" to "C:\found.000\dir0001.chk\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_af-za_75594e685e635a3e\syncres.dll.mui.x2anylock" "encrypt.exe" renamed original file"C:\found.000\dir0001.chk\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_lb-lu_80b14902c4ca1fab\syncres.dll.mui" to "C:\found.000\dir0001.chk\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_lb-lu_80b14902c4ca1fab\syncres.dll.mui.x2anylock" "encrypt.exe" renamed original file"C:\found.000\dir0001.chk\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_mi-nz_25bb53edb6274a60\syncres.dll.mui" to "C:\found.000\dir0001.chk\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_mi-nz_25bb53edb6274a60\syncres.dll.mui.x2anylock" "encrypt.exe" renamed original file"C:\found.000\dir0001.chk\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_lo-la_77462a6ecae7305c.manifest" to "C:\found.000\dir0001.chk\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_lo-la_77462a6ecae7305c.manifest.x2anylock" "encrypt.exe" renamed original file"C:\found.000\dir0001.chk\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_lt-lt_7f7d233cc5a51216.manifest" to "C:\found.000\dir0001.chk\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_lt-lt_7f7d233cc5a51216.manifest.x2anylock" "encrypt.exe" renamed original file"C:\found.000\dir0001.chk\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_lv-lv_804a91c0c5235306.manifest" to "C:\found.000\dir0001.chk\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_lv-lv_804a91c0c5235306.manifest.x2anylock" "encrypt.exe" renamed original file"C:\found.000\dir0001.chk\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_mi-nz_25bb53edb6274a60.manifest" to "C:\found.000\dir0001.chk\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_mi-nz_25bb53edb6274a60.manifest.x2anylock" "encrypt.exe" renamed original file"C:\found.000\dir0001.chk\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_mk-mk_1efedf2bba7e24b8.manifest" to "C:\found.000\dir0001.chk\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_mk-mk_1efedf2bba7e24b8.manifest.x2anylock" "encrypt.exe" renamed original file"C:\found.000\dir0001.chk\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_ml-in_2048ffe9b9aae7ba.manifest" to "C:\found.000\dir0001.chk\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_ml-in_2048ffe9b9aae7ba.manifest.x2anylock" "encrypt.exe" renamed original file"C:\found.000\dir0001.chk\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_mn-mn_203304f1b9bb8620.manifest" to "C:\found.000\dir0001.chk\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_mn-mn_203304f1b9bb8620.manifest.x2anylock" "encrypt.exe" renamed original file"C:\found.000\dir0001.chk\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_mr-in_20082061b9db8f60.manifest" to "C:\found.000\dir0001.chk\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_mr-in_20082061b9db8f60.manifest.x2anylock" "encrypt.exe" renamed original file"C:\found.000\dir0001.chk\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_ms-my_24ddc44fb6c143a2.manifest" to "C:\found.000\dir0001.chk\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_ms-my_24ddc44fb6c143a2.manifest.x2anylock" "encrypt.exe" renamed original file"C:\found.000\dir0001.chk\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_mt-mt_229b507db83648f0.manifest" to "C:\found.000\dir0001.chk\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_mt-mt_229b507db83648f0.manifest.x2anylock" "encrypt.exe" renamed original file"C:\found.000\dir0001.chk\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_nb-no_c4447870aba27235.manifest" to "C:\found.000\dir0001.chk\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_nb-no_c4447870aba27235.manifest.x2anylock" "encrypt.exe" renamed original file"C:\found.000\dir0001.chk\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_ne-np_c4958fdaab71ca8f.manifest" to "C:\found.000\dir0001.chk\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_ne-np_c4958fdaab71ca8f.manifest.x2anylock" "encrypt.exe" renamed original file"C:\found.000\dir0001.chk\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_nl-nl_c283c3aeacce7c0a.manifest" to "C:\found.000\dir0001.chk\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_nl-nl_c283c3aeacce7c0a.manifest.x2anylock" "encrypt.exe" renamed original file"C:\found.000\dir0001.chk\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_nso-za_30759cdc1af7521b.manifest" to "C:\found.000\dir0001.chk\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_nso-za_30759cdc1af7521b.manifest.x2anylock" "encrypt.exe" renamed original file"C:\found.000\dir0001.chk\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_pa-..-pk_a75d382b17f9fbbf.manifest" to "C:\found.000\dir0001.chk\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_pa-..-pk_a75d382b17f9fbbf.manifest.x2anylock"42:T6cd,"encrypt.exe" called "OpenServiceA" to access the "vss" service "encrypt.exe" called "OpenServiceA" to access the "sql" service "encrypt.exe" called "OpenServiceA" to access the "svc$" service "encrypt.exe" called "OpenServiceA" to access the "memtas" service "encrypt.exe" called "OpenServiceA" to access the "mepocs" service "encrypt.exe" called "OpenServiceA" to access the "sophos" service "encrypt.exe" called "OpenServiceA" to access the "veeam" service "encrypt.exe" called "OpenServiceA" to access the "backup" service "encrypt.exe" called "OpenServiceA" to access the "GxVss" service "encrypt.exe" called "OpenServiceA" to access the "GxBlr" service "encrypt.exe" called "OpenServiceA" to access the "GxFWD" service "encrypt.exe" called "OpenServiceA" to access the "GxCVD" service "encrypt.exe" called "OpenServiceA" to access the "GxCIMgr" service "encrypt.exe" called "OpenServiceA" to access the "DefWatch" service "encrypt.exe" called "OpenServiceA" to access the "ccEvtMgr" service "encrypt.exe" called "OpenServiceA" to access the "ccSetMgr" service "encrypt.exe" called "OpenServiceA" to access the "SavRoam" service "encrypt.exe" called "OpenServiceA" to access the "RTVscan" service "encrypt.exe" called "OpenServiceA" to access the "QBFCService" service "encrypt.exe" called "OpenServiceA" to access the "QBIDPService" service "encrypt.exe" called "OpenServiceA" to access the "Intuit.QuickBooks.FCS" service "encrypt.exe" called "OpenServiceA" to access the "QBCFMonitorService" service "encrypt.exe" called "OpenServiceA" to access the "YooBackup" service "encrypt.exe" called "OpenServiceA" to access the "YooIT" service "encrypt.exe" called "OpenServiceA" to access the "zhudongfangyu" service43:T4fa8,"cdosys.dll.mui.x2anylock" has type "DOS executable (COM) maybe with interrupt 22h start instruction 0xb8d3a311 72165320"- Location: [C:\found.000\dir0002.chk\amd64_microsoft-windows-cdosys.resources_31bf3856ad364e35_10.0.17134.1_it-it_d276206cf5455c73\cdosys.dll.mui.x2anylock]- [targetUID: 00000000-00004700] "syncres.dll.mui.x2anylock" has type "DOS executable (COM) start instruction 0xe9b574ef 38d623cd"- Location: [C:\found.000\dir0001.chk\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_lv-lv_804a91c0c5235306\syncres.dll.mui.x2anylock]- [targetUID: 00000000-00004700] "aphostres.dll.mui.x2anylock" has type "DOS executable (COM) start instruction 0xeb6f0439 1b331c1d"- Location: [C:\found.000\dir0001.chk\wow64_microsoft-windows-m..aphostres.resources_31bf3856ad364e35_10.0.17134.1_el-gr_637f00823a10b78d\aphostres.dll.mui.x2anylock]- [targetUID: 00000000-00004700] "source-map.debug.js.x2anylock" has type "DOS executable (COM) start instruction 0x8c9c7a73 ee3b2db1"- [targetUID: 00000000-00004700] "SFPATWT.INF.x2anylock" has type "DOS executable (COM) start instruction 0x8c456bf6 e5b6f6d2"- Location: [C:\$WINDOWS.~BT\Sources\SFPATWT.INF.x2anylock]- [targetUID: 00000000-00004700] "bootmgr.efi.mui.x2anylock" has type "DOS executable (COM) maybe with interrupt 22h start instruction 0x8c2550b3 86c2103e"- Location: [C:\found.000\dir0002.chk\amd64_microsoft-windows-b..nager-efi.resources_31bf3856ad364e35_10.0.17134.1_ro-ro_ab114d5ca4a18d30\bootmgr.efi.mui.x2anylock]- [targetUID: 00000000-00004700] "index.d.ts.x2anylock" has type "DOS executable (COM) start instruction 0x8c49d83e cce89f28"- Location: [C:\tempdir\node_modules\mongoose\types\index.d.ts.x2anylock]- [targetUID: 00000000-00004700] "README.md.x2anylock" has type "DOS executable (COM) start instruction 0xb8d04aae 6f27a800"- [targetUID: 00000000-00004700] "update.ts.x2anylock" has type "DOS executable (COM) start instruction 0xb8e80604 96fabed2"- Location: [C:\tempdir\node_modules\mongodb\src\operations\update.ts.x2anylock]- [targetUID: 00000000-00004700] "README.md.x2anylock" has type "DOS executable (COM) start instruction 0xb8b38b88 91fd821e"- Location: [C:\tempdir\node_modules\ansi-colors\README.md.x2anylock]- [targetUID: 00000000-00004700] "README.md.x2anylock" has type "DOS executable (COM) start instruction 0xb8053389 1588d401"- Location: [C:\tempdir\node_modules\kareem\README.md.x2anylock]- [targetUID: 00000000-00004700] "join.js.x2anylock" has type "DOS executable (COM) maybe with interrupt 22h start instruction 0x8c7397a5 b18ae6f8"- Location: [C:\tempdir\node_modules\bluebird\js\release\join.js.x2anylock]- [targetUID: 00000000-00004700] "pack-codec.js.x2anylock" has type "DOS executable (COM) start instruction 0xeb152696 bfada70a"- Location: [C:\tempdir\node_modules\js-git\lib\pack-codec.js.x2anylock]- [targetUID: 00000000-00004700] "layout.js.x2anylock" has type "DOS executable (COM) start instruction 0xb8fc799c d6fa3e4f"- Location: [C:\tempdir\node_modules\blessed\lib\widgets\layout.js.x2anylock]- [targetUID: 00000000-00004700] "internal.js.x2anylock" has type "DOS executable (COM) start instruction 0xeb24a73e f90dc799"- Location: [C:\tempdir\node_modules\iconv-lite\encodings\internal.js.x2anylock]- [targetUID: 00000000-00004700] "process.js.x2anylock" has type "DOS executable (COM) start instruction 0x8c209dac 8427ca67"- Location: [C:\tempdir\node_modules\karma\lib\launchers\process.js.x2anylock]- [targetUID: 00000000-00004700] "eventemitter2.d.ts.x2anylock" has type "MS-DOS executable"- Location: [C:\tempdir\node_modules\@pm2\js-api\node_modules\eventemitter2\eventemitter2.d.ts.x2anylock]- [targetUID: 00000000-00004700] "index.js.x2anylock" has type "DOS executable (COM) maybe with interrupt 22h start instruction 0x8ce6d394 b4cee2a1"- Location: [C:\tempdir\node_modules\content-type\index.js.x2anylock]- [targetUID: 00000000-00004700] "web-outgoing.js.x2anylock" has type "DOS executable (COM) start instruction 0xb85ab967 46834b3e"- Location: [C:\tempdir\node_modules\http-proxy\lib\http-proxy\passes\web-outgoing.js.x2anylock]- [targetUID: 00000000-00004700] "ast.js.x2anylock" has type "DOS executable (COM) start instruction 0x8c4981e2 f2cd7604"- Location: [C:\tempdir\node_modules\esutils\lib\ast.js.x2anylock]- [targetUID: 00000000-00004700] "node.js.x2anylock" has type "DOS executable (COM) start instruction 0xeb3f389b f9ee5fb3"- Location: [C:\tempdir\node_modules\engine.io\node_modules\debug\src\node.js.x2anylock]- [targetUID: 00000000-00004700] "ws-incoming.js.x2anylock" has type "DOS executable (COM) start instruction 0xb84efd65 19b93642"- Location: [C:\tempdir\node_modules\http-proxy\lib\http-proxy\passes\ws-incoming.js.x2anylock]- [targetUID: 00000000-00004700] "tg.js.x2anylock" has type "DOS executable (COM) start instruction 0xeb60e09b 9dd12d1f"- Location: [C:\tempdir\node_modules\moment\locale\tg.js.x2anylock]- [targetUID: 00000000-00004700] "es-us.js.x2anylock" has type "DOS executable (COM) start instruction 0xeb7b9314 f326b662"- Location: [C:\tempdir\node_modules\moment\locale\es-us.js.x2anylock]- [targetUID: 00000000-00004700] "compile.js.x2anylock" has type "DOS executable (COM) maybe with interrupt 22h start instruction 0xb8f76dca 8e7d1ace"- Location: [C:\tempdir\node_modules\degenerator\dist\compile.js.x2anylock]- [targetUID: 00000000-00004700] "CHANGELOG.md.x2anylock" has type "DOS executable (COM) start instruction 0x8c5dcc89 89d2ac49"- [targetUID: 00000000-00004700] "write_concern.js.x2anylock" has type "DOS executable (COM) start instruction 0xb840d3c2 35561760"- Location: [C:\tempdir\node_modules\mongodb\lib\write_concern.js.x2anylock]- [targetUID: 00000000-00004700] "package.json.x2anylock" has type "DOS executable (COM) start instruction 0xb86a67ed b52d8ed5"- [targetUID: 00000000-00004700] "bg.js.x2anylock" has type "MS-DOS executable MZ for MS-DOS"- Location: [C:\tempdir\node_modules\moment\src\locale\bg.js.x2anylock]- [targetUID: 00000000-00004700] "index.js.x2anylock" has type "DOS executable (COM) start instruction 0xb8a007aa d7818c73"- [targetUID: 00000000-00004700] "series.js.x2anylock" has type "DOS executable (COM) start instruction 0xb84cdbf2 ff0640cf"- Location: [C:\tempdir\node_modules\@pm2\js-api\node_modules\async\series.js.x2anylock]- [targetUID: 00000000-00004700] "uk.js.x2anylock" has type "DOS executable (COM) start instruction 0xb8c76963 1fd2f5db"- Location: [C:\tempdir\node_modules\@pm2\agent\node_modules\dayjs\esm\locale\uk.js.x2anylock]- [targetUID: 00000000-00004700] "README.md.x2anylock" has type "DOS executable (COM) start instruction 0x8c09a2ce 2dd04d0f"- Location: [C:\tempdir\node_modules\ee-first\README.md.x2anylock]- [targetUID: 00000000-00004700] "wow64_microsoft-windows-m..aphostres.resources_31bf3856ad364e35_10.0.17134.1_fi-fi_02c00a792f1a3e93.manifest.x2anylock" has type "DOS executable (COM) start instruction 0xb824939b 7866a175"- Location: [C:\found.000\dir0001.chk\wow64_microsoft-windows-m..aphostres.resources_31bf3856ad364e35_10.0.17134.1_fi-fi_02c00a792f1a3e93.manifest.x2anylock]- [targetUID: 00000000-00004700] "sr.js.x2anylock" has type "DOS executable (COM) start instruction 0xb88cfd39 8b2d58dd"- Location: [C:\tempdir\node_modules\dayjs\esm\locale\sr.js.x2anylock]- [targetUID: 00000000-00004700] "amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_gd-gb_4897be7c0d6eef46.manifest.x2anylock" has type "DOS executable (COM) maybe with interrupt 22h start instruction 0xb8403dbf 50f259e9"- Location: [C:\found.000\dir0001.chk\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_gd-gb_4897be7c0d6eef46.manifest.x2anylock]- [targetUID: 00000000-00004700] "wow64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_zh-tw_774f24663cb9f880.manifest.x2anylock" has type "DOS executable (COM) start instruction 0xb821ec49 e76dec15"- Location: [C:\found.000\dir0001.chk\wow64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_zh-tw_774f24663cb9f880.manifest.x2anylock]- [targetUID: 00000000-00004700] "timeRange.js.map.x2anylock" has type "DOS executable (COM) start instruction 0xb81101dd 97d0dc5e"- Location: [C:\tempdir\node_modules\pac-resolver\dist\timeRange.js.map.x2anylock]- [targetUID: 00000000-00004700] "compare.js.x2anylock" has type "DOS executable (COM) maybe with interrupt 22h start instruction 0xeb1e3130 16de1f36"- Location: [C:\tempdir\node_modules\moment\src\lib\moment\compare.js.x2anylock]- [targetUID: 00000000-00004700] "ga.js.x2anylock" has type "DOS executable (COM) start instruction 0x8c2fcb11 1627d708"- Location: [C:\tempdir\node_modules\moment\dist\locale\ga.js.x2anylock]- [targetUID: 00000000-00004700] "on_data.js.map.x2anylock" has type "DOS executable (COM) start instruction 0xb8824cc8 1cd3a353"- Location: [C:\tempdir\node_modules\mongodb\lib\cmap\wire_protocol\on_data.js.map.x2anylock]- [targetUID: 00000000-00004700] "tzm-latn.js.x2anylock" has type "DOS executable (COM) start instruction 0x8cd52b11 ad37e522"- Location: [C:\tempdir\node_modules\moment\locale\tzm-latn.js.x2anylock]- [targetUID: 00000000-00004700] "dispatchRequest.js.x2anylock" has type "DOS executable (COM) start instruction 0x8cd8a5cf 44945dca"- Location: [C:\tempdir\node_modules\axios\lib\core\dispatchRequest.js.x2anylock]- [targetUID: 00000000-00004700] "fclone.js.x2anylock" has type "DOS executable (COM) start instruction 0xb8206d9b b2717433"- Location: [C:\tempdir\node_modules\fclone\dist\fclone.js.x2anylock]- [targetUID: 00000000-00004700] "test.py.x2anylock" has type "DOS executable (COM) start instruction 0x8cdc0ed2 ec0bcfe2"- Location: [C:\tempdir\node_modules\flatted\python\test.py.x2anylock]- [targetUID: 00000000-00004700] "pt_BR.json.x2anylock" has type "DOS executable (COM) start instruction 0xb8737a7d 3632cf43"- [targetUID: 00000000-00004700] "tr.json.x2anylock" has type "DOS executable (COM) start instruction 0x8cc8485d c413beec"- [targetUID: 00000000-00004700] "includes.js.x2anylock" has type "DOS executable (COM) start instruction 0xeb33414b 645c38cb"- Location: [C:\tempdir\node_modules\lodash\includes.js.x2anylock]- [targetUID: 00000000-00004700] "tl-ph.js.x2anylock" has type "DOS executable (COM) start instruction 0xe9860604 04970760"- Location: [C:\tempdir\node_modules\moment\src\locale\tl-ph.js.x2anylock]- [targetUID: 00000000-00004700] "pa-in.js.x2anylock" has type "DOS executable (COM) start instruction 0xeb107c7c 844befc5"- Location: [C:\tempdir\node_modules\dayjs\locale\pa-in.js.x2anylock]- [targetUID: 00000000-00004700] "de-ch.js.x2anylock" has type "DOS executable (COM) start instruction 0x8c0ebfa1 b6c22196"- Location: [C:\tempdir\node_modules\dayjs\esm\locale\de-ch.js.x2anylock]- [targetUID: 00000000-00004700] "bn.js.x2anylock" has type "DOS executable (COM) start instruction 0xeb0954da 38b363d0"- Location: [C:\tempdir\node_modules\@pm2\agent\node_modules\dayjs\esm\locale\bn.js.x2anylock]- [targetUID: 00000000-00004700] "Readme.md.x2anylock" has type "DOS executable (COM) start instruction 0xb83e97b6 789a54fc"- Location: [C:\tempdir\node_modules\pm2-axon\lib\configurable\Readme.md.x2anylock]- [targetUID: 00000000-00004700] "zh-hk.js.x2anylock" has type "DOS executable (COM) start instruction 0x8c830bdd ae1d15c4"- Location: [C:\tempdir\node_modules\dayjs\locale\zh-hk.js.x2anylock]- [targetUID: 00000000-00004700] "pm2-init-amazon.sh.x2anylock" has type "DOS executable (COM) start instruction 0xb8012dd2 a7abad1f"- Location: [C:\tempdir\node_modules\pm2\lib\templates\init-scripts\pm2-init-amazon.sh.x2anylock]- [targetUID: 00000000-00004700] "estimated_document_count.js.x2anylock" has type "DOS executable (COM) start instruction 0xeb3ed979 ac25952d"- Location: [C:\tempdir\node_modules\mongodb\lib\operations\estimated_document_count.js.x2anylock]- [targetUID: 00000000-00004700] "index.d.ts.map.x2anylock" has type "DOS executable (COM) start instruction 0xeb025253 086521d8"- Location: [C:\tempdir\node_modules\https-proxy-agent\dist\index.d.ts.map.x2anylock]- [targetUID: 00000000-00004700] "mn.js.x2anylock" has type "DOS executable (COM) start instruction 0xb86af926 fcbdbbb1"- Location: [C:\tempdir\node_modules\@pm2\agent\node_modules\dayjs\esm\locale\mn.js.x2anylock]- [targetUID: 00000000-00004700] "settle.js.x2anylock" has type "DOS executable (COM) start instruction 0xb81197eb e10fd925"- Location: [C:\tempdir\node_modules\bluebird\js\release\settle.js.x2anylock]- [targetUID: 00000000-00004700] "mr.js.x2anylock" has type "DOS executable (COM) maybe with interrupt 22h start instruction 0xb8252a3b ecde11c5"- Location: [C:\tempdir\node_modules\dayjs\esm\locale\mr.js.x2anylock]- [targetUID: 00000000-00004700] "LICENSE.BSD.x2anylock" has type "DOS executable (COM) start instruction 0x8c691a30 d6803259"- Location: [C:\tempdir\node_modules\esutils\LICENSE.BSD.x2anylock]- [targetUID: 00000000-00004700] "404-13.htm.x2anylock" has type "DOS executable (COM) start instruction 0x8c4db14c 40bafd73"- Location: [C:\inetpub\custerr\en-US\404-13.htm.x2anylock]- [targetUID: 00000000-00004700] "_baseMatchesProperty.js.x2anylock" has type "DOS executable (COM) start instruction 0xb80275bf 9fe7b694"- Location: [C:\tempdir\node_modules\lodash\_baseMatchesProperty.js.x2anylock]- [targetUID: 00000000-00004700] "license.x2anylock" has type "DOS executable (COM) start instruction 0xb84c4f3d 61c7d6b6"- Location: [C:\tempdir\node_modules\locate-path\license.x2anylock]- [targetUID: 00000000-00004700] "package.json.x2anylock" has type "DOS executable (COM) start instruction 0xeb168d6d 51eaa933"- Location: [C:\tempdir\node_modules\path-root\package.json.x2anylock]- [targetUID: 00000000-00004700] "LICENSE.x2anylock" has type "DOS executable (COM) start instruction 0xb886ce6e b36f8fdc"- [targetUID: 00000000-00004700] "es.js.x2anylock" has type "DOS executable (COM) start instruction 0xeb3ab7c9 9ba85b7a"- Location: [C:\tempdir\node_modules\@pm2\agent\node_modules\dayjs\locale\es.js.x2anylock]- [targetUID: 00000000-00004700] "package.json.x2anylock" has type "DOS executable (COM) start instruction 0x8c53959f c90b4345"- Location: [C:\tempdir\node_modules\degenerator\package.json.x2anylock]- [targetUID: 00000000-00004700] "stats.js.map.x2anylock" has type "DOS executable (COM) start instruction 0xb8b65555 03de1286"- Location: [C:\tempdir\node_modules\mongodb\lib\operations\stats.js.map.x2anylock]- [targetUID: 00000000-00004700] "package.json.x2anylock" has type "DOS executable (COM) start instruction 0x8c614b3e 98c7daaa"- [targetUID: 00000000-00004700] "list_search_indexes_cursor.ts.x2anylock" has type "DOS executable (COM) start instruction 0xb8f9395a 522ea849"- Location: [C:\tempdir\node_modules\mongodb\src\cursor\list_search_indexes_cursor.ts.x2anylock]- [targetUID: 00000000-00004700] "adler32.js.x2anylock" has type "DOS executable (COM) start instruction 0xb81cad40 89fb633f"- Location: [C:\tempdir\node_modules\pako\lib\zlib\adler32.js.x2anylock]- [targetUID: 00000000-00004700] "utils.d.ts.x2anylock" has type "DOS executable (COM) start instruction 0x8c9be0b0 588b4f28"- [targetUID: 00000000-00004700] "rcd-openbsd.tpl.x2anylock" has type "DOS executable (COM) start instruction 0xb800b918 2c2f7f33"- Location: [C:\tempdir\node_modules\pm2\lib\templates\init-scripts\rcd-openbsd.tpl.x2anylock]- [targetUID: 00000000-00004700] "forEach.js.x2anylock" has type "DOS executable (COM) start instruction 0xb8dd3394 17dee5b0"- Location: [C:\tempdir\node_modules\lazy\test\forEach.js.x2anylock]- [targetUID: 00000000-00004700] "flattenDeep.js.x2anylock" has type "DOS executable (COM) start instruction 0x8ccd3b56 8a2ea598"- Location: [C:\tempdir\node_modules\lodash\flattenDeep.js.x2anylock]- [targetUID: 00000000-00004700] "FUNDING.yml.x2anylock" has type "DOS executable (COM) start instruction 0x8ce64e88 42c8d27d"- Location: [C:\tempdir\node_modules\es-errors\.github\FUNDING.yml.x2anylock]- [targetUID: 00000000-00004700] "bower.json.x2anylock" has type "DOS executable (COM) start instruction 0xb8ebbb86 4bd378ac"- Location: [C:\tempdir\node_modules\fclone\bower.json.x2anylock]- [targetUID: 00000000-00004700] "isUndefined.js.x2anylock" has type "DOS executable (COM) start instruction 0x8c200fbe 2ae38a3f"- Location: [C:\tempdir\node_modules\lodash\isUndefined.js.x2anylock]- [targetUID: 00000000-00004700] "_asciiWords.js.x2anylock" has type "DOS executable (COM) start instruction 0x8c92276f da38ddbe"- Location: [C:\tempdir\node_modules\lodash\_asciiWords.js.x2anylock]- [targetUID: 00000000-00004700] "mkdirp.x2anylock" has type "DOS executable (COM) start instruction 0xeb178808 9c6f0918"- Location: [C:\tempdir\node_modules\.bin\mkdirp.x2anylock]- [targetUID: 00000000-00004700] "amd64_microsoft-windows-comdlg32.resources_31bf3856ad364e35_10.0.17134.1_fr-fr_72f98d75cc1156cd.manifest.x2anylock" has type "DOS executable (COM) start instruction 0xeb72096f 3bdd3dac"- Location: [C:\found.000\dir0002.chk\amd64_microsoft-windows-comdlg32.resources_31bf3856ad364e35_10.0.17134.1_fr-fr_72f98d75cc1156cd.manifest.x2anylock]- [targetUID: 00000000-00004700] "weekdayRange.d.ts.map.x2anylock" has type "DOS executable (COM) start instruction 0x8c79aa14 77e107ed"- Location: [C:\tempdir\node_modules\pac-resolver\dist\weekdayRange.d.ts.map.x2anylock]- [targetUID: 00000000-00004700] "cleanPositionalOperators.js.x2anylock" has type "DOS executable (COM) start instruction 0xb83b09d9 3ac20f0c"- Location: [C:\tempdir\node_modules\mongoose\lib\helpers\schema\cleanPositionalOperators.js.x2anylock]- [targetUID: 00000000-00004700] "getIterator.js.x2anylock" has type "DOS executable (COM) start instruction 0x8ccc58cc ce04de4c"- Location: [C:\tempdir\node_modules\@pm2\js-api\node_modules\async\internal\getIterator.js.x2anylock]- [targetUID: 00000000-00004700] "oobe-button-template.html.x2anylock" has type "DOS executable (COM) start instruction 0xe997005a c0fcb8ca"- Location: [C:\found.000\dir0003.chk\oobe-button-template.html.x2anylock]- [targetUID: 00000000-00004700] "package.json.x2anylock" has type "DOS executable (COM) start instruction 0xb8092e91 eaaeb4b8"- [targetUID: 00000000-00004700] "bower.json.x2anylock" has type "DOS executable (COM) start instruction 0x8ccd8b1f e378359b"- Location: [C:\tempdir\node_modules\@pm2\js-api\node_modules\async\bower.json.x2anylock]- [targetUID: 00000000-00004700] "strLeftBack.js.x2anylock" has type "DOS executable (COM) start instruction 0x8cfa736e 825e71b6"- [targetUID: 00000000-00004700] "example.html.x2anylock" has type "DOS executable (COM) start instruction 0xb8db759a 1ffae46a"- Location: [C:\tempdir\node_modules\jsbn\example.html.x2anylock]- [targetUID: 00000000-00004700] "_Set.js.x2anylock" has type "DOS executable (COM) start instruction 0xb80c1273 bd5dc435"- Location: [C:\tempdir\node_modules\lodash\_Set.js.x2anylock]- [targetUID: 00000000-00004700] "chop.js.x2anylock" has type "DOS executable (COM) start instruction 0xb8d894f7 76739f66"- [targetUID: 00000000-00004700] "str.js.x2anylock" has type "DOS executable (COM) start instruction 0xb821b8b6 50b28ca3"- Location: [C:\tempdir\node_modules\pm2\node_modules\js-yaml\lib\type\str.js.x2anylock]- [targetUID: 00000000-00004700] "template.js.x2anylock" has type "DOS executable (COM) start instruction 0xb856378f b55569a5"- Location: [C:\tempdir\node_modules\lodash\fp\template.js.x2anylock]- [targetUID: 00000000-00004700] "flow.js.x2anylock" has type "DOS executable (COM) start instruction 0xb80a1758 b6f06947"- Location: [C:\tempdir\node_modules\lodash\fp\flow.js.x2anylock]- [targetUID: 00000000-00004700] "has.js.x2anylock" has type "DOS executable (COM) start instruction 0x8cc0fdca a480827c"- Location: [C:\tempdir\node_modules\lodash\fp\has.js.x2anylock]- [targetUID: 00000000-00004700] "lte.js.x2anylock" has type "DOS executable (COM) start instruction 0x8c3910db cb404f0e"- Location: [C:\tempdir\node_modules\@pm2\agent\node_modules\semver\functions\lte.js.x2anylock]- [targetUID: 00000000-00004700] "pm2-runtime.x2anylock" has type "DOS executable (COM) start instruction 0xeb419a39 7f1591d2"- Location: [C:\tempdir\node_modules\pm2\bin\pm2-runtime.x2anylock]- [targetUID: 00000000-00004700] "allPass.js.x2anylock" has type "DOS executable (COM) start instruction 0xeb4f2290 f9ba23eb"- Location: [C:\tempdir\node_modules\lodash\fp\allPass.js.x2anylock]- [targetUID: 00000000-00004700]44:T581,"encrypt.exe" called "EnumServicesStatusExW" with parameters {"hSCManager": "2ea9678" "dwServiceType": "48" "dwServiceState": "1"} "encrypt.exe" called "EnumServicesStatusExW" with parameters {"hSCManager": "2ea9880" "dwServiceType": "48" "dwServiceState": "1"} "encrypt.exe" called "EnumServicesStatusExW" with parameters {"hSCManager": "2ea96a0" "dwServiceType": "48" "dwServiceState": "1"} "encrypt.exe" called "EnumServicesStatusExW" with parameters {"hSCManager": "2e853e0" "dwServiceType": "48" "dwServiceState": "1"} "encrypt.exe" called "EnumServicesStatusExW" (UID: 00000000-00004700) "encrypt.exe" called "EnumServicesStatusExW" with parameters {"hSCManager": "2e854f8" "dwServiceType": "48" "dwServiceState": "1"} "encrypt.exe" called "EnumServicesStatusExW" with parameters {"hSCManager": "2ea91f0" "dwServiceType": "48" "dwServiceState": "1"} "encrypt.exe" called "EnumServicesStatusExW" with parameters {"hSCManager": "2e854a8" "dwServiceType": "48" "dwServiceState": "1"} "encrypt.exe" called "EnumServicesStatusExW" with parameters {"hSCManager": "2ea91a0" "dwServiceType": "48" "dwServiceState": "1"} "encrypt.exe" called "EnumServicesStatusExW" with parameters {"hSCManager": "2ea9470" "dwServiceType": "48" "dwServiceState": "1"} "encrypt.exe" called "EnumServicesStatusExW" with parameters {"hSCManager": "2ea9380" "dwServiceType": "48" "dwServiceState": "1"}45:T800,"encrypt.exe" called "GetDriveTypeW" with parameter Q:\ (UID: 00000000-00004700) "encrypt.exe" called "GetDriveTypeW" with parameter W:\ (UID: 00000000-00004700) "encrypt.exe" called "GetDriveTypeW" with parameter E:\ (UID: 00000000-00004700) "encrypt.exe" called "GetDriveTypeW" with parameter R:\ (UID: 00000000-00004700) "encrypt.exe" called "GetDriveTypeW" with parameter T:\ (UID: 00000000-00004700) "encrypt.exe" called "GetDriveTypeW" with parameter Y:\ (UID: 00000000-00004700) "encrypt.exe" called "GetDriveTypeW" with parameter U:\ (UID: 00000000-00004700) "encrypt.exe" called "GetDriveTypeW" with parameter I:\ (UID: 00000000-00004700) "encrypt.exe" called "GetDriveTypeW" with parameter O:\ (UID: 00000000-00004700) "encrypt.exe" called "GetDriveTypeW" with parameter P:\ (UID: 00000000-00004700) "encrypt.exe" called "GetDriveTypeW" with parameter A:\ (UID: 00000000-00004700) "encrypt.exe" called "GetDriveTypeW" with parameter S:\ (UID: 00000000-00004700) "encrypt.exe" called "GetDriveTypeW" with parameter D:\ (UID: 00000000-00004700) "encrypt.exe" called "GetDriveTypeW" with parameter F:\ (UID: 00000000-00004700) "encrypt.exe" called "GetDriveTypeW" with parameter G:\ (UID: 00000000-00004700) "encrypt.exe" called "GetDriveTypeW" with parameter H:\ (UID: 00000000-00004700) "encrypt.exe" called "GetDriveTypeW" with parameter J:\ (UID: 00000000-00004700) "encrypt.exe" called "GetDriveTypeW" with parameter K:\ (UID: 00000000-00004700) "encrypt.exe" called "GetDriveTypeW" with parameter L:\ (UID: 00000000-00004700) "encrypt.exe" called "GetDriveTypeW" with parameter Z:\ (UID: 00000000-00004700) "encrypt.exe" called "GetDriveTypeW" with parameter X:\ (UID: 00000000-00004700) "encrypt.exe" called "GetDriveTypeW" with parameter C:\ (UID: 00000000-00004700) "encrypt.exe" called "GetDriveTypeW" with parameter V:\ (UID: 00000000-00004700) "encrypt.exe" called "GetDriveTypeW" with parameter B:\ (UID: 00000000-00004700) "encrypt.exe" called "GetDriveTypeW" with parameter N:\ (UID: 00000000-00004700)46:T1023,"encrypt.exe" opened "C:\$WINDOWS.~BT\Sources\replacementmanifests\contentdeliverymanager.utilities-replacement.man" with delete access "encrypt.exe" opened "C:\$WINDOWS.~BT\Sources\replacementmanifests\devicedirectory-devicedirectoryclient-desktop-replacement.man" with delete access "encrypt.exe" opened "C:\$WINDOWS.~BT\Sources\replacementmanifests\gpbase-replacement.man" with delete access "encrypt.exe" opened "C:\$WINDOWS.~BT\Sources\replacementmanifests\microsoft-windows-advertisingid-replacement.man" with delete access "encrypt.exe" opened "C:\$WINDOWS.~BT\Sources\replacementmanifests\microsoft-windows-geolocation-replacement.man" with delete access "encrypt.exe" opened "C:\$WINDOWS.~BT\Sources\replacementmanifests\microsoft-windows-ie-internetexplorer-repl-2.man" with delete access "encrypt.exe" opened "C:\$WINDOWS.~BT\Sources\replacementmanifests\onecore_speechcommon-rep.man" with delete access "encrypt.exe" opened "C:\found.000\dir0001.chk\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_af-za_75594e685e635a3e\syncres.dll.mui" with delete access "encrypt.exe" opened "C:\found.000\dir0001.chk\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_lb-lu_80b14902c4ca1fab\syncres.dll.mui" with delete access "encrypt.exe" opened "C:\found.000\dir0001.chk\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_mi-nz_25bb53edb6274a60\syncres.dll.mui" with delete access "encrypt.exe" opened "C:\found.000\dir0001.chk\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_lo-la_77462a6ecae7305c.manifest" with delete access "encrypt.exe" opened "C:\found.000\dir0001.chk\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_lt-lt_7f7d233cc5a51216.manifest" with delete access "encrypt.exe" opened "C:\found.000\dir0001.chk\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_lv-lv_804a91c0c5235306.manifest" with delete access "encrypt.exe" opened "C:\found.000\dir0001.chk\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_mi-nz_25bb53edb6274a60.manifest" with delete access "encrypt.exe" opened "C:\found.000\dir0001.chk\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_mk-mk_1efedf2bba7e24b8.manifest" with delete access "encrypt.exe" opened "C:\found.000\dir0001.chk\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_ml-in_2048ffe9b9aae7ba.manifest" with delete access "encrypt.exe" opened "C:\found.000\dir0001.chk\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_mn-mn_203304f1b9bb8620.manifest" with delete access "encrypt.exe" opened "C:\found.000\dir0001.chk\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_mr-in_20082061b9db8f60.manifest" with delete access "encrypt.exe" opened "C:\found.000\dir0001.chk\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_ms-my_24ddc44fb6c143a2.manifest" with delete access "encrypt.exe" opened "C:\found.000\dir0001.chk\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_mt-mt_229b507db83648f0.manifest" with delete access "encrypt.exe" opened "C:\found.000\dir0001.chk\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_nb-no_c4447870aba27235.manifest" with delete access "encrypt.exe" opened "C:\found.000\dir0001.chk\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_ne-np_c4958fdaab71ca8f.manifest" with delete access "encrypt.exe" opened "C:\found.000\dir0001.chk\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_nl-nl_c283c3aeacce7c0a.manifest" with delete access "encrypt.exe" opened "C:\found.000\dir0001.chk\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_nso-za_30759cdc1af7521b.manifest" with delete access "encrypt.exe" opened "C:\found.000\dir0001.chk\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_pa-..-pk_a75d382b17f9fbbf.manifest" with delete access47:T12a4,"source-map.debug.js.x2anylock" has type "DOS executable (COM) start instruction 0x8c9c7a73 ee3b2db1"- [targetUID: 00000000-00004700] "SFPATWT.INF.x2anylock" has type "DOS executable (COM) start instruction 0x8c456bf6 e5b6f6d2"- Location: [C:\$WINDOWS.~BT\Sources\SFPATWT.INF.x2anylock]- [targetUID: 00000000-00004700] "index.d.ts.x2anylock" has type "DOS executable (COM) start instruction 0x8c49d83e cce89f28"- Location: [C:\tempdir\node_modules\mongoose\types\index.d.ts.x2anylock]- [targetUID: 00000000-00004700] "README.md.x2anylock" has type "DOS executable (COM) start instruction 0xb8d04aae 6f27a800"- [targetUID: 00000000-00004700] "update.ts.x2anylock" has type "DOS executable (COM) start instruction 0xb8e80604 96fabed2"- Location: [C:\tempdir\node_modules\mongodb\src\operations\update.ts.x2anylock]- [targetUID: 00000000-00004700] "README.md.x2anylock" has type "DOS executable (COM) start instruction 0xb8b38b88 91fd821e"- Location: [C:\tempdir\node_modules\ansi-colors\README.md.x2anylock]- [targetUID: 00000000-00004700] "README.md.x2anylock" has type "DOS executable (COM) start instruction 0xb8053389 1588d401"- Location: [C:\tempdir\node_modules\kareem\README.md.x2anylock]- [targetUID: 00000000-00004700] "join.js.x2anylock" has type "DOS executable (COM) maybe with interrupt 22h start instruction 0x8c7397a5 b18ae6f8"- Location: [C:\tempdir\node_modules\bluebird\js\release\join.js.x2anylock]- [targetUID: 00000000-00004700] "pack-codec.js.x2anylock" has type "DOS executable (COM) start instruction 0xeb152696 bfada70a"- Location: [C:\tempdir\node_modules\js-git\lib\pack-codec.js.x2anylock]- [targetUID: 00000000-00004700] "layout.js.x2anylock" has type "DOS executable (COM) start instruction 0xb8fc799c d6fa3e4f"- Location: [C:\tempdir\node_modules\blessed\lib\widgets\layout.js.x2anylock]- [targetUID: 00000000-00004700] "internal.js.x2anylock" has type "DOS executable (COM) start instruction 0xeb24a73e f90dc799"- Location: [C:\tempdir\node_modules\iconv-lite\encodings\internal.js.x2anylock]- [targetUID: 00000000-00004700] "process.js.x2anylock" has type "DOS executable (COM) start instruction 0x8c209dac 8427ca67"- Location: [C:\tempdir\node_modules\karma\lib\launchers\process.js.x2anylock]- [targetUID: 00000000-00004700] "eventemitter2.d.ts.x2anylock" has type "MS-DOS executable"- Location: [C:\tempdir\node_modules\@pm2\js-api\node_modules\eventemitter2\eventemitter2.d.ts.x2anylock]- [targetUID: 00000000-00004700] "index.js.x2anylock" has type "DOS executable (COM) maybe with interrupt 22h start instruction 0x8ce6d394 b4cee2a1"- Location: [C:\tempdir\node_modules\content-type\index.js.x2anylock]- [targetUID: 00000000-00004700] "web-outgoing.js.x2anylock" has type "DOS executable (COM) start instruction 0xb85ab967 46834b3e"- Location: [C:\tempdir\node_modules\http-proxy\lib\http-proxy\passes\web-outgoing.js.x2anylock]- [targetUID: 00000000-00004700] "ast.js.x2anylock" has type "DOS executable (COM) start instruction 0x8c4981e2 f2cd7604"- Location: [C:\tempdir\node_modules\esutils\lib\ast.js.x2anylock]- [targetUID: 00000000-00004700] "node.js.x2anylock" has type "DOS executable (COM) start instruction 0xeb3f389b f9ee5fb3"- Location: [C:\tempdir\node_modules\engine.io\node_modules\debug\src\node.js.x2anylock]- [targetUID: 00000000-00004700] "ws-incoming.js.x2anylock" has type "DOS executable (COM) start instruction 0xb84efd65 19b93642"- Location: [C:\tempdir\node_modules\http-proxy\lib\http-proxy\passes\ws-incoming.js.x2anylock]- [targetUID: 00000000-00004700] "tg.js.x2anylock" has type "DOS executable (COM) start instruction 0xeb60e09b 9dd12d1f"- Location: [C:\tempdir\node_modules\moment\locale\tg.js.x2anylock]- [targetUID: 00000000-00004700] "es-us.js.x2anylock" has type "DOS executable (COM) start instruction 0xeb7b9314 f326b662"- Location: [C:\tempdir\node_modules\moment\locale\es-us.js.x2anylock]- [targetUID: 00000000-00004700] "compile.js.x2anylock" has type "DOS executable (COM) maybe with interrupt 22h start instruction 0xb8f76dca 8e7d1ace"- Location: [C:\tempdir\node_modules\degenerator\dist\compile.js.x2anylock]- [targetUID: 00000000-00004700] "CHANGELOG.md.x2anylock" has type "DOS executable (COM) start instruction 0x8c5dcc89 89d2ac49"- [targetUID: 00000000-00004700] "write_concern.js.x2anylock" has type "DOS executable (COM) start instruction 0xb840d3c2 35561760"- Location: [C:\tempdir\node_modules\mongodb\lib\write_concern.js.x2anylock]- [targetUID: 00000000-00004700] "package.json.x2anylock" has type "DOS executable (COM) start instruction 0xb86a67ed b52d8ed5"- [targetUID: 00000000-00004700] "bg.js.x2anylock" has type "MS-DOS executable MZ for MS-DOS"- Location: [C:\tempdir\node_modules\moment\src\locale\bg.js.x2anylock]- [targetUID: 00000000-00004700]48:T10cfc,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:Tad8,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4a:T930,NyR8Wl1vcDE8LHJuODxhLEFeOVdrUXlCP1cvQkRLUjlDbVwiKyk6XUBvfiJBbTUtY08veU0uUDwvVV4uVzU6YUFucEVJXE03O3lsZSY7UkFEWiUoUFwhS3tEW2xtcFNCZkJOOXAhJlM4cVBqQlxeXDhvPFg0L2FONXM4PjcwdD9QJyc+SmA0bV81ZzNoSW1jZyd3PlxlMWpVMCpPVHgkKGdyaVAhZT5eLHR9XVRrNSI3KSpReGVsclxmRlx1WyAtJ3ZCbVUmZ2U8Q31dNUdEaDFXb1UsIncza3xlYzJpd2N5TlwjIV0wdjRFN3YrYFtoLEFHN2gjJ11xSVQnbGAtJ1VvPylvInRDT05bdS55blFBZncyQ2lDN1csZSokQzgyJCR8JXxZUXNdRGUjbDBHQmFHVUF4KU4ubS58RFVcVz0lPD0hIzpqQColVydkXmFAOiJgPG1DJlRXV34xWWhHXG9WYjkiXkltSl4+NGFJIEwxNWI1ICxmN1wxaz9uJyZzKCQrNjFiY0hSXSUxTW5hQEQkKUBHQj9wNWgyMGpiV3BTcS8nS10men1Ma3wjXVVRVDV4bXZIYl8nZTp+cSlyaCtFUF4re1khbCgyZTdBPnowNG5NOXthTStoO10hKy1YViBjbE40fV4iVWhUcT5uXiNHJmRMaScxTGBFMSg3N3dhXXVZZStzTXIkdnR4Vl56LXtuRHI0ZiZqKXtLejsyT0U4N1BCYlFtPGR2UWV5SDg/WnIlX1g1blJpJk17az8/a35UID4lTTg1TFNfKWojMXxfaU5RNXprcSlJMSZJJSFvQjBNJ2x8P2NwMjs8SHheK1lZNUlkZl83bElpYHxmcjsvKUBaPFosQEthd0ZuIG5TVispeloiQnZoTjBAcmZXNEdJVj9mezQjeDtDd2t5NXtNYlN3eEZ2L29MNU1XNTpYejdLVVxjIWpzQDNkZSlzc25SZ3p1KzEwZV4yWXBHLWhHM2M2Olw2c140dnogPC83QjNJIFRFZF1nI3UtTGRjR0lHVjB9djxBbmgtVXBtRS5zJFlBXi5EQS9ufDxBNUVqd0JzeXl0VWNxWzVRRnssRVYpeiQlakA+YHV8aD4iekhgaDIhPWQ8ZSxlfHBHOlVSNi99dTxzb0hMMiBML1pnSCd6J1wsQiU8XzhDXWw9S2oyNXcmbi8qXiJtPyUoekYhSU12XiorUnFkPTt4UmtmfDZhaX1CWnAwPCozRk4nSSwlQFU/fWlycDtVKHFiSVolWVleMl9YQlkmbS4pL15sRTJgJnlNdEYtJCgufGF3VlBQb2M7NSRMYnE7PEZCWlN4TU86TjZmTD17NjJhY0diaVoofGdkYERrM11lRXxvM3A1Z3AnfXJqOWgrezdqPU0xb2pzYl4kW1UyUCxeX1NwQ3c4aTRLaEk+Z1FwdTd7XWY2WWovPyU6fSIjZmhRJUVcRyFnSDxJbSNKbC1udTNLOiZYRWRPdENIRzhoQkNcbjM3P0wzWE1dKlgwWEBIN1EkaTRjNHkla3lCPW1Id1huaDZNVnRFdGVeI1tRVF0neStJJn4ycH4oRSlgbSItKG09R1BCZnExYV9hYCBxXnRULXtWPzM3JXMlY2txJXxFQjlSbC1Za14qOlw8OEA+IWg7fVhkcyY0cGo8XENJWzV9JUFnXFl2aDs6V1ZNeDNDXjI+PmJ+XjteSGFEfVQgVFVMWmpGeWgvZEpIT1RyKSpMLml6ZVB3SEomTl1kbmtlaXM3dT4gaVVKPjRmNyZCSCMmd1I+OkomeDlfYnZVMlkvTFplND41fkYsVERRaTRUeCJ5ai9kJyFlS3o6JiVILSR9NmlxQy1dOGRmJk5+YyUzIkZeOFtnUDMwMiE9KV59LFElOzA2PV9wODZxZyZqNGR4K2pNIXJbSSd9aiJRMXIxT15Xej5EIWhWMyF3bTRFO0FOKSI2dEtpVnk3Y3ktXjZfLXd9JSFfZj80XiBMRn01V3NLOzouM1Y0NHZwcXUoVloqWW1AdlJWa3RlfXdTdCM1TSt4XD9edylEOmFealdjXmVSPEYnPEVHQVt7fCtAVDx7YCNCNm1AbzRyK2tkVEY7XldXRCNHSypdYFhqJi9JUlIic3NTY3lfUW9ed2VETGpJLENOajRVXlR7VGtLKnd2NzY7U2ssZ0Z1IkptUksuJDY5THcwLEdic0ssSDlXKX5gK04oQzhkVC9PZ3RkXEddXmZQPSh+fFFnSC5lIGZrSmtNOidjXH1TLWIhbDp0XComVDYzJkpzWV98c2Q5KWVwezpkN2JcciIxIl03ajIyMGY5YTlmLWE5YTYtNDFiMi04ZGJlLTZlZTBiMDViOGEzMg==4b:T455c,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4c:T434,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:T16a4,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4e:T514,YSViVEBkOEBvYzF1az9QfF0lQXcuTmZgLCN8bmx9aUQxQ2pHOHxgTEVcQy92YnUocFwybVVjLDEoXUx5eXhbcXlPbnZVNlRvLDhrTHJ6Xis+Ji9DO2ApdCdmZ0ByeSYyIip+cTBcfVA0YjtHcUUwPGdCZWxOXzN8QCQ6c1xxQD8tTXNfR0V2WkBhYyo2ZCZvZDkwMkFTdV48RTNTR2tJIyRha04+Qysnaj0zODh2ZD5sWil2Zk16UWYzVTU7PXYlQk8yTjpEN2lnaSVSOHJpfHExVyRlaGw6fjs4WER3OSt8QGRscSQgYjxrdmxpTyc4bTtHaTg+RWdYMEROVTghNnRQVzlZNkopWTFgX3ZweCJfSyMvPDJ6bT9AQ216KT8hY1VENi80UCxOXyhWc2Z9UHNhMVhgal14W0FmfD1IWG0qWlEnPWhxNHtWVDIvdHtZPGlmQ2xOOEJBZl1COk5LLTxiIC1bMj9dLUF5UHtmWW9MflZmMjR1cFh4d1VUUyB4SCdzPjJEfX07bzptJyM/eGUhUmBTbTlOcSNxSTJpPGB5bVUvaFVmd2FURiVOSiMoWkJULDA0KHRybTFxOXUvJlggfm5ISTArTntSITs5TWM/K3lWaCJ2VCV4PUx4Y0txeilFT0c+MS0+PWZ8Tlh3Jyc8XFA/KnEpPipUMGRXUio3QXIlNHpIYnhqLSBXXHZBL2ooPkhiKCxWTDglZ105M0QlaiB1TyJ6ZCJoKXNaIyhfWlchciN7I2t0VTJdKWB1czN1TCosLXopa3g1UUBCSDkxWXhtPk59dkBnenRHVGhkIG5fMSozRndqJF1OcCB5WkRiKmxrVFQ7bDQ4Yn1QLFtWPzdXOmp1LlVcZX50LlFRaD1pXmkzbSVtZzFvS1JPSFljQk8/fCIrYHV0dVtvInQ1OnR0dy1rQSlmbWImPHkmez1ndTcnfXFES2BjfFpAaS5lP1AlbFV8JiUiZ3ooUG1fdzJFM0ZZQn46fWl2Q05gOE9OdWl1dlZAencnJidOJ3wzO1oiKk9gO08vJE9YSFluLXI6ZSlqZ1k4RktTUnVBVTV2WE1DR295dHFaezdTMzc1I1JBU2h+MV9eM3dMeml0diIwT2AjfHFRamwvUGRaI2MtdCRSY2V7ZCVHWntNPlA0QD5JdSc8LCxCYz0kPFxQJylaa18+UzJiNj9zXU5xMzsqNGBqUVxBU31FXUA7OjkwOnlWamduIyY3LTI7S1tYWjdmJW1gKTIyMGY5YTlmLWE5YTYtNDFiMi04ZGJlLTZlZTBiMDViOGEzMg==4f:T470,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:T548,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51:T3158,TnY8JShZOn19aT0jIHIpNEQzdChvMGJte0tTJ2ZPaDZhNnoxRk1yOG4sUDtEJEVRJWFxOG5lfjBVNXZZcWtAZztGOiBCd2MmUyE/KFByRDV7YDMhNidvXUgzfURwY0AwQDRSOGh6P2dmVDgjTGlGfiBTKzU7dkZzdiJqfjw4IyhVOXNvIFFjKnNtUS4oWTZ5XzlcRENqO2g5ckBATTlOUUJsfmJlLCpcTEcqdj9iNUV2VSRVcTQxaSIsOCtebXR3aGQ9JCFwaFNzY1dJSj5dMUZoOl5JKHhGY3M3RSBOUTZPWyw0NExyfUx0bUN0JixlcmJ1Ln15QWg0MnMvPWp0IVNFWFtlT3hMU3MnTjREQ0VLdC40P0JNOEgjdHxIJCR9bE1oVHRgPG5LaC5BTjFrLENlQyBSQWQ3Tk5OQEFtW35qI1AuPlhcRndwZTQqQ111P0FLTGhzYCROTyNLPjJFQENaaHcpaydQM01uLHFpdkR9cVlPNzhtUUwifWcrcj5OKztQYjwgPnUvMXVDVGZiXlJgTG5jS0hQZVxRWlNwXVs7Y3U9UD0+U2MhW3EmUjQuPG9pNERoXk9jIjxPZ3wjUVhpUmZ1MnZeMCVWTXJVJXNfXSs8Z3sgQkI3NVs7N3dhcjJpV2xJcEgkVFRqTydqKndxXGFGZFYpJltTRSBVNnRrbG9YaWhrNU53Kyc2aXx4SG9xZjg/XUI2LnNkNDR+Y3dwZy1sS3habVRkLUUkOigyJnI+XlNCUCw5dUpUJ0pmRi9RZG5QL2tNMiElMDc/cnhrYEpYZiorZ0A5eXQkaUtfJTBCXn1jcW9jIzcvO1huaF47KntiUGQkc0YyVz5aZGZDQzZZMkxPXnBJXmEsPGkjOVglLyVVP0h5OXZDbHV9JHJpUnhQJHpNaS5mM0RmQk8kNVJnMGRAQCtKUDI8SilMejJbdEssPi04cVF1cn1mKz1vN2lqZ251R0oxZE1TKy1je0tlNCVKdSx0NGY/fXF2LSY3eUJvMjp7dUYtelBQZFxJYHtFZU1uLGBKeGc6Q1pDXz06IFIxVEYxSjBfKSUlKX5XPDYhWE5nfnV0NlJmYy93IktgcS1bW3BzLSArdXFfJ2gvJEd1M11QMFpUZEd+fi9XaXU4KHhUdXo9RCYoT2BpXmtDISR+WDhTaFxvT0UqK3NxY3wpajBycjIhPk0maXg6TmUpQUhXWjokTnY0XGR0TSpOK3BAUU05fkw0TFp5fkBZcm9bbGolciYydmVJWmZlR0RNLDlAV1kuImc/QDktSC5XVW0sImVQJiMlMSQhNWEjRSw5YCskQjhidz02b2IweC94X2pLb0dtSWIgSEQ/JE1eV1BFayJLT11AImZ6aE9sbGxZKCF+dXJDUHE5Jnw4OXxYQ0Rib0RXUikoWENpeXVNQH07UEU/VidAQ0VqNHxEcGkzYUwwIkQib2VlVFZYZkEtPHNkVVdvSWJwQkJTJmgvanVPQHA/ZmVYRntBUlhuJ3hvIXwkYkdmO3tDUWxoWjRnVWhFQlxiY11oRmA6UT80MXVtN2tqUXFoYnEpKHBGfXlpISZiTSZHI0BZbWB2Wj5BNTtjMDJwJktrQ214QH08QlRoc0xDaWtbWUUxMWdqW0NOP217a1N7MiFnRUp4c1A4M1NKKX07Rzl8dFcoIXpXbG95ZWB8MXojbTVQZTtHNSNWL0VQV141VF1RbHkmfE94fSZoIi5AbyJHV1tgZnNmISBIOktuT3t2YHd8USkvQUhEKkV+MEwoYUVtXC5IfmlhIitQdncnZ2FlZUNzQXV3akFKfjstRWw0YDlWY25WQHglRzxMI1duNyZdeVFFZkZwMGEtOXIuTHIyJCF9WHpGbD1CViIwdmVhcTQrfS0sQjdLOTFWamB1bFkoQTo0eUY2KH42QSN2cVs4XDIpfiNnP1RCfUFuPzBKUXUyK1N1dGFFQEVFYDUuV0ItPjEpemVtT0JWNWc1aChVPnlkWXJ7XmhXQXE3Y3xUIXtGeD1xd3ZGSDJ1ZDVdfDkvSjJfLklSQ25EInNRVEN9SVloZjtqO3Yze2ZbOERyezQldldNY1ZBL1xEQihtLE5VK2VwIjcsWVIoXHEkJE1kKj80W2RjLHAhWCgjT2xENWpEMXotLk03fGVqWlQ0T346MCZFOS1sJFROMz5SKytLdXAtaV1YLV1uWUpwMTo/Pz1QcUVILFZXQTNuNltuPk57dmJTJTp5bl91QEZkVCQwVDRee0h6WjsiXSxUR2tndTN5SSNecSlVPXA7PjFHe1FqL1MmMSRbd3dReVw+UTZCTFpEdnMuWCkqeGxbfHskN3dQXSM6P0VdTWE8ZSU8clRJeE4gdDdQPHplIE9cKDknVkBbUFBvMCMlbmFmQTgsRitSSyBPbyBZa2lYZiRvcmNAeVNfcWlfYkZHQiZGSjczYFR1UmRCdX1gY2NIaEt+IHlkLXdHd05sQmQ7clBaX15mMlQpenRab3w2dXRSaHxpfVV7L3QtOU5RM1JQIXkhXWx5Wl8pZkExWV5IMDRRNHRuRWVJbl95Jy92PnpjZl4sV1s9cm03MS5LamEsQXlCK3IqXlIreSVfO1Q9SmFwP0tQPCAtbDF6RycufVE1N3BCfjEuclUiXGpAPSRRJ3crfmJ3emBsLHRbfTVVWChwQEJzT3k3KkA9aXI1NTI0cl5CLWU0cmcmNz4/Oil4UlQnfks7Y2AyXHQra3t+Zit6VT0hYXMtMlhlTn5OTCMoYTJmfTBIWVQtW3tnX3lgRjYzNm5jSnZPeT1kby15VW5wbH1kSjBKQzBxXmlAImcgMkJOOUZZfGdSME4yeilmQntIPXNRJGdWIFpbXzlyTGdme3MwWChZUygjR04pb0RmRngwRXJ6Pzw7N2giLmd0bkQqT3p4fmosVDctUkBwLFxqRzkiLWk4NWtzUGokbUZNTXJhZ3VfZSI0OSJkSSJ0fG4xMi0uaXxvb2UgKE86enluKCs+NTNifDAvSlZuRGshPitiSGpaSkYlXioxdmlBYzEtJiVSdVx6a0duLDtxKUc+JDYkSmY/NEB+bTF5a3tzck5SamVaQiZifj9oJ0psNyAsSC9taU42QDg2flhUXik7IGBhMCEqUCJSLVpHYl9ZT1tXVENfIHptZyQ/UVgycG07SlM9cmFJIStaMy1ye3tGKF1JPEF6P35XIypKJigkQnhcQTNJTSA5b1hdM1oqbW5fMlIsT1JreGk1Kl5IOzFMPkpnP2grYmFmUUM2OHMvTk5TO2JZPlgqaSAwKSY/XzlmZEBKQz1fak5JemNGO3NfeWwxIHp7PiF8ZyB1VFBNYjJqZGVXJGRaSlFELDF2QklxTW07SE01e2Igbmp5enU2MithWUxbUk5NdkJxYT4uYi43UFZwPVIkamRgN21XKHtCMCppP3EhN3lwJ11NIXB9RXpIYD1NV1xnPz0xMWllXm1rcWxHendBfSkhJ08iOXAnImJQdT4iTSc4ckRlfW4vQlYiYTc6czonclBkRUQpREM9QExxWFtLVSovNz1nTGtDeUU8cX59WCwjS2UyPy97d30zL3ZiMmNFNE9Nc3cvWmR0Pz01WltjY3JfNzIqIUQgajopRjwtXFZ0JjpWIW0sNSMhdmxwKj9qZTVMWTVTangqRjQ+M21fPS8+WHpAWiogZ1dOaG1dQ1ZTWChHPmJyJ3tzdiVQLEkhdlJHQW8hKVg9dFU9cWdMdVJtVndCal4sZ2QiUjZwJGVqITFzcjR9TEY8YGB8Q3E4bypIc1pVIWM9QDR7dTEtUHFFRC4jN1skRX0kSl8udkldQiskZy5yM2YgaEEnXm8tc3dOckVuTC4xID90cT9wdT4obCg6clNfP087KTdxND9qSFJ1IkQkMiclfXQkeHU8UzJzfEtlemJVJntjPEctRFUiMm1ZMCY7LS9jTVRvLjU/K1MyP3BJfW5iLzQheDwxRFF8ZGg4Jm9MdHNlKmJQaVkrbyRnNH5ETFFGe0hKNlxcJCI7KG9KNHpLRm0lKm17d1dCR0BARFZZZzhIZnQsfEJlXkkpdGclUzpZZGcvVTBDeWwxPkRYa1U1YXBGNztvayJ2dSlLOSoiT2p4Mmx4dXJWOXVgcCRPQHF8LXZCUFJnR0RrdmoiOSh6N3FOUm4hP1dcWjx9bXk5Oz4+OyRBJl5DY2JIbCJJdDROMUFAaDJWY1owZiZwWyRlWCE2XFUmUis0XHhaJSQhJzBqTHBsaD98SEkmIk5qMl1JUSY8NXFMNyxncF9+eWMtYCRwSl9XNVldeSB8a2owRX5dbGtlNGB+S1FHeSQlQ3B9dWhkcCZMX0lPWnV8dDBqLH1Xc0wlYnBMUGFOWUdZPGxvI18lUy5NdF9kQkBoZCg5VDtyOE1vMy5XZDNkd3MwVytwIG1xVVg1aml0OXlCezZBanYkRG40XyZ2QHYyaClCQm1HPEVTJWcqNy5+KyMuRDhZRUV1cTtlTCkzXXZ5ezRseWB9QUlIXXFBcm9daHN+d2s8PkdALWtMdidRWiBMM3VIOzVrT00hazdyPz9pYndXK3RRKkRLYD55fV5DWWdfJWUrbiY9Lnc1JGYgN34iMVc1ODVgQ2d7ODBkQCZjYHFdW2lqWVhIVHU9b3E/dn18MGF4eFVhSj1pMz98Wn5+N2R+WF5uQWY/KnxEUiM8JXcpZ3s7Rm0weCd+b3V+MU06L2tXNjxXNX01aF5NXHkla0lDTytgcnA7JSF5OkloSys2a002Vy1wOTU7PUpHZVpcVkshP0g5MkoodH1gJVVPLDpAaiA/JWtKbiloXyF2N11rN2lmeS9qSmt3PWh4eSUhVisvWCRHPzMhR05XeEN7Yk1IRW5cYClZLGdYZi9NTn5aSldbT0RrLlwqRiZKTTh3WCduVE55Q3RlZDskfCZEQyx6eF0icXZAZzElb1hKRHpfYUBNYktTMiAufjFVeEtUIigldmZIL1pccnNOPnFLMiZZaXYvOyNVWih8QDhbOGV1Q1RgOjdRK155V0ZUbklbInoqYVRUYl97fFU+QjVwd2EjIV1jRSNfSW9aZSk5c2B3SU9dSF9zZnxHaHBEbURhZCIrMzZ2R1YrJ0hPOENUd105PiBeWUomJGNHIDFOampFQmpRMil9ekovO21BRDNfbGxQVDdTYklqeGRHNG1ISjo2Sj5XfTchQi5FZlQmN0Y+fTpQMC1GaDBYWjZcfnB7eE9zVFlRZSQocSdKRz09JlJ8Jmt7d0JAQkNoZnlaMkA/c2k9YGo/J1cuSFl8SHw0Wl1SRFA+Nkd3ID9LXG13Z10pNT94aD90SDJ9YyJtTVwoJCdEe3YjeEggQyFDZWB8d2hkJUpJe2QkT1klMV4+Tz43SV1+YXdweTUnNE5yXmtjZEgoeyM2SixPVihoLSdDMzRBUjBUfXl9QyR4MnN6QGorLlt3OjRGLUBdIEtFWnNhJ35GNyQuTUEjRXcofj1ScTIxREJ1ZCxnc2I/blNkSGNZYVt9TURtI0J6ZShAekore1xASl9Sb0MvQ1xeZUBpeUs7cjRWaDtpXWtAZ2wrQCJkdCNNcEF5azFBVl5TPVl7e1MkQClLNzJacTUjVDFIJXYlKk1ZSlZgTFEvZyJHbzg/LGdyYydQdlUkRnVLdS0zdkt7V1M8OyN7M2F2PENETSI/V1YwQS82dUEvXjhqP3t+XjZbY3t0OS5YNWs5cEhReXQhbXhRMCUpaWthMXpQRShdKXAlb008a2pXUXNeWnRvXHlfPHNEamogZEg2YH1RfmNJejV1Pmx3YTV6IiBOXyNDPzxneHtBU0lmS2xlTEkufVtINGw6djF8KWdBVz08UUVYUXFEO11UX3pPODtxM1E4TEAvOSsxXW9DdFtse0pQaldBVy1VTC1weyBFL0s1Xz1ANyZ2aSpHQV0hIltVX2ohXW5mclxPP3FnVmZcam5fTXJPSyN3cG9FaWhkUVIzbGYscWI9XV45Nl5QOCRpdn5GVVlUZVs9QzpGXGwqflEzJHIjRG9DMyQnQCNwX3QwUjMuWDQxQCZLLFZtVkZdbXUjaTU1USQuSTczLmg+Zy8/RGMufHhifDNQNno/ZFd8Ojl5ei4gcT4jZUE4JVFMW3cyI3VxX0IyZHgkOSJfYz5bRmRHPFI0dGdVI3J9ZVpaRUFiK1QoRktuZl46fEouTV91QkFbOU9bSFBxdTZRZjcjJGVBdVN6aF1mM3MwOj9kXTZUTiN2QV5lKignUEIyMWcqZTtYOnh5MCIzZnNwYGdzcT1NTmEqVSROfXMtSDpNRFM3SXlEYkhBIjU8RlUyI1tgT0wxJzA2Jit0MFcyKVREJWFRWG5UKEFfKnJUYERhcVV+eH1fSllmPDolUjdgd2hLLHk/IkY5YVhWPE9CZDBje3l2OilhNStMdig4ckc0aWg4Z2E4dEo+fTEgeS0+OUN9XlVKXSs9YGk/QG55d0NfZU9raj5KQyB8Rls8OVNyfmckaTc2Ki90Z1BdTlRkMFIhRnc8JFBNa3tYUDRQWklBK0pySTBwYW9naWd0SHNoMitHRX5QVnxSY0IqQS9RTzNtLTtFR2k6XEIsVjo3eSByclhCRyooa291YW1yNiljMWtpIyo2fGBFfTlLIXYoLjpmOWU9aFNyYzxrLEtzKSRqY2MpMHouJm9pQlcuVC02RX5ZNXx6MX14KkZ9QDs7JydKQjhHO3whZ3AuVm41Jn1sLnomQUpNOiFeZz59Imp+RyhnOnJHIlNFPCA4dnVaLE88OXtOPiMkb2h1WVw5UiNWJDZzUScqTEE5ISFPbGUoXnNDKlYkVyV6cm1NfG0uKT41U3A4S3RkTT1kInBgTFwsWXQpfj8+Yj9MPC53I15SMDBfcllwLzA4Z3VCYTNSJCA8OHNcczU4XEYqKipYK3xaL0NmIyh1fDA5R1F1ajRTI10obn48RSs7XXFQN0VGfHBxRkhDIjN2bk8wIFVkYCNLRzlvLk47TSs1NW51ZzZmX2dcPS5ZKUBqdSEhTkwoVzIrdzhETWJ+NzciICo2YzpiRWhJUmtXSWIlJSVuJDRQQjlbQG0zYnJ7bjN7fDM7WWZzIz1JJkYiL31VNVc4dHlxVlVJfio1RT0mLERaNHx7fHFLdSZLIiROflJ5RDVvL3B2bDple3lxOG1ObDF8O04uJTNkdDtDe0QzNHRYJkx6dlZgJlwhYFZ6JT5CTXJTLE89emNyfWpKTyF9Om01eTFpTFFfSE9QdjJyUCd0RFo+I296QTV1JDE+QDFTKztkUy50RyE8ImRsckl8cVt3OlplLENdQlZvLG8lTXNXKnZuRXpmS3kqamhdK3d3UHtCMTJvKThrOzhseXJOZys2T3VyIGd3Wkl7c29eUUtMSCotVktodzUhKlpgPm5tIV0mM0Umd30sallMUioxMXNuSCZlYjBga2Myan1FJFA6V2tqXDFsIWoxRjRcfjkgSSxyIzAjU0YqLih9ZiJTdSArTTVJPFM9b2NQb2xIV35aaV9OKDFwKyVzc2lofFRIa1M1Wil9W2YlWCxraFc2cHk9OmpnfUxqRmBKMlk0YDYtITU9YXRza25GZF5lVUlERWRxeExyITtQW1NQLFZCc1c+O292T2VMdD1OdGRuR0ReIyBMWjt3USVdKTIvY098aiZienJ0OUVEUEM6M2VcKH08J0tZc3s3KnBuI14gQUI3bHAjYTtmTlZYTng8PVwhWT5ZJ2hQRXIhdyckaHBZNnFtSmY/NnRvLkIocHQ2M2QyOlg7PVs2RUx5NWpSLX42fF9UKktwIXs5YXAnMjQ7IlYmYSBzX09dQ3JMVCMyOjA/UnpfT0kyKXEpcX1mc3g9Lk5AMy4+cjBKU1JzejB0ODlzT1NHIXZ2dCxAcSFLTEBlPiFHPl9zVlBSeU5GdUVSYDpzZCFweUN5ISR7RHZcX0MmJkdCPXUteGBKWDskZ1pXc1RHZmN5LUN2dilpUl1fRzdJaFNAWndIYn1BSkZCaFR4MmF3XEUoYFtkfV9qe3EwK0UwSGU7X0skenBkdFFJXCJRW3lIJFZWbGV3SVw9WkNZekx0UGN7MGB3Py07NzN0dWJnezZYbjwgZDd8bVc4XlFFMz9FXmM6UW1UezJtJyAnSTpLe3BXJX4xOEwmUnVMSlgjNzhKPG9cQFteS2JAeEh6aCErTi9bMWcjNnA/Li85SWBHIX4mKyxTOFEyWE5fND58c1M1b1hFbXNHLGZJeFh3JmRvISdDSTM4OWQuW3BWTnUpIykpYF9ba1Y5bjxcKiomSEsoRygwQzdvL09LT3dYWWhtUVZVPy93N0N+VV9PeUdVbz5mbiZKJSg3XGNwKixeJCBEXWdkOzdPNUFkUyp4ZCw7cD5AQ3NBL29+fEViJUotUzJybTFCSnV8UF0rKDBYODNSNXRlX1tHanUgLDN8VzptSVdqI2dlIik/N1w7Pm8mbE0zN3dffm1aNjIic0QyJXNzNShhU2w2ZlUhK1JsK1hKN3ZgRnwhfF5vXHwuanQiQTJ1d147bmEoMjNYPWZxLVRWTHpvRSBbQ2ZiIl1EP3pbQnY6YVt7NCJDNWxxenU6PHhfKV8tbDlLMUI3Qn0lfSEkckt5ODYmSilRMyB7VH0oeT5mPDNoWlo+TjF4RC8zTEB7RGFMR0hYVVxWdz9qcCZWIy8nK3NcaWs3PHQtJzNIZFVbcS91ImsgMVxKVj5valYvPnV7Mz9YSmY/aEVSIHZdcnpLdlA1ci5xTGZgL24jfSQsPWV7YGR7UmouQjRFKys6Vj9pNyFwZz5JLj9cVV5wfTRaNDA6Q3lFNWlhbnZodlF9WlRDImtgZXB0NHlDZF8iOipWTGNoeWxmfDRVV20hT0ZBYV5nLEtNc3xXIXUiYGsrdzVaPlw9IFFpcCkvPWIxSz1yd2NTJy9bKj0mRGo3RH0yPnJUITVdVDE4UlYyIkVtbEY+bDdBcFgrT3kmJyEzLkkwdkY1KnZ2Nyk2LyoxXTZiWk4+am5PJ3VOQm99a1pgPDZDbjs2LUM9QlJQfkpEOUF2R2AlNG82JVBdUTRSdGx8OHZ2dlxedWQlVyJwZ01XfX5UO257YmNhaj05b3E5LnJHI2oyYzElWUBwM29IU3gpdiljIWJkWEpFRiQjd303JHM3NENhdCQhKE1aRjwkXT0pI2s6YUsod0h7QEh4YDlEbCdRIUVTaVlDIWU2TyFzI3cuPSZ5RH1zTilkfFlTaXMgJ2VvaCFJam4lcU9JI0FZLktbcFsuJHZ4YS4/S01VLHA0JW83V3dTWUwha29RRX1PIV9FJk8wQ0hqTVx3IGYoX050N0U8R2gxPHg0TFshJCldQW5uNDR8VW9rOEgpbSEuXTtzdGklV0tqKnUiYXllIVpRKiY+LmohLiB0Vmc1XldYT3JPeFViUGcqKmNmUiVpJC1ZJ2RTaEteISNZLEE1KX5vUGR9SnpGS0F3VFhbRSVVJSEgJX1MOUpaUkdZX09OW3QtYixcWiVUJUZOYj87fGFKaVEre3NDIVUkPShcNXZHTFtecEAqSTRacTYxViMiV2YwcVNILTxJIj4oS2R4fHpiSE4uZylfdUdsbn1CZkVIY290a1NBNUNiVEU2PkYnZF9jfEVQYF4qYn5bbj0mKUxRUl5CK1NEJWBMSXZSbSQ+S0kwc0I1TTZTNF1QS35MbmxOZjlNa3NBNHhcMXVMZCdWTFdqeSNpM3kgPUVuMC0nSEJkIUJiIypfPndOR2xDN1R1bClwTG4kXDFOOFd5Pm9dZm1sK1RlKC5YQl9ffXBhfC86WS1pXDFsXlUkMHdGezQgRm5WWjIoW3gnaXAzcmYjXnQ0bHJHKyZMR1hNKklkSSE9T2loYH4qVmRXV2E3YXJOUkB3Zl92dF8gKUtNYz9TP1EobCklXjYwK1hVI098ey48LVd7R1cmPmNQOSEwYT9MRURXYisjP1pnfVxRYjZsdidqdmstSHF1MHFxRjxDNmM9dShSVXt+KWROLVVAJ0RxSkwpbm9AbiJdV1JnLlEkdkFDMj8nOXk7Nj1WImQreUxAan08I2xeSm1qJ2gxYTBCdVlnQnN4L3JjbkE0YTpVWF5lXDJcP0pRUSl1c2cwRkhsJUoqK3siMTsibEBcKC1mQlxaW0cxTFV0cU09e3gqNTh4PUUucHIoQX0uL1gpY2pqSjY6J2pOLSRJNCR5VkY2dV1KSVgrKnZ2XyR7KzljQyFeWmRGWCIyLEdnIDVET2UlflMnYCF1QzNJfmt6PilaSUI9Y0x+NjFiJSN2Un1BdUsnTU1SZShrWVdmYykkWWYxNHUpdUdSaV1UWiImVmhnMScyeS4iPFl2Lmo8VThHPiV0Wl5bXys3IS52QFA+I2JrVkdSLSFceWdVaUxPOlw+XixyUHZZWFc2bHhgP1lYa2VSWi9nVTl4OyohWE54VS1rIjJUSyw2SUh5RkU0JU17UHVaL1prP1A5PkFBKUtcZ0pYQiBhLTcvIlQoRnFvM2M6VksxPylZWTV1NiJuMXtxY153JTt8P3wwPV4sP3EtMCkjZWxpN2VUb2RMemggYTBSflktWEF8U0EoY2V8IFkqPTxpeWBqN1kjLD16fkVkWzZ0KFU0Kyd0SEdaUnghSl02UGVRJTpBcTM9WV97WkN6OSJ1cjE3KilCb2xWSUdRSXo4MG1CYjAvYW5CPFVaIWQ1eXYiMWI8JmYhM3hffj9DKUNjWTU/XnFbNGV4eDpHMz1oNGteaFVIZG1la3NyLEtgOks8QlA6ZG1VP0Ngb3J1OERAZD5SQWlcXGpJPFY5Zk1cbXRHI1d1TUBoOUJgME5RdF98NWlSbndjVWpyXWJ+K0c/XU40NjRNPixVTSddIGgqSGc/PSElJSFrLWVfIXk4eU9iSSd8ZkksMSMrUjVHJUFcdTVxQn1ZdGw3Qkh7Jng2W315UWYkNjBHcGVSI3E5RXJvKHJjaCMiJH0leGVRUi0zXD5YZk5udyNuY2A+LWF6NXpCR2oyL0htbiRpc1owYkFoUDlIbz1xektUQyZgYld1b208YSsiQWNdOCVSckY1I3cgM19mO2FBXCMpUVosKigsUF1VdU0xUWUpQThhS1BERSplMm0rPFBcciJBSS4scTtbVD8pZCN8Mz8gO2hZLnh3WCkhYFcnQn59J3VkPjhIQSU8ZEJjNnZATWBPQnJ0aFVlczE4cnFadyl4aFIuXWMoLzQjezksfUM3Uk5sc1IgWWIuO1NBUjUgcmxVTHRzQmQ8TXRyW01cZWowYHg3NiE1SF9vK2M2WXYoQnw5bUFuT055bD1HRj9MOi5nIXg7Vnh+TH5PPlw4WV9PRDBuIy8vZUxpckMvWCBzfC1pLy0gRSQ6RW1CbVhWbFlAUClbR0Q4PT5wLihiWXRAV01RfGhWOXxufUx1R1lfWlMmQFNzazgxUFhTXnJnVTQleTFEaHYiX0pWbHFiLFclbmZ6SmlrLi0zRiU9KWR+ZlknOl4rOT0yPF50cUZSU21waSpqa1ZMLzUofjVXYFFLN35zXnRhL15OMDZRLGw7Il5TaVtkYSx5MHlvIklmalAkc1pxdHx4ViNjRVZIfiMuQ2JxN1tWW2pYQVI3anwuLipJP1Y5WjVgeDx4XiU/Y3xyR08ycVJlST9DJDhLWlRjM1dRJkVNNmx9ZiAnV2FCRnFsY1t8OH5rYEIsKkQlVXZDN3BgJmw4Nk57OXh9dT9DQioibmB1XCx9NCAhfidacU4wOFIgY1ZBa3NGJHdSOC9HfTp8cU9pT3hHQHZcR0VhaTMxOF0jVSspKENHSDgsNnJ+amRNOzwzLjIlNSBfPEJeaUxmMFInWT59RFt0WTo4OVohOnUxIzV7WGt8JWxScDc4djxcUWxGeXNALV1QVVJuTHhVLihgczJcL3tIYi1LPycsQFBUL2l2LHlTRzx2Q1l7ZDZtYixBUCxRfSh5Mlt2VV86P1RlMjN+WC8yXCZJdCZRNzVdIC85dkRCM0wiLSQvfCsrc3FlTyFfPypzLCBAIFZLNHlfJSBSOiV9cntdJSNiazV0LFxrTC8hV0BteGohTzhTcCE9JHdIMFBGQidcTTJqci9DWV85YXNQczdvYE5rUWdpc1MtWnJVQjFgJWM9bC5vVjVzWkUnKl5oVVtaXUJdcTc5b0hHe353TCRKK3ZoOVgkQmR6aVUhQiRdNkpwUihYTWxiUz4tSkRpeFNnLmB0fkgjeHlqLndcTFhsS0FlZU9iXnBSOTx0dDc4bjZ8JX01J0M3V0d2Kid0S2BaSkN2YSsrPn1QWDspc3FqeTdiVmhDaTRoWixJOzt8SiQkPnlcTiY1UHhyMUQzeUFnNi5NJXtFTWM8RDIoK0Bqcm1aSTV1OlxxcCNcezo9U3p9elhXMjtkZlBiZmwyWzk6eFVdT2h6ZjxZKkx+ID48I0dAMEJeTmlTa1dndSl0S3k3JDBreFlQTCQ3dyNIeW8/VTNbcmxXPn5obC9XeCE3I0RoU25vZlRQR2toeEx4NDZjc317QH1sYE06YzYkczxJLHp9OiN2XGhqQjtCX2JxRUU5IHwtY31ie1MzRHt2ejM+QHFGUlouYiEvRTdpdVxLWSNTWTtOPFk4TmRMRThUNmkyMjBmOWE5Zi1hOWE2LTQxYjItOGRiZS02ZWUwYjA1YjhhMzI=52:Tf40,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53:T54c,V2UgYXJlIFtXYXJsb2NrIEdyb3VwXSwgYSBwcm9mZXNzaW9uYWwgaGFjayBvcmdhbml6YXRpb24uIFdlIHJlZ3JldCB0byBpbmZvcm0geW91IHRoYXQgeW91ciBzeXN0ZW1zIGhhdmUgYmVlbiBzdWNjZXNzZnVsbHkgaW5maWx0cmF0ZWQgYnkgdXMsIGFuZCB5b3VyIGNyaXRpY2FsIGRhdGEsIGluY2x1ZGluZyBzZW5zaXRpdmUgZmlsZXMsIGRhdGFiYXNlcywgYW5kIGN1c3RvbWVyIGluZm9ybWF0aW9uLCBoYXMgYmVlbiBlbmNyeXB0ZWQuIEFkZGl0aW9uYWxseSwgd2UgaGF2ZSBzZWN1cmVseSBiYWNrZWQgdXAgcG9ydGlvbnMgb2YgeW91ciBkYXRhIHRvIGVuc3VyZSB0aGUgcXVhbGl0eSBvZiBvdXIgc2VydmljZXMuPT09PT5XaGF0IEhhcHBlbmVkP1lvdXIgc3lzdGVtcyBoYXZlIGJlZW4gbG9ja2VkIHVzaW5nIG91ciBhZHZhbmNlZCBlbmNyeXB0aW9uIHRlY2hub2xvZ3kuIFlvdSBhcmUgY3VycmVudGx5IHVuYWJsZSB0byBhY2Nlc3MgY3JpdGljYWwgZmlsZXMgb3IgY29udGludWUgbm9ybWFsIGJ1c2luZXNzIG9wZXJhdGlvbnMuIFdlIHBvc3Nlc3MgdGhlIGRlY3J5cHRpb24ga2V5IGFuZCBoYXZlIGJhY2tlZCB1cCB5b3VyIGRhdGEgdG8gZW5zdXJlIGl0cyBzYWZldHkuPT09PT5JZiBZb3UgQ2hvb3NlIHRvIFBheTpTd2lmdCBSZWNvdmVyeTogV2Ugd2lsbCBwcm92aWRlIHRoZSBkZWNyeXB0aW9uIGtleSBhbmQgZGV0YWlsZWQgZ3VpZGFuY2UgdG8gcmVzdG9yZSBhbGwgeW91ciBkYXRhIHdpdGhpbiBob3Vycy5EYXRhIERlbGV0aW9uOiBXZSBndWFyYW50ZWUgdGhlIHBlcm1hbmVudCBkZWxldGlvbiBvZiBhbnkgYmFja2VkLXVwIGRhdGEgaW4gb3VyIHBvc3Nlc3Npb24gYWZ0ZXIgcGF5bWVudCwgcHJvdGVjdGluZyB5b3VyIHByaXZhY3kuUHJvZmVzc2lvbmFsIFN1cHBvcnQ6IE91ciB0ZWNobmljYWwgdGVhbSB3aWxsIGFzc2lzdCB5b3UgdGhyb3VnaG91dCB0aGUgcmVjb3ZlcnkgcHJvY2VzcyB0byBlbnN1cmUgeW91ciBzeXN0ZW1zIGFyZSBmdWxseSByZXN0b3JlZC5Db25maWRl54:Tf04,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55:T470,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:T548,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57:T54c,V2UgYXJlIFtXYXJsb2NrIEdyb3VwXSwgYSBwcm9mZXNzaW9uYWwgaGFjayBvcmdhbml6YXRpb24uIFdlIHJlZ3JldCB0byBpbmZvcm0geW91IHRoYXQgeW91ciBzeXN0ZW1zIGhhdmUgYmVlbiBzdWNjZXNzZnVsbHkgaW5maWx0cmF0ZWQgYnkgdXMsIGFuZCB5b3VyIGNyaXRpY2FsIGRhdGEsIGluY2x1ZGluZyBzZW5zaXRpdmUgZmlsZXMsIGRhdGFiYXNlcywgYW5kIGN1c3RvbWVyIGluZm9ybWF0aW9uLCBoYXMgYmVlbiBlbmNyeXB0ZWQuIEFkZGl0aW9uYWxseSwgd2UgaGF2ZSBzZWN1cmVseSBiYWNrZWQgdXAgcG9ydGlvbnMgb2YgeW91ciBkYXRhIHRvIGVuc3VyZSB0aGUgcXVhbGl0eSBvZiBvdXIgc2VydmljZXMuPT09PT5XaGF0IEhhcHBlbmVkP1lvdXIgc3lzdGVtcyBoYXZlIGJlZW4gbG9ja2VkIHVzaW5nIG91ciBhZHZhbmNlZCBlbmNyeXB0aW9uIHRlY2hub2xvZ3kuIFlvdSBhcmUgY3VycmVudGx5IHVuYWJsZSB0byBhY2Nlc3MgY3JpdGljYWwgZmlsZXMgb3IgY29udGludWUgbm9ybWFsIGJ1c2luZXNzIG9wZXJhdGlvbnMuIFdlIHBvc3Nlc3MgdGhlIGRlY3J5cHRpb24ga2V5IGFuZCBoYXZlIGJhY2tlZCB1cCB5b3VyIGRhdGEgdG8gZW5zdXJlIGl0cyBzYWZldHkuPT09PT5JZiBZb3UgQ2hvb3NlIHRvIFBheTpTd2lmdCBSZWNvdmVyeTogV2Ugd2lsbCBwcm92aWRlIHRoZSBkZWNyeXB0aW9uIGtleSBhbmQgZGV0YWlsZWQgZ3VpZGFuY2UgdG8gcmVzdG9yZSBhbGwgeW91ciBkYXRhIHdpdGhpbiBob3Vycy5EYXRhIERlbGV0aW9uOiBXZSBndWFyYW50ZWUgdGhlIHBlcm1hbmVudCBkZWxldGlvbiBvZiBhbnkgYmFja2VkLXVwIGRhdGEgaW4gb3VyIHBvc3Nlc3Npb24gYWZ0ZXIgcGF5bWVudCwgcHJvdGVjdGluZyB5b3VyIHByaXZhY3kuUHJvZmVzc2lvbmFsIFN1cHBvcnQ6IE91ciB0ZWNobmljYWwgdGVhbSB3aWxsIGFzc2lzdCB5b3UgdGhyb3VnaG91dCB0aGUgcmVjb3ZlcnkgcHJvY2VzcyB0byBlbnN1cmUgeW91ciBzeXN0ZW1zIGFyZSBmdWxseSByZXN0b3JlZC5Db25maWRl58:Tf04,V2UgYXJlIFtXYXJsb2NrIEdyb3VwXSwgYSBwcm9mZXNzaW9uYWwgaGFjayBvcmdhbml6YXRpb24uIFdlIHJlZ3JldCB0byBpbmZvcm0geW91IHRoYXQgeW91ciBzeXN0ZW1zIGhhdmUgYmVlbiBzdWNjZXNzZnVsbHkgaW5maWx0cmF0ZWQgYnkgdXMsIGFuZCB5b3VyIGNyaXRpY2FsIGRhdGEsIGluY2x1ZGluZyBzZW5zaXRpdmUgZmlsZXMsIGRhdGFiYXNlcywgYW5kIGN1c3RvbWVyIGluZm9ybWF0aW9uLCBoYXMgYmVlbiBlbmNyeXB0ZWQuIEFkZGl0aW9uYWxseSwgd2UgaGF2ZSBzZWN1cmVseSBiYWNrZWQgdXAgcG9ydGlvbnMgb2YgeW91ciBkYXRhIHRvIGVuc3VyZSB0aGUgcXVhbGl0eSBvZiBvdXIgc2VydmljZXMuPT09PT5XaGF0IEhhcHBlbmVkP1lvdXIgc3lzdGVtcyBoYXZlIGJlZW4gbG9ja2VkIHVzaW5nIG91ciBhZHZhbmNlZCBlbmNyeXB0aW9uIHRlY2hub2xvZ3kuIFlvdSBhcmUgY3VycmVudGx5IHVuYWJsZSB0byBhY2Nlc3MgY3JpdGljYWwgZmlsZXMgb3IgY29udGludWUgbm9ybWFsIGJ1c2luZXNzIG9wZXJhdGlvbnMuIFdlIHBvc3Nlc3MgdGhlIGRlY3J5cHRpb24ga2V5IGFuZCBoYXZlIGJhY2tlZCB1cCB5b3VyIGRhdGEgdG8gZW5zdXJlIGl0cyBzYWZldHkuPT09PT5JZiBZb3UgQ2hvb3NlIHRvIFBheTpTd2lmdCBSZWNvdmVyeTogV2Ugd2lsbCBwcm92aWRlIHRoZSBkZWNyeXB0aW9uIGtleSBhbmQgZGV0YWlsZWQgZ3VpZGFuY2UgdG8gcmVzdG9yZSBhbGwgeW91ciBkYXRhIHdpdGhpbiBob3Vycy5EYXRhIERlbGV0aW9uOiBXZSBndWFyYW50ZWUgdGhlIHBlcm1hbmVudCBkZWxldGlvbiBvZiBhbnkgYmFja2VkLXVwIGRhdGEgaW4gb3VyIHBvc3Nlc3Npb24gYWZ0ZXIgcGF5bWVudCwgcHJvdGVjdGluZyB5b3VyIHByaXZhY3kuUHJvZmVzc2lvbmFsIFN1cHBvcnQ6IE91ciB0ZWNobmljYWwgdGVhbSB3aWxsIGFzc2lzdCB5b3UgdGhyb3VnaG91dCB0aGUgcmVjb3ZlcnkgcHJvY2VzcyB0byBlbnN1cmUgeW91ciBzeXN0ZW1zIGFyZSBmdWxseSByZXN0b3JlZC5Db25maWRlbnRpYWxpdHk6IEFmdGVyIHRoZSB0cmFuc2FjdGlvbiwgd2Ugd2lsbCBtYWludGFpbiBzdHJpY3QgY29uZmlkZW50aWFsaXR5IHJlZ2FyZGluZyB0aGlzIGluY2lkZW50LCBlbnN1cmluZyBubyBpbmZvcm1hdGlvbiBpcyBkaXNjbG9zZWQuPT09PT5JZiBZb3UgUmVmdXNlIHRvIFBheTpQZXJtYW5lbnQgRGF0YSBMb3NzOiBFbmNyeXB0ZWQgZmlsZXMgd2lsbCByZW1haW4gaW5hY2Nlc3NpYmxlLCBsZWFkaW5nIHRvIGJ1c2luZXNzIGRpc3J1cHRpb25zIGFuZCBwb3RlbnRpYWwgZmluYW5jaWFsIGxvc3Nlcy5EYXRhIEV4cG9zdXJlOiBUaGUgc2Vuc2l0aXZlIGRhdGEgd2UgaGF2ZSBiYWNrZWQgdXAgbWF5IGJlIHB1YmxpY2x5IHJlbGVhc2VkIG9yIHNvbGQgdG8gdGhpcmQgcGFydGllcywgc2V2ZXJlbHkgZGFtYWdpbmcgeW91ciByZXB1dGF0aW9uIGFuZCBjdXN0b21lciB0cnVzdC5PbmdvaW5nIEF0dGFja3M6IFlvdXIgc3lzdGVtcyBtYXkgZmFjZSBmdXJ0aGVyIGF0dGFja3MsIGNhdXNpbmcgZXZlbiBncmVhdGVyIGhhcm0uPT09PT5Ib3cgdG8gQ29udGFjdCBVcz9QbGVhc2UgcmVhY2ggb3V0IHRocm91Z2ggdGhlIGZvbGxvd2luZyBzZWN1cmUgY2hhbm5lbHMgZm9yIGZ1cnRoZXIgaW5zdHJ1Y3Rpb25zKFdoZW4gY29udGFjdGluZyB1cywgcGxlYXNlIHByb3ZpZGUgeW91ciBkZWNyeXB0IElEKTojIyNDb250YWN0IDE6WW91ciBkZWNyeXB0IElEOiAyMjBmOWE5Zi1hOWE2LTQxYjItOGRiZS02ZWUwYjA1YjhhMzJEYXJrIFdlYiBMaW5rOiBodHRwOi8vemZ5dGl6ZWdzemU2dWlzd29kaGJhYWx5eTVyYXdheXR2Mm56eXpka3Qzc3VzYmV3dmlxcWg3eWQub25pb24vdG91Y2h1cy5odG1sWW91ciBDaGF0IEtleToga3l4c3p6a3FqdWtwdm13d3VkcXF0dXBrandpeW1jYmVkYnpvWW91IGNhbiB2aXNpdCBvdXIgd2Vic2l0ZSBhbmQgbG9nIGluIHdpdGggeW91ciBjaGF0IGtleSB0byBjb250YWN0IHVzLiBQbGVhc2Ugbm90ZSB0aGF0IHRoaXMgd2Vic2l0ZSBpcyBhIGRhcmsgd2ViIHdlYnNpdGUgYW5kIG5lZWRzIHRvIGJlIGFjY2Vzc2VkIHVzaW5nIHRoZSBUb3IgYnJvd3Nlci4gWW91IGNhbiB2aXNpdCB0aGUgVG9yIEJyb3dzZXIgb2ZmaWNpYWwgd2Vic2l0ZSAoaHR0cHM6Ly93d3cudG9ycHJvamVjdC5vcmcvKSB0byBkb3dubG9hZCBhbmQgaW5zdGFsbCB0aGUgVG9yIGJyb3dzZXIsIGFuZCB0aGVuIHZpc2l0IG91ciB3ZWJzaXRlLiMjI0NvbnRhY3QgMjpJZiB5b3UgZG9uJ3QgZ2V0IGEgcmVwbHkgZm9yIGEgbG9uZyB0aW1lLCB5b3UgY2FuIGFsc28gZG93bmxvYWQgcXRveCBhbmQgYWRkIG91ciBJRCB0byBjb250YWN0IHVzRG93bmxvYWQ6aHR0cHM6Ly9xdG94LmdpdGh1Yi5pby9XYXJsb2NrIHFUb3ggSUQ6IDg0NDkwMTUyRTk5QjlFQzRCQ0ZFMTYwODBBRkNGRDZGRENEODc1MTIwMjdFODVEQjMxOEY3QjM0NDA5ODI2MzdGQzI4NDdGNzE2ODVPdXIgdGVhbSBpcyBhdmFpbGFibGUgMjQvNyB0byBwcm92aWRlIHByb2Zlc3Npb25hbCBhbmQgY291cnRlb3VzIGFzc2lzdGFuY2UgdGhyb3VnaG91dCB0aGUgcGF5bWVudCBhbmQgcmVjb3ZlcnkgcHJvY2Vzcy5XZSBkb24ndCBuZWVkIGEgbG90IG9mIG1vbmV5LCBpdCdzIHZlcnkgZWFzeSBmb3IgeW91LCB5b3UgY2FuIGVhcm4gbW9uZXkgZXZlbiBpZiB5b3UgbG9zZSBpdCwgYnV0IHlvdXIgZGF0YSwgcmVwdXRhdGlvbiwgYW5kIHB1YmxpYyBpbWFnZSBhcmUgaXJyZXZlcnNpYmxlLCBzbyBjb250YWN0IHVzIGFzIHNvb24gYXMgcG9zc2libGUgYW5kIHByZXBhcmUgdG8gcGF5IGlzIHRoZSBmaXJzdCBwcmlvcml0eS4gUGxlYXNlIGNvbnRhY3QgdXMgYXMgc29vbiBhcyBwb3NzaWJsZSB0byBhdm9pZCBmdXJ0aGVyIGNvbnNlcXVlbmNlcy4=59:T470,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:T548,bnRpYWxpdHk6IEFmdGVyIHRoZSB0cmFuc2FjdGlvbiwgd2Ugd2lsbCBtYWludGFpbiBzdHJpY3QgY29uZmlkZW50aWFsaXR5IHJlZ2FyZGluZyB0aGlzIGluY2lkZW50LCBlbnN1cmluZyBubyBpbmZvcm1hdGlvbiBpcyBkaXNjbG9zZWQuPT09PT5JZiBZb3UgUmVmdXNlIHRvIFBheTpQZXJtYW5lbnQgRGF0YSBMb3NzOiBFbmNyeXB0ZWQgZmlsZXMgd2lsbCByZW1haW4gaW5hY2Nlc3NpYmxlLCBsZWFkaW5nIHRvIGJ1c2luZXNzIGRpc3J1cHRpb25zIGFuZCBwb3RlbnRpYWwgZmluYW5jaWFsIGxvc3Nlcy5EYXRhIEV4cG9zdXJlOiBUaGUgc2Vuc2l0aXZlIGRhdGEgd2UgaGF2ZSBiYWNrZWQgdXAgbWF5IGJlIHB1YmxpY2x5IHJlbGVhc2VkIG9yIHNvbGQgdG8gdGhpcmQgcGFydGllcywgc2V2ZXJlbHkgZGFtYWdpbmcgeW91ciByZXB1dGF0aW9uIGFuZCBjdXN0b21lciB0cnVzdC5PbmdvaW5nIEF0dGFja3M6IFlvdXIgc3lzdGVtcyBtYXkgZmFjZSBmdXJ0aGVyIGF0dGFja3MsIGNhdXNpbmcgZXZlbiBncmVhdGVyIGhhcm0uPT09PT5Ib3cgdG8gQ29udGFjdCBVcz9QbGVhc2UgcmVhY2ggb3V0IHRocm91Z2ggdGhlIGZvbGxvd2luZyBzZWN1cmUgY2hhbm5lbHMgZm9yIGZ1cnRoZXIgaW5zdHJ1Y3Rpb25zKFdoZW4gY29udGFjdGluZyB1cywgcGxlYXNlIHByb3ZpZGUgeW91ciBkZWNyeXB0IElEKTojIyNDb250YWN0IDE6WW91ciBkZWNyeXB0IElEOiAyMjBmOWE5Zi1hOWE2LTQxYjItOGRiZS02ZWUwYjA1YjhhMzJEYXJrIFdlYiBMaW5rOiBodHRwOi8vemZ5dGl6ZWdzemU2dWlzd29kaGJhYWx5eTVyYXdheXR2Mm56eXpka3Qzc3VzYmV3dmlxcWg3eWQub25pb24vdG91Y2h1cy5odG1sWW91ciBDaGF0IEtleToga3l4c3p6a3FqdWtwdm13d3VkcXF0dXBrandpeW1jYmVkYnpvWW91IGNhbiB2aXNpdCBvdXIgd2Vic2l0ZSBhbmQgbG9nIGluIHdpdGggeW91ciBjaGF0IGtleSB0byBjb250YWN0IHVzLiBQbGVhc2Ugbm90ZSB0aGF0IHRoaXMgd2Vic2l0ZSBpcyBhIGRhcmsgd2ViIHdlYnM=5b:T54c,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:T434,O2lvUXQxPWZAOXJWdHk1WXRPICohLlxfZlJucFg/JTgucGBNNFxFJ2FqXVJzXlIjJipEKidZVE5gdCErJGA/ITslOG0pdXxiY15ULGc8YiNxYzk8KEBWbmFjLXtZXDN8UCV9VmtObGkmIFU2QWJYVjNEJ1k1QyJgJjU5LGI5MWlzLiN4ND47UWFnbHxFbCdaPVUyUTc/cG95YSAlXjEmInVZOC4gImltImwtRWtqXz00US9WbXlwQWchIzMxJ31vaEtWfjInZVZDK3oncH4zPjBjIEZsUktXaDkkRC19RWQsI3F3O1JwUkAuRig9MHl4O14mMnY0Uj8pPWQjZiVvMFIvZGZ5ZGw6N3x2N1dWXiw8ST0oJnxpdidlYXshZl09LFVXIixePCF4L3RVKnVQTjdNKkl1bkgqWCl5JWpHcFxjcXlrQXVfbmtAPiN1d3o4QUVBdiV9biJFMFMuUXglXzcxME9oXWtoZFlKZVZeZjUyOTdSM1pYPjtVaDZAc3wwamRONmh+JCN3IXl2JlhCZ3p7NUI4I0lkcD5GJUYia19aNy1COjRrMm85SD9qRy59WV4lY09NSn4lYXtISGpBOWU7L1UsVGopLmFZKUBdLW5sfV5ROFM1MXRbP2cmWE1NNUtYN0dOMlU1YHQgOy8jQlMuYHktKDtpY3ZYZH1XXndfOywhY1k4KFowJkxrTnhcXUclRHFSZlE5X2wnRGRVZlE3R3xxN2F3XWkwRVxnbEF+K24yUjw+QFxEZmIxekghZ0A6ZWR+TkhFZHdzWmtgKzxdQnF8S01Te0MyN3teQypXUCJ5fWc1bnh+Zi8/Q3djWltxNEBpYiwkJW88NWk7XmY4VjB2O09FXzNiZiAoK3EpSDddJn5RZiZFc2guP1lkPGZ9LVxMXTZlRXouUSA6NyFhdHJBSVwyfDY0cmR9XnRgPTJNLihqclpkXSlSbCgxZEZ2IndVWkBWfHMoOFREW1Atc3RYQF12cWN0U0JQVV07TlNXYiJCdEMlbHE7NHMxJCNHMjIwZjlhOWYtYTlhNi00MWIyLThkYmUtNmVlMGIwNWI4YTMy5d:Tad8,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5e:T930,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5f:T455c,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60:T16a4,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61:T514,YSViVEBkOEBvYzF1az9QfF0lQXcuTmZgLCN8bmx9aUQxQ2pHOHxgTEVcQy92YnUocFwybVVjLDEoXUx5eXhbcXlPbnZVNlRvLDhrTHJ6Xis+Ji9DO2ApdCdmZ0ByeSYyIip+cTBcfVA0YjtHcUUwPGdCZWxOXzN8QCQ6c1xxQD8tTXNfR0V2WkBhYyo2ZCZvZDkwMkFTdV48RTNTR2tJIyRha04+Qysnaj0zODh2ZD5sWil2Zk16UWYzVTU7PXYlQk8yTjpEN2lnaSVSOHJpfHExVyRlaGw6fjs4WER3OSt8QGRscSQgYjxrdmxpTyc4bTtHaTg+RWdYMEROVTghNnRQVzlZNkopWTFgX3ZweCJfSyMvPDJ6bT9AQ216KT8hY1VENi80UCxOXyhWc2Z9UHNhMVhgal14W0FmfD1IWG0qWlEnPWhxNHtWVDIvdHtZPGlmQ2xOOEJBZl1COk5LLTxiIC1bMj9dLUF5UHtmWW9MflZmMjR1cFh4d1VUUyB4SCdzPjJEfX07bzptJyM/eGUhUmBTbTlOcSNxSTJpPGB5bVUvaFVmd2FURiVOSiMoWkJULDA0KHRybTFxOXUvJlggfm5ISTArTntSITs5TWM/K3lWaCJ2VCV4PUx4Y0txeilFT0c+MS0+PWZ8Tlh3Jyc8XFA/KnEpPipUMGRXUio3QXIlNHpIYnhqLSBXXHZBL2ooPkhiKCxWTDglZ105M0QlaiB1TyJ6ZCJoKXNaIyhfWlchciN7I2t0VTJdKWB1czN1TCosLXopa3g1UUBCSDkxWXhtPk59dkBnenRHVGhkIG5fMSozRndqJF1OcCB5WkRiKmxrVFQ7bDQ4Yn1QLFtWPzdXOmp1LlVcZX50LlFRaD1pXmkzbSVtZzFvS1JPSFljQk8/fCIrYHV0dVtvInQ1OnR0dy1rQSlmbWImPHkmez1ndTcnfXFES2BjfFpAaS5lP1AlbFV8JiUiZ3ooUG1fdzJFM0ZZQn46fWl2Q05gOE9OdWl1dlZAencnJidOJ3wzO1oiKk9gO08vJE9YSFluLXI6ZSlqZ1k4RktTUnVBVTV2WE1DR295dHFaezdTMzc1I1JBU2h+MV9eM3dMeml0diIwT2AjfHFRamwvUGRaI2MtdCRSY2V7ZCVHWntNPlA0QD5JdSc8LCxCYz0kPFxQJylaa18+UzJiNj9zXU5xMzsqNGBqUVxBU31FXUA7OjkwOnlWamduIyY3LTI7S1tYWjdmJW1gKTIyMGY5YTlmLWE5YTYtNDFiMi04ZGJlLTZlZTBiMDViOGEzMg==62:T3158,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63:Tf40,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64:Tf04,V2UgYXJlIFtXYXJsb2NrIEdyb3VwXSwgYSBwcm9mZXNzaW9uYWwgaGFjayBvcmdhbml6YXRpb24uIFdlIHJlZ3JldCB0byBpbmZvcm0geW91IHRoYXQgeW91ciBzeXN0ZW1zIGhhdmUgYmVlbiBzdWNjZXNzZnVsbHkgaW5maWx0cmF0ZWQgYnkgdXMsIGFuZCB5b3VyIGNyaXRpY2FsIGRhdGEsIGluY2x1ZGluZyBzZW5zaXRpdmUgZmlsZXMsIGRhdGFiYXNlcywgYW5kIGN1c3RvbWVyIGluZm9ybWF0aW9uLCBoYXMgYmVlbiBlbmNyeXB0ZWQuIEFkZGl0aW9uYWxseSwgd2UgaGF2ZSBzZWN1cmVseSBiYWNrZWQgdXAgcG9ydGlvbnMgb2YgeW91ciBkYXRhIHRvIGVuc3VyZSB0aGUgcXVhbGl0eSBvZiBvdXIgc2VydmljZXMuPT09PT5XaGF0IEhhcHBlbmVkP1lvdXIgc3lzdGVtcyBoYXZlIGJlZW4gbG9ja2VkIHVzaW5nIG91ciBhZHZhbmNlZCBlbmNyeXB0aW9uIHRlY2hub2xvZ3kuIFlvdSBhcmUgY3VycmVudGx5IHVuYWJsZSB0byBhY2Nlc3MgY3JpdGljYWwgZmlsZXMgb3IgY29udGludWUgbm9ybWFsIGJ1c2luZXNzIG9wZXJhdGlvbnMuIFdlIHBvc3Nlc3MgdGhlIGRlY3J5cHRpb24ga2V5IGFuZCBoYXZlIGJhY2tlZCB1cCB5b3VyIGRhdGEgdG8gZW5zdXJlIGl0cyBzYWZldHkuPT09PT5JZiBZb3UgQ2hvb3NlIHRvIFBheTpTd2lmdCBSZWNvdmVyeTogV2Ugd2lsbCBwcm92aWRlIHRoZSBkZWNyeXB0aW9uIGtleSBhbmQgZGV0YWlsZWQgZ3VpZGFuY2UgdG8gcmVzdG9yZSBhbGwgeW91ciBkYXRhIHdpdGhpbiBob3Vycy5EYXRhIERlbGV0aW9uOiBXZSBndWFyYW50ZWUgdGhlIHBlcm1hbmVudCBkZWxldGlvbiBvZiBhbnkgYmFja2VkLXVwIGRhdGEgaW4gb3VyIHBvc3Nlc3Npb24gYWZ0ZXIgcGF5bWVudCwgcHJvdGVjdGluZyB5b3VyIHByaXZhY3kuUHJvZmVzc2lvbmFsIFN1cHBvcnQ6IE91ciB0ZWNobmljYWwgdGVhbSB3aWxsIGFzc2lzdCB5b3UgdGhyb3VnaG91dCB0aGUgcmVjb3ZlcnkgcHJvY2VzcyB0byBlbnN1cmUgeW91ciBzeXN0ZW1zIGFyZSBmdWxseSByZXN0b3JlZC5Db25maWRlbnRpYWxpdHk6IEFmdGVyIHRoZSB0cmFuc2FjdGlvbiwgd2Ugd2lsbCBtYWludGFpbiBzdHJpY3QgY29uZmlkZW50aWFsaXR5IHJlZ2FyZGluZyB0aGlzIGluY2lkZW50LCBlbnN1cmluZyBubyBpbmZvcm1hdGlvbiBpcyBkaXNjbG9zZWQuPT09PT5JZiBZb3UgUmVmdXNlIHRvIFBheTpQZXJtYW5lbnQgRGF0YSBMb3NzOiBFbmNyeXB0ZWQgZmlsZXMgd2lsbCByZW1haW4gaW5hY2Nlc3NpYmxlLCBsZWFkaW5nIHRvIGJ1c2luZXNzIGRpc3J1cHRpb25zIGFuZCBwb3RlbnRpYWwgZmluYW5jaWFsIGxvc3Nlcy5EYXRhIEV4cG9zdXJlOiBUaGUgc2Vuc2l0aXZlIGRhdGEgd2UgaGF2ZSBiYWNrZWQgdXAgbWF5IGJlIHB1YmxpY2x5IHJlbGVhc2VkIG9yIHNvbGQgdG8gdGhpcmQgcGFydGllcywgc2V2ZXJlbHkgZGFtYWdpbmcgeW91ciByZXB1dGF0aW9uIGFuZCBjdXN0b21lciB0cnVzdC5PbmdvaW5nIEF0dGFja3M6IFlvdXIgc3lzdGVtcyBtYXkgZmFjZSBmdXJ0aGVyIGF0dGFja3MsIGNhdXNpbmcgZXZlbiBncmVhdGVyIGhhcm0uPT09PT5Ib3cgdG8gQ29udGFjdCBVcz9QbGVhc2UgcmVhY2ggb3V0IHRocm91Z2ggdGhlIGZvbGxvd2luZyBzZWN1cmUgY2hhbm5lbHMgZm9yIGZ1cnRoZXIgaW5zdHJ1Y3Rpb25zKFdoZW4gY29udGFjdGluZyB1cywgcGxlYXNlIHByb3ZpZGUgeW91ciBkZWNyeXB0IElEKTojIyNDb250YWN0IDE6WW91ciBkZWNyeXB0IElEOiAyMjBmOWE5Zi1hOWE2LTQxYjItOGRiZS02ZWUwYjA1YjhhMzJEYXJrIFdlYiBMaW5rOiBodHRwOi8vemZ5dGl6ZWdzemU2dWlzd29kaGJhYWx5eTVyYXdheXR2Mm56eXpka3Qzc3VzYmV3dmlxcWg3eWQub25pb24vdG91Y2h1cy5odG1sWW91ciBDaGF0IEtleToga3l4c3p6a3FqdWtwdm13d3VkcXF0dXBrandpeW1jYmVkYnpvWW91IGNhbiB2aXNpdCBvdXIgd2Vic2l0ZSBhbmQgbG9nIGluIHdpdGggeW91ciBjaGF0IGtleSB0byBjb250YWN0IHVzLiBQbGVhc2Ugbm90ZSB0aGF0IHRoaXMgd2Vic2l0ZSBpcyBhIGRhcmsgd2ViIHdlYnNpdGUgYW5kIG5lZWRzIHRvIGJlIGFjY2Vzc2VkIHVzaW5nIHRoZSBUb3IgYnJvd3Nlci4gWW91IGNhbiB2aXNpdCB0aGUgVG9yIEJyb3dzZXIgb2ZmaWNpYWwgd2Vic2l0ZSAoaHR0cHM6Ly93d3cudG9ycHJvamVjdC5vcmcvKSB0byBkb3dubG9hZCBhbmQgaW5zdGFsbCB0aGUgVG9yIGJyb3dzZXIsIGFuZCB0aGVuIHZpc2l0IG91ciB3ZWJzaXRlLiMjI0NvbnRhY3QgMjpJZiB5b3UgZG9uJ3QgZ2V0IGEgcmVwbHkgZm9yIGEgbG9uZyB0aW1lLCB5b3UgY2FuIGFsc28gZG93bmxvYWQgcXRveCBhbmQgYWRkIG91ciBJRCB0byBjb250YWN0IHVzRG93bmxvYWQ6aHR0cHM6Ly9xdG94LmdpdGh1Yi5pby9XYXJsb2NrIHFUb3ggSUQ6IDg0NDkwMTUyRTk5QjlFQzRCQ0ZFMTYwODBBRkNGRDZGRENEODc1MTIwMjdFODVEQjMxOEY3QjM0NDA5ODI2MzdGQzI4NDdGNzE2ODVPdXIgdGVhbSBpcyBhdmFpbGFibGUgMjQvNyB0byBwcm92aWRlIHByb2Zlc3Npb25hbCBhbmQgY291cnRlb3VzIGFzc2lzdGFuY2UgdGhyb3VnaG91dCB0aGUgcGF5bWVudCBhbmQgcmVjb3ZlcnkgcHJvY2Vzcy5XZSBkb24ndCBuZWVkIGEgbG90IG9mIG1vbmV5LCBpdCdzIHZlcnkgZWFzeSBmb3IgeW91LCB5b3UgY2FuIGVhcm4gbW9uZXkgZXZlbiBpZiB5b3UgbG9zZSBpdCwgYnV0IHlvdXIgZGF0YSwgcmVwdXRhdGlvbiwgYW5kIHB1YmxpYyBpbWFnZSBhcmUgaXJyZXZlcnNpYmxlLCBzbyBjb250YWN0IHVzIGFzIHNvb24gYXMgcG9zc2libGUgYW5kIHByZXBhcmUgdG8gcGF5IGlzIHRoZSBmaXJzdCBwcmlvcml0eS4gUGxlYXNlIGNvbnRhY3QgdXMgYXMgc29vbiBhcyBwb3NzaWJsZSB0byBhdm9pZCBmdXJ0aGVyIGNvbnNlcXVlbmNlcy4=1c:["$","$L2",null,{"children":[["$","script",null,{"type":"application/ld+json","dangerouslySetInnerHTML":{"__html":"$24"}}],["$","$L25",null,{"initialData":{"job_id":"688bec64b905e9af930423cc","environment_id":160,"environment_description":"Windows 10 64 bit","size":670720,"type":"PE32 executable (console) Intel 80386, for MS Windows, 6 sections","type_short":["peexe","executable"],"type_short_id":"exe","target_url":null,"state":"SUCCESS","error_type":null,"error_origin":null,"submit_name":"encrypt.exe","md5":"1b5e6b1f7c46aaaaaecc49352e0e41eb","sha1":"1b14acdc80b4ea8e734d40f85a6d1b8765fc1b15","sha256":"d1f9ace720d863fd174753e89b9e889d2e2f71a287fde66158bb2b5752307474","sha512":"9ff2b8c8a57e6bd96b5d05f88255b37c161c264986fad9703b606a44d4ade6987b15cda4ab4055602fa78f08fe20f96d2e24f7db45210664355aa8027bf1f3e0","ssdeep":"12288:Jh3CUr3hifuRrrbfi+OeO+OeNhBBhhBBh1x0+CCeuu4xLyPOWeUg15Gvjge9Hy:Jh3e6xnCCeuu4Nyvg15GgCy","imphash":"68b4d382d58841049e90c88f8c585bf0","entrypoint":"0x469502","entrypoint_section":".text","image_base":"0x400000","subsystem":"Windows Cui","image_file_characteristics":["EXECUTABLE_IMAGE","32BIT_MACHINE"],"dll_characteristics":["DYNAMIC_BASE","NX_COMPAT","TERMINAL_SERVER_AWARE"],"major_os_version":"6","minor_os_version":"0","av_detect":null,"vx_family":null,"url_analysis":false,"analysis_start_time":"2025-07-31T22:21:25+00:00","threat_score":85,"interesting":false,"threat_level":2,"verdict":"malicious","certificates":[],"is_certificates_valid":false,"certificates_validation_message":"No signature was present in the subject. (0x800b0100)","domains":[],"compromised_hosts":[],"hosts":[],"total_network_connections":0,"total_processes":1,"total_signatures":171,"extracted_files":[{"name":"SFPATWT.INF.x2anylock","file_path":"C:\\$WINDOWS.~BT\\Sources\\SFPATWT.INF.x2anylock","file_size":165829,"md5":"7fe352e6d3539ec8e49035879ca72e41","sha1":"66948b50540bcab38dc2cc978d2a7152e2bf712d","sha256":"96eede9c135afd939a341337eec69bbe8319d03e91cfc7c956ef66c15ba83891","sha512":"64d971d146a1af4e5b904194b48555fc0a56a8f727cd012d9f6a963de20813c176742faf5cbaa20de22c0bfb8d81af142427962f22cafd99d7283a569248f101","type_tags":["com","executable"],"description":"DOS executable (COM), start instruction 0x8c456bf6 e5b6f6d2","runtime_process":"encrypt.exe (PID: 4700)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/688bec64b905e9af930423cc/download/dropped-file?key=f634757953dbfb76e11d21ad549d1bb5a8ddcfecf4b3c8bd640520650f18df0c0f5cfd07551129effaee203ce32a84eedaf5f1dc9730d7fdbd59eda3dcdcaf92f90cbd92ff45a0c1a17a2554a4a46ca6","submit_link":"/bff/report/688bec64b905e9af930423cc/submit/dropped-file?key=f634757953dbfb76e11d21ad549d1bb5a8ddcfecf4b3c8bd640520650f18df0c0f5cfd07551129effaee203ce32a84eedaf5f1dc9730d7fdbd59eda3dcdcaf92f90cbd92ff45a0c1a17a2554a4a46ca6","has_overview":true,"extended_details":null},{"name":"amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_gd-gb_4897be7c0d6eef46.manifest.x2anylock","file_path":"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_gd-gb_4897be7c0d6eef46.manifest.x2anylock","file_size":2619,"md5":"dc188154d20ddb35fe96885e835422f8","sha1":"2381146c8f4476ffb6b850872fe714419ae26c73","sha256":"5215e800b20340ac671078900dfa4dfdbea1c252a2f500e1eec30188cd2cac4d","sha512":"f76c46c70bed73065bd0912b5495ae98895c24c61746426ffb387efc60929d56a0ef220f834c3404c67cb5fcb708792de9a1ae9cf549cb57f11738d597d65851","type_tags":["com","executable"],"description":"DOS executable (COM), maybe with interrupt 22h, start instruction 0xb8403dbf 50f259e9","runtime_process":"encrypt.exe (PID: 4700)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/688bec64b905e9af930423cc/download/dropped-file?key=f67c3ba325bcf3f0e10c48968396c618a162678211048e4185f1d96fb0200f85aa218c8957e170d713e468e6e6ffb4aa853c73df2001903dc211d4f3c606ff46e02834e40a12d63a02bbbc287302307d70eadc389ecfad4576cb68778ef1c4d9fd4e63336d6076675bae18eaf2b225757bc9f65eb89fe7a2e3af25b83e696c6dd30259a67a8625e36afa2c647e645553f9cd0bb6b5bb627df5dfe5c636bd4d8df618848aa7a0a0d930352e1bbda56e19e6","submit_link":"/bff/report/688bec64b905e9af930423cc/submit/dropped-file?key=f67c3ba325bcf3f0e10c48968396c618a162678211048e4185f1d96fb0200f85aa218c8957e170d713e468e6e6ffb4aa853c73df2001903dc211d4f3c606ff46e02834e40a12d63a02bbbc287302307d70eadc389ecfad4576cb68778ef1c4d9fd4e63336d6076675bae18eaf2b225757bc9f65eb89fe7a2e3af25b83e696c6dd30259a67a8625e36afa2c647e645553f9cd0bb6b5bb627df5dfe5c636bd4d8df618848aa7a0a0d930352e1bbda56e19e6","has_overview":true,"extended_details":null},{"name":"syncres.dll.mui.x2anylock","file_path":"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_lv-lv_804a91c0c5235306\\syncres.dll.mui.x2anylock","file_size":30308,"md5":"199e4fea86dd7faf37bedacf89de1318","sha1":"9f1422ca7852136c7da9e6959838ed92339d4274","sha256":"b9c9a37870defd913fc3db44cc872346369d7c0918de24f0024ebc7f2d7541a2","sha512":"d74d3ca272fc7d25ba3ed0811164bbf4fe398d3add6934ef495b4aff9b6498874f98b1c63ba66fb682e2f444b71b9de4a97efb0895b1d7b7d32f8deb5fccf6b0","type_tags":["com","executable"],"description":"DOS executable (COM), start instruction 0xe9b574ef 38d623cd","runtime_process":"encrypt.exe (PID: 4700)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/688bec64b905e9af930423cc/download/dropped-file?key=4a9e31a6ca3ed9171aa72f172b2b756f20eaea02336163e09fcc183a3bd91eb9a618422eaa1c48b1ffdc82e7910d67d20a928a31b27393c93abcf6a7a0d0036b0414b0247eefffcf9c9172253a212e0ffe4c4816","submit_link":"/bff/report/688bec64b905e9af930423cc/submit/dropped-file?key=4a9e31a6ca3ed9171aa72f172b2b756f20eaea02336163e09fcc183a3bd91eb9a618422eaa1c48b1ffdc82e7910d67d20a928a31b27393c93abcf6a7a0d0036b0414b0247eefffcf9c9172253a212e0ffe4c4816","has_overview":true,"extended_details":null},{"name":"How to decrypt my data.txt","file_path":"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_yo-ng_c2789c671a8ffaad\\How to decrypt my data.txt","file_size":2908,"md5":"5766445691eebc75b1fbe50c18fd5fac","sha1":"902a21181dab6ae649fc0e8db90435a90c83da04","sha256":"715806fd88acc8140a5e6321fe6116033dc1e41c647897a900c194ae22462863","sha512":"71ee6c776b8afed3672eb69500f2c0e0d0d143d54053382b504679d946554c753a2b22b5c9a03e91b4cecc4fa3f855eb1cf11120912e6c92b391a5b850e11dca","type_tags":["text"],"description":"ASCII text, with very long lines (351)","runtime_process":"encrypt.exe (PID: 4700)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/688bec64b905e9af930423cc/download/dropped-file?key=3d0736466d446c56645681e10625494d1cf7da0b0e570485bf0658a0464be2650f4fd0df150449a821cc6f76e160ebe297cd6f05b8f9848f00cab67943e2a8cd984805b3307abaa5f1643473211610d0dc3c56d9b9","submit_link":"/bff/report/688bec64b905e9af930423cc/submit/dropped-file?key=3d0736466d446c56645681e10625494d1cf7da0b0e570485bf0658a0464be2650f4fd0df150449a821cc6f76e160ebe297cd6f05b8f9848f00cab67943e2a8cd984805b3307abaa5f1643473211610d0dc3c56d9b9","has_overview":true,"extended_details":null},{"name":"aphostres.dll.mui.x2anylock","file_path":"C:\\found.000\\dir0001.chk\\wow64_microsoft-windows-m..aphostres.resources_31bf3856ad364e35_10.0.17134.1_el-gr_637f00823a10b78d\\aphostres.dll.mui.x2anylock","file_size":18020,"md5":"ae6be16b741fb144286aec3b280fdb4b","sha1":"6187ff134648875bdc62b07b291c2c591bc44066","sha256":"3ad6e393a0fddb2f9dd6a84b5c9c033ab6e26eee83597da80dc8c18fc236ca0a","sha512":"64ff89e0e2f5396590b4d7bfebbdd6c84444432b698886bdc019458d1193be30b826a40e80431785d2d5df4f97d0b336aeed28e6295818577f1f852f48f3829f","type_tags":["com","executable"],"description":"DOS executable (COM), start instruction 0xeb6f0439 1b331c1d","runtime_process":"encrypt.exe (PID: 4700)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/688bec64b905e9af930423cc/download/dropped-file?key=53a8d29dd3f5874a020cf5c05c9f13d9efa8f964ee32f7962baa22285d2c702928e8c00154869cfed57a450f4d880d663f07c585727b97f7e3d4a64674c077f0bca89dab281a81cc125b09818d9b934e4137e105ced3","submit_link":"/bff/report/688bec64b905e9af930423cc/submit/dropped-file?key=53a8d29dd3f5874a020cf5c05c9f13d9efa8f964ee32f7962baa22285d2c702928e8c00154869cfed57a450f4d880d663f07c585727b97f7e3d4a64674c077f0bca89dab281a81cc125b09818d9b934e4137e105ced3","has_overview":true,"extended_details":null},{"name":"wow64_microsoft-windows-m..aphostres.resources_31bf3856ad364e35_10.0.17134.1_fi-fi_02c00a792f1a3e93.manifest.x2anylock","file_path":"C:\\found.000\\dir0001.chk\\wow64_microsoft-windows-m..aphostres.resources_31bf3856ad364e35_10.0.17134.1_fi-fi_02c00a792f1a3e93.manifest.x2anylock","file_size":2627,"md5":"36ee3b8718682ddee855da0fe7d59f8c","sha1":"e9a8533f063e6761910532ecc352d0443395ac11","sha256":"48e2bbec61d95d2b08e2128a523e37e12df2ea5a2f93bd3e8dd2ea8aa1f7e23e","sha512":"3ffff127e9b5a82cab753ea234ff671f878b0e80a1ddbed1fe74bf5f7266caf295f215d73501f667667e2a1ad4f16a5c145cb40a49bc160b9571f33046f70c7e","type_tags":["com","executable"],"description":"DOS executable (COM), start instruction 0xb824939b 7866a175","runtime_process":"encrypt.exe (PID: 4700)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/688bec64b905e9af930423cc/download/dropped-file?key=224f1443a650fb721a03debc7aadb27fd843cc0d4b21d858efc9e94ab90c43a3d82d3d247b440574c6549941f5421819a2962de6d8ea0d94dc33fb74b6719a34e695a2782504c8d3a8800933473955297dc2eca4c708cfd6c49686eff9cd765af071c320878f239b74eeca1d0d9f55ba73723908f229fe18a64da8cdb3d23c239c43fa4dc1573d1d00b3c83f232077f4053edfcfd53a84711c5cea354d8ae7058a0141e1f97dc138272b5557e5bcf1a7","submit_link":"/bff/report/688bec64b905e9af930423cc/submit/dropped-file?key=224f1443a650fb721a03debc7aadb27fd843cc0d4b21d858efc9e94ab90c43a3d82d3d247b440574c6549941f5421819a2962de6d8ea0d94dc33fb74b6719a34e695a2782504c8d3a8800933473955297dc2eca4c708cfd6c49686eff9cd765af071c320878f239b74eeca1d0d9f55ba73723908f229fe18a64da8cdb3d23c239c43fa4dc1573d1d00b3c83f232077f4053edfcfd53a84711c5cea354d8ae7058a0141e1f97dc138272b5557e5bcf1a7","has_overview":true,"extended_details":null},{"name":"wow64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_zh-tw_774f24663cb9f880.manifest.x2anylock","file_path":"C:\\found.000\\dir0001.chk\\wow64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_zh-tw_774f24663cb9f880.manifest.x2anylock","file_size":2617,"md5":"45138ba11a3c17399430b873ed66dc03","sha1":"4085f67857b6daecb4bd256767604350042e2345","sha256":"586774c177972c5e4dbce0856b94698039f22251a31b2503fefe48de12a281a2","sha512":"449e07c6b637dd1b386eb58fcc368162c17be1852f2954e57ea9164243e306edddb64d5933458cfa4f949c7ff170e7dd4e71ba5293766d2f2e671113673bb819","type_tags":["com","executable"],"description":"DOS executable (COM), start instruction 0xb821ec49 e76dec15","runtime_process":"encrypt.exe (PID: 4700)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/688bec64b905e9af930423cc/download/dropped-file?key=ce04c0d2983dfbda1dee86753b3a7413855fd3f6875283228708c57e7b503603a664d5d77b9947e99fa000b2ced3c2598bd6b6e8357d4b8fa1347ea089f4d2385ddafe86f85a53b23173f6d33f89074ae04d0b925a76d38b1313aa622691a5af2d64c6a7dafef988baafb2be109fc092dda7b221a11c86dd88463a08e267590aa6398743825c1008a162a046d52a1ed5227748bce339ef39ee4d0f791f0d90b462c068f10ca89c90d87a7de2c07058e1","submit_link":"/bff/report/688bec64b905e9af930423cc/submit/dropped-file?key=ce04c0d2983dfbda1dee86753b3a7413855fd3f6875283228708c57e7b503603a664d5d77b9947e99fa000b2ced3c2598bd6b6e8357d4b8fa1347ea089f4d2385ddafe86f85a53b23173f6d33f89074ae04d0b925a76d38b1313aa622691a5af2d64c6a7dafef988baafb2be109fc092dda7b221a11c86dd88463a08e267590aa6398743825c1008a162a046d52a1ed5227748bce339ef39ee4d0f791f0d90b462c068f10ca89c90d87a7de2c07058e1","has_overview":true,"extended_details":null},{"name":"bootmgr.efi.mui.x2anylock","file_path":"C:\\found.000\\dir0002.chk\\amd64_microsoft-windows-b..nager-efi.resources_31bf3856ad364e35_10.0.17134.1_ro-ro_ab114d5ca4a18d30\\bootmgr.efi.mui.x2anylock","file_size":76796,"md5":"477151532c383acc1e5dcc808b3c65c4","sha1":"3c9cf7fae5a140ba24bb9530284e91dae53cb90b","sha256":"445b2550ca285f9b6b7b17bee9ce02a3dfc546e856ba1b9fda664248afe455bd","sha512":"d4fef4c4e3bbc7c57d06f485f26d79376368909bd868ec9ab5fd4e9358071cf114d56f8e50f0872ee5a6570857a3868dd496e06d75042b0a338edee956da42b9","type_tags":["com","executable"],"description":"DOS executable (COM), maybe with interrupt 22h, start instruction 0x8c2550b3 86c2103e","runtime_process":"encrypt.exe (PID: 4700)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/688bec64b905e9af930423cc/download/dropped-file?key=ea9f33d8711a42f08374007b4a0379c8bafbe6165e53e33269b7763801437bd98099e435d85f78bdd92f2948dbde1aed2f9c931a52ccbf308882326cb8e2d9052dd11ab8f39998386249c4be5cf282c5e7c4be","submit_link":"/bff/report/688bec64b905e9af930423cc/submit/dropped-file?key=ea9f33d8711a42f08374007b4a0379c8bafbe6165e53e33269b7763801437bd98099e435d85f78bdd92f2948dbde1aed2f9c931a52ccbf308882326cb8e2d9052dd11ab8f39998386249c4be5cf282c5e7c4be","has_overview":true,"extended_details":null},{"name":"cdosys.dll.mui.x2anylock","file_path":"C:\\found.000\\dir0002.chk\\amd64_microsoft-windows-cdosys.resources_31bf3856ad364e35_10.0.17134.1_it-it_d276206cf5455c73\\cdosys.dll.mui.x2anylock","file_size":53348,"md5":"865994b1e51d14dc3129b557ddd39e51","sha1":"354ea7a95af33fca7c835a55c1fee478461a645e","sha256":"b21267c5377ec26233681d354ddb0ebc0bf6c2dbd13dbff8aa8b0ec1a0ce9fd5","sha512":"1a63d75a732a746b1c95d3e08dbe3e7001feda36a72519ea0ab94b13855009d2005fdff946107525ff1e33b36bd3ecd0d882d9b3cf93ab3be2b9460a1247cc86","type_tags":["com","executable"],"description":"DOS executable (COM), maybe with interrupt 22h, start instruction 0xb8d3a311 72165320","runtime_process":"encrypt.exe (PID: 4700)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/688bec64b905e9af930423cc/download/dropped-file?key=cd1acaa48220c69b3fb036ba1e3d9cbc6514bfbbf2a84bd1efae084551dffe3d447bba3c9fdd22fdfe10a5abc3130cb3e6b29d756073048f82982bb5a54ba3df72e1aac8595d5ee6c6c623818e67c472762c53","submit_link":"/bff/report/688bec64b905e9af930423cc/submit/dropped-file?key=cd1acaa48220c69b3fb036ba1e3d9cbc6514bfbbf2a84bd1efae084551dffe3d447bba3c9fdd22fdfe10a5abc3130cb3e6b29d756073048f82982bb5a54ba3df72e1aac8595d5ee6c6c623818e67c472762c53","has_overview":true,"extended_details":null},{"name":"amd64_microsoft-windows-comdlg32.resources_31bf3856ad364e35_10.0.17134.1_fr-fr_72f98d75cc1156cd.manifest.x2anylock","file_path":"C:\\found.000\\dir0002.chk\\amd64_microsoft-windows-comdlg32.resources_31bf3856ad364e35_10.0.17134.1_fr-fr_72f98d75cc1156cd.manifest.x2anylock","file_size":460,"md5":"6a8c567a55e3bc5ca1fe7290cab4e426","sha1":"fe8fc5f01a04d1f948320470d4f69d59d579c92d","sha256":"ce49f1c5b1c39cc5484870d7d66fe358ee29180e2ca6c15cda76859edc3b108b","sha512":"985e071412ca32577efce9a193d9e5859b3ebf0e626f74ed4ff35eb5f2233f290a7dc56a6322094aade2c729270788ab95d7136676ed33e25b40ad61fc906485","type_tags":["com","executable"],"description":"DOS executable (COM), start instruction 0xeb72096f 3bdd3dac","runtime_process":"encrypt.exe (PID: 4700)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/688bec64b905e9af930423cc/download/dropped-file?key=ddbabb3e1761c20cc02d4a0c4ca3106d39f5f8f1416ffba94b8efd1e645c591d6a77da0f23d4db8434f280d2278fc4adcd4f4278b9b1aa204e73726160cafdb5e7aa23a0f44d09457f827258ca90b9c155effb982205a65bb4d19725e1b107293a39e18537b1444ad8545f496dab0862bca19949b78fa3571b616cd0d2034139036a7595af312a50e3ebdf6e6fdc415632661d07353b882a791436f9a17136b1f700c1913315d40e4c2c07a9c4","submit_link":"/bff/report/688bec64b905e9af930423cc/submit/dropped-file?key=ddbabb3e1761c20cc02d4a0c4ca3106d39f5f8f1416ffba94b8efd1e645c591d6a77da0f23d4db8434f280d2278fc4adcd4f4278b9b1aa204e73726160cafdb5e7aa23a0f44d09457f827258ca90b9c155effb982205a65bb4d19725e1b107293a39e18537b1444ad8545f496dab0862bca19949b78fa3571b616cd0d2034139036a7595af312a50e3ebdf6e6fdc415632661d07353b882a791436f9a17136b1f700c1913315d40e4c2c07a9c4","has_overview":true,"extended_details":null},{"name":"oobe-button-template.html.x2anylock","file_path":"C:\\found.000\\dir0003.chk\\oobe-button-template.html.x2anylock","file_size":404,"md5":"eb526150b0c822e9bcf5928355912555","sha1":"1b7b6ba8703230d14d8da3340945ad8867709860","sha256":"2f68adbffb67d52ba7f32f089304abdd3c30b8b5c60fac69f4320c9e25942f4d","sha512":"07255524e9a571423dd0a13c1af6fc20f000d70b07930b8d98bdd37dfa89f70c94fdb650068baa1cc42d15bdfe19461ae0cb634196c38ac096c0d88c642612d2","type_tags":["com","executable"],"description":"DOS executable (COM), start instruction 0xe997005a c0fcb8ca","runtime_process":"encrypt.exe (PID: 4700)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/688bec64b905e9af930423cc/download/dropped-file?key=4fc1d614e1819737c281b746cc0470cc7077444e96e24fe3ac68ed5d014756b2c100fc518359cc7e998bed6699f0138090ceed28e4ed14594852b25a67e89c99326841781900c23f39d94917dedd7cec5c7636377284fa46499c3f35de","submit_link":"/bff/report/688bec64b905e9af930423cc/submit/dropped-file?key=4fc1d614e1819737c281b746cc0470cc7077444e96e24fe3ac68ed5d014756b2c100fc518359cc7e998bed6699f0138090ceed28e4ed14594852b25a67e89c99326841781900c23f39d94917dedd7cec5c7636377284fa46499c3f35de","has_overview":true,"extended_details":null},{"name":"404-13.htm.x2anylock","file_path":"C:\\inetpub\\custerr\\en-US\\404-13.htm.x2anylock","file_size":1327,"md5":"3cc08ce13fc33dda5099d569223583ea","sha1":"930bbbde16b0a7cea23dc0ac86a3910b47c7ca75","sha256":"c995722fbb94fc296beb0e6b571672c39657a95a2a1354c4340f436b4b397937","sha512":"a1d27c6d6e151d6938cf01680cecec730eaa12dd99894003ac6cb90d79bae0bb59669d5410379604b2df186efa90dd20e63d9e6902bf6ae95c42db8e57c3d7fe","type_tags":["com","executable"],"description":"DOS executable (COM), start instruction 0x8c4db14c 40bafd73","runtime_process":"encrypt.exe (PID: 4700)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/688bec64b905e9af930423cc/download/dropped-file?key=1be4a862f7fef3bdf3244c2e0de5739c291770a9859ab09563f5deee6ead982f43e814c269a3433f0edb520e2bf79d1d4d180e11e9fe9ac88fcd0ca2dfa16de97b1e933779552a106158b095e85068","submit_link":"/bff/report/688bec64b905e9af930423cc/submit/dropped-file?key=1be4a862f7fef3bdf3244c2e0de5739c291770a9859ab09563f5deee6ead982f43e814c269a3433f0edb520e2bf79d1d4d180e11e9fe9ac88fcd0ca2dfa16de97b1e933779552a106158b095e85068","has_overview":true,"extended_details":null},{"name":"mkdirp.x2anylock","file_path":"C:\\tempdir\\node_modules\\.bin\\mkdirp.x2anylock","file_size":483,"md5":"c356f423abe923d1651de8ee921ab08d","sha1":"62b736a23d8fb365e8b3259c488cd544c527d073","sha256":"bb2cd998354bbb01d409007873d7e9f12a10ec7b28cb813f30a29b668659a577","sha512":"d3cdefa4944da4d9f04adfafd9db2224e297f250aa124edd85e09669f7ee406fd4b241c8e454c995a0a71cbf32d83292798773644eab4cad9b2f84d81361611a","type_tags":["com","executable"],"description":"DOS executable (COM), start instruction 0xeb178808 9c6f0918","runtime_process":"encrypt.exe (PID: 4700)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/688bec64b905e9af930423cc/download/dropped-file?key=fedeb6e150e677a16443970b8e26dec71b9e1935f19c32448b43c6c17eb1bb92f9a52677321da644c79568fb11d38965d5e50e179d7e65b0b99ff1bf6bff7a233733517f1c75ece2841d","submit_link":"/bff/report/688bec64b905e9af930423cc/submit/dropped-file?key=fedeb6e150e677a16443970b8e26dec71b9e1935f19c32448b43c6c17eb1bb92f9a52677321da644c79568fb11d38965d5e50e179d7e65b0b99ff1bf6bff7a233733517f1c75ece2841d","has_overview":true,"extended_details":null},{"name":"bn.js.x2anylock","file_path":"C:\\tempdir\\node_modules\\@pm2\\agent\\node_modules\\dayjs\\esm\\locale\\bn.js.x2anylock","file_size":1756,"md5":"e89b2c4e831e661cd94d5eeb94eefb57","sha1":"54bbe685d403f856728bab03c1f1e36d71f67b92","sha256":"c6c411a64931f2727680851000783856b52f5e8d0e9f9962048a79ecea5ce52e","sha512":"f23f5c5bcd38b0305a86ea05398211eeea18c37ec487de5aa40b6d051c254fc713d786d50ce92b68601b5ef5efc48397a562d87a43f6fbaab241c2f6ad6c977b","type_tags":["com","executable"],"description":"DOS executable (COM), start instruction 0xeb0954da 38b363d0","runtime_process":"encrypt.exe (PID: 4700)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/688bec64b905e9af930423cc/download/dropped-file?key=913341b00adb2b87e1939e2d51dbeba29f42ab0e764b8834a24dabe814adfd205ac0a2eae402ff3358f6f15fec33404634d106f5783dadaaf9834506afb8cacf0982ff4efbf03332263a","submit_link":"/bff/report/688bec64b905e9af930423cc/submit/dropped-file?key=913341b00adb2b87e1939e2d51dbeba29f42ab0e764b8834a24dabe814adfd205ac0a2eae402ff3358f6f15fec33404634d106f5783dadaaf9834506afb8cacf0982ff4efbf03332263a","has_overview":true,"extended_details":null},{"name":"mn.js.x2anylock","file_path":"C:\\tempdir\\node_modules\\@pm2\\agent\\node_modules\\dayjs\\esm\\locale\\mn.js.x2anylock","file_size":1479,"md5":"79875f4ff073e3cceeb2ba6211e2a21d","sha1":"db3be5896682e746483e696fa8c095fced45cbbd","sha256":"91bdc98166d2add37f3000899114186c9bb7dc44d52c451331fd93f5bedfc451","sha512":"a859c5b92afefd2b217e2d2bbc97cec011e071f46b547d14038147b0cbb0d6a0c3ebda4137ca4249dd32fff7e8e15294bf21521005511ceae0e86ca2faa8fd78","type_tags":["com","executable"],"description":"DOS executable (COM), start instruction 0xb86af926 fcbdbbb1","runtime_process":"encrypt.exe (PID: 4700)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/688bec64b905e9af930423cc/download/dropped-file?key=841e9c674221e17b42c22855750180ffa7354b748f1162b0123473013595bc40b5b9a5e09b40d5468bd7fa641eb5a65cff54ee23fe83535259ba7bcd97e6890b289ffc51bacb7ddb81ad","submit_link":"/bff/report/688bec64b905e9af930423cc/submit/dropped-file?key=841e9c674221e17b42c22855750180ffa7354b748f1162b0123473013595bc40b5b9a5e09b40d5468bd7fa641eb5a65cff54ee23fe83535259ba7bcd97e6890b289ffc51bacb7ddb81ad","has_overview":true,"extended_details":null},{"name":"uk.js.x2anylock","file_path":"C:\\tempdir\\node_modules\\@pm2\\agent\\node_modules\\dayjs\\esm\\locale\\uk.js.x2anylock","file_size":3027,"md5":"3d414c7669b37cd70292261e8fff3214","sha1":"c2a88e1a6d5e24ea31b261de3113a27b1727ae00","sha256":"352deebe30fed2d72e41f9a696e68358a9f1a2e1ef973ec4c074087622612049","sha512":"cf9c0dbbfcd0cf547276028e4719d43ea26edea703e2825a13c8b3c42c14224747617450fea05f1a0111c7a8f2c1c86005e29284c767399b34f061535b0089ee","type_tags":["com","executable"],"description":"DOS executable (COM), start instruction 0xb8c76963 1fd2f5db","runtime_process":"encrypt.exe (PID: 4700)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/688bec64b905e9af930423cc/download/dropped-file?key=ccfa64d05ff91442e12a871bad071177a46b76a217d7a815fe80d39174a0f42e9559188f0c5bf5f87ccb148b02f914d5504a257190b58791f897ba0c88306fd2edf868f085e5dc373b2b","submit_link":"/bff/report/688bec64b905e9af930423cc/submit/dropped-file?key=ccfa64d05ff91442e12a871bad071177a46b76a217d7a815fe80d39174a0f42e9559188f0c5bf5f87ccb148b02f914d5504a257190b58791f897ba0c88306fd2edf868f085e5dc373b2b","has_overview":true,"extended_details":null},{"name":"es.js.x2anylock","file_path":"C:\\tempdir\\node_modules\\@pm2\\agent\\node_modules\\dayjs\\locale\\es.js.x2anylock","file_size":1179,"md5":"ea9eec50160aee66b89c55fa1d7207ec","sha1":"f1fc5258c908be9f955c2bb8eab7475b1e54fb7b","sha256":"f032e6e25dea3a8a29031ada099ba8a54587075eb722b30c78c9afab916e3933","sha512":"2253feea41cb010b5c60a7746f74b177c64eca2dfefc88aa16969592ace51b466c060dd3960c68df4ee6045efec5504b7c458adaeb231a63c2e1c95b0205bc77","type_tags":["com","executable"],"description":"DOS executable (COM), start instruction 0xeb3ab7c9 9ba85b7a","runtime_process":"encrypt.exe (PID: 4700)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/688bec64b905e9af930423cc/download/dropped-file?key=ace0d702f79a1d382bb328814d7364e59abbe7a168e36d4c7ad0f097742e3fb1bf689cca8a25dbf3bd0f8b33c7ddb60cd0add38bf6d7c719500d846a1642b122cdcadb0fd38fcd0a19b0","submit_link":"/bff/report/688bec64b905e9af930423cc/submit/dropped-file?key=ace0d702f79a1d382bb328814d7364e59abbe7a168e36d4c7ad0f097742e3fb1bf689cca8a25dbf3bd0f8b33c7ddb60cd0add38bf6d7c719500d846a1642b122cdcadb0fd38fcd0a19b0","has_overview":true,"extended_details":null},{"name":"lte.js.x2anylock","file_path":"C:\\tempdir\\node_modules\\@pm2\\agent\\node_modules\\semver\\functions\\lte.js.x2anylock","file_size":213,"md5":"d5054981a4b8ecdf5c8f056a6feae18f","sha1":"2d2c927ff12b57eace049be4d51c6a54c4b39577","sha256":"28f6954d1f6b93b6b67efbc7ce3e9c477f4136226b1592b84a95fc928f8e842e","sha512":"6d7f752b390575dc211b3598ce90a8a8d7aa061b4087fc078747f269edc1b815911e7e925fcd3fd8f671abc30df1f81dc9d223c36b110235aad1c2fbc53ca7d8","type_tags":["com","executable"],"description":"DOS executable (COM), start instruction 0x8c3910db cb404f0e","runtime_process":"encrypt.exe (PID: 4700)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/688bec64b905e9af930423cc/download/dropped-file?key=c4449ca798b858edf6f43e6e93fdb77232f3119104b9a58905ae42dd0b0f454dd6b8d47648e6c474644721675b2be7f8ecabcfbb08fba15dd67eafe09eb273056269ded5e69560e1da4b37","submit_link":"/bff/report/688bec64b905e9af930423cc/submit/dropped-file?key=c4449ca798b858edf6f43e6e93fdb77232f3119104b9a58905ae42dd0b0f454dd6b8d47648e6c474644721675b2be7f8ecabcfbb08fba15dd67eafe09eb273056269ded5e69560e1da4b37","has_overview":true,"extended_details":null},{"name":"bower.json.x2anylock","file_path":"C:\\tempdir\\node_modules\\@pm2\\js-api\\node_modules\\async\\bower.json.x2anylock","file_size":345,"md5":"ec264e7888a2e700c4f0435396e39a6a","sha1":"edfadb72eaea950134fd1eb74df76eee4008fc00","sha256":"e02c764ef5afbfa8c0c2d93dbb6dd6549a083743a843e2901eb1e97626fec2ed","sha512":"9b09e4c17f6182b97f923b6c532e355a26550e3773fc0a67f2a3e57ef59f33096ba9654abfcf5b4da8a6ceac0eac9c0e483b832e0873f14997bb40167fd3ab71","type_tags":["com","executable"],"description":"DOS executable (COM), start instruction 0x8ccd8b1f e378359b","runtime_process":"encrypt.exe (PID: 4700)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/688bec64b905e9af930423cc/download/dropped-file?key=5678052eb953c6d8bb7b4e92066baee325599b06b5ed115766ba8948753ae54ee5d46635af26559ad038921408754689baba822468681305948da25ce50d8bb78f6d2674e3f5fea421846e146b5f09","submit_link":"/bff/report/688bec64b905e9af930423cc/submit/dropped-file?key=5678052eb953c6d8bb7b4e92066baee325599b06b5ed115766ba8948753ae54ee5d46635af26559ad038921408754689baba822468681305948da25ce50d8bb78f6d2674e3f5fea421846e146b5f09","has_overview":true,"extended_details":null},{"name":"getIterator.js.x2anylock","file_path":"C:\\tempdir\\node_modules\\@pm2\\js-api\\node_modules\\async\\internal\\getIterator.js.x2anylock","file_size":407,"md5":"78762bcd16b6f43ca9976c653e8a96e4","sha1":"47d2db821257c158a86c245cbbfa0530f4ef7714","sha256":"4bbb0ff86bfb2d69b129e32c6bb1943b5e57c3d732b78e177dfc99e31970dd7f","sha512":"92c21df17ce834670174261784eb39da42bbe3d80d4b8ff39d784d468df7f3ed9b38c064515a9226ea360fbaabf377a0bb416f3c0818f37b59fc984c5bdc714c","type_tags":["com","executable"],"description":"DOS executable (COM), start instruction 0x8ccc58cc ce04de4c","runtime_process":"encrypt.exe (PID: 4700)","threat_level":0,"threat_level_readable":"no specific threat","group":"informative","av_label":null,"av_matched":null,"av_total":null,"file_available_to_download":true,"download_link":"/bff/report/688bec64b905e9af930423cc/download/dropped-file?key=af1752b4ea7c220d0352379df0d3ef9fdc5e974b8bae48ff8618c419823fb6a3d186a792928ca6bf7fe18bd5e9fdf2db45918682e7f3182555bcd384fe9a104423da3aac95728d5cacd56e0e9bb7a658e5f4c4","submit_link":"/bff/report/688bec64b905e9af930423cc/submit/dropped-file?key=af1752b4ea7c220d0352379df0d3ef9fdc5e974b8bae48ff8618c419823fb6a3d186a792928ca6bf7fe18bd5e9fdf2db45918682e7f3182555bcd384fe9a104423da3aac95728d5cacd56e0e9bb7a658e5f4c4","has_overview":true,"extended_details":null}],"file_metadata":{"file_compositions":["1 .OBJ Files (COFF) linked with LINK.EXE 5.10 (Visual Studio 5) (build: 35213)","1 .BAS Files compiled with C2.EXE 5.0 (Visual Basic 6) (build: 35213)"],"imported_objects":["25 .OBJ Files (COFF) linked with LINK.EXE 6.00 (Visual Studio 6) (build: 33140)","40 .OBJ Files (OMF) linked with LINK.EXE 6.00 (Visual Studio 6) (build: 35213)","91 .OBJ Files (OMF) linked with LINK.EXE 6.00 (Visual Studio 6) (build: 35207)","17 .OBJ Files (COFF) linked with LINK.EXE 6.00 (Visual Studio 6) (build: 35207)","23 .OBJ Files (OMF) linked with LINK.EXE 5.10 (Visual Studio 5) (build: 35207)","166 .OBJ Files (OMF) linked with LINK.EXE 6.00 (Visual Studio 6) (build: 33140)","18 .OBJ Files (OMF) linked with LINK.EXE 5.10 (Visual Studio 5) (build: 33140)"],"file_analysis":["File contains Visual Basic code","File appears to contain raw COFF/OMF content","File is the product of a small codebase (1 files)"],"total_file_compositions_imports":19},"processes":[{"uid":"00000000-00004700","parentuid":null,"name":"encrypt.exe","normalized_path":"C:\\encrypt.exe","command_line":null,"sha256":"d1f9ace720d863fd174753e89b9e889d2e2f71a287fde66158bb2b5752307474","av_label":null,"av_matched":null,"av_total":null,"pid":"4700","icon":"iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAABH0lEQVR4Xu2UXWrCQBCAQymICEUQz2qxLVTUB8HnwoKnkdIr1OQAOUD+k5eREdYuQ2YzWZJQMAMfvuX7Zgf0vHHG+S+zPxxhSKi/t4Dz90/tL/XfAsIwHAQ2oKqqXijL8k5RFHwALUXwA97qV0yTvDHgS53umAHLXQCLbQDzTQAvnz7MPnyYvvswebvA8/oCT69/AUopljzP7QEUHSCRmy9QtznKnQMk8k5egDuBRI7YNkeyLLMHUHSARK4D6NYmzgESuQ7gNtdYA7gTSOQIiunWJmma2gMoOkAi1wHc5ih3DpDIEZTSrVu9AHcCKbbNkSRJ7AEUl4C6rbW89wDb5oMGcPI4jtsHNP23N93clDsFdCmPoogPGBLqH2ecx50rVs0alvIcXXoAAAAASUVORK5CYII=","process_flags":[{"name":"Extracted Streams","data":null}]}],"mitre_attcks":[{"tactic":"Initial Access","technique":"Replication Through Removable Media","attck_id":"T1091","attck_id_wiki":"https://attack.mitre.org/techniques/T1091","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":1,"suspicious_identifiers":[],"informative_identifiers_count":0,"informative_identifiers":[],"parent":null},{"tactic":"Execution","technique":"Native API","attck_id":"T1106","attck_id_wiki":"https://attack.mitre.org/techniques/T1106","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":1,"suspicious_identifiers":["Imports suspicious APIs"],"informative_identifiers_count":8,"informative_identifiers":["Contains ability to create/open files (API string)","Contains ability to execute Windows APIs","Contains ability to set/get the last-error code for a calling thread (API string)","Contains ability to retrieve address of exported function from a DLL (API string)","Contains ability to load modules (API string)","Contains ability to retrieve the fully qualified path of module (API string)","Contains ability to retrieve/modify process thread (API string)","Calls an API typically used to retrieve function addresses"],"parent":null},{"tactic":"Execution","technique":"Service Execution","attck_id":"T1569.002","attck_id_wiki":"https://attack.mitre.org/techniques/T1569/002","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":1,"suspicious_identifiers":["Opened the service control manager"],"informative_identifiers_count":1,"informative_identifiers":["Contains ability to open a service (API string)"],"parent":{"technique":"System Services","attck_id":"T1569","attck_id_wiki":"https://attack.mitre.org/techniques/T1569"}},{"tactic":"Execution","technique":"Windows Command Shell","attck_id":"T1059.003","attck_id_wiki":"https://attack.mitre.org/techniques/T1059/003","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":2,"informative_identifiers":["Contains ability to retrieve the command-line string for the current process (API string)","Able to import GetCommandLine API, which retrieves the command line string for the current process"],"parent":{"technique":"Command and Scripting Interpreter","attck_id":"T1059","attck_id_wiki":"https://attack.mitre.org/techniques/T1059"}},{"tactic":"Execution","technique":"Shared Modules","attck_id":"T1129","attck_id_wiki":"https://attack.mitre.org/techniques/T1129","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":3,"informative_identifiers":["Loads modules at runtime","Calls an API typically used to load libraries","Loads the RPC (Remote Procedure Call) module DLL"],"parent":null},{"tactic":"Persistence","technique":"Windows Service","attck_id":"T1543.003","attck_id_wiki":"https://attack.mitre.org/techniques/T1543/003","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":2,"informative_identifiers":["Contains ability to modify system service (API string)","Contains ability to access device drivers"],"parent":{"technique":"Create or Modify System Process","attck_id":"T1543","attck_id_wiki":"https://attack.mitre.org/techniques/T1543"}},{"tactic":"Persistence","technique":"Create or Modify System Process","attck_id":"T1543","attck_id_wiki":"https://attack.mitre.org/techniques/T1543","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Contains ability to retrieve the contents of the STARTUPINFO structure (API string)"],"parent":null},{"tactic":"Persistence","technique":"Component Object Model Hijacking","attck_id":"T1546.015","attck_id_wiki":"https://attack.mitre.org/techniques/T1546/015","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Overview of unique CLSIDs touched in registry"],"parent":{"technique":"Event Triggered Execution","attck_id":"T1546","attck_id_wiki":"https://attack.mitre.org/techniques/T1546"}},{"tactic":"Persistence","technique":"Registry Run Keys / Startup Folder","attck_id":"T1547.001","attck_id_wiki":"https://attack.mitre.org/techniques/T1547/001","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Contains reference to Windows Startup folder"],"parent":{"technique":"Boot or Logon Autostart Execution","attck_id":"T1547","attck_id_wiki":"https://attack.mitre.org/techniques/T1547"}},{"tactic":"Persistence","technique":"Modify Registry","attck_id":"T1112","attck_id_wiki":"https://attack.mitre.org/techniques/T1112","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":1,"suspicious_identifiers":[],"informative_identifiers_count":0,"informative_identifiers":[],"parent":null},{"tactic":"Privilege Escalation","technique":"Windows Service","attck_id":"T1543.003","attck_id_wiki":"https://attack.mitre.org/techniques/T1543/003","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":2,"informative_identifiers":["Contains ability to modify system service (API string)","Contains ability to access device drivers"],"parent":{"technique":"Create or Modify System Process","attck_id":"T1543","attck_id_wiki":"https://attack.mitre.org/techniques/T1543"}},{"tactic":"Privilege Escalation","technique":"Dynamic-link Library Injection","attck_id":"T1055.001","attck_id_wiki":"https://attack.mitre.org/techniques/T1055/001","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Contains ability to load/free library (API string)"],"parent":{"technique":"Process Injection","attck_id":"T1055","attck_id_wiki":"https://attack.mitre.org/techniques/T1055"}},{"tactic":"Privilege Escalation","technique":"Thread Execution Hijacking","attck_id":"T1055.003","attck_id_wiki":"https://attack.mitre.org/techniques/T1055/003","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Creates a thread in a self process"],"parent":{"technique":"Process Injection","attck_id":"T1055","attck_id_wiki":"https://attack.mitre.org/techniques/T1055"}},{"tactic":"Privilege Escalation","technique":"Create or Modify System Process","attck_id":"T1543","attck_id_wiki":"https://attack.mitre.org/techniques/T1543","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Contains ability to retrieve the contents of the STARTUPINFO structure (API string)"],"parent":null},{"tactic":"Privilege Escalation","technique":"Component Object Model Hijacking","attck_id":"T1546.015","attck_id_wiki":"https://attack.mitre.org/techniques/T1546/015","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Overview of unique CLSIDs touched in registry"],"parent":{"technique":"Event Triggered Execution","attck_id":"T1546","attck_id_wiki":"https://attack.mitre.org/techniques/T1546"}},{"tactic":"Privilege Escalation","technique":"Process Injection","attck_id":"T1055","attck_id_wiki":"https://attack.mitre.org/techniques/T1055","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Able to inject code into another process (API string)"],"parent":null},{"tactic":"Privilege Escalation","technique":"Registry Run Keys / Startup Folder","attck_id":"T1547.001","attck_id_wiki":"https://attack.mitre.org/techniques/T1547/001","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Contains reference to Windows Startup folder"],"parent":{"technique":"Boot or Logon Autostart Execution","attck_id":"T1547","attck_id_wiki":"https://attack.mitre.org/techniques/T1547"}},{"tactic":"Privilege Escalation","technique":"ListPlanting","attck_id":"T1055.015","attck_id_wiki":"https://attack.mitre.org/techniques/T1055/015","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Able to visualize and control listed components (API string)"],"parent":{"technique":"Process Injection","attck_id":"T1055","attck_id_wiki":"https://attack.mitre.org/techniques/T1055"}},{"tactic":"Privilege Escalation","technique":"Extra Window Memory Injection","attck_id":"T1055.011","attck_id_wiki":"https://attack.mitre.org/techniques/T1055/011","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":1,"suspicious_identifiers":[],"informative_identifiers_count":0,"informative_identifiers":[],"parent":{"technique":"Process Injection","attck_id":"T1055","attck_id_wiki":"https://attack.mitre.org/techniques/T1055"}},{"tactic":"Defense Evasion","technique":"Timestomp","attck_id":"T1070.006","attck_id_wiki":"https://attack.mitre.org/techniques/T1070/006","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Contains ability to retrieve file time (API string)"],"parent":{"technique":"Indicator Removal","attck_id":"T1070","attck_id_wiki":"https://attack.mitre.org/techniques/T1070"}},{"tactic":"Defense Evasion","technique":"Debugger Evasion","attck_id":"T1622","attck_id_wiki":"https://attack.mitre.org/techniques/T1622","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":2,"informative_identifiers":["Contains ability to check debugger is running (API string)","Contains ability to register a top-level exception handler (API string)"],"parent":null},{"tactic":"Defense Evasion","technique":"Dynamic-link Library Injection","attck_id":"T1055.001","attck_id_wiki":"https://attack.mitre.org/techniques/T1055/001","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Contains ability to load/free library (API string)"],"parent":{"technique":"Process Injection","attck_id":"T1055","attck_id_wiki":"https://attack.mitre.org/techniques/T1055"}},{"tactic":"Defense Evasion","technique":"File and Directory Permissions Modification","attck_id":"T1222","attck_id_wiki":"https://attack.mitre.org/techniques/T1222","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Contains ability to modify file attributes (API string)"],"parent":null},{"tactic":"Defense Evasion","technique":"Indicator Removal","attck_id":"T1070","attck_id_wiki":"https://attack.mitre.org/techniques/T1070","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":1,"suspicious_identifiers":[],"informative_identifiers_count":3,"informative_identifiers":["Contains ability to empty the recycle bin (API string)","Contains ability to modify file system redirection (API string)","Imports SHEmptyRecycleBin API"],"parent":null},{"tactic":"Defense Evasion","technique":"Obfuscated Files or Information","attck_id":"T1027","attck_id_wiki":"https://attack.mitre.org/techniques/T1027","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":1,"suspicious_identifiers":[],"informative_identifiers_count":7,"informative_identifiers":["Contains CRYPTO related strings","Contains ability to use Cryptographic classes","Loads the Bcrypt module DLL","YARA signature match - RC4 Encryption","Matched Compiler/Packer signature (DIE)","YARA signature match - AES encryption","Shows ability to obfuscate file or information"],"parent":null},{"tactic":"Defense Evasion","technique":"Time Based Evasion","attck_id":"T1497.003","attck_id_wiki":"https://attack.mitre.org/techniques/T1497/003","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":2,"informative_identifiers":["Contains ability to delay execution by waiting for signal/timeout (API string)","Contains ability to retrieve the time elapsed since the system was started (API string)"],"parent":{"technique":"Virtualization/Sandbox Evasion","attck_id":"T1497","attck_id_wiki":"https://attack.mitre.org/techniques/T1497"}},{"tactic":"Defense Evasion","technique":"User Activity Based Checks","attck_id":"T1497.002","attck_id_wiki":"https://attack.mitre.org/techniques/T1497/002","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Able to identify virtual environment by using user activity (API string)"],"parent":{"technique":"Virtualization/Sandbox Evasion","attck_id":"T1497","attck_id_wiki":"https://attack.mitre.org/techniques/T1497"}},{"tactic":"Defense Evasion","technique":"Thread Execution Hijacking","attck_id":"T1055.003","attck_id_wiki":"https://attack.mitre.org/techniques/T1055/003","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Creates a thread in a self process"],"parent":{"technique":"Process Injection","attck_id":"T1055","attck_id_wiki":"https://attack.mitre.org/techniques/T1055"}},{"tactic":"Defense Evasion","technique":"Masquerading","attck_id":"T1036","attck_id_wiki":"https://attack.mitre.org/techniques/T1036","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":2,"suspicious_identifiers":["Rename many files (often indicator of ransomware infection)","Drops PE files with different extensions"],"informative_identifiers_count":1,"informative_identifiers":["Renames files"],"parent":null},{"tactic":"Defense Evasion","technique":"Direct Volume Access","attck_id":"T1006","attck_id_wiki":"https://attack.mitre.org/techniques/T1006","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Contains ability to enumerate volumes (API string)"],"parent":null},{"tactic":"Defense Evasion","technique":"Execution Guardrails","attck_id":"T1480","attck_id_wiki":"https://attack.mitre.org/techniques/T1480","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":2,"informative_identifiers":["Creates mutants","Shows ability to use execution guardrails"],"parent":null},{"tactic":"Defense Evasion","technique":"Hidden Window","attck_id":"T1564.003","attck_id_wiki":"https://attack.mitre.org/techniques/T1564/003","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":2,"informative_identifiers":["Contains ability to show a graphical window (API string)","Contains ability to pass information to a window procedure (API string)"],"parent":{"technique":"Hide Artifacts","attck_id":"T1564","attck_id_wiki":"https://attack.mitre.org/techniques/T1564"}},{"tactic":"Defense Evasion","technique":"Software Packing","attck_id":"T1027.002","attck_id_wiki":"https://attack.mitre.org/techniques/T1027/002","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":1,"suspicious_identifiers":["PE file contains unusual section name"],"informative_identifiers_count":1,"informative_identifiers":["Matched Compiler/Packer signature"],"parent":{"technique":"Obfuscated Files or Information","attck_id":"T1027","attck_id_wiki":"https://attack.mitre.org/techniques/T1027"}},{"tactic":"Defense Evasion","technique":"Process Injection","attck_id":"T1055","attck_id_wiki":"https://attack.mitre.org/techniques/T1055","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Able to inject code into another process (API string)"],"parent":null},{"tactic":"Defense Evasion","technique":"Embedded Payloads","attck_id":"T1027.009","attck_id_wiki":"https://attack.mitre.org/techniques/T1027/009","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":1,"suspicious_identifiers":["Section contains high entropy"],"informative_identifiers_count":0,"informative_identifiers":[],"parent":{"technique":"Obfuscated Files or Information","attck_id":"T1027","attck_id_wiki":"https://attack.mitre.org/techniques/T1027"}},{"tactic":"Defense Evasion","technique":"ListPlanting","attck_id":"T1055.015","attck_id_wiki":"https://attack.mitre.org/techniques/T1055/015","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Able to visualize and control listed components (API string)"],"parent":{"technique":"Process Injection","attck_id":"T1055","attck_id_wiki":"https://attack.mitre.org/techniques/T1055"}},{"tactic":"Defense Evasion","technique":"Extra Window Memory Injection","attck_id":"T1055.011","attck_id_wiki":"https://attack.mitre.org/techniques/T1055/011","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":1,"suspicious_identifiers":[],"informative_identifiers_count":0,"informative_identifiers":[],"parent":{"technique":"Process Injection","attck_id":"T1055","attck_id_wiki":"https://attack.mitre.org/techniques/T1055"}},{"tactic":"Defense Evasion","technique":"File Deletion","attck_id":"T1070.004","attck_id_wiki":"https://attack.mitre.org/techniques/T1070/004","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":1,"suspicious_identifiers":["Opens file with deletion access rights"],"informative_identifiers_count":0,"informative_identifiers":[],"parent":{"technique":"Indicator Removal","attck_id":"T1070","attck_id_wiki":"https://attack.mitre.org/techniques/T1070"}},{"tactic":"Defense Evasion","technique":"Double File Extension","attck_id":"T1036.007","attck_id_wiki":"https://attack.mitre.org/techniques/T1036/007","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":1,"suspicious_identifiers":["Renames files with double extension (often done by ransomware)"],"informative_identifiers_count":0,"informative_identifiers":[],"parent":{"technique":"Masquerading","attck_id":"T1036","attck_id_wiki":"https://attack.mitre.org/techniques/T1036"}},{"tactic":"Defense Evasion","technique":"Disable or Modify Tools","attck_id":"T1562.001","attck_id_wiki":"https://attack.mitre.org/techniques/T1562/001","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Found anti-virus related strings names"],"parent":{"technique":"Impair Defenses","attck_id":"T1562","attck_id_wiki":"https://attack.mitre.org/techniques/T1562"}},{"tactic":"Defense Evasion","technique":"Virtualization/Sandbox Evasion","attck_id":"T1497","attck_id_wiki":"https://attack.mitre.org/techniques/T1497","malicious_identifiers_count":1,"malicious_identifiers":["The input sample contains a known anti-VM trick"],"suspicious_identifiers_count":1,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Attempts to call APIs commonly associated with anti-analysis and evasion techniques"],"parent":null},{"tactic":"Defense Evasion","technique":"Indicator Removal from Tools","attck_id":"T1027.005","attck_id_wiki":"https://attack.mitre.org/techniques/T1027/005","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":2,"informative_identifiers":["XOR operations in executable file detected","Contains XOR operation loops [Stream disassembly]"],"parent":{"technique":"Obfuscated Files or Information","attck_id":"T1027","attck_id_wiki":"https://attack.mitre.org/techniques/T1027"}},{"tactic":"Defense Evasion","technique":"Encrypted/Encoded File","attck_id":"T1027.013","attck_id_wiki":"https://attack.mitre.org/techniques/T1027/013","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":1,"suspicious_identifiers":["YARA signature match – cryptographic algorithms"],"informative_identifiers_count":0,"informative_identifiers":[],"parent":{"technique":"Obfuscated Files or Information","attck_id":"T1027","attck_id_wiki":"https://attack.mitre.org/techniques/T1027"}},{"tactic":"Defense Evasion","technique":"Modify Registry","attck_id":"T1112","attck_id_wiki":"https://attack.mitre.org/techniques/T1112","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":1,"suspicious_identifiers":[],"informative_identifiers_count":0,"informative_identifiers":[],"parent":null},{"tactic":"Defense Evasion","technique":"Dynamic API Resolution","attck_id":"T1027.007","attck_id_wiki":"https://attack.mitre.org/techniques/T1027/007","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Contains ability to dynamically determine API calls"],"parent":{"technique":"Obfuscated Files or Information","attck_id":"T1027","attck_id_wiki":"https://attack.mitre.org/techniques/T1027"}},{"tactic":"Defense Evasion","technique":"Deobfuscate/Decode Files or Information","attck_id":"T1140","attck_id_wiki":"https://attack.mitre.org/techniques/T1140","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Shows ability to deobfuscate/decode files or information"],"parent":null},{"tactic":"Credential Access","technique":"OS Credential Dumping","attck_id":"T1003","attck_id_wiki":"https://attack.mitre.org/techniques/T1003","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Attempts to invoke APIs commonly associated with credential theft and data exfiltration functionality"],"parent":null},{"tactic":"Credential Access","technique":"Credentials from Password Stores","attck_id":"T1555","attck_id_wiki":"https://attack.mitre.org/techniques/T1555","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Contains string like password/secret"],"parent":null},{"tactic":"Credential Access","technique":"Steal or Forge Kerberos Tickets","attck_id":"T1558","attck_id_wiki":"https://attack.mitre.org/techniques/T1558","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Able to access credential file using Kerberos"],"parent":null},{"tactic":"Discovery","technique":"System Location Discovery","attck_id":"T1614","attck_id_wiki":"https://attack.mitre.org/techniques/T1614","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Able to query system locale information (API string)"],"parent":null},{"tactic":"Discovery","technique":"File and Directory Discovery","attck_id":"T1083","attck_id_wiki":"https://attack.mitre.org/techniques/T1083","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":11,"informative_identifiers":["Contains ability to retrieve file and directory information (API string)","Contains ability to read files (API string)","Tries to access non-existent files (executable)","Reads files","Contains ability to enumerate files on disk (API string)","Able to rename or move file/directory (API string)","Calls an API typically used for searching a directory for files","Touches files in the Windows directory","Touches files","Tries to access non-existent files (non-executable)","Contains references to file movement (imports API)"],"parent":null},{"tactic":"Discovery","technique":"Debugger Evasion","attck_id":"T1622","attck_id_wiki":"https://attack.mitre.org/techniques/T1622","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":2,"informative_identifiers":["Contains ability to check debugger is running (API string)","Contains ability to register a top-level exception handler (API string)"],"parent":null},{"tactic":"Discovery","technique":"System Information Discovery","attck_id":"T1082","attck_id_wiki":"https://attack.mitre.org/techniques/T1082","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":1,"suspicious_identifiers":["Calls an API typically used to find and list the Windows drive types"],"informative_identifiers_count":14,"informative_identifiers":["Contains ability to retrieve volume information (API string)","Contains ability to retrieve a module handle (API string)","Attempts to call APIs to gather system and hardware detail","Calls an API typically used to retrieve computer name","Calls an API typically used to retrieve information about the current system","Contains ability to retrieve the NetBIOS name of the local computer (API string)","Contains ability to read software policies","Contains ability to retrieve information about the current system (API string)","Contains ability to determine disk drive type (API string)","Calls an API typically used to get product type","Calls an API typically used to get system version information","Queries volume information","Reads the active computer name","Reads information about supported languages"],"parent":null},{"tactic":"Discovery","technique":"Process Discovery","attck_id":"T1057","attck_id_wiki":"https://attack.mitre.org/techniques/T1057","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":3,"suspicious_identifiers":["Calls an API typically used to enumerate process encountered in a system snapshot"],"informative_identifiers_count":6,"informative_identifiers":["Contains ability to determine if process is running under WOW64 (API string)","Contains ability to enumerate process and/or its information (API string)","Contains ability to retrieve/open a process (API string)","Calls an API typically used for taking snapshot of the specified processes","Queries basic information of the specified process","Calls an API typically used to determine if process is running under WOW64"],"parent":null},{"tactic":"Discovery","technique":"Security Software Discovery","attck_id":"T1518.001","attck_id_wiki":"https://attack.mitre.org/techniques/T1518/001","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":1,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Possibly checks for the presence of an Antivirus engine"],"parent":{"technique":"Software Discovery","attck_id":"T1518","attck_id_wiki":"https://attack.mitre.org/techniques/T1518"}},{"tactic":"Discovery","technique":"Query Registry","attck_id":"T1012","attck_id_wiki":"https://attack.mitre.org/techniques/T1012","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":1,"suspicious_identifiers":[],"informative_identifiers_count":3,"informative_identifiers":["Contains registry location strings","Opens registry keys","Queries registry keys"],"parent":null},{"tactic":"Discovery","technique":"Time Based Evasion","attck_id":"T1497.003","attck_id_wiki":"https://attack.mitre.org/techniques/T1497/003","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":2,"informative_identifiers":["Contains ability to delay execution by waiting for signal/timeout (API string)","Contains ability to retrieve the time elapsed since the system was started (API string)"],"parent":{"technique":"Virtualization/Sandbox Evasion","attck_id":"T1497","attck_id_wiki":"https://attack.mitre.org/techniques/T1497"}},{"tactic":"Discovery","technique":"User Activity Based Checks","attck_id":"T1497.002","attck_id_wiki":"https://attack.mitre.org/techniques/T1497/002","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Able to identify virtual environment by using user activity (API string)"],"parent":{"technique":"Virtualization/Sandbox Evasion","attck_id":"T1497","attck_id_wiki":"https://attack.mitre.org/techniques/T1497"}},{"tactic":"Discovery","technique":"System Service Discovery","attck_id":"T1007","attck_id_wiki":"https://attack.mitre.org/techniques/T1007","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":3,"suspicious_identifiers":["Calls an API typically used to enumerate services","Requested access to a system service","Calls an API typically used to retrieve the current status of the specified service"],"informative_identifiers_count":2,"informative_identifiers":["Able to enumerate service (API string)","Queries services related registry keys"],"parent":null},{"tactic":"Discovery","technique":"System Time Discovery","attck_id":"T1124","attck_id_wiki":"https://attack.mitre.org/techniques/T1124","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":3,"informative_identifiers":["Contains ability to retrieve machine timezone (API string)","Contains ability to retrieve machine time (API string)","Able to retrieve date formats supported by the local system (API string)"],"parent":null},{"tactic":"Discovery","technique":"System Network Configuration Discovery","attck_id":"T1016","attck_id_wiki":"https://attack.mitre.org/techniques/T1016","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Contains ability to free the memory used by network management functions (API string)"],"parent":null},{"tactic":"Discovery","technique":"Network Share Discovery","attck_id":"T1135","attck_id_wiki":"https://attack.mitre.org/techniques/T1135","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Contains ability to query information about shared network resources (API string)"],"parent":null},{"tactic":"Discovery","technique":"Virtualization/Sandbox Evasion","attck_id":"T1497","attck_id_wiki":"https://attack.mitre.org/techniques/T1497","malicious_identifiers_count":1,"malicious_identifiers":["The input sample contains a known anti-VM trick"],"suspicious_identifiers_count":1,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Attempts to call APIs commonly associated with anti-analysis and evasion techniques"],"parent":null},{"tactic":"Discovery","technique":"Application Window Discovery","attck_id":"T1010","attck_id_wiki":"https://attack.mitre.org/techniques/T1010","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Calls an API typically used to enumerate active windows"],"parent":null},{"tactic":"Discovery","technique":"System Language Discovery","attck_id":"T1614.001","attck_id_wiki":"https://attack.mitre.org/techniques/T1614/001","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Reads the windows installation language"],"parent":{"technique":"System Location Discovery","attck_id":"T1614","attck_id_wiki":"https://attack.mitre.org/techniques/T1614"}},{"tactic":"Lateral Movement","technique":"Lateral Tool Transfer","attck_id":"T1570","attck_id_wiki":"https://attack.mitre.org/techniques/T1570","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Contains ability to move file or directory (API string)"],"parent":null},{"tactic":"Lateral Movement","technique":"Replication Through Removable Media","attck_id":"T1091","attck_id_wiki":"https://attack.mitre.org/techniques/T1091","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":1,"suspicious_identifiers":[],"informative_identifiers_count":0,"informative_identifiers":[],"parent":null},{"tactic":"Collection","technique":"Local Email Collection","attck_id":"T1114.001","attck_id_wiki":"https://attack.mitre.org/techniques/T1114/001","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":2,"informative_identifiers":["Contains reference to Outlook data files path","Found string that contains outlook file extensions .ost/.pst"],"parent":{"technique":"Email Collection","attck_id":"T1114","attck_id_wiki":"https://attack.mitre.org/techniques/T1114"}},{"tactic":"Collection","technique":"Code Repositories","attck_id":"T1213.003","attck_id_wiki":"https://attack.mitre.org/techniques/T1213/003","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Able to access code repositories"],"parent":{"technique":"Data from Information Repositories","attck_id":"T1213","attck_id_wiki":"https://attack.mitre.org/techniques/T1213"}},{"tactic":"Collection","technique":"Screen Capture","attck_id":"T1113","attck_id_wiki":"https://attack.mitre.org/techniques/T1113","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Contains ability to capture screen (API string)"],"parent":null},{"tactic":"Collection","technique":"Local Data Staging","attck_id":"T1074.001","attck_id_wiki":"https://attack.mitre.org/techniques/T1074/001","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Writes log files"],"parent":{"technique":"Data Staged","attck_id":"T1074","attck_id_wiki":"https://attack.mitre.org/techniques/T1074"}},{"tactic":"Command and Control","technique":"Application Layer Protocol","attck_id":"T1071","attck_id_wiki":"https://attack.mitre.org/techniques/T1071","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":3,"informative_identifiers":["Found potential URL in binary/memory","Found potential URLs in memory dumps","Found potential IP address in binary/memory"],"parent":null},{"tactic":"Command and Control","technique":"Proxy","attck_id":"T1090","attck_id_wiki":"https://attack.mitre.org/techniques/T1090","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Contains references to RPC protocol sequence strings"],"parent":null},{"tactic":"Command and Control","technique":"Web Protocols","attck_id":"T1071.001","attck_id_wiki":"https://attack.mitre.org/techniques/T1071/001","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":1,"suspicious_identifiers":["Attempts to call internet-related API for network communication"],"informative_identifiers_count":0,"informative_identifiers":[],"parent":{"technique":"Application Layer Protocol","attck_id":"T1071","attck_id_wiki":"https://attack.mitre.org/techniques/T1071"}},{"tactic":"Command and Control","technique":"Ingress Tool Transfer","attck_id":"T1105","attck_id_wiki":"https://attack.mitre.org/techniques/T1105","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":1,"suspicious_identifiers":["Drops executable files"],"informative_identifiers_count":3,"informative_identifiers":["Contains ability to write files (API string)","Observed Microsoft Internet Information Services [IIS] related strings in binary/memory","Dropped files"],"parent":null},{"tactic":"Command and Control","technique":"Encrypted Channel","attck_id":"T1573","attck_id_wiki":"https://attack.mitre.org/techniques/T1573","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":2,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Possibly tries to communicate over SSL connection (HTTPS)"],"parent":null},{"tactic":"Command and Control","technique":"Asymmetric Cryptography","attck_id":"T1573.002","attck_id_wiki":"https://attack.mitre.org/techniques/T1573/002","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":1,"suspicious_identifiers":[],"informative_identifiers_count":0,"informative_identifiers":[],"parent":{"technique":"Encrypted Channel","attck_id":"T1573","attck_id_wiki":"https://attack.mitre.org/techniques/T1573"}},{"tactic":"Command and Control","technique":"Mail Protocols","attck_id":"T1071.003","attck_id_wiki":"https://attack.mitre.org/techniques/T1071/003","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Found mail related domain names"],"parent":{"technique":"Application Layer Protocol","attck_id":"T1071","attck_id_wiki":"https://attack.mitre.org/techniques/T1071"}},{"tactic":"Command and Control","technique":"Symmetric Cryptography","attck_id":"T1573.001","attck_id_wiki":"https://attack.mitre.org/techniques/T1573/001","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":3,"informative_identifiers":["Contains ability to use AES encryption instructions","Contains ability to perform AES encryption using crypto++ library","Shows ability to use encryption for command and control traffic"],"parent":{"technique":"Encrypted Channel","attck_id":"T1573","attck_id_wiki":"https://attack.mitre.org/techniques/T1573"}},{"tactic":"Command and Control","technique":"Multi-hop Proxy","attck_id":"T1090.003","attck_id_wiki":"https://attack.mitre.org/techniques/T1090/003","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Contains Tor Onion URL"],"parent":{"technique":"Proxy","attck_id":"T1090","attck_id_wiki":"https://attack.mitre.org/techniques/T1090"}},{"tactic":"Exfiltration","technique":"Scheduled Transfer","attck_id":"T1029","attck_id_wiki":"https://attack.mitre.org/techniques/T1029","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":0,"suspicious_identifiers":[],"informative_identifiers_count":1,"informative_identifiers":["Contains ability to perform scheduled transfer (API string)"],"parent":null},{"tactic":"Impact","technique":"Service Stop","attck_id":"T1489","attck_id_wiki":"https://attack.mitre.org/techniques/T1489","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":2,"suspicious_identifiers":[],"informative_identifiers_count":4,"informative_identifiers":["Able to retrieve/open a process (API string)","Contains ability to close a handle to a service (API string)","Contains ability to terminate a process (API string)","Calls an API used to open a process handle"],"parent":null},{"tactic":"Impact","technique":"Data Encrypted for Impact","attck_id":"T1486","attck_id_wiki":"https://attack.mitre.org/techniques/T1486","malicious_identifiers_count":1,"malicious_identifiers":["Renames many files with double extensions (often indicator of ransomware infection)"],"suspicious_identifiers_count":1,"suspicious_identifiers":["Write many files with double extensions (often indicator of ransomware infection)"],"informative_identifiers_count":0,"informative_identifiers":[],"parent":null},{"tactic":"Impact","technique":"Internal Defacement","attck_id":"T1491.001","attck_id_wiki":"https://attack.mitre.org/techniques/T1491/001","malicious_identifiers_count":0,"malicious_identifiers":[],"suspicious_identifiers_count":1,"suspicious_identifiers":["The input sample dropped very many files"],"informative_identifiers_count":0,"informative_identifiers":[],"parent":{"technique":"Defacement","attck_id":"T1491","attck_id_wiki":"https://attack.mitre.org/techniques/T1491"}}],"network_mode":"default","signatures":[{"threat_level":0,"threat_level_human":"informative","category":"Anti-Detection/Stealthiness","identifier":"string-92","type":2,"relevance":1,"name":"Able to inject code into another process (API string)","description":"Found reference to API \"CreateThread\" (Indicator: \"CreateThread\"; File: \"encrypt.exe\")\n Found reference to API \"CreateThread\" (Indicator: \"CreateThread\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","description_v2":["Found reference to API \"CreateThread\" (Indicator: \"CreateThread\"; File: \"encrypt.exe\")","Found reference to API \"CreateThread\" (Indicator: \"CreateThread\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"],"description_v3":[{"type":"text","value":"Found reference to API \"CreateThread\" (Indicator: \"CreateThread\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"CreateThread\" (Indicator: \"CreateThread\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"}],"origin":"File/Memory","attck_id":"T1055","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1055","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Anti-Detection/Stealthiness","identifier":"string-226","type":2,"relevance":1,"name":"Contains ability to delay execution by waiting for signal/timeout (API string)","description":"$26","description_v2":["Found reference to API \"QueryPerformanceFrequency\" (Indicator: \"QueryPerformanceFrequency\"; File: \"encrypt.exe\")","Found reference to API \"QueryPerformanceCounter\" (Indicator: \"QueryPerformanceCounter\"; File: \"encrypt.exe\")","Found reference to API \"GetSystemTimeAsFileTime\" (Indicator: \"GetSystemTimeAsFileTime\"; File: \"encrypt.exe\")","Found reference to API \"WaitForSingleObjectEx\" (Indicator: \"WaitForSingleObject\"; File: \"encrypt.exe\")","Found reference to API \"WaitForSingleObjectEx\" (Indicator: \"WaitForSingleObjectEx\"; File: \"encrypt.exe\")","Found reference to API \"WaitForSingleObject\" (Indicator: \"WaitForSingleObject\"; File: \"encrypt.exe\")","Found reference to API \"Timer: QueryPerformanceFrequency failed with error\" (Indicator: \"QueryPerformanceFrequency\"; File: \"encrypt.exe\")","Found reference to API \"Timer: QueryPerformanceCounter failed with error\" (Indicator: \"QueryPerformanceCounter\"; File: \"encrypt.exe\")","Found reference to API \"WaitForSingleObject\" (Indicator: \"WaitForSingleObject\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API \"QueryPerformanceCounter\" (Indicator: \"QueryPerformanceCounter\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API \"QueryPerformanceFrequency\" (Indicator: \"QueryPerformanceFrequency\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API \"WaitForSingleObjectEx\" (Indicator: \"WaitForSingleObject\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API \"WaitForSingleObjectEx\" (Indicator: \"WaitForSingleObjectEx\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API \"GetSystemTimeAsFileTime\" (Indicator: \"GetSystemTimeAsFileTime\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API \"Timer: QueryPerformanceFrequency failed with error\" (Indicator: \"QueryPerformanceFrequency\"; Source: \"00000000-00004700.00000001.240563.008D1000.00000020.mdmp\")","Found reference to API \"Timer: QueryPerformanceCounter failed with error\" (Indicator: \"QueryPerformanceCounter\"; Source: \"00000000-00004700.00000001.240563.008D1000.00000020.mdmp\")"],"description_v3":[{"type":"text","value":"Found reference to API \"QueryPerformanceFrequency\" (Indicator: \"QueryPerformanceFrequency\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"QueryPerformanceCounter\" (Indicator: \"QueryPerformanceCounter\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"GetSystemTimeAsFileTime\" (Indicator: \"GetSystemTimeAsFileTime\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"WaitForSingleObjectEx\" (Indicator: \"WaitForSingleObject\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"WaitForSingleObjectEx\" (Indicator: \"WaitForSingleObjectEx\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"WaitForSingleObject\" (Indicator: \"WaitForSingleObject\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"Timer: QueryPerformanceFrequency failed with error\" (Indicator: \"QueryPerformanceFrequency\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"Timer: QueryPerformanceCounter failed with error\" (Indicator: \"QueryPerformanceCounter\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"WaitForSingleObject\" (Indicator: \"WaitForSingleObject\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"QueryPerformanceCounter\" (Indicator: \"QueryPerformanceCounter\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"QueryPerformanceFrequency\" (Indicator: \"QueryPerformanceFrequency\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"WaitForSingleObjectEx\" (Indicator: \"WaitForSingleObject\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"WaitForSingleObjectEx\" (Indicator: \"WaitForSingleObjectEx\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"GetSystemTimeAsFileTime\" (Indicator: \"GetSystemTimeAsFileTime\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"Timer: QueryPerformanceFrequency failed with error\" (Indicator: \"QueryPerformanceFrequency\"; Source: \"00000000-00004700.00000001.240563.008D1000.00000020.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"Timer: QueryPerformanceCounter failed with error\" (Indicator: \"QueryPerformanceCounter\"; Source: \"00000000-00004700.00000001.240563.008D1000.00000020.mdmp\")"}],"origin":"File/Memory","attck_id":"T1497.003","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1497/003","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Anti-Detection/Stealthiness","identifier":"string-318","type":2,"relevance":1,"name":"Contains ability to load/free library (API string)","description":"Found reference to API \"FreeLibraryAndExitThread\" (Indicator: \"FreeLibrary\"; File: \"encrypt.exe\")\n Found reference to API \"FreeLibrary\" (Indicator: \"FreeLibrary\"; File: \"encrypt.exe\")\n Found reference to API \"LoadLibraryA\" (Indicator: \"LoadLibrary\"; File: \"encrypt.exe\")\n Found reference to API \"LoadLibraryExW\" (Indicator: \"LoadLibrary\"; File: \"encrypt.exe\")\n Found reference to API \"LoadLibraryA\" (Indicator: \"LoadLibrary\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")\n Found reference to API \"FreeLibrary\" (Indicator: \"FreeLibrary\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")\n Found reference to API \"LoadLibraryExW\" (Indicator: \"LoadLibrary\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")\n Found reference to API \"FreeLibraryAndExitThread\" (Indicator: \"FreeLibrary\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","description_v2":["Found reference to API \"FreeLibraryAndExitThread\" (Indicator: \"FreeLibrary\"; File: \"encrypt.exe\")","Found reference to API \"FreeLibrary\" (Indicator: \"FreeLibrary\"; File: \"encrypt.exe\")","Found reference to API \"LoadLibraryA\" (Indicator: \"LoadLibrary\"; File: \"encrypt.exe\")","Found reference to API \"LoadLibraryExW\" (Indicator: \"LoadLibrary\"; File: \"encrypt.exe\")","Found reference to API \"LoadLibraryA\" (Indicator: \"LoadLibrary\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API \"FreeLibrary\" (Indicator: \"FreeLibrary\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API \"LoadLibraryExW\" (Indicator: \"LoadLibrary\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API \"FreeLibraryAndExitThread\" (Indicator: \"FreeLibrary\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"],"description_v3":[{"type":"text","value":"Found reference to API \"FreeLibraryAndExitThread\" (Indicator: \"FreeLibrary\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"FreeLibrary\" (Indicator: \"FreeLibrary\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"LoadLibraryA\" (Indicator: \"LoadLibrary\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"LoadLibraryExW\" (Indicator: \"LoadLibrary\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"LoadLibraryA\" (Indicator: \"LoadLibrary\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"FreeLibrary\" (Indicator: \"FreeLibrary\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"LoadLibraryExW\" (Indicator: \"LoadLibrary\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"FreeLibraryAndExitThread\" (Indicator: \"FreeLibrary\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"}],"origin":"File/Memory","attck_id":"T1055.001","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1055/001","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Anti-Detection/Stealthiness","identifier":"string-192","type":2,"relevance":1,"name":"Contains ability to modify system service (API string)","description":"Found reference to API \"ControlService\" (Indicator: \"ControlService\"; File: \"encrypt.exe\")\n Found reference to API \"ControlService\" (Indicator: \"ControlService\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","description_v2":["Found reference to API \"ControlService\" (Indicator: \"ControlService\"; File: \"encrypt.exe\")","Found reference to API \"ControlService\" (Indicator: \"ControlService\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"],"description_v3":[{"type":"text","value":"Found reference to API \"ControlService\" (Indicator: \"ControlService\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"ControlService\" (Indicator: \"ControlService\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"}],"origin":"File/Memory","attck_id":"T1543.003","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1543/003","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Anti-Detection/Stealthiness","identifier":"string-544","type":2,"relevance":1,"name":"Contains ability to open a service (API string)","description":"Found reference to API \"OpenServiceA\" (Indicator: \"OpenService\"; File: \"encrypt.exe\")\n Found reference to API \"OpenServiceA\" (Indicator: \"OpenService\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","description_v2":["Found reference to API \"OpenServiceA\" (Indicator: \"OpenService\"; File: \"encrypt.exe\")","Found reference to API \"OpenServiceA\" (Indicator: \"OpenService\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"],"description_v3":[{"type":"text","value":"Found reference to API \"OpenServiceA\" (Indicator: \"OpenService\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"OpenServiceA\" (Indicator: \"OpenService\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"}],"origin":"File/Memory","attck_id":"T1569.002","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1569/002","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Anti-Detection/Stealthiness","identifier":"string-320","type":2,"relevance":1,"name":"Contains ability to pass information to a window procedure (API string)","description":"Found reference to API \"\" (Indicator: \"CallWindowProc\"; Source: \"00000000-00004700.00000000.238642.02E50000.00000004.mdmp, 00000000-00004700.00000001.240563.02E50000.00000004.mdmp\")","description_v2":["Found reference to API \"\" (Indicator: \"CallWindowProc\"; Source: \"00000000-00004700.00000000.238642.02E50000.00000004.mdmp, 00000000-00004700.00000001.240563.02E50000.00000004.mdmp\")"],"description_v3":[{"type":"text","value":"Found reference to API \"\" (Indicator: \"CallWindowProc\"; Source: \"00000000-00004700.00000000.238642.02E50000.00000004.mdmp, 00000000-00004700.00000001.240563.02E50000.00000004.mdmp\")"}],"origin":"File/Memory","attck_id":"T1564.003","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1564/003","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Anti-Detection/Stealthiness","identifier":"string-138","type":2,"relevance":2,"name":"Contains ability to use Cryptographic classes","description":"$27","description_v2":["Found reference to \"RandomNumberGenerator: IncorporateEntropy not implemented\" (Indicator: \"RandomNumberGenerator\"; File: \"encrypt.exe\")","Found reference to \".?AVBase@Rijndael@CryptoPP@@\" (Indicator: \"Rijndael\"; File: \"encrypt.exe\")","Found reference to \".?AV?$BlockCipherImpl@URijndael_Info@CryptoPP@@VBlockCipher@2@@CryptoPP@@\" (Indicator: \"Rijndael\"; File: \"encrypt.exe\")","Found reference to \".?AV?$AlgorithmImpl@V?$SimpleKeyingInterfaceImpl@V?$TwoBases@VBlockCipher@CryptoPP@@URijndael_Info@2@@CryptoPP@@V12@@CryptoPP@@V12@@CryptoPP@@\" (Indicator: \"Rijndael\"; File: \"encrypt.exe\")","Found reference to \".?AV?$SimpleKeyingInterfaceImpl@V?$TwoBases@VBlockCipher@CryptoPP@@URijndael_Info@2@@CryptoPP@@V12@@CryptoPP@@\" (Indicator: \"Rijndael\"; File: \"encrypt.exe\")","Found reference to \".?AV?$TwoBases@VBlockCipher@CryptoPP@@URijndael_Info@2@@CryptoPP@@\" (Indicator: \"Rijndael\"; File: \"encrypt.exe\")","Found reference to \".?AURijndael_Info@CryptoPP@@\" (Indicator: \"Rijndael\"; File: \"encrypt.exe\")","Found reference to \".?AVEnc@Rijndael@CryptoPP@@\" (Indicator: \"Rijndael\"; File: \"encrypt.exe\")","Found reference to \".?AV?$BlockCipherFinal@$0A@VEnc@Rijndael@CryptoPP@@@CryptoPP@@\" (Indicator: \"Rijndael\"; File: \"encrypt.exe\")","Found reference to \".?AV?$ClonableImpl@V?$BlockCipherFinal@$0A@VEnc@Rijndael@CryptoPP@@@CryptoPP@@VEnc@Rijndael@2@@CryptoPP@@\" (Indicator: \"Rijndael\"; File: \"encrypt.exe\")","Found reference to \".?AVAsymmetricAlgorithm@CryptoPP@@\" (Indicator: \"AsymmetricAlgorithm\"; File: \"encrypt.exe\")","Found reference to \".?AVRandomNumberGenerator@CryptoPP@@\" (Indicator: \"RandomNumberGenerator\"; File: \"encrypt.exe\")","Found reference to \"RandomNumberGenerator: IncorporateEntropy not implemented\" (Indicator: \"RandomNumberGenerator\"; Source: \"00000000-00004700.00000001.240563.008D1000.00000020.mdmp\")"],"description_v3":[{"type":"text","value":"Found reference to \"RandomNumberGenerator: IncorporateEntropy not implemented\" (Indicator: \"RandomNumberGenerator\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to \".?AVBase@Rijndael@CryptoPP@@\" (Indicator: \"Rijndael\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to \".?AV?$BlockCipherImpl@URijndael_Info@CryptoPP@@VBlockCipher@2@@CryptoPP@@\" (Indicator: \"Rijndael\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to \".?AV?$AlgorithmImpl@V?$SimpleKeyingInterfaceImpl@V?$TwoBases@VBlockCipher@CryptoPP@@URijndael_Info@2@@CryptoPP@@V12@@CryptoPP@@V12@@CryptoPP@@\" (Indicator: \"Rijndael\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to \".?AV?$SimpleKeyingInterfaceImpl@V?$TwoBases@VBlockCipher@CryptoPP@@URijndael_Info@2@@CryptoPP@@V12@@CryptoPP@@\" (Indicator: \"Rijndael\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to \".?AV?$TwoBases@VBlockCipher@CryptoPP@@URijndael_Info@2@@CryptoPP@@\" (Indicator: \"Rijndael\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to \".?AURijndael_Info@CryptoPP@@\" (Indicator: \"Rijndael\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to \".?AVEnc@Rijndael@CryptoPP@@\" (Indicator: \"Rijndael\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to \".?AV?$BlockCipherFinal@$0A@VEnc@Rijndael@CryptoPP@@@CryptoPP@@\" (Indicator: \"Rijndael\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to \".?AV?$ClonableImpl@V?$BlockCipherFinal@$0A@VEnc@Rijndael@CryptoPP@@@CryptoPP@@VEnc@Rijndael@2@@CryptoPP@@\" (Indicator: \"Rijndael\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to \".?AVAsymmetricAlgorithm@CryptoPP@@\" (Indicator: \"AsymmetricAlgorithm\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to \".?AVRandomNumberGenerator@CryptoPP@@\" (Indicator: \"RandomNumberGenerator\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to \"RandomNumberGenerator: IncorporateEntropy not implemented\" (Indicator: \"RandomNumberGenerator\"; Source: \"00000000-00004700.00000001.240563.008D1000.00000020.mdmp\")"}],"origin":"File/Memory","attck_id":"T1027","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1027","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Anti-Detection/Stealthiness","identifier":"api-162","type":6,"relevance":1,"name":"Renames files","description":"$28","description_v2":["\"encrypt.exe\" renamed original file\"C:\\$WINDOWS.~BT\\Sources\\replacementmanifests\\contentdeliverymanager.utilities-replacement.man\" to \"C:\\$WINDOWS.~BT\\Sources\\replacementmanifests\\contentdeliverymanager.utilities-replacement.man.x2anylock\"","\"encrypt.exe\" renamed original file\"C:\\$WINDOWS.~BT\\Sources\\replacementmanifests\\devicedirectory-devicedirectoryclient-desktop-replacement.man\" to \"C:\\$WINDOWS.~BT\\Sources\\replacementmanifests\\devicedirectory-devicedirectoryclient-desktop-replacement.man.x2anylock\"","\"encrypt.exe\" renamed original file\"C:\\$WINDOWS.~BT\\Sources\\replacementmanifests\\gpbase-replacement.man\" to \"C:\\$WINDOWS.~BT\\Sources\\replacementmanifests\\gpbase-replacement.man.x2anylock\"","\"encrypt.exe\" renamed original file\"C:\\$WINDOWS.~BT\\Sources\\replacementmanifests\\microsoft-windows-advertisingid-replacement.man\" to \"C:\\$WINDOWS.~BT\\Sources\\replacementmanifests\\microsoft-windows-advertisingid-replacement.man.x2anylock\"","\"encrypt.exe\" renamed original file\"C:\\$WINDOWS.~BT\\Sources\\replacementmanifests\\microsoft-windows-geolocation-replacement.man\" to \"C:\\$WINDOWS.~BT\\Sources\\replacementmanifests\\microsoft-windows-geolocation-replacement.man.x2anylock\"","\"encrypt.exe\" renamed original file\"C:\\$WINDOWS.~BT\\Sources\\replacementmanifests\\microsoft-windows-ie-internetexplorer-repl-2.man\" to \"C:\\$WINDOWS.~BT\\Sources\\replacementmanifests\\microsoft-windows-ie-internetexplorer-repl-2.man.x2anylock\"","\"encrypt.exe\" renamed original file\"C:\\$WINDOWS.~BT\\Sources\\replacementmanifests\\onecore_speechcommon-rep.man\" to \"C:\\$WINDOWS.~BT\\Sources\\replacementmanifests\\onecore_speechcommon-rep.man.x2anylock\"","\"encrypt.exe\" renamed original file\"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_af-za_75594e685e635a3e\\syncres.dll.mui\" to \"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_af-za_75594e685e635a3e\\syncres.dll.mui.x2anylock\"","\"encrypt.exe\" renamed original file\"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_lb-lu_80b14902c4ca1fab\\syncres.dll.mui\" to \"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_lb-lu_80b14902c4ca1fab\\syncres.dll.mui.x2anylock\"","\"encrypt.exe\" renamed original file\"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_mi-nz_25bb53edb6274a60\\syncres.dll.mui\" to \"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_mi-nz_25bb53edb6274a60\\syncres.dll.mui.x2anylock\"","\"encrypt.exe\" renamed original file\"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_lo-la_77462a6ecae7305c.manifest\" to \"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_lo-la_77462a6ecae7305c.manifest.x2anylock\"","\"encrypt.exe\" renamed original file\"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_lt-lt_7f7d233cc5a51216.manifest\" to \"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_lt-lt_7f7d233cc5a51216.manifest.x2anylock\"","\"encrypt.exe\" renamed original file\"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_lv-lv_804a91c0c5235306.manifest\" to \"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_lv-lv_804a91c0c5235306.manifest.x2anylock\"","\"encrypt.exe\" renamed original file\"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_mi-nz_25bb53edb6274a60.manifest\" to \"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_mi-nz_25bb53edb6274a60.manifest.x2anylock\"","\"encrypt.exe\" renamed original file\"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_mk-mk_1efedf2bba7e24b8.manifest\" to \"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_mk-mk_1efedf2bba7e24b8.manifest.x2anylock\"","\"encrypt.exe\" renamed original file\"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_ml-in_2048ffe9b9aae7ba.manifest\" to \"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_ml-in_2048ffe9b9aae7ba.manifest.x2anylock\"","\"encrypt.exe\" renamed original file\"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_mn-mn_203304f1b9bb8620.manifest\" to \"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_mn-mn_203304f1b9bb8620.manifest.x2anylock\"","\"encrypt.exe\" renamed original file\"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_mr-in_20082061b9db8f60.manifest\" to \"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_mr-in_20082061b9db8f60.manifest.x2anylock\"","\"encrypt.exe\" renamed original file\"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_ms-my_24ddc44fb6c143a2.manifest\" to \"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_ms-my_24ddc44fb6c143a2.manifest.x2anylock\"","\"encrypt.exe\" renamed original file\"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_mt-mt_229b507db83648f0.manifest\" to \"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_mt-mt_229b507db83648f0.manifest.x2anylock\"","\"encrypt.exe\" renamed original file\"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_nb-no_c4447870aba27235.manifest\" to \"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_nb-no_c4447870aba27235.manifest.x2anylock\"","\"encrypt.exe\" renamed original file\"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_ne-np_c4958fdaab71ca8f.manifest\" to \"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_ne-np_c4958fdaab71ca8f.manifest.x2anylock\"","\"encrypt.exe\" renamed original file\"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_nl-nl_c283c3aeacce7c0a.manifest\" to \"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_nl-nl_c283c3aeacce7c0a.manifest.x2anylock\"","\"encrypt.exe\" renamed original file\"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_nso-za_30759cdc1af7521b.manifest\" to \"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_nso-za_30759cdc1af7521b.manifest.x2anylock\"","\"encrypt.exe\" renamed original file\"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_pa-..-pk_a75d382b17f9fbbf.manifest\" to \"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_pa-..-pk_a75d382b17f9fbbf.manifest.x2anylock\""],"description_v3":[{"type":"text","value":"\"encrypt.exe\" renamed original file\"C:\\$WINDOWS.~BT\\Sources\\replacementmanifests\\contentdeliverymanager.utilities-replacement.man\" to \"C:\\$WINDOWS.~BT\\Sources\\replacementmanifests\\contentdeliverymanager.utilities-replacement.man.x2anylock\""},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" renamed original file\"C:\\$WINDOWS.~BT\\Sources\\replacementmanifests\\devicedirectory-devicedirectoryclient-desktop-replacement.man\" to \"C:\\$WINDOWS.~BT\\Sources\\replacementmanifests\\devicedirectory-devicedirectoryclient-desktop-replacement.man.x2anylock\""},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" renamed original file\"C:\\$WINDOWS.~BT\\Sources\\replacementmanifests\\gpbase-replacement.man\" to \"C:\\$WINDOWS.~BT\\Sources\\replacementmanifests\\gpbase-replacement.man.x2anylock\""},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" renamed original file\"C:\\$WINDOWS.~BT\\Sources\\replacementmanifests\\microsoft-windows-advertisingid-replacement.man\" to \"C:\\$WINDOWS.~BT\\Sources\\replacementmanifests\\microsoft-windows-advertisingid-replacement.man.x2anylock\""},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" renamed original file\"C:\\$WINDOWS.~BT\\Sources\\replacementmanifests\\microsoft-windows-geolocation-replacement.man\" to \"C:\\$WINDOWS.~BT\\Sources\\replacementmanifests\\microsoft-windows-geolocation-replacement.man.x2anylock\""},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" renamed original file\"C:\\$WINDOWS.~BT\\Sources\\replacementmanifests\\microsoft-windows-ie-internetexplorer-repl-2.man\" to \"C:\\$WINDOWS.~BT\\Sources\\replacementmanifests\\microsoft-windows-ie-internetexplorer-repl-2.man.x2anylock\""},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" renamed original file\"C:\\$WINDOWS.~BT\\Sources\\replacementmanifests\\onecore_speechcommon-rep.man\" to \"C:\\$WINDOWS.~BT\\Sources\\replacementmanifests\\onecore_speechcommon-rep.man.x2anylock\""},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" renamed original file\"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_af-za_75594e685e635a3e\\syncres.dll.mui\" to \"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_af-za_75594e685e635a3e\\syncres.dll.mui.x2anylock\""},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" renamed original file\"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_lb-lu_80b14902c4ca1fab\\syncres.dll.mui\" to \"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_lb-lu_80b14902c4ca1fab\\syncres.dll.mui.x2anylock\""},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" renamed original file\"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_mi-nz_25bb53edb6274a60\\syncres.dll.mui\" to \"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_mi-nz_25bb53edb6274a60\\syncres.dll.mui.x2anylock\""},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" renamed original file\"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_lo-la_77462a6ecae7305c.manifest\" to \"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_lo-la_77462a6ecae7305c.manifest.x2anylock\""},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" renamed original file\"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_lt-lt_7f7d233cc5a51216.manifest\" to \"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_lt-lt_7f7d233cc5a51216.manifest.x2anylock\""},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" renamed original file\"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_lv-lv_804a91c0c5235306.manifest\" to \"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_lv-lv_804a91c0c5235306.manifest.x2anylock\""},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" renamed original file\"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_mi-nz_25bb53edb6274a60.manifest\" to \"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_mi-nz_25bb53edb6274a60.manifest.x2anylock\""},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" renamed original file\"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_mk-mk_1efedf2bba7e24b8.manifest\" to \"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_mk-mk_1efedf2bba7e24b8.manifest.x2anylock\""},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" renamed original file\"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_ml-in_2048ffe9b9aae7ba.manifest\" to \"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_ml-in_2048ffe9b9aae7ba.manifest.x2anylock\""},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" renamed original file\"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_mn-mn_203304f1b9bb8620.manifest\" to \"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_mn-mn_203304f1b9bb8620.manifest.x2anylock\""},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" renamed original file\"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_mr-in_20082061b9db8f60.manifest\" to \"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_mr-in_20082061b9db8f60.manifest.x2anylock\""},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" renamed original file\"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_ms-my_24ddc44fb6c143a2.manifest\" to \"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_ms-my_24ddc44fb6c143a2.manifest.x2anylock\""},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" renamed original file\"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_mt-mt_229b507db83648f0.manifest\" to \"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_mt-mt_229b507db83648f0.manifest.x2anylock\""},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" renamed original file\"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_nb-no_c4447870aba27235.manifest\" to \"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_nb-no_c4447870aba27235.manifest.x2anylock\""},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" renamed original file\"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_ne-np_c4958fdaab71ca8f.manifest\" to \"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_ne-np_c4958fdaab71ca8f.manifest.x2anylock\""},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" renamed original file\"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_nl-nl_c283c3aeacce7c0a.manifest\" to \"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_nl-nl_c283c3aeacce7c0a.manifest.x2anylock\""},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" renamed original file\"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_nso-za_30759cdc1af7521b.manifest\" to \"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_nso-za_30759cdc1af7521b.manifest.x2anylock\""},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" renamed original file\"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_pa-..-pk_a75d382b17f9fbbf.manifest\" to \"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_pa-..-pk_a75d382b17f9fbbf.manifest.x2anylock\""}],"origin":"API Call","attck_id":"T1036","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1036","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Anti-Reverse Engineering","identifier":"string-183","type":2,"relevance":1,"name":"Contains ability to check debugger is running (API string)","description":"Found reference to API \"QueryPerformanceCounter\" (Indicator: \"QueryPerformanceCounter\"; File: \"encrypt.exe\")\n Found reference to API \"GetTickCount\" (Indicator: \"GetTickCount\"; File: \"encrypt.exe\")\n Found reference to API \"IsDebuggerPresent\" (Indicator: \"IsDebuggerPresent\"; File: \"encrypt.exe\")\n Found reference to API \"Timer: QueryPerformanceCounter failed with error\" (Indicator: \"QueryPerformanceCounter\"; File: \"encrypt.exe\")","description_v2":["Found reference to API \"QueryPerformanceCounter\" (Indicator: \"QueryPerformanceCounter\"; File: \"encrypt.exe\")","Found reference to API \"GetTickCount\" (Indicator: \"GetTickCount\"; File: \"encrypt.exe\")","Found reference to API \"IsDebuggerPresent\" (Indicator: \"IsDebuggerPresent\"; File: \"encrypt.exe\")","Found reference to API \"Timer: QueryPerformanceCounter failed with error\" (Indicator: \"QueryPerformanceCounter\"; File: \"encrypt.exe\")"],"description_v3":[{"type":"text","value":"Found reference to API \"QueryPerformanceCounter\" (Indicator: \"QueryPerformanceCounter\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"GetTickCount\" (Indicator: \"GetTickCount\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"IsDebuggerPresent\" (Indicator: \"IsDebuggerPresent\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"Timer: QueryPerformanceCounter failed with error\" (Indicator: \"QueryPerformanceCounter\"; File: \"encrypt.exe\")"}],"origin":"File/Memory","attck_id":"T1622","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1622","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Anti-Reverse Engineering","identifier":"string-148","type":2,"relevance":1,"name":"Contains ability to register a top-level exception handler (API string)","description":"Found reference to API \"SetUnhandledExceptionFilter\" (Indicator: \"SetUnhandledExceptionFilter\"; File: \"encrypt.exe\")\n Found reference to API \"SetUnhandledExceptionFilter\" (Indicator: \"UnhandledExceptionFilter\"; File: \"encrypt.exe\")\n Found reference to API \"UnhandledExceptionFilter\" (Indicator: \"UnhandledExceptionFilter\"; File: \"encrypt.exe\")","description_v2":["Found reference to API \"SetUnhandledExceptionFilter\" (Indicator: \"SetUnhandledExceptionFilter\"; File: \"encrypt.exe\")","Found reference to API \"SetUnhandledExceptionFilter\" (Indicator: \"UnhandledExceptionFilter\"; File: \"encrypt.exe\")","Found reference to API \"UnhandledExceptionFilter\" (Indicator: \"UnhandledExceptionFilter\"; File: \"encrypt.exe\")"],"description_v3":[{"type":"text","value":"Found reference to API \"SetUnhandledExceptionFilter\" (Indicator: \"SetUnhandledExceptionFilter\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"SetUnhandledExceptionFilter\" (Indicator: \"UnhandledExceptionFilter\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"UnhandledExceptionFilter\" (Indicator: \"UnhandledExceptionFilter\"; File: \"encrypt.exe\")"}],"origin":"File/Memory","attck_id":"T1622","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1622","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Cryptographic Related","identifier":"stream-139","type":1,"relevance":0,"name":"Contains XOR operation loops [Stream disassembly]","description":"Assembly shows XOR instruction xor eax\n ebp in Stream UID: 9494-112-00490AC0\n Assembly shows XOR instruction xor ecx\n ebp in Stream UID: 9494-112-00490AC0\n Assembly shows XOR instruction xor eax\n ebp in Stream UID: 9494-142-004895E6\n Assembly shows XOR instruction xor ecx\n ebp in Stream UID: 9494-142-004895E6","description_v2":["Assembly shows XOR instruction xor eax","ebp in Stream UID: 9494-112-00490AC0","Assembly shows XOR instruction xor ecx","ebp in Stream UID: 9494-112-00490AC0","Assembly shows XOR instruction xor eax","ebp in Stream UID: 9494-142-004895E6","Assembly shows XOR instruction xor ecx","ebp in Stream UID: 9494-142-004895E6"],"description_v3":[{"type":"text","value":"Assembly shows XOR instruction xor eax"},{"type":"linebreak"},{"type":"text","value":"ebp in Stream UID: 9494-112-00490AC0"},{"type":"linebreak"},{"type":"text","value":"Assembly shows XOR instruction xor ecx"},{"type":"linebreak"},{"type":"text","value":"ebp in Stream UID: 9494-112-00490AC0"},{"type":"linebreak"},{"type":"text","value":"Assembly shows XOR instruction xor eax"},{"type":"linebreak"},{"type":"text","value":"ebp in Stream UID: 9494-142-004895E6"},{"type":"linebreak"},{"type":"text","value":"Assembly shows XOR instruction xor ecx"},{"type":"linebreak"},{"type":"text","value":"ebp in Stream UID: 9494-142-004895E6"}],"origin":"Hybrid Analysis Technology","attck_id":"T1027.005","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1027/005","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Cryptographic Related","identifier":"string-593","type":2,"relevance":1,"name":"Contains ability to perform AES encryption using crypto++ library","description":"Found string \".?AURijndael_Info@CryptoPP@@\" (Indicator: \"AURijndael_Info@CryptoPP@@\"; File: \"encrypt.exe\")","description_v2":["Found string \".?AURijndael_Info@CryptoPP@@\" (Indicator: \"AURijndael_Info@CryptoPP@@\"; File: \"encrypt.exe\")"],"description_v3":[{"type":"text","value":"Found string \".?AURijndael_Info@CryptoPP@@\" (Indicator: \"AURijndael_Info@CryptoPP@@\"; File: \"encrypt.exe\")"}],"origin":"File/Memory","attck_id":"T1573.001","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1573/001","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Cryptographic Related","identifier":"string-584","type":2,"relevance":3,"name":"Contains ability to use AES encryption instructions","description":"Found string \"AESNI\" (Indicator: \"AESNI\"; File: \"encrypt.exe\")\n Found string \"AESNI\" (Indicator: \"AESNI\"; Source: \"00000000-00004700.00000001.240563.008D1000.00000020.mdmp\")","description_v2":["Found string \"AESNI\" (Indicator: \"AESNI\"; File: \"encrypt.exe\")","Found string \"AESNI\" (Indicator: \"AESNI\"; Source: \"00000000-00004700.00000001.240563.008D1000.00000020.mdmp\")"],"description_v3":[{"type":"text","value":"Found string \"AESNI\" (Indicator: \"AESNI\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found string \"AESNI\" (Indicator: \"AESNI\"; Source: \"00000000-00004700.00000001.240563.008D1000.00000020.mdmp\")"}],"origin":"File/Memory","attck_id":"T1573.001","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1573/001","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Cryptographic Related","identifier":"summary-32","type":15,"relevance":1,"name":"Shows ability to deobfuscate/decode files or information","description":"The analysis shows use of encryption and can be used to decode file or information. Matched sigs: YARA signature match - RC4 Encryption\n Matched sigs: Contains XOR operation loops [Stream disassembly]\n Matched sigs: YARA signature match - AES encryption","description_v2":["The analysis shows use of encryption and can be used to decode file or information. Matched sigs: YARA signature match - RC4 Encryption","Matched sigs: Contains XOR operation loops [Stream disassembly]","Matched sigs: YARA signature match - AES encryption"],"description_v3":[{"type":"text","value":"The analysis shows use of encryption and can be used to decode file or information. Matched sigs: YARA signature match - RC4 Encryption"},{"type":"linebreak"},{"type":"text","value":"Matched sigs: Contains XOR operation loops [Stream disassembly]"},{"type":"linebreak"},{"type":"text","value":"Matched sigs: YARA signature match - AES encryption"}],"origin":"Indicator Combinations","attck_id":"T1140","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1140","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Cryptographic Related","identifier":"summary-28","type":15,"relevance":1,"name":"Shows ability to obfuscate file or information","description":"The analysis contains indicators for cyrpto or data obfuscation(base64/decrypt) which can hide information. Matched sigs: Contains CRYPTO related strings\n Matched sigs: Contains ability to use Cryptographic classes\n Matched sigs: Contains ability to use Microsoft's Enhanced Cryptographic Provider\n Matched sigs: Contains asymmetric cryptographic functions (API string)\n Matched sigs: Contains ability to use AES encryption instructions\n Matched sigs: Contains ability to perform AES encryption using crypto++ library\n Matched sigs: References bcrypt module and functions (used for encryption/decryption)\n Matched sigs: Dropped file has high entropy (likely encrypted/compressed content)\n Matched sigs: YARA signature match - RC4 Encryption\n Matched sigs: YARA signature match – cryptographic algorithms\n Matched sigs: Contains XOR operation loops [Stream disassembly]\n Matched sigs: YARA signature match - AES encryption","description_v2":["The analysis contains indicators for cyrpto or data obfuscation(base64/decrypt) which can hide information. Matched sigs: Contains CRYPTO related strings","Matched sigs: Contains ability to use Cryptographic classes","Matched sigs: Contains ability to use Microsoft's Enhanced Cryptographic Provider","Matched sigs: Contains asymmetric cryptographic functions (API string)","Matched sigs: Contains ability to use AES encryption instructions","Matched sigs: Contains ability to perform AES encryption using crypto++ library","Matched sigs: References bcrypt module and functions (used for encryption/decryption)","Matched sigs: Dropped file has high entropy (likely encrypted/compressed content)","Matched sigs: YARA signature match - RC4 Encryption","Matched sigs: YARA signature match – cryptographic algorithms","Matched sigs: Contains XOR operation loops [Stream disassembly]","Matched sigs: YARA signature match - AES encryption"],"description_v3":[{"type":"text","value":"The analysis contains indicators for cyrpto or data obfuscation(base64/decrypt) which can hide information. Matched sigs: Contains CRYPTO related strings"},{"type":"linebreak"},{"type":"text","value":"Matched sigs: Contains ability to use Cryptographic classes"},{"type":"linebreak"},{"type":"text","value":"Matched sigs: Contains ability to use Microsoft's Enhanced Cryptographic Provider"},{"type":"linebreak"},{"type":"text","value":"Matched sigs: Contains asymmetric cryptographic functions (API string)"},{"type":"linebreak"},{"type":"text","value":"Matched sigs: Contains ability to use AES encryption instructions"},{"type":"linebreak"},{"type":"text","value":"Matched sigs: Contains ability to perform AES encryption using crypto++ library"},{"type":"linebreak"},{"type":"text","value":"Matched sigs: References bcrypt module and functions (used for encryption/decryption)"},{"type":"linebreak"},{"type":"text","value":"Matched sigs: Dropped file has high entropy (likely encrypted/compressed content)"},{"type":"linebreak"},{"type":"text","value":"Matched sigs: YARA signature match - RC4 Encryption"},{"type":"linebreak"},{"type":"text","value":"Matched sigs: YARA signature match – cryptographic algorithms"},{"type":"linebreak"},{"type":"text","value":"Matched sigs: Contains XOR operation loops [Stream disassembly]"},{"type":"linebreak"},{"type":"text","value":"Matched sigs: YARA signature match - AES encryption"}],"origin":"Indicator Combinations","attck_id":"T1027","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1027","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Cryptographic Related","identifier":"summary-31","type":15,"relevance":1,"name":"Shows ability to use encryption for command and control traffic","description":"The analysis shows use of encryption\n use of http/https that can be used to send encrypted data on command and control server. Matched sigs: YARA signature match - RC4 Encryption\n Matched sigs: Contains XOR operation loops [Stream disassembly]\n Matched sigs: YARA signature match - AES encryption\n Matched sigs: Found potential URL in binary/memory\n Matched sigs: Found potential URLs in memory dumps\n Matched sigs: Found potential IP address in binary/memory\n Matched sigs: Possibly tries to communicate over SSL connection (HTTPS)","description_v2":["The analysis shows use of encryption","use of http/https that can be used to send encrypted data on command and control server. Matched sigs: YARA signature match - RC4 Encryption","Matched sigs: Contains XOR operation loops [Stream disassembly]","Matched sigs: YARA signature match - AES encryption","Matched sigs: Found potential URL in binary/memory","Matched sigs: Found potential URLs in memory dumps","Matched sigs: Found potential IP address in binary/memory","Matched sigs: Possibly tries to communicate over SSL connection (HTTPS)"],"description_v3":[{"type":"text","value":"The analysis shows use of encryption"},{"type":"linebreak"},{"type":"text","value":"use of http/https that can be used to send encrypted data on command and control server. Matched sigs: YARA signature match - RC4 Encryption"},{"type":"linebreak"},{"type":"text","value":"Matched sigs: Contains XOR operation loops [Stream disassembly]"},{"type":"linebreak"},{"type":"text","value":"Matched sigs: YARA signature match - AES encryption"},{"type":"linebreak"},{"type":"text","value":"Matched sigs: Found potential URL in binary/memory"},{"type":"linebreak"},{"type":"text","value":"Matched sigs: Found potential URLs in memory dumps"},{"type":"linebreak"},{"type":"text","value":"Matched sigs: Found potential IP address in binary/memory"},{"type":"linebreak"},{"type":"text","value":"Matched sigs: Possibly tries to communicate over SSL connection (HTTPS)"}],"origin":"Indicator Combinations","attck_id":"T1573.001","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1573/001","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Cryptographic Related","identifier":"binary-92","type":8,"relevance":0,"name":"XOR operations in executable file detected","description":"$29","description_v2":["Found XOR loop in file \"eventemitter2.d.ts.x2anylock\" at offset 1150; code bytes = 30d0","Found XOR loop in file \"sample.bin\" at offset 26298; code bytes = 30d0","Found XOR loop in file \"sample.bin\" at offset 33615; code bytes = 30d0","Found XOR loop in file \"sample.bin\" at offset 79514; code bytes = 30d0","Found XOR loop in file \"sample.bin\" at offset 649773; code bytes = 30d0","Found XOR loop in file \"sample.bin\" at offset 651259; code bytes = 30d0","Found XOR loop in file \"sample.bin\" at offset 653023; code bytes = 30d0","Found XOR loop in file \"sample.bin\" at offset 655031; code bytes = 30d0","Found XOR loop in file \"sample.bin\" at offset 655927; code bytes = 30d0","Found XOR loop in file \"sample.bin\" at offset 656815; code bytes = 30d0","Found XOR loop in file \"sample.bin\" at offset 669999; code bytes = 30d0","Found XOR loop in file \"sample.bin\" at offset 35190; code bytes = 33c1","Found XOR loop in file \"sample.bin\" at offset 42123; code bytes = 33c1","Found XOR loop in file \"sample.bin\" at offset 167500; code bytes = 33c1","Found XOR loop in file \"sample.bin\" at offset 226815; code bytes = 33c1","Found XOR loop in file \"sample.bin\" at offset 226878; code bytes = 33c1","Found XOR loop in file \"sample.bin\" at offset 293634; code bytes = 33c1","Found XOR loop in file \"sample.bin\" at offset 293684; code bytes = 33c1","Found XOR loop in file \"sample.bin\" at offset 293794; code bytes = 33c1","Found XOR loop in file \"sample.bin\" at offset 293918; code bytes = 33c1","Found XOR loop in file \"sample.bin\" at offset 315913; code bytes = 33c1","Found XOR loop in file \"sample.bin\" at offset 315948; code bytes = 33c1","Found XOR loop in file \"sample.bin\" at offset 316036; code bytes = 33c1","Found XOR loop in file \"sample.bin\" at offset 316052; code bytes = 33c1","Found XOR loop in file \"sample.bin\" at offset 316110; code bytes = 33c1","Found XOR loop in file \"sample.bin\" at offset 316131; code bytes = 33c1","Found XOR loop in file \"sample.bin\" at offset 368283; code bytes = 33c1","Found XOR loop in file \"sample.bin\" at offset 430766; code bytes = 33c1","Found XOR loop in file \"sample.bin\" at offset 431346; code bytes = 33c1","Found XOR loop in file \"sample.bin\" at offset 498546; code bytes = 33c1","Found XOR loop in file \"sample.bin\" at offset 657619; code bytes = 33c1","Found XOR loop in file \"sample.bin\" at offset 26232; code bytes = 8030","Found XOR loop in file \"sample.bin\" at offset 27630; code bytes = 8030","Found XOR loop in file \"sample.bin\" at offset 74460; code bytes = 8030","Found XOR loop in file \"sample.bin\" at offset 80620; code bytes = 8030","Found XOR loop in file \"sample.bin\" at offset 92970; code bytes = 8030","Found XOR loop in file \"sample.bin\" at offset 529228; code bytes = 8030","Found XOR loop in file \"sample.bin\" at offset 648770; code bytes = 8030","Found XOR loop in file \"sample.bin\" at offset 649734; code bytes = 8030","Found XOR loop in file \"sample.bin\" at offset 651240; code bytes = 8030","Found XOR loop in file \"sample.bin\" at offset 653004; code bytes = 8030","Found XOR loop in file \"sample.bin\" at offset 655016; code bytes = 8030","Found XOR loop in file \"sample.bin\" at offset 668888; code bytes = 8030","Found XOR loop in file \"sample.bin\" at offset 669990; code bytes = 8030"],"description_v3":[{"type":"text","value":"Found XOR loop in file \"eventemitter2.d.ts.x2anylock\" at offset 1150; code bytes = 30d0"},{"type":"linebreak"},{"type":"text","value":"Found XOR loop in file \"sample.bin\" at offset 26298; code bytes = 30d0"},{"type":"linebreak"},{"type":"text","value":"Found XOR loop in file \"sample.bin\" at offset 33615; code bytes = 30d0"},{"type":"linebreak"},{"type":"text","value":"Found XOR loop in file \"sample.bin\" at offset 79514; code bytes = 30d0"},{"type":"linebreak"},{"type":"text","value":"Found XOR loop in file \"sample.bin\" at offset 649773; code bytes = 30d0"},{"type":"linebreak"},{"type":"text","value":"Found XOR loop in file \"sample.bin\" at offset 651259; code bytes = 30d0"},{"type":"linebreak"},{"type":"text","value":"Found XOR loop in file \"sample.bin\" at offset 653023; code bytes = 30d0"},{"type":"linebreak"},{"type":"text","value":"Found XOR loop in file \"sample.bin\" at offset 655031; code bytes = 30d0"},{"type":"linebreak"},{"type":"text","value":"Found XOR loop in file \"sample.bin\" at offset 655927; code bytes = 30d0"},{"type":"linebreak"},{"type":"text","value":"Found XOR loop in file \"sample.bin\" at offset 656815; code bytes = 30d0"},{"type":"linebreak"},{"type":"text","value":"Found XOR loop in file \"sample.bin\" at offset 669999; code bytes = 30d0"},{"type":"linebreak"},{"type":"text","value":"Found XOR loop in file \"sample.bin\" at offset 35190; code bytes = 33c1"},{"type":"linebreak"},{"type":"text","value":"Found XOR loop in file \"sample.bin\" at offset 42123; code bytes = 33c1"},{"type":"linebreak"},{"type":"text","value":"Found XOR loop in file \"sample.bin\" at offset 167500; code bytes = 33c1"},{"type":"linebreak"},{"type":"text","value":"Found XOR loop in file \"sample.bin\" at offset 226815; code bytes = 33c1"},{"type":"linebreak"},{"type":"text","value":"Found XOR loop in file \"sample.bin\" at offset 226878; code bytes = 33c1"},{"type":"linebreak"},{"type":"text","value":"Found XOR loop in file \"sample.bin\" at offset 293634; code bytes = 33c1"},{"type":"linebreak"},{"type":"text","value":"Found XOR loop in file \"sample.bin\" at offset 293684; code bytes = 33c1"},{"type":"linebreak"},{"type":"text","value":"Found XOR loop in file \"sample.bin\" at offset 293794; code bytes = 33c1"},{"type":"linebreak"},{"type":"text","value":"Found XOR loop in file \"sample.bin\" at offset 293918; code bytes = 33c1"},{"type":"linebreak"},{"type":"text","value":"Found XOR loop in file \"sample.bin\" at offset 315913; code bytes = 33c1"},{"type":"linebreak"},{"type":"text","value":"Found XOR loop in file \"sample.bin\" at offset 315948; code bytes = 33c1"},{"type":"linebreak"},{"type":"text","value":"Found XOR loop in file \"sample.bin\" at offset 316036; code bytes = 33c1"},{"type":"linebreak"},{"type":"text","value":"Found XOR loop in file \"sample.bin\" at offset 316052; code bytes = 33c1"},{"type":"linebreak"},{"type":"text","value":"Found XOR loop in file \"sample.bin\" at offset 316110; code bytes = 33c1"},{"type":"linebreak"},{"type":"text","value":"Found XOR loop in file \"sample.bin\" at offset 316131; code bytes = 33c1"},{"type":"linebreak"},{"type":"text","value":"Found XOR loop in file \"sample.bin\" at offset 368283; code bytes = 33c1"},{"type":"linebreak"},{"type":"text","value":"Found XOR loop in file \"sample.bin\" at offset 430766; code bytes = 33c1"},{"type":"linebreak"},{"type":"text","value":"Found XOR loop in file \"sample.bin\" at offset 431346; code bytes = 33c1"},{"type":"linebreak"},{"type":"text","value":"Found XOR loop in file \"sample.bin\" at offset 498546; code bytes = 33c1"},{"type":"linebreak"},{"type":"text","value":"Found XOR loop in file \"sample.bin\" at offset 657619; code bytes = 33c1"},{"type":"linebreak"},{"type":"text","value":"Found XOR loop in file \"sample.bin\" at offset 26232; code bytes = 8030"},{"type":"linebreak"},{"type":"text","value":"Found XOR loop in file \"sample.bin\" at offset 27630; code bytes = 8030"},{"type":"linebreak"},{"type":"text","value":"Found XOR loop in file \"sample.bin\" at offset 74460; code bytes = 8030"},{"type":"linebreak"},{"type":"text","value":"Found XOR loop in file \"sample.bin\" at offset 80620; code bytes = 8030"},{"type":"linebreak"},{"type":"text","value":"Found XOR loop in file \"sample.bin\" at offset 92970; code bytes = 8030"},{"type":"linebreak"},{"type":"text","value":"Found XOR loop in file \"sample.bin\" at offset 529228; code bytes = 8030"},{"type":"linebreak"},{"type":"text","value":"Found XOR loop in file \"sample.bin\" at offset 648770; code bytes = 8030"},{"type":"linebreak"},{"type":"text","value":"Found XOR loop in file \"sample.bin\" at offset 649734; code bytes = 8030"},{"type":"linebreak"},{"type":"text","value":"Found XOR loop in file \"sample.bin\" at offset 651240; code bytes = 8030"},{"type":"linebreak"},{"type":"text","value":"Found XOR loop in file \"sample.bin\" at offset 653004; code bytes = 8030"},{"type":"linebreak"},{"type":"text","value":"Found XOR loop in file \"sample.bin\" at offset 655016; code bytes = 8030"},{"type":"linebreak"},{"type":"text","value":"Found XOR loop in file \"sample.bin\" at offset 668888; code bytes = 8030"},{"type":"linebreak"},{"type":"text","value":"Found XOR loop in file \"sample.bin\" at offset 669990; code bytes = 8030"}],"origin":"Binary File","attck_id":"T1027.005","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1027/005","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Environment Awareness","identifier":"string-661","type":2,"relevance":1,"name":"Able to identify virtual environment by using user activity (API string)","description":"Found string \"GetCommandLineW\" (Indicator: \"GetCommandLine\"; File: \"encrypt.exe\")\n Found string \"GetCommandLineA\" (Indicator: \"GetCommandLine\"; File: \"encrypt.exe\")\n Found string \"GetCommandLineA\" (Indicator: \"GetCommandLine\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")\n Found string \"GetCommandLineW\" (Indicator: \"GetCommandLine\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","description_v2":["Found string \"GetCommandLineW\" (Indicator: \"GetCommandLine\"; File: \"encrypt.exe\")","Found string \"GetCommandLineA\" (Indicator: \"GetCommandLine\"; File: \"encrypt.exe\")","Found string \"GetCommandLineA\" (Indicator: \"GetCommandLine\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found string \"GetCommandLineW\" (Indicator: \"GetCommandLine\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"],"description_v3":[{"type":"text","value":"Found string \"GetCommandLineW\" (Indicator: \"GetCommandLine\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found string \"GetCommandLineA\" (Indicator: \"GetCommandLine\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found string \"GetCommandLineA\" (Indicator: \"GetCommandLine\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found string \"GetCommandLineW\" (Indicator: \"GetCommandLine\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"}],"origin":"File/Memory","attck_id":"T1497.002","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1497/002","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Environment Awareness","identifier":"string-201","type":2,"relevance":1,"name":"Able to query system locale information (API string)","description":"$2a","description_v2":["Found reference to API \"GetLocaleInfoW\" (Indicator: \"GetLocaleInfo\"; File: \"encrypt.exe\")","Found reference to API \"EnumSystemLocalesW\" (Indicator: \"EnumSystemLocales\"; File: \"encrypt.exe\")","Found reference to API \"GetUserDefaultLCID\" (Indicator: \"GetUserDefaultLCID\"; File: \"encrypt.exe\")","Found reference to API \"GetLocaleInfoEx\" (Indicator: \"GetLocaleInfo\"; File: \"encrypt.exe\")","Found reference to API \"EnumSystemLocalesEx\" (Indicator: \"EnumSystemLocales\"; File: \"encrypt.exe\")","Found reference to API \"GetUserDefaultLocaleName\" (Indicator: \"GetUserDefaultLocaleName\"; File: \"encrypt.exe\")","Found reference to API \"GetLocaleInfoEx\" (Indicator: \"GetLocaleInfo\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp, 00000000-00004700.00000001.240563.008D1000.00000020.mdmp\")","Found reference to API \"GetLocaleInfoW\" (Indicator: \"GetLocaleInfo\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API \"GetUserDefaultLCID\" (Indicator: \"GetUserDefaultLCID\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API \"EnumSystemLocalesW\" (Indicator: \"EnumSystemLocales\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API \"EnumSystemLocalesEx\" (Indicator: \"EnumSystemLocales\"; Source: \"00000000-00004700.00000001.240563.008D1000.00000020.mdmp\")","Found reference to API \"GetUserDefaultLocaleName\" (Indicator: \"GetUserDefaultLocaleName\"; Source: \"00000000-00004700.00000001.240563.008D1000.00000020.mdmp\")"],"description_v3":[{"type":"text","value":"Found reference to API \"GetLocaleInfoW\" (Indicator: \"GetLocaleInfo\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"EnumSystemLocalesW\" (Indicator: \"EnumSystemLocales\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"GetUserDefaultLCID\" (Indicator: \"GetUserDefaultLCID\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"GetLocaleInfoEx\" (Indicator: \"GetLocaleInfo\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"EnumSystemLocalesEx\" (Indicator: \"EnumSystemLocales\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"GetUserDefaultLocaleName\" (Indicator: \"GetUserDefaultLocaleName\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"GetLocaleInfoEx\" (Indicator: \"GetLocaleInfo\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp, 00000000-00004700.00000001.240563.008D1000.00000020.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"GetLocaleInfoW\" (Indicator: \"GetLocaleInfo\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"GetUserDefaultLCID\" (Indicator: \"GetUserDefaultLCID\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"EnumSystemLocalesW\" (Indicator: \"EnumSystemLocales\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"EnumSystemLocalesEx\" (Indicator: \"EnumSystemLocales\"; Source: \"00000000-00004700.00000001.240563.008D1000.00000020.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"GetUserDefaultLocaleName\" (Indicator: \"GetUserDefaultLocaleName\"; Source: \"00000000-00004700.00000001.240563.008D1000.00000020.mdmp\")"}],"origin":"File/Memory","attck_id":"T1614","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1614","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Environment Awareness","identifier":"string-901","type":2,"relevance":1,"name":"Able to retrieve date formats supported by the local system (API string)","description":"Found reference to API \"GetDateFormatW\" (Indicator: \"GetDateFormat\"; File: \"encrypt.exe\")\n Found reference to API \"GetTimeFormatW\" (Indicator: \"GetTimeFormat\"; File: \"encrypt.exe\")\n Found reference to API \"GetDateFormatEx\" (Indicator: \"GetDateFormat\"; File: \"encrypt.exe\")\n Found reference to API \"GetTimeFormatEx\" (Indicator: \"GetTimeFormat\"; File: \"encrypt.exe\")\n Found reference to API \"GetDateFormatW\" (Indicator: \"GetDateFormat\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")\n Found reference to API \"GetTimeFormatW\" (Indicator: \"GetTimeFormat\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")\n Found reference to API \"GetDateFormatEx\" (Indicator: \"GetDateFormat\"; Source: \"00000000-00004700.00000001.240563.008D1000.00000020.mdmp\")\n Found reference to API \"GetTimeFormatEx\" (Indicator: \"GetTimeFormat\"; Source: \"00000000-00004700.00000001.240563.008D1000.00000020.mdmp\")","description_v2":["Found reference to API \"GetDateFormatW\" (Indicator: \"GetDateFormat\"; File: \"encrypt.exe\")","Found reference to API \"GetTimeFormatW\" (Indicator: \"GetTimeFormat\"; File: \"encrypt.exe\")","Found reference to API \"GetDateFormatEx\" (Indicator: \"GetDateFormat\"; File: \"encrypt.exe\")","Found reference to API \"GetTimeFormatEx\" (Indicator: \"GetTimeFormat\"; File: \"encrypt.exe\")","Found reference to API \"GetDateFormatW\" (Indicator: \"GetDateFormat\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API \"GetTimeFormatW\" (Indicator: \"GetTimeFormat\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API \"GetDateFormatEx\" (Indicator: \"GetDateFormat\"; Source: \"00000000-00004700.00000001.240563.008D1000.00000020.mdmp\")","Found reference to API \"GetTimeFormatEx\" (Indicator: \"GetTimeFormat\"; Source: \"00000000-00004700.00000001.240563.008D1000.00000020.mdmp\")"],"description_v3":[{"type":"text","value":"Found reference to API \"GetDateFormatW\" (Indicator: \"GetDateFormat\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"GetTimeFormatW\" (Indicator: \"GetTimeFormat\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"GetDateFormatEx\" (Indicator: \"GetDateFormat\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"GetTimeFormatEx\" (Indicator: \"GetTimeFormat\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"GetDateFormatW\" (Indicator: \"GetDateFormat\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"GetTimeFormatW\" (Indicator: \"GetTimeFormat\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"GetDateFormatEx\" (Indicator: \"GetDateFormat\"; Source: \"00000000-00004700.00000001.240563.008D1000.00000020.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"GetTimeFormatEx\" (Indicator: \"GetTimeFormat\"; Source: \"00000000-00004700.00000001.240563.008D1000.00000020.mdmp\")"}],"origin":"File/Memory","attck_id":"T1124","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1124","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Environment Awareness","identifier":"string-721","type":2,"relevance":1,"name":"Able to visualize and control listed components (API string)","description":"Found reference to API \"\" (Indicator: \"enumchildwindows\"; Source: \"00000000-00004700.00000000.238642.02E50000.00000004.mdmp, 00000000-00004700.00000001.240563.02E50000.00000004.mdmp\")","description_v2":["Found reference to API \"\" (Indicator: \"enumchildwindows\"; Source: \"00000000-00004700.00000000.238642.02E50000.00000004.mdmp, 00000000-00004700.00000001.240563.02E50000.00000004.mdmp\")"],"description_v3":[{"type":"text","value":"Found reference to API \"\" (Indicator: \"enumchildwindows\"; Source: \"00000000-00004700.00000000.238642.02E50000.00000004.mdmp, 00000000-00004700.00000001.240563.02E50000.00000004.mdmp\")"}],"origin":"File/Memory","attck_id":"T1055.015","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1055/015","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Environment Awareness","identifier":"api-296","type":6,"relevance":3,"name":"Attempts to call APIs commonly associated with anti-analysis and evasion techniques","description":"\"encrypt.exe\" called \"GetTickCount\" with parameters (UID: 00000000-00004700)","description_v2":["\"encrypt.exe\" called \"GetTickCount\" with parameters (UID: 00000000-00004700)"],"description_v3":[{"type":"text","value":"\"encrypt.exe\" called \"GetTickCount\" with parameters (UID: 00000000-00004700)"}],"origin":"API Call","attck_id":"T1497","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1497","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Environment Awareness","identifier":"api-294","type":6,"relevance":3,"name":"Attempts to call APIs to gather system and hardware detail","description":"\"encrypt.exe\" called \"QueryPerformanceCounter\" (UID: 00000000-00004700)","description_v2":["\"encrypt.exe\" called \"QueryPerformanceCounter\" (UID: 00000000-00004700)"],"description_v3":[{"type":"text","value":"\"encrypt.exe\" called \"QueryPerformanceCounter\" (UID: 00000000-00004700)"}],"origin":"API Call","attck_id":"T1082","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1082","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Environment Awareness","identifier":"api-297","type":6,"relevance":3,"name":"Attempts to invoke APIs commonly associated with credential theft and data exfiltration functionality","description":"\"encrypt.exe\" called \"NtQueryInformationToken\" with parameters (UID: 00000000-00004700)","description_v2":["\"encrypt.exe\" called \"NtQueryInformationToken\" with parameters (UID: 00000000-00004700)"],"description_v3":[{"type":"text","value":"\"encrypt.exe\" called \"NtQueryInformationToken\" with parameters (UID: 00000000-00004700)"}],"origin":"API Call","attck_id":"T1003","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1003","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Environment Awareness","identifier":"api-146","type":6,"relevance":3,"name":"Calls an API typically used to determine if process is running under WOW64","description":"\"encrypt.exe\" called \"IsWow64Process\" with parameter \"4700\" - (UID: 00000000-00004700)","description_v2":["\"encrypt.exe\" called \"IsWow64Process\" with parameter \"4700\" - (UID: 00000000-00004700)"],"description_v3":[{"type":"text","value":"\"encrypt.exe\" called \"IsWow64Process\" with parameter \"4700\" - (UID: 00000000-00004700)"}],"origin":"API Call","attck_id":"T1057","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1057","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Environment Awareness","identifier":"api-152","type":6,"relevance":3,"name":"Calls an API typically used to enumerate active windows","description":"\"encrypt.exe\" called \"EnumWindows\" with parameter \"48701988\" - (UID: 00000000-00004700)\n \"encrypt.exe\" called \"EnumWindows\" with parameter \"48702308\" - (UID: 00000000-00004700)\n \"encrypt.exe\" called \"EnumWindows\" with parameter \"48701156\" - (UID: 00000000-00004700)\n \"encrypt.exe\" called \"EnumWindows\" with parameter \"48701284\" - (UID: 00000000-00004700)\n \"encrypt.exe\" called \"EnumWindows\" with parameter \"48702948\" - (UID: 00000000-00004700)\n \"encrypt.exe\" called \"EnumWindows\" with parameter \"48702116\" - (UID: 00000000-00004700)\n \"encrypt.exe\" called \"EnumWindows\" with parameter \"48701668\" - (UID: 00000000-00004700)\n \"encrypt.exe\" called \"EnumWindows\" with parameter \"48701476\" - (UID: 00000000-00004700)","description_v2":["\"encrypt.exe\" called \"EnumWindows\" with parameter \"48701988\" - (UID: 00000000-00004700)","\"encrypt.exe\" called \"EnumWindows\" with parameter \"48702308\" - (UID: 00000000-00004700)","\"encrypt.exe\" called \"EnumWindows\" with parameter \"48701156\" - (UID: 00000000-00004700)","\"encrypt.exe\" called \"EnumWindows\" with parameter \"48701284\" - (UID: 00000000-00004700)","\"encrypt.exe\" called \"EnumWindows\" with parameter \"48702948\" - (UID: 00000000-00004700)","\"encrypt.exe\" called \"EnumWindows\" with parameter \"48702116\" - (UID: 00000000-00004700)","\"encrypt.exe\" called \"EnumWindows\" with parameter \"48701668\" - (UID: 00000000-00004700)","\"encrypt.exe\" called \"EnumWindows\" with parameter \"48701476\" - (UID: 00000000-00004700)"],"description_v3":[{"type":"text","value":"\"encrypt.exe\" called \"EnumWindows\" with parameter \"48701988\" - (UID: 00000000-00004700)"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" called \"EnumWindows\" with parameter \"48702308\" - (UID: 00000000-00004700)"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" called \"EnumWindows\" with parameter \"48701156\" - (UID: 00000000-00004700)"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" called \"EnumWindows\" with parameter \"48701284\" - (UID: 00000000-00004700)"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" called \"EnumWindows\" with parameter \"48702948\" - (UID: 00000000-00004700)"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" called \"EnumWindows\" with parameter \"48702116\" - (UID: 00000000-00004700)"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" called \"EnumWindows\" with parameter \"48701668\" - (UID: 00000000-00004700)"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" called \"EnumWindows\" with parameter \"48701476\" - (UID: 00000000-00004700)"}],"origin":"API Call","attck_id":"T1010","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1010","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Environment Awareness","identifier":"api-124","type":6,"relevance":3,"name":"Calls an API typically used to get product type","description":"\"encrypt.exe\" called \"RtlGetNtProductType\" with parameter 01000000 (UID: 00000000-00004700)","description_v2":["\"encrypt.exe\" called \"RtlGetNtProductType\" with parameter 01000000 (UID: 00000000-00004700)"],"description_v3":[{"type":"text","value":"\"encrypt.exe\" called \"RtlGetNtProductType\" with parameter 01000000 (UID: 00000000-00004700)"}],"origin":"API Call","attck_id":"T1082","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1082","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Environment Awareness","identifier":"api-125","type":6,"relevance":3,"name":"Calls an API typically used to get system version information","description":"$2b","description_v2":["\"encrypt.exe\" called \"RtlGetVersion\" with parameter 140100000a00000000000000ab3f00000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 (UID: 00000000-00004700)","\"encrypt.exe\" called \"RtlGetVersion\" with parameter 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 (UID: 00000000-00004700)","\"encrypt.exe\" called \"RtlGetVersion\" with parameter 1c0100000a00000000000000ab3f00000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 (UID: 00000000-00004700)","\"encrypt.exe\" called \"RtlGetVersion\" with parameter 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 (UID: 00000000-00004700)","\"encrypt.exe\" called \"RtlGetVersion\" with parameter 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 (UID: 00000000-00004700)","\"encrypt.exe\" called \"RtlGetVersion\" with parameter 1c0100000a00000000000000ab3f000002000000000000000000000000000000580000006f000000d00782002800000000000000480000000000820000000000e90000007820127580139e044891ea02f85aea0214000000000000002000000000008200cc0182000000820000000000680882007200000098dfcf0059168d772000000008001400000000000000e50200000000280000000000000050f58c770500000005000000288d46072000000060049d087086460734000000acdfcf00524390774300000000e0cf0073f60e77b8e0cf005c0000000000000038ffff7f82f80e7700000000b8fdffff45ffffff0000000000000000000000000b00000016e3cf00bb000000bb0000000401000084e2cf00 (UID: 00000000-00004700)","\"encrypt.exe\" called \"RtlGetVersion\" with parameter 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 (UID: 00000000-00004700)"],"description_v3":[{"type":"text","value":"\"encrypt.exe\" called \"RtlGetVersion\" with parameter 140100000a00000000000000ab3f00000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 (UID: 00000000-00004700)"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" called \"RtlGetVersion\" with parameter 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 (UID: 00000000-00004700)"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" called \"RtlGetVersion\" with parameter 1c0100000a00000000000000ab3f00000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 (UID: 00000000-00004700)"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" called \"RtlGetVersion\" with parameter 140100000a00000000000000ab3f0000020000000000e9026a140000b3cb00010000000000000001901cec02901cec020a00000000000000ff07000034000000981cec02ff0700003f005c0063000100feffffff00000000008ae502d007820040000001000000006912000000008200008ae5027f0700007f070000691200007f0700000000a7720000000028c9cf00506a907766b55b79feffffff78c8cf00b7168d7700100000081000001891e50264c8cf000000a7720000e50234c9cf0008100000000000000000000001020000030000000000e5020010000008000000a8c8cf009cc8cf00ee138d7701000000ee138d770800000000000000000000000800000028c9cf00ccc8cf0025abad720000e502 (UID: 00000000-00004700)"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" called \"RtlGetVersion\" with parameter 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 (UID: 00000000-00004700)"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" called \"RtlGetVersion\" with parameter 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 (UID: 00000000-00004700)"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" called \"RtlGetVersion\" with parameter 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 (UID: 00000000-00004700)"}],"origin":"API Call","attck_id":"T1082","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1082","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Environment Awareness","identifier":"string-450","type":2,"relevance":1,"name":"Contains ability to determine if process is running under WOW64 (API string)","description":"Found reference to API \"IsWow64Process\" (Indicator: \"IsWow64Process\"; File: \"encrypt.exe\")\n Found reference to API \"IsWow64Process\" (Indicator: \"IsWow64Process\"; Source: \"00000000-00004700.00000001.240563.008D1000.00000020.mdmp\")","description_v2":["Found reference to API \"IsWow64Process\" (Indicator: \"IsWow64Process\"; File: \"encrypt.exe\")","Found reference to API \"IsWow64Process\" (Indicator: \"IsWow64Process\"; Source: \"00000000-00004700.00000001.240563.008D1000.00000020.mdmp\")"],"description_v3":[{"type":"text","value":"Found reference to API \"IsWow64Process\" (Indicator: \"IsWow64Process\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"IsWow64Process\" (Indicator: \"IsWow64Process\"; Source: \"00000000-00004700.00000001.240563.008D1000.00000020.mdmp\")"}],"origin":"File/Memory","attck_id":"T1057","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1057","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Environment Awareness","identifier":"string-194","type":2,"relevance":1,"name":"Contains ability to enumerate volumes (API string)","description":"$2c","description_v2":["Found reference to API \"SetVolumeMountPointW\" (Indicator: \"SetVolumeMountPoint\"; File: \"encrypt.exe\")","Found reference to API \"FindNextVolumeW\" (Indicator: \"FindNextVolume\"; File: \"encrypt.exe\")","Found reference to API \"FindFirstVolumeW\" (Indicator: \"FindFirstVolume\"; File: \"encrypt.exe\")","Found reference to API \"FindVolumeClose\" (Indicator: \"FindVolumeClose\"; File: \"encrypt.exe\")","Found reference to API \"GetVolumePathNamesForVolumeNameW\" (Indicator: \"GetVolumePathNamesForVolumeName\"; File: \"encrypt.exe\")","Found reference to API \"GetVolumePathNamesForVolumeNameW\" (Indicator: \"GetVolumePathName\"; File: \"encrypt.exe\")","Found reference to API \"FindFirstVolumeW\" (Indicator: \"FindFirstVolume\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API \"SetVolumeMountPointW\" (Indicator: \"SetVolumeMountPoint\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API \"FindVolumeClose\" (Indicator: \"FindVolumeClose\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API \"GetVolumePathNamesForVolumeNameW\" (Indicator: \"GetVolumePathNamesForVolumeName\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API \"GetVolumePathNamesForVolumeNameW\" (Indicator: \"GetVolumePathName\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API \"FindNextVolumeW\" (Indicator: \"FindNextVolume\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"],"description_v3":[{"type":"text","value":"Found reference to API \"SetVolumeMountPointW\" (Indicator: \"SetVolumeMountPoint\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"FindNextVolumeW\" (Indicator: \"FindNextVolume\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"FindFirstVolumeW\" (Indicator: \"FindFirstVolume\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"FindVolumeClose\" (Indicator: \"FindVolumeClose\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"GetVolumePathNamesForVolumeNameW\" (Indicator: \"GetVolumePathNamesForVolumeName\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"GetVolumePathNamesForVolumeNameW\" (Indicator: \"GetVolumePathName\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"FindFirstVolumeW\" (Indicator: \"FindFirstVolume\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"SetVolumeMountPointW\" (Indicator: \"SetVolumeMountPoint\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"FindVolumeClose\" (Indicator: \"FindVolumeClose\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"GetVolumePathNamesForVolumeNameW\" (Indicator: \"GetVolumePathNamesForVolumeName\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"GetVolumePathNamesForVolumeNameW\" (Indicator: \"GetVolumePathName\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"FindNextVolumeW\" (Indicator: \"FindNextVolume\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"}],"origin":"File/Memory","attck_id":"T1006","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1006","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Environment Awareness","identifier":"string-365","type":2,"relevance":1,"name":"Contains ability to perform scheduled transfer (API string)","description":"Found reference to API \"GetSystemTimeAsFileTime\" (Indicator: \"GetSystemTime\"; File: \"encrypt.exe\")\n Found reference to API \"GetSystemTimePreciseAsFileTime\" (Indicator: \"GetSystemTime\"; File: \"encrypt.exe\")\n Found reference to API \"GetSystemTimeAsFileTime\" (Indicator: \"GetSystemTime\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")\n Found reference to API \"GetSystemTimePreciseAsFileTime\" (Indicator: \"GetSystemTime\"; Source: \"00000000-00004700.00000001.240563.008D1000.00000020.mdmp\")","description_v2":["Found reference to API \"GetSystemTimeAsFileTime\" (Indicator: \"GetSystemTime\"; File: \"encrypt.exe\")","Found reference to API \"GetSystemTimePreciseAsFileTime\" (Indicator: \"GetSystemTime\"; File: \"encrypt.exe\")","Found reference to API \"GetSystemTimeAsFileTime\" (Indicator: \"GetSystemTime\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API \"GetSystemTimePreciseAsFileTime\" (Indicator: \"GetSystemTime\"; Source: \"00000000-00004700.00000001.240563.008D1000.00000020.mdmp\")"],"description_v3":[{"type":"text","value":"Found reference to API \"GetSystemTimeAsFileTime\" (Indicator: \"GetSystemTime\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"GetSystemTimePreciseAsFileTime\" (Indicator: \"GetSystemTime\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"GetSystemTimeAsFileTime\" (Indicator: \"GetSystemTime\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"GetSystemTimePreciseAsFileTime\" (Indicator: \"GetSystemTime\"; Source: \"00000000-00004700.00000001.240563.008D1000.00000020.mdmp\")"}],"origin":"File/Memory","attck_id":"T1029","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1029","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Environment Awareness","identifier":"registry-78","type":3,"relevance":1,"name":"Contains ability to read software policies","description":"\"encrypt.exe\" (Path: \"HKLM\\SOFTWARE\\POLICIES\\MICROSOFT\\WINDOWS\\SAFER\\CODEIDENTIFIERS\"; Key: \"TRANSPARENTENABLED\")","description_v2":["\"encrypt.exe\" (Path: \"HKLM\\SOFTWARE\\POLICIES\\MICROSOFT\\WINDOWS\\SAFER\\CODEIDENTIFIERS\"; Key: \"TRANSPARENTENABLED\")"],"description_v3":[{"type":"text","value":"\"encrypt.exe\" (Path: \"HKLM\\SOFTWARE\\POLICIES\\MICROSOFT\\WINDOWS\\SAFER\\CODEIDENTIFIERS\"; Key: \"TRANSPARENTENABLED\")"}],"origin":"Registry Access","attck_id":"T1082","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1082","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Environment Awareness","identifier":"string-249","type":2,"relevance":1,"name":"Contains ability to retrieve file time (API string)","description":"Found reference to API \"SystemTimeToFileTime\" (Indicator: \"SystemTimeToFileTime\"; File: \"encrypt.exe\")\n Found reference to API \"GetSystemTimeAsFileTime\" (Indicator: \"GetSystemTimeAsFileTime\"; File: \"encrypt.exe\")\n Found reference to API \"SystemTimeToFileTime\" (Indicator: \"SystemTimeToFileTime\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")\n Found reference to API \"GetSystemTimeAsFileTime\" (Indicator: \"GetSystemTimeAsFileTime\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","description_v2":["Found reference to API \"SystemTimeToFileTime\" (Indicator: \"SystemTimeToFileTime\"; File: \"encrypt.exe\")","Found reference to API \"GetSystemTimeAsFileTime\" (Indicator: \"GetSystemTimeAsFileTime\"; File: \"encrypt.exe\")","Found reference to API \"SystemTimeToFileTime\" (Indicator: \"SystemTimeToFileTime\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API \"GetSystemTimeAsFileTime\" (Indicator: \"GetSystemTimeAsFileTime\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"],"description_v3":[{"type":"text","value":"Found reference to API \"SystemTimeToFileTime\" (Indicator: \"SystemTimeToFileTime\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"GetSystemTimeAsFileTime\" (Indicator: \"GetSystemTimeAsFileTime\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"SystemTimeToFileTime\" (Indicator: \"SystemTimeToFileTime\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"GetSystemTimeAsFileTime\" (Indicator: \"GetSystemTimeAsFileTime\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"}],"origin":"File/Memory","attck_id":"T1070.006","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1070/006","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Environment Awareness","identifier":"string-89","type":2,"relevance":1,"name":"Contains ability to retrieve information about the current system (API string)","description":"Found reference to API \"GetNativeSystemInfo\" (Indicator: \"GetNativeSystemInfo\"; File: \"encrypt.exe\")\n Found reference to API \"GetNativeSystemInfo\" (Indicator: \"GetNativeSystemInfo\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","description_v2":["Found reference to API \"GetNativeSystemInfo\" (Indicator: \"GetNativeSystemInfo\"; File: \"encrypt.exe\")","Found reference to API \"GetNativeSystemInfo\" (Indicator: \"GetNativeSystemInfo\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"],"description_v3":[{"type":"text","value":"Found reference to API \"GetNativeSystemInfo\" (Indicator: \"GetNativeSystemInfo\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"GetNativeSystemInfo\" (Indicator: \"GetNativeSystemInfo\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"}],"origin":"File/Memory","attck_id":"T1082","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1082","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Environment Awareness","identifier":"string-247","type":2,"relevance":1,"name":"Contains ability to retrieve machine time (API string)","description":"Found reference to API \"GetSystemTimeAsFileTime\" (Indicator: \"GetSystemTime\"; File: \"encrypt.exe\")\n Found reference to API \"GetSystemTimePreciseAsFileTime\" (Indicator: \"GetSystemTime\"; File: \"encrypt.exe\")\n Found reference to API \"GetSystemTimeAsFileTime\" (Indicator: \"GetSystemTime\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")\n Found reference to API \"GetSystemTimePreciseAsFileTime\" (Indicator: \"GetSystemTime\"; Source: \"00000000-00004700.00000001.240563.008D1000.00000020.mdmp\")","description_v2":["Found reference to API \"GetSystemTimeAsFileTime\" (Indicator: \"GetSystemTime\"; File: \"encrypt.exe\")","Found reference to API \"GetSystemTimePreciseAsFileTime\" (Indicator: \"GetSystemTime\"; File: \"encrypt.exe\")","Found reference to API \"GetSystemTimeAsFileTime\" (Indicator: \"GetSystemTime\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API \"GetSystemTimePreciseAsFileTime\" (Indicator: \"GetSystemTime\"; Source: \"00000000-00004700.00000001.240563.008D1000.00000020.mdmp\")"],"description_v3":[{"type":"text","value":"Found reference to API \"GetSystemTimeAsFileTime\" (Indicator: \"GetSystemTime\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"GetSystemTimePreciseAsFileTime\" (Indicator: \"GetSystemTime\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"GetSystemTimeAsFileTime\" (Indicator: \"GetSystemTime\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"GetSystemTimePreciseAsFileTime\" (Indicator: \"GetSystemTime\"; Source: \"00000000-00004700.00000001.240563.008D1000.00000020.mdmp\")"}],"origin":"File/Memory","attck_id":"T1124","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1124","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Environment Awareness","identifier":"string-248","type":2,"relevance":1,"name":"Contains ability to retrieve machine timezone (API string)","description":"Found reference to API \"GetTimeZoneInformation\" (Indicator: \"GetTimeZoneInformation\"; File: \"encrypt.exe\")\n Found reference to API \"GetTimeZoneInformation\" (Indicator: \"GetTimeZoneInformation\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","description_v2":["Found reference to API \"GetTimeZoneInformation\" (Indicator: \"GetTimeZoneInformation\"; File: \"encrypt.exe\")","Found reference to API \"GetTimeZoneInformation\" (Indicator: \"GetTimeZoneInformation\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"],"description_v3":[{"type":"text","value":"Found reference to API \"GetTimeZoneInformation\" (Indicator: \"GetTimeZoneInformation\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"GetTimeZoneInformation\" (Indicator: \"GetTimeZoneInformation\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"}],"origin":"File/Memory","attck_id":"T1124","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1124","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Environment Awareness","identifier":"string-167","type":2,"relevance":1,"name":"Contains ability to retrieve the contents of the STARTUPINFO structure (API string)","description":"Found reference to API \"GetStartupInfoW\" (Indicator: \"GetStartupInfo\"; File: \"encrypt.exe\")","description_v2":["Found reference to API \"GetStartupInfoW\" (Indicator: \"GetStartupInfo\"; File: \"encrypt.exe\")"],"description_v3":[{"type":"text","value":"Found reference to API \"GetStartupInfoW\" (Indicator: \"GetStartupInfo\"; File: \"encrypt.exe\")"}],"origin":"File/Memory","attck_id":"T1543","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1543","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Environment Awareness","identifier":"string-162","type":2,"relevance":1,"name":"Contains ability to retrieve volume information (API string)","description":"Found reference to API \"GetVolumePathNamesForVolumeNameW\" (Indicator: \"GetVolumePathNamesForVolumeName\"; File: \"encrypt.exe\")\n Found reference to API \"GetVolumePathNamesForVolumeNameW\" (Indicator: \"GetVolumePathNamesForVolumeName\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","description_v2":["Found reference to API \"GetVolumePathNamesForVolumeNameW\" (Indicator: \"GetVolumePathNamesForVolumeName\"; File: \"encrypt.exe\")","Found reference to API \"GetVolumePathNamesForVolumeNameW\" (Indicator: \"GetVolumePathNamesForVolumeName\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"],"description_v3":[{"type":"text","value":"Found reference to API \"GetVolumePathNamesForVolumeNameW\" (Indicator: \"GetVolumePathNamesForVolumeName\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"GetVolumePathNamesForVolumeNameW\" (Indicator: \"GetVolumePathNamesForVolumeName\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"}],"origin":"File/Memory","attck_id":"T1082","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1082","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Environment Awareness","identifier":"api-11","type":6,"relevance":2,"name":"Queries volume information","description":"\"encrypt.exe\" queries volume information of \"C:\\found.000\\dir0011.chk\\StateRepository-Machine.srd-shm.x2anylock\" at 00000000-00004700-00000C17-2733221530\n \"encrypt.exe\" queries volume information of \"C:\\found.000\\dir0011.chk\\StateRepository-Machine.srd-wal.x2anylock\" at 00000000-00004700-00000C17-2733404704\n \"encrypt.exe\" queries volume information of \"C:\\inetpub\\custerr\\en-US\\500-100.asp\" at 00000000-00004700-00000C17-2735887137\n \"encrypt.exe\" queries volume information of \"C:\\Users\\%OSUSER%\\NTUSER.DAT{47a6a17a-a514-11e7-a94e-ec0d9a05c860}.TM.blf\" at 00000000-00004700-00000C17-2783701536\n \"encrypt.exe\" queries volume information of \"C:\\Users\\%OSUSER%\\ntuser.dat.LOG2\" at 00000000-00004700-00000C17-2783712864\n \"encrypt.exe\" queries volume information of \"C:\\Users\\%OSUSER%\\NTUSER.DAT{47a6a17a-a514-11e7-a94e-ec0d9a05c860}.TMContainer00000000000000000002.regtrans-ms\" at 00000000-00004700-00000C17-2784044574","description_v2":["\"encrypt.exe\" queries volume information of \"C:\\found.000\\dir0011.chk\\StateRepository-Machine.srd-shm.x2anylock\" at 00000000-00004700-00000C17-2733221530","\"encrypt.exe\" queries volume information of \"C:\\found.000\\dir0011.chk\\StateRepository-Machine.srd-wal.x2anylock\" at 00000000-00004700-00000C17-2733404704","\"encrypt.exe\" queries volume information of \"C:\\inetpub\\custerr\\en-US\\500-100.asp\" at 00000000-00004700-00000C17-2735887137","\"encrypt.exe\" queries volume information of \"C:\\Users\\%OSUSER%\\NTUSER.DAT{47a6a17a-a514-11e7-a94e-ec0d9a05c860}.TM.blf\" at 00000000-00004700-00000C17-2783701536","\"encrypt.exe\" queries volume information of \"C:\\Users\\%OSUSER%\\ntuser.dat.LOG2\" at 00000000-00004700-00000C17-2783712864","\"encrypt.exe\" queries volume information of \"C:\\Users\\%OSUSER%\\NTUSER.DAT{47a6a17a-a514-11e7-a94e-ec0d9a05c860}.TMContainer00000000000000000002.regtrans-ms\" at 00000000-00004700-00000C17-2784044574"],"description_v3":[{"type":"text","value":"\"encrypt.exe\" queries volume information of \"C:\\found.000\\dir0011.chk\\StateRepository-Machine.srd-shm.x2anylock\" at 00000000-00004700-00000C17-2733221530"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" queries volume information of \"C:\\found.000\\dir0011.chk\\StateRepository-Machine.srd-wal.x2anylock\" at 00000000-00004700-00000C17-2733404704"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" queries volume information of \"C:\\inetpub\\custerr\\en-US\\500-100.asp\" at 00000000-00004700-00000C17-2735887137"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" queries volume information of \"%USERPROFILE%\\NTUSER.DAT{47a6a17a-a514-11e7-a94e-ec0d9a05c860}.TM.blf\" at 00000000-00004700-00000C17-2783701536"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" queries volume information of \"C:\\Users\\%USERNAME%\\ntuser.dat.LOG2\" at 00000000-00004700-00000C17-2783712864"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" queries volume information of \"C:\\Users\\%USERNAME%\\NTUSER.DAT{47a6a17a-a514-11e7-a94e-ec0d9a05c860}.TMContainer00000000000000000002.regtrans-ms\" at 00000000-00004700-00000C17-2784044574"}],"origin":"API Call","attck_id":"T1082","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1082","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Environment Awareness","identifier":"registry-35","type":3,"relevance":5,"name":"Reads the active computer name","description":"\"encrypt.exe\" (Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\COMPUTERNAME\\ACTIVECOMPUTERNAME\"; Key: \"COMPUTERNAME\")","description_v2":["\"encrypt.exe\" (Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\COMPUTERNAME\\ACTIVECOMPUTERNAME\"; Key: \"COMPUTERNAME\")"],"description_v3":[{"type":"text","value":"\"encrypt.exe\" (Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\COMPUTERNAME\\ACTIVECOMPUTERNAME\"; Key: \"COMPUTERNAME\")"}],"origin":"Registry Access","attck_id":"T1082","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1082","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"General","identifier":"string-191","type":2,"relevance":1,"name":"Able to enumerate service (API string)","description":"Found reference to API \"EnumDependentServicesA\" (Indicator: \"EnumDependentServices\"; File: \"encrypt.exe\")\n Found reference to API \"QueryServiceStatusEx\" (Indicator: \"QueryServiceStatus\"; File: \"encrypt.exe\")\n Found reference to API \"OpenSCManagerA\" (Indicator: \"OpenSCManager\"; File: \"encrypt.exe\")\n Found reference to API \"QueryServiceStatusEx\" (Indicator: \"QueryServiceStatus\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")\n Found reference to API \"OpenSCManagerA\" (Indicator: \"OpenSCManager\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")\n Found reference to API \"EnumDependentServicesA\" (Indicator: \"EnumDependentServices\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","description_v2":["Found reference to API \"EnumDependentServicesA\" (Indicator: \"EnumDependentServices\"; File: \"encrypt.exe\")","Found reference to API \"QueryServiceStatusEx\" (Indicator: \"QueryServiceStatus\"; File: \"encrypt.exe\")","Found reference to API \"OpenSCManagerA\" (Indicator: \"OpenSCManager\"; File: \"encrypt.exe\")","Found reference to API \"QueryServiceStatusEx\" (Indicator: \"QueryServiceStatus\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API \"OpenSCManagerA\" (Indicator: \"OpenSCManager\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API \"EnumDependentServicesA\" (Indicator: \"EnumDependentServices\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"],"description_v3":[{"type":"text","value":"Found reference to API \"EnumDependentServicesA\" (Indicator: \"EnumDependentServices\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"QueryServiceStatusEx\" (Indicator: \"QueryServiceStatus\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"OpenSCManagerA\" (Indicator: \"OpenSCManager\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"QueryServiceStatusEx\" (Indicator: \"QueryServiceStatus\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"OpenSCManagerA\" (Indicator: \"OpenSCManager\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"EnumDependentServicesA\" (Indicator: \"EnumDependentServices\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"}],"origin":"File/Memory","attck_id":"T1007","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1007","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"General","identifier":"string-884","type":2,"relevance":1,"name":"Able to rename or move file/directory (API string)","description":"Found string \"MoveFileExW\" (Indicator: \"MoveFileExW\"; File: \"encrypt.exe\")\n Found string \"MoveFileW\" (Indicator: \"MoveFileW\"; File: \"encrypt.exe\")\n Found string \"MoveFileExW\" (Indicator: \"MoveFileExW\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")\n Found string \"MoveFileW\" (Indicator: \"MoveFileW\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","description_v2":["Found string \"MoveFileExW\" (Indicator: \"MoveFileExW\"; File: \"encrypt.exe\")","Found string \"MoveFileW\" (Indicator: \"MoveFileW\"; File: \"encrypt.exe\")","Found string \"MoveFileExW\" (Indicator: \"MoveFileExW\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found string \"MoveFileW\" (Indicator: \"MoveFileW\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"],"description_v3":[{"type":"text","value":"Found string \"MoveFileExW\" (Indicator: \"MoveFileExW\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found string \"MoveFileW\" (Indicator: \"MoveFileW\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found string \"MoveFileExW\" (Indicator: \"MoveFileExW\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found string \"MoveFileW\" (Indicator: \"MoveFileW\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"}],"origin":"File/Memory","attck_id":"T1083","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1083","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"General","identifier":"api-175","type":6,"relevance":1,"name":"Calls an API typically used to load libraries","description":"\"encrypt.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-synch-l1-2-0 (UID: 00000000-00004700)\n \"encrypt.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-fibers-l1-1-1 (UID: 00000000-00004700)\n \"encrypt.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-localization-l1-2-1 (UID: 00000000-00004700)\n \"encrypt.exe\" called \"LoadLibrary\" with a parameter kernel32 (UID: 00000000-00004700)\n \"encrypt.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-fibers-l1-1-2 (UID: 00000000-00004700)\n \"encrypt.exe\" called \"LoadLibrary\" with a parameter kernel32.dll (UID: 00000000-00004700)\n \"encrypt.exe\" called \"LoadLibrary\" with a parameter api-ms-win-appmodel-runtime-l1-1-2 (UID: 00000000-00004700)","description_v2":["\"encrypt.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-synch-l1-2-0 (UID: 00000000-00004700)","\"encrypt.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-fibers-l1-1-1 (UID: 00000000-00004700)","\"encrypt.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-localization-l1-2-1 (UID: 00000000-00004700)","\"encrypt.exe\" called \"LoadLibrary\" with a parameter kernel32 (UID: 00000000-00004700)","\"encrypt.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-fibers-l1-1-2 (UID: 00000000-00004700)","\"encrypt.exe\" called \"LoadLibrary\" with a parameter kernel32.dll (UID: 00000000-00004700)","\"encrypt.exe\" called \"LoadLibrary\" with a parameter api-ms-win-appmodel-runtime-l1-1-2 (UID: 00000000-00004700)"],"description_v3":[{"type":"text","value":"\"encrypt.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-synch-l1-2-0 (UID: 00000000-00004700)"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-fibers-l1-1-1 (UID: 00000000-00004700)"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-localization-l1-2-1 (UID: 00000000-00004700)"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" called \"LoadLibrary\" with a parameter kernel32 (UID: 00000000-00004700)"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" called \"LoadLibrary\" with a parameter api-ms-win-core-fibers-l1-1-2 (UID: 00000000-00004700)"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" called \"LoadLibrary\" with a parameter kernel32.dll (UID: 00000000-00004700)"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" called \"LoadLibrary\" with a parameter api-ms-win-appmodel-runtime-l1-1-2 (UID: 00000000-00004700)"}],"origin":"API Call","attck_id":"T1129","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1129","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"General","identifier":"api-176","type":6,"relevance":1,"name":"Calls an API typically used to retrieve function addresses","description":"$2d","description_v2":["\"encrypt.exe\" called \"GetProcAddress\" with a parameter InitializeCriticalSectionEx (UID: 00000000-00004700)","\"encrypt.exe\" called \"GetProcAddress\" with a parameter FlsAlloc (UID: 00000000-00004700)","\"encrypt.exe\" called \"GetProcAddress\" with a parameter FlsSetValue (UID: 00000000-00004700)","\"encrypt.exe\" called \"GetProcAddress\" with a parameter FlsGetValue (UID: 00000000-00004700)","\"encrypt.exe\" called \"GetProcAddress\" with a parameter LCMapStringEx (UID: 00000000-00004700)","\"encrypt.exe\" called \"GetProcAddress\" with a parameter FlsFree (UID: 00000000-00004700)","\"encrypt.exe\" called \"GetProcAddress\" with a parameter InitOnceExecuteOnce (UID: 00000000-00004700)","\"encrypt.exe\" called \"GetProcAddress\" with a parameter CreateEventExW (UID: 00000000-00004700)","\"encrypt.exe\" called \"GetProcAddress\" with a parameter CreateSemaphoreW (UID: 00000000-00004700)","\"encrypt.exe\" called \"GetProcAddress\" with a parameter CreateSemaphoreExW (UID: 00000000-00004700)","\"encrypt.exe\" called \"GetProcAddress\" with a parameter CreateThreadpoolTimer (UID: 00000000-00004700)","\"encrypt.exe\" called \"GetProcAddress\" with a parameter SetThreadpoolTimer (UID: 00000000-00004700)","\"encrypt.exe\" called \"GetProcAddress\" with a parameter WaitForThreadpoolTimerCallbacks (UID: 00000000-00004700)","\"encrypt.exe\" called \"GetProcAddress\" with a parameter CloseThreadpoolTimer (UID: 00000000-00004700)","\"encrypt.exe\" called \"GetProcAddress\" with a parameter CreateThreadpoolWait (UID: 00000000-00004700)","\"encrypt.exe\" called \"GetProcAddress\" with a parameter SetThreadpoolWait (UID: 00000000-00004700)","\"encrypt.exe\" called \"GetProcAddress\" with a parameter CloseThreadpoolWait (UID: 00000000-00004700)","\"encrypt.exe\" called \"GetProcAddress\" with a parameter FlushProcessWriteBuffers (UID: 00000000-00004700)","\"encrypt.exe\" called \"GetProcAddress\" with a parameter FreeLibraryWhenCallbackReturns (UID: 00000000-00004700)","\"encrypt.exe\" called \"GetProcAddress\" with a parameter GetCurrentProcessorNumber (UID: 00000000-00004700)","\"encrypt.exe\" called \"GetProcAddress\" with a parameter CreateSymbolicLinkW (UID: 00000000-00004700)","\"encrypt.exe\" called \"GetProcAddress\" with a parameter GetCurrentPackageId (UID: 00000000-00004700)","\"encrypt.exe\" called \"GetProcAddress\" with a parameter GetTickCount64 (UID: 00000000-00004700)","\"encrypt.exe\" called \"GetProcAddress\" with a parameter GetFileInformationByHandleEx (UID: 00000000-00004700)","\"encrypt.exe\" called \"GetProcAddress\" with a parameter SetFileInformationByHandle (UID: 00000000-00004700)","\"encrypt.exe\" called \"GetProcAddress\" with a parameter GetSystemTimePreciseAsFileTime (UID: 00000000-00004700)","\"encrypt.exe\" called \"GetProcAddress\" with a parameter InitializeConditionVariable (UID: 00000000-00004700)","\"encrypt.exe\" called \"GetProcAddress\" with a parameter WakeConditionVariable (UID: 00000000-00004700)","\"encrypt.exe\" called \"GetProcAddress\" with a parameter WakeAllConditionVariable (UID: 00000000-00004700)","\"encrypt.exe\" called \"GetProcAddress\" with a parameter SleepConditionVariableCS (UID: 00000000-00004700)","\"encrypt.exe\" called \"GetProcAddress\" with a parameter InitializeSRWLock (UID: 00000000-00004700)","\"encrypt.exe\" called \"GetProcAddress\" with a parameter AcquireSRWLockExclusive (UID: 00000000-00004700)","\"encrypt.exe\" called \"GetProcAddress\" with a parameter TryAcquireSRWLockExclusive (UID: 00000000-00004700)","\"encrypt.exe\" called \"GetProcAddress\" with a parameter ReleaseSRWLockExclusive (UID: 00000000-00004700)","\"encrypt.exe\" called \"GetProcAddress\" with a parameter SleepConditionVariableSRW (UID: 00000000-00004700)","\"encrypt.exe\" called \"GetProcAddress\" with a parameter CreateThreadpoolWork (UID: 00000000-00004700)","\"encrypt.exe\" called \"GetProcAddress\" with a parameter SubmitThreadpoolWork (UID: 00000000-00004700)","\"encrypt.exe\" called \"GetProcAddress\" with a parameter CloseThreadpoolWork (UID: 00000000-00004700)","\"encrypt.exe\" called \"GetProcAddress\" with a parameter CompareStringEx (UID: 00000000-00004700)","\"encrypt.exe\" called \"GetProcAddress\" with a parameter GetLocaleInfoEx (UID: 00000000-00004700)","\"encrypt.exe\" called \"GetProcAddress\" with a parameter AreFileApisANSI (UID: 00000000-00004700)","\"encrypt.exe\" called \"GetProcAddress\" with a parameter RtlGetVersion (UID: 00000000-00004700)","\"encrypt.exe\" called \"GetProcAddress\" with a parameter CoCreateInstance (UID: 00000000-00004700)","\"encrypt.exe\" called \"GetProcAddress\" with a parameter CoCreateInstanceEx (UID: 00000000-00004700)","\"encrypt.exe\" called \"GetProcAddress\" with a parameter CoGetClassObject (UID: 00000000-00004700)","\"encrypt.exe\" called \"GetProcAddress\" with a parameter FlsGetValue2 (UID: 00000000-00004700)","\"encrypt.exe\" called \"GetProcAddress\" with a parameter GetTempPath2W (UID: 00000000-00004700)","\"encrypt.exe\" called \"GetProcAddress\" with a parameter IsWow64Process (UID: 00000000-00004700)","\"encrypt.exe\" called \"GetProcAddress\" with a parameter Wow64DisableWow64FsRedirection (UID: 00000000-00004700)","\"encrypt.exe\" called \"GetProcAddress\" with a parameter Wow64RevertWow64FsRedirection (UID: 00000000-00004700)","\"encrypt.exe\" called \"GetProcAddress\" with a parameter AppPolicyGetThreadInitializationType (UID: 00000000-00004700)"],"description_v3":[{"type":"text","value":"\"encrypt.exe\" called \"GetProcAddress\" with a parameter InitializeCriticalSectionEx (UID: 00000000-00004700)"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" called \"GetProcAddress\" with a parameter FlsAlloc (UID: 00000000-00004700)"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" called \"GetProcAddress\" with a parameter FlsSetValue (UID: 00000000-00004700)"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" called \"GetProcAddress\" with a parameter FlsGetValue (UID: 00000000-00004700)"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" called \"GetProcAddress\" with a parameter LCMapStringEx (UID: 00000000-00004700)"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" called \"GetProcAddress\" with a parameter FlsFree (UID: 00000000-00004700)"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" called \"GetProcAddress\" with a parameter InitOnceExecuteOnce (UID: 00000000-00004700)"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" called \"GetProcAddress\" with a parameter CreateEventExW (UID: 00000000-00004700)"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" called \"GetProcAddress\" with a parameter CreateSemaphoreW (UID: 00000000-00004700)"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" called \"GetProcAddress\" with a parameter CreateSemaphoreExW (UID: 00000000-00004700)"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" called \"GetProcAddress\" with a parameter CreateThreadpoolTimer (UID: 00000000-00004700)"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" called \"GetProcAddress\" with a parameter SetThreadpoolTimer (UID: 00000000-00004700)"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" called \"GetProcAddress\" with a parameter WaitForThreadpoolTimerCallbacks (UID: 00000000-00004700)"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" called \"GetProcAddress\" with a parameter CloseThreadpoolTimer (UID: 00000000-00004700)"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" called \"GetProcAddress\" with a parameter CreateThreadpoolWait (UID: 00000000-00004700)"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" called \"GetProcAddress\" with a parameter SetThreadpoolWait (UID: 00000000-00004700)"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" called \"GetProcAddress\" with a parameter CloseThreadpoolWait (UID: 00000000-00004700)"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" called \"GetProcAddress\" with a parameter FlushProcessWriteBuffers (UID: 00000000-00004700)"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" called \"GetProcAddress\" with a parameter FreeLibraryWhenCallbackReturns (UID: 00000000-00004700)"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" called \"GetProcAddress\" with a parameter GetCurrentProcessorNumber (UID: 00000000-00004700)"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" called \"GetProcAddress\" with a parameter CreateSymbolicLinkW (UID: 00000000-00004700)"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" called \"GetProcAddress\" with a parameter GetCurrentPackageId (UID: 00000000-00004700)"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" called \"GetProcAddress\" with a parameter GetTickCount64 (UID: 00000000-00004700)"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" called \"GetProcAddress\" with a parameter GetFileInformationByHandleEx (UID: 00000000-00004700)"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" called \"GetProcAddress\" with a parameter SetFileInformationByHandle (UID: 00000000-00004700)"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" called \"GetProcAddress\" with a parameter GetSystemTimePreciseAsFileTime (UID: 00000000-00004700)"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" called \"GetProcAddress\" with a parameter InitializeConditionVariable (UID: 00000000-00004700)"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" called \"GetProcAddress\" with a parameter WakeConditionVariable (UID: 00000000-00004700)"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" called \"GetProcAddress\" with a parameter WakeAllConditionVariable (UID: 00000000-00004700)"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" called \"GetProcAddress\" with a parameter SleepConditionVariableCS (UID: 00000000-00004700)"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" called \"GetProcAddress\" with a parameter InitializeSRWLock (UID: 00000000-00004700)"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" called \"GetProcAddress\" with a parameter AcquireSRWLockExclusive (UID: 00000000-00004700)"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" called \"GetProcAddress\" with a parameter TryAcquireSRWLockExclusive (UID: 00000000-00004700)"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" called \"GetProcAddress\" with a parameter ReleaseSRWLockExclusive (UID: 00000000-00004700)"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" called \"GetProcAddress\" with a parameter SleepConditionVariableSRW (UID: 00000000-00004700)"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" called \"GetProcAddress\" with a parameter CreateThreadpoolWork (UID: 00000000-00004700)"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" called \"GetProcAddress\" with a parameter SubmitThreadpoolWork (UID: 00000000-00004700)"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" called \"GetProcAddress\" with a parameter CloseThreadpoolWork (UID: 00000000-00004700)"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" called \"GetProcAddress\" with a parameter CompareStringEx (UID: 00000000-00004700)"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" called \"GetProcAddress\" with a parameter GetLocaleInfoEx (UID: 00000000-00004700)"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" called \"GetProcAddress\" with a parameter AreFileApisANSI (UID: 00000000-00004700)"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" called \"GetProcAddress\" with a parameter RtlGetVersion (UID: 00000000-00004700)"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" called \"GetProcAddress\" with a parameter CoCreateInstance (UID: 00000000-00004700)"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" called \"GetProcAddress\" with a parameter CoCreateInstanceEx (UID: 00000000-00004700)"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" called \"GetProcAddress\" with a parameter CoGetClassObject (UID: 00000000-00004700)"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" called \"GetProcAddress\" with a parameter FlsGetValue2 (UID: 00000000-00004700)"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" called \"GetProcAddress\" with a parameter GetTempPath2W (UID: 00000000-00004700)"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" called \"GetProcAddress\" with a parameter IsWow64Process (UID: 00000000-00004700)"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" called \"GetProcAddress\" with a parameter Wow64DisableWow64FsRedirection (UID: 00000000-00004700)"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" called \"GetProcAddress\" with a parameter Wow64RevertWow64FsRedirection (UID: 00000000-00004700)"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" called \"GetProcAddress\" with a parameter AppPolicyGetThreadInitializationType (UID: 00000000-00004700)"}],"origin":"API Call","attck_id":"T1106","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1106","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"General","identifier":"string-242","type":2,"relevance":1,"name":"Contains ability to close a handle to a service (API string)","description":"Found reference to API \"CloseServiceHandle\" (Indicator: \"CloseServiceHandle\"; File: \"encrypt.exe\")\n Found reference to API \"CloseServiceHandle\" (Indicator: \"CloseServiceHandle\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","description_v2":["Found reference to API \"CloseServiceHandle\" (Indicator: \"CloseServiceHandle\"; File: \"encrypt.exe\")","Found reference to API \"CloseServiceHandle\" (Indicator: \"CloseServiceHandle\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"],"description_v3":[{"type":"text","value":"Found reference to API \"CloseServiceHandle\" (Indicator: \"CloseServiceHandle\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"CloseServiceHandle\" (Indicator: \"CloseServiceHandle\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"}],"origin":"File/Memory","attck_id":"T1489","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1489","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"General","identifier":"string-315","type":2,"relevance":1,"name":"Contains ability to create/open files (API string)","description":"Found reference to API \"CreateFileW\" (Indicator: \"CreateFile\"; File: \"encrypt.exe\")\n Found reference to API \"CreateFileW\" (Indicator: \"CreateFile\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","description_v2":["Found reference to API \"CreateFileW\" (Indicator: \"CreateFile\"; File: \"encrypt.exe\")","Found reference to API \"CreateFileW\" (Indicator: \"CreateFile\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"],"description_v3":[{"type":"text","value":"Found reference to API \"CreateFileW\" (Indicator: \"CreateFile\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"CreateFileW\" (Indicator: \"CreateFile\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"}],"origin":"File/Memory","attck_id":"T1106","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1106","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"General","identifier":"static-79","type":0,"relevance":1,"name":"Contains ability to dynamically determine API calls","description":"Found GetProcAddress() and LoadLibraryA() in an import section (Source: encrypt.exe)","description_v2":["Found GetProcAddress() and LoadLibraryA() in an import section (Source: encrypt.exe)"],"description_v3":[{"type":"text","value":"Found GetProcAddress() and LoadLibraryA() in an import section (Source: encrypt.exe)"}],"origin":"Static Parser","attck_id":"T1027.007","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1027/007","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"General","identifier":"string-101","type":2,"relevance":1,"name":"Contains ability to execute Windows APIs","description":"$2e","description_v2":["Found reference to API (Indicator: \"CloseServiceHandle\"; File: \"encrypt.exe\")","Found reference to API (Indicator: \"OpenServiceA\"; File: \"encrypt.exe\")","Found reference to API (Indicator: \"ControlService\"; File: \"encrypt.exe\")","Found reference to API (Indicator: \"EnumDependentServicesA\"; File: \"encrypt.exe\")","Found reference to API (Indicator: \"QueryServiceStatusEx\"; File: \"encrypt.exe\")","Found reference to API (Indicator: \"OpenSCManagerA\"; File: \"encrypt.exe\")","Found reference to API (Indicator: \"InterlockedPushEntrySList\"; File: \"encrypt.exe\")","Found reference to API (Indicator: \"HeapSize\"; File: \"encrypt.exe\")","Found reference to API (Indicator: \"SystemTimeToFileTime\"; File: \"encrypt.exe\")","Found reference to API (Indicator: \"GetConsoleWindow\"; File: \"encrypt.exe\")","Found reference to API (Indicator: \"GetTimeZoneInformation\"; File: \"encrypt.exe\")","Found reference to API (Indicator: \"FlsSetValue\"; File: \"encrypt.exe\")","Found reference to API (Indicator: \"GetLocaleInfoW\"; File: \"encrypt.exe\")","Found reference to API (Indicator: \"QueryPerformanceFrequency\"; File: \"encrypt.exe\")","Found reference to API (Indicator: \"GetCommandLineW\"; File: \"encrypt.exe\")","Found reference to API (Indicator: \"GetCurrentProcess\"; File: \"encrypt.exe\")","Found reference to API (Indicator: \"LCMapStringW\"; File: \"encrypt.exe\")","Found reference to API (Indicator: \"FlsGetValue\"; File: \"encrypt.exe\")","Found reference to API (Indicator: \"TryAcquireSRWLockExclusive\"; File: \"encrypt.exe\")","Found reference to API (Indicator: \"HeapReAlloc\"; File: \"encrypt.exe\")","Found reference to API (Indicator: \"FindClose\"; File: \"encrypt.exe\")","Found reference to API (Indicator: \"GetModuleHandleW\"; File: \"encrypt.exe\")","Found reference to API (Indicator: \"TlsFree\"; File: \"encrypt.exe\")","Found reference to API (Indicator: \"FindNextFileW\"; File: \"encrypt.exe\")","Found reference to API (Indicator: \"GetStdHandle\"; File: \"encrypt.exe\")","Found reference to API (Indicator: \"VirtualProtect\"; File: \"encrypt.exe\")","Found reference to API (Indicator: \"SetProcessShutdownParameters\"; File: \"encrypt.exe\")","Found reference to API (Indicator: \"TlsGetValue\"; File: \"encrypt.exe\")","Found reference to API (Indicator: \"RtlUnwind\"; File: \"encrypt.exe\")","Found reference to API (Indicator: \"Process32NextW\"; File: \"encrypt.exe\")","Found reference to API (Indicator: \"TlsSetValue\"; File: \"encrypt.exe\")","Found reference to API (Indicator: \"DeleteCriticalSection\"; File: \"encrypt.exe\")","Found reference to API (Indicator: \"SetVolumeMountPointW\"; File: \"encrypt.exe\")","Found reference to API (Indicator: \"ExitThread\"; File: \"encrypt.exe\")","Found reference to API (Indicator: \"GetFileSizeEx\"; File: \"encrypt.exe\")","Found reference to API (Indicator: \"MultiByteToWideChar\"; File: \"encrypt.exe\")","Found reference to API (Indicator: \"GetStringTypeW\"; File: \"encrypt.exe\")","Found reference to API (Indicator: \"QueryPerformanceCounter\"; File: \"encrypt.exe\")","Found reference to API (Indicator: \"WakeAllConditionVariable\"; File: \"encrypt.exe\")","Found reference to API (Indicator: \"FreeLibraryAndExitThread\"; File: \"encrypt.exe\")","Found reference to API (Indicator: \"ExitProcess\"; File: \"encrypt.exe\")","Found reference to API (Indicator: \"SetUnhandledExceptionFilter\"; File: \"encrypt.exe\")","Found reference to API (Indicator: \"GetTickCount\"; File: \"encrypt.exe\")","Found reference to API (Indicator: \"HeapFree\"; File: \"encrypt.exe\")","Found reference to API (Indicator: \"Process32FirstW\"; File: \"encrypt.exe\")","Found reference to API (Indicator: \"AcquireSRWLockExclusive\"; File: \"encrypt.exe\")","Found reference to API (Indicator: \"lstrlenW\"; File: \"encrypt.exe\")","Found reference to API (Indicator: \"GetProcAddress\"; File: \"encrypt.exe\")","Found reference to API (Indicator: \"WideCharToMultiByte\"; File: \"encrypt.exe\")","Found reference to API (Indicator: \"GetLastError\"; File: \"encrypt.exe\")","Found reference to API (Indicator: \"MoveFileExW\"; File: \"encrypt.exe\")","Found reference to API (Indicator: \"HeapQueryInformation\"; File: \"encrypt.exe\")","Found reference to API (Indicator: \"CompareStringW\"; File: \"encrypt.exe\")","Found reference to API (Indicator: \"GetComputerNameW\"; File: \"encrypt.exe\")","Found reference to API (Indicator: \"SetEnvironmentVariableW\"; File: \"encrypt.exe\")","Found reference to API (Indicator: \"InitializeCriticalSectionAndSpinCount\"; File: \"encrypt.exe\")","Found reference to API (Indicator: \"GetModuleFileNameW\"; File: \"encrypt.exe\")","Found reference to API (Indicator: \"GetExitCodeThread\"; File: \"encrypt.exe\")","Found reference to API (Indicator: \"EncodePointer\"; File: \"encrypt.exe\")","Found reference to API (Indicator: \"FindNextVolumeW\"; File: \"encrypt.exe\")","Found reference to API (Indicator: \"GetCommandLineA\"; File: \"encrypt.exe\")","Found reference to API (Indicator: \"DecodePointer\"; File: \"encrypt.exe\")","Found reference to API (Indicator: \"GetCurrentProcessId\"; File: \"encrypt.exe\")","Found reference to API (Indicator: \"LCMapStringEx\"; File: \"encrypt.exe\")","Found reference to API (Indicator: \"GetEnvironmentStringsW\"; File: \"encrypt.exe\")","Found reference to API (Indicator: \"FindFirstVolumeW\"; File: \"encrypt.exe\")","Found reference to API (Indicator: \"EnumSystemLocalesW\"; File: \"encrypt.exe\")","Found reference to API (Indicator: \"WriteFile\"; File: \"encrypt.exe\")","Found reference to API (Indicator: \"WriteConsoleW\"; File: \"encrypt.exe\")","Found reference to API (Indicator: \"GetSystemTimeAsFileTime\"; File: \"encrypt.exe\")","Found reference to API (Indicator: \"FindVolumeClose\"; File: \"encrypt.exe\")","Found reference to API (Indicator: \"WaitForSingleObjectEx\"; File: \"encrypt.exe\")","Found reference to API (Indicator: \"MoveFileW\"; File: \"encrypt.exe\")","Found reference to API (Indicator: \"SetStdHandle\"; File: \"encrypt.exe\")","Found reference to API (Indicator: \"CloseHandle\"; File: \"encrypt.exe\")","Found reference to API (Indicator: \"OpenProcess\"; File: \"encrypt.exe\")","Found reference to API (Indicator: \"FreeLibrary\"; File: \"encrypt.exe\")","Found reference to API (Indicator: \"UnhandledExceptionFilter\"; File: \"encrypt.exe\")","Found reference to API (Indicator: \"GetDateFormatW\"; File: \"encrypt.exe\")","Found reference to API (Indicator: \"GetModuleHandleExW\"; File: \"encrypt.exe\")","Found reference to API (Indicator: \"lstrcmpiW\"; File: \"encrypt.exe\")","Found reference to API (Indicator: \"TlsAlloc\"; File: \"encrypt.exe\")","Found reference to API (Indicator: \"LeaveCriticalSection\"; File: \"encrypt.exe\")","Found reference to API (Indicator: \"WakeConditionVariable\"; File: \"encrypt.exe\")","Found reference to API (Indicator: \"IsProcessorFeaturePresent\"; File: \"encrypt.exe\")","Found reference to API (Indicator: \"LoadLibraryA\"; File: \"encrypt.exe\")","Found reference to API (Indicator: \"FreeEnvironmentStringsW\"; File: \"encrypt.exe\")","Found reference to API (Indicator: \"GetStartupInfoW\"; File: \"encrypt.exe\")","Found reference to API (Indicator: \"ReleaseSRWLockExclusive\"; File: \"encrypt.exe\")","Found reference to API (Indicator: \"ReadFile\"; File: \"encrypt.exe\")","Found reference to API (Indicator: \"InitializeSListHead\"; File: \"encrypt.exe\")","Found reference to API (Indicator: \"SleepConditionVariableSRW\"; File: \"encrypt.exe\")","Found reference to API (Indicator: \"GetFileType\"; File: \"encrypt.exe\")","Found reference to API (Indicator: \"TerminateProcess\"; File: \"encrypt.exe\")","Found reference to API (Indicator: \"GetACP\"; File: \"encrypt.exe\")","Found reference to API (Indicator: \"lstrcmpW\"; File: \"encrypt.exe\")","Found reference to API (Indicator: \"CreateFileW\"; File: \"encrypt.exe\")","Found reference to API (Indicator: \"lstrlenA\"; File: \"encrypt.exe\")","Found reference to API (Indicator: \"GetNativeSystemInfo\"; File: \"encrypt.exe\")","Found reference to API (Indicator: \"SetLastError\"; File: \"encrypt.exe\")","Found reference to API (Indicator: \"CreateThread\"; File: \"encrypt.exe\")","Found reference to API (Indicator: \"SetEndOfFile\"; File: \"encrypt.exe\")","Found reference to API (Indicator: \"GetVolumePathNamesForVolumeNameW\"; File: \"encrypt.exe\")","Found reference to API (Indicator: \"CreateToolhelp32Snapshot\"; File: \"encrypt.exe\")","Found reference to API (Indicator: \"GetProcessHeap\"; File: \"encrypt.exe\")","Found reference to API (Indicator: \"WaitForSingleObject\"; File: \"encrypt.exe\")","Found reference to API (Indicator: \"GetModuleHandleA\"; File: \"encrypt.exe\")","Found reference to API (Indicator: \"GetCurrentThreadId\"; File: \"encrypt.exe\")","Found reference to API (Indicator: \"FlsFree\"; File: \"encrypt.exe\")","Found reference to API (Indicator: \"Sleep\"; File: \"encrypt.exe\")","Found reference to API (Indicator: \"CompareFileTime\"; File: \"encrypt.exe\")","Found reference to API (Indicator: \"GetDriveTypeW\"; File: \"encrypt.exe\")","Found reference to API (Indicator: \"FindFirstFileExW\"; File: \"encrypt.exe\")","Found reference to API (Indicator: \"IsValidLocale\"; File: \"encrypt.exe\")","Found reference to API (Indicator: \"GetUserDefaultLCID\"; File: \"encrypt.exe\")","Found reference to API (Indicator: \"RaiseException\"; File: \"encrypt.exe\")","Found reference to API (Indicator: \"FlsAlloc\"; File: \"encrypt.exe\")","Found reference to API (Indicator: \"InitializeCriticalSectionEx\"; File: \"encrypt.exe\")","Found reference to API (Indicator: \"GetLocaleInfoEx\"; File: \"encrypt.exe\")","Found reference to API (Indicator: \"GetConsoleOutputCP\"; File: \"encrypt.exe\")","Found reference to API (Indicator: \"CompareStringEx\"; File: \"encrypt.exe\")","Found reference to API (Indicator: \"SetFileAttributesW\"; File: \"encrypt.exe\")","Found reference to API (Indicator: \"EnterCriticalSection\"; File: \"encrypt.exe\")","Found reference to API (Indicator: \"LoadLibraryExW\"; File: \"encrypt.exe\")","Found reference to API (Indicator: \"IsDebuggerPresent\"; File: \"encrypt.exe\")","Found reference to API (Indicator: \"GetTimeFormatW\"; File: \"encrypt.exe\")","Found reference to API (Indicator: \"HeapAlloc\"; File: \"encrypt.exe\")","Found reference to API (Indicator: \"GetOEMCP\"; File: \"encrypt.exe\")","Found reference to API (Indicator: \"SetFilePointerEx\"; File: \"encrypt.exe\")","Found reference to API (Indicator: \"FindFirstFileW\"; File: \"encrypt.exe\")","Found reference to API (Indicator: \"GetCPInfo\"; File: \"encrypt.exe\")","Found reference to API (Indicator: \"IsValidCodePage\"; File: \"encrypt.exe\")","Found reference to API (Indicator: \"FlushFileBuffers\"; File: \"encrypt.exe\")","Found reference to API (Indicator: \"GetConsoleMode\"; File: \"encrypt.exe\")","Found reference to API (Indicator: \"NetApiBufferFree\"; File: \"encrypt.exe\")","Found reference to API (Indicator: \"NetShareEnum\"; File: \"encrypt.exe\")","Found reference to API (Indicator: \"ShowWindow\"; File: \"encrypt.exe\")","Found reference to API (Indicator: \"BCryptGenRandom\"; File: \"encrypt.exe\")","Found reference to API (Indicator: \"BCryptOpenAlgorithmProvider\"; File: \"encrypt.exe\")","Found reference to API (Indicator: \"BCryptCloseAlgorithmProvider\"; File: \"encrypt.exe\")","Found reference to API (Indicator: \"CoUninitialize\"; File: \"encrypt.exe\")","Found reference to API (Indicator: \"CoInitialize\"; File: \"encrypt.exe\")","Found reference to API (Indicator: \"GetSystemTimePreciseAsFileTime\"; File: \"encrypt.exe\")","Found reference to API (Indicator: \"AreFileApisANSI\"; File: \"encrypt.exe\")","Found reference to API (Indicator: \"EnumSystemLocalesEx\"; File: \"encrypt.exe\")","Found reference to API (Indicator: \"GetDateFormatEx\"; File: \"encrypt.exe\")","Found reference to API (Indicator: \"GetTimeFormatEx\"; File: \"encrypt.exe\")","Found reference to API (Indicator: \"GetUserDefaultLocaleName\"; File: \"encrypt.exe\")","Found reference to API (Indicator: \"IsValidLocaleName\"; File: \"encrypt.exe\")","Found reference to API (Indicator: \"LCIDToLocaleName\"; File: \"encrypt.exe\")","Found reference to API (Indicator: \"LocaleNameToLCID\"; File: \"encrypt.exe\")","Found reference to API (Indicator: \"IsWow64Process\"; File: \"encrypt.exe\")","Found reference to API (Indicator: \"Wow64DisableWow64FsRedirection\"; File: \"encrypt.exe\")","Found reference to API (Indicator: \"Wow64RevertWow64FsRedirection\"; File: \"encrypt.exe\")","Found reference to API (Indicator: \"ReadFile\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API (Indicator: \"CompareFileTime\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API (Indicator: \"FindFirstFileW\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API (Indicator: \"GetFileSizeEx\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API (Indicator: \"FindFirstVolumeW\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API (Indicator: \"HeapFree\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API (Indicator: \"FindNextFileW\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API (Indicator: \"GetCurrentProcess\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API (Indicator: \"lstrlenW\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API (Indicator: \"WriteFile\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API (Indicator: \"TerminateProcess\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API (Indicator: \"SetProcessShutdownParameters\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API (Indicator: \"SetEndOfFile\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API (Indicator: \"lstrlenA\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API (Indicator: \"FindClose\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API (Indicator: \"WaitForSingleObject\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API (Indicator: \"CreateFileW\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API (Indicator: \"GetModuleHandleA\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API (Indicator: \"OpenProcess\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API (Indicator: \"SetFileAttributesW\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API (Indicator: \"CreateToolhelp32Snapshot\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API (Indicator: \"Sleep\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API (Indicator: \"GetLastError\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API (Indicator: \"Process32NextW\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API (Indicator: \"LoadLibraryA\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API (Indicator: \"Process32FirstW\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API (Indicator: \"CloseHandle\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API (Indicator: \"HeapAlloc\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API (Indicator: \"SetVolumeMountPointW\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API (Indicator: \"GetProcAddress\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API (Indicator: \"SetFilePointerEx\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API (Indicator: \"MoveFileExW\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API (Indicator: \"ExitProcess\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API (Indicator: \"GetComputerNameW\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API (Indicator: \"FindVolumeClose\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API (Indicator: \"GetCurrentProcessId\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API (Indicator: \"GetProcessHeap\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API (Indicator: \"SystemTimeToFileTime\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API (Indicator: \"GetConsoleWindow\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API (Indicator: \"GetVolumePathNamesForVolumeNameW\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API (Indicator: \"FindNextVolumeW\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API (Indicator: \"lstrcmpiW\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API (Indicator: \"GetTickCount\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API (Indicator: \"lstrcmpW\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API (Indicator: \"MoveFileW\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API (Indicator: \"GetDriveTypeW\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API (Indicator: \"ShowWindow\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API (Indicator: \"OpenServiceA\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API (Indicator: \"QueryServiceStatusEx\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API (Indicator: \"ControlService\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API (Indicator: \"OpenSCManagerA\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API (Indicator: \"CloseServiceHandle\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API (Indicator: \"EnumDependentServicesA\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API (Indicator: \"CoInitialize\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API (Indicator: \"CoUninitialize\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API (Indicator: \"BCryptOpenAlgorithmProvider\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp, 00000000-00004700.00000001.240563.008D1000.00000020.mdmp\")","Found reference to API (Indicator: \"BCryptCloseAlgorithmProvider\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API (Indicator: \"BCryptGenRandom\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp, 00000000-00004700.00000001.240563.008D1000.00000020.mdmp\")","Found reference to API (Indicator: \"NetShareEnum\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API (Indicator: \"NetApiBufferFree\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API (Indicator: \"SetLastError\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API (Indicator: \"QueryPerformanceCounter\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API (Indicator: \"QueryPerformanceFrequency\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API (Indicator: \"WakeConditionVariable\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API (Indicator: \"WakeAllConditionVariable\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API (Indicator: \"SleepConditionVariableSRW\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API (Indicator: \"GetCurrentThreadId\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API (Indicator: \"WaitForSingleObjectEx\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API (Indicator: \"GetExitCodeThread\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API (Indicator: \"GetNativeSystemInfo\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API (Indicator: \"MultiByteToWideChar\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API (Indicator: \"ReleaseSRWLockExclusive\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API (Indicator: \"AcquireSRWLockExclusive\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API (Indicator: \"TryAcquireSRWLockExclusive\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API (Indicator: \"WideCharToMultiByte\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API (Indicator: \"EnterCriticalSection\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API (Indicator: \"LeaveCriticalSection\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API (Indicator: \"InitializeCriticalSectionEx\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp, 00000000-00004700.00000001.240563.008D1000.00000020.mdmp\")","Found reference to API (Indicator: \"DeleteCriticalSection\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API (Indicator: \"EncodePointer\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API (Indicator: \"DecodePointer\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API (Indicator: \"GetLocaleInfoEx\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp, 00000000-00004700.00000001.240563.008D1000.00000020.mdmp\")","Found reference to API (Indicator: \"LCMapStringEx\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp, 00000000-00004700.00000001.240563.008D1000.00000020.mdmp\")","Found reference to API (Indicator: \"GetSystemTimeAsFileTime\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API (Indicator: \"GetModuleHandleW\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API (Indicator: \"GetStringTypeW\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API (Indicator: \"CompareStringEx\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp, 00000000-00004700.00000001.240563.008D1000.00000020.mdmp\")","Found reference to API (Indicator: \"GetCPInfo\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API (Indicator: \"UnhandledExceptionFilter\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API (Indicator: \"SetUnhandledExceptionFilter\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API (Indicator: \"IsProcessorFeaturePresent\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API (Indicator: \"InitializeSListHead\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API (Indicator: \"IsDebuggerPresent\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API (Indicator: \"GetStartupInfoW\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API (Indicator: \"RtlUnwind\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API (Indicator: \"RaiseException\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API (Indicator: \"InterlockedPushEntrySList\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API (Indicator: \"InitializeCriticalSectionAndSpinCount\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API (Indicator: \"TlsAlloc\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API (Indicator: \"TlsGetValue\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API (Indicator: \"TlsSetValue\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API (Indicator: \"TlsFree\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API (Indicator: \"FreeLibrary\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API (Indicator: \"LoadLibraryExW\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API (Indicator: \"CreateThread\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API (Indicator: \"ExitThread\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API (Indicator: \"FreeLibraryAndExitThread\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API (Indicator: \"GetModuleHandleExW\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API (Indicator: \"GetModuleFileNameW\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API (Indicator: \"GetStdHandle\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API (Indicator: \"GetCommandLineA\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API (Indicator: \"GetCommandLineW\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API (Indicator: \"FlsAlloc\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp, 00000000-00004700.00000001.240563.008D1000.00000020.mdmp\")","Found reference to API (Indicator: \"FlsGetValue\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp, 00000000-00004700.00000001.240563.008D1000.00000020.mdmp\")","Found reference to API (Indicator: \"FlsSetValue\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp, 00000000-00004700.00000001.240563.008D1000.00000020.mdmp\")","Found reference to API (Indicator: \"FlsFree\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp, 00000000-00004700.00000001.240563.008D1000.00000020.mdmp\")","Found reference to API (Indicator: \"VirtualProtect\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API (Indicator: \"GetDateFormatW\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API (Indicator: \"GetTimeFormatW\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API (Indicator: \"CompareStringW\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API (Indicator: \"LCMapStringW\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API (Indicator: \"GetLocaleInfoW\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API (Indicator: \"IsValidLocale\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API (Indicator: \"GetUserDefaultLCID\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API (Indicator: \"EnumSystemLocalesW\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API (Indicator: \"GetFileType\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API (Indicator: \"HeapReAlloc\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API (Indicator: \"HeapSize\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API (Indicator: \"HeapQueryInformation\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API (Indicator: \"GetTimeZoneInformation\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API (Indicator: \"FindFirstFileExW\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API (Indicator: \"IsValidCodePage\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API (Indicator: \"GetACP\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API (Indicator: \"GetOEMCP\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API (Indicator: \"GetEnvironmentStringsW\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API (Indicator: \"FreeEnvironmentStringsW\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API (Indicator: \"SetEnvironmentVariableW\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API (Indicator: \"SetStdHandle\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API (Indicator: \"FlushFileBuffers\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API (Indicator: \"GetConsoleOutputCP\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API (Indicator: \"GetConsoleMode\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API (Indicator: \"WriteConsoleW\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API (Indicator: \"GetSystemTimePreciseAsFileTime\"; Source: \"00000000-00004700.00000001.240563.008D1000.00000020.mdmp\")","Found reference to API (Indicator: \"AreFileApisANSI\"; Source: \"00000000-00004700.00000001.240563.008D1000.00000020.mdmp\")","Found reference to API (Indicator: \"EnumSystemLocalesEx\"; Source: \"00000000-00004700.00000001.240563.008D1000.00000020.mdmp\")","Found reference to API (Indicator: \"GetDateFormatEx\"; Source: \"00000000-00004700.00000001.240563.008D1000.00000020.mdmp\")","Found reference to API (Indicator: \"GetTimeFormatEx\"; Source: \"00000000-00004700.00000001.240563.008D1000.00000020.mdmp\")","Found reference to API (Indicator: \"GetUserDefaultLocaleName\"; Source: \"00000000-00004700.00000001.240563.008D1000.00000020.mdmp\")","Found reference to API (Indicator: \"IsValidLocaleName\"; Source: \"00000000-00004700.00000001.240563.008D1000.00000020.mdmp\")","Found reference to API (Indicator: \"LCIDToLocaleName\"; Source: \"00000000-00004700.00000001.240563.008D1000.00000020.mdmp\")","Found reference to API (Indicator: \"LocaleNameToLCID\"; Source: \"00000000-00004700.00000001.240563.008D1000.00000020.mdmp\")","Found reference to API (Indicator: \"IsWow64Process\"; Source: \"00000000-00004700.00000001.240563.008D1000.00000020.mdmp\")","Found reference to API (Indicator: \"Wow64DisableWow64FsRedirection\"; Source: \"00000000-00004700.00000001.240563.008D1000.00000020.mdmp\")","Found reference to API (Indicator: \"Wow64RevertWow64FsRedirection\"; Source: \"00000000-00004700.00000001.240563.008D1000.00000020.mdmp\")"],"description_v3":[{"type":"text","value":"Found reference to API (Indicator: \"CloseServiceHandle\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"OpenServiceA\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"ControlService\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"EnumDependentServicesA\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"QueryServiceStatusEx\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"OpenSCManagerA\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"InterlockedPushEntrySList\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"HeapSize\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"SystemTimeToFileTime\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"GetConsoleWindow\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"GetTimeZoneInformation\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"FlsSetValue\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"GetLocaleInfoW\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"QueryPerformanceFrequency\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"GetCommandLineW\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"GetCurrentProcess\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"LCMapStringW\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"FlsGetValue\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"TryAcquireSRWLockExclusive\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"HeapReAlloc\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"FindClose\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"GetModuleHandleW\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"TlsFree\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"FindNextFileW\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"GetStdHandle\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"VirtualProtect\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"SetProcessShutdownParameters\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"TlsGetValue\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"RtlUnwind\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"Process32NextW\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"TlsSetValue\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"DeleteCriticalSection\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"SetVolumeMountPointW\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"ExitThread\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"GetFileSizeEx\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"MultiByteToWideChar\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"GetStringTypeW\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"QueryPerformanceCounter\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"WakeAllConditionVariable\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"FreeLibraryAndExitThread\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"ExitProcess\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"SetUnhandledExceptionFilter\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"GetTickCount\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"HeapFree\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"Process32FirstW\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"AcquireSRWLockExclusive\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"lstrlenW\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"GetProcAddress\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"WideCharToMultiByte\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"GetLastError\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"MoveFileExW\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"HeapQueryInformation\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"CompareStringW\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"GetComputerNameW\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"SetEnvironmentVariableW\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"InitializeCriticalSectionAndSpinCount\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"GetModuleFileNameW\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"GetExitCodeThread\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"EncodePointer\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"FindNextVolumeW\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"GetCommandLineA\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"DecodePointer\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"GetCurrentProcessId\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"LCMapStringEx\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"GetEnvironmentStringsW\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"FindFirstVolumeW\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"EnumSystemLocalesW\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"WriteFile\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"WriteConsoleW\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"GetSystemTimeAsFileTime\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"FindVolumeClose\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"WaitForSingleObjectEx\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"MoveFileW\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"SetStdHandle\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"CloseHandle\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"OpenProcess\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"FreeLibrary\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"UnhandledExceptionFilter\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"GetDateFormatW\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"GetModuleHandleExW\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"lstrcmpiW\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"TlsAlloc\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"LeaveCriticalSection\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"WakeConditionVariable\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"IsProcessorFeaturePresent\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"LoadLibraryA\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"FreeEnvironmentStringsW\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"GetStartupInfoW\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"ReleaseSRWLockExclusive\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"ReadFile\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"InitializeSListHead\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"SleepConditionVariableSRW\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"GetFileType\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"TerminateProcess\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"GetACP\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"lstrcmpW\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"CreateFileW\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"lstrlenA\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"GetNativeSystemInfo\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"SetLastError\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"CreateThread\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"SetEndOfFile\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"GetVolumePathNamesForVolumeNameW\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"CreateToolhelp32Snapshot\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"GetProcessHeap\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"WaitForSingleObject\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"GetModuleHandleA\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"GetCurrentThreadId\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"FlsFree\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"Sleep\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"CompareFileTime\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"GetDriveTypeW\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"FindFirstFileExW\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"IsValidLocale\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"GetUserDefaultLCID\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"RaiseException\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"FlsAlloc\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"InitializeCriticalSectionEx\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"GetLocaleInfoEx\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"GetConsoleOutputCP\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"CompareStringEx\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"SetFileAttributesW\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"EnterCriticalSection\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"LoadLibraryExW\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"IsDebuggerPresent\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"GetTimeFormatW\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"HeapAlloc\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"GetOEMCP\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"SetFilePointerEx\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"FindFirstFileW\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"GetCPInfo\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"IsValidCodePage\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"FlushFileBuffers\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"GetConsoleMode\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"NetApiBufferFree\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"NetShareEnum\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"ShowWindow\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"BCryptGenRandom\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"BCryptOpenAlgorithmProvider\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"BCryptCloseAlgorithmProvider\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"CoUninitialize\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"CoInitialize\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"GetSystemTimePreciseAsFileTime\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"AreFileApisANSI\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"EnumSystemLocalesEx\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"GetDateFormatEx\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"GetTimeFormatEx\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"GetUserDefaultLocaleName\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"IsValidLocaleName\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"LCIDToLocaleName\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"LocaleNameToLCID\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"IsWow64Process\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"Wow64DisableWow64FsRedirection\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"Wow64RevertWow64FsRedirection\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"ReadFile\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"CompareFileTime\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"FindFirstFileW\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"GetFileSizeEx\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"FindFirstVolumeW\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"HeapFree\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"FindNextFileW\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"GetCurrentProcess\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"lstrlenW\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"WriteFile\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"TerminateProcess\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"SetProcessShutdownParameters\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"SetEndOfFile\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"lstrlenA\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"FindClose\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"WaitForSingleObject\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"CreateFileW\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"GetModuleHandleA\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"OpenProcess\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"SetFileAttributesW\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"CreateToolhelp32Snapshot\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"Sleep\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"GetLastError\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"Process32NextW\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"LoadLibraryA\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"Process32FirstW\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"CloseHandle\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"HeapAlloc\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"SetVolumeMountPointW\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"GetProcAddress\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"SetFilePointerEx\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"MoveFileExW\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"ExitProcess\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"GetComputerNameW\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"FindVolumeClose\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"GetCurrentProcessId\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"GetProcessHeap\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"SystemTimeToFileTime\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"GetConsoleWindow\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"GetVolumePathNamesForVolumeNameW\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"FindNextVolumeW\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"lstrcmpiW\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"GetTickCount\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"lstrcmpW\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"MoveFileW\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"GetDriveTypeW\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"ShowWindow\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"OpenServiceA\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"QueryServiceStatusEx\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"ControlService\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"OpenSCManagerA\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"CloseServiceHandle\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"EnumDependentServicesA\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"CoInitialize\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"CoUninitialize\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"BCryptOpenAlgorithmProvider\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp, 00000000-00004700.00000001.240563.008D1000.00000020.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"BCryptCloseAlgorithmProvider\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"BCryptGenRandom\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp, 00000000-00004700.00000001.240563.008D1000.00000020.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"NetShareEnum\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"NetApiBufferFree\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"SetLastError\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"QueryPerformanceCounter\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"QueryPerformanceFrequency\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"WakeConditionVariable\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"WakeAllConditionVariable\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"SleepConditionVariableSRW\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"GetCurrentThreadId\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"WaitForSingleObjectEx\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"GetExitCodeThread\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"GetNativeSystemInfo\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"MultiByteToWideChar\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"ReleaseSRWLockExclusive\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"AcquireSRWLockExclusive\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"TryAcquireSRWLockExclusive\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"WideCharToMultiByte\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"EnterCriticalSection\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"LeaveCriticalSection\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"InitializeCriticalSectionEx\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp, 00000000-00004700.00000001.240563.008D1000.00000020.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"DeleteCriticalSection\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"EncodePointer\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"DecodePointer\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"GetLocaleInfoEx\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp, 00000000-00004700.00000001.240563.008D1000.00000020.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"LCMapStringEx\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp, 00000000-00004700.00000001.240563.008D1000.00000020.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"GetSystemTimeAsFileTime\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"GetModuleHandleW\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"GetStringTypeW\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"CompareStringEx\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp, 00000000-00004700.00000001.240563.008D1000.00000020.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"GetCPInfo\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"UnhandledExceptionFilter\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"SetUnhandledExceptionFilter\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"IsProcessorFeaturePresent\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"InitializeSListHead\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"IsDebuggerPresent\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"GetStartupInfoW\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"RtlUnwind\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"RaiseException\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"InterlockedPushEntrySList\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"InitializeCriticalSectionAndSpinCount\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"TlsAlloc\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"TlsGetValue\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"TlsSetValue\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"TlsFree\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"FreeLibrary\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"LoadLibraryExW\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"CreateThread\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"ExitThread\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"FreeLibraryAndExitThread\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"GetModuleHandleExW\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"GetModuleFileNameW\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"GetStdHandle\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"GetCommandLineA\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"GetCommandLineW\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"FlsAlloc\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp, 00000000-00004700.00000001.240563.008D1000.00000020.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"FlsGetValue\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp, 00000000-00004700.00000001.240563.008D1000.00000020.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"FlsSetValue\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp, 00000000-00004700.00000001.240563.008D1000.00000020.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"FlsFree\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp, 00000000-00004700.00000001.240563.008D1000.00000020.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"VirtualProtect\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"GetDateFormatW\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"GetTimeFormatW\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"CompareStringW\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"LCMapStringW\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"GetLocaleInfoW\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"IsValidLocale\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"GetUserDefaultLCID\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"EnumSystemLocalesW\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"GetFileType\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"HeapReAlloc\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"HeapSize\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"HeapQueryInformation\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"GetTimeZoneInformation\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"FindFirstFileExW\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"IsValidCodePage\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"GetACP\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"GetOEMCP\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"GetEnvironmentStringsW\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"FreeEnvironmentStringsW\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"SetEnvironmentVariableW\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"SetStdHandle\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"FlushFileBuffers\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"GetConsoleOutputCP\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"GetConsoleMode\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"WriteConsoleW\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"GetSystemTimePreciseAsFileTime\"; Source: \"00000000-00004700.00000001.240563.008D1000.00000020.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"AreFileApisANSI\"; Source: \"00000000-00004700.00000001.240563.008D1000.00000020.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"EnumSystemLocalesEx\"; Source: \"00000000-00004700.00000001.240563.008D1000.00000020.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"GetDateFormatEx\"; Source: \"00000000-00004700.00000001.240563.008D1000.00000020.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"GetTimeFormatEx\"; Source: \"00000000-00004700.00000001.240563.008D1000.00000020.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"GetUserDefaultLocaleName\"; Source: \"00000000-00004700.00000001.240563.008D1000.00000020.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"IsValidLocaleName\"; Source: \"00000000-00004700.00000001.240563.008D1000.00000020.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"LCIDToLocaleName\"; Source: \"00000000-00004700.00000001.240563.008D1000.00000020.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"LocaleNameToLCID\"; Source: \"00000000-00004700.00000001.240563.008D1000.00000020.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"IsWow64Process\"; Source: \"00000000-00004700.00000001.240563.008D1000.00000020.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"Wow64DisableWow64FsRedirection\"; Source: \"00000000-00004700.00000001.240563.008D1000.00000020.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API (Indicator: \"Wow64RevertWow64FsRedirection\"; Source: \"00000000-00004700.00000001.240563.008D1000.00000020.mdmp\")"}],"origin":"File/Memory","attck_id":"T1106","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1106","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"General","identifier":"string-322","type":2,"relevance":1,"name":"Contains ability to move file or directory (API string)","description":"Found reference to API \"MoveFileExW\" (Indicator: \"MoveFile\"; File: \"encrypt.exe\")\n Found reference to API \"MoveFileW\" (Indicator: \"MoveFile\"; File: \"encrypt.exe\")\n Found reference to API \"MoveFileExW\" (Indicator: \"MoveFile\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")\n Found reference to API \"MoveFileW\" (Indicator: \"MoveFile\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","description_v2":["Found reference to API \"MoveFileExW\" (Indicator: \"MoveFile\"; File: \"encrypt.exe\")","Found reference to API \"MoveFileW\" (Indicator: \"MoveFile\"; File: \"encrypt.exe\")","Found reference to API \"MoveFileExW\" (Indicator: \"MoveFile\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API \"MoveFileW\" (Indicator: \"MoveFile\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"],"description_v3":[{"type":"text","value":"Found reference to API \"MoveFileExW\" (Indicator: \"MoveFile\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"MoveFileW\" (Indicator: \"MoveFile\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"MoveFileExW\" (Indicator: \"MoveFile\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"MoveFileW\" (Indicator: \"MoveFile\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"}],"origin":"File/Memory","attck_id":"T1570","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1570","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"General","identifier":"string-206","type":2,"relevance":1,"name":"Contains ability to retrieve the command-line string for the current process (API string)","description":"Found reference to API \"GetCommandLineW\" (Indicator: \"GetCommandLine\"; File: \"encrypt.exe\")\n Found reference to API \"GetCommandLineA\" (Indicator: \"GetCommandLine\"; File: \"encrypt.exe\")\n Found reference to API \"GetCommandLineA\" (Indicator: \"GetCommandLine\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")\n Found reference to API \"GetCommandLineW\" (Indicator: \"GetCommandLine\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","description_v2":["Found reference to API \"GetCommandLineW\" (Indicator: \"GetCommandLine\"; File: \"encrypt.exe\")","Found reference to API \"GetCommandLineA\" (Indicator: \"GetCommandLine\"; File: \"encrypt.exe\")","Found reference to API \"GetCommandLineA\" (Indicator: \"GetCommandLine\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API \"GetCommandLineW\" (Indicator: \"GetCommandLine\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"],"description_v3":[{"type":"text","value":"Found reference to API \"GetCommandLineW\" (Indicator: \"GetCommandLine\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"GetCommandLineA\" (Indicator: \"GetCommandLine\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"GetCommandLineA\" (Indicator: \"GetCommandLine\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"GetCommandLineW\" (Indicator: \"GetCommandLine\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"}],"origin":"File/Memory","attck_id":"T1059.003","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1059/003","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"General","identifier":"string-161","type":2,"relevance":1,"name":"Contains ability to retrieve/modify process thread (API string)","description":"Found reference to API \"CreateThread\" (Indicator: \"CreateThread\"; File: \"encrypt.exe\")\n Found reference to API \"CreateThread\" (Indicator: \"CreateThread\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","description_v2":["Found reference to API \"CreateThread\" (Indicator: \"CreateThread\"; File: \"encrypt.exe\")","Found reference to API \"CreateThread\" (Indicator: \"CreateThread\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"],"description_v3":[{"type":"text","value":"Found reference to API \"CreateThread\" (Indicator: \"CreateThread\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"CreateThread\" (Indicator: \"CreateThread\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"}],"origin":"File/Memory","attck_id":"T1106","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1106","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"General","identifier":"string-272","type":2,"relevance":1,"name":"Contains ability to retrieve/open a process (API string)","description":"Found reference to API \"OpenProcess\" (Indicator: \"OpenProcess\"; File: \"encrypt.exe\")\n Found reference to API \"GetProcessHeap\" (Indicator: \"GetProcessHeap\"; File: \"encrypt.exe\")\n Found reference to API \"OpenProcess\" (Indicator: \"OpenProcess\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")\n Found reference to API \"GetProcessHeap\" (Indicator: \"GetProcessHeap\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","description_v2":["Found reference to API \"OpenProcess\" (Indicator: \"OpenProcess\"; File: \"encrypt.exe\")","Found reference to API \"GetProcessHeap\" (Indicator: \"GetProcessHeap\"; File: \"encrypt.exe\")","Found reference to API \"OpenProcess\" (Indicator: \"OpenProcess\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API \"GetProcessHeap\" (Indicator: \"GetProcessHeap\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"],"description_v3":[{"type":"text","value":"Found reference to API \"OpenProcess\" (Indicator: \"OpenProcess\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"GetProcessHeap\" (Indicator: \"GetProcessHeap\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"OpenProcess\" (Indicator: \"OpenProcess\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"GetProcessHeap\" (Indicator: \"GetProcessHeap\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"}],"origin":"File/Memory","attck_id":"T1057","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1057","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"General","identifier":"string-319","type":2,"relevance":1,"name":"Contains ability to set/get the last-error code for a calling thread (API string)","description":"Found reference to API \"GetLastError\" (Indicator: \"GetLastError\"; File: \"encrypt.exe\")\n Found reference to API \"SetLastError\" (Indicator: \"SetLastError\"; File: \"encrypt.exe\")\n Found reference to API \"GetLastError\" (Indicator: \"GetLastError\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")\n Found reference to API \"SetLastError\" (Indicator: \"SetLastError\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","description_v2":["Found reference to API \"GetLastError\" (Indicator: \"GetLastError\"; File: \"encrypt.exe\")","Found reference to API \"SetLastError\" (Indicator: \"SetLastError\"; File: \"encrypt.exe\")","Found reference to API \"GetLastError\" (Indicator: \"GetLastError\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API \"SetLastError\" (Indicator: \"SetLastError\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"],"description_v3":[{"type":"text","value":"Found reference to API \"GetLastError\" (Indicator: \"GetLastError\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"SetLastError\" (Indicator: \"SetLastError\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"GetLastError\" (Indicator: \"GetLastError\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"SetLastError\" (Indicator: \"SetLastError\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"}],"origin":"File/Memory","attck_id":"T1106","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1106","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"General","identifier":"string-208","type":2,"relevance":1,"name":"Contains ability to show a graphical window (API string)","description":"Found reference to API \"ShowWindow\" (Indicator: \"ShowWindow\"; File: \"encrypt.exe\")\n Found reference to API \"ShowWindow\" (Indicator: \"ShowWindow\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","description_v2":["Found reference to API \"ShowWindow\" (Indicator: \"ShowWindow\"; File: \"encrypt.exe\")","Found reference to API \"ShowWindow\" (Indicator: \"ShowWindow\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"],"description_v3":[{"type":"text","value":"Found reference to API \"ShowWindow\" (Indicator: \"ShowWindow\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"ShowWindow\" (Indicator: \"ShowWindow\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"}],"origin":"File/Memory","attck_id":"T1564.003","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1564/003","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"General","identifier":"string-265","type":2,"relevance":1,"name":"Contains reference to Windows Startup folder","description":"\":\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\" (Indicator: \":\\programdata\\microsoft\\windows\\start menu\\programs\\startup\") in Source: 00000000-00004700.00000000.238642.02E50000.00000004.mdmp\n 00000000-00004700.00000001.240563.02E50000.00000004.mdmp\n \":\\Users\\HAPUBWS\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\" (Indicator: \":\\users\\hapubws\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\startup\") in Source: 00000000-00004700.00000000.238642.02E50000.00000004.mdmp\n 00000000-00004700.00000001.240563.02E50000.00000004.mdmp","description_v2":["\":\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\" (Indicator: \":\\programdata\\microsoft\\windows\\start menu\\programs\\startup\") in Source: 00000000-00004700.00000000.238642.02E50000.00000004.mdmp","00000000-00004700.00000001.240563.02E50000.00000004.mdmp","\":\\Users\\HAPUBWS\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\" (Indicator: \":\\users\\hapubws\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\startup\") in Source: 00000000-00004700.00000000.238642.02E50000.00000004.mdmp","00000000-00004700.00000001.240563.02E50000.00000004.mdmp"],"description_v3":[{"type":"text","value":"%ALLUSERSPROFILE%\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\" (Indicator: \":\\programdata\\microsoft\\windows\\start menu\\programs\\startup\") in Source: 00000000-00004700.00000000.238642.02E50000.00000004.mdmp"},{"type":"linebreak"},{"type":"text","value":"00000000-00004700.00000001.240563.02E50000.00000004.mdmp"},{"type":"linebreak"},{"type":"text","value":"\":\\Users\\HAPUBWS\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\" (Indicator: \":\\users\\hapubws\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\startup\") in Source: 00000000-00004700.00000000.238642.02E50000.00000004.mdmp"},{"type":"linebreak"},{"type":"text","value":"00000000-00004700.00000001.240563.02E50000.00000004.mdmp"}],"origin":"File/Memory","attck_id":"T1547.001","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1547/001","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"General","identifier":"static-205","type":0,"relevance":1,"name":"Contains references to file movement (imports API)","description":"Found MoveFileW in import section (Source: encrypt.exe)","description_v2":["Found MoveFileW in import section (Source: encrypt.exe)"],"description_v3":[{"type":"text","value":"Found MoveFileW in import section (Source: encrypt.exe)"}],"origin":"Static Parser","attck_id":"T1083","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1083","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"General","identifier":"string-120","type":2,"relevance":1,"name":"Contains registry location strings","description":"\"th=C:\\ProgramData\\Oracle\\Java\\javapath;C:\\WINDOWS\\system32;C:\\WINDOWS;C:\\WINDOWS\\System32\\Wbem;C:\\WINDOWS\\System32\\WindowsPowerShell\\v1.0\\\\REGISTRY\\MACHINE\\SOFTWARE\\Classes\\WOW6432Node\\CLSID\\{A47979D2-C419-11D9\" in Source: 00000000-00004700.00000000.238642.02E50000.00000004.mdmp","description_v2":["\"th=C:\\ProgramData\\Oracle\\Java\\javapath;C:\\WINDOWS\\system32;C:\\WINDOWS;C:\\WINDOWS\\System32\\Wbem;C:\\WINDOWS\\System32\\WindowsPowerShell\\v1.0\\\\REGISTRY\\MACHINE\\SOFTWARE\\Classes\\WOW6432Node\\CLSID\\{A47979D2-C419-11D9\" in Source: 00000000-00004700.00000000.238642.02E50000.00000004.mdmp"],"description_v3":[{"type":"text","value":"\"th=%ALLUSERSPROFILE%\\Oracle\\Java\\javapath;C:\\WINDOWS\\system32;C:\\WINDOWS;C:\\WINDOWS\\System32\\Wbem;C:\\WINDOWS\\System32\\WindowsPowerShell\\v1.0\\\\REGISTRY\\MACHINE\\SOFTWARE\\Classes\\WOW6432Node\\CLSID\\{A47979D2-C419-11D9\" in Source: 00000000-00004700.00000000.238642.02E50000.00000004.mdmp"}],"origin":"File/Memory","attck_id":"T1012","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1012","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"General","identifier":"mutant-0","type":4,"relevance":3,"name":"Creates mutants","description":"$2f","description_v2":["\"\\Sessions\\1\\BaseNamedObjects\\RstrMgr-3887CAB8-533F-4C85-B0DC-3E5639F8D511-Session0004\"","\"RstrMgr3887CAB8-533F-4C85-B0DC-3E5639F8D511\"","\"Local\\RstrMgr3887CAB8-533F-4C85-B0DC-3E5639F8D511\"","\"RstrMgr-3887CAB8-533F-4C85-B0DC-3E5639F8D511-Session0000\"","\"Local\\SM0:4700:168:WilStaging_02\"","\"RstrMgr-3887CAB8-533F-4C85-B0DC-3E5639F8D511-Session0002\"","\"SM0:4700:64:WilError_01\"","\"RstrMgr-3887CAB8-533F-4C85-B0DC-3E5639F8D511-Session0001\"","\"RstrMgr-3887CAB8-533F-4C85-B0DC-3E5639F8D511-Session0007\"","\"Local\\SM0:4700:64:WilError_01\"","\"RstrMgr-3887CAB8-533F-4C85-B0DC-3E5639F8D511-Session0003\"","\"\\Sessions\\1\\BaseNamedObjects\\RstrMgr3887CAB8-533F-4C85-B0DC-3E5639F8D511\"","\"\\Sessions\\1\\BaseNamedObjects\\RstrMgr-3887CAB8-533F-4C85-B0DC-3E5639F8D511-Session0000\"","\"\\Sessions\\1\\BaseNamedObjects\\Local\\SM0:4700:168:WilStaging_02\"","\"\\Sessions\\1\\BaseNamedObjects\\Local\\SM0:4700:64:WilError_01\"","\"\\Sessions\\1\\BaseNamedObjects\\Local\\RstrMgr3887CAB8-533F-4C85-B0DC-3E5639F8D511\"","\"\\Sessions\\1\\BaseNamedObjects\\RstrMgr-3887CAB8-533F-4C85-B0DC-3E5639F8D511-Session0001\"","\"\\Sessions\\1\\BaseNamedObjects\\RstrMgr-3887CAB8-533F-4C85-B0DC-3E5639F8D511-Session0003\"","\"\\Sessions\\1\\BaseNamedObjects\\RstrMgr-3887CAB8-533F-4C85-B0DC-3E5639F8D511-Session0002\"","\"\\Sessions\\1\\BaseNamedObjects\\RstrMgr-3887CAB8-533F-4C85-B0DC-3E5639F8D511-Session0007\"","\"\\Sessions\\1\\BaseNamedObjects\\SM0:4700:64:WilError_01\""],"description_v3":[{"type":"text","value":"\"\\Sessions\\1\\BaseNamedObjects\\RstrMgr-3887CAB8-533F-4C85-B0DC-3E5639F8D511-Session0004\""},{"type":"linebreak"},{"type":"text","value":"\"RstrMgr3887CAB8-533F-4C85-B0DC-3E5639F8D511\""},{"type":"linebreak"},{"type":"text","value":"\"Local\\RstrMgr3887CAB8-533F-4C85-B0DC-3E5639F8D511\""},{"type":"linebreak"},{"type":"text","value":"\"RstrMgr-3887CAB8-533F-4C85-B0DC-3E5639F8D511-Session0000\""},{"type":"linebreak"},{"type":"text","value":"\"Local\\SM0:4700:168:WilStaging_02\""},{"type":"linebreak"},{"type":"text","value":"\"RstrMgr-3887CAB8-533F-4C85-B0DC-3E5639F8D511-Session0002\""},{"type":"linebreak"},{"type":"text","value":"\"SM0:4700:64:WilError_01\""},{"type":"linebreak"},{"type":"text","value":"\"RstrMgr-3887CAB8-533F-4C85-B0DC-3E5639F8D511-Session0001\""},{"type":"linebreak"},{"type":"text","value":"\"RstrMgr-3887CAB8-533F-4C85-B0DC-3E5639F8D511-Session0007\""},{"type":"linebreak"},{"type":"text","value":"\"Local\\SM0:4700:64:WilError_01\""},{"type":"linebreak"},{"type":"text","value":"\"RstrMgr-3887CAB8-533F-4C85-B0DC-3E5639F8D511-Session0003\""},{"type":"linebreak"},{"type":"text","value":"\"\\Sessions\\1\\BaseNamedObjects\\RstrMgr3887CAB8-533F-4C85-B0DC-3E5639F8D511\""},{"type":"linebreak"},{"type":"text","value":"\"\\Sessions\\1\\BaseNamedObjects\\RstrMgr-3887CAB8-533F-4C85-B0DC-3E5639F8D511-Session0000\""},{"type":"linebreak"},{"type":"text","value":"\"\\Sessions\\1\\BaseNamedObjects\\Local\\SM0:4700:168:WilStaging_02\""},{"type":"linebreak"},{"type":"text","value":"\"\\Sessions\\1\\BaseNamedObjects\\Local\\SM0:4700:64:WilError_01\""},{"type":"linebreak"},{"type":"text","value":"\"\\Sessions\\1\\BaseNamedObjects\\Local\\RstrMgr3887CAB8-533F-4C85-B0DC-3E5639F8D511\""},{"type":"linebreak"},{"type":"text","value":"\"\\Sessions\\1\\BaseNamedObjects\\RstrMgr-3887CAB8-533F-4C85-B0DC-3E5639F8D511-Session0001\""},{"type":"linebreak"},{"type":"text","value":"\"\\Sessions\\1\\BaseNamedObjects\\RstrMgr-3887CAB8-533F-4C85-B0DC-3E5639F8D511-Session0003\""},{"type":"linebreak"},{"type":"text","value":"\"\\Sessions\\1\\BaseNamedObjects\\RstrMgr-3887CAB8-533F-4C85-B0DC-3E5639F8D511-Session0002\""},{"type":"linebreak"},{"type":"text","value":"\"\\Sessions\\1\\BaseNamedObjects\\RstrMgr-3887CAB8-533F-4C85-B0DC-3E5639F8D511-Session0007\""},{"type":"linebreak"},{"type":"text","value":"\"\\Sessions\\1\\BaseNamedObjects\\SM0:4700:64:WilError_01\""}],"origin":"Created Mutant","attck_id":"T1480","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1480","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"General","identifier":"static-154","type":0,"relevance":0,"name":"File contains dynamic base/NX flags","description":"\"encrypt.exe\" has flags like IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE\n IMAGE_DLLCHARACTERISTICS_NX_COMPAT\n IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE","description_v2":["\"encrypt.exe\" has flags like IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE","IMAGE_DLLCHARACTERISTICS_NX_COMPAT","IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE"],"description_v3":[{"type":"text","value":"\"encrypt.exe\" has flags like IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE"},{"type":"linebreak"},{"type":"text","value":"IMAGE_DLLCHARACTERISTICS_NX_COMPAT"},{"type":"linebreak"},{"type":"text","value":"IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE"}],"origin":"Static Parser","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"General","identifier":"string-179","type":2,"relevance":1,"name":"Found string that contains outlook file extensions .ost/.pst","description":"\"\\\\?\\%USERPROFILE%\\Documents\\Outlook Files\\Outlook1.pst\" (Indicator: \".pst\") in Source: 00000000-00004700-00000BC1-2783139498","description_v2":["\"\\\\?\\%USERPROFILE%\\Documents\\Outlook Files\\Outlook1.pst\" (Indicator: \".pst\") in Source: 00000000-00004700-00000BC1-2783139498"],"description_v3":[{"type":"text","value":"\"\\\\?\\%USERPROFILE%\\Documents\\Outlook Files\\Outlook1.pst\" (Indicator: \".pst\") in Source: 00000000-00004700-00000BC1-2783139498"}],"origin":"File/Memory","attck_id":"T1114.001","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1114/001","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"General","identifier":"api-7","type":6,"relevance":1,"name":"Loads modules at runtime","description":"$30","description_v2":["\"encrypt.exe\" loaded module \"API-MS-WIN-CORE-SYNCH-L1-2-0\" at base 77000000","\"encrypt.exe\" loaded module \"API-MS-WIN-CORE-FIBERS-L1-1-1\" at base 77000000","\"encrypt.exe\" loaded module \"API-MS-WIN-CORE-LOCALIZATION-L1-2-1\" at base 77000000","\"encrypt.exe\" loaded module \"KERNEL32\" at base 77260000","\"encrypt.exe\" loaded module \"API-MS-WIN-CORE-FIBERS-L1-1-2\" at base 77000000","\"encrypt.exe\" loaded module \"%WINDIR%\\SYSTEM32\\UXTHEME.DLL\" at base 73d60000","\"encrypt.exe\" loaded module \"SHELL32.DLL\" at base 75be0000","\"encrypt.exe\" loaded module \"%WINDIR%\\SYSTEM32\\WINDOWS.STORAGE.DLL\" at base 755a0000","\"encrypt.exe\" loaded module \"%WINDIR%\\SYSTEM32\\SHELL32.DLL\" at base 75be0000","\"encrypt.exe\" loaded module \"KERNEL32.DLL\" at base 77260000","\"encrypt.exe\" loaded module \"RPCRT4.DLL\" at base 75340000","\"encrypt.exe\" loaded module \"%WINDIR%\\SYSTEM32\\PROPSYS.DLL\" at base 73800000","\"encrypt.exe\" loaded module \"%WINDIR%\\SYSTEM32\\VSSAPI.DLL\" at base 72e60000","\"encrypt.exe\" loaded module \"%WINDIR%\\SYSTEM32\\MSXML3.DLL\" at base 72a70000","\"encrypt.exe\" loaded module \"API-MS-WIN-APPMODEL-RUNTIME-L1-1-2\" at base 77330000","\"encrypt.exe\" loaded module \"%WINDIR%\\SYSTEM32\\BCRYPTPRIMITIVES.DLL\" at base 751a0000","\"encrypt.exe\" loaded module \"CSCAPI.DLL\" at base 73070000","\"encrypt.exe\" loaded module \"NTDLL.DLL\" at base 77890000","\"encrypt.exe\" loaded module \"%WINDIR%\\SYSTEM32\\MSXML3.DLL\" at base 729c0000"],"description_v3":[{"type":"text","value":"\"encrypt.exe\" loaded module \"API-MS-WIN-CORE-SYNCH-L1-2-0\" at base 77000000"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" loaded module \"API-MS-WIN-CORE-FIBERS-L1-1-1\" at base 77000000"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" loaded module \"API-MS-WIN-CORE-LOCALIZATION-L1-2-1\" at base 77000000"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" loaded module \"KERNEL32\" at base 77260000"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" loaded module \"API-MS-WIN-CORE-FIBERS-L1-1-2\" at base 77000000"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" loaded module \"%WINDIR%\\SYSTEM32\\UXTHEME.DLL\" at base 73d60000"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" loaded module \"SHELL32.DLL\" at base 75be0000"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" loaded module \"%WINDIR%\\SYSTEM32\\WINDOWS.STORAGE.DLL\" at base 755a0000"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" loaded module \"%WINDIR%\\SYSTEM32\\SHELL32.DLL\" at base 75be0000"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" loaded module \"KERNEL32.DLL\" at base 77260000"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" loaded module \"RPCRT4.DLL\" at base 75340000"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" loaded module \"%WINDIR%\\SYSTEM32\\PROPSYS.DLL\" at base 73800000"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" loaded module \"%WINDIR%\\SYSTEM32\\VSSAPI.DLL\" at base 72e60000"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" loaded module \"%WINDIR%\\SYSTEM32\\MSXML3.DLL\" at base 72a70000"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" loaded module \"API-MS-WIN-APPMODEL-RUNTIME-L1-1-2\" at base 77330000"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" loaded module \"%WINDIR%\\SYSTEM32\\BCRYPTPRIMITIVES.DLL\" at base 751a0000"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" loaded module \"CSCAPI.DLL\" at base 73070000"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" loaded module \"NTDLL.DLL\" at base 77890000"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" loaded module \"%WINDIR%\\SYSTEM32\\MSXML3.DLL\" at base 729c0000"}],"origin":"API Call","attck_id":"T1129","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1129","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"General","identifier":"module-9","type":10,"relevance":0,"name":"Loads the Bcrypt module DLL","description":"\"encrypt.exe\" loaded module \"%WINDIR%\\SysWOW64\\bcryptprimitives.dll\" at 751A0000\n \"encrypt.exe\" loaded module \"%WINDIR%\\SysWOW64\\bcrypt.dll\" at 73080000","description_v2":["\"encrypt.exe\" loaded module \"%WINDIR%\\SysWOW64\\bcryptprimitives.dll\" at 751A0000","\"encrypt.exe\" loaded module \"%WINDIR%\\SysWOW64\\bcrypt.dll\" at 73080000"],"description_v3":[{"type":"text","value":"\"encrypt.exe\" loaded module \"%WINDIR%\\SysWOW64\\bcryptprimitives.dll\" at 751A0000"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" loaded module \"%WINDIR%\\SysWOW64\\bcrypt.dll\" at 73080000"}],"origin":"Loaded Module","attck_id":"T1027","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1027","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"General","identifier":"module-10","type":10,"relevance":0,"name":"Loads the RPC (Remote Procedure Call) module DLL","description":"\"encrypt.exe\" loaded module \"%WINDIR%\\SysWOW64\\rpcrt4.dll\" at 75340000","description_v2":["\"encrypt.exe\" loaded module \"%WINDIR%\\SysWOW64\\rpcrt4.dll\" at 75340000"],"description_v3":[{"type":"text","value":"\"encrypt.exe\" loaded module \"%WINDIR%\\SysWOW64\\rpcrt4.dll\" at 75340000"}],"origin":"Loaded Module","attck_id":"T1129","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1129","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"General","identifier":"static-157","type":0,"relevance":0,"name":"Matched Compiler/Packer signature (DIE)","description":"\"encrypt.exe\" was detected as \"EP:Microsoft Visual C/C++\" and name: \"Compiler\"\n \"encrypt.exe\" was detected as \"Microsoft Visual C/C++\" and name: \"Compiler\"\n \"encrypt.exe\" was detected as \"Microsoft Linker\" and name: \"Linker\"","description_v2":["\"encrypt.exe\" was detected as \"EP:Microsoft Visual C/C++\" and name: \"Compiler\"","\"encrypt.exe\" was detected as \"Microsoft Visual C/C++\" and name: \"Compiler\"","\"encrypt.exe\" was detected as \"Microsoft Linker\" and name: \"Linker\""],"description_v3":[{"type":"text","value":"\"encrypt.exe\" was detected as \"EP:Microsoft Visual C/C++\" and name: \"Compiler\""},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" was detected as \"Microsoft Visual C/C++\" and name: \"Compiler\""},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" was detected as \"Microsoft Linker\" and name: \"Linker\""}],"origin":"Static Parser","attck_id":"T1027","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1027","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"General","identifier":"registry-72","type":3,"relevance":3,"name":"Overview of unique CLSIDs touched in registry","description":"$31","description_v2":["\"encrypt.exe\" touched \"VSSCoordinator Class\" (Path: \"HKCU\\WOW6432NODE\\CLSID\\{E579AB5F-1CC4-44B4-BED9-DE0991FF0623}\")","\"encrypt.exe\" touched \"PSFactoryBuffer\" (Path: \"HKCU\\CLSID\\{F2C2787D-95AB-40D4-942D-298F5F757874}\\TREATAS\")","\"encrypt.exe\" touched \"Recycle Bin Manager\" (Path: \"HKCU\\WOW6432NODE\\CLSID\\{4A04656D-52AA-49DE-8A09-CB178760E748}\\INSTANCE\")","\"encrypt.exe\" touched \"Copy/Move/Rename/Delete/Link Object\" (Path: \"HKCU\\WOW6432NODE\\CLSID\\{3AD05575-8857-4850-9277-11B85BDB8E09}\\TREATAS\")","\"encrypt.exe\" touched \"Known Folder Manager\" (Path: \"HKLM\\SOFTWARE\\CLASSES\\WOW6432NODE\\CLSID\\{4DF0C730-DF9D-4AE3-9153-AA6B82E9795A}\\INPROCSERVER32\")","\"encrypt.exe\" touched \"Private Profile Object\" (Path: \"HKLM\\SOFTWARE\\CLASSES\\WOW6432NODE\\CLSID\\{75847177-F077-4171-BD2C-A6BB2164FBD0}\\INPROCSERVER32\")","\"encrypt.exe\" touched \"Memory Mapped Cache Mgr\" (Path: \"HKCU\\WOW6432NODE\\CLSID\\{1F486A52-3CB1-48FD-8F50-B8DC300D9F9D}\\TREATAS\")","\"encrypt.exe\" touched \"Recycle Bin\" (Path: \"HKCU\\WOW6432NODE\\CLSID\\{645FF040-5081-101B-9F08-00AA002F954E}\\DEFAULTICON\")","\"encrypt.exe\" touched \"VssModuleKeeper\" (Path: \"HKCU\\WOW6432NODE\\CLSID\\{573BDF38-DF23-427F-ACB8-A67ABD702698}\\TREATAS\")","\"encrypt.exe\" touched \"XML DOM Document 3.0\" (Path: \"HKCU\\WOW6432NODE\\CLSID\\{F5078F32-C551-11D3-89B9-0000F81FE221}\\TREATAS\")"],"description_v3":[{"type":"text","value":"\"encrypt.exe\" touched \"VSSCoordinator Class\" (Path: \"HKCU\\WOW6432NODE\\CLSID\\{E579AB5F-1CC4-44B4-BED9-DE0991FF0623}\")"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" touched \"PSFactoryBuffer\" (Path: \"HKCU\\CLSID\\{F2C2787D-95AB-40D4-942D-298F5F757874}\\TREATAS\")"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" touched \"Recycle Bin Manager\" (Path: \"HKCU\\WOW6432NODE\\CLSID\\{4A04656D-52AA-49DE-8A09-CB178760E748}\\INSTANCE\")"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" touched \"Copy/Move/Rename/Delete/Link Object\" (Path: \"HKCU\\WOW6432NODE\\CLSID\\{3AD05575-8857-4850-9277-11B85BDB8E09}\\TREATAS\")"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" touched \"Known Folder Manager\" (Path: \"HKLM\\SOFTWARE\\CLASSES\\WOW6432NODE\\CLSID\\{4DF0C730-DF9D-4AE3-9153-AA6B82E9795A}\\INPROCSERVER32\")"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" touched \"Private Profile Object\" (Path: \"HKLM\\SOFTWARE\\CLASSES\\WOW6432NODE\\CLSID\\{75847177-F077-4171-BD2C-A6BB2164FBD0}\\INPROCSERVER32\")"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" touched \"Memory Mapped Cache Mgr\" (Path: \"HKCU\\WOW6432NODE\\CLSID\\{1F486A52-3CB1-48FD-8F50-B8DC300D9F9D}\\TREATAS\")"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" touched \"Recycle Bin\" (Path: \"HKCU\\WOW6432NODE\\CLSID\\{645FF040-5081-101B-9F08-00AA002F954E}\\DEFAULTICON\")"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" touched \"VssModuleKeeper\" (Path: \"HKCU\\WOW6432NODE\\CLSID\\{573BDF38-DF23-427F-ACB8-A67ABD702698}\\TREATAS\")"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" touched \"XML DOM Document 3.0\" (Path: \"HKCU\\WOW6432NODE\\CLSID\\{F5078F32-C551-11D3-89B9-0000F81FE221}\\TREATAS\")"}],"origin":"Registry Access","attck_id":"T1546.015","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1546/015","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"General","identifier":"static-146","type":0,"relevance":0,"name":"PE file contains Debug data directory","description":"\"encrypt.exe\" has Debug data directory \"IMAGE_DIRECTORY_ENTRY_DEBUG\"","description_v2":["\"encrypt.exe\" has Debug data directory \"IMAGE_DIRECTORY_ENTRY_DEBUG\""],"description_v3":[{"type":"text","value":"\"encrypt.exe\" has Debug data directory \"IMAGE_DIRECTORY_ENTRY_DEBUG\""}],"origin":"Static Parser","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"General","identifier":"static-80","type":0,"relevance":1,"name":"PE file contains executable sections","description":"\"encrypt.exe\" has an executable section named \".text\"","description_v2":["\"encrypt.exe\" has an executable section named \".text\""],"description_v3":[{"type":"text","value":"\"encrypt.exe\" has an executable section named \".text\""}],"origin":"Static Parser","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"General","identifier":"static-95","type":0,"relevance":0,"name":"PE file contains writable sections","description":"\"encrypt.exe\" has an writable section named \".data\"\n \"encrypt.exe\" has an writable section named \".fptable\"","description_v2":["\"encrypt.exe\" has an writable section named \".data\"","\"encrypt.exe\" has an writable section named \".fptable\""],"description_v3":[{"type":"text","value":"\"encrypt.exe\" has an writable section named \".data\""},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" has an writable section named \".fptable\""}],"origin":"Static Parser","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"General","identifier":"static-96","type":0,"relevance":0,"name":"PE file entrypoint instructions","description":"\"encrypt.exe\" file has an entrypoint instructions - \"call\t0x469eb2,jmp\t0x46937d,jmp\t0x436990,int3\t,int3\t,int3\t,int3\t,int3\t,int3\t,int3\t,int3\t,int3\t,int3\t,int3\t,int3\t,int3\t,int3\t,int3\t,cmp\tcl, 0x40,jae\t0x46953a,cmp\tcl, 0x20,jae\t0x469530,shrd\teax, edx, cl,shr\tedx, cl,ret\t,mov\teax, edx,xor\tedx, edx,and\tcl, 0x1f,shr\teax, cl,ret\t,xor\teax, eax,xor\tedx, edx,ret\t,push\tebp,mov\tebp, esp,or\tdword ptr [0x49b168], 1,sub\tesp, 0x28,mov\tdword ptr [0x49fc0c], 0,push\t0xa,call\tdword ptr [0x4a1198],test\teax, eax,je\t0x469855,\"","description_v2":["\"encrypt.exe\" file has an entrypoint instructions - \"call\t0x469eb2,jmp\t0x46937d,jmp\t0x436990,int3\t,int3\t,int3\t,int3\t,int3\t,int3\t,int3\t,int3\t,int3\t,int3\t,int3\t,int3\t,int3\t,int3\t,int3\t,cmp\tcl, 0x40,jae\t0x46953a,cmp\tcl, 0x20,jae\t0x469530,shrd\teax, edx, cl,shr\tedx, cl,ret\t,mov\teax, edx,xor\tedx, edx,and\tcl, 0x1f,shr\teax, cl,ret\t,xor\teax, eax,xor\tedx, edx,ret\t,push\tebp,mov\tebp, esp,or\tdword ptr [0x49b168], 1,sub\tesp, 0x28,mov\tdword ptr [0x49fc0c], 0,push\t0xa,call\tdword ptr [0x4a1198],test\teax, eax,je\t0x469855,\""],"description_v3":[{"type":"text","value":"\"encrypt.exe\" file has an entrypoint instructions - \"call\t0x469eb2,jmp\t0x46937d,jmp\t0x436990,int3\t,int3\t,int3\t,int3\t,int3\t,int3\t,int3\t,int3\t,int3\t,int3\t,int3\t,int3\t,int3\t,int3\t,int3\t,cmp\tcl, 0x40,jae\t0x46953a,cmp\tcl, 0x20,jae\t0x469530,shrd\teax, edx, cl,shr\tedx, cl,ret\t,mov\teax, edx,xor\tedx, edx,and\tcl, 0x1f,shr\teax, cl,ret\t,xor\teax, eax,xor\tedx, edx,ret\t,push\tebp,mov\tebp, esp,or\tdword ptr [0x49b168], 1,sub\tesp, 0x28,mov\tdword ptr [0x49fc0c], 0,push\t0xa,call\tdword ptr [0x4a1198],test\teax, eax,je\t0x469855,\""}],"origin":"Static Parser","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"General","identifier":"string-8","type":2,"relevance":2,"name":"Possibly checks for the presence of an Antivirus engine","description":"\"sophos\" (Indicator: \"sophos\") in Source: encrypt.exe","description_v2":["\"sophos\" (Indicator: \"sophos\") in Source: encrypt.exe"],"description_v3":[{"type":"text","value":"\"sophos\" (Indicator: \"sophos\") in Source: encrypt.exe"}],"origin":"File/Memory","attck_id":"T1518.001","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1518/001","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"General","identifier":"registry-25","type":3,"relevance":3,"name":"Reads information about supported languages","description":"\"encrypt.exe\" (Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\NLS\\CUSTOMLOCALE\"; Key: \"EMPTY\")\n \"encrypt.exe\" (Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\NLS\\CUSTOMLOCALE\"; Key: \"EN-US\")\n \"encrypt.exe\" (Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\NLS\\EXTENDEDLOCALE\"; Key: \"EN-US\")","description_v2":["\"encrypt.exe\" (Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\NLS\\CUSTOMLOCALE\"; Key: \"EMPTY\")","\"encrypt.exe\" (Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\NLS\\CUSTOMLOCALE\"; Key: \"EN-US\")","\"encrypt.exe\" (Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\NLS\\EXTENDEDLOCALE\"; Key: \"EN-US\")"],"description_v3":[{"type":"text","value":"\"encrypt.exe\" (Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\NLS\\CUSTOMLOCALE\"; Key: \"EMPTY\")"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" (Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\NLS\\CUSTOMLOCALE\"; Key: \"EN-US\")"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" (Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\NLS\\EXTENDEDLOCALE\"; Key: \"EN-US\")"}],"origin":"Registry Access","attck_id":"T1082","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1082","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"General","identifier":"static-153","type":0,"relevance":0,"name":"Uses 32 bit executable PE","description":"\"encrypt.exe\" has flags like IMAGE_FILE_32BIT_MACHINE\n IMAGE_FILE_EXECUTABLE","description_v2":["\"encrypt.exe\" has flags like IMAGE_FILE_32BIT_MACHINE","IMAGE_FILE_EXECUTABLE"],"description_v3":[{"type":"text","value":"\"encrypt.exe\" has flags like IMAGE_FILE_32BIT_MACHINE"},{"type":"linebreak"},{"type":"text","value":"IMAGE_FILE_EXECUTABLE"}],"origin":"Static Parser","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Installation/Persistence","identifier":"string-310","type":2,"relevance":1,"name":"Contains ability to load modules (API string)","description":"Found reference to API \"LoadLibraryA\" (Indicator: \"LoadLibrary\"; File: \"encrypt.exe\")\n Found reference to API \"LoadLibraryExW\" (Indicator: \"LoadLibrary\"; File: \"encrypt.exe\")\n Found reference to API \"LoadLibraryA\" (Indicator: \"LoadLibrary\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")\n Found reference to API \"LoadLibraryExW\" (Indicator: \"LoadLibrary\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","description_v2":["Found reference to API \"LoadLibraryA\" (Indicator: \"LoadLibrary\"; File: \"encrypt.exe\")","Found reference to API \"LoadLibraryExW\" (Indicator: \"LoadLibrary\"; File: \"encrypt.exe\")","Found reference to API \"LoadLibraryA\" (Indicator: \"LoadLibrary\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API \"LoadLibraryExW\" (Indicator: \"LoadLibrary\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"],"description_v3":[{"type":"text","value":"Found reference to API \"LoadLibraryA\" (Indicator: \"LoadLibrary\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"LoadLibraryExW\" (Indicator: \"LoadLibrary\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"LoadLibraryA\" (Indicator: \"LoadLibrary\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"LoadLibraryExW\" (Indicator: \"LoadLibrary\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"}],"origin":"File/Memory","attck_id":"T1106","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1106","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Installation/Persistence","identifier":"api-264","type":6,"relevance":3,"name":"Creates a thread in a self process","description":"\"encrypt.exe\" creates a thread in process \"-1\" (Handle: FFFFFFFFFFFFFFFF)","description_v2":["\"encrypt.exe\" creates a thread in process \"-1\" (Handle: FFFFFFFFFFFFFFFF)"],"description_v3":[{"type":"text","value":"\"encrypt.exe\" creates a thread in process \"-1\" (Handle: FFFFFFFFFFFFFFFF)"}],"origin":"API Call","attck_id":"T1055.003","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1055/003","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Installation/Persistence","identifier":"binary-0","type":8,"relevance":3,"name":"Dropped files","description":"$32","description_v2":["\"cdosys.dll.mui.x2anylock\" has type \"DOS executable (COM) maybe with interrupt 22h start instruction 0xb8d3a311 72165320\"- Location: [C:\\found.000\\dir0002.chk\\amd64_microsoft-windows-cdosys.resources_31bf3856ad364e35_10.0.17134.1_it-it_d276206cf5455c73\\cdosys.dll.mui.x2anylock]- [targetUID: 00000000-00004700]","\"syncres.dll.mui.x2anylock\" has type \"DOS executable (COM) start instruction 0xe9b574ef 38d623cd\"- Location: [C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_lv-lv_804a91c0c5235306\\syncres.dll.mui.x2anylock]- [targetUID: 00000000-00004700]","\"aphostres.dll.mui.x2anylock\" has type \"DOS executable (COM) start instruction 0xeb6f0439 1b331c1d\"- Location: [C:\\found.000\\dir0001.chk\\wow64_microsoft-windows-m..aphostres.resources_31bf3856ad364e35_10.0.17134.1_el-gr_637f00823a10b78d\\aphostres.dll.mui.x2anylock]- [targetUID: 00000000-00004700]","\"source-map.debug.js.x2anylock\" has type \"DOS executable (COM) start instruction 0x8c9c7a73 ee3b2db1\"- [targetUID: 00000000-00004700]","\"SFPATWT.INF.x2anylock\" has type \"DOS executable (COM) start instruction 0x8c456bf6 e5b6f6d2\"- Location: [C:\\$WINDOWS.~BT\\Sources\\SFPATWT.INF.x2anylock]- [targetUID: 00000000-00004700]","\"bootmgr.efi.mui.x2anylock\" has type \"DOS executable (COM) maybe with interrupt 22h start instruction 0x8c2550b3 86c2103e\"- Location: [C:\\found.000\\dir0002.chk\\amd64_microsoft-windows-b..nager-efi.resources_31bf3856ad364e35_10.0.17134.1_ro-ro_ab114d5ca4a18d30\\bootmgr.efi.mui.x2anylock]- [targetUID: 00000000-00004700]","\"index.d.ts.x2anylock\" has type \"DOS executable (COM) start instruction 0x8c49d83e cce89f28\"- Location: [C:\\tempdir\\node_modules\\mongoose\\types\\index.d.ts.x2anylock]- [targetUID: 00000000-00004700]","\"README.md.x2anylock\" has type \"DOS executable (COM) start instruction 0xb8d04aae 6f27a800\"- [targetUID: 00000000-00004700]","\"update.ts.x2anylock\" has type \"DOS executable (COM) start instruction 0xb8e80604 96fabed2\"- Location: [C:\\tempdir\\node_modules\\mongodb\\src\\operations\\update.ts.x2anylock]- [targetUID: 00000000-00004700]","\"README.md.x2anylock\" has type \"DOS executable (COM) start instruction 0xb8b38b88 91fd821e\"- Location: [C:\\tempdir\\node_modules\\ansi-colors\\README.md.x2anylock]- [targetUID: 00000000-00004700]","\"README.md.x2anylock\" has type \"DOS executable (COM) start instruction 0xb8053389 1588d401\"- Location: [C:\\tempdir\\node_modules\\kareem\\README.md.x2anylock]- [targetUID: 00000000-00004700]","\"join.js.x2anylock\" has type \"DOS executable (COM) maybe with interrupt 22h start instruction 0x8c7397a5 b18ae6f8\"- Location: [C:\\tempdir\\node_modules\\bluebird\\js\\release\\join.js.x2anylock]- [targetUID: 00000000-00004700]","\"pack-codec.js.x2anylock\" has type \"DOS executable (COM) start instruction 0xeb152696 bfada70a\"- Location: [C:\\tempdir\\node_modules\\js-git\\lib\\pack-codec.js.x2anylock]- [targetUID: 00000000-00004700]","\"layout.js.x2anylock\" has type \"DOS executable (COM) start instruction 0xb8fc799c d6fa3e4f\"- Location: [C:\\tempdir\\node_modules\\blessed\\lib\\widgets\\layout.js.x2anylock]- [targetUID: 00000000-00004700]","\"internal.js.x2anylock\" has type \"DOS executable (COM) start instruction 0xeb24a73e f90dc799\"- Location: [C:\\tempdir\\node_modules\\iconv-lite\\encodings\\internal.js.x2anylock]- [targetUID: 00000000-00004700]","\"process.js.x2anylock\" has type \"DOS executable (COM) start instruction 0x8c209dac 8427ca67\"- Location: [C:\\tempdir\\node_modules\\karma\\lib\\launchers\\process.js.x2anylock]- [targetUID: 00000000-00004700]","\"eventemitter2.d.ts.x2anylock\" has type \"MS-DOS executable\"- Location: [C:\\tempdir\\node_modules\\@pm2\\js-api\\node_modules\\eventemitter2\\eventemitter2.d.ts.x2anylock]- [targetUID: 00000000-00004700]","\"index.js.x2anylock\" has type \"DOS executable (COM) maybe with interrupt 22h start instruction 0x8ce6d394 b4cee2a1\"- Location: [C:\\tempdir\\node_modules\\content-type\\index.js.x2anylock]- [targetUID: 00000000-00004700]","\"web-outgoing.js.x2anylock\" has type \"DOS executable (COM) start instruction 0xb85ab967 46834b3e\"- Location: [C:\\tempdir\\node_modules\\http-proxy\\lib\\http-proxy\\passes\\web-outgoing.js.x2anylock]- [targetUID: 00000000-00004700]","\"ast.js.x2anylock\" has type \"DOS executable (COM) start instruction 0x8c4981e2 f2cd7604\"- Location: [C:\\tempdir\\node_modules\\esutils\\lib\\ast.js.x2anylock]- [targetUID: 00000000-00004700]","\"node.js.x2anylock\" has type \"DOS executable (COM) start instruction 0xeb3f389b f9ee5fb3\"- Location: [C:\\tempdir\\node_modules\\engine.io\\node_modules\\debug\\src\\node.js.x2anylock]- [targetUID: 00000000-00004700]","\"ws-incoming.js.x2anylock\" has type \"DOS executable (COM) start instruction 0xb84efd65 19b93642\"- Location: [C:\\tempdir\\node_modules\\http-proxy\\lib\\http-proxy\\passes\\ws-incoming.js.x2anylock]- [targetUID: 00000000-00004700]","\"tg.js.x2anylock\" has type \"DOS executable (COM) start instruction 0xeb60e09b 9dd12d1f\"- Location: [C:\\tempdir\\node_modules\\moment\\locale\\tg.js.x2anylock]- [targetUID: 00000000-00004700]","\"es-us.js.x2anylock\" has type \"DOS executable (COM) start instruction 0xeb7b9314 f326b662\"- Location: [C:\\tempdir\\node_modules\\moment\\locale\\es-us.js.x2anylock]- [targetUID: 00000000-00004700]","\"compile.js.x2anylock\" has type \"DOS executable (COM) maybe with interrupt 22h start instruction 0xb8f76dca 8e7d1ace\"- Location: [C:\\tempdir\\node_modules\\degenerator\\dist\\compile.js.x2anylock]- [targetUID: 00000000-00004700]","\"CHANGELOG.md.x2anylock\" has type \"DOS executable (COM) start instruction 0x8c5dcc89 89d2ac49\"- [targetUID: 00000000-00004700]","\"write_concern.js.x2anylock\" has type \"DOS executable (COM) start instruction 0xb840d3c2 35561760\"- Location: [C:\\tempdir\\node_modules\\mongodb\\lib\\write_concern.js.x2anylock]- [targetUID: 00000000-00004700]","\"package.json.x2anylock\" has type \"DOS executable (COM) start instruction 0xb86a67ed b52d8ed5\"- [targetUID: 00000000-00004700]","\"bg.js.x2anylock\" has type \"MS-DOS executable MZ for MS-DOS\"- Location: [C:\\tempdir\\node_modules\\moment\\src\\locale\\bg.js.x2anylock]- [targetUID: 00000000-00004700]","\"index.js.x2anylock\" has type \"DOS executable (COM) start instruction 0xb8a007aa d7818c73\"- [targetUID: 00000000-00004700]","\"series.js.x2anylock\" has type \"DOS executable (COM) start instruction 0xb84cdbf2 ff0640cf\"- Location: [C:\\tempdir\\node_modules\\@pm2\\js-api\\node_modules\\async\\series.js.x2anylock]- [targetUID: 00000000-00004700]","\"uk.js.x2anylock\" has type \"DOS executable (COM) start instruction 0xb8c76963 1fd2f5db\"- Location: [C:\\tempdir\\node_modules\\@pm2\\agent\\node_modules\\dayjs\\esm\\locale\\uk.js.x2anylock]- [targetUID: 00000000-00004700]","\"client.d.ts.x2anylock\" has type \"SoftQuad troff Context intermediate\"- [targetUID: 00000000-00004700]","\"How to decrypt my data.txt\" has type \"ASCII text with very long lines (351)\"- Location: [C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_yo-ng_c2789c671a8ffaad\\How to decrypt my data.txt]- [targetUID: 00000000-00004700]","\"README.md.x2anylock\" has type \"DOS executable (COM) start instruction 0x8c09a2ce 2dd04d0f\"- Location: [C:\\tempdir\\node_modules\\ee-first\\README.md.x2anylock]- [targetUID: 00000000-00004700]","\"wow64_microsoft-windows-m..aphostres.resources_31bf3856ad364e35_10.0.17134.1_fi-fi_02c00a792f1a3e93.manifest.x2anylock\" has type \"DOS executable (COM) start instruction 0xb824939b 7866a175\"- Location: [C:\\found.000\\dir0001.chk\\wow64_microsoft-windows-m..aphostres.resources_31bf3856ad364e35_10.0.17134.1_fi-fi_02c00a792f1a3e93.manifest.x2anylock]- [targetUID: 00000000-00004700]","\"sr.js.x2anylock\" has type \"DOS executable (COM) start instruction 0xb88cfd39 8b2d58dd\"- Location: [C:\\tempdir\\node_modules\\dayjs\\esm\\locale\\sr.js.x2anylock]- [targetUID: 00000000-00004700]","\"amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_gd-gb_4897be7c0d6eef46.manifest.x2anylock\" has type \"DOS executable (COM) maybe with interrupt 22h start instruction 0xb8403dbf 50f259e9\"- Location: [C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_gd-gb_4897be7c0d6eef46.manifest.x2anylock]- [targetUID: 00000000-00004700]","\"wow64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_zh-tw_774f24663cb9f880.manifest.x2anylock\" has type \"DOS executable (COM) start instruction 0xb821ec49 e76dec15\"- Location: [C:\\found.000\\dir0001.chk\\wow64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_zh-tw_774f24663cb9f880.manifest.x2anylock]- [targetUID: 00000000-00004700]","\"timeRange.js.map.x2anylock\" has type \"DOS executable (COM) start instruction 0xb81101dd 97d0dc5e\"- Location: [C:\\tempdir\\node_modules\\pac-resolver\\dist\\timeRange.js.map.x2anylock]- [targetUID: 00000000-00004700]","\"compare.js.x2anylock\" has type \"DOS executable (COM) maybe with interrupt 22h start instruction 0xeb1e3130 16de1f36\"- Location: [C:\\tempdir\\node_modules\\moment\\src\\lib\\moment\\compare.js.x2anylock]- [targetUID: 00000000-00004700]","\"ga.js.x2anylock\" has type \"DOS executable (COM) start instruction 0x8c2fcb11 1627d708\"- Location: [C:\\tempdir\\node_modules\\moment\\dist\\locale\\ga.js.x2anylock]- [targetUID: 00000000-00004700]","\"on_data.js.map.x2anylock\" has type \"DOS executable (COM) start instruction 0xb8824cc8 1cd3a353\"- Location: [C:\\tempdir\\node_modules\\mongodb\\lib\\cmap\\wire_protocol\\on_data.js.map.x2anylock]- [targetUID: 00000000-00004700]","\"tzm-latn.js.x2anylock\" has type \"DOS executable (COM) start instruction 0x8cd52b11 ad37e522\"- Location: [C:\\tempdir\\node_modules\\moment\\locale\\tzm-latn.js.x2anylock]- [targetUID: 00000000-00004700]","\"dispatchRequest.js.x2anylock\" has type \"DOS executable (COM) start instruction 0x8cd8a5cf 44945dca\"- Location: [C:\\tempdir\\node_modules\\axios\\lib\\core\\dispatchRequest.js.x2anylock]- [targetUID: 00000000-00004700]","\"fclone.js.x2anylock\" has type \"DOS executable (COM) start instruction 0xb8206d9b b2717433\"- Location: [C:\\tempdir\\node_modules\\fclone\\dist\\fclone.js.x2anylock]- [targetUID: 00000000-00004700]","\"test.py.x2anylock\" has type \"DOS executable (COM) start instruction 0x8cdc0ed2 ec0bcfe2\"- Location: [C:\\tempdir\\node_modules\\flatted\\python\\test.py.x2anylock]- [targetUID: 00000000-00004700]","\"pt_BR.json.x2anylock\" has type \"DOS executable (COM) start instruction 0xb8737a7d 3632cf43\"- [targetUID: 00000000-00004700]","\"tr.json.x2anylock\" has type \"DOS executable (COM) start instruction 0x8cc8485d c413beec\"- [targetUID: 00000000-00004700]","\"includes.js.x2anylock\" has type \"DOS executable (COM) start instruction 0xeb33414b 645c38cb\"- Location: [C:\\tempdir\\node_modules\\lodash\\includes.js.x2anylock]- [targetUID: 00000000-00004700]","\"tl-ph.js.x2anylock\" has type \"DOS executable (COM) start instruction 0xe9860604 04970760\"- Location: [C:\\tempdir\\node_modules\\moment\\src\\locale\\tl-ph.js.x2anylock]- [targetUID: 00000000-00004700]","\"pa-in.js.x2anylock\" has type \"DOS executable (COM) start instruction 0xeb107c7c 844befc5\"- Location: [C:\\tempdir\\node_modules\\dayjs\\locale\\pa-in.js.x2anylock]- [targetUID: 00000000-00004700]","\"de-ch.js.x2anylock\" has type \"DOS executable (COM) start instruction 0x8c0ebfa1 b6c22196\"- Location: [C:\\tempdir\\node_modules\\dayjs\\esm\\locale\\de-ch.js.x2anylock]- [targetUID: 00000000-00004700]","\"bn.js.x2anylock\" has type \"DOS executable (COM) start instruction 0xeb0954da 38b363d0\"- Location: [C:\\tempdir\\node_modules\\@pm2\\agent\\node_modules\\dayjs\\esm\\locale\\bn.js.x2anylock]- [targetUID: 00000000-00004700]","\"Readme.md.x2anylock\" has type \"DOS executable (COM) start instruction 0xb83e97b6 789a54fc\"- Location: [C:\\tempdir\\node_modules\\pm2-axon\\lib\\configurable\\Readme.md.x2anylock]- [targetUID: 00000000-00004700]","\"zh-hk.js.x2anylock\" has type \"DOS executable (COM) start instruction 0x8c830bdd ae1d15c4\"- Location: [C:\\tempdir\\node_modules\\dayjs\\locale\\zh-hk.js.x2anylock]- [targetUID: 00000000-00004700]","\"pm2-init-amazon.sh.x2anylock\" has type \"DOS executable (COM) start instruction 0xb8012dd2 a7abad1f\"- Location: [C:\\tempdir\\node_modules\\pm2\\lib\\templates\\init-scripts\\pm2-init-amazon.sh.x2anylock]- [targetUID: 00000000-00004700]","\"estimated_document_count.js.x2anylock\" has type \"DOS executable (COM) start instruction 0xeb3ed979 ac25952d\"- Location: [C:\\tempdir\\node_modules\\mongodb\\lib\\operations\\estimated_document_count.js.x2anylock]- [targetUID: 00000000-00004700]","\"index.d.ts.map.x2anylock\" has type \"DOS executable (COM) start instruction 0xeb025253 086521d8\"- Location: [C:\\tempdir\\node_modules\\https-proxy-agent\\dist\\index.d.ts.map.x2anylock]- [targetUID: 00000000-00004700]","\"mn.js.x2anylock\" has type \"DOS executable (COM) start instruction 0xb86af926 fcbdbbb1\"- Location: [C:\\tempdir\\node_modules\\@pm2\\agent\\node_modules\\dayjs\\esm\\locale\\mn.js.x2anylock]- [targetUID: 00000000-00004700]","\"settle.js.x2anylock\" has type \"DOS executable (COM) start instruction 0xb81197eb e10fd925\"- Location: [C:\\tempdir\\node_modules\\bluebird\\js\\release\\settle.js.x2anylock]- [targetUID: 00000000-00004700]","\"mr.js.x2anylock\" has type \"DOS executable (COM) maybe with interrupt 22h start instruction 0xb8252a3b ecde11c5\"- Location: [C:\\tempdir\\node_modules\\dayjs\\esm\\locale\\mr.js.x2anylock]- [targetUID: 00000000-00004700]","\"LICENSE.BSD.x2anylock\" has type \"DOS executable (COM) start instruction 0x8c691a30 d6803259\"- Location: [C:\\tempdir\\node_modules\\esutils\\LICENSE.BSD.x2anylock]- [targetUID: 00000000-00004700]","\"404-13.htm.x2anylock\" has type \"DOS executable (COM) start instruction 0x8c4db14c 40bafd73\"- Location: [C:\\inetpub\\custerr\\en-US\\404-13.htm.x2anylock]- [targetUID: 00000000-00004700]","\"_baseMatchesProperty.js.x2anylock\" has type \"DOS executable (COM) start instruction 0xb80275bf 9fe7b694\"- Location: [C:\\tempdir\\node_modules\\lodash\\_baseMatchesProperty.js.x2anylock]- [targetUID: 00000000-00004700]","\"license.x2anylock\" has type \"DOS executable (COM) start instruction 0xb84c4f3d 61c7d6b6\"- Location: [C:\\tempdir\\node_modules\\locate-path\\license.x2anylock]- [targetUID: 00000000-00004700]","\"package.json.x2anylock\" has type \"DOS executable (COM) start instruction 0xeb168d6d 51eaa933\"- Location: [C:\\tempdir\\node_modules\\path-root\\package.json.x2anylock]- [targetUID: 00000000-00004700]","\"LICENSE.x2anylock\" has type \"DOS executable (COM) start instruction 0xb886ce6e b36f8fdc\"- [targetUID: 00000000-00004700]","\"es.js.x2anylock\" has type \"DOS executable (COM) start instruction 0xeb3ab7c9 9ba85b7a\"- Location: [C:\\tempdir\\node_modules\\@pm2\\agent\\node_modules\\dayjs\\locale\\es.js.x2anylock]- [targetUID: 00000000-00004700]","\"package.json.x2anylock\" has type \"DOS executable (COM) start instruction 0x8c53959f c90b4345\"- Location: [C:\\tempdir\\node_modules\\degenerator\\package.json.x2anylock]- [targetUID: 00000000-00004700]","\"stats.js.map.x2anylock\" has type \"DOS executable (COM) start instruction 0xb8b65555 03de1286\"- Location: [C:\\tempdir\\node_modules\\mongodb\\lib\\operations\\stats.js.map.x2anylock]- [targetUID: 00000000-00004700]","\"package.json.x2anylock\" has type \"DOS executable (COM) start instruction 0x8c614b3e 98c7daaa\"- [targetUID: 00000000-00004700]","\"list_search_indexes_cursor.ts.x2anylock\" has type \"DOS executable (COM) start instruction 0xb8f9395a 522ea849\"- Location: [C:\\tempdir\\node_modules\\mongodb\\src\\cursor\\list_search_indexes_cursor.ts.x2anylock]- [targetUID: 00000000-00004700]","\"adler32.js.x2anylock\" has type \"DOS executable (COM) start instruction 0xb81cad40 89fb633f\"- Location: [C:\\tempdir\\node_modules\\pako\\lib\\zlib\\adler32.js.x2anylock]- [targetUID: 00000000-00004700]","\"utils.d.ts.x2anylock\" has type \"DOS executable (COM) start instruction 0x8c9be0b0 588b4f28\"- [targetUID: 00000000-00004700]","\"rcd-openbsd.tpl.x2anylock\" has type \"DOS executable (COM) start instruction 0xb800b918 2c2f7f33\"- Location: [C:\\tempdir\\node_modules\\pm2\\lib\\templates\\init-scripts\\rcd-openbsd.tpl.x2anylock]- [targetUID: 00000000-00004700]","\"forEach.js.x2anylock\" has type \"DOS executable (COM) start instruction 0xb8dd3394 17dee5b0\"- Location: [C:\\tempdir\\node_modules\\lazy\\test\\forEach.js.x2anylock]- [targetUID: 00000000-00004700]","\"flattenDeep.js.x2anylock\" has type \"DOS executable (COM) start instruction 0x8ccd3b56 8a2ea598\"- Location: [C:\\tempdir\\node_modules\\lodash\\flattenDeep.js.x2anylock]- [targetUID: 00000000-00004700]","\"FUNDING.yml.x2anylock\" has type \"DOS executable (COM) start instruction 0x8ce64e88 42c8d27d\"- Location: [C:\\tempdir\\node_modules\\es-errors\\.github\\FUNDING.yml.x2anylock]- [targetUID: 00000000-00004700]","\"bower.json.x2anylock\" has type \"DOS executable (COM) start instruction 0xb8ebbb86 4bd378ac\"- Location: [C:\\tempdir\\node_modules\\fclone\\bower.json.x2anylock]- [targetUID: 00000000-00004700]","\"isUndefined.js.x2anylock\" has type \"DOS executable (COM) start instruction 0x8c200fbe 2ae38a3f\"- Location: [C:\\tempdir\\node_modules\\lodash\\isUndefined.js.x2anylock]- [targetUID: 00000000-00004700]","\"_asciiWords.js.x2anylock\" has type \"DOS executable (COM) start instruction 0x8c92276f da38ddbe\"- Location: [C:\\tempdir\\node_modules\\lodash\\_asciiWords.js.x2anylock]- [targetUID: 00000000-00004700]","\"mkdirp.x2anylock\" has type \"DOS executable (COM) start instruction 0xeb178808 9c6f0918\"- Location: [C:\\tempdir\\node_modules\\.bin\\mkdirp.x2anylock]- [targetUID: 00000000-00004700]","\"amd64_microsoft-windows-comdlg32.resources_31bf3856ad364e35_10.0.17134.1_fr-fr_72f98d75cc1156cd.manifest.x2anylock\" has type \"DOS executable (COM) start instruction 0xeb72096f 3bdd3dac\"- Location: [C:\\found.000\\dir0002.chk\\amd64_microsoft-windows-comdlg32.resources_31bf3856ad364e35_10.0.17134.1_fr-fr_72f98d75cc1156cd.manifest.x2anylock]- [targetUID: 00000000-00004700]","\"weekdayRange.d.ts.map.x2anylock\" has type \"DOS executable (COM) start instruction 0x8c79aa14 77e107ed\"- Location: [C:\\tempdir\\node_modules\\pac-resolver\\dist\\weekdayRange.d.ts.map.x2anylock]- [targetUID: 00000000-00004700]","\"cleanPositionalOperators.js.x2anylock\" has type \"DOS executable (COM) start instruction 0xb83b09d9 3ac20f0c\"- Location: [C:\\tempdir\\node_modules\\mongoose\\lib\\helpers\\schema\\cleanPositionalOperators.js.x2anylock]- [targetUID: 00000000-00004700]","\"getIterator.js.x2anylock\" has type \"DOS executable (COM) start instruction 0x8ccc58cc ce04de4c\"- Location: [C:\\tempdir\\node_modules\\@pm2\\js-api\\node_modules\\async\\internal\\getIterator.js.x2anylock]- [targetUID: 00000000-00004700]","\"oobe-button-template.html.x2anylock\" has type \"DOS executable (COM) start instruction 0xe997005a c0fcb8ca\"- Location: [C:\\found.000\\dir0003.chk\\oobe-button-template.html.x2anylock]- [targetUID: 00000000-00004700]","\"package.json.x2anylock\" has type \"DOS executable (COM) start instruction 0xb8092e91 eaaeb4b8\"- [targetUID: 00000000-00004700]","\"bower.json.x2anylock\" has type \"DOS executable (COM) start instruction 0x8ccd8b1f e378359b\"- Location: [C:\\tempdir\\node_modules\\@pm2\\js-api\\node_modules\\async\\bower.json.x2anylock]- [targetUID: 00000000-00004700]","\"strLeftBack.js.x2anylock\" has type \"DOS executable (COM) start instruction 0x8cfa736e 825e71b6\"- [targetUID: 00000000-00004700]","\"example.html.x2anylock\" has type \"DOS executable (COM) start instruction 0xb8db759a 1ffae46a\"- Location: [C:\\tempdir\\node_modules\\jsbn\\example.html.x2anylock]- [targetUID: 00000000-00004700]","\"_Set.js.x2anylock\" has type \"DOS executable (COM) start instruction 0xb80c1273 bd5dc435\"- Location: [C:\\tempdir\\node_modules\\lodash\\_Set.js.x2anylock]- [targetUID: 00000000-00004700]","\"chop.js.x2anylock\" has type \"DOS executable (COM) start instruction 0xb8d894f7 76739f66\"- [targetUID: 00000000-00004700]","\"str.js.x2anylock\" has type \"DOS executable (COM) start instruction 0xb821b8b6 50b28ca3\"- Location: [C:\\tempdir\\node_modules\\pm2\\node_modules\\js-yaml\\lib\\type\\str.js.x2anylock]- [targetUID: 00000000-00004700]","\"template.js.x2anylock\" has type \"DOS executable (COM) start instruction 0xb856378f b55569a5\"- Location: [C:\\tempdir\\node_modules\\lodash\\fp\\template.js.x2anylock]- [targetUID: 00000000-00004700]","\"flow.js.x2anylock\" has type \"DOS executable (COM) start instruction 0xb80a1758 b6f06947\"- Location: [C:\\tempdir\\node_modules\\lodash\\fp\\flow.js.x2anylock]- [targetUID: 00000000-00004700]","\"has.js.x2anylock\" has type \"DOS executable (COM) start instruction 0x8cc0fdca a480827c\"- Location: [C:\\tempdir\\node_modules\\lodash\\fp\\has.js.x2anylock]- [targetUID: 00000000-00004700]","\"lte.js.x2anylock\" has type \"DOS executable (COM) start instruction 0x8c3910db cb404f0e\"- Location: [C:\\tempdir\\node_modules\\@pm2\\agent\\node_modules\\semver\\functions\\lte.js.x2anylock]- [targetUID: 00000000-00004700]","\"pm2-runtime.x2anylock\" has type \"DOS executable (COM) start instruction 0xeb419a39 7f1591d2\"- Location: [C:\\tempdir\\node_modules\\pm2\\bin\\pm2-runtime.x2anylock]- [targetUID: 00000000-00004700]","\"allPass.js.x2anylock\" has type \"DOS executable (COM) start instruction 0xeb4f2290 f9ba23eb\"- Location: [C:\\tempdir\\node_modules\\lodash\\fp\\allPass.js.x2anylock]- [targetUID: 00000000-00004700]"],"description_v3":[{"type":"text","value":"\"cdosys.dll.mui.x2anylock\" has type \"DOS executable (COM) maybe with interrupt 22h start instruction 0xb8d3a311 72165320\"- Location: [C:\\found.000\\dir0002.chk\\amd64_microsoft-windows-cdosys.resources_31bf3856ad364e35_10.0.17134.1_it-it_d276206cf5455c73\\cdosys.dll.mui.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"syncres.dll.mui.x2anylock\" has type \"DOS executable (COM) start instruction 0xe9b574ef 38d623cd\"- Location: [C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_lv-lv_804a91c0c5235306\\syncres.dll.mui.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"aphostres.dll.mui.x2anylock\" has type \"DOS executable (COM) start instruction 0xeb6f0439 1b331c1d\"- Location: [C:\\found.000\\dir0001.chk\\wow64_microsoft-windows-m..aphostres.resources_31bf3856ad364e35_10.0.17134.1_el-gr_637f00823a10b78d\\aphostres.dll.mui.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"source-map.debug.js.x2anylock\" has type \"DOS executable (COM) start instruction 0x8c9c7a73 ee3b2db1\"- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"SFPATWT.INF.x2anylock\" has type \"DOS executable (COM) start instruction 0x8c456bf6 e5b6f6d2\"- Location: [C:\\$WINDOWS.~BT\\Sources\\SFPATWT.INF.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"bootmgr.efi.mui.x2anylock\" has type \"DOS executable (COM) maybe with interrupt 22h start instruction 0x8c2550b3 86c2103e\"- Location: [C:\\found.000\\dir0002.chk\\amd64_microsoft-windows-b..nager-efi.resources_31bf3856ad364e35_10.0.17134.1_ro-ro_ab114d5ca4a18d30\\bootmgr.efi.mui.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"index.d.ts.x2anylock\" has type \"DOS executable (COM) start instruction 0x8c49d83e cce89f28\"- Location: [C:\\tempdir\\node_modules\\mongoose\\types\\index.d.ts.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"README.md.x2anylock\" has type \"DOS executable (COM) start instruction 0xb8d04aae 6f27a800\"- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"update.ts.x2anylock\" has type \"DOS executable (COM) start instruction 0xb8e80604 96fabed2\"- Location: [C:\\tempdir\\node_modules\\mongodb\\src\\operations\\update.ts.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"README.md.x2anylock\" has type \"DOS executable (COM) start instruction 0xb8b38b88 91fd821e\"- Location: [C:\\tempdir\\node_modules\\ansi-colors\\README.md.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"README.md.x2anylock\" has type \"DOS executable (COM) start instruction 0xb8053389 1588d401\"- Location: [C:\\tempdir\\node_modules\\kareem\\README.md.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"join.js.x2anylock\" has type \"DOS executable (COM) maybe with interrupt 22h start instruction 0x8c7397a5 b18ae6f8\"- Location: [C:\\tempdir\\node_modules\\bluebird\\js\\release\\join.js.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"pack-codec.js.x2anylock\" has type \"DOS executable (COM) start instruction 0xeb152696 bfada70a\"- Location: [C:\\tempdir\\node_modules\\js-git\\lib\\pack-codec.js.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"layout.js.x2anylock\" has type \"DOS executable (COM) start instruction 0xb8fc799c d6fa3e4f\"- Location: [C:\\tempdir\\node_modules\\blessed\\lib\\widgets\\layout.js.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"internal.js.x2anylock\" has type \"DOS executable (COM) start instruction 0xeb24a73e f90dc799\"- Location: [C:\\tempdir\\node_modules\\iconv-lite\\encodings\\internal.js.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"process.js.x2anylock\" has type \"DOS executable (COM) start instruction 0x8c209dac 8427ca67\"- Location: [C:\\tempdir\\node_modules\\karma\\lib\\launchers\\process.js.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"eventemitter2.d.ts.x2anylock\" has type \"MS-DOS executable\"- Location: [C:\\tempdir\\node_modules\\@pm2\\js-api\\node_modules\\eventemitter2\\eventemitter2.d.ts.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"index.js.x2anylock\" has type \"DOS executable (COM) maybe with interrupt 22h start instruction 0x8ce6d394 b4cee2a1\"- Location: [C:\\tempdir\\node_modules\\content-type\\index.js.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"web-outgoing.js.x2anylock\" has type \"DOS executable (COM) start instruction 0xb85ab967 46834b3e\"- Location: [C:\\tempdir\\node_modules\\http-proxy\\lib\\http-proxy\\passes\\web-outgoing.js.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"ast.js.x2anylock\" has type \"DOS executable (COM) start instruction 0x8c4981e2 f2cd7604\"- Location: [C:\\tempdir\\node_modules\\esutils\\lib\\ast.js.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"node.js.x2anylock\" has type \"DOS executable (COM) start instruction 0xeb3f389b f9ee5fb3\"- Location: [C:\\tempdir\\node_modules\\engine.io\\node_modules\\debug\\src\\node.js.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"ws-incoming.js.x2anylock\" has type \"DOS executable (COM) start instruction 0xb84efd65 19b93642\"- Location: [C:\\tempdir\\node_modules\\http-proxy\\lib\\http-proxy\\passes\\ws-incoming.js.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"tg.js.x2anylock\" has type \"DOS executable (COM) start instruction 0xeb60e09b 9dd12d1f\"- Location: [C:\\tempdir\\node_modules\\moment\\locale\\tg.js.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"es-us.js.x2anylock\" has type \"DOS executable (COM) start instruction 0xeb7b9314 f326b662\"- Location: [C:\\tempdir\\node_modules\\moment\\locale\\es-us.js.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"compile.js.x2anylock\" has type \"DOS executable (COM) maybe with interrupt 22h start instruction 0xb8f76dca 8e7d1ace\"- Location: [C:\\tempdir\\node_modules\\degenerator\\dist\\compile.js.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"CHANGELOG.md.x2anylock\" has type \"DOS executable (COM) start instruction 0x8c5dcc89 89d2ac49\"- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"write_concern.js.x2anylock\" has type \"DOS executable (COM) start instruction 0xb840d3c2 35561760\"- Location: [C:\\tempdir\\node_modules\\mongodb\\lib\\write_concern.js.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"package.json.x2anylock\" has type \"DOS executable (COM) start instruction 0xb86a67ed b52d8ed5\"- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"bg.js.x2anylock\" has type \"MS-DOS executable MZ for MS-DOS\"- Location: [C:\\tempdir\\node_modules\\moment\\src\\locale\\bg.js.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"index.js.x2anylock\" has type \"DOS executable (COM) start instruction 0xb8a007aa d7818c73\"- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"series.js.x2anylock\" has type \"DOS executable (COM) start instruction 0xb84cdbf2 ff0640cf\"- Location: [C:\\tempdir\\node_modules\\@pm2\\js-api\\node_modules\\async\\series.js.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"uk.js.x2anylock\" has type \"DOS executable (COM) start instruction 0xb8c76963 1fd2f5db\"- Location: [C:\\tempdir\\node_modules\\@pm2\\agent\\node_modules\\dayjs\\esm\\locale\\uk.js.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"client.d.ts.x2anylock\" has type \"SoftQuad troff Context intermediate\"- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"How to decrypt my data.txt\" has type \"ASCII text with very long lines (351)\"- Location: [C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_yo-ng_c2789c671a8ffaad\\How to decrypt my data.txt]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"README.md.x2anylock\" has type \"DOS executable (COM) start instruction 0x8c09a2ce 2dd04d0f\"- Location: [C:\\tempdir\\node_modules\\ee-first\\README.md.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"wow64_microsoft-windows-m..aphostres.resources_31bf3856ad364e35_10.0.17134.1_fi-fi_02c00a792f1a3e93.manifest.x2anylock\" has type \"DOS executable (COM) start instruction 0xb824939b 7866a175\"- Location: [C:\\found.000\\dir0001.chk\\wow64_microsoft-windows-m..aphostres.resources_31bf3856ad364e35_10.0.17134.1_fi-fi_02c00a792f1a3e93.manifest.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"sr.js.x2anylock\" has type \"DOS executable (COM) start instruction 0xb88cfd39 8b2d58dd\"- Location: [C:\\tempdir\\node_modules\\dayjs\\esm\\locale\\sr.js.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_gd-gb_4897be7c0d6eef46.manifest.x2anylock\" has type \"DOS executable (COM) maybe with interrupt 22h start instruction 0xb8403dbf 50f259e9\"- Location: [C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_gd-gb_4897be7c0d6eef46.manifest.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"wow64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_zh-tw_774f24663cb9f880.manifest.x2anylock\" has type \"DOS executable (COM) start instruction 0xb821ec49 e76dec15\"- Location: [C:\\found.000\\dir0001.chk\\wow64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_zh-tw_774f24663cb9f880.manifest.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"timeRange.js.map.x2anylock\" has type \"DOS executable (COM) start instruction 0xb81101dd 97d0dc5e\"- Location: [C:\\tempdir\\node_modules\\pac-resolver\\dist\\timeRange.js.map.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"compare.js.x2anylock\" has type \"DOS executable (COM) maybe with interrupt 22h start instruction 0xeb1e3130 16de1f36\"- Location: [C:\\tempdir\\node_modules\\moment\\src\\lib\\moment\\compare.js.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"ga.js.x2anylock\" has type \"DOS executable (COM) start instruction 0x8c2fcb11 1627d708\"- Location: [C:\\tempdir\\node_modules\\moment\\dist\\locale\\ga.js.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"on_data.js.map.x2anylock\" has type \"DOS executable (COM) start instruction 0xb8824cc8 1cd3a353\"- Location: [C:\\tempdir\\node_modules\\mongodb\\lib\\cmap\\wire_protocol\\on_data.js.map.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"tzm-latn.js.x2anylock\" has type \"DOS executable (COM) start instruction 0x8cd52b11 ad37e522\"- Location: [C:\\tempdir\\node_modules\\moment\\locale\\tzm-latn.js.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"dispatchRequest.js.x2anylock\" has type \"DOS executable (COM) start instruction 0x8cd8a5cf 44945dca\"- Location: [C:\\tempdir\\node_modules\\axios\\lib\\core\\dispatchRequest.js.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"fclone.js.x2anylock\" has type \"DOS executable (COM) start instruction 0xb8206d9b b2717433\"- Location: [C:\\tempdir\\node_modules\\fclone\\dist\\fclone.js.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"test.py.x2anylock\" has type \"DOS executable (COM) start instruction 0x8cdc0ed2 ec0bcfe2\"- Location: [C:\\tempdir\\node_modules\\flatted\\python\\test.py.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"pt_BR.json.x2anylock\" has type \"DOS executable (COM) start instruction 0xb8737a7d 3632cf43\"- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"tr.json.x2anylock\" has type \"DOS executable (COM) start instruction 0x8cc8485d c413beec\"- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"includes.js.x2anylock\" has type \"DOS executable (COM) start instruction 0xeb33414b 645c38cb\"- Location: [C:\\tempdir\\node_modules\\lodash\\includes.js.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"tl-ph.js.x2anylock\" has type \"DOS executable (COM) start instruction 0xe9860604 04970760\"- Location: [C:\\tempdir\\node_modules\\moment\\src\\locale\\tl-ph.js.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"pa-in.js.x2anylock\" has type \"DOS executable (COM) start instruction 0xeb107c7c 844befc5\"- Location: [C:\\tempdir\\node_modules\\dayjs\\locale\\pa-in.js.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"de-ch.js.x2anylock\" has type \"DOS executable (COM) start instruction 0x8c0ebfa1 b6c22196\"- Location: [C:\\tempdir\\node_modules\\dayjs\\esm\\locale\\de-ch.js.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"bn.js.x2anylock\" has type \"DOS executable (COM) start instruction 0xeb0954da 38b363d0\"- Location: [C:\\tempdir\\node_modules\\@pm2\\agent\\node_modules\\dayjs\\esm\\locale\\bn.js.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"Readme.md.x2anylock\" has type \"DOS executable (COM) start instruction 0xb83e97b6 789a54fc\"- Location: [C:\\tempdir\\node_modules\\pm2-axon\\lib\\configurable\\Readme.md.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"zh-hk.js.x2anylock\" has type \"DOS executable (COM) start instruction 0x8c830bdd ae1d15c4\"- Location: [C:\\tempdir\\node_modules\\dayjs\\locale\\zh-hk.js.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"pm2-init-amazon.sh.x2anylock\" has type \"DOS executable (COM) start instruction 0xb8012dd2 a7abad1f\"- Location: [C:\\tempdir\\node_modules\\pm2\\lib\\templates\\init-scripts\\pm2-init-amazon.sh.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"estimated_document_count.js.x2anylock\" has type \"DOS executable (COM) start instruction 0xeb3ed979 ac25952d\"- Location: [C:\\tempdir\\node_modules\\mongodb\\lib\\operations\\estimated_document_count.js.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"index.d.ts.map.x2anylock\" has type \"DOS executable (COM) start instruction 0xeb025253 086521d8\"- Location: [C:\\tempdir\\node_modules\\https-proxy-agent\\dist\\index.d.ts.map.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"mn.js.x2anylock\" has type \"DOS executable (COM) start instruction 0xb86af926 fcbdbbb1\"- Location: [C:\\tempdir\\node_modules\\@pm2\\agent\\node_modules\\dayjs\\esm\\locale\\mn.js.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"settle.js.x2anylock\" has type \"DOS executable (COM) start instruction 0xb81197eb e10fd925\"- Location: [C:\\tempdir\\node_modules\\bluebird\\js\\release\\settle.js.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"mr.js.x2anylock\" has type \"DOS executable (COM) maybe with interrupt 22h start instruction 0xb8252a3b ecde11c5\"- Location: [C:\\tempdir\\node_modules\\dayjs\\esm\\locale\\mr.js.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"LICENSE.BSD.x2anylock\" has type \"DOS executable (COM) start instruction 0x8c691a30 d6803259\"- Location: [C:\\tempdir\\node_modules\\esutils\\LICENSE.BSD.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"404-13.htm.x2anylock\" has type \"DOS executable (COM) start instruction 0x8c4db14c 40bafd73\"- Location: [C:\\inetpub\\custerr\\en-US\\404-13.htm.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"_baseMatchesProperty.js.x2anylock\" has type \"DOS executable (COM) start instruction 0xb80275bf 9fe7b694\"- Location: [C:\\tempdir\\node_modules\\lodash\\_baseMatchesProperty.js.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"license.x2anylock\" has type \"DOS executable (COM) start instruction 0xb84c4f3d 61c7d6b6\"- Location: [C:\\tempdir\\node_modules\\locate-path\\license.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"package.json.x2anylock\" has type \"DOS executable (COM) start instruction 0xeb168d6d 51eaa933\"- Location: [C:\\tempdir\\node_modules\\path-root\\package.json.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"LICENSE.x2anylock\" has type \"DOS executable (COM) start instruction 0xb886ce6e b36f8fdc\"- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"es.js.x2anylock\" has type \"DOS executable (COM) start instruction 0xeb3ab7c9 9ba85b7a\"- Location: [C:\\tempdir\\node_modules\\@pm2\\agent\\node_modules\\dayjs\\locale\\es.js.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"package.json.x2anylock\" has type \"DOS executable (COM) start instruction 0x8c53959f c90b4345\"- Location: [C:\\tempdir\\node_modules\\degenerator\\package.json.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"stats.js.map.x2anylock\" has type \"DOS executable (COM) start instruction 0xb8b65555 03de1286\"- Location: [C:\\tempdir\\node_modules\\mongodb\\lib\\operations\\stats.js.map.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"package.json.x2anylock\" has type \"DOS executable (COM) start instruction 0x8c614b3e 98c7daaa\"- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"list_search_indexes_cursor.ts.x2anylock\" has type \"DOS executable (COM) start instruction 0xb8f9395a 522ea849\"- Location: [C:\\tempdir\\node_modules\\mongodb\\src\\cursor\\list_search_indexes_cursor.ts.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"adler32.js.x2anylock\" has type \"DOS executable (COM) start instruction 0xb81cad40 89fb633f\"- Location: [C:\\tempdir\\node_modules\\pako\\lib\\zlib\\adler32.js.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"utils.d.ts.x2anylock\" has type \"DOS executable (COM) start instruction 0x8c9be0b0 588b4f28\"- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"rcd-openbsd.tpl.x2anylock\" has type \"DOS executable (COM) start instruction 0xb800b918 2c2f7f33\"- Location: [C:\\tempdir\\node_modules\\pm2\\lib\\templates\\init-scripts\\rcd-openbsd.tpl.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"forEach.js.x2anylock\" has type \"DOS executable (COM) start instruction 0xb8dd3394 17dee5b0\"- Location: [C:\\tempdir\\node_modules\\lazy\\test\\forEach.js.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"flattenDeep.js.x2anylock\" has type \"DOS executable (COM) start instruction 0x8ccd3b56 8a2ea598\"- Location: [C:\\tempdir\\node_modules\\lodash\\flattenDeep.js.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"FUNDING.yml.x2anylock\" has type \"DOS executable (COM) start instruction 0x8ce64e88 42c8d27d\"- Location: [C:\\tempdir\\node_modules\\es-errors\\.github\\FUNDING.yml.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"bower.json.x2anylock\" has type \"DOS executable (COM) start instruction 0xb8ebbb86 4bd378ac\"- Location: [C:\\tempdir\\node_modules\\fclone\\bower.json.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"isUndefined.js.x2anylock\" has type \"DOS executable (COM) start instruction 0x8c200fbe 2ae38a3f\"- Location: [C:\\tempdir\\node_modules\\lodash\\isUndefined.js.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"_asciiWords.js.x2anylock\" has type \"DOS executable (COM) start instruction 0x8c92276f da38ddbe\"- Location: [C:\\tempdir\\node_modules\\lodash\\_asciiWords.js.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"mkdirp.x2anylock\" has type \"DOS executable (COM) start instruction 0xeb178808 9c6f0918\"- Location: [C:\\tempdir\\node_modules\\.bin\\mkdirp.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"amd64_microsoft-windows-comdlg32.resources_31bf3856ad364e35_10.0.17134.1_fr-fr_72f98d75cc1156cd.manifest.x2anylock\" has type \"DOS executable (COM) start instruction 0xeb72096f 3bdd3dac\"- Location: [C:\\found.000\\dir0002.chk\\amd64_microsoft-windows-comdlg32.resources_31bf3856ad364e35_10.0.17134.1_fr-fr_72f98d75cc1156cd.manifest.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"weekdayRange.d.ts.map.x2anylock\" has type \"DOS executable (COM) start instruction 0x8c79aa14 77e107ed\"- Location: [C:\\tempdir\\node_modules\\pac-resolver\\dist\\weekdayRange.d.ts.map.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"cleanPositionalOperators.js.x2anylock\" has type \"DOS executable (COM) start instruction 0xb83b09d9 3ac20f0c\"- Location: [C:\\tempdir\\node_modules\\mongoose\\lib\\helpers\\schema\\cleanPositionalOperators.js.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"getIterator.js.x2anylock\" has type \"DOS executable (COM) start instruction 0x8ccc58cc ce04de4c\"- Location: [C:\\tempdir\\node_modules\\@pm2\\js-api\\node_modules\\async\\internal\\getIterator.js.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"oobe-button-template.html.x2anylock\" has type \"DOS executable (COM) start instruction 0xe997005a c0fcb8ca\"- Location: [C:\\found.000\\dir0003.chk\\oobe-button-template.html.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"package.json.x2anylock\" has type \"DOS executable (COM) start instruction 0xb8092e91 eaaeb4b8\"- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"bower.json.x2anylock\" has type \"DOS executable (COM) start instruction 0x8ccd8b1f e378359b\"- Location: [C:\\tempdir\\node_modules\\@pm2\\js-api\\node_modules\\async\\bower.json.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"strLeftBack.js.x2anylock\" has type \"DOS executable (COM) start instruction 0x8cfa736e 825e71b6\"- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"example.html.x2anylock\" has type \"DOS executable (COM) start instruction 0xb8db759a 1ffae46a\"- Location: [C:\\tempdir\\node_modules\\jsbn\\example.html.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"_Set.js.x2anylock\" has type \"DOS executable (COM) start instruction 0xb80c1273 bd5dc435\"- Location: [C:\\tempdir\\node_modules\\lodash\\_Set.js.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"chop.js.x2anylock\" has type \"DOS executable (COM) start instruction 0xb8d894f7 76739f66\"- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"str.js.x2anylock\" has type \"DOS executable (COM) start instruction 0xb821b8b6 50b28ca3\"- Location: [C:\\tempdir\\node_modules\\pm2\\node_modules\\js-yaml\\lib\\type\\str.js.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"template.js.x2anylock\" has type \"DOS executable (COM) start instruction 0xb856378f b55569a5\"- Location: [C:\\tempdir\\node_modules\\lodash\\fp\\template.js.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"flow.js.x2anylock\" has type \"DOS executable (COM) start instruction 0xb80a1758 b6f06947\"- Location: [C:\\tempdir\\node_modules\\lodash\\fp\\flow.js.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"has.js.x2anylock\" has type \"DOS executable (COM) start instruction 0x8cc0fdca a480827c\"- Location: [C:\\tempdir\\node_modules\\lodash\\fp\\has.js.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"lte.js.x2anylock\" has type \"DOS executable (COM) start instruction 0x8c3910db cb404f0e\"- Location: [C:\\tempdir\\node_modules\\@pm2\\agent\\node_modules\\semver\\functions\\lte.js.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"pm2-runtime.x2anylock\" has type \"DOS executable (COM) start instruction 0xeb419a39 7f1591d2\"- Location: [C:\\tempdir\\node_modules\\pm2\\bin\\pm2-runtime.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"allPass.js.x2anylock\" has type \"DOS executable (COM) start instruction 0xeb4f2290 f9ba23eb\"- Location: [C:\\tempdir\\node_modules\\lodash\\fp\\allPass.js.x2anylock]- [targetUID: 00000000-00004700]"}],"origin":"Binary File","attck_id":"T1105","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1105","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Installation/Persistence","identifier":"registry-177","type":3,"relevance":1,"name":"Opens registry keys","description":"$33","description_v2":["\"encrypt.exe\" (Access type: \"OPEN\"; Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\CRYPTOGRAPHY\\PROVIDERS\"; Key: \"\"; Value: \"\")","\"encrypt.exe\" (Access type: \"OPEN\"; Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\CRYPTOGRAPHY\\CONFIGURATION\"; Key: \"\"; Value: \"\")","\"encrypt.exe\" (Access type: \"OPEN\"; Path: \"HKCU\\SOFTWARE\\MICROSOFT\\RESTARTMANAGER\\SESSION0000\"; Key: \"\"; Value: \"\")","\"encrypt.exe\" (Access type: \"OPEN\"; Path: \"HKCU\\WOW6432NODE\\CLSID\\{E579AB5F-1CC4-44B4-BED9-DE0991FF0623}\"; Key: \"\"; Value: \"\")","\"encrypt.exe\" (Access type: \"OPEN\"; Path: \"HKLM\\SOFTWARE\\CLASSES\\WOW6432NODE\\CLSID\\{E579AB5F-1CC4-44B4-BED9-DE0991FF0623}\"; Key: \"\"; Value: \"\")","\"encrypt.exe\" (Access type: \"OPEN\"; Path: \"HKCU\\CLSID\\{E579AB5F-1CC4-44B4-BED9-DE0991FF0623}\"; Key: \"\"; Value: \"\")","\"encrypt.exe\" (Access type: \"OPEN\"; Path: \"HKLM\\SOFTWARE\\CLASSES\\CLSID\\{E579AB5F-1CC4-44B4-BED9-DE0991FF0623}\"; Key: \"\"; Value: \"\")","\"encrypt.exe\" (Access type: \"OPEN\"; Path: \"HKCU\\CLSID\\{E579AB5F-1CC4-44B4-BED9-DE0991FF0623}\\TREATAS\"; Key: \"\"; Value: \"\")","\"encrypt.exe\" (Access type: \"OPEN\"; Path: \"HKLM\\SOFTWARE\\CLASSES\\CLSID\\{E579AB5F-1CC4-44B4-BED9-DE0991FF0623}\\TREATAS\"; Key: \"\"; Value: \"\")","\"encrypt.exe\" (Access type: \"OPEN\"; Path: \"HKCU\\CLSID\\{E579AB5F-1CC4-44B4-BED9-DE0991FF0623}\\INPROCHANDLER32\"; Key: \"\"; Value: \"\")","\"encrypt.exe\" (Access type: \"OPEN\"; Path: \"HKLM\\SOFTWARE\\CLASSES\\CLSID\\{E579AB5F-1CC4-44B4-BED9-DE0991FF0623}\\INPROCHANDLER32\"; Key: \"\"; Value: \"\")","\"encrypt.exe\" (Access type: \"OPEN\"; Path: \"HKCU\\CLSID\\{E579AB5F-1CC4-44B4-BED9-DE0991FF0623}\\INPROCHANDLER\"; Key: \"\"; Value: \"\")","\"encrypt.exe\" (Access type: \"OPEN\"; Path: \"HKLM\\SOFTWARE\\CLASSES\\CLSID\\{E579AB5F-1CC4-44B4-BED9-DE0991FF0623}\\INPROCHANDLER\"; Key: \"\"; Value: \"\")"],"description_v3":[{"type":"text","value":"\"encrypt.exe\" (Access type: \"OPEN\"; Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\CRYPTOGRAPHY\\PROVIDERS\"; Key: \"\"; Value: \"\")"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" (Access type: \"OPEN\"; Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\CRYPTOGRAPHY\\CONFIGURATION\"; Key: \"\"; Value: \"\")"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" (Access type: \"OPEN\"; Path: \"HKCU\\SOFTWARE\\MICROSOFT\\RESTARTMANAGER\\SESSION0000\"; Key: \"\"; Value: \"\")"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" (Access type: \"OPEN\"; Path: \"HKCU\\WOW6432NODE\\CLSID\\{E579AB5F-1CC4-44B4-BED9-DE0991FF0623}\"; Key: \"\"; Value: \"\")"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" (Access type: \"OPEN\"; Path: \"HKLM\\SOFTWARE\\CLASSES\\WOW6432NODE\\CLSID\\{E579AB5F-1CC4-44B4-BED9-DE0991FF0623}\"; Key: \"\"; Value: \"\")"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" (Access type: \"OPEN\"; Path: \"HKCU\\CLSID\\{E579AB5F-1CC4-44B4-BED9-DE0991FF0623}\"; Key: \"\"; Value: \"\")"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" (Access type: \"OPEN\"; Path: \"HKLM\\SOFTWARE\\CLASSES\\CLSID\\{E579AB5F-1CC4-44B4-BED9-DE0991FF0623}\"; Key: \"\"; Value: \"\")"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" (Access type: \"OPEN\"; Path: \"HKCU\\CLSID\\{E579AB5F-1CC4-44B4-BED9-DE0991FF0623}\\TREATAS\"; Key: \"\"; Value: \"\")"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" (Access type: \"OPEN\"; Path: \"HKLM\\SOFTWARE\\CLASSES\\CLSID\\{E579AB5F-1CC4-44B4-BED9-DE0991FF0623}\\TREATAS\"; Key: \"\"; Value: \"\")"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" (Access type: \"OPEN\"; Path: \"HKCU\\CLSID\\{E579AB5F-1CC4-44B4-BED9-DE0991FF0623}\\INPROCHANDLER32\"; Key: \"\"; Value: \"\")"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" (Access type: \"OPEN\"; Path: \"HKLM\\SOFTWARE\\CLASSES\\CLSID\\{E579AB5F-1CC4-44B4-BED9-DE0991FF0623}\\INPROCHANDLER32\"; Key: \"\"; Value: \"\")"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" (Access type: \"OPEN\"; Path: \"HKCU\\CLSID\\{E579AB5F-1CC4-44B4-BED9-DE0991FF0623}\\INPROCHANDLER\"; Key: \"\"; Value: \"\")"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" (Access type: \"OPEN\"; Path: \"HKLM\\SOFTWARE\\CLASSES\\CLSID\\{E579AB5F-1CC4-44B4-BED9-DE0991FF0623}\\INPROCHANDLER\"; Key: \"\"; Value: \"\")"}],"origin":"Registry Access","attck_id":"T1012","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1012","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Installation/Persistence","identifier":"api-235","type":6,"relevance":1,"name":"Queries basic information of the specified process","description":"\"encrypt.exe\" queries basic process information of the \"C:\\encrypt.exe\" (UID: 4700)","description_v2":["\"encrypt.exe\" queries basic process information of the \"C:\\encrypt.exe\" (UID: 4700)"],"description_v3":[{"type":"text","value":"\"encrypt.exe\" queries basic process information of the \"C:\\encrypt.exe\" (UID: 4700)"}],"origin":"API Call","attck_id":"T1057","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1057","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Installation/Persistence","identifier":"registry-172","type":3,"relevance":1,"name":"Queries registry keys","description":"$34","description_v2":["\"encrypt.exe\" (Access type: \"QUERYVAL\"; Path: \"HKCU\\SOFTWARE\\MICROSOFT\\RESTARTMANAGER\\SESSION0000\"; Key: \"SEQUENCE\"; Value: \"\")","\"encrypt.exe\" (Access type: \"QUERYVAL\"; Path: \"HKCU\\SOFTWARE\\MICROSOFT\\RESTARTMANAGER\\SESSION0000\"; Key: \"REGFILES0000\"; Value: \"\")","\"encrypt.exe\" (Access type: \"QUERYVAL\"; Path: \"HKCU\\SOFTWARE\\MICROSOFT\\RESTARTMANAGER\\SESSION0000\"; Key: \"REGFILES0001\"; Value: \"\")","\"encrypt.exe\" (Access type: \"QUERYVAL\"; Path: \"HKCU\\SOFTWARE\\MICROSOFT\\RESTARTMANAGER\\SESSION0000\"; Key: \"REGFILESHASH\"; Value: \"\")","\"encrypt.exe\" (Access type: \"QUERYVAL\"; Path: \"HKCU\\SOFTWARE\\MICROSOFT\\RESTARTMANAGER\\SESSION0000\"; Key: \"REGSVCS0000\"; Value: \"\")","\"encrypt.exe\" (Access type: \"QUERYVAL\"; Path: \"HKCU\\SOFTWARE\\MICROSOFT\\RESTARTMANAGER\\SESSION0000\"; Key: \"REGPROCS0000\"; Value: \"\")","\"encrypt.exe\" (Access type: \"QUERYVAL\"; Path: \"HKCU\\SOFTWARE\\MICROSOFT\\RESTARTMANAGER\\SESSION0000\"; Key: \"JSCOUNT\"; Value: \"\")","\"encrypt.exe\" (Access type: \"QUERYVAL\"; Path: \"HKCU\\SOFTWARE\\MICROSOFT\\RESTARTMANAGER\\SESSION0000\"; Key: \"ESCOUNT\"; Value: \"\")","\"encrypt.exe\" (Access type: \"QUERYVAL\"; Path: \"HKCU\\SOFTWARE\\MICROSOFT\\RESTARTMANAGER\\SESSION0000\"; Key: \"RRCOUNT\"; Value: \"\")"],"description_v3":[{"type":"text","value":"\"encrypt.exe\" (Access type: \"QUERYVAL\"; Path: \"HKCU\\SOFTWARE\\MICROSOFT\\RESTARTMANAGER\\SESSION0000\"; Key: \"SEQUENCE\"; Value: \"\")"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" (Access type: \"QUERYVAL\"; Path: \"HKCU\\SOFTWARE\\MICROSOFT\\RESTARTMANAGER\\SESSION0000\"; Key: \"REGFILES0000\"; Value: \"\")"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" (Access type: \"QUERYVAL\"; Path: \"HKCU\\SOFTWARE\\MICROSOFT\\RESTARTMANAGER\\SESSION0000\"; Key: \"REGFILES0001\"; Value: \"\")"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" (Access type: \"QUERYVAL\"; Path: \"HKCU\\SOFTWARE\\MICROSOFT\\RESTARTMANAGER\\SESSION0000\"; Key: \"REGFILESHASH\"; Value: \"\")"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" (Access type: \"QUERYVAL\"; Path: \"HKCU\\SOFTWARE\\MICROSOFT\\RESTARTMANAGER\\SESSION0000\"; Key: \"REGSVCS0000\"; Value: \"\")"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" (Access type: \"QUERYVAL\"; Path: \"HKCU\\SOFTWARE\\MICROSOFT\\RESTARTMANAGER\\SESSION0000\"; Key: \"REGPROCS0000\"; Value: \"\")"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" (Access type: \"QUERYVAL\"; Path: \"HKCU\\SOFTWARE\\MICROSOFT\\RESTARTMANAGER\\SESSION0000\"; Key: \"JSCOUNT\"; Value: \"\")"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" (Access type: \"QUERYVAL\"; Path: \"HKCU\\SOFTWARE\\MICROSOFT\\RESTARTMANAGER\\SESSION0000\"; Key: \"ESCOUNT\"; Value: \"\")"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" (Access type: \"QUERYVAL\"; Path: \"HKCU\\SOFTWARE\\MICROSOFT\\RESTARTMANAGER\\SESSION0000\"; Key: \"RRCOUNT\"; Value: \"\")"}],"origin":"Registry Access","attck_id":"T1012","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1012","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Installation/Persistence","identifier":"api-243","type":6,"relevance":1,"name":"Reads files","description":"$35","description_v2":["\"encrypt.exe\" reads file \"c:\\$windows.~bt\\sources\\replacementmanifests\\contentdeliverymanager.utilities-replacement.man.x2anylock\"","\"encrypt.exe\" reads file \"c:\\$windows.~bt\\sources\\replacementmanifests\\devicedirectory-devicedirectoryclient-desktop-replacement.man.x2anylock\"","\"encrypt.exe\" reads file \"c:\\$windows.~bt\\sources\\replacementmanifests\\gpbase-replacement.man.x2anylock\"","\"encrypt.exe\" reads file \"c:\\$windows.~bt\\sources\\replacementmanifests\\microsoft-windows-advertisingid-replacement.man.x2anylock\"","\"encrypt.exe\" reads file \"c:\\$windows.~bt\\sources\\replacementmanifests\\microsoft-windows-geolocation-replacement.man.x2anylock\"","\"encrypt.exe\" reads file \"c:\\$windows.~bt\\sources\\replacementmanifests\\microsoft-windows-ie-internetexplorer-repl-2.man.x2anylock\"","\"encrypt.exe\" reads file \"c:\\found.000\\dir0001.chk\\amd64_microsoft-windows-m..ernetmail.resources_31bf3856ad364e35_10.0.17134.1_en-us_cf3c5a6654651d32\\internetmail.dll.mui.x2anylock\"","\"encrypt.exe\" reads file \"c:\\$windows.~bt\\sources\\replacementmanifests\\onecore_speechcommon-rep.man.x2anylock\"","\"encrypt.exe\" reads file \"c:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_af-za_75594e685e635a3e\\syncres.dll.mui.x2anylock\"","\"encrypt.exe\" reads file \"c:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_lb-lu_80b14902c4ca1fab\\syncres.dll.mui.x2anylock\"","\"encrypt.exe\" reads file \"c:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_lt-lt_7f7d233cc5a51216\\syncres.dll.mui.x2anylock\"","\"encrypt.exe\" reads file \"c:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_mi-nz_25bb53edb6274a60\\syncres.dll.mui.x2anylock\"","\"encrypt.exe\" reads file \"c:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_nl-nl_c283c3aeacce7c0a\\syncres.dll.mui.x2anylock\"","\"encrypt.exe\" reads file \"c:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_or-in_6644a8739efdc9d2\\syncres.dll.mui.x2anylock\"","\"encrypt.exe\" reads file \"c:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_pt-br_0b1408d4907a7da2\\syncres.dll.mui.x2anylock\"","\"encrypt.exe\" reads file \"c:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_quz-pe_70168e91317ac39f\\syncres.dll.mui.x2anylock\"","\"encrypt.exe\" reads file \"c:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_rw-rw_536658887449bc9a\\syncres.dll.mui.x2anylock\"","\"encrypt.exe\" reads file \"c:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_sl-si_f0c610696a7f80b7\\syncres.dll.mui.x2anylock\"","\"encrypt.exe\" reads file \"c:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_sr-..-rs_96f678addf9127e8\\syncres.dll.mui.x2anylock\"","\"encrypt.exe\" reads file \"c:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_th-th_939df62c5d394346\\syncres.dll.mui.x2anylock\"","\"encrypt.exe\" reads file \"c:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_lo-la_77462a6ecae7305c.manifest.x2anylock\"","\"encrypt.exe\" reads file \"c:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_uk-ua_3381016751e1ae42\\syncres.dll.mui.x2anylock\"","\"encrypt.exe\" reads file \"c:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_lt-lt_7f7d233cc5a51216.manifest.x2anylock\"","\"encrypt.exe\" reads file \"c:\\found.000\\dir0001.chk\\wow64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_af-za_7fadf8ba92c41c39\\syncres.dll.mui.x2anylock\"","\"encrypt.exe\" reads file \"c:\\found.000\\dir0001.chk\\wow64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_bg-bg_256cbaab83a50975\\syncres.dll.mui.x2anylock\""],"description_v3":[{"type":"text","value":"\"encrypt.exe\" reads file \"c:\\$windows.~bt\\sources\\replacementmanifests\\contentdeliverymanager.utilities-replacement.man.x2anylock\""},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" reads file \"c:\\$windows.~bt\\sources\\replacementmanifests\\devicedirectory-devicedirectoryclient-desktop-replacement.man.x2anylock\""},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" reads file \"c:\\$windows.~bt\\sources\\replacementmanifests\\gpbase-replacement.man.x2anylock\""},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" reads file \"c:\\$windows.~bt\\sources\\replacementmanifests\\microsoft-windows-advertisingid-replacement.man.x2anylock\""},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" reads file \"c:\\$windows.~bt\\sources\\replacementmanifests\\microsoft-windows-geolocation-replacement.man.x2anylock\""},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" reads file \"c:\\$windows.~bt\\sources\\replacementmanifests\\microsoft-windows-ie-internetexplorer-repl-2.man.x2anylock\""},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" reads file \"c:\\found.000\\dir0001.chk\\amd64_microsoft-windows-m..ernetmail.resources_31bf3856ad364e35_10.0.17134.1_en-us_cf3c5a6654651d32\\internetmail.dll.mui.x2anylock\""},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" reads file \"c:\\$windows.~bt\\sources\\replacementmanifests\\onecore_speechcommon-rep.man.x2anylock\""},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" reads file \"c:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_af-za_75594e685e635a3e\\syncres.dll.mui.x2anylock\""},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" reads file \"c:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_lb-lu_80b14902c4ca1fab\\syncres.dll.mui.x2anylock\""},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" reads file \"c:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_lt-lt_7f7d233cc5a51216\\syncres.dll.mui.x2anylock\""},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" reads file \"c:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_mi-nz_25bb53edb6274a60\\syncres.dll.mui.x2anylock\""},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" reads file \"c:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_nl-nl_c283c3aeacce7c0a\\syncres.dll.mui.x2anylock\""},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" reads file \"c:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_or-in_6644a8739efdc9d2\\syncres.dll.mui.x2anylock\""},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" reads file \"c:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_pt-br_0b1408d4907a7da2\\syncres.dll.mui.x2anylock\""},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" reads file \"c:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_quz-pe_70168e91317ac39f\\syncres.dll.mui.x2anylock\""},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" reads file \"c:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_rw-rw_536658887449bc9a\\syncres.dll.mui.x2anylock\""},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" reads file \"c:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_sl-si_f0c610696a7f80b7\\syncres.dll.mui.x2anylock\""},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" reads file \"c:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_sr-..-rs_96f678addf9127e8\\syncres.dll.mui.x2anylock\""},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" reads file \"c:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_th-th_939df62c5d394346\\syncres.dll.mui.x2anylock\""},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" reads file \"c:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_lo-la_77462a6ecae7305c.manifest.x2anylock\""},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" reads file \"c:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_uk-ua_3381016751e1ae42\\syncres.dll.mui.x2anylock\""},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" reads file \"c:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_lt-lt_7f7d233cc5a51216.manifest.x2anylock\""},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" reads file \"c:\\found.000\\dir0001.chk\\wow64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_af-za_7fadf8ba92c41c39\\syncres.dll.mui.x2anylock\""},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" reads file \"c:\\found.000\\dir0001.chk\\wow64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_bg-bg_256cbaab83a50975\\syncres.dll.mui.x2anylock\""}],"origin":"API Call","attck_id":"T1083","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1083","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Installation/Persistence","identifier":"summary-29","type":15,"relevance":1,"name":"Shows ability to use execution guardrails","description":"The analysis shows indicators which can be used as execution guardrails to ensure that payload only executes against intended targets/system. Matched sigs: Contains ability to delay execution by waiting for signal/timeout (API string)\n Matched sigs: Able to identify virtual environment by using user activity (API string)\n Matched sigs: Contains ability to retrieve the time elapsed since the system was started (API string)\n Matched sigs: Attempts to call APIs commonly associated with anti-analysis and evasion techniques\n Matched sigs: The input sample contains a known anti-VM trick\n Matched sigs: Triggers a burst of requests to the same API (API Hammering)","description_v2":["The analysis shows indicators which can be used as execution guardrails to ensure that payload only executes against intended targets/system. Matched sigs: Contains ability to delay execution by waiting for signal/timeout (API string)","Matched sigs: Able to identify virtual environment by using user activity (API string)","Matched sigs: Contains ability to retrieve the time elapsed since the system was started (API string)","Matched sigs: Attempts to call APIs commonly associated with anti-analysis and evasion techniques","Matched sigs: The input sample contains a known anti-VM trick","Matched sigs: Triggers a burst of requests to the same API (API Hammering)"],"description_v3":[{"type":"text","value":"The analysis shows indicators which can be used as execution guardrails to ensure that payload only executes against intended targets/system. Matched sigs: Contains ability to delay execution by waiting for signal/timeout (API string)"},{"type":"linebreak"},{"type":"text","value":"Matched sigs: Able to identify virtual environment by using user activity (API string)"},{"type":"linebreak"},{"type":"text","value":"Matched sigs: Contains ability to retrieve the time elapsed since the system was started (API string)"},{"type":"linebreak"},{"type":"text","value":"Matched sigs: Attempts to call APIs commonly associated with anti-analysis and evasion techniques"},{"type":"linebreak"},{"type":"text","value":"Matched sigs: The input sample contains a known anti-VM trick"},{"type":"linebreak"},{"type":"text","value":"Matched sigs: Triggers a burst of requests to the same API (API Hammering)"}],"origin":"Indicator Combinations","attck_id":"T1480","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1480","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Installation/Persistence","identifier":"api-263","type":6,"relevance":1,"name":"Touches files","description":"$36","description_v2":["\"encrypt.exe\" trying to touch file \"C:\\windows\\temp\\VxOle32.dll\"","\"encrypt.exe\" trying to touch file \"C:\\WINDOWS\\SYSTEM32\\kernelbase.dll\"","\"encrypt.exe\" trying to touch file \"C:\\WINDOWS\\system32\\rpcss.dll\"","\"encrypt.exe\" trying to touch file \"C:\\WINDOWS\\system32\\uxtheme.dll\"","\"encrypt.exe\" trying to touch file \"C:\\WINDOWS\\system32\\shell32.dll\"","\"encrypt.exe\" trying to touch file \"C:\\$RECYCLE.BIN\\S-1-5-21-735145574-3570218355-1207367261-1001\"","\"encrypt.exe\" trying to touch file \"C:\\WINDOWS\\SYSTEM32\\ntmarta.dll\"","\"encrypt.exe\" trying to touch file \"C:\\WINDOWS\\system32\\propsys.dll\"","\"encrypt.exe\" trying to touch file \"C:\\DSROLE.dll\"","\"encrypt.exe\" trying to touch file \"C:\\WINDOWS\\SYSTEM32\\DSROLE.dll\"","\"encrypt.exe\" trying to touch file \"C:\\WINDOWS\\System32\\msxml3.dll\"","\"encrypt.exe\" trying to touch file \"C:\\WINDOWS\\System32\\msxml3r.dll\"","\"encrypt.exe\" trying to touch file \"C:\\$WINDOWS.~BT\\Sources\\replacementmanifests\\contentdeliverymanager.utilities-replacement.man\"","\"encrypt.exe\" trying to touch file \"C:\\$WINDOWS.~BT\\Sources\\replacementmanifests\\contentdeliverymanager.utilities-replacement.man.x2anylock\""],"description_v3":[{"type":"text","value":"\"encrypt.exe\" trying to touch file \"%WINDIR%\\temp\\VxOle32.dll\""},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" trying to touch file \"C:\\WINDOWS\\SYSTEM32\\kernelbase.dll\""},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" trying to touch file \"C:\\WINDOWS\\system32\\rpcss.dll\""},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" trying to touch file \"C:\\WINDOWS\\system32\\uxtheme.dll\""},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" trying to touch file \"C:\\WINDOWS\\system32\\shell32.dll\""},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" trying to touch file \"C:\\$RECYCLE.BIN\\S-1-5-21-735145574-3570218355-1207367261-1001\""},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" trying to touch file \"C:\\WINDOWS\\SYSTEM32\\ntmarta.dll\""},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" trying to touch file \"C:\\WINDOWS\\system32\\propsys.dll\""},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" trying to touch file \"C:\\DSROLE.dll\""},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" trying to touch file \"C:\\WINDOWS\\SYSTEM32\\DSROLE.dll\""},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" trying to touch file \"C:\\WINDOWS\\System32\\msxml3.dll\""},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" trying to touch file \"C:\\WINDOWS\\System32\\msxml3r.dll\""},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" trying to touch file \"C:\\$WINDOWS.~BT\\Sources\\replacementmanifests\\contentdeliverymanager.utilities-replacement.man\""},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" trying to touch file \"C:\\$WINDOWS.~BT\\Sources\\replacementmanifests\\contentdeliverymanager.utilities-replacement.man.x2anylock\""}],"origin":"API Call","attck_id":"T1083","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1083","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Installation/Persistence","identifier":"api-55","type":6,"relevance":7,"name":"Touches files in the Windows directory","description":"\"encrypt.exe\" touched file \"%LOCALAPPDATA%\\Microsoft\\Windows\\Caches\"","description_v2":["\"encrypt.exe\" touched file \"%LOCALAPPDATA%\\Microsoft\\Windows\\Caches\""],"description_v3":[{"type":"text","value":"\"encrypt.exe\" touched file \"%LOCALAPPDATA%\\Microsoft\\Windows\\Caches\""}],"origin":"API Call","attck_id":"T1083","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1083","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Installation/Persistence","identifier":"api-126","type":6,"relevance":3,"name":"Tries to access non-existent files (executable)","description":"\"encrypt.exe\" trying to access non-existent file \"C:\\WINDOWS\\system32\\rpcss.dll\"\n \"encrypt.exe\" trying to access non-existent file \"C:\\DSROLE.dll\"\n \"encrypt.exe\" trying to access non-existent file \"C:\\cscapi.dll\"\n \"encrypt.exe\" trying to access non-existent file \"C:\\AEPIC.dll\"","description_v2":["\"encrypt.exe\" trying to access non-existent file \"C:\\WINDOWS\\system32\\rpcss.dll\"","\"encrypt.exe\" trying to access non-existent file \"C:\\DSROLE.dll\"","\"encrypt.exe\" trying to access non-existent file \"C:\\cscapi.dll\"","\"encrypt.exe\" trying to access non-existent file \"C:\\AEPIC.dll\""],"description_v3":[{"type":"text","value":"\"encrypt.exe\" trying to access non-existent file \"%WINDIR%\\system32\\rpcss.dll\""},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" trying to access non-existent file \"C:\\DSROLE.dll\""},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" trying to access non-existent file \"C:\\cscapi.dll\""},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" trying to access non-existent file \"C:\\AEPIC.dll\""}],"origin":"API Call","attck_id":"T1083","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1083","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Installation/Persistence","identifier":"api-161","type":6,"relevance":3,"name":"Tries to access non-existent files (non-executable)","description":"\"encrypt.exe\" trying to access non-existent file \"M:\\$RECYCLE.BIN\"","description_v2":["\"encrypt.exe\" trying to access non-existent file \"M:\\$RECYCLE.BIN\""],"description_v3":[{"type":"text","value":"\"encrypt.exe\" trying to access non-existent file \"M:\\$RECYCLE.BIN\""}],"origin":"API Call","attck_id":"T1083","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1083","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Installation/Persistence","identifier":"api-242","type":6,"relevance":1,"name":"Writes files","description":"\"encrypt.exe\" writes file \"c:\\$windows.~bt\\sources\\replacementmanifests\\contentdeliverymanager.utilities-replacement.man.x2anylock\"\n \"encrypt.exe\" writes file \"c:\\$windows.~bt\\sources\\replacementmanifests\\how to decrypt my data.txt\"\n \"encrypt.exe\" writes file \"c:\\$windows.~bt\\sources\\replacementmanifests\\devicedirectory-devicedirectoryclient-desktop-replacement.man.x2anylock\"\n \"encrypt.exe\" writes file \"c:\\$windows.~bt\\sources\\replacementmanifests\\gpbase-replacement.man.x2anylock\"\n \"encrypt.exe\" writes file \"c:\\$windows.~bt\\sources\\replacementmanifests\\microsoft-windows-advertisingid-replacement.man.x2anylock\"\n \"encrypt.exe\" writes file \"c:\\$windows.~bt\\sources\\replacementmanifests\\microsoft-windows-geolocation-replacement.man.x2anylock\"\n \"encrypt.exe\" writes file \"c:\\$windows.~bt\\sources\\replacementmanifests\\microsoft-windows-ie-internetexplorer-repl-2.man.x2anylock\"","description_v2":["\"encrypt.exe\" writes file \"c:\\$windows.~bt\\sources\\replacementmanifests\\contentdeliverymanager.utilities-replacement.man.x2anylock\"","\"encrypt.exe\" writes file \"c:\\$windows.~bt\\sources\\replacementmanifests\\how to decrypt my data.txt\"","\"encrypt.exe\" writes file \"c:\\$windows.~bt\\sources\\replacementmanifests\\devicedirectory-devicedirectoryclient-desktop-replacement.man.x2anylock\"","\"encrypt.exe\" writes file \"c:\\$windows.~bt\\sources\\replacementmanifests\\gpbase-replacement.man.x2anylock\"","\"encrypt.exe\" writes file \"c:\\$windows.~bt\\sources\\replacementmanifests\\microsoft-windows-advertisingid-replacement.man.x2anylock\"","\"encrypt.exe\" writes file \"c:\\$windows.~bt\\sources\\replacementmanifests\\microsoft-windows-geolocation-replacement.man.x2anylock\"","\"encrypt.exe\" writes file \"c:\\$windows.~bt\\sources\\replacementmanifests\\microsoft-windows-ie-internetexplorer-repl-2.man.x2anylock\""],"description_v3":[{"type":"text","value":"\"encrypt.exe\" writes file \"c:\\$windows.~bt\\sources\\replacementmanifests\\contentdeliverymanager.utilities-replacement.man.x2anylock\""},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" writes file \"c:\\$windows.~bt\\sources\\replacementmanifests\\how to decrypt my data.txt\""},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" writes file \"c:\\$windows.~bt\\sources\\replacementmanifests\\devicedirectory-devicedirectoryclient-desktop-replacement.man.x2anylock\""},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" writes file \"c:\\$windows.~bt\\sources\\replacementmanifests\\gpbase-replacement.man.x2anylock\""},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" writes file \"c:\\$windows.~bt\\sources\\replacementmanifests\\microsoft-windows-advertisingid-replacement.man.x2anylock\""},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" writes file \"c:\\$windows.~bt\\sources\\replacementmanifests\\microsoft-windows-geolocation-replacement.man.x2anylock\""},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" writes file \"c:\\$windows.~bt\\sources\\replacementmanifests\\microsoft-windows-ie-internetexplorer-repl-2.man.x2anylock\""}],"origin":"API Call","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Installation/Persistence","identifier":"api-159","type":6,"relevance":1,"name":"Writes log files","description":"\"encrypt.exe\" writes a file \"C:\\found.000\\dir0001.chk\\$filehashes$.dat.x2anylock\"\n \"encrypt.exe\" writes a file \"C:\\$WINDOWS.~BT\\Sources\\Panther\\compatscancache.dat.x2anylock\"\n \"encrypt.exe\" writes a file \"C:\\$WINDOWS.~BT\\Sources\\SFCN.DAT.x2anylock\"\n \"encrypt.exe\" writes a file \"C:\\$WINDOWS.~BT\\Sources\\SFLCID.DAT.x2anylock\"","description_v2":["\"encrypt.exe\" writes a file \"C:\\found.000\\dir0001.chk\\$filehashes$.dat.x2anylock\"","\"encrypt.exe\" writes a file \"C:\\$WINDOWS.~BT\\Sources\\Panther\\compatscancache.dat.x2anylock\"","\"encrypt.exe\" writes a file \"C:\\$WINDOWS.~BT\\Sources\\SFCN.DAT.x2anylock\"","\"encrypt.exe\" writes a file \"C:\\$WINDOWS.~BT\\Sources\\SFLCID.DAT.x2anylock\""],"description_v3":[{"type":"text","value":"\"encrypt.exe\" writes a file \"C:\\found.000\\dir0001.chk\\$filehashes$.dat.x2anylock\""},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" writes a file \"C:\\$WINDOWS.~BT\\Sources\\Panther\\compatscancache.dat.x2anylock\""},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" writes a file \"C:\\$WINDOWS.~BT\\Sources\\SFCN.DAT.x2anylock\""},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" writes a file \"C:\\$WINDOWS.~BT\\Sources\\SFLCID.DAT.x2anylock\""}],"origin":"API Call","attck_id":"T1074.001","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1074/001","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Network Related","identifier":"string-176","type":2,"relevance":1,"name":"Contains Tor Onion URL","description":"$37","description_v2":["$38","\"Dark Web Link: http://zfytizegsze6uiswodhbaalyy5rawaytv2nzyzdkt3susbewviqqh7yd.onion/touchus.html\" (Indicator: \".onion\") in Source: 00000000-00004700.00000001.240563.008D1000.00000020.mdmp"],"description_v3":[{"type":"text","value":"$39"},{"type":"linebreak"},{"type":"text","value":"\"Dark Web Link: http://zfytizegsze6uiswodhbaalyy5rawaytv2nzyzdkt3susbewviqqh7yd.onion/touchus.html\" (Indicator: \".onion\") in Source: 00000000-00004700.00000001.240563.008D1000.00000020.mdmp"}],"origin":"File/Memory","attck_id":"T1090.003","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1090/003","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Network Related","identifier":"string-190","type":2,"relevance":3,"name":"Contains ability to query information about shared network resources (API string)","description":"Found reference to API \"NetShareEnum\" (Indicator: \"NetShareEnum\"; File: \"encrypt.exe\")\n Found reference to API \"NetShareEnum\" (Indicator: \"NetShareEnum\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","description_v2":["Found reference to API \"NetShareEnum\" (Indicator: \"NetShareEnum\"; File: \"encrypt.exe\")","Found reference to API \"NetShareEnum\" (Indicator: \"NetShareEnum\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"],"description_v3":[{"type":"text","value":"Found reference to API \"NetShareEnum\" (Indicator: \"NetShareEnum\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"NetShareEnum\" (Indicator: \"NetShareEnum\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"}],"origin":"File/Memory","attck_id":"T1135","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1135","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Network Related","identifier":"string-169","type":2,"relevance":1,"name":"Found mail related domain names","description":"Observed email domain:\"\\?\\c:\\tempdir\\node_modules\\@pm2\\io\\build\\main\\pmx.d.ts\" [Source: 00000000-00004700.00000001.240563.02E50000.00000004.mdmp]\n Observed email domain:\"\\?\\c:\\tempdir\\node_modules\\@pm2\\io\\build\\main\\pmx.js\" [Source: 00000000-00004700.00000001.240563.02E50000.00000004.mdmp]","description_v2":["Observed email domain:\"\\?\\c:\\tempdir\\node_modules\\@pm2\\io\\build\\main\\pmx.d.ts\" [Source: 00000000-00004700.00000001.240563.02E50000.00000004.mdmp]","Observed email domain:\"\\?\\c:\\tempdir\\node_modules\\@pm2\\io\\build\\main\\pmx.js\" [Source: 00000000-00004700.00000001.240563.02E50000.00000004.mdmp]"],"description_v3":[{"type":"text","value":"Observed email domain:\"\\?\\c:\\tempdir\\node_modules\\@pm2\\io\\build\\main\\pmx.d.ts\" [Source: 00000000-00004700.00000001.240563.02E50000.00000004.mdmp]"},{"type":"linebreak"},{"type":"text","value":"Observed email domain:\"\\?\\c:\\tempdir\\node_modules\\@pm2\\io\\build\\main\\pmx.js\" [Source: 00000000-00004700.00000001.240563.02E50000.00000004.mdmp]"}],"origin":"File/Memory","attck_id":"T1071.003","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1071/003","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Network Related","identifier":"string-14","type":2,"relevance":0,"name":"Found potential IP address in binary/memory","description":"\"192.168.0.2\"","description_v2":["\"192.168.0.2\""],"description_v3":[{"type":"text","value":"\"192.168.0.2\""}],"origin":"File/Memory","attck_id":"T1071","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1071","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Network Related","identifier":"string-3","type":2,"relevance":3,"name":"Found potential URL in binary/memory","description":"$3a","description_v2":["Pattern match: \"http://zfytizegsze6uiswodhbaalyy5rawaytv2nzyzdkt3susbewviqqh7yd.onion/touchus.htmlyour\"","Pattern match: \"https://www.torproject.org/\"","Pattern match: \"4.ntw/[ho/n@^r\\9\\y;kc5;@oti=/^v{j\"","Pattern match: \"w9l.k.us/kzetbojyhd6ehq8=row{fmy\"","Pattern match: \"jjo.jysk/fir220f9a9f-a9a6-41b2-8dbe-6ee0b05b8a32\"","Heuristic match: \".dll.ms\"","Heuristic match: \"\\?\\c:\\found.000\\dir0001.chk\\update.cat\"","Heuristic match: \"\\?\\c:\\found.000\\dir0001.chk\\microsoft-onecore-applicationmodel-sync-desktop-fod-package~31bf3856ad364e35~wow64~~10.0.17134.1.cat\"","Heuristic match: \"\\?\\c:\\found.000\\dir0001.chk\\microsoft-onecore-applicationmodel-sync-desktop-fod-package~31bf3856ad364e35~amd64~~10.0.17134.1.cat\"","Heuristic match: \"r0001.cu\"","Pattern match: \"http://www.w3.org/2001/xmlschema-instance\"","Pattern match: \"http://zfytizegsze6uiswodhbaalyy5rawaytv2nzyzdkt3susbewviqqh7yd.onion/touchus.html\"","Pattern match: \"https://qtox.github.io/\"","Heuristic match: \"\\?\\c:\\tempdir\\node_modules\\http-proxy-agent\\node_modules\\ms\\readme.md\"","Heuristic match: \"\\?\\c:\\tempdir\\node_modules\\js-git\\doc\\mixins\\mem-db.md\"","Heuristic match: \"\\?\\c:\\tempdir\\node_modules\\isbinaryfile\\readme.md\"","Heuristic match: \"\\?\\c:\\tempdir\\node_modules\\is-windows\\readme.md\"","Heuristic match: \"\\?\\c:\\tempdir\\node_modules\\is-unc-path\\readme.md\"","Heuristic match: \"\\?\\c:\\tempdir\\node_modules\\js-git\\doc\\lib\\inflate.md\"","Heuristic match: \"\\?\\c:\\tempdir\\node_modules\\is-plain-object\\readme.md\"","Heuristic match: \"\\?\\c:\\tempdir\\node_modules\\js-git\\doc\\mixins\\fs-db.md\"","Heuristic match: \"\\?\\c:\\tempdir\\node_modules\\is-relative\\readme.md\"","Heuristic match: \"\\?\\c:\\tempdir\\node_modules\\js-git\\doc\\lib\\deflate.md\"","Heuristic match: \"\\?\\c:\\tempdir\\node_modules\\js-yaml\\changelog.md\"","Heuristic match: \"\\?\\c:\\tempdir\\node_modules\\jsonfile\\changelog.md\"","Heuristic match: \"\\?\\c:\\tempdir\\node_modules\\karma\\issue_template.md\"","Heuristic match: \"\\?\\c:\\tempdir\\node_modules\\karma\\code_of_conduct.md\"","Heuristic match: \"\\?\\c:\\tempdir\\node_modules\\kind-of\\changelog.md\"","Heuristic match: \"\\?\\c:\\tempdir\\node_modules\\locate-path\\readme.md\"","Heuristic match: \"\\?\\c:\\tempdir\\node_modules\\@pm2\\io\\license.md\"","Heuristic match: \"\\?\\c:\\tempdir\\node_modules\\@pm2\\io\\notes.md\"","Heuristic match: \"\\?\\c:\\tempdir\\node_modules\\@pm2\\io\\readme.md\"","Heuristic match: \"\\?\\c:\\tempdir\\node_modules\\@pm2\\io\\test.sh\"","Heuristic match: \"\\?\\c:\\tempdir\\node_modules\\abbrev\\readme.md\"","Heuristic match: \"\\?\\c:\\tempdir\\node_modules\\jsbn\\changelog.md\""],"description_v3":[{"type":"text","value":"Pattern match: \"http://zfytizegsze6uiswodhbaalyy5rawaytv2nzyzdkt3susbewviqqh7yd.onion/touchus.htmlyour\""},{"type":"linebreak"},{"type":"text","value":"Pattern match: \"https://www.torproject.org/\""},{"type":"linebreak"},{"type":"text","value":"Pattern match: \"4.ntw/[ho/n@^r\\9\\y;kc5;@oti=/^v{j\""},{"type":"linebreak"},{"type":"text","value":"Pattern match: \"w9l.k.us/kzetbojyhd6ehq8=row{fmy\""},{"type":"linebreak"},{"type":"text","value":"Pattern match: \"jjo.jysk/fir220f9a9f-a9a6-41b2-8dbe-6ee0b05b8a32\""},{"type":"linebreak"},{"type":"text","value":"Heuristic match: \".dll.ms\""},{"type":"linebreak"},{"type":"text","value":"Heuristic match: \"\\?\\c:\\found.000\\dir0001.chk\\update.cat\""},{"type":"linebreak"},{"type":"text","value":"Heuristic match: \"\\?\\c:\\found.000\\dir0001.chk\\microsoft-onecore-applicationmodel-sync-desktop-fod-package~31bf3856ad364e35~wow64~~10.0.17134.1.cat\""},{"type":"linebreak"},{"type":"text","value":"Heuristic match: \"\\?\\c:\\found.000\\dir0001.chk\\microsoft-onecore-applicationmodel-sync-desktop-fod-package~31bf3856ad364e35~amd64~~10.0.17134.1.cat\""},{"type":"linebreak"},{"type":"text","value":"Heuristic match: \"r0001.cu\""},{"type":"linebreak"},{"type":"text","value":"Pattern match: \"http://www.w3.org/2001/xmlschema-instance\""},{"type":"linebreak"},{"type":"text","value":"Pattern match: \"http://zfytizegsze6uiswodhbaalyy5rawaytv2nzyzdkt3susbewviqqh7yd.onion/touchus.html\""},{"type":"linebreak"},{"type":"text","value":"Pattern match: \"https://qtox.github.io/\""},{"type":"linebreak"},{"type":"text","value":"Heuristic match: \"\\?\\c:\\tempdir\\node_modules\\http-proxy-agent\\node_modules\\ms\\readme.md\""},{"type":"linebreak"},{"type":"text","value":"Heuristic match: \"\\?\\c:\\tempdir\\node_modules\\js-git\\doc\\mixins\\mem-db.md\""},{"type":"linebreak"},{"type":"text","value":"Heuristic match: \"\\?\\c:\\tempdir\\node_modules\\isbinaryfile\\readme.md\""},{"type":"linebreak"},{"type":"text","value":"Heuristic match: \"\\?\\c:\\tempdir\\node_modules\\is-windows\\readme.md\""},{"type":"linebreak"},{"type":"text","value":"Heuristic match: \"\\?\\c:\\tempdir\\node_modules\\is-unc-path\\readme.md\""},{"type":"linebreak"},{"type":"text","value":"Heuristic match: \"\\?\\c:\\tempdir\\node_modules\\js-git\\doc\\lib\\inflate.md\""},{"type":"linebreak"},{"type":"text","value":"Heuristic match: \"\\?\\c:\\tempdir\\node_modules\\is-plain-object\\readme.md\""},{"type":"linebreak"},{"type":"text","value":"Heuristic match: \"\\?\\c:\\tempdir\\node_modules\\js-git\\doc\\mixins\\fs-db.md\""},{"type":"linebreak"},{"type":"text","value":"Heuristic match: \"\\?\\c:\\tempdir\\node_modules\\is-relative\\readme.md\""},{"type":"linebreak"},{"type":"text","value":"Heuristic match: \"\\?\\c:\\tempdir\\node_modules\\js-git\\doc\\lib\\deflate.md\""},{"type":"linebreak"},{"type":"text","value":"Heuristic match: \"\\?\\c:\\tempdir\\node_modules\\js-yaml\\changelog.md\""},{"type":"linebreak"},{"type":"text","value":"Heuristic match: \"\\?\\c:\\tempdir\\node_modules\\jsonfile\\changelog.md\""},{"type":"linebreak"},{"type":"text","value":"Heuristic match: \"\\?\\c:\\tempdir\\node_modules\\karma\\issue_template.md\""},{"type":"linebreak"},{"type":"text","value":"Heuristic match: \"\\?\\c:\\tempdir\\node_modules\\karma\\code_of_conduct.md\""},{"type":"linebreak"},{"type":"text","value":"Heuristic match: \"\\?\\c:\\tempdir\\node_modules\\kind-of\\changelog.md\""},{"type":"linebreak"},{"type":"text","value":"Heuristic match: \"\\?\\c:\\tempdir\\node_modules\\locate-path\\readme.md\""},{"type":"linebreak"},{"type":"text","value":"Heuristic match: \"\\?\\c:\\tempdir\\node_modules\\@pm2\\io\\license.md\""},{"type":"linebreak"},{"type":"text","value":"Heuristic match: \"\\?\\c:\\tempdir\\node_modules\\@pm2\\io\\notes.md\""},{"type":"linebreak"},{"type":"text","value":"Heuristic match: \"\\?\\c:\\tempdir\\node_modules\\@pm2\\io\\readme.md\""},{"type":"linebreak"},{"type":"text","value":"Heuristic match: \"\\?\\c:\\tempdir\\node_modules\\@pm2\\io\\test.sh\""},{"type":"linebreak"},{"type":"text","value":"Heuristic match: \"\\?\\c:\\tempdir\\node_modules\\abbrev\\readme.md\""},{"type":"linebreak"},{"type":"text","value":"Heuristic match: \"\\?\\c:\\tempdir\\node_modules\\jsbn\\changelog.md\""}],"origin":"File/Memory","attck_id":"T1071","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1071","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Network Related","identifier":"memorydump-2","type":20,"relevance":1,"name":"Found potential URLs in memory dumps","description":"Found URL \"http://www.w3.org/2001/xmlschema-instance\" - Source: \"00000000-00004700.00000000.238642.02E50000.00000004.mdmp\")\n Found URL \"http://zfytizegsze6uiswodhbaalyy5rawaytv2nzyzdkt3susbewviqqh7yd.onion/touchus.htmlyour\" - Source: \"00000000-00004700.00000001.240563.008D1000.00000020.mdmp\")\n Found URL \"https://www.torproject.org/)\" - Source: \"00000000-00004700.00000001.240563.008D1000.00000020.mdmp\")\n Found URL \"https://qtox.github.io/warlock\" - Source: \"00000000-00004700.00000001.240563.008D1000.00000020.mdmp\")","description_v2":["Found URL \"http://www.w3.org/2001/xmlschema-instance\" - Source: \"00000000-00004700.00000000.238642.02E50000.00000004.mdmp\")","Found URL \"http://zfytizegsze6uiswodhbaalyy5rawaytv2nzyzdkt3susbewviqqh7yd.onion/touchus.htmlyour\" - Source: \"00000000-00004700.00000001.240563.008D1000.00000020.mdmp\")","Found URL \"https://www.torproject.org/)\" - Source: \"00000000-00004700.00000001.240563.008D1000.00000020.mdmp\")","Found URL \"https://qtox.github.io/warlock\" - Source: \"00000000-00004700.00000001.240563.008D1000.00000020.mdmp\")"],"description_v3":[{"type":"text","value":"Found URL \"http://www.w3.org/2001/xmlschema-instance\" - Source: \"00000000-00004700.00000000.238642.02E50000.00000004.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found URL \"http://zfytizegsze6uiswodhbaalyy5rawaytv2nzyzdkt3susbewviqqh7yd.onion/touchus.htmlyour\" - Source: \"00000000-00004700.00000001.240563.008D1000.00000020.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found URL \"https://www.torproject.org/)\" - Source: \"00000000-00004700.00000001.240563.008D1000.00000020.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found URL \"https://qtox.github.io/warlock\" - Source: \"00000000-00004700.00000001.240563.008D1000.00000020.mdmp\")"}],"origin":"Memory Dumps","attck_id":"T1071","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1071","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Network Related","identifier":"string-98","type":2,"relevance":1,"name":"Possibly tries to communicate over SSL connection (HTTPS)","description":"Found HTTPS url \"https://www.torproject.org\"\n Found HTTPS url \"https://qtox.github.io\"","description_v2":["Found HTTPS url \"https://www.torproject.org\"","Found HTTPS url \"https://qtox.github.io\""],"description_v3":[{"type":"text","value":"Found HTTPS url \"https://www.torproject.org\""},{"type":"linebreak"},{"type":"text","value":"Found HTTPS url \"https://qtox.github.io\""}],"origin":"File/Memory","attck_id":"T1573","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1573","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Pattern Matching","identifier":"yara-103","type":13,"relevance":5,"name":"YARA signature match - AES encryption","description":"YARA signature for AES encryption matched on process \"00000000-00004700\"\n YARA signature for AES encryption matched on file \"sample.bin\"","description_v2":["YARA signature for AES encryption matched on process \"00000000-00004700\"","YARA signature for AES encryption matched on file \"sample.bin\""],"description_v3":[{"type":"text","value":"YARA signature for AES encryption matched on process \"00000000-00004700\""},{"type":"linebreak"},{"type":"text","value":"YARA signature for AES encryption matched on file \"sample.bin\""}],"origin":"YARA Signature","attck_id":"T1027","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1027","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Pattern Matching","identifier":"yara-104","type":13,"relevance":5,"name":"YARA signature match - RC4 Encryption","description":"YARA signature for RC4 encryption matched on process \"00000000-00004700\"\n YARA signature for RC4 encryption matched on file \"sample.bin\"","description_v2":["YARA signature for RC4 encryption matched on process \"00000000-00004700\"","YARA signature for RC4 encryption matched on file \"sample.bin\""],"description_v3":[{"type":"text","value":"YARA signature for RC4 encryption matched on process \"00000000-00004700\""},{"type":"linebreak"},{"type":"text","value":"YARA signature for RC4 encryption matched on file \"sample.bin\""}],"origin":"YARA Signature","attck_id":"T1027","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1027","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Ransomware/Banking","identifier":"string-111","type":2,"relevance":1,"name":"Contains ability to empty the recycle bin (API string)","description":"Found reference to API \"SHEmptyRecycleBinW\" (Indicator: \"EmptyRecycleBin\"; File: \"encrypt.exe\")\n Found reference to API \"SHEmptyRecycleBinW\" (Indicator: \"EmptyRecycleBin\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","description_v2":["Found reference to API \"SHEmptyRecycleBinW\" (Indicator: \"EmptyRecycleBin\"; File: \"encrypt.exe\")","Found reference to API \"SHEmptyRecycleBinW\" (Indicator: \"EmptyRecycleBin\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"],"description_v3":[{"type":"text","value":"Found reference to API \"SHEmptyRecycleBinW\" (Indicator: \"EmptyRecycleBin\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"SHEmptyRecycleBinW\" (Indicator: \"EmptyRecycleBin\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"}],"origin":"File/Memory","attck_id":"T1070","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1070","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Ransomware/Banking","identifier":"string-553","type":2,"relevance":1,"name":"Contains ability to modify file system redirection (API string)","description":"Found reference to API \"Wow64DisableWow64FsRedirection\" (Indicator: \"Wow64DisableWow64FsRedirection\"; File: \"encrypt.exe\")\n Found reference to API \"Wow64RevertWow64FsRedirection\" (Indicator: \"Wow64RevertWow64FsRedirection\"; File: \"encrypt.exe\")\n Found reference to API \"Wow64DisableWow64FsRedirection\" (Indicator: \"Wow64DisableWow64FsRedirection\"; Source: \"00000000-00004700.00000001.240563.008D1000.00000020.mdmp\")\n Found reference to API \"Wow64RevertWow64FsRedirection\" (Indicator: \"Wow64RevertWow64FsRedirection\"; Source: \"00000000-00004700.00000001.240563.008D1000.00000020.mdmp\")","description_v2":["Found reference to API \"Wow64DisableWow64FsRedirection\" (Indicator: \"Wow64DisableWow64FsRedirection\"; File: \"encrypt.exe\")","Found reference to API \"Wow64RevertWow64FsRedirection\" (Indicator: \"Wow64RevertWow64FsRedirection\"; File: \"encrypt.exe\")","Found reference to API \"Wow64DisableWow64FsRedirection\" (Indicator: \"Wow64DisableWow64FsRedirection\"; Source: \"00000000-00004700.00000001.240563.008D1000.00000020.mdmp\")","Found reference to API \"Wow64RevertWow64FsRedirection\" (Indicator: \"Wow64RevertWow64FsRedirection\"; Source: \"00000000-00004700.00000001.240563.008D1000.00000020.mdmp\")"],"description_v3":[{"type":"text","value":"Found reference to API \"Wow64DisableWow64FsRedirection\" (Indicator: \"Wow64DisableWow64FsRedirection\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"Wow64RevertWow64FsRedirection\" (Indicator: \"Wow64RevertWow64FsRedirection\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"Wow64DisableWow64FsRedirection\" (Indicator: \"Wow64DisableWow64FsRedirection\"; Source: \"00000000-00004700.00000001.240563.008D1000.00000020.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"Wow64RevertWow64FsRedirection\" (Indicator: \"Wow64RevertWow64FsRedirection\"; Source: \"00000000-00004700.00000001.240563.008D1000.00000020.mdmp\")"}],"origin":"File/Memory","attck_id":"T1070","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1070","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Ransomware/Banking","identifier":"static-84","type":0,"relevance":1,"name":"Imports SHEmptyRecycleBin API","description":"Observed import api \"SHEmptyRecycleBin\" which can \"empty the Recycle Bin on the specified drive\" [Source: encrypt.exe]","description_v2":["Observed import api \"SHEmptyRecycleBin\" which can \"empty the Recycle Bin on the specified drive\" [Source: encrypt.exe]"],"description_v3":[{"type":"text","value":"Observed import api \"SHEmptyRecycleBin\" which can \"empty the Recycle Bin on the specified drive\" [Source: encrypt.exe]"}],"origin":"Static Parser","attck_id":"T1070","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1070","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Remote Access Related","identifier":"string-531","type":2,"relevance":1,"name":"Contains references to RPC protocol sequence strings","description":"Found string \"B+ncalrpc:[OLEFBEF6504247F620C2CA873C9E56D]\" (Indicator: \"ncalrpc\"; Source: \"00000000-00004700.00000000.238642.02E50000.00000004.mdmp\")","description_v2":["Found string \"B+ncalrpc:[OLEFBEF6504247F620C2CA873C9E56D]\" (Indicator: \"ncalrpc\"; Source: \"00000000-00004700.00000000.238642.02E50000.00000004.mdmp\")"],"description_v3":[{"type":"text","value":"Found string \"B+ncalrpc:[OLEFBEF6504247F620C2CA873C9E56D]\" (Indicator: \"ncalrpc\"; Source: \"00000000-00004700.00000000.238642.02E50000.00000004.mdmp\")"}],"origin":"File/Memory","attck_id":"T1090","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1090","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Remote Access Related","identifier":"string-130","type":2,"relevance":1,"name":"Observed Microsoft Internet Information Services [IIS] related strings in binary/memory","description":"Found string -\\\\?\\C:\\inetpub\\wwwroot\\*Indicator: \\inetpub\\wwwroot\\\n Found string -\\\\?\\C:\\inetpub\\wwwroot\\aspnet_client\\*Indicator: \\inetpub\\wwwroot\\\n Found string -\\\\?\\C:\\inetpub\\wwwroot\\aspnet_client\\system_web\\*Indicator: \\inetpub\\wwwroot\\\n Found string -\\\\?\\C:\\inetpub\\wwwroot\\aspnet_client\\system_web\\2_0_50727\\*Indicator: \\inetpub\\wwwroot\\\n Found string -\\\\?\\C:\\inetpub\\wwwroot\\aspnet_client\\system_web\\4_0_30319\\*Indicator: \\inetpub\\wwwroot\\","description_v2":["Found string -\\\\?\\C:\\inetpub\\wwwroot\\*Indicator: \\inetpub\\wwwroot\\","Found string -\\\\?\\C:\\inetpub\\wwwroot\\aspnet_client\\*Indicator: \\inetpub\\wwwroot\\","Found string -\\\\?\\C:\\inetpub\\wwwroot\\aspnet_client\\system_web\\*Indicator: \\inetpub\\wwwroot\\","Found string -\\\\?\\C:\\inetpub\\wwwroot\\aspnet_client\\system_web\\2_0_50727\\*Indicator: \\inetpub\\wwwroot\\","Found string -\\\\?\\C:\\inetpub\\wwwroot\\aspnet_client\\system_web\\4_0_30319\\*Indicator: \\inetpub\\wwwroot\\"],"description_v3":[{"type":"text","value":"Found string -\\\\?\\C:\\inetpub\\wwwroot\\*Indicator: \\inetpub\\wwwroot\\"},{"type":"linebreak"},{"type":"text","value":"Found string -\\\\?\\C:\\inetpub\\wwwroot\\aspnet_client\\*Indicator: \\inetpub\\wwwroot\\"},{"type":"linebreak"},{"type":"text","value":"Found string -\\\\?\\C:\\inetpub\\wwwroot\\aspnet_client\\system_web\\*Indicator: \\inetpub\\wwwroot\\"},{"type":"linebreak"},{"type":"text","value":"Found string -\\\\?\\C:\\inetpub\\wwwroot\\aspnet_client\\system_web\\2_0_50727\\*Indicator: \\inetpub\\wwwroot\\"},{"type":"linebreak"},{"type":"text","value":"Found string -\\\\?\\C:\\inetpub\\wwwroot\\aspnet_client\\system_web\\4_0_30319\\*Indicator: \\inetpub\\wwwroot\\"}],"origin":"File/Memory","attck_id":"T1105","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1105","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Spyware/Information Retrieval","identifier":"string-774","type":2,"relevance":1,"name":"Able to access code repositories","description":"$3b","description_v2":["Found string \"\\\\?\\C:\\tempdir\\node_modules\\ast-types\\.github\\*\" (Indicator: \"github\\\"; Source: \"00000000-00004700-00000C2D-16179293260\")","Found string \"\\\\?\\C:\\tempdir\\node_modules\\ast-types\\.github\\workflows\\*\" (Indicator: \"github\\\"; Source: \"00000000-00004700-00000C2D-16180001336\")","Found string \"\\\\?\\C:\\tempdir\\node_modules\\balanced-match\\.github\\*\" (Indicator: \"github\\\"; Source: \"00000000-00004700-00000C2D-17092366146\")","Found string \"\\\\?\\C:\\tempdir\\node_modules\\call-bind\\.github\\*\" (Indicator: \"github\\\"; Source: \"00000000-00004700-00000C2D-17337029156\")","Found string \"\\\\?\\C:\\tempdir\\node_modules\\define-data-property\\.github\\*\" (Indicator: \"github\\\"; Source: \"00000000-00004700-00000C2D-18558335522\")","Found string \"\\\\?\\C:\\tempdir\\node_modules\\ent\\.github\\*\" (Indicator: \"github\\\"; Source: \"00000000-00004700-00000C2D-18781969922\")","Found string \"\\\\?\\C:\\tempdir\\node_modules\\es-define-property\\.github\\*\" (Indicator: \"github\\\"; Source: \"00000000-00004700-00000C2D-18789171952\")","Found string \"\\\\?\\C:\\tempdir\\node_modules\\es-errors\\.github\\*\" (Indicator: \"github\\\"; Source: \"00000000-00004700-00000C2D-18795007100\")","Found string \"\\?\\C:\\tempdir\\node_modules\\ast-types\\.github\\dependabot.yml\" (Indicator: \"github\\\"; Source: \"00000000-00004700.00000001.240563.02E50000.00000004.mdmp\")"],"description_v3":[{"type":"text","value":"Found string \"\\\\?\\C:\\tempdir\\node_modules\\ast-types\\.github\\*\" (Indicator: \"github\\\"; Source: \"00000000-00004700-00000C2D-16179293260\")"},{"type":"linebreak"},{"type":"text","value":"Found string \"\\\\?\\C:\\tempdir\\node_modules\\ast-types\\.github\\workflows\\*\" (Indicator: \"github\\\"; Source: \"00000000-00004700-00000C2D-16180001336\")"},{"type":"linebreak"},{"type":"text","value":"Found string \"\\\\?\\C:\\tempdir\\node_modules\\balanced-match\\.github\\*\" (Indicator: \"github\\\"; Source: \"00000000-00004700-00000C2D-17092366146\")"},{"type":"linebreak"},{"type":"text","value":"Found string \"\\\\?\\C:\\tempdir\\node_modules\\call-bind\\.github\\*\" (Indicator: \"github\\\"; Source: \"00000000-00004700-00000C2D-17337029156\")"},{"type":"linebreak"},{"type":"text","value":"Found string \"\\\\?\\C:\\tempdir\\node_modules\\define-data-property\\.github\\*\" (Indicator: \"github\\\"; Source: \"00000000-00004700-00000C2D-18558335522\")"},{"type":"linebreak"},{"type":"text","value":"Found string \"\\\\?\\C:\\tempdir\\node_modules\\ent\\.github\\*\" (Indicator: \"github\\\"; Source: \"00000000-00004700-00000C2D-18781969922\")"},{"type":"linebreak"},{"type":"text","value":"Found string \"\\\\?\\C:\\tempdir\\node_modules\\es-define-property\\.github\\*\" (Indicator: \"github\\\"; Source: \"00000000-00004700-00000C2D-18789171952\")"},{"type":"linebreak"},{"type":"text","value":"Found string \"\\\\?\\C:\\tempdir\\node_modules\\es-errors\\.github\\*\" (Indicator: \"github\\\"; Source: \"00000000-00004700-00000C2D-18795007100\")"},{"type":"linebreak"},{"type":"text","value":"Found string \"\\?\\C:\\tempdir\\node_modules\\ast-types\\.github\\dependabot.yml\" (Indicator: \"github\\\"; Source: \"00000000-00004700.00000001.240563.02E50000.00000004.mdmp\")"}],"origin":"File/Memory","attck_id":"T1213.003","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1213/003","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Spyware/Information Retrieval","identifier":"string-868","type":2,"relevance":1,"name":"Able to access credential file using Kerberos","description":"Found string \"Kerberos\" (Indicator: \"kerberos\"; Source: \"00000000-00004700.00000000.238642.02E50000.00000004.mdmp\")","description_v2":["Found string \"Kerberos\" (Indicator: \"kerberos\"; Source: \"00000000-00004700.00000000.238642.02E50000.00000004.mdmp\")"],"description_v3":[{"type":"text","value":"Found string \"Kerberos\" (Indicator: \"kerberos\"; Source: \"00000000-00004700.00000000.238642.02E50000.00000004.mdmp\")"}],"origin":"File/Memory","attck_id":"T1558","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1558","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Spyware/Information Retrieval","identifier":"static-88","type":0,"relevance":1,"name":"Able to import GetCommandLine API, which retrieves the command line string for the current process","description":"Observed import api \"GetCommandLineA\" which can \"retrieve the command-line string for the current process\" [Source: encrypt.exe]","description_v2":["Observed import api \"GetCommandLineA\" which can \"retrieve the command-line string for the current process\" [Source: encrypt.exe]"],"description_v3":[{"type":"text","value":"Observed import api \"GetCommandLineA\" which can \"retrieve the command-line string for the current process\" [Source: encrypt.exe]"}],"origin":"Static Parser","attck_id":"T1059.003","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1059/003","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Spyware/Information Retrieval","identifier":"api-102","type":6,"relevance":5,"name":"Calls an API typically used for searching a directory for files","description":"$3c","description_v2":["\"encrypt.exe\" called \"FindFirstFileW\" with parameter \\\\?\\C:\\* (UID: 00000000-00004700)","\"encrypt.exe\" called \"FindNextFileW\" with parameter $Recycle.Bin (UID: 00000000-00004700)","\"encrypt.exe\" called \"FindNextFileW\" with parameter $WINDOWS.~BT (UID: 00000000-00004700)","\"encrypt.exe\" called \"FindFirstFileW\" with parameter \\\\?\\C:\\$WINDOWS.~BT\\* (UID: 00000000-00004700)","\"encrypt.exe\" called \"FindNextFileW\" with parameter .. (UID: 00000000-00004700)","\"encrypt.exe\" called \"FindNextFileW\" with parameter DUDownload (UID: 00000000-00004700)","\"encrypt.exe\" called \"FindFirstFileW\" with parameter \\\\?\\C:\\$WINDOWS.~BT\\DUDownload\\* (UID: 00000000-00004700)","\"encrypt.exe\" called \"FindNextFileW\" with parameter Setup (UID: 00000000-00004700)","\"encrypt.exe\" called \"FindFirstFileW\" with parameter \\\\?\\C:\\$WINDOWS.~BT\\DUDownload\\Setup\\* (UID: 00000000-00004700)","\"encrypt.exe\" called \"FindNextFileW\" with parameter acmigration.dll (UID: 00000000-00004700)","\"encrypt.exe\" called \"FindNextFileW\" with parameter appraiser.sdb (UID: 00000000-00004700)","\"encrypt.exe\" called \"FindNextFileW\" with parameter diagtrack.dll (UID: 00000000-00004700)","\"encrypt.exe\" called \"FindNextFileW\" with parameter mediasetupuimgr.dll (UID: 00000000-00004700)","\"encrypt.exe\" called \"FindNextFileW\" with parameter migcore.dll (UID: 00000000-00004700)","\"encrypt.exe\" called \"FindNextFileW\" with parameter reagent.dll (UID: 00000000-00004700)","\"encrypt.exe\" called \"FindNextFileW\" with parameter replacementmanifests (UID: 00000000-00004700)","\"encrypt.exe\" called \"FindFirstFileW\" with parameter \\\\?\\C:\\$WINDOWS.~BT\\DUDownload\\Setup\\replacementmanifests\\* (UID: 00000000-00004700)","\"encrypt.exe\" called \"FindNextFileW\" with parameter contentdeliverymanager.utilities-replacement.man (UID: 00000000-00004700)","\"encrypt.exe\" called \"FindNextFileW\" with parameter devicedirectory-devicedirectoryclient-desktop-replacement.man (UID: 00000000-00004700)","\"encrypt.exe\" called \"FindNextFileW\" with parameter gpbase-replacement.man (UID: 00000000-00004700)","\"encrypt.exe\" called \"FindNextFileW\" with parameter microsoft-windows-advertisingid-replacement.man (UID: 00000000-00004700)","\"encrypt.exe\" called \"FindNextFileW\" with parameter microsoft-windows-geolocation-replacement.man (UID: 00000000-00004700)"],"description_v3":[{"type":"text","value":"\"encrypt.exe\" called \"FindFirstFileW\" with parameter \\\\?\\C:\\* (UID: 00000000-00004700)"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" called \"FindNextFileW\" with parameter $Recycle.Bin (UID: 00000000-00004700)"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" called \"FindNextFileW\" with parameter $WINDOWS.~BT (UID: 00000000-00004700)"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" called \"FindFirstFileW\" with parameter \\\\?\\C:\\$WINDOWS.~BT\\* (UID: 00000000-00004700)"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" called \"FindNextFileW\" with parameter .. (UID: 00000000-00004700)"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" called \"FindNextFileW\" with parameter DUDownload (UID: 00000000-00004700)"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" called \"FindFirstFileW\" with parameter \\\\?\\C:\\$WINDOWS.~BT\\DUDownload\\* (UID: 00000000-00004700)"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" called \"FindNextFileW\" with parameter Setup (UID: 00000000-00004700)"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" called \"FindFirstFileW\" with parameter \\\\?\\C:\\$WINDOWS.~BT\\DUDownload\\Setup\\* (UID: 00000000-00004700)"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" called \"FindNextFileW\" with parameter acmigration.dll (UID: 00000000-00004700)"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" called \"FindNextFileW\" with parameter appraiser.sdb (UID: 00000000-00004700)"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" called \"FindNextFileW\" with parameter diagtrack.dll (UID: 00000000-00004700)"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" called \"FindNextFileW\" with parameter mediasetupuimgr.dll (UID: 00000000-00004700)"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" called \"FindNextFileW\" with parameter migcore.dll (UID: 00000000-00004700)"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" called \"FindNextFileW\" with parameter reagent.dll (UID: 00000000-00004700)"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" called \"FindNextFileW\" with parameter replacementmanifests (UID: 00000000-00004700)"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" called \"FindFirstFileW\" with parameter \\\\?\\C:\\$WINDOWS.~BT\\DUDownload\\Setup\\replacementmanifests\\* (UID: 00000000-00004700)"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" called \"FindNextFileW\" with parameter contentdeliverymanager.utilities-replacement.man (UID: 00000000-00004700)"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" called \"FindNextFileW\" with parameter devicedirectory-devicedirectoryclient-desktop-replacement.man (UID: 00000000-00004700)"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" called \"FindNextFileW\" with parameter gpbase-replacement.man (UID: 00000000-00004700)"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" called \"FindNextFileW\" with parameter microsoft-windows-advertisingid-replacement.man (UID: 00000000-00004700)"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" called \"FindNextFileW\" with parameter microsoft-windows-geolocation-replacement.man (UID: 00000000-00004700)"}],"origin":"API Call","attck_id":"T1083","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1083","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Spyware/Information Retrieval","identifier":"api-103","type":6,"relevance":3,"name":"Calls an API typically used for taking snapshot of the specified processes","description":"\"encrypt.exe\" called \"CreateToolhelp32Snapshot\" with parameters {\"dwFlags\": \"4\"\n \"th32ProcessID\": \"0\"}\n \"encrypt.exe\" called \"CreateToolhelp32Snapshot\" with parameters {\"dwFlags\": \"15\"\n \"th32ProcessID\": \"0\"}","description_v2":["\"encrypt.exe\" called \"CreateToolhelp32Snapshot\" with parameters {\"dwFlags\": \"4\"","\"th32ProcessID\": \"0\"}","\"encrypt.exe\" called \"CreateToolhelp32Snapshot\" with parameters {\"dwFlags\": \"15\"","\"th32ProcessID\": \"0\"}"],"description_v3":[{"type":"text","value":"\"encrypt.exe\" called \"CreateToolhelp32Snapshot\" with parameters {\"dwFlags\": \"4\""},{"type":"linebreak"},{"type":"text","value":"\"th32ProcessID\": \"0\"}"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" called \"CreateToolhelp32Snapshot\" with parameters {\"dwFlags\": \"15\""},{"type":"linebreak"},{"type":"text","value":"\"th32ProcessID\": \"0\"}"}],"origin":"API Call","attck_id":"T1057","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1057","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Spyware/Information Retrieval","identifier":"api-141","type":6,"relevance":2,"name":"Calls an API typically used to retrieve computer name","description":"\"encrypt.exe\" called \"GetComputerNameW\" (UID: 00000000-00004700)","description_v2":["\"encrypt.exe\" called \"GetComputerNameW\" (UID: 00000000-00004700)"],"description_v3":[{"type":"text","value":"\"encrypt.exe\" called \"GetComputerNameW\" (UID: 00000000-00004700)"}],"origin":"API Call","attck_id":"T1082","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1082","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Spyware/Information Retrieval","identifier":"api-108","type":6,"relevance":3,"name":"Calls an API typically used to retrieve information about the current system","description":"\"encrypt.exe\" called \"GetNativeSystemInfo\" with parameters {\"lpSystemInfo\": \"090000000010000000000100fffffeff0300000002000000d8210000000001000600004f\"}","description_v2":["\"encrypt.exe\" called \"GetNativeSystemInfo\" with parameters {\"lpSystemInfo\": \"090000000010000000000100fffffeff0300000002000000d8210000000001000600004f\"}"],"description_v3":[{"type":"text","value":"\"encrypt.exe\" called \"GetNativeSystemInfo\" with parameters {\"lpSystemInfo\": \"090000000010000000000100fffffeff0300000002000000d8210000000001000600004f\"}"}],"origin":"API Call","attck_id":"T1082","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1082","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Spyware/Information Retrieval","identifier":"string-57","type":2,"relevance":3,"name":"Contains CRYPTO related strings","description":"$3d","description_v2":["Found string \"AESNI\" (Indicator: \"aes\"; File: \"encrypt.exe\")","Found string \"C:\\Program Files\\Microsoft Visual Studio\\2022\\Community\\VC\\vcpkg\\buildtrees\\cryptopp\\src\\TOPP_8_9_0-a1a9be497e.clean\\chacha_avx.cpp\" (Indicator: \"chacha\"; File: \"encrypt.exe\")","Found string \"C:\\Program Files\\Microsoft Visual Studio\\2022\\Community\\VC\\vcpkg\\buildtrees\\cryptopp\\src\\TOPP_8_9_0-a1a9be497e.clean\\chacha_simd.cpp\" (Indicator: \"chacha\"; File: \"encrypt.exe\")","Found string \"C:\\Program Files\\Microsoft Visual Studio\\2022\\Community\\VC\\vcpkg\\buildtrees\\cryptopp\\src\\TOPP_8_9_0-a1a9be497e.clean\\rijndael_simd.cpp\" (Indicator: \"rijndael\"; File: \"encrypt.exe\")","Found string \"ChaCha\" (Indicator: \"chacha\"; File: \"encrypt.exe\")","Found string \".?AVBase@Rijndael@CryptoPP@@\" (Indicator: \"rijndael\"; File: \"encrypt.exe\")","Found string \".?AV?$BlockCipherImpl@URijndael_Info@CryptoPP@@VBlockCipher@2@@CryptoPP@@\" (Indicator: \"rijndael\"; File: \"encrypt.exe\")","Found string \".?AV?$AlgorithmImpl@V?$SimpleKeyingInterfaceImpl@V?$TwoBases@VBlockCipher@CryptoPP@@URijndael_Info@2@@CryptoPP@@V12@@CryptoPP@@V12@@CryptoPP@@\" (Indicator: \"rijndael\"; File: \"encrypt.exe\")","Found string \".?AV?$SimpleKeyingInterfaceImpl@V?$TwoBases@VBlockCipher@CryptoPP@@URijndael_Info@2@@CryptoPP@@V12@@CryptoPP@@\" (Indicator: \"rijndael\"; File: \"encrypt.exe\")","Found string \".?AV?$TwoBases@VBlockCipher@CryptoPP@@URijndael_Info@2@@CryptoPP@@\" (Indicator: \"rijndael\"; File: \"encrypt.exe\")","Found string \".?AURijndael_Info@CryptoPP@@\" (Indicator: \"rijndael\"; File: \"encrypt.exe\")","Found string \".?AVEnc@Rijndael@CryptoPP@@\" (Indicator: \"rijndael\"; File: \"encrypt.exe\")","Found string \".?AV?$BlockCipherFinal@$0A@VEnc@Rijndael@CryptoPP@@@CryptoPP@@\" (Indicator: \"rijndael\"; File: \"encrypt.exe\")","Found string \".?AV?$ClonableImpl@V?$BlockCipherFinal@$0A@VEnc@Rijndael@CryptoPP@@@CryptoPP@@VEnc@Rijndael@2@@CryptoPP@@\" (Indicator: \"rijndael\"; File: \"encrypt.exe\")","Found string \".?AVChaCha_Policy@CryptoPP@@\" (Indicator: \"chacha\"; File: \"encrypt.exe\")","file/memory contains long string with (Indicator: \"chacha\"; File: \"encrypt.exe\")","Found string \".?AV?$ConcretePolicyHolder@VChaCha_Policy@CryptoPP@@V?$AdditiveCipherTemplate@V?$AbstractPolicyHolder@UAdditiveCipherAbstractPolicy@CryptoPP@@VSymmetricCipher@2@@CryptoPP@@@2@UAdditiveCipherAbstractPolicy@2@@CryptoPP@@\" (Indicator: \"chacha\"; File: \"encrypt.exe\")","Found string \"AESNI\" (Indicator: \"aes\"; Source: \"00000000-00004700.00000001.240563.008D1000.00000020.mdmp\")","Found string \"C:\\Program Files\\Microsoft Visual Studio\\2022\\Community\\VC\\vcpkg\\buildtrees\\cryptopp\\src\\TOPP_8_9_0-a1a9be497e.clean\\chacha_avx.cpp\" (Indicator: \"chacha\"; Source: \"00000000-00004700.00000001.240563.008D1000.00000020.mdmp\")","Found string \"C:\\Program Files\\Microsoft Visual Studio\\2022\\Community\\VC\\vcpkg\\buildtrees\\cryptopp\\src\\TOPP_8_9_0-a1a9be497e.clean\\chacha_simd.cpp\" (Indicator: \"chacha\"; Source: \"00000000-00004700.00000001.240563.008D1000.00000020.mdmp\")","Found string \"C:\\Program Files\\Microsoft Visual Studio\\2022\\Community\\VC\\vcpkg\\buildtrees\\cryptopp\\src\\TOPP_8_9_0-a1a9be497e.clean\\rijndael_simd.cpp\" (Indicator: \"rijndael\"; Source: \"00000000-00004700.00000001.240563.008D1000.00000020.mdmp\")","Found string \"ChaCha\" (Indicator: \"chacha\"; Source: \"00000000-00004700.00000001.240563.008D1000.00000020.mdmp\")"],"description_v3":[{"type":"text","value":"Found string \"AESNI\" (Indicator: \"aes\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found string \"%PROGRAMFILES%\\Microsoft Visual Studio\\2022\\Community\\VC\\vcpkg\\buildtrees\\cryptopp\\src\\TOPP_8_9_0-a1a9be497e.clean\\chacha_avx.cpp\" (Indicator: \"chacha\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found string \"C:\\Program Files\\Microsoft Visual Studio\\2022\\Community\\VC\\vcpkg\\buildtrees\\cryptopp\\src\\TOPP_8_9_0-a1a9be497e.clean\\chacha_simd.cpp\" (Indicator: \"chacha\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found string \"C:\\Program Files\\Microsoft Visual Studio\\2022\\Community\\VC\\vcpkg\\buildtrees\\cryptopp\\src\\TOPP_8_9_0-a1a9be497e.clean\\rijndael_simd.cpp\" (Indicator: \"rijndael\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found string \"ChaCha\" (Indicator: \"chacha\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found string \".?AVBase@Rijndael@CryptoPP@@\" (Indicator: \"rijndael\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found string \".?AV?$BlockCipherImpl@URijndael_Info@CryptoPP@@VBlockCipher@2@@CryptoPP@@\" (Indicator: \"rijndael\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found string \".?AV?$AlgorithmImpl@V?$SimpleKeyingInterfaceImpl@V?$TwoBases@VBlockCipher@CryptoPP@@URijndael_Info@2@@CryptoPP@@V12@@CryptoPP@@V12@@CryptoPP@@\" (Indicator: \"rijndael\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found string \".?AV?$SimpleKeyingInterfaceImpl@V?$TwoBases@VBlockCipher@CryptoPP@@URijndael_Info@2@@CryptoPP@@V12@@CryptoPP@@\" (Indicator: \"rijndael\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found string \".?AV?$TwoBases@VBlockCipher@CryptoPP@@URijndael_Info@2@@CryptoPP@@\" (Indicator: \"rijndael\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found string \".?AURijndael_Info@CryptoPP@@\" (Indicator: \"rijndael\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found string \".?AVEnc@Rijndael@CryptoPP@@\" (Indicator: \"rijndael\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found string \".?AV?$BlockCipherFinal@$0A@VEnc@Rijndael@CryptoPP@@@CryptoPP@@\" (Indicator: \"rijndael\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found string \".?AV?$ClonableImpl@V?$BlockCipherFinal@$0A@VEnc@Rijndael@CryptoPP@@@CryptoPP@@VEnc@Rijndael@2@@CryptoPP@@\" (Indicator: \"rijndael\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found string \".?AVChaCha_Policy@CryptoPP@@\" (Indicator: \"chacha\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"file/memory contains long string with (Indicator: \"chacha\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found string \".?AV?$ConcretePolicyHolder@VChaCha_Policy@CryptoPP@@V?$AdditiveCipherTemplate@V?$AbstractPolicyHolder@UAdditiveCipherAbstractPolicy@CryptoPP@@VSymmetricCipher@2@@CryptoPP@@@2@UAdditiveCipherAbstractPolicy@2@@CryptoPP@@\" (Indicator: \"chacha\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found string \"AESNI\" (Indicator: \"aes\"; Source: \"00000000-00004700.00000001.240563.008D1000.00000020.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found string \"C:\\Program Files\\Microsoft Visual Studio\\2022\\Community\\VC\\vcpkg\\buildtrees\\cryptopp\\src\\TOPP_8_9_0-a1a9be497e.clean\\chacha_avx.cpp\" (Indicator: \"chacha\"; Source: \"00000000-00004700.00000001.240563.008D1000.00000020.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found string \"C:\\Program Files\\Microsoft Visual Studio\\2022\\Community\\VC\\vcpkg\\buildtrees\\cryptopp\\src\\TOPP_8_9_0-a1a9be497e.clean\\chacha_simd.cpp\" (Indicator: \"chacha\"; Source: \"00000000-00004700.00000001.240563.008D1000.00000020.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found string \"C:\\Program Files\\Microsoft Visual Studio\\2022\\Community\\VC\\vcpkg\\buildtrees\\cryptopp\\src\\TOPP_8_9_0-a1a9be497e.clean\\rijndael_simd.cpp\" (Indicator: \"rijndael\"; Source: \"00000000-00004700.00000001.240563.008D1000.00000020.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found string \"ChaCha\" (Indicator: \"chacha\"; Source: \"00000000-00004700.00000001.240563.008D1000.00000020.mdmp\")"}],"origin":"File/Memory","attck_id":"T1027","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1027","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Spyware/Information Retrieval","identifier":"string-78","type":2,"relevance":1,"name":"Contains ability to capture screen (API string)","description":"$3e","description_v2":["Found reference to API \"\" (Indicator: \"GetDC\"; Source: \"00000000-00004700.00000000.238642.02E50000.00000004.mdmp, 00000000-00004700.00000001.240563.02E50000.00000004.mdmp\")","Found reference to API \"\" (Indicator: \"GetDC\"; Source: \"00000000-00004700.00000000.238642.02E50000.00000004.mdmp, 00000000-00004700.00000001.240563.02E50000.00000004.mdmp\")","Found reference to API \"\" (Indicator: \"GetWindowDC\"; Source: \"00000000-00004700.00000000.238642.02E50000.00000004.mdmp, 00000000-00004700.00000001.240563.02E50000.00000004.mdmp\")","Found reference to API \"\" (Indicator: \"CreateDC\"; Source: \"00000000-00004700.00000000.238642.02E50000.00000004.mdmp, 00000000-00004700.00000001.240563.02E50000.00000004.mdmp\")","Found reference to API \"\" (Indicator: \"CreateDC\"; Source: \"00000000-00004700.00000000.238642.02E50000.00000004.mdmp, 00000000-00004700.00000001.240563.02E50000.00000004.mdmp\")","Found reference to API \"\" (Indicator: \"CreateCompatibleBitmap\"; Source: \"00000000-00004700.00000000.238642.02E50000.00000004.mdmp, 00000000-00004700.00000001.240563.02E50000.00000004.mdmp\")","Found reference to API \"\" (Indicator: \"BitBlt\"; Source: \"00000000-00004700.00000000.238642.02E50000.00000004.mdmp, 00000000-00004700.00000001.240563.02E50000.00000004.mdmp\")","Found reference to API \"\" (Indicator: \"CreateCompatibleDC\"; Source: \"00000000-00004700.00000000.238642.02E50000.00000004.mdmp, 00000000-00004700.00000001.240563.02E50000.00000004.mdmp\")"],"description_v3":[{"type":"text","value":"Found reference to API \"\" (Indicator: \"GetDC\"; Source: \"00000000-00004700.00000000.238642.02E50000.00000004.mdmp, 00000000-00004700.00000001.240563.02E50000.00000004.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"\" (Indicator: \"GetDC\"; Source: \"00000000-00004700.00000000.238642.02E50000.00000004.mdmp, 00000000-00004700.00000001.240563.02E50000.00000004.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"\" (Indicator: \"GetWindowDC\"; Source: \"00000000-00004700.00000000.238642.02E50000.00000004.mdmp, 00000000-00004700.00000001.240563.02E50000.00000004.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"\" (Indicator: \"CreateDC\"; Source: \"00000000-00004700.00000000.238642.02E50000.00000004.mdmp, 00000000-00004700.00000001.240563.02E50000.00000004.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"\" (Indicator: \"CreateDC\"; Source: \"00000000-00004700.00000000.238642.02E50000.00000004.mdmp, 00000000-00004700.00000001.240563.02E50000.00000004.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"\" (Indicator: \"CreateCompatibleBitmap\"; Source: \"00000000-00004700.00000000.238642.02E50000.00000004.mdmp, 00000000-00004700.00000001.240563.02E50000.00000004.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"\" (Indicator: \"BitBlt\"; Source: \"00000000-00004700.00000000.238642.02E50000.00000004.mdmp, 00000000-00004700.00000001.240563.02E50000.00000004.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"\" (Indicator: \"CreateCompatibleDC\"; Source: \"00000000-00004700.00000000.238642.02E50000.00000004.mdmp, 00000000-00004700.00000001.240563.02E50000.00000004.mdmp\")"}],"origin":"File/Memory","attck_id":"T1113","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1113","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Spyware/Information Retrieval","identifier":"string-80","type":2,"relevance":1,"name":"Contains ability to determine disk drive type (API string)","description":"Found reference to API \"GetDriveTypeW\" (Indicator: \"GetDriveType\"; File: \"encrypt.exe\")\n Found reference to API \"GetDriveTypeW\" (Indicator: \"GetDriveType\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","description_v2":["Found reference to API \"GetDriveTypeW\" (Indicator: \"GetDriveType\"; File: \"encrypt.exe\")","Found reference to API \"GetDriveTypeW\" (Indicator: \"GetDriveType\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"],"description_v3":[{"type":"text","value":"Found reference to API \"GetDriveTypeW\" (Indicator: \"GetDriveType\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"GetDriveTypeW\" (Indicator: \"GetDriveType\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"}],"origin":"File/Memory","attck_id":"T1082","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1082","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Spyware/Information Retrieval","identifier":"string-83","type":2,"relevance":1,"name":"Contains ability to enumerate files on disk (API string)","description":"$3f","description_v2":["Found reference to API \"FindNextFileW\" (Indicator: \"FindNextFile\"; File: \"encrypt.exe\")","Found reference to API \"FindFirstFileExW\" (Indicator: \"FindFirstFile\"; File: \"encrypt.exe\")","Found reference to API \"FindFirstFileW\" (Indicator: \"FindFirstFile\"; File: \"encrypt.exe\")","Found reference to API \"FindFirstFileW\" (Indicator: \"FindFirstFile\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API \"FindNextFileW\" (Indicator: \"FindNextFile\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API \"FindFirstFileExW\" (Indicator: \"FindFirstFile\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API \"11385055370,2864,3119,,FindNextFileW,kernel32.dll,\"01:02:08.765\",RX=0,PX=0\" (Indicator: \"FindNextFile\"; Source: \"00000000-00004700.00000000.238642.02E50000.00000004.mdmp\")","Found reference to API \"11382196500,2864,3119,,FindNextFileW,kernel32.dll,\"01:02:08.765\",RX=0,PX=0\" (Indicator: \"FindNextFile\"; Source: \"00000000-00004700.00000000.238642.02E50000.00000004.mdmp\")","Found reference to API \"11383224354,2864,3119,,FindNextFileW,kernel32.dll,\"01:02:08.765\",RX=0,PX=0\" (Indicator: \"FindNextFile\"; Source: \"00000000-00004700.00000000.238642.02E50000.00000004.mdmp\")","Found reference to API \"11383132376,2864,3119,,FindNextFileW,kernel32.dll,\"01:02:08.765\",RX=0,PX=0\" (Indicator: \"FindNextFile\"; Source: \"00000000-00004700.00000000.238642.02E50000.00000004.mdmp\")","Found reference to API \"11390105850,2864,3119,,FindNextFileW,kernel32.dll,\"01:02:08.765\",RX=0,PX=0\" (Indicator: \"FindNextFile\"; Source: \"00000000-00004700.00000000.238642.02E50000.00000004.mdmp\")","Found reference to API \"11366370666,2864,3117,,FindFirstFileW,kernel32.dll,\"01:02:08.765\",RX=0,PX=0\" (Indicator: \"FindFirstFile\"; Source: \"00000000-00004700.00000000.238642.02E50000.00000004.mdmp\")","Found reference to API \"11395177370,2864,3119,,FindNextFileW,kernel32.dll,\"01:02:08.781\",RX=0,PX=0\" (Indicator: \"FindNextFile\"; Source: \"00000000-00004700.00000000.238642.02E50000.00000004.mdmp\")","Found reference to API \"11384345386,2864,3119,,FindNextFileW,kernel32.dll,\"01:02:08.765\",RX=0,PX=0\" (Indicator: \"FindNextFile\"; Source: \"00000000-00004700.00000000.238642.02E50000.00000004.mdmp\")","Found reference to API \"11395353962,2864,3119,,FindNextFileW,kernel32.dll,\"01:02:08.781\",RX=0,PX=0\" (Indicator: \"FindNextFile\"; Source: \"00000000-00004700.00000000.238642.02E50000.00000004.mdmp\")","Found reference to API \"11384117956,2864,3119,,FindNextFileW,kernel32.dll,\"01:02:08.765\",RX=0,PX=0\" (Indicator: \"FindNextFile\"; Source: \"00000000-00004700.00000000.238642.02E50000.00000004.mdmp\")","Found reference to API \"11389061146,2864,3117,,FindFirstFileW,kernel32.dll,\"01:02:08.765\",RX=0,PX=0\" (Indicator: \"FindFirstFile\"; Source: \"00000000-00004700.00000000.238642.02E50000.00000004.mdmp\")","Found reference to API \"11390201984,2864,3119,,FindNextFileW,kernel32.dll,\"01:02:08.765\",RX=0,PX=0\" (Indicator: \"FindNextFile\"; Source: \"00000000-00004700.00000000.238642.02E50000.00000004.mdmp\")","Found reference to API \"11389441736,2864,3119,,FindNextFileW,kernel32.dll,\"01:02:08.765\",RX=0,PX=0\" (Indicator: \"FindNextFile\"; Source: \"00000000-00004700.00000000.238642.02E50000.00000004.mdmp\")","Found reference to API \"11389822498,2864,3119,,FindNextFileW,kernel32.dll,\"01:02:08.765\",RX=0,PX=0\" (Indicator: \"FindNextFile\"; Source: \"00000000-00004700.00000000.238642.02E50000.00000004.mdmp\")"],"description_v3":[{"type":"text","value":"Found reference to API \"FindNextFileW\" (Indicator: \"FindNextFile\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"FindFirstFileExW\" (Indicator: \"FindFirstFile\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"FindFirstFileW\" (Indicator: \"FindFirstFile\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"FindFirstFileW\" (Indicator: \"FindFirstFile\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"FindNextFileW\" (Indicator: \"FindNextFile\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"FindFirstFileExW\" (Indicator: \"FindFirstFile\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"11385055370,2864,3119,,FindNextFileW,kernel32.dll,\"01:02:08.765\",RX=0,PX=0\" (Indicator: \"FindNextFile\"; Source: \"00000000-00004700.00000000.238642.02E50000.00000004.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"11382196500,2864,3119,,FindNextFileW,kernel32.dll,\"01:02:08.765\",RX=0,PX=0\" (Indicator: \"FindNextFile\"; Source: \"00000000-00004700.00000000.238642.02E50000.00000004.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"11383224354,2864,3119,,FindNextFileW,kernel32.dll,\"01:02:08.765\",RX=0,PX=0\" (Indicator: \"FindNextFile\"; Source: \"00000000-00004700.00000000.238642.02E50000.00000004.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"11383132376,2864,3119,,FindNextFileW,kernel32.dll,\"01:02:08.765\",RX=0,PX=0\" (Indicator: \"FindNextFile\"; Source: \"00000000-00004700.00000000.238642.02E50000.00000004.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"11390105850,2864,3119,,FindNextFileW,kernel32.dll,\"01:02:08.765\",RX=0,PX=0\" (Indicator: \"FindNextFile\"; Source: \"00000000-00004700.00000000.238642.02E50000.00000004.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"11366370666,2864,3117,,FindFirstFileW,kernel32.dll,\"01:02:08.765\",RX=0,PX=0\" (Indicator: \"FindFirstFile\"; Source: \"00000000-00004700.00000000.238642.02E50000.00000004.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"11395177370,2864,3119,,FindNextFileW,kernel32.dll,\"01:02:08.781\",RX=0,PX=0\" (Indicator: \"FindNextFile\"; Source: \"00000000-00004700.00000000.238642.02E50000.00000004.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"11384345386,2864,3119,,FindNextFileW,kernel32.dll,\"01:02:08.765\",RX=0,PX=0\" (Indicator: \"FindNextFile\"; Source: \"00000000-00004700.00000000.238642.02E50000.00000004.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"11395353962,2864,3119,,FindNextFileW,kernel32.dll,\"01:02:08.781\",RX=0,PX=0\" (Indicator: \"FindNextFile\"; Source: \"00000000-00004700.00000000.238642.02E50000.00000004.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"11384117956,2864,3119,,FindNextFileW,kernel32.dll,\"01:02:08.765\",RX=0,PX=0\" (Indicator: \"FindNextFile\"; Source: \"00000000-00004700.00000000.238642.02E50000.00000004.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"11389061146,2864,3117,,FindFirstFileW,kernel32.dll,\"01:02:08.765\",RX=0,PX=0\" (Indicator: \"FindFirstFile\"; Source: \"00000000-00004700.00000000.238642.02E50000.00000004.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"11390201984,2864,3119,,FindNextFileW,kernel32.dll,\"01:02:08.765\",RX=0,PX=0\" (Indicator: \"FindNextFile\"; Source: \"00000000-00004700.00000000.238642.02E50000.00000004.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"11389441736,2864,3119,,FindNextFileW,kernel32.dll,\"01:02:08.765\",RX=0,PX=0\" (Indicator: \"FindNextFile\"; Source: \"00000000-00004700.00000000.238642.02E50000.00000004.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"11389822498,2864,3119,,FindNextFileW,kernel32.dll,\"01:02:08.765\",RX=0,PX=0\" (Indicator: \"FindNextFile\"; Source: \"00000000-00004700.00000000.238642.02E50000.00000004.mdmp\")"}],"origin":"File/Memory","attck_id":"T1083","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1083","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Spyware/Information Retrieval","identifier":"string-85","type":2,"relevance":1,"name":"Contains ability to enumerate process and/or its information (API string)","description":"$40","description_v2":["Found reference to API \"GetCurrentProcess\" (Indicator: \"GetCurrentProcess\"; File: \"encrypt.exe\")","Found reference to API \"GetModuleHandleW\" (Indicator: \"GetModuleHandle\"; File: \"encrypt.exe\")","Found reference to API \"Process32NextW\" (Indicator: \"Process32Next\"; File: \"encrypt.exe\")","Found reference to API \"Process32FirstW\" (Indicator: \"Process32First\"; File: \"encrypt.exe\")","Found reference to API \"GetCurrentProcessId\" (Indicator: \"GetCurrentProcess\"; File: \"encrypt.exe\")","Found reference to API \"GetEnvironmentStringsW\" (Indicator: \"GetEnvironmentStrings\"; File: \"encrypt.exe\")","Found reference to API \"GetModuleHandleExW\" (Indicator: \"GetModuleHandle\"; File: \"encrypt.exe\")","Found reference to API \"CreateToolhelp32Snapshot\" (Indicator: \"CreateToolhelp32Snapshot\"; File: \"encrypt.exe\")","Found reference to API \"GetModuleHandleA\" (Indicator: \"GetModuleHandle\"; File: \"encrypt.exe\")","Found reference to API \"GetCurrentProcess\" (Indicator: \"GetCurrentProcess\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API \"GetModuleHandleA\" (Indicator: \"GetModuleHandle\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API \"CreateToolhelp32Snapshot\" (Indicator: \"CreateToolhelp32Snapshot\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API \"Process32NextW\" (Indicator: \"Process32Next\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API \"Process32FirstW\" (Indicator: \"Process32First\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API \"GetCurrentProcessId\" (Indicator: \"GetCurrentProcess\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API \"GetModuleHandleW\" (Indicator: \"GetModuleHandle\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API \"GetModuleHandleExW\" (Indicator: \"GetModuleHandle\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API \"GetEnvironmentStringsW\" (Indicator: \"GetEnvironmentStrings\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"],"description_v3":[{"type":"text","value":"Found reference to API \"GetCurrentProcess\" (Indicator: \"GetCurrentProcess\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"GetModuleHandleW\" (Indicator: \"GetModuleHandle\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"Process32NextW\" (Indicator: \"Process32Next\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"Process32FirstW\" (Indicator: \"Process32First\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"GetCurrentProcessId\" (Indicator: \"GetCurrentProcess\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"GetEnvironmentStringsW\" (Indicator: \"GetEnvironmentStrings\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"GetModuleHandleExW\" (Indicator: \"GetModuleHandle\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"CreateToolhelp32Snapshot\" (Indicator: \"CreateToolhelp32Snapshot\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"GetModuleHandleA\" (Indicator: \"GetModuleHandle\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"GetCurrentProcess\" (Indicator: \"GetCurrentProcess\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"GetModuleHandleA\" (Indicator: \"GetModuleHandle\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"CreateToolhelp32Snapshot\" (Indicator: \"CreateToolhelp32Snapshot\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"Process32NextW\" (Indicator: \"Process32Next\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"Process32FirstW\" (Indicator: \"Process32First\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"GetCurrentProcessId\" (Indicator: \"GetCurrentProcess\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"GetModuleHandleW\" (Indicator: \"GetModuleHandle\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"GetModuleHandleExW\" (Indicator: \"GetModuleHandle\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"GetEnvironmentStringsW\" (Indicator: \"GetEnvironmentStrings\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"}],"origin":"File/Memory","attck_id":"T1057","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1057","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Spyware/Information Retrieval","identifier":"string-534","type":2,"relevance":0,"name":"Contains ability to read files (API string)","description":"Found reference to API \"ReadFile\" (Indicator: \"ReadFile\"; File: \"encrypt.exe\")\n Found reference to API \"ReadFile\" (Indicator: \"ReadFile\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","description_v2":["Found reference to API \"ReadFile\" (Indicator: \"ReadFile\"; File: \"encrypt.exe\")","Found reference to API \"ReadFile\" (Indicator: \"ReadFile\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"],"description_v3":[{"type":"text","value":"Found reference to API \"ReadFile\" (Indicator: \"ReadFile\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"ReadFile\" (Indicator: \"ReadFile\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"}],"origin":"File/Memory","attck_id":"T1083","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1083","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Spyware/Information Retrieval","identifier":"string-427","type":2,"relevance":1,"name":"Contains ability to retrieve a module handle (API string)","description":"Found reference to API \"GetModuleHandleW\" (Indicator: \"GetModuleHandle\"; File: \"encrypt.exe\")\n Found reference to API \"GetModuleHandleExW\" (Indicator: \"GetModuleHandle\"; File: \"encrypt.exe\")\n Found reference to API \"GetModuleHandleA\" (Indicator: \"GetModuleHandle\"; File: \"encrypt.exe\")\n Found reference to API \"GetModuleHandleA\" (Indicator: \"GetModuleHandle\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")\n Found reference to API \"GetModuleHandleW\" (Indicator: \"GetModuleHandle\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")\n Found reference to API \"GetModuleHandleExW\" (Indicator: \"GetModuleHandle\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","description_v2":["Found reference to API \"GetModuleHandleW\" (Indicator: \"GetModuleHandle\"; File: \"encrypt.exe\")","Found reference to API \"GetModuleHandleExW\" (Indicator: \"GetModuleHandle\"; File: \"encrypt.exe\")","Found reference to API \"GetModuleHandleA\" (Indicator: \"GetModuleHandle\"; File: \"encrypt.exe\")","Found reference to API \"GetModuleHandleA\" (Indicator: \"GetModuleHandle\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API \"GetModuleHandleW\" (Indicator: \"GetModuleHandle\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API \"GetModuleHandleExW\" (Indicator: \"GetModuleHandle\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"],"description_v3":[{"type":"text","value":"Found reference to API \"GetModuleHandleW\" (Indicator: \"GetModuleHandle\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"GetModuleHandleExW\" (Indicator: \"GetModuleHandle\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"GetModuleHandleA\" (Indicator: \"GetModuleHandle\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"GetModuleHandleA\" (Indicator: \"GetModuleHandle\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"GetModuleHandleW\" (Indicator: \"GetModuleHandle\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"GetModuleHandleExW\" (Indicator: \"GetModuleHandle\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"}],"origin":"File/Memory","attck_id":"T1082","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1082","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Spyware/Information Retrieval","identifier":"string-317","type":2,"relevance":1,"name":"Contains ability to retrieve address of exported function from a DLL (API string)","description":"Found reference to API \"GetProcAddress\" (Indicator: \"GetProcAddress\"; File: \"encrypt.exe\")\n Found reference to API \"GetProcAddress\" (Indicator: \"GetProcAddress\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","description_v2":["Found reference to API \"GetProcAddress\" (Indicator: \"GetProcAddress\"; File: \"encrypt.exe\")","Found reference to API \"GetProcAddress\" (Indicator: \"GetProcAddress\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"],"description_v3":[{"type":"text","value":"Found reference to API \"GetProcAddress\" (Indicator: \"GetProcAddress\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"GetProcAddress\" (Indicator: \"GetProcAddress\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"}],"origin":"File/Memory","attck_id":"T1106","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1106","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Spyware/Information Retrieval","identifier":"string-207","type":2,"relevance":1,"name":"Contains ability to retrieve file and directory information (API string)","description":"Found reference to API \"GetFileSizeEx\" (Indicator: \"GetFileSize\"; File: \"encrypt.exe\")\n Found reference to API \"GetTempPath2W\" (Indicator: \"GetTempPath\"; File: \"encrypt.exe\")\n Found reference to API \"GetFileSizeEx\" (Indicator: \"GetFileSize\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")\n Found reference to API \"GetTempPath2W\" (Indicator: \"GetTempPath\"; Source: \"00000000-00004700.00000001.240563.008D1000.00000020.mdmp\")","description_v2":["Found reference to API \"GetFileSizeEx\" (Indicator: \"GetFileSize\"; File: \"encrypt.exe\")","Found reference to API \"GetTempPath2W\" (Indicator: \"GetTempPath\"; File: \"encrypt.exe\")","Found reference to API \"GetFileSizeEx\" (Indicator: \"GetFileSize\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API \"GetTempPath2W\" (Indicator: \"GetTempPath\"; Source: \"00000000-00004700.00000001.240563.008D1000.00000020.mdmp\")"],"description_v3":[{"type":"text","value":"Found reference to API \"GetFileSizeEx\" (Indicator: \"GetFileSize\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"GetTempPath2W\" (Indicator: \"GetTempPath\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"GetFileSizeEx\" (Indicator: \"GetFileSize\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"GetTempPath2W\" (Indicator: \"GetTempPath\"; Source: \"00000000-00004700.00000001.240563.008D1000.00000020.mdmp\")"}],"origin":"File/Memory","attck_id":"T1083","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1083","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Spyware/Information Retrieval","identifier":"string-122","type":2,"relevance":1,"name":"Contains ability to retrieve the NetBIOS name of the local computer (API string)","description":"Found reference to API \"GetComputerNameW\" (Indicator: \"GetComputerName\"; File: \"encrypt.exe\")\n Found reference to API \"GetComputerNameW\" (Indicator: \"GetComputerName\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","description_v2":["Found reference to API \"GetComputerNameW\" (Indicator: \"GetComputerName\"; File: \"encrypt.exe\")","Found reference to API \"GetComputerNameW\" (Indicator: \"GetComputerName\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"],"description_v3":[{"type":"text","value":"Found reference to API \"GetComputerNameW\" (Indicator: \"GetComputerName\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"GetComputerNameW\" (Indicator: \"GetComputerName\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"}],"origin":"File/Memory","attck_id":"T1082","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1082","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Spyware/Information Retrieval","identifier":"string-164","type":2,"relevance":1,"name":"Contains ability to retrieve the fully qualified path of module (API string)","description":"Found reference to API \"GetModuleFileNameW\" (Indicator: \"GetModuleFileName\"; File: \"encrypt.exe\")\n Found reference to API \"GetModuleFileNameW\" (Indicator: \"GetModuleFileName\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","description_v2":["Found reference to API \"GetModuleFileNameW\" (Indicator: \"GetModuleFileName\"; File: \"encrypt.exe\")","Found reference to API \"GetModuleFileNameW\" (Indicator: \"GetModuleFileName\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"],"description_v3":[{"type":"text","value":"Found reference to API \"GetModuleFileNameW\" (Indicator: \"GetModuleFileName\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"GetModuleFileNameW\" (Indicator: \"GetModuleFileName\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"}],"origin":"File/Memory","attck_id":"T1106","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1106","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Spyware/Information Retrieval","identifier":"string-205","type":2,"relevance":1,"name":"Contains ability to retrieve the time elapsed since the system was started (API string)","description":"Found reference to API \"GetTickCount\" (Indicator: \"GetTickCount\"; File: \"encrypt.exe\")\n Found reference to API \"GetTickCount\" (Indicator: \"GetTickCount\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","description_v2":["Found reference to API \"GetTickCount\" (Indicator: \"GetTickCount\"; File: \"encrypt.exe\")","Found reference to API \"GetTickCount\" (Indicator: \"GetTickCount\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"],"description_v3":[{"type":"text","value":"Found reference to API \"GetTickCount\" (Indicator: \"GetTickCount\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"GetTickCount\" (Indicator: \"GetTickCount\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"}],"origin":"File/Memory","attck_id":"T1497.003","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1497/003","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Spyware/Information Retrieval","identifier":"string-570","type":2,"relevance":3,"name":"Contains reference to Outlook data files path","description":"Found string \"\\\\?\\%USERPROFILE%\\Documents\\Outlook Files\\Outlook1.pst\" (Indicator: \"\\documents\\outlook files\"; Source: \"00000000-00004700-00000BC1-2783139498\")","description_v2":["Found string \"\\\\?\\%USERPROFILE%\\Documents\\Outlook Files\\Outlook1.pst\" (Indicator: \"\\documents\\outlook files\"; Source: \"00000000-00004700-00000BC1-2783139498\")"],"description_v3":[{"type":"text","value":"Found string \"\\\\?\\%USERPROFILE%\\Documents\\Outlook Files\\Outlook1.pst\" (Indicator: \"\\documents\\outlook files\"; Source: \"00000000-00004700-00000BC1-2783139498\")"}],"origin":"File/Memory","attck_id":"T1114.001","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1114/001","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Spyware/Information Retrieval","identifier":"string-475","type":2,"relevance":1,"name":"Contains string like password/secret","description":"Found string \"replacethispassword\" (Indicator: \"password\"; File: \"encrypt.exe\")\n Found string \"replacethispassword\" (Indicator: \"password\"; Source: \"00000000-00004700.00000000.238642.02E50000.00000004.mdmp, 00000000-00004700.00000001.240563.008D1000.00000020.mdmp, 00000000-00004700.00000001.240563.02E50000.00000004.mdmp\")","description_v2":["Found string \"replacethispassword\" (Indicator: \"password\"; File: \"encrypt.exe\")","Found string \"replacethispassword\" (Indicator: \"password\"; Source: \"00000000-00004700.00000000.238642.02E50000.00000004.mdmp, 00000000-00004700.00000001.240563.008D1000.00000020.mdmp, 00000000-00004700.00000001.240563.02E50000.00000004.mdmp\")"],"description_v3":[{"type":"text","value":"Found string \"replacethispassword\" (Indicator: \"password\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found string \"replacethispassword\" (Indicator: \"password\"; Source: \"00000000-00004700.00000000.238642.02E50000.00000004.mdmp, 00000000-00004700.00000001.240563.008D1000.00000020.mdmp, 00000000-00004700.00000001.240563.02E50000.00000004.mdmp\")"}],"origin":"File/Memory","attck_id":"T1555","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1555","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"System Security","identifier":"string-729","type":2,"relevance":1,"name":"Able to retrieve/open a process (API string)","description":"Found string \"OpenProcess\" (Indicator: \"OpenProcess\"; File: \"encrypt.exe\")\n Found string \"OpenProcess\" (Indicator: \"OpenProcess\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","description_v2":["Found string \"OpenProcess\" (Indicator: \"OpenProcess\"; File: \"encrypt.exe\")","Found string \"OpenProcess\" (Indicator: \"OpenProcess\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"],"description_v3":[{"type":"text","value":"Found string \"OpenProcess\" (Indicator: \"OpenProcess\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found string \"OpenProcess\" (Indicator: \"OpenProcess\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"}],"origin":"File/Memory","attck_id":"T1489","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1489","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"System Security","identifier":"static-191","type":0,"relevance":5,"name":"Calls an API used to open a process handle","description":"Observed import api \"OpenProcess\" which can be \"used to open a process handle\" [Source: encrypt.exe]","description_v2":["Observed import api \"OpenProcess\" which can be \"used to open a process handle\" [Source: encrypt.exe]"],"description_v3":[{"type":"text","value":"Observed import api \"OpenProcess\" which can be \"used to open a process handle\" [Source: encrypt.exe]"}],"origin":"Static Parser","attck_id":"T1489","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1489","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"System Security","identifier":"string-474","type":2,"relevance":1,"name":"Contains ability to access device drivers","description":"Found string \"\\DosDevices\\M:\" (Indicator: \"\\DosDevices\\\"; Source: \"00000000-00004700-00000BC1-2727739000\")\n Found string \"$`\\DosDevices\\M:\\??\\Volume{815ead30-0000-0000-0000-100000000000}\" (Indicator: \"\\DosDevices\\\"; Source: \"00000000-00004700.00000000.238642.02E50000.00000004.mdmp\")\n Found string \":\\WINDOWS\\system32\\DRIVERS\" (Indicator: \"system32\\drivers\"; Source: \"00000000-00004700.00000000.238642.02E50000.00000004.mdmp, 00000000-00004700.00000001.240563.02E50000.00000004.mdmp\")\n Found string \"\\Device\\HarddiskVolume2\\DosDevZ\" (Indicator: \"\\Device\\\"; Source: \"00000000-00004700.00000000.238642.02E50000.00000004.mdmp\")","description_v2":["Found string \"\\DosDevices\\M:\" (Indicator: \"\\DosDevices\\\"; Source: \"00000000-00004700-00000BC1-2727739000\")","Found string \"$`\\DosDevices\\M:\\??\\Volume{815ead30-0000-0000-0000-100000000000}\" (Indicator: \"\\DosDevices\\\"; Source: \"00000000-00004700.00000000.238642.02E50000.00000004.mdmp\")","Found string \":\\WINDOWS\\system32\\DRIVERS\" (Indicator: \"system32\\drivers\"; Source: \"00000000-00004700.00000000.238642.02E50000.00000004.mdmp, 00000000-00004700.00000001.240563.02E50000.00000004.mdmp\")","Found string \"\\Device\\HarddiskVolume2\\DosDevZ\" (Indicator: \"\\Device\\\"; Source: \"00000000-00004700.00000000.238642.02E50000.00000004.mdmp\")"],"description_v3":[{"type":"text","value":"Found string \"\\DosDevices\\M:\" (Indicator: \"\\DosDevices\\\"; Source: \"00000000-00004700-00000BC1-2727739000\")"},{"type":"linebreak"},{"type":"text","value":"Found string \"$`\\DosDevices\\M:\\??\\Volume{815ead30-0000-0000-0000-100000000000}\" (Indicator: \"\\DosDevices\\\"; Source: \"00000000-00004700.00000000.238642.02E50000.00000004.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found string %WINDIR%\\system32\\DRIVERS\" (Indicator: \"system32\\drivers\"; Source: \"00000000-00004700.00000000.238642.02E50000.00000004.mdmp, 00000000-00004700.00000001.240563.02E50000.00000004.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found string \"Z:\\DosDevZ\" (Indicator: \"\\Device\\\"; Source: \"00000000-00004700.00000000.238642.02E50000.00000004.mdmp\")"}],"origin":"File/Memory","attck_id":"T1543.003","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1543/003","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"System Security","identifier":"string-426","type":2,"relevance":1,"name":"Contains ability to modify file attributes (API string)","description":"Found reference to API \"SetFileAttributesW\" (Indicator: \"SetFileAttributes\"; File: \"encrypt.exe\")\n Found reference to API \"SetFileAttributesW\" (Indicator: \"SetFileAttributes\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","description_v2":["Found reference to API \"SetFileAttributesW\" (Indicator: \"SetFileAttributes\"; File: \"encrypt.exe\")","Found reference to API \"SetFileAttributesW\" (Indicator: \"SetFileAttributes\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"],"description_v3":[{"type":"text","value":"Found reference to API \"SetFileAttributesW\" (Indicator: \"SetFileAttributes\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"SetFileAttributesW\" (Indicator: \"SetFileAttributes\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"}],"origin":"File/Memory","attck_id":"T1222","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1222","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"System Security","identifier":"string-316","type":2,"relevance":1,"name":"Contains ability to terminate a process (API string)","description":"Found reference to API \"ExitProcess\" (Indicator: \"ExitProcess\"; File: \"encrypt.exe\")\n Found reference to API \"TerminateProcess\" (Indicator: \"TerminateProcess\"; File: \"encrypt.exe\")\n Found reference to API \"CorExitProcess\" (Indicator: \"ExitProcess\"; File: \"encrypt.exe\")\n Found reference to API \"TerminateProcess\" (Indicator: \"TerminateProcess\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")\n Found reference to API \"ExitProcess\" (Indicator: \"ExitProcess\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")\n Found reference to API \"CorExitProcess\" (Indicator: \"ExitProcess\"; Source: \"00000000-00004700.00000001.240563.008D1000.00000020.mdmp\")","description_v2":["Found reference to API \"ExitProcess\" (Indicator: \"ExitProcess\"; File: \"encrypt.exe\")","Found reference to API \"TerminateProcess\" (Indicator: \"TerminateProcess\"; File: \"encrypt.exe\")","Found reference to API \"CorExitProcess\" (Indicator: \"ExitProcess\"; File: \"encrypt.exe\")","Found reference to API \"TerminateProcess\" (Indicator: \"TerminateProcess\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API \"ExitProcess\" (Indicator: \"ExitProcess\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","Found reference to API \"CorExitProcess\" (Indicator: \"ExitProcess\"; Source: \"00000000-00004700.00000001.240563.008D1000.00000020.mdmp\")"],"description_v3":[{"type":"text","value":"Found reference to API \"ExitProcess\" (Indicator: \"ExitProcess\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"TerminateProcess\" (Indicator: \"TerminateProcess\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"CorExitProcess\" (Indicator: \"ExitProcess\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"TerminateProcess\" (Indicator: \"TerminateProcess\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"ExitProcess\" (Indicator: \"ExitProcess\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"CorExitProcess\" (Indicator: \"ExitProcess\"; Source: \"00000000-00004700.00000001.240563.008D1000.00000020.mdmp\")"}],"origin":"File/Memory","attck_id":"T1489","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1489","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"System Security","identifier":"string-535","type":2,"relevance":0,"name":"Contains ability to write files (API string)","description":"Found reference to API \"WriteFile\" (Indicator: \"WriteFile\"; File: \"encrypt.exe\")\n Found reference to API \"WriteFile\" (Indicator: \"WriteFile\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","description_v2":["Found reference to API \"WriteFile\" (Indicator: \"WriteFile\"; File: \"encrypt.exe\")","Found reference to API \"WriteFile\" (Indicator: \"WriteFile\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"],"description_v3":[{"type":"text","value":"Found reference to API \"WriteFile\" (Indicator: \"WriteFile\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"WriteFile\" (Indicator: \"WriteFile\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"}],"origin":"File/Memory","attck_id":"T1105","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1105","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"System Security","identifier":"string-134","type":2,"relevance":3,"name":"Found anti-virus related strings names","description":"Found string \"DefWatch\" (Indicator: \"defwatch\"; File: \"encrypt.exe\")\n Found string \"ccEvtMgr\" (Indicator: \"ccevtmgr\"; File: \"encrypt.exe\")\n Found string \"ccSetMgr\" (Indicator: \"ccsetmgr\"; File: \"encrypt.exe\")\n Found string \"DefWatch\" (Indicator: \"defwatch\"; Source: \"00000000-00004700.00000001.240563.008D1000.00000020.mdmp\")\n Found string \"ccEvtMgr\" (Indicator: \"ccevtmgr\"; Source: \"00000000-00004700.00000001.240563.008D1000.00000020.mdmp\")\n Found string \"ccSetMgr\" (Indicator: \"ccsetmgr\"; Source: \"00000000-00004700.00000001.240563.008D1000.00000020.mdmp\")","description_v2":["Found string \"DefWatch\" (Indicator: \"defwatch\"; File: \"encrypt.exe\")","Found string \"ccEvtMgr\" (Indicator: \"ccevtmgr\"; File: \"encrypt.exe\")","Found string \"ccSetMgr\" (Indicator: \"ccsetmgr\"; File: \"encrypt.exe\")","Found string \"DefWatch\" (Indicator: \"defwatch\"; Source: \"00000000-00004700.00000001.240563.008D1000.00000020.mdmp\")","Found string \"ccEvtMgr\" (Indicator: \"ccevtmgr\"; Source: \"00000000-00004700.00000001.240563.008D1000.00000020.mdmp\")","Found string \"ccSetMgr\" (Indicator: \"ccsetmgr\"; Source: \"00000000-00004700.00000001.240563.008D1000.00000020.mdmp\")"],"description_v3":[{"type":"text","value":"Found string \"DefWatch\" (Indicator: \"defwatch\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found string \"ccEvtMgr\" (Indicator: \"ccevtmgr\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found string \"ccSetMgr\" (Indicator: \"ccsetmgr\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found string \"DefWatch\" (Indicator: \"defwatch\"; Source: \"00000000-00004700.00000001.240563.008D1000.00000020.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found string \"ccEvtMgr\" (Indicator: \"ccevtmgr\"; Source: \"00000000-00004700.00000001.240563.008D1000.00000020.mdmp\")"},{"type":"linebreak"},{"type":"text","value":"Found string \"ccSetMgr\" (Indicator: \"ccsetmgr\"; Source: \"00000000-00004700.00000001.240563.008D1000.00000020.mdmp\")"}],"origin":"File/Memory","attck_id":"T1562.001","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1562/001","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"System Security","identifier":"registry-173","type":3,"relevance":1,"name":"Queries services related registry keys","description":"\"encrypt.exe\" (Access type: \"QUERYVAL\"; Path: \"HKLM\\SYSTEM\\CONTROLSET001\\SERVICES\\BAM\\USERSETTINGS\\S-1-5-21-735145574-3570218355-1207367261-1001\"; Key: \"\\DEVICE\\HARDDISKVOLUME2\\WINDOWS\\SYSTEM32\\CONHOST.EXE\"; Value: \"\")\n \"encrypt.exe\" (Access type: \"QUERYVAL\"; Path: \"HKLM\\SYSTEM\\CONTROLSET001\\SERVICES\\LANMANWORKSTATION\\PARAMETERS\"; Key: \"RPCCACHETIMEOUT\"; Value: \"\")","description_v2":["\"encrypt.exe\" (Access type: \"QUERYVAL\"; Path: \"HKLM\\SYSTEM\\CONTROLSET001\\SERVICES\\BAM\\USERSETTINGS\\S-1-5-21-735145574-3570218355-1207367261-1001\"; Key: \"\\DEVICE\\HARDDISKVOLUME2\\WINDOWS\\SYSTEM32\\CONHOST.EXE\"; Value: \"\")","\"encrypt.exe\" (Access type: \"QUERYVAL\"; Path: \"HKLM\\SYSTEM\\CONTROLSET001\\SERVICES\\LANMANWORKSTATION\\PARAMETERS\"; Key: \"RPCCACHETIMEOUT\"; Value: \"\")"],"description_v3":[{"type":"text","value":"\"encrypt.exe\" (Access type: \"QUERYVAL\"; Path: \"HKLM\\SYSTEM\\CONTROLSET001\\SERVICES\\BAM\\USERSETTINGS\\S-1-5-21-735145574-3570218355-1207367261-1001\"; Key: \"\\DEVICE\\HARDDISKVOLUME2\\WINDOWS\\SYSTEM32\\CONHOST.EXE\"; Value: \"\")"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" (Access type: \"QUERYVAL\"; Path: \"HKLM\\SYSTEM\\CONTROLSET001\\SERVICES\\LANMANWORKSTATION\\PARAMETERS\"; Key: \"RPCCACHETIMEOUT\"; Value: \"\")"}],"origin":"Registry Access","attck_id":"T1007","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1007","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Unusual Characteristics","identifier":"string-223","type":2,"relevance":1,"name":"Contains ability to free the memory used by network management functions (API string)","description":"Found reference to API \"NetApiBufferFree\" (Indicator: \"NetApiBufferFree\"; File: \"encrypt.exe\")\n Found reference to API \"NetApiBufferFree\" (Indicator: \"NetApiBufferFree\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")","description_v2":["Found reference to API \"NetApiBufferFree\" (Indicator: \"NetApiBufferFree\"; File: \"encrypt.exe\")","Found reference to API \"NetApiBufferFree\" (Indicator: \"NetApiBufferFree\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"],"description_v3":[{"type":"text","value":"Found reference to API \"NetApiBufferFree\" (Indicator: \"NetApiBufferFree\"; File: \"encrypt.exe\")"},{"type":"linebreak"},{"type":"text","value":"Found reference to API \"NetApiBufferFree\" (Indicator: \"NetApiBufferFree\"; Source: \"00000000-00004700.00000000.238642.00971000.00000002.mdmp\")"}],"origin":"File/Memory","attck_id":"T1016","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1016","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Unusual Characteristics","identifier":"string-47","type":2,"relevance":7,"name":"Found reference to Diagnosis CAB file","description":"\".diagcab\" (Indicator: \".diagcab\")","description_v2":["\".diagcab\" (Indicator: \".diagcab\")"],"description_v3":[{"type":"text","value":"\".diagcab\" (Indicator: \".diagcab\")"}],"origin":"File/Memory","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Unusual Characteristics","identifier":"static-18","type":0,"relevance":10,"name":"Matched Compiler/Packer signature","description":"\"encrypt.exe\" was detected as \"VC8 -> Microsoft Corporation\"","description_v2":["\"encrypt.exe\" was detected as \"VC8 -> Microsoft Corporation\""],"description_v3":[{"type":"text","value":"\"encrypt.exe\" was detected as \"VC8 -> Microsoft Corporation\""}],"origin":"Static Parser","attck_id":"T1027.002","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1027/002","stream_data":null},{"threat_level":0,"threat_level_human":"informative","category":"Unusual Characteristics","identifier":"registry-26","type":3,"relevance":2,"name":"Reads the windows installation language","description":"\"encrypt.exe\" (Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\NLS\\LANGUAGE\"; Key: \"INSTALLLANGUAGEFALLBACK\")","description_v2":["\"encrypt.exe\" (Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\NLS\\LANGUAGE\"; Key: \"INSTALLLANGUAGEFALLBACK\")"],"description_v3":[{"type":"text","value":"\"encrypt.exe\" (Path: \"HKLM\\SYSTEM\\CONTROLSET001\\CONTROL\\NLS\\LANGUAGE\"; Key: \"INSTALLLANGUAGEFALLBACK\")"}],"origin":"Registry Access","attck_id":"T1614.001","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1614/001","stream_data":null},{"threat_level":1,"threat_level_human":"suspicious","category":"Anti-Reverse Engineering","identifier":"static-6","type":0,"relevance":1,"name":"Section contains high entropy","description":"\"encrypt.exe\" has section name .text with entropy \"6.747413825106449\"\n \"encrypt.exe\" has section name .reloc with entropy \"6.586127113320633\"","description_v2":["\"encrypt.exe\" has section name .text with entropy \"6.747413825106449\"","\"encrypt.exe\" has section name .reloc with entropy \"6.586127113320633\""],"description_v3":[{"type":"text","value":"\"encrypt.exe\" has section name .text with entropy \"6.747413825106449\""},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" has section name .reloc with entropy \"6.586127113320633\""}],"origin":"Static Parser","attck_id":"T1027.009","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1027/009","stream_data":null},{"threat_level":1,"threat_level_human":"suspicious","category":"General","identifier":"api-77","type":6,"relevance":10,"name":"Opened the service control manager","description":"\"encrypt.exe\" called \"OpenSCManagerA\" requesting access rights \"SC_MANAGER_ALL_ACCESS\" (0xf003f)\n \"encrypt.exe\" called \"OpenSCManagerW\" requesting access rights \"0X0\"","description_v2":["\"encrypt.exe\" called \"OpenSCManagerA\" requesting access rights \"SC_MANAGER_ALL_ACCESS\" (0xf003f)","\"encrypt.exe\" called \"OpenSCManagerW\" requesting access rights \"0X0\""],"description_v3":[{"type":"text","value":"\"encrypt.exe\" called \"OpenSCManagerA\" requesting access rights \"SC_MANAGER_ALL_ACCESS\" (0xf003f)"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" called \"OpenSCManagerW\" requesting access rights \"0X0\""}],"origin":"API Call","attck_id":"T1569.002","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1569/002","stream_data":null},{"threat_level":1,"threat_level_human":"suspicious","category":"General","identifier":"api-163","type":6,"relevance":3,"name":"Renames files with double extension (often done by ransomware)","description":"$41","description_v2":["\"encrypt.exe\" renamed original file\"C:\\$WINDOWS.~BT\\Sources\\replacementmanifests\\contentdeliverymanager.utilities-replacement.man\" to \"C:\\$WINDOWS.~BT\\Sources\\replacementmanifests\\contentdeliverymanager.utilities-replacement.man.x2anylock\"","\"encrypt.exe\" renamed original file\"C:\\$WINDOWS.~BT\\Sources\\replacementmanifests\\devicedirectory-devicedirectoryclient-desktop-replacement.man\" to \"C:\\$WINDOWS.~BT\\Sources\\replacementmanifests\\devicedirectory-devicedirectoryclient-desktop-replacement.man.x2anylock\"","\"encrypt.exe\" renamed original file\"C:\\$WINDOWS.~BT\\Sources\\replacementmanifests\\gpbase-replacement.man\" to \"C:\\$WINDOWS.~BT\\Sources\\replacementmanifests\\gpbase-replacement.man.x2anylock\"","\"encrypt.exe\" renamed original file\"C:\\$WINDOWS.~BT\\Sources\\replacementmanifests\\microsoft-windows-advertisingid-replacement.man\" to \"C:\\$WINDOWS.~BT\\Sources\\replacementmanifests\\microsoft-windows-advertisingid-replacement.man.x2anylock\"","\"encrypt.exe\" renamed original file\"C:\\$WINDOWS.~BT\\Sources\\replacementmanifests\\microsoft-windows-geolocation-replacement.man\" to \"C:\\$WINDOWS.~BT\\Sources\\replacementmanifests\\microsoft-windows-geolocation-replacement.man.x2anylock\"","\"encrypt.exe\" renamed original file\"C:\\$WINDOWS.~BT\\Sources\\replacementmanifests\\microsoft-windows-ie-internetexplorer-repl-2.man\" to \"C:\\$WINDOWS.~BT\\Sources\\replacementmanifests\\microsoft-windows-ie-internetexplorer-repl-2.man.x2anylock\"","\"encrypt.exe\" renamed original file\"C:\\$WINDOWS.~BT\\Sources\\replacementmanifests\\onecore_speechcommon-rep.man\" to \"C:\\$WINDOWS.~BT\\Sources\\replacementmanifests\\onecore_speechcommon-rep.man.x2anylock\"","\"encrypt.exe\" renamed original file\"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_af-za_75594e685e635a3e\\syncres.dll.mui\" to \"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_af-za_75594e685e635a3e\\syncres.dll.mui.x2anylock\"","\"encrypt.exe\" renamed original file\"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_lb-lu_80b14902c4ca1fab\\syncres.dll.mui\" to \"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_lb-lu_80b14902c4ca1fab\\syncres.dll.mui.x2anylock\"","\"encrypt.exe\" renamed original file\"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_mi-nz_25bb53edb6274a60\\syncres.dll.mui\" to \"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_mi-nz_25bb53edb6274a60\\syncres.dll.mui.x2anylock\"","\"encrypt.exe\" renamed original file\"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_lo-la_77462a6ecae7305c.manifest\" to \"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_lo-la_77462a6ecae7305c.manifest.x2anylock\"","\"encrypt.exe\" renamed original file\"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_lt-lt_7f7d233cc5a51216.manifest\" to \"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_lt-lt_7f7d233cc5a51216.manifest.x2anylock\"","\"encrypt.exe\" renamed original file\"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_lv-lv_804a91c0c5235306.manifest\" to \"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_lv-lv_804a91c0c5235306.manifest.x2anylock\"","\"encrypt.exe\" renamed original file\"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_mi-nz_25bb53edb6274a60.manifest\" to \"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_mi-nz_25bb53edb6274a60.manifest.x2anylock\"","\"encrypt.exe\" renamed original file\"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_mk-mk_1efedf2bba7e24b8.manifest\" to \"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_mk-mk_1efedf2bba7e24b8.manifest.x2anylock\"","\"encrypt.exe\" renamed original file\"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_ml-in_2048ffe9b9aae7ba.manifest\" to \"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_ml-in_2048ffe9b9aae7ba.manifest.x2anylock\"","\"encrypt.exe\" renamed original file\"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_mn-mn_203304f1b9bb8620.manifest\" to \"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_mn-mn_203304f1b9bb8620.manifest.x2anylock\"","\"encrypt.exe\" renamed original file\"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_mr-in_20082061b9db8f60.manifest\" to \"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_mr-in_20082061b9db8f60.manifest.x2anylock\"","\"encrypt.exe\" renamed original file\"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_ms-my_24ddc44fb6c143a2.manifest\" to \"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_ms-my_24ddc44fb6c143a2.manifest.x2anylock\"","\"encrypt.exe\" renamed original file\"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_mt-mt_229b507db83648f0.manifest\" to \"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_mt-mt_229b507db83648f0.manifest.x2anylock\"","\"encrypt.exe\" renamed original file\"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_nb-no_c4447870aba27235.manifest\" to \"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_nb-no_c4447870aba27235.manifest.x2anylock\"","\"encrypt.exe\" renamed original file\"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_ne-np_c4958fdaab71ca8f.manifest\" to \"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_ne-np_c4958fdaab71ca8f.manifest.x2anylock\"","\"encrypt.exe\" renamed original file\"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_nl-nl_c283c3aeacce7c0a.manifest\" to \"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_nl-nl_c283c3aeacce7c0a.manifest.x2anylock\"","\"encrypt.exe\" renamed original file\"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_nso-za_30759cdc1af7521b.manifest\" to \"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_nso-za_30759cdc1af7521b.manifest.x2anylock\"","\"encrypt.exe\" renamed original file\"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_pa-..-pk_a75d382b17f9fbbf.manifest\" to \"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_pa-..-pk_a75d382b17f9fbbf.manifest.x2anylock\""],"description_v3":[{"type":"text","value":"\"encrypt.exe\" renamed original file\"C:\\$WINDOWS.~BT\\Sources\\replacementmanifests\\contentdeliverymanager.utilities-replacement.man\" to \"C:\\$WINDOWS.~BT\\Sources\\replacementmanifests\\contentdeliverymanager.utilities-replacement.man.x2anylock\""},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" renamed original file\"C:\\$WINDOWS.~BT\\Sources\\replacementmanifests\\devicedirectory-devicedirectoryclient-desktop-replacement.man\" to \"C:\\$WINDOWS.~BT\\Sources\\replacementmanifests\\devicedirectory-devicedirectoryclient-desktop-replacement.man.x2anylock\""},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" renamed original file\"C:\\$WINDOWS.~BT\\Sources\\replacementmanifests\\gpbase-replacement.man\" to \"C:\\$WINDOWS.~BT\\Sources\\replacementmanifests\\gpbase-replacement.man.x2anylock\""},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" renamed original file\"C:\\$WINDOWS.~BT\\Sources\\replacementmanifests\\microsoft-windows-advertisingid-replacement.man\" to \"C:\\$WINDOWS.~BT\\Sources\\replacementmanifests\\microsoft-windows-advertisingid-replacement.man.x2anylock\""},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" renamed original file\"C:\\$WINDOWS.~BT\\Sources\\replacementmanifests\\microsoft-windows-geolocation-replacement.man\" to \"C:\\$WINDOWS.~BT\\Sources\\replacementmanifests\\microsoft-windows-geolocation-replacement.man.x2anylock\""},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" renamed original file\"C:\\$WINDOWS.~BT\\Sources\\replacementmanifests\\microsoft-windows-ie-internetexplorer-repl-2.man\" to \"C:\\$WINDOWS.~BT\\Sources\\replacementmanifests\\microsoft-windows-ie-internetexplorer-repl-2.man.x2anylock\""},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" renamed original file\"C:\\$WINDOWS.~BT\\Sources\\replacementmanifests\\onecore_speechcommon-rep.man\" to \"C:\\$WINDOWS.~BT\\Sources\\replacementmanifests\\onecore_speechcommon-rep.man.x2anylock\""},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" renamed original file\"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_af-za_75594e685e635a3e\\syncres.dll.mui\" to \"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_af-za_75594e685e635a3e\\syncres.dll.mui.x2anylock\""},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" renamed original file\"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_lb-lu_80b14902c4ca1fab\\syncres.dll.mui\" to \"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_lb-lu_80b14902c4ca1fab\\syncres.dll.mui.x2anylock\""},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" renamed original file\"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_mi-nz_25bb53edb6274a60\\syncres.dll.mui\" to \"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_mi-nz_25bb53edb6274a60\\syncres.dll.mui.x2anylock\""},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" renamed original file\"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_lo-la_77462a6ecae7305c.manifest\" to \"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_lo-la_77462a6ecae7305c.manifest.x2anylock\""},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" renamed original file\"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_lt-lt_7f7d233cc5a51216.manifest\" to \"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_lt-lt_7f7d233cc5a51216.manifest.x2anylock\""},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" renamed original file\"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_lv-lv_804a91c0c5235306.manifest\" to \"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_lv-lv_804a91c0c5235306.manifest.x2anylock\""},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" renamed original file\"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_mi-nz_25bb53edb6274a60.manifest\" to \"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_mi-nz_25bb53edb6274a60.manifest.x2anylock\""},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" renamed original file\"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_mk-mk_1efedf2bba7e24b8.manifest\" to \"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_mk-mk_1efedf2bba7e24b8.manifest.x2anylock\""},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" renamed original file\"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_ml-in_2048ffe9b9aae7ba.manifest\" to \"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_ml-in_2048ffe9b9aae7ba.manifest.x2anylock\""},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" renamed original file\"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_mn-mn_203304f1b9bb8620.manifest\" to \"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_mn-mn_203304f1b9bb8620.manifest.x2anylock\""},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" renamed original file\"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_mr-in_20082061b9db8f60.manifest\" to \"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_mr-in_20082061b9db8f60.manifest.x2anylock\""},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" renamed original file\"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_ms-my_24ddc44fb6c143a2.manifest\" to \"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_ms-my_24ddc44fb6c143a2.manifest.x2anylock\""},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" renamed original file\"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_mt-mt_229b507db83648f0.manifest\" to \"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_mt-mt_229b507db83648f0.manifest.x2anylock\""},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" renamed original file\"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_nb-no_c4447870aba27235.manifest\" to \"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_nb-no_c4447870aba27235.manifest.x2anylock\""},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" renamed original file\"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_ne-np_c4958fdaab71ca8f.manifest\" to \"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_ne-np_c4958fdaab71ca8f.manifest.x2anylock\""},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" renamed original file\"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_nl-nl_c283c3aeacce7c0a.manifest\" to \"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_nl-nl_c283c3aeacce7c0a.manifest.x2anylock\""},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" renamed original file\"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_nso-za_30759cdc1af7521b.manifest\" to \"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_nso-za_30759cdc1af7521b.manifest.x2anylock\""},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" renamed original file\"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_pa-..-pk_a75d382b17f9fbbf.manifest\" to \"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_pa-..-pk_a75d382b17f9fbbf.manifest.x2anylock\""}],"origin":"API Call","attck_id":"T1036.007","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1036/007","stream_data":null},{"threat_level":1,"threat_level_human":"suspicious","category":"General","identifier":"api-76","type":6,"relevance":10,"name":"Requested access to a system service","description":"$42","description_v2":["\"encrypt.exe\" called \"OpenServiceA\" to access the \"vss\" service","\"encrypt.exe\" called \"OpenServiceA\" to access the \"sql\" service","\"encrypt.exe\" called \"OpenServiceA\" to access the \"svc$\" service","\"encrypt.exe\" called \"OpenServiceA\" to access the \"memtas\" service","\"encrypt.exe\" called \"OpenServiceA\" to access the \"mepocs\" service","\"encrypt.exe\" called \"OpenServiceA\" to access the \"sophos\" service","\"encrypt.exe\" called \"OpenServiceA\" to access the \"veeam\" service","\"encrypt.exe\" called \"OpenServiceA\" to access the \"backup\" service","\"encrypt.exe\" called \"OpenServiceA\" to access the \"GxVss\" service","\"encrypt.exe\" called \"OpenServiceA\" to access the \"GxBlr\" service","\"encrypt.exe\" called \"OpenServiceA\" to access the \"GxFWD\" service","\"encrypt.exe\" called \"OpenServiceA\" to access the \"GxCVD\" service","\"encrypt.exe\" called \"OpenServiceA\" to access the \"GxCIMgr\" service","\"encrypt.exe\" called \"OpenServiceA\" to access the \"DefWatch\" service","\"encrypt.exe\" called \"OpenServiceA\" to access the \"ccEvtMgr\" service","\"encrypt.exe\" called \"OpenServiceA\" to access the \"ccSetMgr\" service","\"encrypt.exe\" called \"OpenServiceA\" to access the \"SavRoam\" service","\"encrypt.exe\" called \"OpenServiceA\" to access the \"RTVscan\" service","\"encrypt.exe\" called \"OpenServiceA\" to access the \"QBFCService\" service","\"encrypt.exe\" called \"OpenServiceA\" to access the \"QBIDPService\" service","\"encrypt.exe\" called \"OpenServiceA\" to access the \"Intuit.QuickBooks.FCS\" service","\"encrypt.exe\" called \"OpenServiceA\" to access the \"QBCFMonitorService\" service","\"encrypt.exe\" called \"OpenServiceA\" to access the \"YooBackup\" service","\"encrypt.exe\" called \"OpenServiceA\" to access the \"YooIT\" service","\"encrypt.exe\" called \"OpenServiceA\" to access the \"zhudongfangyu\" service"],"description_v3":[{"type":"text","value":"\"encrypt.exe\" called \"OpenServiceA\" to access the \"vss\" service"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" called \"OpenServiceA\" to access the \"sql\" service"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" called \"OpenServiceA\" to access the \"svc$\" service"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" called \"OpenServiceA\" to access the \"memtas\" service"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" called \"OpenServiceA\" to access the \"mepocs\" service"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" called \"OpenServiceA\" to access the \"sophos\" service"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" called \"OpenServiceA\" to access the \"veeam\" service"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" called \"OpenServiceA\" to access the \"backup\" service"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" called \"OpenServiceA\" to access the \"GxVss\" service"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" called \"OpenServiceA\" to access the \"GxBlr\" service"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" called \"OpenServiceA\" to access the \"GxFWD\" service"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" called \"OpenServiceA\" to access the \"GxCVD\" service"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" called \"OpenServiceA\" to access the \"GxCIMgr\" service"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" called \"OpenServiceA\" to access the \"DefWatch\" service"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" called \"OpenServiceA\" to access the \"ccEvtMgr\" service"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" called \"OpenServiceA\" to access the \"ccSetMgr\" service"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" called \"OpenServiceA\" to access the \"SavRoam\" service"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" called \"OpenServiceA\" to access the \"RTVscan\" service"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" called \"OpenServiceA\" to access the \"QBFCService\" service"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" called \"OpenServiceA\" to access the \"QBIDPService\" service"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" called \"OpenServiceA\" to access the \"Intuit.QuickBooks.FCS\" service"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" called \"OpenServiceA\" to access the \"QBCFMonitorService\" service"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" called \"OpenServiceA\" to access the \"YooBackup\" service"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" called \"OpenServiceA\" to access the \"YooIT\" service"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" called \"OpenServiceA\" to access the \"zhudongfangyu\" service"}],"origin":"API Call","attck_id":"T1007","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1007","stream_data":null},{"threat_level":1,"threat_level_human":"suspicious","category":"Installation/Persistence","identifier":"binary-1","type":8,"relevance":10,"name":"Drops executable files","description":"$43","description_v2":["\"cdosys.dll.mui.x2anylock\" has type \"DOS executable (COM) maybe with interrupt 22h start instruction 0xb8d3a311 72165320\"- Location: [C:\\found.000\\dir0002.chk\\amd64_microsoft-windows-cdosys.resources_31bf3856ad364e35_10.0.17134.1_it-it_d276206cf5455c73\\cdosys.dll.mui.x2anylock]- [targetUID: 00000000-00004700]","\"syncres.dll.mui.x2anylock\" has type \"DOS executable (COM) start instruction 0xe9b574ef 38d623cd\"- Location: [C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_lv-lv_804a91c0c5235306\\syncres.dll.mui.x2anylock]- [targetUID: 00000000-00004700]","\"aphostres.dll.mui.x2anylock\" has type \"DOS executable (COM) start instruction 0xeb6f0439 1b331c1d\"- Location: [C:\\found.000\\dir0001.chk\\wow64_microsoft-windows-m..aphostres.resources_31bf3856ad364e35_10.0.17134.1_el-gr_637f00823a10b78d\\aphostres.dll.mui.x2anylock]- [targetUID: 00000000-00004700]","\"source-map.debug.js.x2anylock\" has type \"DOS executable (COM) start instruction 0x8c9c7a73 ee3b2db1\"- [targetUID: 00000000-00004700]","\"SFPATWT.INF.x2anylock\" has type \"DOS executable (COM) start instruction 0x8c456bf6 e5b6f6d2\"- Location: [C:\\$WINDOWS.~BT\\Sources\\SFPATWT.INF.x2anylock]- [targetUID: 00000000-00004700]","\"bootmgr.efi.mui.x2anylock\" has type \"DOS executable (COM) maybe with interrupt 22h start instruction 0x8c2550b3 86c2103e\"- Location: [C:\\found.000\\dir0002.chk\\amd64_microsoft-windows-b..nager-efi.resources_31bf3856ad364e35_10.0.17134.1_ro-ro_ab114d5ca4a18d30\\bootmgr.efi.mui.x2anylock]- [targetUID: 00000000-00004700]","\"index.d.ts.x2anylock\" has type \"DOS executable (COM) start instruction 0x8c49d83e cce89f28\"- Location: [C:\\tempdir\\node_modules\\mongoose\\types\\index.d.ts.x2anylock]- [targetUID: 00000000-00004700]","\"README.md.x2anylock\" has type \"DOS executable (COM) start instruction 0xb8d04aae 6f27a800\"- [targetUID: 00000000-00004700]","\"update.ts.x2anylock\" has type \"DOS executable (COM) start instruction 0xb8e80604 96fabed2\"- Location: [C:\\tempdir\\node_modules\\mongodb\\src\\operations\\update.ts.x2anylock]- [targetUID: 00000000-00004700]","\"README.md.x2anylock\" has type \"DOS executable (COM) start instruction 0xb8b38b88 91fd821e\"- Location: [C:\\tempdir\\node_modules\\ansi-colors\\README.md.x2anylock]- [targetUID: 00000000-00004700]","\"README.md.x2anylock\" has type \"DOS executable (COM) start instruction 0xb8053389 1588d401\"- Location: [C:\\tempdir\\node_modules\\kareem\\README.md.x2anylock]- [targetUID: 00000000-00004700]","\"join.js.x2anylock\" has type \"DOS executable (COM) maybe with interrupt 22h start instruction 0x8c7397a5 b18ae6f8\"- Location: [C:\\tempdir\\node_modules\\bluebird\\js\\release\\join.js.x2anylock]- [targetUID: 00000000-00004700]","\"pack-codec.js.x2anylock\" has type \"DOS executable (COM) start instruction 0xeb152696 bfada70a\"- Location: [C:\\tempdir\\node_modules\\js-git\\lib\\pack-codec.js.x2anylock]- [targetUID: 00000000-00004700]","\"layout.js.x2anylock\" has type \"DOS executable (COM) start instruction 0xb8fc799c d6fa3e4f\"- Location: [C:\\tempdir\\node_modules\\blessed\\lib\\widgets\\layout.js.x2anylock]- [targetUID: 00000000-00004700]","\"internal.js.x2anylock\" has type \"DOS executable (COM) start instruction 0xeb24a73e f90dc799\"- Location: [C:\\tempdir\\node_modules\\iconv-lite\\encodings\\internal.js.x2anylock]- [targetUID: 00000000-00004700]","\"process.js.x2anylock\" has type \"DOS executable (COM) start instruction 0x8c209dac 8427ca67\"- Location: [C:\\tempdir\\node_modules\\karma\\lib\\launchers\\process.js.x2anylock]- [targetUID: 00000000-00004700]","\"eventemitter2.d.ts.x2anylock\" has type \"MS-DOS executable\"- Location: [C:\\tempdir\\node_modules\\@pm2\\js-api\\node_modules\\eventemitter2\\eventemitter2.d.ts.x2anylock]- [targetUID: 00000000-00004700]","\"index.js.x2anylock\" has type \"DOS executable (COM) maybe with interrupt 22h start instruction 0x8ce6d394 b4cee2a1\"- Location: [C:\\tempdir\\node_modules\\content-type\\index.js.x2anylock]- [targetUID: 00000000-00004700]","\"web-outgoing.js.x2anylock\" has type \"DOS executable (COM) start instruction 0xb85ab967 46834b3e\"- Location: [C:\\tempdir\\node_modules\\http-proxy\\lib\\http-proxy\\passes\\web-outgoing.js.x2anylock]- [targetUID: 00000000-00004700]","\"ast.js.x2anylock\" has type \"DOS executable (COM) start instruction 0x8c4981e2 f2cd7604\"- Location: [C:\\tempdir\\node_modules\\esutils\\lib\\ast.js.x2anylock]- [targetUID: 00000000-00004700]","\"node.js.x2anylock\" has type \"DOS executable (COM) start instruction 0xeb3f389b f9ee5fb3\"- Location: [C:\\tempdir\\node_modules\\engine.io\\node_modules\\debug\\src\\node.js.x2anylock]- [targetUID: 00000000-00004700]","\"ws-incoming.js.x2anylock\" has type \"DOS executable (COM) start instruction 0xb84efd65 19b93642\"- Location: [C:\\tempdir\\node_modules\\http-proxy\\lib\\http-proxy\\passes\\ws-incoming.js.x2anylock]- [targetUID: 00000000-00004700]","\"tg.js.x2anylock\" has type \"DOS executable (COM) start instruction 0xeb60e09b 9dd12d1f\"- Location: [C:\\tempdir\\node_modules\\moment\\locale\\tg.js.x2anylock]- [targetUID: 00000000-00004700]","\"es-us.js.x2anylock\" has type \"DOS executable (COM) start instruction 0xeb7b9314 f326b662\"- Location: [C:\\tempdir\\node_modules\\moment\\locale\\es-us.js.x2anylock]- [targetUID: 00000000-00004700]","\"compile.js.x2anylock\" has type \"DOS executable (COM) maybe with interrupt 22h start instruction 0xb8f76dca 8e7d1ace\"- Location: [C:\\tempdir\\node_modules\\degenerator\\dist\\compile.js.x2anylock]- [targetUID: 00000000-00004700]","\"CHANGELOG.md.x2anylock\" has type \"DOS executable (COM) start instruction 0x8c5dcc89 89d2ac49\"- [targetUID: 00000000-00004700]","\"write_concern.js.x2anylock\" has type \"DOS executable (COM) start instruction 0xb840d3c2 35561760\"- Location: [C:\\tempdir\\node_modules\\mongodb\\lib\\write_concern.js.x2anylock]- [targetUID: 00000000-00004700]","\"package.json.x2anylock\" has type \"DOS executable (COM) start instruction 0xb86a67ed b52d8ed5\"- [targetUID: 00000000-00004700]","\"bg.js.x2anylock\" has type \"MS-DOS executable MZ for MS-DOS\"- Location: [C:\\tempdir\\node_modules\\moment\\src\\locale\\bg.js.x2anylock]- [targetUID: 00000000-00004700]","\"index.js.x2anylock\" has type \"DOS executable (COM) start instruction 0xb8a007aa d7818c73\"- [targetUID: 00000000-00004700]","\"series.js.x2anylock\" has type \"DOS executable (COM) start instruction 0xb84cdbf2 ff0640cf\"- Location: [C:\\tempdir\\node_modules\\@pm2\\js-api\\node_modules\\async\\series.js.x2anylock]- [targetUID: 00000000-00004700]","\"uk.js.x2anylock\" has type \"DOS executable (COM) start instruction 0xb8c76963 1fd2f5db\"- Location: [C:\\tempdir\\node_modules\\@pm2\\agent\\node_modules\\dayjs\\esm\\locale\\uk.js.x2anylock]- [targetUID: 00000000-00004700]","\"README.md.x2anylock\" has type \"DOS executable (COM) start instruction 0x8c09a2ce 2dd04d0f\"- Location: [C:\\tempdir\\node_modules\\ee-first\\README.md.x2anylock]- [targetUID: 00000000-00004700]","\"wow64_microsoft-windows-m..aphostres.resources_31bf3856ad364e35_10.0.17134.1_fi-fi_02c00a792f1a3e93.manifest.x2anylock\" has type \"DOS executable (COM) start instruction 0xb824939b 7866a175\"- Location: [C:\\found.000\\dir0001.chk\\wow64_microsoft-windows-m..aphostres.resources_31bf3856ad364e35_10.0.17134.1_fi-fi_02c00a792f1a3e93.manifest.x2anylock]- [targetUID: 00000000-00004700]","\"sr.js.x2anylock\" has type \"DOS executable (COM) start instruction 0xb88cfd39 8b2d58dd\"- Location: [C:\\tempdir\\node_modules\\dayjs\\esm\\locale\\sr.js.x2anylock]- [targetUID: 00000000-00004700]","\"amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_gd-gb_4897be7c0d6eef46.manifest.x2anylock\" has type \"DOS executable (COM) maybe with interrupt 22h start instruction 0xb8403dbf 50f259e9\"- Location: [C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_gd-gb_4897be7c0d6eef46.manifest.x2anylock]- [targetUID: 00000000-00004700]","\"wow64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_zh-tw_774f24663cb9f880.manifest.x2anylock\" has type \"DOS executable (COM) start instruction 0xb821ec49 e76dec15\"- Location: [C:\\found.000\\dir0001.chk\\wow64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_zh-tw_774f24663cb9f880.manifest.x2anylock]- [targetUID: 00000000-00004700]","\"timeRange.js.map.x2anylock\" has type \"DOS executable (COM) start instruction 0xb81101dd 97d0dc5e\"- Location: [C:\\tempdir\\node_modules\\pac-resolver\\dist\\timeRange.js.map.x2anylock]- [targetUID: 00000000-00004700]","\"compare.js.x2anylock\" has type \"DOS executable (COM) maybe with interrupt 22h start instruction 0xeb1e3130 16de1f36\"- Location: [C:\\tempdir\\node_modules\\moment\\src\\lib\\moment\\compare.js.x2anylock]- [targetUID: 00000000-00004700]","\"ga.js.x2anylock\" has type \"DOS executable (COM) start instruction 0x8c2fcb11 1627d708\"- Location: [C:\\tempdir\\node_modules\\moment\\dist\\locale\\ga.js.x2anylock]- [targetUID: 00000000-00004700]","\"on_data.js.map.x2anylock\" has type \"DOS executable (COM) start instruction 0xb8824cc8 1cd3a353\"- Location: [C:\\tempdir\\node_modules\\mongodb\\lib\\cmap\\wire_protocol\\on_data.js.map.x2anylock]- [targetUID: 00000000-00004700]","\"tzm-latn.js.x2anylock\" has type \"DOS executable (COM) start instruction 0x8cd52b11 ad37e522\"- Location: [C:\\tempdir\\node_modules\\moment\\locale\\tzm-latn.js.x2anylock]- [targetUID: 00000000-00004700]","\"dispatchRequest.js.x2anylock\" has type \"DOS executable (COM) start instruction 0x8cd8a5cf 44945dca\"- Location: [C:\\tempdir\\node_modules\\axios\\lib\\core\\dispatchRequest.js.x2anylock]- [targetUID: 00000000-00004700]","\"fclone.js.x2anylock\" has type \"DOS executable (COM) start instruction 0xb8206d9b b2717433\"- Location: [C:\\tempdir\\node_modules\\fclone\\dist\\fclone.js.x2anylock]- [targetUID: 00000000-00004700]","\"test.py.x2anylock\" has type \"DOS executable (COM) start instruction 0x8cdc0ed2 ec0bcfe2\"- Location: [C:\\tempdir\\node_modules\\flatted\\python\\test.py.x2anylock]- [targetUID: 00000000-00004700]","\"pt_BR.json.x2anylock\" has type \"DOS executable (COM) start instruction 0xb8737a7d 3632cf43\"- [targetUID: 00000000-00004700]","\"tr.json.x2anylock\" has type \"DOS executable (COM) start instruction 0x8cc8485d c413beec\"- [targetUID: 00000000-00004700]","\"includes.js.x2anylock\" has type \"DOS executable (COM) start instruction 0xeb33414b 645c38cb\"- Location: [C:\\tempdir\\node_modules\\lodash\\includes.js.x2anylock]- [targetUID: 00000000-00004700]","\"tl-ph.js.x2anylock\" has type \"DOS executable (COM) start instruction 0xe9860604 04970760\"- Location: [C:\\tempdir\\node_modules\\moment\\src\\locale\\tl-ph.js.x2anylock]- [targetUID: 00000000-00004700]","\"pa-in.js.x2anylock\" has type \"DOS executable (COM) start instruction 0xeb107c7c 844befc5\"- Location: [C:\\tempdir\\node_modules\\dayjs\\locale\\pa-in.js.x2anylock]- [targetUID: 00000000-00004700]","\"de-ch.js.x2anylock\" has type \"DOS executable (COM) start instruction 0x8c0ebfa1 b6c22196\"- Location: [C:\\tempdir\\node_modules\\dayjs\\esm\\locale\\de-ch.js.x2anylock]- [targetUID: 00000000-00004700]","\"bn.js.x2anylock\" has type \"DOS executable (COM) start instruction 0xeb0954da 38b363d0\"- Location: [C:\\tempdir\\node_modules\\@pm2\\agent\\node_modules\\dayjs\\esm\\locale\\bn.js.x2anylock]- [targetUID: 00000000-00004700]","\"Readme.md.x2anylock\" has type \"DOS executable (COM) start instruction 0xb83e97b6 789a54fc\"- Location: [C:\\tempdir\\node_modules\\pm2-axon\\lib\\configurable\\Readme.md.x2anylock]- [targetUID: 00000000-00004700]","\"zh-hk.js.x2anylock\" has type \"DOS executable (COM) start instruction 0x8c830bdd ae1d15c4\"- Location: [C:\\tempdir\\node_modules\\dayjs\\locale\\zh-hk.js.x2anylock]- [targetUID: 00000000-00004700]","\"pm2-init-amazon.sh.x2anylock\" has type \"DOS executable (COM) start instruction 0xb8012dd2 a7abad1f\"- Location: [C:\\tempdir\\node_modules\\pm2\\lib\\templates\\init-scripts\\pm2-init-amazon.sh.x2anylock]- [targetUID: 00000000-00004700]","\"estimated_document_count.js.x2anylock\" has type \"DOS executable (COM) start instruction 0xeb3ed979 ac25952d\"- Location: [C:\\tempdir\\node_modules\\mongodb\\lib\\operations\\estimated_document_count.js.x2anylock]- [targetUID: 00000000-00004700]","\"index.d.ts.map.x2anylock\" has type \"DOS executable (COM) start instruction 0xeb025253 086521d8\"- Location: [C:\\tempdir\\node_modules\\https-proxy-agent\\dist\\index.d.ts.map.x2anylock]- [targetUID: 00000000-00004700]","\"mn.js.x2anylock\" has type \"DOS executable (COM) start instruction 0xb86af926 fcbdbbb1\"- Location: [C:\\tempdir\\node_modules\\@pm2\\agent\\node_modules\\dayjs\\esm\\locale\\mn.js.x2anylock]- [targetUID: 00000000-00004700]","\"settle.js.x2anylock\" has type \"DOS executable (COM) start instruction 0xb81197eb e10fd925\"- Location: [C:\\tempdir\\node_modules\\bluebird\\js\\release\\settle.js.x2anylock]- [targetUID: 00000000-00004700]","\"mr.js.x2anylock\" has type \"DOS executable (COM) maybe with interrupt 22h start instruction 0xb8252a3b ecde11c5\"- Location: [C:\\tempdir\\node_modules\\dayjs\\esm\\locale\\mr.js.x2anylock]- [targetUID: 00000000-00004700]","\"LICENSE.BSD.x2anylock\" has type \"DOS executable (COM) start instruction 0x8c691a30 d6803259\"- Location: [C:\\tempdir\\node_modules\\esutils\\LICENSE.BSD.x2anylock]- [targetUID: 00000000-00004700]","\"404-13.htm.x2anylock\" has type \"DOS executable (COM) start instruction 0x8c4db14c 40bafd73\"- Location: [C:\\inetpub\\custerr\\en-US\\404-13.htm.x2anylock]- [targetUID: 00000000-00004700]","\"_baseMatchesProperty.js.x2anylock\" has type \"DOS executable (COM) start instruction 0xb80275bf 9fe7b694\"- Location: [C:\\tempdir\\node_modules\\lodash\\_baseMatchesProperty.js.x2anylock]- [targetUID: 00000000-00004700]","\"license.x2anylock\" has type \"DOS executable (COM) start instruction 0xb84c4f3d 61c7d6b6\"- Location: [C:\\tempdir\\node_modules\\locate-path\\license.x2anylock]- [targetUID: 00000000-00004700]","\"package.json.x2anylock\" has type \"DOS executable (COM) start instruction 0xeb168d6d 51eaa933\"- Location: [C:\\tempdir\\node_modules\\path-root\\package.json.x2anylock]- [targetUID: 00000000-00004700]","\"LICENSE.x2anylock\" has type \"DOS executable (COM) start instruction 0xb886ce6e b36f8fdc\"- [targetUID: 00000000-00004700]","\"es.js.x2anylock\" has type \"DOS executable (COM) start instruction 0xeb3ab7c9 9ba85b7a\"- Location: [C:\\tempdir\\node_modules\\@pm2\\agent\\node_modules\\dayjs\\locale\\es.js.x2anylock]- [targetUID: 00000000-00004700]","\"package.json.x2anylock\" has type \"DOS executable (COM) start instruction 0x8c53959f c90b4345\"- Location: [C:\\tempdir\\node_modules\\degenerator\\package.json.x2anylock]- [targetUID: 00000000-00004700]","\"stats.js.map.x2anylock\" has type \"DOS executable (COM) start instruction 0xb8b65555 03de1286\"- Location: [C:\\tempdir\\node_modules\\mongodb\\lib\\operations\\stats.js.map.x2anylock]- [targetUID: 00000000-00004700]","\"package.json.x2anylock\" has type \"DOS executable (COM) start instruction 0x8c614b3e 98c7daaa\"- [targetUID: 00000000-00004700]","\"list_search_indexes_cursor.ts.x2anylock\" has type \"DOS executable (COM) start instruction 0xb8f9395a 522ea849\"- Location: [C:\\tempdir\\node_modules\\mongodb\\src\\cursor\\list_search_indexes_cursor.ts.x2anylock]- [targetUID: 00000000-00004700]","\"adler32.js.x2anylock\" has type \"DOS executable (COM) start instruction 0xb81cad40 89fb633f\"- Location: [C:\\tempdir\\node_modules\\pako\\lib\\zlib\\adler32.js.x2anylock]- [targetUID: 00000000-00004700]","\"utils.d.ts.x2anylock\" has type \"DOS executable (COM) start instruction 0x8c9be0b0 588b4f28\"- [targetUID: 00000000-00004700]","\"rcd-openbsd.tpl.x2anylock\" has type \"DOS executable (COM) start instruction 0xb800b918 2c2f7f33\"- Location: [C:\\tempdir\\node_modules\\pm2\\lib\\templates\\init-scripts\\rcd-openbsd.tpl.x2anylock]- [targetUID: 00000000-00004700]","\"forEach.js.x2anylock\" has type \"DOS executable (COM) start instruction 0xb8dd3394 17dee5b0\"- Location: [C:\\tempdir\\node_modules\\lazy\\test\\forEach.js.x2anylock]- [targetUID: 00000000-00004700]","\"flattenDeep.js.x2anylock\" has type \"DOS executable (COM) start instruction 0x8ccd3b56 8a2ea598\"- Location: [C:\\tempdir\\node_modules\\lodash\\flattenDeep.js.x2anylock]- [targetUID: 00000000-00004700]","\"FUNDING.yml.x2anylock\" has type \"DOS executable (COM) start instruction 0x8ce64e88 42c8d27d\"- Location: [C:\\tempdir\\node_modules\\es-errors\\.github\\FUNDING.yml.x2anylock]- [targetUID: 00000000-00004700]","\"bower.json.x2anylock\" has type \"DOS executable (COM) start instruction 0xb8ebbb86 4bd378ac\"- Location: [C:\\tempdir\\node_modules\\fclone\\bower.json.x2anylock]- [targetUID: 00000000-00004700]","\"isUndefined.js.x2anylock\" has type \"DOS executable (COM) start instruction 0x8c200fbe 2ae38a3f\"- Location: [C:\\tempdir\\node_modules\\lodash\\isUndefined.js.x2anylock]- [targetUID: 00000000-00004700]","\"_asciiWords.js.x2anylock\" has type \"DOS executable (COM) start instruction 0x8c92276f da38ddbe\"- Location: [C:\\tempdir\\node_modules\\lodash\\_asciiWords.js.x2anylock]- [targetUID: 00000000-00004700]","\"mkdirp.x2anylock\" has type \"DOS executable (COM) start instruction 0xeb178808 9c6f0918\"- Location: [C:\\tempdir\\node_modules\\.bin\\mkdirp.x2anylock]- [targetUID: 00000000-00004700]","\"amd64_microsoft-windows-comdlg32.resources_31bf3856ad364e35_10.0.17134.1_fr-fr_72f98d75cc1156cd.manifest.x2anylock\" has type \"DOS executable (COM) start instruction 0xeb72096f 3bdd3dac\"- Location: [C:\\found.000\\dir0002.chk\\amd64_microsoft-windows-comdlg32.resources_31bf3856ad364e35_10.0.17134.1_fr-fr_72f98d75cc1156cd.manifest.x2anylock]- [targetUID: 00000000-00004700]","\"weekdayRange.d.ts.map.x2anylock\" has type \"DOS executable (COM) start instruction 0x8c79aa14 77e107ed\"- Location: [C:\\tempdir\\node_modules\\pac-resolver\\dist\\weekdayRange.d.ts.map.x2anylock]- [targetUID: 00000000-00004700]","\"cleanPositionalOperators.js.x2anylock\" has type \"DOS executable (COM) start instruction 0xb83b09d9 3ac20f0c\"- Location: [C:\\tempdir\\node_modules\\mongoose\\lib\\helpers\\schema\\cleanPositionalOperators.js.x2anylock]- [targetUID: 00000000-00004700]","\"getIterator.js.x2anylock\" has type \"DOS executable (COM) start instruction 0x8ccc58cc ce04de4c\"- Location: [C:\\tempdir\\node_modules\\@pm2\\js-api\\node_modules\\async\\internal\\getIterator.js.x2anylock]- [targetUID: 00000000-00004700]","\"oobe-button-template.html.x2anylock\" has type \"DOS executable (COM) start instruction 0xe997005a c0fcb8ca\"- Location: [C:\\found.000\\dir0003.chk\\oobe-button-template.html.x2anylock]- [targetUID: 00000000-00004700]","\"package.json.x2anylock\" has type \"DOS executable (COM) start instruction 0xb8092e91 eaaeb4b8\"- [targetUID: 00000000-00004700]","\"bower.json.x2anylock\" has type \"DOS executable (COM) start instruction 0x8ccd8b1f e378359b\"- Location: [C:\\tempdir\\node_modules\\@pm2\\js-api\\node_modules\\async\\bower.json.x2anylock]- [targetUID: 00000000-00004700]","\"strLeftBack.js.x2anylock\" has type \"DOS executable (COM) start instruction 0x8cfa736e 825e71b6\"- [targetUID: 00000000-00004700]","\"example.html.x2anylock\" has type \"DOS executable (COM) start instruction 0xb8db759a 1ffae46a\"- Location: [C:\\tempdir\\node_modules\\jsbn\\example.html.x2anylock]- [targetUID: 00000000-00004700]","\"_Set.js.x2anylock\" has type \"DOS executable (COM) start instruction 0xb80c1273 bd5dc435\"- Location: [C:\\tempdir\\node_modules\\lodash\\_Set.js.x2anylock]- [targetUID: 00000000-00004700]","\"chop.js.x2anylock\" has type \"DOS executable (COM) start instruction 0xb8d894f7 76739f66\"- [targetUID: 00000000-00004700]","\"str.js.x2anylock\" has type \"DOS executable (COM) start instruction 0xb821b8b6 50b28ca3\"- Location: [C:\\tempdir\\node_modules\\pm2\\node_modules\\js-yaml\\lib\\type\\str.js.x2anylock]- [targetUID: 00000000-00004700]","\"template.js.x2anylock\" has type \"DOS executable (COM) start instruction 0xb856378f b55569a5\"- Location: [C:\\tempdir\\node_modules\\lodash\\fp\\template.js.x2anylock]- [targetUID: 00000000-00004700]","\"flow.js.x2anylock\" has type \"DOS executable (COM) start instruction 0xb80a1758 b6f06947\"- Location: [C:\\tempdir\\node_modules\\lodash\\fp\\flow.js.x2anylock]- [targetUID: 00000000-00004700]","\"has.js.x2anylock\" has type \"DOS executable (COM) start instruction 0x8cc0fdca a480827c\"- Location: [C:\\tempdir\\node_modules\\lodash\\fp\\has.js.x2anylock]- [targetUID: 00000000-00004700]","\"lte.js.x2anylock\" has type \"DOS executable (COM) start instruction 0x8c3910db cb404f0e\"- Location: [C:\\tempdir\\node_modules\\@pm2\\agent\\node_modules\\semver\\functions\\lte.js.x2anylock]- [targetUID: 00000000-00004700]","\"pm2-runtime.x2anylock\" has type \"DOS executable (COM) start instruction 0xeb419a39 7f1591d2\"- Location: [C:\\tempdir\\node_modules\\pm2\\bin\\pm2-runtime.x2anylock]- [targetUID: 00000000-00004700]","\"allPass.js.x2anylock\" has type \"DOS executable (COM) start instruction 0xeb4f2290 f9ba23eb\"- Location: [C:\\tempdir\\node_modules\\lodash\\fp\\allPass.js.x2anylock]- [targetUID: 00000000-00004700]"],"description_v3":[{"type":"text","value":"\"cdosys.dll.mui.x2anylock\" has type \"DOS executable (COM) maybe with interrupt 22h start instruction 0xb8d3a311 72165320\"- Location: [C:\\found.000\\dir0002.chk\\amd64_microsoft-windows-cdosys.resources_31bf3856ad364e35_10.0.17134.1_it-it_d276206cf5455c73\\cdosys.dll.mui.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"syncres.dll.mui.x2anylock\" has type \"DOS executable (COM) start instruction 0xe9b574ef 38d623cd\"- Location: [C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_lv-lv_804a91c0c5235306\\syncres.dll.mui.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"aphostres.dll.mui.x2anylock\" has type \"DOS executable (COM) start instruction 0xeb6f0439 1b331c1d\"- Location: [C:\\found.000\\dir0001.chk\\wow64_microsoft-windows-m..aphostres.resources_31bf3856ad364e35_10.0.17134.1_el-gr_637f00823a10b78d\\aphostres.dll.mui.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"source-map.debug.js.x2anylock\" has type \"DOS executable (COM) start instruction 0x8c9c7a73 ee3b2db1\"- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"SFPATWT.INF.x2anylock\" has type \"DOS executable (COM) start instruction 0x8c456bf6 e5b6f6d2\"- Location: [C:\\$WINDOWS.~BT\\Sources\\SFPATWT.INF.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"bootmgr.efi.mui.x2anylock\" has type \"DOS executable (COM) maybe with interrupt 22h start instruction 0x8c2550b3 86c2103e\"- Location: [C:\\found.000\\dir0002.chk\\amd64_microsoft-windows-b..nager-efi.resources_31bf3856ad364e35_10.0.17134.1_ro-ro_ab114d5ca4a18d30\\bootmgr.efi.mui.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"index.d.ts.x2anylock\" has type \"DOS executable (COM) start instruction 0x8c49d83e cce89f28\"- Location: [C:\\tempdir\\node_modules\\mongoose\\types\\index.d.ts.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"README.md.x2anylock\" has type \"DOS executable (COM) start instruction 0xb8d04aae 6f27a800\"- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"update.ts.x2anylock\" has type \"DOS executable (COM) start instruction 0xb8e80604 96fabed2\"- Location: [C:\\tempdir\\node_modules\\mongodb\\src\\operations\\update.ts.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"README.md.x2anylock\" has type \"DOS executable (COM) start instruction 0xb8b38b88 91fd821e\"- Location: [C:\\tempdir\\node_modules\\ansi-colors\\README.md.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"README.md.x2anylock\" has type \"DOS executable (COM) start instruction 0xb8053389 1588d401\"- Location: [C:\\tempdir\\node_modules\\kareem\\README.md.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"join.js.x2anylock\" has type \"DOS executable (COM) maybe with interrupt 22h start instruction 0x8c7397a5 b18ae6f8\"- Location: [C:\\tempdir\\node_modules\\bluebird\\js\\release\\join.js.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"pack-codec.js.x2anylock\" has type \"DOS executable (COM) start instruction 0xeb152696 bfada70a\"- Location: [C:\\tempdir\\node_modules\\js-git\\lib\\pack-codec.js.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"layout.js.x2anylock\" has type \"DOS executable (COM) start instruction 0xb8fc799c d6fa3e4f\"- Location: [C:\\tempdir\\node_modules\\blessed\\lib\\widgets\\layout.js.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"internal.js.x2anylock\" has type \"DOS executable (COM) start instruction 0xeb24a73e f90dc799\"- Location: [C:\\tempdir\\node_modules\\iconv-lite\\encodings\\internal.js.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"process.js.x2anylock\" has type \"DOS executable (COM) start instruction 0x8c209dac 8427ca67\"- Location: [C:\\tempdir\\node_modules\\karma\\lib\\launchers\\process.js.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"eventemitter2.d.ts.x2anylock\" has type \"MS-DOS executable\"- Location: [C:\\tempdir\\node_modules\\@pm2\\js-api\\node_modules\\eventemitter2\\eventemitter2.d.ts.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"index.js.x2anylock\" has type \"DOS executable (COM) maybe with interrupt 22h start instruction 0x8ce6d394 b4cee2a1\"- Location: [C:\\tempdir\\node_modules\\content-type\\index.js.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"web-outgoing.js.x2anylock\" has type \"DOS executable (COM) start instruction 0xb85ab967 46834b3e\"- Location: [C:\\tempdir\\node_modules\\http-proxy\\lib\\http-proxy\\passes\\web-outgoing.js.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"ast.js.x2anylock\" has type \"DOS executable (COM) start instruction 0x8c4981e2 f2cd7604\"- Location: [C:\\tempdir\\node_modules\\esutils\\lib\\ast.js.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"node.js.x2anylock\" has type \"DOS executable (COM) start instruction 0xeb3f389b f9ee5fb3\"- Location: [C:\\tempdir\\node_modules\\engine.io\\node_modules\\debug\\src\\node.js.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"ws-incoming.js.x2anylock\" has type \"DOS executable (COM) start instruction 0xb84efd65 19b93642\"- Location: [C:\\tempdir\\node_modules\\http-proxy\\lib\\http-proxy\\passes\\ws-incoming.js.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"tg.js.x2anylock\" has type \"DOS executable (COM) start instruction 0xeb60e09b 9dd12d1f\"- Location: [C:\\tempdir\\node_modules\\moment\\locale\\tg.js.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"es-us.js.x2anylock\" has type \"DOS executable (COM) start instruction 0xeb7b9314 f326b662\"- Location: [C:\\tempdir\\node_modules\\moment\\locale\\es-us.js.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"compile.js.x2anylock\" has type \"DOS executable (COM) maybe with interrupt 22h start instruction 0xb8f76dca 8e7d1ace\"- Location: [C:\\tempdir\\node_modules\\degenerator\\dist\\compile.js.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"CHANGELOG.md.x2anylock\" has type \"DOS executable (COM) start instruction 0x8c5dcc89 89d2ac49\"- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"write_concern.js.x2anylock\" has type \"DOS executable (COM) start instruction 0xb840d3c2 35561760\"- Location: [C:\\tempdir\\node_modules\\mongodb\\lib\\write_concern.js.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"package.json.x2anylock\" has type \"DOS executable (COM) start instruction 0xb86a67ed b52d8ed5\"- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"bg.js.x2anylock\" has type \"MS-DOS executable MZ for MS-DOS\"- Location: [C:\\tempdir\\node_modules\\moment\\src\\locale\\bg.js.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"index.js.x2anylock\" has type \"DOS executable (COM) start instruction 0xb8a007aa d7818c73\"- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"series.js.x2anylock\" has type \"DOS executable (COM) start instruction 0xb84cdbf2 ff0640cf\"- Location: [C:\\tempdir\\node_modules\\@pm2\\js-api\\node_modules\\async\\series.js.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"uk.js.x2anylock\" has type \"DOS executable (COM) start instruction 0xb8c76963 1fd2f5db\"- Location: [C:\\tempdir\\node_modules\\@pm2\\agent\\node_modules\\dayjs\\esm\\locale\\uk.js.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"README.md.x2anylock\" has type \"DOS executable (COM) start instruction 0x8c09a2ce 2dd04d0f\"- Location: [C:\\tempdir\\node_modules\\ee-first\\README.md.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"wow64_microsoft-windows-m..aphostres.resources_31bf3856ad364e35_10.0.17134.1_fi-fi_02c00a792f1a3e93.manifest.x2anylock\" has type \"DOS executable (COM) start instruction 0xb824939b 7866a175\"- Location: [C:\\found.000\\dir0001.chk\\wow64_microsoft-windows-m..aphostres.resources_31bf3856ad364e35_10.0.17134.1_fi-fi_02c00a792f1a3e93.manifest.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"sr.js.x2anylock\" has type \"DOS executable (COM) start instruction 0xb88cfd39 8b2d58dd\"- Location: [C:\\tempdir\\node_modules\\dayjs\\esm\\locale\\sr.js.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_gd-gb_4897be7c0d6eef46.manifest.x2anylock\" has type \"DOS executable (COM) maybe with interrupt 22h start instruction 0xb8403dbf 50f259e9\"- Location: [C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_gd-gb_4897be7c0d6eef46.manifest.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"wow64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_zh-tw_774f24663cb9f880.manifest.x2anylock\" has type \"DOS executable (COM) start instruction 0xb821ec49 e76dec15\"- Location: [C:\\found.000\\dir0001.chk\\wow64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_zh-tw_774f24663cb9f880.manifest.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"timeRange.js.map.x2anylock\" has type \"DOS executable (COM) start instruction 0xb81101dd 97d0dc5e\"- Location: [C:\\tempdir\\node_modules\\pac-resolver\\dist\\timeRange.js.map.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"compare.js.x2anylock\" has type \"DOS executable (COM) maybe with interrupt 22h start instruction 0xeb1e3130 16de1f36\"- Location: [C:\\tempdir\\node_modules\\moment\\src\\lib\\moment\\compare.js.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"ga.js.x2anylock\" has type \"DOS executable (COM) start instruction 0x8c2fcb11 1627d708\"- Location: [C:\\tempdir\\node_modules\\moment\\dist\\locale\\ga.js.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"on_data.js.map.x2anylock\" has type \"DOS executable (COM) start instruction 0xb8824cc8 1cd3a353\"- Location: [C:\\tempdir\\node_modules\\mongodb\\lib\\cmap\\wire_protocol\\on_data.js.map.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"tzm-latn.js.x2anylock\" has type \"DOS executable (COM) start instruction 0x8cd52b11 ad37e522\"- Location: [C:\\tempdir\\node_modules\\moment\\locale\\tzm-latn.js.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"dispatchRequest.js.x2anylock\" has type \"DOS executable (COM) start instruction 0x8cd8a5cf 44945dca\"- Location: [C:\\tempdir\\node_modules\\axios\\lib\\core\\dispatchRequest.js.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"fclone.js.x2anylock\" has type \"DOS executable (COM) start instruction 0xb8206d9b b2717433\"- Location: [C:\\tempdir\\node_modules\\fclone\\dist\\fclone.js.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"test.py.x2anylock\" has type \"DOS executable (COM) start instruction 0x8cdc0ed2 ec0bcfe2\"- Location: [C:\\tempdir\\node_modules\\flatted\\python\\test.py.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"pt_BR.json.x2anylock\" has type \"DOS executable (COM) start instruction 0xb8737a7d 3632cf43\"- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"tr.json.x2anylock\" has type \"DOS executable (COM) start instruction 0x8cc8485d c413beec\"- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"includes.js.x2anylock\" has type \"DOS executable (COM) start instruction 0xeb33414b 645c38cb\"- Location: [C:\\tempdir\\node_modules\\lodash\\includes.js.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"tl-ph.js.x2anylock\" has type \"DOS executable (COM) start instruction 0xe9860604 04970760\"- Location: [C:\\tempdir\\node_modules\\moment\\src\\locale\\tl-ph.js.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"pa-in.js.x2anylock\" has type \"DOS executable (COM) start instruction 0xeb107c7c 844befc5\"- Location: [C:\\tempdir\\node_modules\\dayjs\\locale\\pa-in.js.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"de-ch.js.x2anylock\" has type \"DOS executable (COM) start instruction 0x8c0ebfa1 b6c22196\"- Location: [C:\\tempdir\\node_modules\\dayjs\\esm\\locale\\de-ch.js.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"bn.js.x2anylock\" has type \"DOS executable (COM) start instruction 0xeb0954da 38b363d0\"- Location: [C:\\tempdir\\node_modules\\@pm2\\agent\\node_modules\\dayjs\\esm\\locale\\bn.js.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"Readme.md.x2anylock\" has type \"DOS executable (COM) start instruction 0xb83e97b6 789a54fc\"- Location: [C:\\tempdir\\node_modules\\pm2-axon\\lib\\configurable\\Readme.md.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"zh-hk.js.x2anylock\" has type \"DOS executable (COM) start instruction 0x8c830bdd ae1d15c4\"- Location: [C:\\tempdir\\node_modules\\dayjs\\locale\\zh-hk.js.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"pm2-init-amazon.sh.x2anylock\" has type \"DOS executable (COM) start instruction 0xb8012dd2 a7abad1f\"- Location: [C:\\tempdir\\node_modules\\pm2\\lib\\templates\\init-scripts\\pm2-init-amazon.sh.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"estimated_document_count.js.x2anylock\" has type \"DOS executable (COM) start instruction 0xeb3ed979 ac25952d\"- Location: [C:\\tempdir\\node_modules\\mongodb\\lib\\operations\\estimated_document_count.js.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"index.d.ts.map.x2anylock\" has type \"DOS executable (COM) start instruction 0xeb025253 086521d8\"- Location: [C:\\tempdir\\node_modules\\https-proxy-agent\\dist\\index.d.ts.map.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"mn.js.x2anylock\" has type \"DOS executable (COM) start instruction 0xb86af926 fcbdbbb1\"- Location: [C:\\tempdir\\node_modules\\@pm2\\agent\\node_modules\\dayjs\\esm\\locale\\mn.js.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"settle.js.x2anylock\" has type \"DOS executable (COM) start instruction 0xb81197eb e10fd925\"- Location: [C:\\tempdir\\node_modules\\bluebird\\js\\release\\settle.js.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"mr.js.x2anylock\" has type \"DOS executable (COM) maybe with interrupt 22h start instruction 0xb8252a3b ecde11c5\"- Location: [C:\\tempdir\\node_modules\\dayjs\\esm\\locale\\mr.js.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"LICENSE.BSD.x2anylock\" has type \"DOS executable (COM) start instruction 0x8c691a30 d6803259\"- Location: [C:\\tempdir\\node_modules\\esutils\\LICENSE.BSD.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"404-13.htm.x2anylock\" has type \"DOS executable (COM) start instruction 0x8c4db14c 40bafd73\"- Location: [C:\\inetpub\\custerr\\en-US\\404-13.htm.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"_baseMatchesProperty.js.x2anylock\" has type \"DOS executable (COM) start instruction 0xb80275bf 9fe7b694\"- Location: [C:\\tempdir\\node_modules\\lodash\\_baseMatchesProperty.js.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"license.x2anylock\" has type \"DOS executable (COM) start instruction 0xb84c4f3d 61c7d6b6\"- Location: [C:\\tempdir\\node_modules\\locate-path\\license.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"package.json.x2anylock\" has type \"DOS executable (COM) start instruction 0xeb168d6d 51eaa933\"- Location: [C:\\tempdir\\node_modules\\path-root\\package.json.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"LICENSE.x2anylock\" has type \"DOS executable (COM) start instruction 0xb886ce6e b36f8fdc\"- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"es.js.x2anylock\" has type \"DOS executable (COM) start instruction 0xeb3ab7c9 9ba85b7a\"- Location: [C:\\tempdir\\node_modules\\@pm2\\agent\\node_modules\\dayjs\\locale\\es.js.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"package.json.x2anylock\" has type \"DOS executable (COM) start instruction 0x8c53959f c90b4345\"- Location: [C:\\tempdir\\node_modules\\degenerator\\package.json.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"stats.js.map.x2anylock\" has type \"DOS executable (COM) start instruction 0xb8b65555 03de1286\"- Location: [C:\\tempdir\\node_modules\\mongodb\\lib\\operations\\stats.js.map.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"package.json.x2anylock\" has type \"DOS executable (COM) start instruction 0x8c614b3e 98c7daaa\"- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"list_search_indexes_cursor.ts.x2anylock\" has type \"DOS executable (COM) start instruction 0xb8f9395a 522ea849\"- Location: [C:\\tempdir\\node_modules\\mongodb\\src\\cursor\\list_search_indexes_cursor.ts.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"adler32.js.x2anylock\" has type \"DOS executable (COM) start instruction 0xb81cad40 89fb633f\"- Location: [C:\\tempdir\\node_modules\\pako\\lib\\zlib\\adler32.js.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"utils.d.ts.x2anylock\" has type \"DOS executable (COM) start instruction 0x8c9be0b0 588b4f28\"- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"rcd-openbsd.tpl.x2anylock\" has type \"DOS executable (COM) start instruction 0xb800b918 2c2f7f33\"- Location: [C:\\tempdir\\node_modules\\pm2\\lib\\templates\\init-scripts\\rcd-openbsd.tpl.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"forEach.js.x2anylock\" has type \"DOS executable (COM) start instruction 0xb8dd3394 17dee5b0\"- Location: [C:\\tempdir\\node_modules\\lazy\\test\\forEach.js.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"flattenDeep.js.x2anylock\" has type \"DOS executable (COM) start instruction 0x8ccd3b56 8a2ea598\"- Location: [C:\\tempdir\\node_modules\\lodash\\flattenDeep.js.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"FUNDING.yml.x2anylock\" has type \"DOS executable (COM) start instruction 0x8ce64e88 42c8d27d\"- Location: [C:\\tempdir\\node_modules\\es-errors\\.github\\FUNDING.yml.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"bower.json.x2anylock\" has type \"DOS executable (COM) start instruction 0xb8ebbb86 4bd378ac\"- Location: [C:\\tempdir\\node_modules\\fclone\\bower.json.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"isUndefined.js.x2anylock\" has type \"DOS executable (COM) start instruction 0x8c200fbe 2ae38a3f\"- Location: [C:\\tempdir\\node_modules\\lodash\\isUndefined.js.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"_asciiWords.js.x2anylock\" has type \"DOS executable (COM) start instruction 0x8c92276f da38ddbe\"- Location: [C:\\tempdir\\node_modules\\lodash\\_asciiWords.js.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"mkdirp.x2anylock\" has type \"DOS executable (COM) start instruction 0xeb178808 9c6f0918\"- Location: [C:\\tempdir\\node_modules\\.bin\\mkdirp.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"amd64_microsoft-windows-comdlg32.resources_31bf3856ad364e35_10.0.17134.1_fr-fr_72f98d75cc1156cd.manifest.x2anylock\" has type \"DOS executable (COM) start instruction 0xeb72096f 3bdd3dac\"- Location: [C:\\found.000\\dir0002.chk\\amd64_microsoft-windows-comdlg32.resources_31bf3856ad364e35_10.0.17134.1_fr-fr_72f98d75cc1156cd.manifest.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"weekdayRange.d.ts.map.x2anylock\" has type \"DOS executable (COM) start instruction 0x8c79aa14 77e107ed\"- Location: [C:\\tempdir\\node_modules\\pac-resolver\\dist\\weekdayRange.d.ts.map.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"cleanPositionalOperators.js.x2anylock\" has type \"DOS executable (COM) start instruction 0xb83b09d9 3ac20f0c\"- Location: [C:\\tempdir\\node_modules\\mongoose\\lib\\helpers\\schema\\cleanPositionalOperators.js.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"getIterator.js.x2anylock\" has type \"DOS executable (COM) start instruction 0x8ccc58cc ce04de4c\"- Location: [C:\\tempdir\\node_modules\\@pm2\\js-api\\node_modules\\async\\internal\\getIterator.js.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"oobe-button-template.html.x2anylock\" has type \"DOS executable (COM) start instruction 0xe997005a c0fcb8ca\"- Location: [C:\\found.000\\dir0003.chk\\oobe-button-template.html.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"package.json.x2anylock\" has type \"DOS executable (COM) start instruction 0xb8092e91 eaaeb4b8\"- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"bower.json.x2anylock\" has type \"DOS executable (COM) start instruction 0x8ccd8b1f e378359b\"- Location: [C:\\tempdir\\node_modules\\@pm2\\js-api\\node_modules\\async\\bower.json.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"strLeftBack.js.x2anylock\" has type \"DOS executable (COM) start instruction 0x8cfa736e 825e71b6\"- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"example.html.x2anylock\" has type \"DOS executable (COM) start instruction 0xb8db759a 1ffae46a\"- Location: [C:\\tempdir\\node_modules\\jsbn\\example.html.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"_Set.js.x2anylock\" has type \"DOS executable (COM) start instruction 0xb80c1273 bd5dc435\"- Location: [C:\\tempdir\\node_modules\\lodash\\_Set.js.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"chop.js.x2anylock\" has type \"DOS executable (COM) start instruction 0xb8d894f7 76739f66\"- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"str.js.x2anylock\" has type \"DOS executable (COM) start instruction 0xb821b8b6 50b28ca3\"- Location: [C:\\tempdir\\node_modules\\pm2\\node_modules\\js-yaml\\lib\\type\\str.js.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"template.js.x2anylock\" has type \"DOS executable (COM) start instruction 0xb856378f b55569a5\"- Location: [C:\\tempdir\\node_modules\\lodash\\fp\\template.js.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"flow.js.x2anylock\" has type \"DOS executable (COM) start instruction 0xb80a1758 b6f06947\"- Location: [C:\\tempdir\\node_modules\\lodash\\fp\\flow.js.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"has.js.x2anylock\" has type \"DOS executable (COM) start instruction 0x8cc0fdca a480827c\"- Location: [C:\\tempdir\\node_modules\\lodash\\fp\\has.js.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"lte.js.x2anylock\" has type \"DOS executable (COM) start instruction 0x8c3910db cb404f0e\"- Location: [C:\\tempdir\\node_modules\\@pm2\\agent\\node_modules\\semver\\functions\\lte.js.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"pm2-runtime.x2anylock\" has type \"DOS executable (COM) start instruction 0xeb419a39 7f1591d2\"- Location: [C:\\tempdir\\node_modules\\pm2\\bin\\pm2-runtime.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"allPass.js.x2anylock\" has type \"DOS executable (COM) start instruction 0xeb4f2290 f9ba23eb\"- Location: [C:\\tempdir\\node_modules\\lodash\\fp\\allPass.js.x2anylock]- [targetUID: 00000000-00004700]"}],"origin":"Binary File","attck_id":"T1105","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1105","stream_data":null},{"threat_level":1,"threat_level_human":"suspicious","category":"Network Related","identifier":"api-291","type":6,"relevance":2,"name":"Attempts to call internet-related API for network communication","description":"\"encrypt.exe\" called \"NtConnectPort\" with parameters (UID: 00000000-00004700)\n \"encrypt.exe\" called \"NtRequestWaitReplyPort\" with parameters (UID: 00000000-00004700)\n \"encrypt.exe\" called \"NtAlpcConnectPortEx\" with parameters (UID: 00000000-00004700)\n \"encrypt.exe\" called \"NtAlpcSendWaitReceivePort\" with parameters (UID: 00000000-00004700)","description_v2":["\"encrypt.exe\" called \"NtConnectPort\" with parameters (UID: 00000000-00004700)","\"encrypt.exe\" called \"NtRequestWaitReplyPort\" with parameters (UID: 00000000-00004700)","\"encrypt.exe\" called \"NtAlpcConnectPortEx\" with parameters (UID: 00000000-00004700)","\"encrypt.exe\" called \"NtAlpcSendWaitReceivePort\" with parameters (UID: 00000000-00004700)"],"description_v3":[{"type":"text","value":"\"encrypt.exe\" called \"NtConnectPort\" with parameters (UID: 00000000-00004700)"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" called \"NtRequestWaitReplyPort\" with parameters (UID: 00000000-00004700)"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" called \"NtAlpcConnectPortEx\" with parameters (UID: 00000000-00004700)"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" called \"NtAlpcSendWaitReceivePort\" with parameters (UID: 00000000-00004700)"}],"origin":"API Call","attck_id":"T1071.001","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1071/001","stream_data":null},{"threat_level":1,"threat_level_human":"suspicious","category":"Pattern Matching","identifier":"yara-155","type":13,"relevance":3,"name":"YARA signature match – cryptographic algorithms","description":"YARA signature matched on AES instruction used in file \"sample.bin\"\n YARA signature matched on Chacha20 instruction used in file \"sample.bin\"","description_v2":["YARA signature matched on AES instruction used in file \"sample.bin\"","YARA signature matched on Chacha20 instruction used in file \"sample.bin\""],"description_v3":[{"type":"text","value":"YARA signature matched on AES instruction used in file \"sample.bin\""},{"type":"linebreak"},{"type":"text","value":"YARA signature matched on Chacha20 instruction used in file \"sample.bin\""}],"origin":"YARA Signature","attck_id":"T1027.013","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1027/013","stream_data":null},{"threat_level":1,"threat_level_human":"suspicious","category":"Pattern Matching","identifier":"yara-553","type":13,"relevance":9,"name":"Yara Signature Match - Indicators","description":"YARA signature \"INDICATOR_SUSPICOUS_EXE_References_VEEAM\" matched file \"sample.bin\" as \"Detects executables containing many references to VEEAM. Observed in ransomware\" (Author: ditekSHen)","description_v2":["YARA signature \"INDICATOR_SUSPICOUS_EXE_References_VEEAM\" matched file \"sample.bin\" as \"Detects executables containing many references to VEEAM. Observed in ransomware\" (Author: ditekSHen)"],"description_v3":[{"type":"text","value":"YARA signature \"INDICATOR_SUSPICOUS_EXE_References_VEEAM\" matched file \"sample.bin\" as \"Detects executables containing many references to VEEAM. Observed in ransomware\" (Author: ditekSHen)"}],"origin":"YARA Signature","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":1,"threat_level_human":"suspicious","category":"Ransomware/Banking","identifier":"binary-10","type":8,"relevance":5,"name":"The input sample dropped very many files","description":"The input sample dropped 13147 files (often an indicator for ransomware)","description_v2":["The input sample dropped 13147 files (often an indicator for ransomware)"],"description_v3":[{"type":"text","value":"The input sample dropped 13147 files (often an indicator for ransomware)"}],"origin":"Binary File","attck_id":"T1491.001","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1491/001","stream_data":null},{"threat_level":1,"threat_level_human":"suspicious","category":"Spyware/Information Retrieval","identifier":"api-104","type":6,"relevance":5,"name":"Calls an API typically used to enumerate process encountered in a system snapshot","description":"\"encrypt.exe\" called \"Process32FirstW with parameter [System Process]\" (UID: 00000000-00004700)\n \"encrypt.exe\" called \"Process32NextW with parameter System\" (UID: 00000000-00004700)\n \"encrypt.exe\" called \"Process32NextW with parameter smss.exe\" (UID: 00000000-00004700)\n \"encrypt.exe\" called \"Process32NextW with parameter csrss.exe\" (UID: 00000000-00004700)\n \"encrypt.exe\" called \"Process32NextW with parameter wininit.exe\" (UID: 00000000-00004700)\n \"encrypt.exe\" called \"Process32NextW with parameter winlogon.exe\" (UID: 00000000-00004700)\n \"encrypt.exe\" called \"Process32NextW with parameter services.exe\" (UID: 00000000-00004700)\n \"encrypt.exe\" called \"Process32NextW with parameter lsass.exe\" (UID: 00000000-00004700)\n \"encrypt.exe\" called \"Process32NextW with parameter svchost.exe\" (UID: 00000000-00004700)\n \"encrypt.exe\" called \"Process32NextW with parameter fontdrvhost.exe\" (UID: 00000000-00004700)\n \"encrypt.exe\" called \"Process32NextW with parameter dwm.exe\" (UID: 00000000-00004700)","description_v2":["\"encrypt.exe\" called \"Process32FirstW with parameter [System Process]\" (UID: 00000000-00004700)","\"encrypt.exe\" called \"Process32NextW with parameter System\" (UID: 00000000-00004700)","\"encrypt.exe\" called \"Process32NextW with parameter smss.exe\" (UID: 00000000-00004700)","\"encrypt.exe\" called \"Process32NextW with parameter csrss.exe\" (UID: 00000000-00004700)","\"encrypt.exe\" called \"Process32NextW with parameter wininit.exe\" (UID: 00000000-00004700)","\"encrypt.exe\" called \"Process32NextW with parameter winlogon.exe\" (UID: 00000000-00004700)","\"encrypt.exe\" called \"Process32NextW with parameter services.exe\" (UID: 00000000-00004700)","\"encrypt.exe\" called \"Process32NextW with parameter lsass.exe\" (UID: 00000000-00004700)","\"encrypt.exe\" called \"Process32NextW with parameter svchost.exe\" (UID: 00000000-00004700)","\"encrypt.exe\" called \"Process32NextW with parameter fontdrvhost.exe\" (UID: 00000000-00004700)","\"encrypt.exe\" called \"Process32NextW with parameter dwm.exe\" (UID: 00000000-00004700)"],"description_v3":[{"type":"text","value":"\"encrypt.exe\" called \"Process32FirstW with parameter [System Process]\" (UID: 00000000-00004700)"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" called \"Process32NextW with parameter System\" (UID: 00000000-00004700)"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" called \"Process32NextW with parameter smss.exe\" (UID: 00000000-00004700)"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" called \"Process32NextW with parameter csrss.exe\" (UID: 00000000-00004700)"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" called \"Process32NextW with parameter wininit.exe\" (UID: 00000000-00004700)"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" called \"Process32NextW with parameter winlogon.exe\" (UID: 00000000-00004700)"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" called \"Process32NextW with parameter services.exe\" (UID: 00000000-00004700)"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" called \"Process32NextW with parameter lsass.exe\" (UID: 00000000-00004700)"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" called \"Process32NextW with parameter svchost.exe\" (UID: 00000000-00004700)"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" called \"Process32NextW with parameter fontdrvhost.exe\" (UID: 00000000-00004700)"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" called \"Process32NextW with parameter dwm.exe\" (UID: 00000000-00004700)"}],"origin":"API Call","attck_id":"T1057","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1057","stream_data":null},{"threat_level":1,"threat_level_human":"suspicious","category":"Spyware/Information Retrieval","identifier":"api-174","type":6,"relevance":5,"name":"Calls an API typically used to enumerate services","description":"$44","description_v2":["\"encrypt.exe\" called \"EnumServicesStatusExW\" with parameters {\"hSCManager\": \"2ea9678\"","\"dwServiceType\": \"48\"","\"dwServiceState\": \"1\"}","\"encrypt.exe\" called \"EnumServicesStatusExW\" with parameters {\"hSCManager\": \"2ea9880\"","\"dwServiceType\": \"48\"","\"dwServiceState\": \"1\"}","\"encrypt.exe\" called \"EnumServicesStatusExW\" with parameters {\"hSCManager\": \"2ea96a0\"","\"dwServiceType\": \"48\"","\"dwServiceState\": \"1\"}","\"encrypt.exe\" called \"EnumServicesStatusExW\" with parameters {\"hSCManager\": \"2e853e0\"","\"dwServiceType\": \"48\"","\"dwServiceState\": \"1\"}","\"encrypt.exe\" called \"EnumServicesStatusExW\" (UID: 00000000-00004700)","\"encrypt.exe\" called \"EnumServicesStatusExW\" with parameters {\"hSCManager\": \"2e854f8\"","\"dwServiceType\": \"48\"","\"dwServiceState\": \"1\"}","\"encrypt.exe\" called \"EnumServicesStatusExW\" with parameters {\"hSCManager\": \"2ea91f0\"","\"dwServiceType\": \"48\"","\"dwServiceState\": \"1\"}","\"encrypt.exe\" called \"EnumServicesStatusExW\" with parameters {\"hSCManager\": \"2e854a8\"","\"dwServiceType\": \"48\"","\"dwServiceState\": \"1\"}","\"encrypt.exe\" called \"EnumServicesStatusExW\" with parameters {\"hSCManager\": \"2ea91a0\"","\"dwServiceType\": \"48\"","\"dwServiceState\": \"1\"}","\"encrypt.exe\" called \"EnumServicesStatusExW\" with parameters {\"hSCManager\": \"2ea9470\"","\"dwServiceType\": \"48\"","\"dwServiceState\": \"1\"}","\"encrypt.exe\" called \"EnumServicesStatusExW\" with parameters {\"hSCManager\": \"2ea9380\"","\"dwServiceType\": \"48\"","\"dwServiceState\": \"1\"}"],"description_v3":[{"type":"text","value":"\"encrypt.exe\" called \"EnumServicesStatusExW\" with parameters {\"hSCManager\": \"2ea9678\""},{"type":"linebreak"},{"type":"text","value":"\"dwServiceType\": \"48\""},{"type":"linebreak"},{"type":"text","value":"\"dwServiceState\": \"1\"}"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" called \"EnumServicesStatusExW\" with parameters {\"hSCManager\": \"2ea9880\""},{"type":"linebreak"},{"type":"text","value":"\"dwServiceType\": \"48\""},{"type":"linebreak"},{"type":"text","value":"\"dwServiceState\": \"1\"}"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" called \"EnumServicesStatusExW\" with parameters {\"hSCManager\": \"2ea96a0\""},{"type":"linebreak"},{"type":"text","value":"\"dwServiceType\": \"48\""},{"type":"linebreak"},{"type":"text","value":"\"dwServiceState\": \"1\"}"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" called \"EnumServicesStatusExW\" with parameters {\"hSCManager\": \"2e853e0\""},{"type":"linebreak"},{"type":"text","value":"\"dwServiceType\": \"48\""},{"type":"linebreak"},{"type":"text","value":"\"dwServiceState\": \"1\"}"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" called \"EnumServicesStatusExW\" (UID: 00000000-00004700)"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" called \"EnumServicesStatusExW\" with parameters {\"hSCManager\": \"2e854f8\""},{"type":"linebreak"},{"type":"text","value":"\"dwServiceType\": \"48\""},{"type":"linebreak"},{"type":"text","value":"\"dwServiceState\": \"1\"}"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" called \"EnumServicesStatusExW\" with parameters {\"hSCManager\": \"2ea91f0\""},{"type":"linebreak"},{"type":"text","value":"\"dwServiceType\": \"48\""},{"type":"linebreak"},{"type":"text","value":"\"dwServiceState\": \"1\"}"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" called \"EnumServicesStatusExW\" with parameters {\"hSCManager\": \"2e854a8\""},{"type":"linebreak"},{"type":"text","value":"\"dwServiceType\": \"48\""},{"type":"linebreak"},{"type":"text","value":"\"dwServiceState\": \"1\"}"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" called \"EnumServicesStatusExW\" with parameters {\"hSCManager\": \"2ea91a0\""},{"type":"linebreak"},{"type":"text","value":"\"dwServiceType\": \"48\""},{"type":"linebreak"},{"type":"text","value":"\"dwServiceState\": \"1\"}"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" called \"EnumServicesStatusExW\" with parameters {\"hSCManager\": \"2ea9470\""},{"type":"linebreak"},{"type":"text","value":"\"dwServiceType\": \"48\""},{"type":"linebreak"},{"type":"text","value":"\"dwServiceState\": \"1\"}"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" called \"EnumServicesStatusExW\" with parameters {\"hSCManager\": \"2ea9380\""},{"type":"linebreak"},{"type":"text","value":"\"dwServiceType\": \"48\""},{"type":"linebreak"},{"type":"text","value":"\"dwServiceState\": \"1\"}"}],"origin":"API Call","attck_id":"T1007","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1007","stream_data":null},{"threat_level":1,"threat_level_human":"suspicious","category":"Spyware/Information Retrieval","identifier":"api-110","type":6,"relevance":10,"name":"Calls an API typically used to find and list the Windows drive types","description":"$45","description_v2":["\"encrypt.exe\" called \"GetDriveTypeW\" with parameter Q:\\ (UID: 00000000-00004700)","\"encrypt.exe\" called \"GetDriveTypeW\" with parameter W:\\ (UID: 00000000-00004700)","\"encrypt.exe\" called \"GetDriveTypeW\" with parameter E:\\ (UID: 00000000-00004700)","\"encrypt.exe\" called \"GetDriveTypeW\" with parameter R:\\ (UID: 00000000-00004700)","\"encrypt.exe\" called \"GetDriveTypeW\" with parameter T:\\ (UID: 00000000-00004700)","\"encrypt.exe\" called \"GetDriveTypeW\" with parameter Y:\\ (UID: 00000000-00004700)","\"encrypt.exe\" called \"GetDriveTypeW\" with parameter U:\\ (UID: 00000000-00004700)","\"encrypt.exe\" called \"GetDriveTypeW\" with parameter I:\\ (UID: 00000000-00004700)","\"encrypt.exe\" called \"GetDriveTypeW\" with parameter O:\\ (UID: 00000000-00004700)","\"encrypt.exe\" called \"GetDriveTypeW\" with parameter P:\\ (UID: 00000000-00004700)","\"encrypt.exe\" called \"GetDriveTypeW\" with parameter A:\\ (UID: 00000000-00004700)","\"encrypt.exe\" called \"GetDriveTypeW\" with parameter S:\\ (UID: 00000000-00004700)","\"encrypt.exe\" called \"GetDriveTypeW\" with parameter D:\\ (UID: 00000000-00004700)","\"encrypt.exe\" called \"GetDriveTypeW\" with parameter F:\\ (UID: 00000000-00004700)","\"encrypt.exe\" called \"GetDriveTypeW\" with parameter G:\\ (UID: 00000000-00004700)","\"encrypt.exe\" called \"GetDriveTypeW\" with parameter H:\\ (UID: 00000000-00004700)","\"encrypt.exe\" called \"GetDriveTypeW\" with parameter J:\\ (UID: 00000000-00004700)","\"encrypt.exe\" called \"GetDriveTypeW\" with parameter K:\\ (UID: 00000000-00004700)","\"encrypt.exe\" called \"GetDriveTypeW\" with parameter L:\\ (UID: 00000000-00004700)","\"encrypt.exe\" called \"GetDriveTypeW\" with parameter Z:\\ (UID: 00000000-00004700)","\"encrypt.exe\" called \"GetDriveTypeW\" with parameter X:\\ (UID: 00000000-00004700)","\"encrypt.exe\" called \"GetDriveTypeW\" with parameter C:\\ (UID: 00000000-00004700)","\"encrypt.exe\" called \"GetDriveTypeW\" with parameter V:\\ (UID: 00000000-00004700)","\"encrypt.exe\" called \"GetDriveTypeW\" with parameter B:\\ (UID: 00000000-00004700)","\"encrypt.exe\" called \"GetDriveTypeW\" with parameter N:\\ (UID: 00000000-00004700)"],"description_v3":[{"type":"text","value":"\"encrypt.exe\" called \"GetDriveTypeW\" with parameter Q:\\ (UID: 00000000-00004700)"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" called \"GetDriveTypeW\" with parameter W:\\ (UID: 00000000-00004700)"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" called \"GetDriveTypeW\" with parameter E:\\ (UID: 00000000-00004700)"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" called \"GetDriveTypeW\" with parameter R:\\ (UID: 00000000-00004700)"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" called \"GetDriveTypeW\" with parameter T:\\ (UID: 00000000-00004700)"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" called \"GetDriveTypeW\" with parameter Y:\\ (UID: 00000000-00004700)"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" called \"GetDriveTypeW\" with parameter U:\\ (UID: 00000000-00004700)"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" called \"GetDriveTypeW\" with parameter I:\\ (UID: 00000000-00004700)"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" called \"GetDriveTypeW\" with parameter O:\\ (UID: 00000000-00004700)"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" called \"GetDriveTypeW\" with parameter P:\\ (UID: 00000000-00004700)"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" called \"GetDriveTypeW\" with parameter A:\\ (UID: 00000000-00004700)"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" called \"GetDriveTypeW\" with parameter S:\\ (UID: 00000000-00004700)"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" called \"GetDriveTypeW\" with parameter D:\\ (UID: 00000000-00004700)"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" called \"GetDriveTypeW\" with parameter F:\\ (UID: 00000000-00004700)"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" called \"GetDriveTypeW\" with parameter G:\\ (UID: 00000000-00004700)"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" called \"GetDriveTypeW\" with parameter H:\\ (UID: 00000000-00004700)"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" called \"GetDriveTypeW\" with parameter J:\\ (UID: 00000000-00004700)"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" called \"GetDriveTypeW\" with parameter K:\\ (UID: 00000000-00004700)"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" called \"GetDriveTypeW\" with parameter L:\\ (UID: 00000000-00004700)"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" called \"GetDriveTypeW\" with parameter %SAMPLEDIR%\\ (UID: 00000000-00004700)"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" called \"GetDriveTypeW\" with parameter X:\\ (UID: 00000000-00004700)"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" called \"GetDriveTypeW\" with parameter C:\\ (UID: 00000000-00004700)"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" called \"GetDriveTypeW\" with parameter V:\\ (UID: 00000000-00004700)"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" called \"GetDriveTypeW\" with parameter B:\\ (UID: 00000000-00004700)"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" called \"GetDriveTypeW\" with parameter N:\\ (UID: 00000000-00004700)"}],"origin":"API Call","attck_id":"T1082","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1082","stream_data":null},{"threat_level":1,"threat_level_human":"suspicious","category":"Spyware/Information Retrieval","identifier":"api-170","type":6,"relevance":5,"name":"Calls an API typically used to retrieve the current status of the specified service","description":"\"encrypt.exe\" called \"QueryServiceStatusEx\" with parameters {\"hService\": \"2ea9218\"\n \"InfoLevel\": \"0\"\n \"lpBuffer\": \"13625860\"\n \"cbBufSize\": \"36\"\n \"pcbBytesNeeded\": \"36\"}\n \"encrypt.exe\" called \"QueryServiceStatusEx\" with parameters {\"hService\": \"2ea9498\"\n \"InfoLevel\": \"0\"\n \"lpBuffer\": \"13625860\"\n \"cbBufSize\": \"36\"\n \"pcbBytesNeeded\": \"36\"}","description_v2":["\"encrypt.exe\" called \"QueryServiceStatusEx\" with parameters {\"hService\": \"2ea9218\"","\"InfoLevel\": \"0\"","\"lpBuffer\": \"13625860\"","\"cbBufSize\": \"36\"","\"pcbBytesNeeded\": \"36\"}","\"encrypt.exe\" called \"QueryServiceStatusEx\" with parameters {\"hService\": \"2ea9498\"","\"InfoLevel\": \"0\"","\"lpBuffer\": \"13625860\"","\"cbBufSize\": \"36\"","\"pcbBytesNeeded\": \"36\"}"],"description_v3":[{"type":"text","value":"\"encrypt.exe\" called \"QueryServiceStatusEx\" with parameters {\"hService\": \"2ea9218\""},{"type":"linebreak"},{"type":"text","value":"\"InfoLevel\": \"0\""},{"type":"linebreak"},{"type":"text","value":"\"lpBuffer\": \"13625860\""},{"type":"linebreak"},{"type":"text","value":"\"cbBufSize\": \"36\""},{"type":"linebreak"},{"type":"text","value":"\"pcbBytesNeeded\": \"36\"}"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" called \"QueryServiceStatusEx\" with parameters {\"hService\": \"2ea9498\""},{"type":"linebreak"},{"type":"text","value":"\"InfoLevel\": \"0\""},{"type":"linebreak"},{"type":"text","value":"\"lpBuffer\": \"13625860\""},{"type":"linebreak"},{"type":"text","value":"\"cbBufSize\": \"36\""},{"type":"linebreak"},{"type":"text","value":"\"pcbBytesNeeded\": \"36\"}"}],"origin":"API Call","attck_id":"T1007","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1007","stream_data":null},{"threat_level":1,"threat_level_human":"suspicious","category":"System Destruction","identifier":"api-25","type":6,"relevance":7,"name":"Opens file with deletion access rights","description":"$46","description_v2":["\"encrypt.exe\" opened \"C:\\$WINDOWS.~BT\\Sources\\replacementmanifests\\contentdeliverymanager.utilities-replacement.man\" with delete access","\"encrypt.exe\" opened \"C:\\$WINDOWS.~BT\\Sources\\replacementmanifests\\devicedirectory-devicedirectoryclient-desktop-replacement.man\" with delete access","\"encrypt.exe\" opened \"C:\\$WINDOWS.~BT\\Sources\\replacementmanifests\\gpbase-replacement.man\" with delete access","\"encrypt.exe\" opened \"C:\\$WINDOWS.~BT\\Sources\\replacementmanifests\\microsoft-windows-advertisingid-replacement.man\" with delete access","\"encrypt.exe\" opened \"C:\\$WINDOWS.~BT\\Sources\\replacementmanifests\\microsoft-windows-geolocation-replacement.man\" with delete access","\"encrypt.exe\" opened \"C:\\$WINDOWS.~BT\\Sources\\replacementmanifests\\microsoft-windows-ie-internetexplorer-repl-2.man\" with delete access","\"encrypt.exe\" opened \"C:\\$WINDOWS.~BT\\Sources\\replacementmanifests\\onecore_speechcommon-rep.man\" with delete access","\"encrypt.exe\" opened \"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_af-za_75594e685e635a3e\\syncres.dll.mui\" with delete access","\"encrypt.exe\" opened \"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_lb-lu_80b14902c4ca1fab\\syncres.dll.mui\" with delete access","\"encrypt.exe\" opened \"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_mi-nz_25bb53edb6274a60\\syncres.dll.mui\" with delete access","\"encrypt.exe\" opened \"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_lo-la_77462a6ecae7305c.manifest\" with delete access","\"encrypt.exe\" opened \"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_lt-lt_7f7d233cc5a51216.manifest\" with delete access","\"encrypt.exe\" opened \"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_lv-lv_804a91c0c5235306.manifest\" with delete access","\"encrypt.exe\" opened \"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_mi-nz_25bb53edb6274a60.manifest\" with delete access","\"encrypt.exe\" opened \"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_mk-mk_1efedf2bba7e24b8.manifest\" with delete access","\"encrypt.exe\" opened \"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_ml-in_2048ffe9b9aae7ba.manifest\" with delete access","\"encrypt.exe\" opened \"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_mn-mn_203304f1b9bb8620.manifest\" with delete access","\"encrypt.exe\" opened \"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_mr-in_20082061b9db8f60.manifest\" with delete access","\"encrypt.exe\" opened \"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_ms-my_24ddc44fb6c143a2.manifest\" with delete access","\"encrypt.exe\" opened \"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_mt-mt_229b507db83648f0.manifest\" with delete access","\"encrypt.exe\" opened \"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_nb-no_c4447870aba27235.manifest\" with delete access","\"encrypt.exe\" opened \"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_ne-np_c4958fdaab71ca8f.manifest\" with delete access","\"encrypt.exe\" opened \"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_nl-nl_c283c3aeacce7c0a.manifest\" with delete access","\"encrypt.exe\" opened \"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_nso-za_30759cdc1af7521b.manifest\" with delete access","\"encrypt.exe\" opened \"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_pa-..-pk_a75d382b17f9fbbf.manifest\" with delete access"],"description_v3":[{"type":"text","value":"\"encrypt.exe\" opened \"C:\\$WINDOWS.~BT\\Sources\\replacementmanifests\\contentdeliverymanager.utilities-replacement.man\" with delete access"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" opened \"C:\\$WINDOWS.~BT\\Sources\\replacementmanifests\\devicedirectory-devicedirectoryclient-desktop-replacement.man\" with delete access"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" opened \"C:\\$WINDOWS.~BT\\Sources\\replacementmanifests\\gpbase-replacement.man\" with delete access"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" opened \"C:\\$WINDOWS.~BT\\Sources\\replacementmanifests\\microsoft-windows-advertisingid-replacement.man\" with delete access"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" opened \"C:\\$WINDOWS.~BT\\Sources\\replacementmanifests\\microsoft-windows-geolocation-replacement.man\" with delete access"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" opened \"C:\\$WINDOWS.~BT\\Sources\\replacementmanifests\\microsoft-windows-ie-internetexplorer-repl-2.man\" with delete access"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" opened \"C:\\$WINDOWS.~BT\\Sources\\replacementmanifests\\onecore_speechcommon-rep.man\" with delete access"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" opened \"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_af-za_75594e685e635a3e\\syncres.dll.mui\" with delete access"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" opened \"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_lb-lu_80b14902c4ca1fab\\syncres.dll.mui\" with delete access"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" opened \"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_mi-nz_25bb53edb6274a60\\syncres.dll.mui\" with delete access"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" opened \"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_lo-la_77462a6ecae7305c.manifest\" with delete access"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" opened \"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_lt-lt_7f7d233cc5a51216.manifest\" with delete access"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" opened \"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_lv-lv_804a91c0c5235306.manifest\" with delete access"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" opened \"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_mi-nz_25bb53edb6274a60.manifest\" with delete access"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" opened \"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_mk-mk_1efedf2bba7e24b8.manifest\" with delete access"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" opened \"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_ml-in_2048ffe9b9aae7ba.manifest\" with delete access"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" opened \"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_mn-mn_203304f1b9bb8620.manifest\" with delete access"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" opened \"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_mr-in_20082061b9db8f60.manifest\" with delete access"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" opened \"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_ms-my_24ddc44fb6c143a2.manifest\" with delete access"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" opened \"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_mt-mt_229b507db83648f0.manifest\" with delete access"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" opened \"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_nb-no_c4447870aba27235.manifest\" with delete access"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" opened \"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_ne-np_c4958fdaab71ca8f.manifest\" with delete access"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" opened \"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_nl-nl_c283c3aeacce7c0a.manifest\" with delete access"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" opened \"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_nso-za_30759cdc1af7521b.manifest\" with delete access"},{"type":"linebreak"},{"type":"text","value":"\"encrypt.exe\" opened \"C:\\found.000\\dir0001.chk\\amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_pa-..-pk_a75d382b17f9fbbf.manifest\" with delete access"}],"origin":"API Call","attck_id":"T1070.004","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1070/004","stream_data":null},{"threat_level":1,"threat_level_human":"suspicious","category":"Unusual Characteristics","identifier":"binary-38","type":8,"relevance":5,"name":"Drops PE files with different extensions","description":"$47","description_v2":["\"source-map.debug.js.x2anylock\" has type \"DOS executable (COM) start instruction 0x8c9c7a73 ee3b2db1\"- [targetUID: 00000000-00004700]","\"SFPATWT.INF.x2anylock\" has type \"DOS executable (COM) start instruction 0x8c456bf6 e5b6f6d2\"- Location: [C:\\$WINDOWS.~BT\\Sources\\SFPATWT.INF.x2anylock]- [targetUID: 00000000-00004700]","\"index.d.ts.x2anylock\" has type \"DOS executable (COM) start instruction 0x8c49d83e cce89f28\"- Location: [C:\\tempdir\\node_modules\\mongoose\\types\\index.d.ts.x2anylock]- [targetUID: 00000000-00004700]","\"README.md.x2anylock\" has type \"DOS executable (COM) start instruction 0xb8d04aae 6f27a800\"- [targetUID: 00000000-00004700]","\"update.ts.x2anylock\" has type \"DOS executable (COM) start instruction 0xb8e80604 96fabed2\"- Location: [C:\\tempdir\\node_modules\\mongodb\\src\\operations\\update.ts.x2anylock]- [targetUID: 00000000-00004700]","\"README.md.x2anylock\" has type \"DOS executable (COM) start instruction 0xb8b38b88 91fd821e\"- Location: [C:\\tempdir\\node_modules\\ansi-colors\\README.md.x2anylock]- [targetUID: 00000000-00004700]","\"README.md.x2anylock\" has type \"DOS executable (COM) start instruction 0xb8053389 1588d401\"- Location: [C:\\tempdir\\node_modules\\kareem\\README.md.x2anylock]- [targetUID: 00000000-00004700]","\"join.js.x2anylock\" has type \"DOS executable (COM) maybe with interrupt 22h start instruction 0x8c7397a5 b18ae6f8\"- Location: [C:\\tempdir\\node_modules\\bluebird\\js\\release\\join.js.x2anylock]- [targetUID: 00000000-00004700]","\"pack-codec.js.x2anylock\" has type \"DOS executable (COM) start instruction 0xeb152696 bfada70a\"- Location: [C:\\tempdir\\node_modules\\js-git\\lib\\pack-codec.js.x2anylock]- [targetUID: 00000000-00004700]","\"layout.js.x2anylock\" has type \"DOS executable (COM) start instruction 0xb8fc799c d6fa3e4f\"- Location: [C:\\tempdir\\node_modules\\blessed\\lib\\widgets\\layout.js.x2anylock]- [targetUID: 00000000-00004700]","\"internal.js.x2anylock\" has type \"DOS executable (COM) start instruction 0xeb24a73e f90dc799\"- Location: [C:\\tempdir\\node_modules\\iconv-lite\\encodings\\internal.js.x2anylock]- [targetUID: 00000000-00004700]","\"process.js.x2anylock\" has type \"DOS executable (COM) start instruction 0x8c209dac 8427ca67\"- Location: [C:\\tempdir\\node_modules\\karma\\lib\\launchers\\process.js.x2anylock]- [targetUID: 00000000-00004700]","\"eventemitter2.d.ts.x2anylock\" has type \"MS-DOS executable\"- Location: [C:\\tempdir\\node_modules\\@pm2\\js-api\\node_modules\\eventemitter2\\eventemitter2.d.ts.x2anylock]- [targetUID: 00000000-00004700]","\"index.js.x2anylock\" has type \"DOS executable (COM) maybe with interrupt 22h start instruction 0x8ce6d394 b4cee2a1\"- Location: [C:\\tempdir\\node_modules\\content-type\\index.js.x2anylock]- [targetUID: 00000000-00004700]","\"web-outgoing.js.x2anylock\" has type \"DOS executable (COM) start instruction 0xb85ab967 46834b3e\"- Location: [C:\\tempdir\\node_modules\\http-proxy\\lib\\http-proxy\\passes\\web-outgoing.js.x2anylock]- [targetUID: 00000000-00004700]","\"ast.js.x2anylock\" has type \"DOS executable (COM) start instruction 0x8c4981e2 f2cd7604\"- Location: [C:\\tempdir\\node_modules\\esutils\\lib\\ast.js.x2anylock]- [targetUID: 00000000-00004700]","\"node.js.x2anylock\" has type \"DOS executable (COM) start instruction 0xeb3f389b f9ee5fb3\"- Location: [C:\\tempdir\\node_modules\\engine.io\\node_modules\\debug\\src\\node.js.x2anylock]- [targetUID: 00000000-00004700]","\"ws-incoming.js.x2anylock\" has type \"DOS executable (COM) start instruction 0xb84efd65 19b93642\"- Location: [C:\\tempdir\\node_modules\\http-proxy\\lib\\http-proxy\\passes\\ws-incoming.js.x2anylock]- [targetUID: 00000000-00004700]","\"tg.js.x2anylock\" has type \"DOS executable (COM) start instruction 0xeb60e09b 9dd12d1f\"- Location: [C:\\tempdir\\node_modules\\moment\\locale\\tg.js.x2anylock]- [targetUID: 00000000-00004700]","\"es-us.js.x2anylock\" has type \"DOS executable (COM) start instruction 0xeb7b9314 f326b662\"- Location: [C:\\tempdir\\node_modules\\moment\\locale\\es-us.js.x2anylock]- [targetUID: 00000000-00004700]","\"compile.js.x2anylock\" has type \"DOS executable (COM) maybe with interrupt 22h start instruction 0xb8f76dca 8e7d1ace\"- Location: [C:\\tempdir\\node_modules\\degenerator\\dist\\compile.js.x2anylock]- [targetUID: 00000000-00004700]","\"CHANGELOG.md.x2anylock\" has type \"DOS executable (COM) start instruction 0x8c5dcc89 89d2ac49\"- [targetUID: 00000000-00004700]","\"write_concern.js.x2anylock\" has type \"DOS executable (COM) start instruction 0xb840d3c2 35561760\"- Location: [C:\\tempdir\\node_modules\\mongodb\\lib\\write_concern.js.x2anylock]- [targetUID: 00000000-00004700]","\"package.json.x2anylock\" has type \"DOS executable (COM) start instruction 0xb86a67ed b52d8ed5\"- [targetUID: 00000000-00004700]","\"bg.js.x2anylock\" has type \"MS-DOS executable MZ for MS-DOS\"- Location: [C:\\tempdir\\node_modules\\moment\\src\\locale\\bg.js.x2anylock]- [targetUID: 00000000-00004700]"],"description_v3":[{"type":"text","value":"\"source-map.debug.js.x2anylock\" has type \"DOS executable (COM) start instruction 0x8c9c7a73 ee3b2db1\"- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"SFPATWT.INF.x2anylock\" has type \"DOS executable (COM) start instruction 0x8c456bf6 e5b6f6d2\"- Location: [C:\\$WINDOWS.~BT\\Sources\\SFPATWT.INF.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"index.d.ts.x2anylock\" has type \"DOS executable (COM) start instruction 0x8c49d83e cce89f28\"- Location: [C:\\tempdir\\node_modules\\mongoose\\types\\index.d.ts.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"README.md.x2anylock\" has type \"DOS executable (COM) start instruction 0xb8d04aae 6f27a800\"- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"update.ts.x2anylock\" has type \"DOS executable (COM) start instruction 0xb8e80604 96fabed2\"- Location: [C:\\tempdir\\node_modules\\mongodb\\src\\operations\\update.ts.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"README.md.x2anylock\" has type \"DOS executable (COM) start instruction 0xb8b38b88 91fd821e\"- Location: [C:\\tempdir\\node_modules\\ansi-colors\\README.md.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"README.md.x2anylock\" has type \"DOS executable (COM) start instruction 0xb8053389 1588d401\"- Location: [C:\\tempdir\\node_modules\\kareem\\README.md.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"join.js.x2anylock\" has type \"DOS executable (COM) maybe with interrupt 22h start instruction 0x8c7397a5 b18ae6f8\"- Location: [C:\\tempdir\\node_modules\\bluebird\\js\\release\\join.js.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"pack-codec.js.x2anylock\" has type \"DOS executable (COM) start instruction 0xeb152696 bfada70a\"- Location: [C:\\tempdir\\node_modules\\js-git\\lib\\pack-codec.js.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"layout.js.x2anylock\" has type \"DOS executable (COM) start instruction 0xb8fc799c d6fa3e4f\"- Location: [C:\\tempdir\\node_modules\\blessed\\lib\\widgets\\layout.js.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"internal.js.x2anylock\" has type \"DOS executable (COM) start instruction 0xeb24a73e f90dc799\"- Location: [C:\\tempdir\\node_modules\\iconv-lite\\encodings\\internal.js.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"process.js.x2anylock\" has type \"DOS executable (COM) start instruction 0x8c209dac 8427ca67\"- Location: [C:\\tempdir\\node_modules\\karma\\lib\\launchers\\process.js.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"eventemitter2.d.ts.x2anylock\" has type \"MS-DOS executable\"- Location: [C:\\tempdir\\node_modules\\@pm2\\js-api\\node_modules\\eventemitter2\\eventemitter2.d.ts.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"index.js.x2anylock\" has type \"DOS executable (COM) maybe with interrupt 22h start instruction 0x8ce6d394 b4cee2a1\"- Location: [C:\\tempdir\\node_modules\\content-type\\index.js.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"web-outgoing.js.x2anylock\" has type \"DOS executable (COM) start instruction 0xb85ab967 46834b3e\"- Location: [C:\\tempdir\\node_modules\\http-proxy\\lib\\http-proxy\\passes\\web-outgoing.js.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"ast.js.x2anylock\" has type \"DOS executable (COM) start instruction 0x8c4981e2 f2cd7604\"- Location: [C:\\tempdir\\node_modules\\esutils\\lib\\ast.js.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"node.js.x2anylock\" has type \"DOS executable (COM) start instruction 0xeb3f389b f9ee5fb3\"- Location: [C:\\tempdir\\node_modules\\engine.io\\node_modules\\debug\\src\\node.js.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"ws-incoming.js.x2anylock\" has type \"DOS executable (COM) start instruction 0xb84efd65 19b93642\"- Location: [C:\\tempdir\\node_modules\\http-proxy\\lib\\http-proxy\\passes\\ws-incoming.js.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"tg.js.x2anylock\" has type \"DOS executable (COM) start instruction 0xeb60e09b 9dd12d1f\"- Location: [C:\\tempdir\\node_modules\\moment\\locale\\tg.js.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"es-us.js.x2anylock\" has type \"DOS executable (COM) start instruction 0xeb7b9314 f326b662\"- Location: [C:\\tempdir\\node_modules\\moment\\locale\\es-us.js.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"compile.js.x2anylock\" has type \"DOS executable (COM) maybe with interrupt 22h start instruction 0xb8f76dca 8e7d1ace\"- Location: [C:\\tempdir\\node_modules\\degenerator\\dist\\compile.js.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"CHANGELOG.md.x2anylock\" has type \"DOS executable (COM) start instruction 0x8c5dcc89 89d2ac49\"- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"write_concern.js.x2anylock\" has type \"DOS executable (COM) start instruction 0xb840d3c2 35561760\"- Location: [C:\\tempdir\\node_modules\\mongodb\\lib\\write_concern.js.x2anylock]- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"package.json.x2anylock\" has type \"DOS executable (COM) start instruction 0xb86a67ed b52d8ed5\"- [targetUID: 00000000-00004700]"},{"type":"linebreak"},{"type":"text","value":"\"bg.js.x2anylock\" has type \"MS-DOS executable MZ for MS-DOS\"- Location: [C:\\tempdir\\node_modules\\moment\\src\\locale\\bg.js.x2anylock]- [targetUID: 00000000-00004700]"}],"origin":"Binary File","attck_id":"T1036","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1036","stream_data":null},{"threat_level":1,"threat_level_human":"suspicious","category":"Unusual Characteristics","identifier":"static-1","type":0,"relevance":1,"name":"Imports suspicious APIs","description":"GetCommandLineW\n GetModuleHandleW\n FindNextFileW\n VirtualProtect\n Process32NextW\n ExitThread\n GetFileSizeEx\n GetTickCount\n Process32FirstW\n GetProcAddress\n GetComputerNameW\n GetModuleFileNameW\n GetCommandLineA\n WriteFile\n OpenProcess\n UnhandledExceptionFilter\n GetModuleHandleExW\n LoadLibraryA\n GetStartupInfoW\n SleepConditionVariableSRW\n TerminateProcess\n CreateFileW\n GetNativeSystemInfo\n CreateThread\n CreateToolhelp32Snapshot\n GetModuleHandleA\n Sleep\n GetDriveTypeW\n FindFirstFileExW\n LoadLibraryExW\n IsDebuggerPresent\n FindFirstFileW\n NetShareEnum","description_v2":["GetCommandLineW","GetModuleHandleW","FindNextFileW","VirtualProtect","Process32NextW","ExitThread","GetFileSizeEx","GetTickCount","Process32FirstW","GetProcAddress","GetComputerNameW","GetModuleFileNameW","GetCommandLineA","WriteFile","OpenProcess","UnhandledExceptionFilter","GetModuleHandleExW","LoadLibraryA","GetStartupInfoW","SleepConditionVariableSRW","TerminateProcess","CreateFileW","GetNativeSystemInfo","CreateThread","CreateToolhelp32Snapshot","GetModuleHandleA","Sleep","GetDriveTypeW","FindFirstFileExW","LoadLibraryExW","IsDebuggerPresent","FindFirstFileW","NetShareEnum"],"description_v3":[{"type":"text","value":"GetCommandLineW"},{"type":"linebreak"},{"type":"text","value":"GetModuleHandleW"},{"type":"linebreak"},{"type":"text","value":"FindNextFileW"},{"type":"linebreak"},{"type":"text","value":"VirtualProtect"},{"type":"linebreak"},{"type":"text","value":"Process32NextW"},{"type":"linebreak"},{"type":"text","value":"ExitThread"},{"type":"linebreak"},{"type":"text","value":"GetFileSizeEx"},{"type":"linebreak"},{"type":"text","value":"GetTickCount"},{"type":"linebreak"},{"type":"text","value":"Process32FirstW"},{"type":"linebreak"},{"type":"text","value":"GetProcAddress"},{"type":"linebreak"},{"type":"text","value":"GetComputerNameW"},{"type":"linebreak"},{"type":"text","value":"GetModuleFileNameW"},{"type":"linebreak"},{"type":"text","value":"GetCommandLineA"},{"type":"linebreak"},{"type":"text","value":"WriteFile"},{"type":"linebreak"},{"type":"text","value":"OpenProcess"},{"type":"linebreak"},{"type":"text","value":"UnhandledExceptionFilter"},{"type":"linebreak"},{"type":"text","value":"GetModuleHandleExW"},{"type":"linebreak"},{"type":"text","value":"LoadLibraryA"},{"type":"linebreak"},{"type":"text","value":"GetStartupInfoW"},{"type":"linebreak"},{"type":"text","value":"SleepConditionVariableSRW"},{"type":"linebreak"},{"type":"text","value":"TerminateProcess"},{"type":"linebreak"},{"type":"text","value":"CreateFileW"},{"type":"linebreak"},{"type":"text","value":"GetNativeSystemInfo"},{"type":"linebreak"},{"type":"text","value":"CreateThread"},{"type":"linebreak"},{"type":"text","value":"CreateToolhelp32Snapshot"},{"type":"linebreak"},{"type":"text","value":"GetModuleHandleA"},{"type":"linebreak"},{"type":"text","value":"Sleep"},{"type":"linebreak"},{"type":"text","value":"GetDriveTypeW"},{"type":"linebreak"},{"type":"text","value":"FindFirstFileExW"},{"type":"linebreak"},{"type":"text","value":"LoadLibraryExW"},{"type":"linebreak"},{"type":"text","value":"IsDebuggerPresent"},{"type":"linebreak"},{"type":"text","value":"FindFirstFileW"},{"type":"linebreak"},{"type":"text","value":"NetShareEnum"}],"origin":"Static Parser","attck_id":"T1106","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1106","stream_data":null},{"threat_level":1,"threat_level_human":"suspicious","category":"Unusual Characteristics","identifier":"static-60","type":0,"relevance":10,"name":"PE file contains unusual section name","description":"\"encrypt.exe\" has a section named \".fptable\"","description_v2":["\"encrypt.exe\" has a section named \".fptable\""],"description_v3":[{"type":"text","value":"\"encrypt.exe\" has a section named \".fptable\""}],"origin":"Static Parser","attck_id":"T1027.002","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1027/002","stream_data":null},{"threat_level":1,"threat_level_human":"suspicious","category":"Unusual Characteristics","identifier":"api-164","type":6,"relevance":10,"name":"Rename many files (often indicator of ransomware infection)","description":"\"encrypt.exe\" renames more than 200 files","description_v2":["\"encrypt.exe\" renames more than 200 files"],"description_v3":[{"type":"text","value":"\"encrypt.exe\" renames more than 200 files"}],"origin":"API Call","attck_id":"T1036","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1036","stream_data":null},{"threat_level":1,"threat_level_human":"suspicious","category":"Unusual Characteristics","identifier":"api-201","type":6,"relevance":5,"name":"Write many files with double extensions (often indicator of ransomware infection)","description":"\"encrypt.exe\" write more than 100 files with extension \".resources_31bf3856ad364e35_10.0.17134.1_pa-..-pk_a75d382b17f9fbbf.manifest.x2anylock\"","description_v2":["\"encrypt.exe\" write more than 100 files with extension \".resources_31bf3856ad364e35_10.0.17134.1_pa-..-pk_a75d382b17f9fbbf.manifest.x2anylock\""],"description_v3":[{"type":"text","value":"\"encrypt.exe\" write more than 100 files with extension \".resources_31bf3856ad364e35_10.0.17134.1_pa-..-pk_a75d382b17f9fbbf.manifest.x2anylock\""}],"origin":"API Call","attck_id":"T1486","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1486","stream_data":null},{"threat_level":2,"threat_level_human":"malicious","category":"Environment Awareness","identifier":"binary-8","type":8,"relevance":5,"name":"The input sample contains a known anti-VM trick","description":"Found VM detection artifact \"CPUID trick\" in \"sample.bin\" (Offset: 285681)","description_v2":["Found VM detection artifact \"CPUID trick\" in \"sample.bin\" (Offset: 285681)"],"description_v3":[{"type":"text","value":"Found VM detection artifact \"CPUID trick\" in \"sample.bin\" (Offset: 285681)"}],"origin":"Binary File","attck_id":"T1497","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1497","stream_data":null},{"threat_level":2,"threat_level_human":"malicious","category":"External Systems","identifier":"avtest-8","type":12,"relevance":10,"name":"Sample detected by CrowdStrike Static Analysis and ML with relatively high confidence","description":"CrowdStrike Static Analysis and ML (QuickScan) yielded detection: win/malicious_confidence_100% (W)","description_v2":["CrowdStrike Static Analysis and ML (QuickScan) yielded detection: win/malicious_confidence_100% (W)"],"description_v3":[{"type":"text","value":"CrowdStrike Static Analysis and ML (QuickScan) yielded detection: win/malicious_confidence_100% (W)"}],"origin":"External System","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":2,"threat_level_human":"malicious","category":"Unusual Characteristics","identifier":"string-0","type":2,"relevance":9,"name":"References BIOS/BOOT related strings","description":"\"ntldr\" (Indicator: \"ntldr\")","description_v2":["\"ntldr\" (Indicator: \"ntldr\")"],"description_v3":[{"type":"text","value":"\"ntldr\" (Indicator: \"ntldr\")"}],"origin":"File/Memory","attck_id":null,"capec_id":null,"attck_id_wiki":null,"stream_data":null},{"threat_level":2,"threat_level_human":"malicious","category":"Unusual Characteristics","identifier":"api-200","type":6,"relevance":10,"name":"Renames many files with double extensions (often indicator of ransomware infection)","description":"\"encrypt.exe\" renames more than 100 files with extension \".js.x2anylock\"","description_v2":["\"encrypt.exe\" renames more than 100 files with extension \".js.x2anylock\""],"description_v3":[{"type":"text","value":"\"encrypt.exe\" renames more than 100 files with extension \".js.x2anylock\""}],"origin":"API Call","attck_id":"T1486","capec_id":null,"attck_id_wiki":"https://attack.mitre.org/techniques/T1486","stream_data":null}],"detonation_parameters":{"action_script":"default","experimental_anti_evasion":true,"script_logging":true,"allow_sample_tampering":true,"network_mode":"default","custom_system_date_time":null,"custom_commandline":null,"document_password":null,"document_password_exists":false,"environment_variable":null,"dynamic_analysis_time":180,"comment":null},"falcon_mal_query_results":[],"falcon_intelligence_data":null,"search_tags":[],"execution_mode":"KERNELMODE","monitor_script":"default.au3","monitor_script_description":"Default analysis","windows_version_name":"Windows 10","windows_version_edition":"Professional","windows_version_service_pack":null,"windows_version_version":"10.0 (build 16299)","windows_version_bitness":"64","custom_date_time":null,"sandbox_version":"13.1.0","report_generator_version":null,"signature_engine_version":null,"mitre_version":null,"office_analysis":false,"office_version":null,"incidents":[{"name":"Spyware","details":["Found a string that may be used as part of an injection method"]},{"name":"Fingerprint","details":["Queries process information"]},{"name":"Evasive","details":["The input sample contains a known anti-VM trick","May check for the presence of a forensics/monitoring tool"]}],"icon":"iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAABH0lEQVR4Xu2UXWrCQBCAQymICEUQz2qxLVTUB8HnwoKnkdIr1OQAOUD+k5eREdYuQ2YzWZJQMAMfvuX7Zgf0vHHG+S+zPxxhSKi/t4Dz90/tL/XfAsIwHAQ2oKqqXijL8k5RFHwALUXwA97qV0yTvDHgS53umAHLXQCLbQDzTQAvnz7MPnyYvvswebvA8/oCT69/AUopljzP7QEUHSCRmy9QtznKnQMk8k5egDuBRI7YNkeyLLMHUHSARK4D6NYmzgESuQ7gNtdYA7gTSOQIiunWJmma2gMoOkAi1wHc5ih3DpDIEZTSrVu9AHcCKbbNkSRJ7AEUl4C6rbW89wDb5oMGcPI4jtsHNP23N93clDsFdCmPoogPGBLqH2ecx50rVs0alvIcXXoAAAAASUVORK5CYII=","visualization":"$48","classification":["32.2% (.EXE) Win64 Executable (generic)","20.1% (.DLL) Win32 Dynamic Link Library (generic)","15.4% (.EXE) Win16 NE executable (generic)","13.7% (.EXE) Win32 Executable (generic)","6.2% (.EXE) OS/2 Executable (generic)"],"dns_requests":[],"contacted_hosts":[],"contacted_countries":{"countries":[],"coordinates":[]},"port_infos":[],"extracted_strings":{"all":[{"value":"ISIjJCUmJygpKissLS4vMDEyMzQ1Njc4OTo7PD0+P0BhYmNkZWZnaGlqa2xtbm9wcXJzdHV2d3h5eltcXV5fYGFiY2RlZmdoaWprbG1ub3BxcnN0dXZ3eHl6e3x9fg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"ISIjJCUmJygpKissLS4vMDEyMzQ1Njc4OTo7PD0+P0BBQkNERUZHSElKS0xNTk9QUVJTVFVWV1hZWltcXV5fYEFCQ0RFRkdISUpLTE1OT1BRUlNUVVZXWFlae3x9fg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"ISIjJCUmJygpKissLS4vMDEyMzQ1Njc4OTo7PD0+P0BBQkNERUZHSElKS0xNTk9QUVJTVFVWV1hZWltcXV5fYGFiY2RlZmdoaWprbG1ub3BxcnN0dXZ3eHl6e3x9fg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"ISstPT9PVWl5","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"ITE5PUlXYWNnb3V7","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"ITQlNCk0LTQxNDU0OTQ9NEE0RTRJNE00UTRVNFk0XTRhNGU0aTRtNHE0dTR5NH00","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"ITUhQSFJIU8hWSFbIV8hcyF9IQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"IV9pc19kb3VibGU=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"IVRoaXMgcHJvZ3JhbSBjYW5ub3QgYmUgcnVuIGluIERPUyBtb2RlLiQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"IX43Ti9xRSNOLCMtfSNzPmZRWCFJaGNKdCRwSyFAa2BEXWQpKFBcJUI3QDIyMGY5YTlmLWE5YTYtNDFiMi04ZGJlLTZlZTBiMDViOGEzMg==","type":"Ansi","source":"File String Dumps","process":null,"filename":"bower.json.x2anylock","compromised":null,"detection_total":null,"total":null},{"value":"IiBub3QgdXNlZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"IiEiJSIrIjEiOSJLIk8iYyJnInMidSI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"IklDRXFuLnM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"IyUrLzVDSU1PVVlfa3F3","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"IycjKSMvIzMjNSNFI1EjUyNZI2MjayM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"I00zY0N0ZFxtOVRkRW4wJCFjPjd1Zy86QlMkfm9qQWIoRm8sTDA/Wn4yMjBmOWE5Zi1hOWE2LTQxYjItOGRiZS02ZWUwYjA1YjhhMzI=","type":"Ansi","source":"File String Dumps","process":null,"filename":"es.js.x2anylock","compromised":null,"detection_total":null,"total":null},{"value":"JCkkPSRBJEMkTSRfJGckayR5JH0k","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"JDQwelJuZ1ZSajtxJDpTKGJmOT8zSyQrPkBwSGRfPz5xK0VXZmYlKkw2X1dedD0zTTVrSDRUKHooQlNqa0NJLUU6c3c+Kl1zeldCZ294UGZURl1neFdPUDlIYS9dV3dOSEVgUD9kQ1hNTHA/YURwQi0pMjIwZjlhOWYtYTlhNi00MWIyLThkYmUtNmVlMGIwNWI4YTMy","type":"Ansi","source":"File String Dumps","process":null,"filename":"on_data.js.map.x2anylock","compromised":null,"detection_total":null,"total":null},{"value":"JGF7Xm0rO1xVXEs9ZS5ZSHc+ZFdZOGUgZjlKXHBnPUZWLCAyeGNWcnUnKi1WOTs6IEZeSS0lI1cjJXdsX1dVSGE1VjJpTHQ5WU9pTVVnZGhGPl9XWFZ6I0g5QkJ0fnNfZ2BWfjYhaDJ3NSAra0VrJjtQXCFRfnFFdF55MjIwZjlhOWYtYTlhNi00MWIyLThkYmUtNmVlMGIwNWI4YTMy","type":"Ansi","source":"File String Dumps","process":null,"filename":"test.py.x2anylock","compromised":null,"detection_total":null,"total":null},{"value":"JEQvV2EgK1pXRUpgIlhbS2phRVxsaF5qUS0uLTZkfS48RHFCRXNCLFpRRUAkaVxAZmEhemhULm0+JDIyMGY5YTlmLWE5YTYtNDFiMi04ZGJlLTZlZTBiMDViOGEzMg==","type":"Ansi","source":"File String Dumps","process":null,"filename":"mr.js.x2anylock","compromised":null,"detection_total":null,"total":null},{"value":"JFJlY3ljbGUuQmlu","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"JSclMSU9JUMlSyVPJXMl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"JSkrLzU7PUNHSU9TWWFlZ2ttcQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"JTwycjBmUDRZR3MyM29kXHwyMjBmOWE5Zi1hOWE2LTQxYjItOGRiZS02ZWUwYjA1YjhhMzI=","type":"Ansi","source":"File String Dumps","process":null,"filename":"example.html.x2anylock","compromised":null,"detection_total":null,"total":null},{"value":"JWIgJWQgJUggOiAlTSA6ICVTICVZ","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"JWQgLyAlbSAvICV5","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"JUggOiAlTSA6ICVT","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"JUkgOiAlTSA6ICVTICVw","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"JW0gLyAlZCAvICV5","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"JVdJTkRJUiVcU3lzdGVtMzJcY29uaG9zdC5leGU=","type":"Ansi","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"JicmKSY1JjsmPyZLJlMmWSZlJmkmbyZ7Jg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Jkg/eiNESy1OezJjcjBSbn5KfGNHOiQuWTcpQ0dbVWQkUVA0YDh1XjdANFhLPj0nMjpzXHknIFBpUS9Zd3hvW3x9PkVIcXQ/YGtTREBHRXh7ZmxPOid+bTAqRXskZUM3KzBQdyxFdDolS3F4LT0gS3VGRCEheGd7L0c5fFlzPXhiJDt0MjIwZjlhOWYtYTlhNi00MWIyLThkYmUtNmVlMGIwNWI4YTMy","type":"Ansi","source":"File String Dumps","process":null,"filename":"wow64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_zh-tw_774f24663cb9f880.manifest.x2anylock","compromised":null,"detection_total":null,"total":null},{"value":"JmkyNyA0dEtqJl85c1ReOShbZVsjQTxDeWlcUFFtWzAhYnVTTVppaixkaiNXTncpcHB8dWkySEdMKiQ+REVleUw0VD5iJHtkImgrLVExW2tpXGkoNkh7PThyLy9KJEFtIX46TmNbTiFyQGUyMjBmOWE5Zi1hOWE2LTQxYjItOGRiZS02ZWUwYjA1YjhhMzI=","type":"Ansi","source":"File String Dumps","process":null,"filename":"dispatchRequest.js.x2anylock","compromised":null,"detection_total":null,"total":null},{"value":"JyApIC0gMyBHIE0gUSBfIGMgZSBpIHcgfQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Jywgc3RvcmVkICc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"JywgdHJ5aW5nIHRvIHJldHJpZXZlICc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"JzUnNydNJ1MnVSdfJ2snbSdzJ3cn","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"KCEoMSg9KD8oSShRKFsoXShhKGcodSg=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"KCgoKCggICAgICAgICAgICAgICAgICBI","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"KSEpIyk/KUcpXSllKWkpbyl1KQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"KWEuWylzfVAsKj1sfi4yMjBmOWE5Zi1hOWE2LTQxYjItOGRiZS02ZWUwYjA1YjhhMzI=","type":"Ansi","source":"File String Dumps","process":null,"filename":"has.js.x2anylock","compromised":null,"detection_total":null,"total":null},{"value":"KiUqLypPKlUqXyplKmsqbSpzKg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"KycrMSszKz0rPytLK08rVStpK20rbyt7Kw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"K3YkeCt2JHh2JCt4diskeHYkK3grJHZ4KyR2eCR2K3grJHZ4JCt2eCt2ICQrdiAkdiAkK3YgKyR2ICQrKyQgdiskIHYkIHYrKyQgdiQrIHYreHYkKyB2JHYkICt2KyAkdiQgKyt4JHYrICR2JHYgKysgJHYkICt2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"LCMsLyw1LDksQSxXLFksaSx3LA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"LDVOYz44N3UtV3t9Tk1rUXpweFNiMmghR0MyM2tEPXpscmkiQSg+YTwlNXp6MHxLa0hcQDxRa05MMk1LTHxBOmolbzkndiVlTGZDYGkmajt2TEE4Q2J+aXVqa2Y8TE42P3c9WmpPXiBaZC02KmssY3JwYjw9OyxwRTddeUciSGVPWiFjdFJ9MjIwZjlhOWYtYTlhNi00MWIyLThkYmUtNmVlMGIwNWI4YTMy","type":"Ansi","source":"File String Dumps","process":null,"filename":"README.md.x2anylock","compromised":null,"detection_total":null,"total":null},{"value":"LDkwOTQ5ODk8OUA5RDlIOUw5UDlUOVg5XDlgOQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"LDxlbGxpcHNpcz4=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"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","type":"Ansi","source":"File String Dumps","process":null,"filename":"update.ts.x2anylock","compromised":null,"detection_total":null,"total":null},{"value":"LTpBTTphbTpQTTpwbQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"LTstQy1JLU0tYS1lLXEt","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"LWhNdU5EV1soeF4iMHxzPi87KWZOdH4gMmNHUUkkeSRGJyt+WkNiPz9DICJkaz1HIHpZaXp+Wko2eisnRi9sMjIwZjlhOWYtYTlhNi00MWIyLThkYmUtNmVlMGIwNWI4YTMy","type":"Ansi","source":"File String Dumps","process":null,"filename":"index.d.ts.map.x2anylock","compromised":null,"detection_total":null,"total":null},{"value":"LiUuLS4zLjcuOS4/LlcuWy5vLnku","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"LjpuanBUZnp3U0YmRV43Q0xJKW5jT313ZSQiVzpSTnFxRk0oUG9ibmdOJ20+WCVJImtzUFF+U2g5PjdrRCgxInskXGNPOnFUbTIkOyhlKUEhdWh9Q2wzMjIwZjlhOWYtYTlhNi00MWIyLThkYmUtNmVlMGIwNWI4YTMy","type":"Ansi","source":"File String Dumps","process":null,"filename":"LICENSE.BSD.x2anylock","compromised":null,"detection_total":null,"total":null},{"value":"Lj00fGE1LzRIaiNLVDF9QEVSODpgRDRCbl9AJmZnWWg1TkMieUtQSGBJPDk4NG0jYFYxMjIwZjlhOWYtYTlhNi00MWIyLThkYmUtNmVlMGIwNWI4YTMy","type":"Ansi","source":"File String Dumps","process":null,"filename":"forEach.js.x2anylock","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVT8kQWRkaXRpdmVDaXBoZXJDb25jcmV0ZVBvbGljeUBJJDBCQUAkMDBVQWRkaXRpdmVDaXBoZXJBYnN0cmFjdFBvbGljeUBDcnlwdG9QUEBAQENyeXB0b1BQQEA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVV9DcnRfbmV3X2RlbGV0ZUBzdGRAQA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVUFkZGl0aXZlQ2lwaGVyQWJzdHJhY3RQb2xpY3lAQ3J5cHRvUFBAQA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVWN0eXBlX2Jhc2VAc3RkQEA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVUVDMk5Qb2ludEBDcnlwdG9QUEBA","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVUVDUFBvaW50QENyeXB0b1BQQEA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVUluaXRpYWxpemVJbnRlZ2VyQENyeXB0b1BQQEA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVUlucHV0UmVqZWN0ZWRAPyRJbnB1dFJlamVjdGluZ0BWQnVmZmVyZWRUcmFuc2Zvcm1hdGlvbkBDcnlwdG9QUEBAQENyeXB0b1BQQEA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVW1lc3NhZ2VzX2Jhc2VAc3RkQEA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVW1vbmV5X2Jhc2VAc3RkQEA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVU5vQ2hhbm5lbFN1cHBvcnRAQnVmZmVyZWRUcmFuc2Zvcm1hdGlvbkBDcnlwdG9QUEBA","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVVJpam5kYWVsX0luZm9AQ3J5cHRvUFBAQA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVXRpbWVfYmFzZUBzdGRAQA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kX01wdW5jdEBfV0BzdGRAQA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kX01wdW5jdEBEQHN0ZEBA","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kX01wdW5jdEBHQHN0ZEBA","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kQWJzdHJhY3RQb2xpY3lIb2xkZXJAVUFkZGl0aXZlQ2lwaGVyQWJzdHJhY3RQb2xpY3lAQ3J5cHRvUFBAQFZTeW1tZXRyaWNDaXBoZXJAMkBAQ3J5cHRvUFBAQA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kQWRkaXRpdmVDaXBoZXJUZW1wbGF0ZUBWPyRBYnN0cmFjdFBvbGljeUhvbGRlckBVQWRkaXRpdmVDaXBoZXJBYnN0cmFjdFBvbGljeUBDcnlwdG9QUEBAVlN5bW1ldHJpY0NpcGhlckAyQEBDcnlwdG9QUEBAQENyeXB0b1BQQEA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kQWxnb3JpdGhtSW1wbEBWPyRJdGVyYXRlZEhhc2hASVU/JEVudW1Ub1R5cGVAVzRCeXRlT3JkZXJAQ3J5cHRvUFBAQCQwMEBDcnlwdG9QUEBAJDBFQUBWSGFzaFRyYW5zZm9ybWF0aW9uQDJAQENyeXB0b1BQQEBWU0hBMjU2QDJAQENyeXB0b1BQQEA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kQWxnb3JpdGhtSW1wbEBWPyRTaW1wbGVLZXlpbmdJbnRlcmZhY2VJbXBsQFY/JENvbmNyZXRlUG9saWN5SG9sZGVyQFZDaGFDaGFfUG9saWN5QENyeXB0b1BQQEBWPyRBZGRpdGl2ZUNpcGhlclRlbXBsYXRlQFY/JEFic3RyYWN0UG9saWN5SG9sZGVyQFVBZGRpdGl2ZUNpcGhlckFic3RyYWN0UG9saWN5QENyeXB0b1BQQEBWU3ltbWV0cmljQ2lwaGVyQDJAQENyeXB0b1BQQEBAMkBVQWRkaXRpdmVDaXBoZXJBYnN0cmFjdFBvbGljeUAyQEBDcnlwdG9QUEBAVUNoYUNoYV9JbmZvQDJAQENyeXB0b1BQQEBVQ2hhQ2hhX0luZm9AMkBAQ3J5cHRvUFBAQA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kQWxnb3JpdGhtSW1wbEBWPyRTaW1wbGVLZXlpbmdJbnRlcmZhY2VJbXBsQFY/JFR3b0Jhc2VzQFZCbG9ja0NpcGhlckBDcnlwdG9QUEBAVVJpam5kYWVsX0luZm9AMkBAQ3J5cHRvUFBAQFYxMkBAQ3J5cHRvUFBAQFYxMkBAQ3J5cHRvUFBAQA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kQWxnb3JpdGhtUGFyYW1ldGVyc1RlbXBsYXRlQFZDb25zdEJ5dGVBcnJheVBhcmFtZXRlckBDcnlwdG9QUEBAQENyeXB0b1BQQEA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kQVNOMUNyeXB0b01hdGVyaWFsQFZQcml2YXRlS2V5QENyeXB0b1BQQEBAQ3J5cHRvUFBAQA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kQXV0b1NpZ25hbGluZ0BWPyRJbnB1dFJlamVjdGluZ0BWQnVmZmVyZWRUcmFuc2Zvcm1hdGlvbkBDcnlwdG9QUEBAQENyeXB0b1BQQEBAQ3J5cHRvUFBAQA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kYmFzaWNfc3RyaW5nQERVPyRjaGFyX3RyYWl0c0BEQHN0ZEBAVj8kYWxsb2NhdG9yQERAMkBAc3RkQEA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kQmxvY2tDaXBoZXJGaW5hbEAkMEFAVkVuY0BSaWpuZGFlbEBDcnlwdG9QUEBAQENyeXB0b1BQQEA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kQmxvY2tDaXBoZXJJbXBsQFVSaWpuZGFlbF9JbmZvQENyeXB0b1BQQEBWQmxvY2tDaXBoZXJAMkBAQ3J5cHRvUFBAQA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kQnVmZmVybGVzc0BWQnVmZmVyZWRUcmFuc2Zvcm1hdGlvbkBDcnlwdG9QUEBAQENyeXB0b1BQQEA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kQnVmZmVybGVzc0BWU2lua0BDcnlwdG9QUEBAQENyeXB0b1BQQEA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kQ2xvbmFibGVJbXBsQFY/JEJsb2NrQ2lwaGVyRmluYWxAJDBBQFZFbmNAUmlqbmRhZWxAQ3J5cHRvUFBAQEBDcnlwdG9QUEBAVkVuY0BSaWpuZGFlbEAyQEBDcnlwdG9QUEBA","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kQ2xvbmFibGVJbXBsQFZTSEEyNTZAQ3J5cHRvUFBAQFY/JEFsZ29yaXRobUltcGxAVj8kSXRlcmF0ZWRIYXNoQElVPyRFbnVtVG9UeXBlQFc0Qnl0ZU9yZGVyQENyeXB0b1BQQEAkMDBAQ3J5cHRvUFBAQCQwRUFAVkhhc2hUcmFuc2Zvcm1hdGlvbkAyQEBDcnlwdG9QUEBAVlNIQTI1NkAyQEAyQEBDcnlwdG9QUEBA","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kY29kZWN2dEBfV0RVX01ic3RhdGV0QEBAc3RkQEA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kY29kZWN2dEBERFVfTWJzdGF0ZXRAQEBzdGRAQA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kY29kZWN2dEBHRFVfTWJzdGF0ZXRAQEBzdGRAQA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kY29kZWN2dF91dGY4QF9XJDBCQVBQUFBAJDBBQEBzdGRAQA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kY29sbGF0ZUBfV0BzdGRAQA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kY29sbGF0ZUBEQHN0ZEBA","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kY29sbGF0ZUBHQHN0ZEBA","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kQ29uY3JldGVQb2xpY3lIb2xkZXJAVkNoYUNoYV9Qb2xpY3lAQ3J5cHRvUFBAQFY/JEFkZGl0aXZlQ2lwaGVyVGVtcGxhdGVAVj8kQWJzdHJhY3RQb2xpY3lIb2xkZXJAVUFkZGl0aXZlQ2lwaGVyQWJzdHJhY3RQb2xpY3lAQ3J5cHRvUFBAQFZTeW1tZXRyaWNDaXBoZXJAMkBAQ3J5cHRvUFBAQEAyQFVBZGRpdGl2ZUNpcGhlckFic3RyYWN0UG9saWN5QDJAQENyeXB0b1BQQEA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kY3R5cGVAX1dAc3RkQEA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kY3R5cGVAREBzdGRAQA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kY3R5cGVAR0BzdGRAQA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kRml4ZWRCbG9ja1NpemVAJDBCQUBAQ3J5cHRvUFBAQA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kSW5wdXRSZWplY3RpbmdAVkJ1ZmZlcmVkVHJhbnNmb3JtYXRpb25AQ3J5cHRvUFBAQEBDcnlwdG9QUEBA","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kSXRlcmF0ZWRIYXNoQElVPyRFbnVtVG9UeXBlQFc0Qnl0ZU9yZGVyQENyeXB0b1BQQEAkMDBAQ3J5cHRvUFBAQCQwRUFAVkhhc2hUcmFuc2Zvcm1hdGlvbkAyQEBDcnlwdG9QUEBA","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kSXRlcmF0ZWRIYXNoQmFzZUBJVkhhc2hUcmFuc2Zvcm1hdGlvbkBDcnlwdG9QUEBAQENyeXB0b1BQQEA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kSXRlcmF0ZWRIYXNoV2l0aFN0YXRpY1RyYW5zZm9ybUBJVT8kRW51bVRvVHlwZUBXNEJ5dGVPcmRlckBDcnlwdG9QUEBAJDAwQENyeXB0b1BQQEAkMEVBQCQwQ0FAVlNIQTI1NkAyQCQwQ0FAJDAwQENyeXB0b1BQQEA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kbWVzc2FnZXNAX1dAc3RkQEA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kbWVzc2FnZXNAREBzdGRAQA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kbWVzc2FnZXNAR0BzdGRAQA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kbW9uZXlfZ2V0QF9XVj8kaXN0cmVhbWJ1Zl9pdGVyYXRvckBfV1U/JGNoYXJfdHJhaXRzQF9XQHN0ZEBAQHN0ZEBAQHN0ZEBA","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kbW9uZXlfZ2V0QERWPyRpc3RyZWFtYnVmX2l0ZXJhdG9yQERVPyRjaGFyX3RyYWl0c0BEQHN0ZEBAQHN0ZEBAQHN0ZEBA","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kbW9uZXlfZ2V0QEdWPyRpc3RyZWFtYnVmX2l0ZXJhdG9yQEdVPyRjaGFyX3RyYWl0c0BHQHN0ZEBAQHN0ZEBAQHN0ZEBA","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kbW9uZXlfcHV0QF9XVj8kb3N0cmVhbWJ1Zl9pdGVyYXRvckBfV1U/JGNoYXJfdHJhaXRzQF9XQHN0ZEBAQHN0ZEBAQHN0ZEBA","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kbW9uZXlfcHV0QERWPyRvc3RyZWFtYnVmX2l0ZXJhdG9yQERVPyRjaGFyX3RyYWl0c0BEQHN0ZEBAQHN0ZEBAQHN0ZEBA","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kbW9uZXlfcHV0QEdWPyRvc3RyZWFtYnVmX2l0ZXJhdG9yQEdVPyRjaGFyX3RyYWl0c0BHQHN0ZEBAQHN0ZEBAQHN0ZEBA","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kbW9uZXlwdW5jdEBfVyQwMEBzdGRAQA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kbW9uZXlwdW5jdEBfVyQwQUBAc3RkQEA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kbW9uZXlwdW5jdEBEJDAwQHN0ZEBA","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kbW9uZXlwdW5jdEBEJDBBQEBzdGRAQA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kbW9uZXlwdW5jdEBHJDAwQHN0ZEBA","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kbW9uZXlwdW5jdEBHJDBBQEBzdGRAQA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kbnVtX2dldEBfV1Y/JGlzdHJlYW1idWZfaXRlcmF0b3JAX1dVPyRjaGFyX3RyYWl0c0BfV0BzdGRAQEBzdGRAQEBzdGRAQA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kbnVtX2dldEBEVj8kaXN0cmVhbWJ1Zl9pdGVyYXRvckBEVT8kY2hhcl90cmFpdHNAREBzdGRAQEBzdGRAQEBzdGRAQA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kbnVtX2dldEBHVj8kaXN0cmVhbWJ1Zl9pdGVyYXRvckBHVT8kY2hhcl90cmFpdHNAR0BzdGRAQEBzdGRAQEBzdGRAQA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kbnVtX3B1dEBfV1Y/JG9zdHJlYW1idWZfaXRlcmF0b3JAX1dVPyRjaGFyX3RyYWl0c0BfV0BzdGRAQEBzdGRAQEBzdGRAQA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kbnVtX3B1dEBEVj8kb3N0cmVhbWJ1Zl9pdGVyYXRvckBEVT8kY2hhcl90cmFpdHNAREBzdGRAQEBzdGRAQEBzdGRAQA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kbnVtX3B1dEBHVj8kb3N0cmVhbWJ1Zl9pdGVyYXRvckBHVT8kY2hhcl90cmFpdHNAR0BzdGRAQEBzdGRAQEBzdGRAQA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kbnVtcHVuY3RAX1dAc3RkQEA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kbnVtcHVuY3RAREBzdGRAQA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kbnVtcHVuY3RAR0BzdGRAQA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kU2ltcGxlS2V5aW5nSW50ZXJmYWNlSW1wbEBWPyRDb25jcmV0ZVBvbGljeUhvbGRlckBWQ2hhQ2hhX1BvbGljeUBDcnlwdG9QUEBAVj8kQWRkaXRpdmVDaXBoZXJUZW1wbGF0ZUBWPyRBYnN0cmFjdFBvbGljeUhvbGRlckBVQWRkaXRpdmVDaXBoZXJBYnN0cmFjdFBvbGljeUBDcnlwdG9QUEBAVlN5bW1ldHJpY0NpcGhlckAyQEBDcnlwdG9QUEBAQDJAVUFkZGl0aXZlQ2lwaGVyQWJzdHJhY3RQb2xpY3lAMkBAQ3J5cHRvUFBAQFVDaGFDaGFfSW5mb0AyQEBDcnlwdG9QUEBA","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kU2ltcGxlS2V5aW5nSW50ZXJmYWNlSW1wbEBWPyRUd29CYXNlc0BWQmxvY2tDaXBoZXJAQ3J5cHRvUFBAQFVSaWpuZGFlbF9JbmZvQDJAQENyeXB0b1BQQEBWMTJAQENyeXB0b1BQQEA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kU3ltbWV0cmljQ2lwaGVyRmluYWxAVj8kQ29uY3JldGVQb2xpY3lIb2xkZXJAVkNoYUNoYV9Qb2xpY3lAQ3J5cHRvUFBAQFY/JEFkZGl0aXZlQ2lwaGVyVGVtcGxhdGVAVj8kQWJzdHJhY3RQb2xpY3lIb2xkZXJAVUFkZGl0aXZlQ2lwaGVyQWJzdHJhY3RQb2xpY3lAQ3J5cHRvUFBAQFZTeW1tZXRyaWNDaXBoZXJAMkBAQ3J5cHRvUFBAQEAyQFVBZGRpdGl2ZUNpcGhlckFic3RyYWN0UG9saWN5QDJAQENyeXB0b1BQQEBVQ2hhQ2hhX0luZm9AMkBAQ3J5cHRvUFBAQA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kdGltZV9nZXRAX1dWPyRpc3RyZWFtYnVmX2l0ZXJhdG9yQF9XVT8kY2hhcl90cmFpdHNAX1dAc3RkQEBAc3RkQEBAc3RkQEA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kdGltZV9nZXRARFY/JGlzdHJlYW1idWZfaXRlcmF0b3JARFU/JGNoYXJfdHJhaXRzQERAc3RkQEBAc3RkQEBAc3RkQEA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kdGltZV9nZXRAR1Y/JGlzdHJlYW1idWZfaXRlcmF0b3JAR1U/JGNoYXJfdHJhaXRzQEdAc3RkQEBAc3RkQEBAc3RkQEA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kdGltZV9wdXRAX1dWPyRvc3RyZWFtYnVmX2l0ZXJhdG9yQF9XVT8kY2hhcl90cmFpdHNAX1dAc3RkQEBAc3RkQEBAc3RkQEA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kdGltZV9wdXRARFY/JG9zdHJlYW1idWZfaXRlcmF0b3JARFU/JGNoYXJfdHJhaXRzQERAc3RkQEBAc3RkQEBAc3RkQEA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kdGltZV9wdXRAR1Y/JG9zdHJlYW1idWZfaXRlcmF0b3JAR1U/JGNoYXJfdHJhaXRzQEdAc3RkQEBAc3RkQEBAc3RkQEA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kVHdvQmFzZXNAVkJsb2NrQ2lwaGVyQENyeXB0b1BQQEBVUmlqbmRhZWxfSW5mb0AyQEBDcnlwdG9QUEBA","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kVmFyaWFibGVLZXlMZW5ndGhAJDBCQUAkMEJBQCQwQ0FAJDA3JDAzJDBBQEBDcnlwdG9QUEBA","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kd3N0cmluZ19jb252ZXJ0QFY/JGNvZGVjdnRfdXRmOEBfVyQwQkFQUFBQQCQwQUBAc3RkQEBfV1Y/JGFsbG9jYXRvckBfV0AyQFY/JGFsbG9jYXRvckBEQDJAQHN0ZEBA","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVl9GYWNldF9iYXNlQHN0ZEBA","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVl9HZW5lcmljX2Vycm9yX2NhdGVnb3J5QHN0ZEBA","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVl9Jb3N0cmVhbV9lcnJvcl9jYXRlZ29yeTJAc3RkQEA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVl9Mb2NpbXBAbG9jYWxlQHN0ZEBA","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVl9TeXN0ZW1fZXJyb3JAc3RkQEA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVkFsZ29yaXRobUBDcnlwdG9QUEBA","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVkFsZ29yaXRobVBhcmFtZXRlcnNAQ3J5cHRvUFBAQA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVkFsZ29yaXRobVBhcmFtZXRlcnNCYXNlQENyeXB0b1BQQEA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVkFycmF5U2lua0BDcnlwdG9QUEBA","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVkFTTjFPYmplY3RAQ3J5cHRvUFBAQA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVkFzeW1tZXRyaWNBbGdvcml0aG1AQ3J5cHRvUFBAQA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVkF1dG9TZWVkZWRSYW5kb21Qb29sQENyeXB0b1BQQEA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVmJhZF9hbGxvY0BzdGRAQA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVmJhZF9hcnJheV9uZXdfbGVuZ3RoQHN0ZEBA","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVmJhZF9jYXN0QHN0ZEBA","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVmJhZF9leGNlcHRpb25Ac3RkQEA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVkJhc2VAUmlqbmRhZWxAQ3J5cHRvUFBAQA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVkJFUkRlY29kZUVyckBDcnlwdG9QUEBA","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVkJFUkdlbmVyYWxEZWNvZGVyQENyeXB0b1BQQEA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVkJFUlNlcXVlbmNlRGVjb2RlckBDcnlwdG9QUEBA","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVkJpdEJ1Y2tldEBDcnlwdG9QUEBA","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVkJsb2NrQ2lwaGVyQENyeXB0b1BQQEA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVkJsb2NrVHJhbnNmb3JtYXRpb25AQ3J5cHRvUFBAQA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVkJ1ZmZlcmVkVHJhbnNmb3JtYXRpb25AQ3J5cHRvUFBAQA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVkJ5dGVBcnJheVBhcmFtZXRlckBDcnlwdG9QUEBA","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVkJ5dGVRdWV1ZUBDcnlwdG9QUEBA","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVkNoYUNoYV9Qb2xpY3lAQ3J5cHRvUFBAQA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVmNoYXJOb2RlQEA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVkNsb25hYmxlQENyeXB0b1BQQEA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVmNvZGVjdnRfYmFzZUBzdGRAQA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVkNvbnN0Qnl0ZUFycmF5UGFyYW1ldGVyQENyeXB0b1BQQEA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVkNyeXB0b01hdGVyaWFsQENyeXB0b1BQQEA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVkNyeXB0b1BhcmFtZXRlcnNAQ3J5cHRvUFBAQA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVkRFUkdlbmVyYWxFbmNvZGVyQENyeXB0b1BQQEA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVkRFUlNlcXVlbmNlRW5jb2RlckBDcnlwdG9QUEBA","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVkROYW1lTm9kZUBA","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVkROYW1lU3RhdHVzTm9kZUBA","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVkVuY0BSaWpuZGFlbEBDcnlwdG9QUEBA","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVmVycm9yX2NhdGVnb3J5QHN0ZEBA","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVkV4Y2VwdGlvbkBDcnlwdG9QUEBA","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVmV4Y2VwdGlvbkBzdGRAQA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVmZhY2V0QGxvY2FsZUBzdGRAQA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVmZhaWx1cmVAaW9zX2Jhc2VAc3RkQEA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVkdlbmVyYXRhYmxlQ3J5cHRvTWF0ZXJpYWxAQ3J5cHRvUFBAQA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVkhhc2hJbnB1dFRvb0xvbmdAQ3J5cHRvUFBAQA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVkhhc2hUcmFuc2Zvcm1hdGlvbkBDcnlwdG9QUEBA","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVkludGVnZXJAQ3J5cHRvUFBAQA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVkludmFsaWRBcmd1bWVudEBDcnlwdG9QUEBA","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVkludmFsaWREYXRhRm9ybWF0QENyeXB0b1BQQEA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVkludmFsaWRLZXlMZW5ndGhAQ3J5cHRvUFBAQA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVkludmFsaWRNYXRlcmlhbEBDcnlwdG9NYXRlcmlhbEBDcnlwdG9QUEBA","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVkludmFsaWRSb3VuZHNAQ3J5cHRvUFBAQA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVktleUFncmVlbWVudEFsZ29yaXRobUBDcnlwdG9QUEBA","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVmxlbmd0aF9lcnJvckBzdGRAQA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVmxvZ2ljX2Vycm9yQHN0ZEBA","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVk5hbWVWYWx1ZVBhaXJzQENyeXB0b1BQQEA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVk5vbmJsb2NraW5nUm5nQENyeXB0b1BQQEA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVk5vdENvcHlhYmxlQENyeXB0b1BQQEA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVk5vdEltcGxlbWVudGVkQENyeXB0b1BQQEA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVk51bGxOYW1lVmFsdWVQYWlyc0BDcnlwdG9QUEBA","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVk9JREBDcnlwdG9QUEBA","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVk9TX1JOR19FcnJAQ3J5cHRvUFBAQA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVm91dF9vZl9yYW5nZUBzdGRAQA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVnBhaXJOb2RlQEA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVlBhcmFtZXRlck5vdFVzZWRAQWxnb3JpdGhtUGFyYW1ldGVyc0Jhc2VAQ3J5cHRvUFBAQA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVnBjaGFyTm9kZUBA","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVnBETmFtZU5vZGVAQA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVlBLQ1M4UHJpdmF0ZUtleUBDcnlwdG9QUEBA","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVlByaXZhdGVLZXlAQ3J5cHRvUFBAQA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVlJhbmRvbU51bWJlckdlbmVyYXRvckBDcnlwdG9QUEBA","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVlJhbmRvbVBvb2xAQ3J5cHRvUFBAQA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVnJhbmdlX2Vycm9yQHN0ZEBA","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVnJ1bnRpbWVfZXJyb3JAc3RkQEA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVlNlbGZUZXN0RmFpbHVyZUBDcnlwdG9QUEBA","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVlNIQTI1NkBDcnlwdG9QUEBA","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVlNpbXBsZUtleUFncmVlbWVudERvbWFpbkBDcnlwdG9QUEBA","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVlNpbXBsZUtleWluZ0ludGVyZmFjZUBDcnlwdG9QUEBA","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVlNpbmtAQ3J5cHRvUFBAQA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVlN0b3JlQENyeXB0b1BQQEA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVlN0cmVhbVRyYW5zZm9ybWF0aW9uQENyeXB0b1BQQEA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVlN5bW1ldHJpY0NpcGhlckBDcnlwdG9QUEBA","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVnN5c3RlbV9lcnJvckBzdGRAQA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVlRpbWVyQENyeXB0b1BQQEA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVlRpbWVyQmFzZUBDcnlwdG9QUEBA","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVnR5cGVfaW5mb0BA","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVlZhbHVlVHlwZU1pc21hdGNoQE5hbWVWYWx1ZVBhaXJzQENyeXB0b1BQQEA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVldhaXRhYmxlQENyeXB0b1BQQEA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVldhbGtlckBCeXRlUXVldWVAQ3J5cHRvUFBAQA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVngyNTUxOUBDcnlwdG9QUEBA","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"LkNSVCRYQ0FB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"LkNSVCRYSUE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"LkNSVCRYSUFB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"LkNSVCRYSUFD","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"LkNSVCRYSVo=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"LkNSVCRYTEE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"LkNSVCRYTFo=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"LkNSVCRYUEE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"LkNSVCRYUFhB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"LkNSVCRYUFo=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"LmRlc2t0aGVtZXBhY2s=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"LmRpYWdjYWI=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"LmZwdGFibGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lm1zc3R5bGVz","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lm5vbWVkaWE=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"LnJkYXRhJHN4ZGF0YQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"LnJkYXRhJHZvbHRtZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"LnJkYXRhJHp6emRiZw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"LnNlYXJjaC1tcw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"LnRoZW1lcGFjaw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"LngyYW55bG9jaw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"LycvKS9BL0UvSy9NL1EvVy9vL3UvfS8=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"LzlaIG02JWhVJi4vRXdaSyJOZUBYX0RQdWoyMjBmOWE5Zi1hOWE2LTQxYjItOGRiZS02ZWUwYjA1YjhhMzI=","type":"Ansi","source":"File String Dumps","process":null,"filename":"mkdirp.x2anylock","compromised":null,"detection_total":null,"total":null},{"value":"MCAwJDAoMCwwMDA0MDgwPDBAMEQwSDBMMFAwVDBgMGQwaDBsMHAwdDB4MHww","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"MCAwKDAwMDgwQDBIMFAwWDBgMGgwcDB4MA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"MCAwKDBAMFAwVDBYMFwwYDBkMHgwfDA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"MCAwPTBEMEowTzBdMA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"MCExLjFZMU8zfDQ5ZzwmPS49ND0=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"MCMwLzA7MEUwajB7MA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"MCMwNjBBMFUw","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"MCQwKDAsMDAwODBQMGAwZDB0MHgwfDA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"MCQwLDA0MDwwRDBMMFQwXDBkMGwwdDB8MA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"MCQwMDBQMFgwYDBsMA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"MCYwNTBVMGww","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"MCgwLDAwMDgwUDBgMGQwdDB4MHww","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"MCkwUjJaMmAy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"MCwwPDBMMFAwVDBoMGwwcDA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"MCwwTzBqMHcw","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"MC0wOzBfMGYwbDB0MA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"MDAjMCkwNzA7MFUwWTBbMGcwcTB5MH0w","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"MDAwODBAMFAwWDB8MA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"MDEyMzQ1Njc4OS0=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"MDEyMzQ1Njc4OWFiY2RlZg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"MDEyMzQ1Njc4OUFCQ0RFRmFiY2RlZi0rWHg=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"MDEyMzQ1Njc4OUFCQ0RFRmFiY2RlZi0rWHhQcA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"MDEyMzQ1Njc4OWFiY2RlZmdoaWprbG1ub3BxcnN0dXZ3eHl6","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"MDQwPDBEMEwwWDB4MA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"MDwwQDBEMFAwVDBgMA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"MEQwTzBZMGgwcDB4MG8x","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"MGYzeDM0NXQ1","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"MGY1ZyJPfEcyb3s0RF82TGteUkZHPE53UXQ5NXIrZE9afUdldD4pXGh5UkIhX0BWbnpcfVFPQzQiZG5QMEdOQyUySGZMa1htaShnbjloezJecHxQOjcqdFE9fnQzSjROKHYzc05Ya01hLz13NXtDZ089IGxbWDtIKjJRX0V9UWJ8Zil4XUgwdW12ST9iQ28mZktYMDt4J3JkLjQtRDZrd2wvPzIyMGY5YTlmLWE5YTYtNDFiMi04ZGJlLTZlZTBiMDViOGEzMg==","type":"Ansi","source":"File String Dumps","process":null,"filename":"index.js.x2anylock","compromised":null,"detection_total":null,"total":null},{"value":"MFAwVDBYMFwwcDB4MA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"MSAxJDEoMSwxMDE0MTgxPDFAMUQxSDFMMVAxVDFYMVwxYDFkMWgxbDFwMXQxeDF8MQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"MSAxJDEoMSwxMDE0MTgxPDFEMVwxbDFwMQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"MSAxJDEoMSwxNDFMMVwxYDFwMXQxeDF8MQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"MSAxJDEsMUQxVDFYMWgxeDE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"MSAxJzEuMTkx","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"MSAxKDEwMTgxQDFIMVAxWDFgMWgxcDF4MQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"MSAxMDE0MTgxPDFAMUQxTDFQMVQxWDFcMWAxZDFoMWwxcDE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"MSAxMDE0MTgxPDFAMUgxYDFkMWgxbDE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"MSAyJDIoMiwyMDI0MjgyPDJAMkQyUDJUMlgyXDJgMmQyaDJsMnAyMDM0MzgzQDNwMw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"MSExJzEtMTkxQzFFMUsxXTFhMWcxbTFzMQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"MSQxKDEuMTIxODE8MUIxRjFMMVAxVjFaMWAxZDFqMW4xdDF4MX4x","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"MSkxOTFFMVQx","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"MSwxPTFCMUcxVzFoMW0xcjE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"MTAxODFAMUgxUDFYMWAxbDE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"MTIxODE+MUQxSjFQMVYxazE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"MTMxOjFRMWcxdDF5MQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"MTNMNlA2VDZYNlw2YDY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"MTQxPDFEMUwxWDF4MQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"MTUxPTFHMVYxaDE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"MTYxRTFlMXwx","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"MTYySDJwMncy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"MTcxVDFoMXMx","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"MTcyVjJjMmIz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"MVUyXzJpMnMySDM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"MVo7XjtiO2Y7","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"MiAyJDIoMiwyMDI0MjgyPDJAMkQySDJMMlAyVDJYMlwyYDJkMmgybDJwMnQyeDJ8Mg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"MiAyJDIoMiwyMDI4MlAyYDJkMnQyeDJ8Mg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"MiAyKDIwMjgyQDJIMlAyWDJgMmgycDJ4Mg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"MiAyODJIMlgyXDJgMmQyaDJsMnAydDJ4Mnwy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"MiMyYTJsMjM0XzQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"MiQyKDIsMjAyNDI4MjwyRDJIMkwyUDJUMlwydDI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"MigyNDJUMmAy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"MikyNTJZMl0yYzJrMm8ydTJ3Mnsy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"MikyRjJbMmAy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"MiwyMDI0MjgyPDJAMkgyYDJwMnQy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"MiwyNDI8MkQySDJMMlQyaDJwMngy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"MiwyODJYMmAyaDJwMngy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Mi4yPzJEMkkyWTJqMm8ydDI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Mi8yNjJIMnAy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"MjAyUDJsMnAy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"MjEzQDNdM3Iz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"MjIwZjlhOWYtYTlhNi00MWIyLThkYmUtNmVlMGIwNWI4YTMy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Mkg0TDRQNFQ0WDRcNGA0ZDRoNGw0cDR0NHg0fDQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"MlhWJnAlZDtpaWhHYSgoQ1dkOyowRiRCamFrSH1VbjFuUlhgdllgNlFxPyt4cFJ8Rl92bVYiNUcmXWw1YyBFSzhXWUR+KjckWSZIUC5aKG1ieltpbGlTL15xVmMjWTIxKCpVK1dKdFNfN2xFcFFxWFUlZGZHJEJNJlV4OFR7b1d2T3hAZWYnTjR4K2koSlpuRVFcNEArJTFHLWBZK2ViXlQiOyk6RE1PIyQ2LV1+PUFhPiNJJlNfcD4jZktmXlJFVHkudyEmXyogWT1Hc1BXRGY+PWwnYipOJSlMXStQNiBOLFpyPm4xXyNVRmZ9MDNDYSBXX30rdEByZSxtYjlBc3IpNSBdRFtMSkNdQSleNUkhSDhyTjI7UV1IfT5oVCx4dzdTWDIyMGY5YTlmLWE5YTYtNDFiMi04ZGJlLTZlZTBiMDViOGEzMg==","type":"Ansi","source":"File String Dumps","process":null,"filename":"internal.js.x2anylock","compromised":null,"detection_total":null,"total":null},{"value":"MnszQTVJNVE1WTV3NQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"MyAzJDMoMywzMDM0MzgzPDNAM0QzSDNMM1AzVDNYM1wzYDNkM2gzbDNwMyA6JDooOiw6MDo0Ojg6PDpAOkQ6SDpMOlA6VDpYOlw6","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"MyAzJDMoMywzMDM0MzgzPDNAM0QzSDNMM1AzVDNYM1wzYDNkM2gzbDNwM3QzeDN8Mw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"MyAzJDM8M0wzUDNgM2QzdDN4Mw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"MyAzKDMwMzgzQDNIM1AzWDNgM2gzcDN4Mw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"MyIzKTMwMzcz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"MyMzJzNiM2czbDM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"MyQzKDNAM0QzXDNgM3gz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"MyQzLDM0MzwzRDNMM1QzXDNkM2wzdDN8Mw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"MyQzLDM4M1gzYDNsMw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"MyUzKzMvMzUzQTNHM1szXzNnM2szczN5Mw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"MygzODM8M0AzRDNIM1AzaDN4M3wz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"MywzMDM0MzgzPDNEM1wzbDNwMw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"MywzMTM2M1EzXjNnM2wzcTM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"MywzODNYM2AzaDNwM3wz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"My80NzRZNGA0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"MzF9bz9IMSxAU2ZoJkswNG0jeXRGKUBXOU9zdzMiQE5XMlxVaVpwcHN3YkI+Kk9EJ0FKOmJHYD52Mm59PVF9OS8+RiEkNipQWGkjM3V+Z2E5PTt6QWsxb1U5Ulttd1YxRTZnJnlGejN7aiBGPEY0eHAoJXwyMjBmOWE5Zi1hOWE2LTQxYjItOGRiZS02ZWUwYjA1YjhhMzI=","type":"Ansi","source":"File String Dumps","process":null,"filename":"de-ch.js.x2anylock","compromised":null,"detection_total":null,"total":null},{"value":"Mzc0XDRmNHA0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"MzgzQjNhM2szdzM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"MzgzSjNaM2YzbTM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Mz40SjRYNGQ0czQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"M0FLZFw4ZnNMbEBPeH1IeiZOJV1CU1s0IyElOi1ISE9FZW4tIHhYRVpwJzhETC12cjVtJDtSTDZdWVNzP3ZPdlM+WDFPI1ZcJ2BefCtMeGZnbyopWkRuXDpBISh1cWl9UTpPIndgZ3deVjIyMGY5YTlmLWE5YTYtNDFiMi04ZGJlLTZlZTBiMDViOGEzMg==","type":"Ansi","source":"File String Dumps","process":null,"filename":"includes.js.x2anylock","compromised":null,"detection_total":null,"total":null},{"value":"M1Q+WD5cPmA+ZD5oPmw+cD50Png+fD4=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"M1g0XDRgNGQ0aDRsNHA0dDQzNWQ1","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"NCA0JDQoNCw0MDQ0NDg0PDRANEQ0SDRMNFA0VDRYNFw0YDRkNGg0bDRwNHQ0eDR8NA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"NCA0JDQoNDA0SDRYNFw0bDRwNHQ0eDR8NA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"NCA0JDQ0NDg0PDRANEQ0TDRkNHQ0eDQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"NCA0JDQ0NDg0SDRMNGQ0dDR4NHw0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"NCA0JTRGNFY0bjQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"NCA0LTRANFI0WDRdNA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"NCQ0KjQzNFY0XjRsNHg0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"NCQ0NDRENEg0TDRQNGQ0aDRwNA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"NCg0SDRQNFg0aDRwNHg0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"NCk1NTU/NU41WjU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"NC40NTRMNGI0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"NDA0ODRANEw0bDR4NA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"NDA0UDRsNHA0eDQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"NDA1NDU4NWA1ZDVoNWw1cDV0NXg1fDU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"NDQ0RzRmNHg0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"NDc0RTRVNFc0YzRpNG00","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"NDc1RDVRNWA1","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"NDo0RDVONVo1","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"NDw0RDRQNHA0eDQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"NSA1JDUoNSw1MDU0NTg1PDVANUQ1SDVMNVA1VDVYNVw1YDVkNWg1bDVwNXQ1eDV8NQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"NSA1JDU0NTg1PDVANUQ1TDVkNXQ1eDU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"NSA1KDUsNTA1ODU8NUA1RDVMNWA1aDVwNXg1fDU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"NSA1QDVMNWw1dDU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"NSA8PDxcPHw8","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"NSE1PjVTNVg1","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"NSQ1LDU0NTw1RDVMNVQ1XDVkNWw1dDV8NQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"NSQ1LDU0NTw1RDVMNVQ1XDVoNQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"NSY1NTU/NUw1VjVmNQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"NSg1LDUwNTQ1ODU8NUA1RDVYNVw1dDV4NXw1","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"NSg1LDU0NUw1XDVgNXA1dDV4NXw1","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"NSw2MDY0Njg2PDZANkQ2SDZMNlA2VDZYNlw2YDZkNg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"NS01MzU7NUE1UTVlNW81cTV3NXs1fTU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"NTA1PDVINVQ1YDVsNQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"NTg1QTViNXQ1","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"NV82YzZnNms2bzZzNnc2ezY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"NUE1TzVlNWw1","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"NUQ3b1ZvcjVcIVBqOi5LdnBgV1EkJmk8el1gaEw/XFczeC5+R3FyMGg4RkddOlhuW2xMXyk8MicsTDFZOEBNdEByOE94Ol5CLXxiUWNxZW1XW0F0ejQ/U2kjb1VySFk/ajZHXzRgbjMlRid6P15TLURJW2xuYE5vSDl9KUhlKDQwTCJ4bnQzMUhbJ1okUyVwPVU3Tyx0MmRWOFFafC8qR0hhcnksKnFZcCleLyZwZEkmUWhrdFo3MGhwJU0zeURpe3o5YXQ8cmA+Y14/IiVPP2okbHhJX0c8ZSNeMF9ScHlEZ3FPdTEwNTlFQls2Y1I0L3VteztFNkJ5TVl9JzJzXD9VWU1vdk0yMjBmOWE5Zi1hOWE2LTQxYjItOGRiZS02ZWUwYjA1YjhhMzI=","type":"Ansi","source":"File String Dumps","process":null,"filename":"tg.js.x2anylock","compromised":null,"detection_total":null,"total":null},{"value":"NVE1ZjVrNX01","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"NVY2Rjd2OEk5ITo=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"NiA2JDYoNiw2MDY4Njw2QDZENkg2TDZQNlQ2WDZcNmA2ZDZoNmw2cDZ0Nng2fDY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"NiA2JDYoNjA2SDZYNlw2bDZwNg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"NiA2JDY0Njg2PDY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"NiA2KDYwNjg2RDZkNmw2dDY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"NiM2KjYvNjU2OzZANk42WzZtNnw2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"NiM2MTY1Njc2OzZNNk82UzZZNmE2azZtNg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"NiQ2NDZENkg2WDZcNmA2ZDZoNnA2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Nic2LzZONnw2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"$49","type":"Ansi","source":"File String Dumps","process":null,"filename":"index.d.ts.x2anylock","compromised":null,"detection_total":null,"total":null},{"value":"Nis2UjZZNm82","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Niw2MDY0Njg2PDZANkQ2SDZMNlA2VDZYNlw2YDZkNg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Niw2NDY8NkQ2TDZUNlw2aDY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Ni03NzddN3c3","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"NjA2QDZENkg2TDZQNlQ2aDZsNnw2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"NjA2VDZmNn02","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"NjA2WjZoNnA2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"NjE3OjdDN043VjdgN2s3dDd6Nw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"NjQ2QDZINmA2aDZ8Ng==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"NjQ4UThfOGU4fTg=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"NjcjNzM3PzdJN1M3XTdnN3E3ezc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Njc5N1E3ZDd2Nw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"NkE3SDdmN3U3","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"NiVQUk9HUkFNRklMRVMlXE1pY3Jvc29mdCBWaXN1YWwgU3R1ZGlvXDIwMjJcQ29tbXVuaXR5XFZDXHZjcGtnXGJ1aWxkdHJlZXNcY3J5cHRvcHBcc3JjXFRPUFBfOF85XzAtYTFhOWJlNDk3ZS5jbGVhblxnZjJuX3NpbWQuY3Bw","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"NkQ3SDdMN1A3VDc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"NlQ3WDlcOWA5ZDloOWw5cDl0OQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"NlRLYWZcJjIyMGY5YTlmLWE5YTYtNDFiMi04ZGJlLTZlZTBiMDViOGEzMg==","type":"Ansi","source":"File String Dumps","process":null,"filename":"flow.js.x2anylock","compromised":null,"detection_total":null,"total":null},{"value":"Nlk2XjZmNjc3ZDdwNw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"NyA3JDcoNyw3MDc0Nzg3","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"NyA3JDcoNyw3MDc0Nzg3PDdAN0Q3SDdMN1A3VDdYN1w3YDdkN2g3bDdwN3Q3eDd8Nw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"NyA3MDc0Nzg3PDdAN0g3YDdwN3Q3","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"NyM3OzdDN0w3ZzdxNw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"NyQ3LDc0Nzw3RDdMN1Q3XDdkN2w3dDd8Nw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"NyQ3MDdQN1g3YDdsNw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"$4a","type":"Ansi","source":"File String Dumps","process":null,"filename":"syncres.dll.mui.x2anylock","compromised":null,"detection_total":null,"total":null},{"value":"Nyw3MDc0N0w3UDdoN3g3fDc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"NzA3NDc4Nzw3QDdEN0g3TDdQN1Q3WDdcN2A3ZDdoN2w3cDd0N3g3fDc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"NzE3RzdQN1s3Yzc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"NzJMcVI6M2lUNTFQbE5tSSdOOU02S3klTSFzJWtjWFYuIykidV1cYlhXMlYuUEIgcSgqbHpxcUdfXEQxL3QxSjkgT2RsLEkuN2hBTXUmZ1VrISMyKzojXilNUmoiL3Zva1BQX2kyJjN1MSVzTSRcK1tWRFNhNG0zLkxxPmd+RDlASisyZEVFNXJYJTgrXk0nMkZ8JyhMNyFBImx5P0N+ejJKVS17P19Sfic4TV1OXCFFWyhmK1dAMEEkQEFSeVZUdEhQYkdOMmJGX3V9dWRgamdbfFdqYjV3Rkt5ZXwwWi5UMy5cQVpFMVsiVUVnLTVpZHg4eDE/VWw9VTZcUjIyMGY5YTlmLWE5YTYtNDFiMi04ZGJlLTZlZTBiMDViOGEzMg==","type":"Ansi","source":"File String Dumps","process":null,"filename":"compile.js.x2anylock","compromised":null,"detection_total":null,"total":null},{"value":"NzQ3QDdgN2w3","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"NzQ3RDdIN0w3UDdUN1g3YDd4N3w3","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"NzQ4ODg8OHA4dDh4OA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"NzdCYzJ8I0prQ3JJeiFZOl9pNTNFc311MT94JUBQIks2b1lTNzEiXDR5MStpbUE6RD1IOjk7dHdsIkE2YDd5XVFJKko8NFFVJUhNMEpPWltNcjkoVld7el1HR2AwRjxOfD9ee0EwXjFaZmt0U1MkO08sX0lEX3plOjxzYScjIHRGIlEyQi8rYDdvfkFVKEh7ZCEwZ0NFQ2h2XTZRczpia2tLfTJ9UTE0IDw9I0MuJz8lW1BIbmkqMWRSQnhfYT1ObSVTRDEgPVhjUlxfM2N7JTZBcEVdbCAnOF1YSz5AWzReTyJ1LUF8Tyd9MjIwZjlhOWYtYTlhNi00MWIyLThkYmUtNmVlMGIwNWI4YTMy","type":"Ansi","source":"File String Dumps","process":null,"filename":"write_concern.js.x2anylock","compromised":null,"detection_total":null,"total":null},{"value":"Nzk3UDdeN3E3fDc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Nz83RTdJN083XTdhN3U3","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"N144QTldOXg5","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"N1AsK2MvfXl9cmQiN05mSl5qYkh5OkVRLEJOcSBhbSIkJlReNjV3XS02IkFhRko+ZHtreWZlI15pdm4/OHlfS3ViTStubTkqdXAuMFc2RWlhMjIwZjlhOWYtYTlhNi00MWIyLThkYmUtNmVlMGIwNWI4YTMy","type":"Ansi","source":"File String Dumps","process":null,"filename":"settle.js.x2anylock","compromised":null,"detection_total":null,"total":null},{"value":"OCA4JDgoOCw4MDg0ODg4PDhAOEQ4SDhMOFA4VDhYOFw4YDhkOGg4bDhwOHQ4eDh8OA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"OCA4JDg8OEA4WDhcOHQ4eDg=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"OCA4KDgwODg4RDhkOGw4dDh8OA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"OCE4Mzg1OEE4RzhLOFM4VzhfOGU4bzhxOH04","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"OCQ4KDgsODA4NDg4ODw4QDhEOEg4TDhQOFQ4XDh0OA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"OCQ4LDg4OFg4ZDg=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"OCQ4RDhMOFQ4YDg=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"OCU4SjhjOHM4","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"OCY4LThrOHM4eThnOQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"OCY5NDlfOXA5","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"OCc4Lzg1ODs4SDhOOF44ZTh1OHo4","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"OCk4NThMOGk4fTg=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"OCo4RjhQOFc4ajg=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"OCw4MDhAOEQ4SDhMOFA4WDhwOA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"OC04NzhYOF04ejg=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"ODY8NkA2RDZINkw2UDZUNlg2XDZgNmQ2aDZsNnA2dDZ4Nnw2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"ODhIOF44dDh9OA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"ODk4RThPOFk4XThjOGc4bThzOHk4","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"OD85STlmOXs5","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"OF05ZjlyOX45","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"OEI5UTlYOV85azlyOQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"OEM4XzhqOHM4fDg=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"OHY4OTlJOVo6ajo=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"OSA5JDkoOSw5MDk0OTg5PDlAOUQ5SDlMOVA5XDlgOWQ5aDlsOXA5dDl4OXw5","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"OSA5JDkoOSw5MDk0OTg5PDlAOUQ5SDlMOVA5VDlYOVw5YDlkOWg5bDlwOXQ5eDl8OQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"OSA5JDkoOSw5MDk0OTg5PDlAOUQ5SDlMOVA5VDlYOVw5bDlwOXQ5eDl8OQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"OSA5JDk4OUg5TDlcOWA5ZDl8OQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"OSA5KDkwOTg5QDlIOVA5WDlgOWg5dDk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"OSE5RTllOXs5","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"OSI5Lzk0OTo5QDlGOT47cTs=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"OSI6KDotOjQ6RDpSOmM6ezo=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"OSM5JTkpOS85PTlBOU05WzlrOXk5fTk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"OSQ5LDk0OTw5SDlsOQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"OSY6MjpKOlI6","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"OSc5MDk3OWk5eTk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"OSg5ODk8OUA5RDlIOUw5UDlUOVg5XDlkOXw5","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"OSg6Mjo8OmE6cjp8Og==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"OSs6OTpGOnU6QTtPO1k7","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"OSw5MDlAOUQ5SDlMOVA5WDlwOQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"OTI5QTlKOVM5WDlnOXA5fjk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"OTQ5PDlEOUg5TDlQOVg5bDl0OXw5","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"OTg6PTpcOmE6","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"OUNgdTk5Q1x0NA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"OVY7QD5ZPm4+","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"OVpSLnUrMENuPiAzXX1tcDB2PEVtUz55IGMvRl16PzM9Mnw8bS9hclhWYTJrPkBBM3wkd2Y/Smt3NS9FTU9UPCQkVScpKiBPQXw3MjIwZjlhOWYtYTlhNi00MWIyLThkYmUtNmVlMGIwNWI4YTMy","type":"Ansi","source":"File String Dumps","process":null,"filename":"list_search_indexes_cursor.ts.x2anylock","compromised":null,"detection_total":null,"total":null},{"value":"OiA6JDooOiw6MDo0Ojg6PDpAOkQ6SDpMOlA6VDpYOlw6YDpkOmg6bDpwOnQ6eDp8Og==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"OiA6JDo8Okw6UDpUOlg6XDpgOnQ6eDo=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"OiA6LDpQOnA6eDo=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"OiA6PDpXOmg6","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"OiA/Jz9EP0g/TD9QP1Q/","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"OiBJViBsZW5ndGg=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"OiB0aGlzIG9iamVjdCBjYW5ub3QgdXNlIGEgbnVsbCBJVg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"OiB0aGlzIG9iamVjdCBkb2Vzbid0IHN1cHBvcnQgYSBzcGVjaWFsIGxhc3QgYmxvY2s=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"OiB0aGlzIG9iamVjdCBkb2Vzbid0IHN1cHBvcnQgbXVsdGlwbGUgY2hhbm5lbHM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"OiB0aGlzIG9iamVjdCBkb2Vzbid0IHN1cHBvcnQgcmVzeW5jaHJvbml6YXRpb24=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"OiB0aGlzIG9iamVjdCByZXF1aXJlcyBhbiBJVg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"OiE6Ljo1OkQ6UzpaOmE6bTp0On46","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"OiI6NDo7OmY6czo=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"OiQ6LDo0Ojw6RDpMOlQ6XDpkOmw6dDp8Og==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"OiQ6LDo4Olg6YDpoOnQ6","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"OiQ6PDpAOlg6XDp0Og==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"OiQ6STpQOl06","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Oic6KzoxOks6UTpbOmM6ZzptOnk6","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Oig6MDpEOkw6YDpoOnA6eDp8Og==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Oig6ODo8OkA6WDpoOmw6cDp0Ong6fDo=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Oi07RDtMPHA8","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"OjE7RTtYO3A7","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"OjVwdEkuVCg=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"OkFNOmFtOlBNOnBt","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"OkphbjpKYW51YXJ5OkZlYjpGZWJydWFyeTpNYXI6TWFyY2g6QXByOkFwcmlsOk1heTpNYXk6SnVuOkp1bmU6SnVsOkp1bHk6QXVnOkF1Z3VzdDpTZXA6U2VwdGVtYmVyOk9jdDpPY3RvYmVyOk5vdjpOb3ZlbWJlcjpEZWM6RGVjZW1iZXI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"OnI6NztmO3o7","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"OlN1bjpTdW5kYXk6TW9uOk1vbmRheTpUdWU6VHVlc2RheTpXZWQ6V2VkbmVzZGF5OlRodTpUaHVyc2RheTpGcmk6RnJpZGF5OlNhdDpTYXR1cmRheQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"OyA7JDsoOyw7MDs0Ozg7PDtAO0Q7TDtkO2g7","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"OyA7KDswOzg7QDtIO1A7WDtgO2g7cDt4Ow==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"OyA7ODs8O0Q7SDtMO1Q7bDt8Ow==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"OyA7QDtIO1A7WDtkOw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"OyE7IzstOzk7RTtTO1k7XztxO3s7","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"OyE7KzsyO0s7WjthO2g7dDt7Ow==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"OyE7KztiO2Y7cTs=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"OyM7MTs5O0M7Zjt4Oy48Vjw=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"OyQ7KDssOzA7NDs=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"OyQ7KDs4Ozw7QDtIO2A7cDt0O3w7","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"OyQ7LDs0Ozw7RDtMO1Q7XDtkO2w7dDt8Ow==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"OyQ7MDtQO1g7YDtoO3A7eDs=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"OyU7MztNO1o7YTtvOw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"OyU7RTtcO3s7","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"OyY7NDtFO1c7XjtkOw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Oyg7LDs8O0A7RDtIO0w7VDtsO3w7","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"OzQ7PDtIO2g7cDt8Ow==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Ozc8QTxePHM8eDw=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"$4b","type":"Ansi","source":"File String Dumps","process":null,"filename":"source-map.debug.js.x2anylock","compromised":null,"detection_total":null,"total":null},{"value":"O0Q8WjwmPT89ST1qPQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"O2g+RT9LP2E/Zz9tP3Y/ez8=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"$4c","type":"Ansi","source":"File String Dumps","process":null,"filename":"README.md.x2anylock","compromised":null,"detection_total":null,"total":null},{"value":"O0w8YjxyPHw8","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"O3ZeI3x0YDozekZ0d2UvQWhBZkYkdl1PdkM2JTdsPFQpQXMpVkZ2LnxNSUU7RkFqWHNfV0BeNiEvLVRtWVJKYDY2ZHMyMjBmOWE5Zi1hOWE2LTQxYjItOGRiZS02ZWUwYjA1YjhhMzI=","type":"Ansi","source":"File String Dumps","process":null,"filename":"estimated_document_count.js.x2anylock","compromised":null,"detection_total":null,"total":null},{"value":"PCA8KDwwPDg8QDxIPFA8WDxgPGg8cDx4PA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"PCA8ODxIPEw8XDxgPGQ8bDw=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"PCQ8LDw0PDw8RDxMPFQ8XDxkPGw8dDx8PA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"PCQ8NTw6PEg8VjxiPGg8cTw=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"PCU8KzwxPDg8djw=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"PCc8Ljw7PFA8ZTx3PH48","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"PCg8LDxEPFQ8ZDxoPGw8","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"PCg8NDxAPEw8WDxkPHA8fDw=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"PCg8NDxUPGA8","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"PCk8NTxDPE88UzxbPGU8azxxPA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"PCw8Mzw6PEY8TTxbPGI8dDw=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"PCw8PDxAPFA8VDxcPHQ8","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"PCw8PDxAPFA8VDxYPFw8YDxoPA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"PCw8TDxbPGI8cDx7PA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"PDA8NzxsPHM8Kz48Plg+","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"PDBAMEQweDB8MA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"PDE8PTxJPGk8","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"PDE8RDxbPHY8","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"PDg8QDxIPFA8WDxkPA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"PDp0JTwsdCE8L3Ul","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"PDp0NDwsdDA8L3U0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"PDw8RDxMPFA8WDxgPGw8","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"PD94bWwgdmVyc2lvbj0nMS4wJyBlbmNvZGluZz0nVVRGLTgnIHN0YW5kYWxvbmU9J3llcyc/Pjxhc3NlbWJseSB4bWxucz0ndXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTphc20udjEnIG1hbmlmZXN0VmVyc2lvbj0nMS4wJz4gIDx0cnVzdEluZm8geG1sbnM9InVybjpzY2hlbWFzLW1pY3Jvc29mdC1jb206YXNtLnYzIj4gICAgPHNlY3VyaXR5PiAgICAgIDxyZXF1ZXN0ZWRQcml2aWxlZ2VzPiAgICAgICAgPHJlcXVlc3RlZEV4ZWN1dGlvbkxldmVsIGxldmVsPSdhc0ludm9rZXInIHVpQWNjZXNzPSdmYWxzZScgLz4gICAgICA8L3JlcXVlc3RlZFByaXZpbGVnZXM+ICAgIDwvc2VjdXJpdHk+ICA8L3RydXN0SW5mbz48L2Fzc2VtYmx5Pg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"PEQ9VD1nPS8/","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"PGVsbGlwc2lzPg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"PEl0QzxMdDM8VHQjPGg=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"PHVua25vd24+","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"PSA9JD0oPSw9MD00PTg9PD1APUQ9SD1MPVA9VD1YPVw9YD1kPWg9bD1wPXQ9eD18PQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"PSA9JD08PUw9UD1UPVg9YD1kPWg9bD1wPXQ9eD18PQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"PSA9KD0wPTg9QD1IPVA9WD1gPWg9cD14PQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"PSA9KD0wPTg9QD1MPWw9dD0=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"PSA9KD08PUQ9TD1UPVg9XD1kPXg9","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"PSE9LD0yPTg9TD1UPQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"PSE9LT0zPTc9Pz1DPW89cz11PXk9ez0=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"PSM+OD5JPlc+Xj5rPg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"PSQ9KD04PTw9QD1EPUg9UD1oPXg9fD0=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"PSQ9LD00PTw9RD1MPVQ9XD1kPWw9dD18PQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"PSQ9MD08PUg9VD1gPWw9eD0=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"PSQ9Mz06PUE9TT1UPV49ZT0=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"PSQ9PD1EPVw9ZD1sPXQ9fD0=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"PSc/XD9jP24/","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"PSg9LD08PUA9RD1IPUw9VD1sPXw9","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"PSs9Mj07PUI9","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"PSs9Mj1IPVI9Jj4=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"PS09Pz1RPV09bz0=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"PTA9ND1MPVw9YD1kPWg9bD1wPQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"PTw9Qz1JPU49XD0=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"PT4pPkQ+UD5ePmo+eD4=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"PT4+Xz4wP1Y/","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"PVY9Yz11PXs9","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"PVg+XD5gPmQ+aD5sPnA+dD54Pnw+","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"PiA+KD4wPjg+QD5IPlA+WD5gPmg+cD54Pg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"PiA+LD44PkQ+UD5cPmg+dD4=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"PiA+QD5MPmw+eD4=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"PiM+KT4vPjM+QT5XPmM+ZT53Pg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"PiQ+LD40Pjw+RD5MPlQ+XD5kPmw+dD58Pg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"PiQ+MD5QPlg+YD5oPnA+eD4=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"PiQ+QT9KP2I/","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"PiU/Sz9UP1o/Yj9nP3o/","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"PiY+OT5HPk0+Uz5ZPl8+ZT5sPnM+ej4=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"PiY/NT9VP2w/","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Pig+LD4wPjQ+OD48PlA+VD5kPmg+bD5wPnQ+fD4=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Pig+LD48PkA+RD5IPkw+UD5UPlg+XD5gPmQ+bD4=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Pig+OD48Pkw+UD5UPlg+XD5kPnw+","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Pi0+Sz5fPmU+","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Pi8/OT9WP2s/cD8=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"PjA+QD5EPlQ+WD5cPmQ+fD4=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"PjE+QT5TPl0+cz59Pg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"PjQ+OD5UPlg+dD54Pg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Pj8gPyg/Pz9QP2I/fD8=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Pj8lPy8/ND9GP1I/Yz9tP34/","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"PkY+Xz5kPm0+","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"$4d","type":"Ansi","source":"File String Dumps","process":null,"filename":"bootmgr.efi.mui.x2anylock","compromised":null,"detection_total":null,"total":null},{"value":"PyA/JD8oPyw/MD80Pzg/PD9AP0Q/SD9MP1A/VD9YP1w/YD9kP2g/bD9wP3Q/eD98Pw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"PyA/JD8oPyw/MD84P1A/VD9oP2w/fD8=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"PyA/KD8wPzg/QD9IP1A/WD9gP2g/cD94Pw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"PyA/KD9YP3g/","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"PyA/LD84P0Q/UD9cP2g/dD8=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"PyI/UD9UP1g/XD9gP2Q/aD9sPw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"PyQ/LD80Pzw/RD9MP1Q/XD9kP2w/dD98Pw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"PyQ/ND84P0g/TD9UP2w/fD8=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Pyg/LD8wPzQ/OD88P0A/RD9IP1A/aD94P3w/","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Pyg/MT85P0E/ST9XP24/","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Pyw/MD9AP0Q/SD9QP2g/eD98Pw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"PzAxMjM0NTY3ODlBQkNERUY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"PzA/PD9cP2g/","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"PzI/Oj9XP2c/cz8=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Pzc/PD9IP00/YT8=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Pzg/RD9kP3A/","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Pzw/QD9cP2A/aD9wP3g/fD8=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Pz83Pzs/PT9BP1k/Xz9lP2c/eT99Pw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"P0E/Tz9VP1s/YT9nP20/dD97Pw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"P0RqMFE6VyQ9","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"P2cpKFt8WD49","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"P8Ovwr/CvcOvwr/CvcOvwr/CvcOvwr/CvcOvwr/CvcOvwr/CvcOvwr/CvcOvwr/CvcOvwr/CvcOvwr/CvcOvwr/CvcOvwr/CvcOvwr/CvcOvwr/CvcOvwr/CvcOvwr/CvcOvwr/CvcOvwr/CvcOvwr/CvcOvwr/CvcOvwr/CvcOvwr/CvcOvwr/CvcOvwr/CvcOvwr/CvcOvwr/CvcOvwr/CvcOvwr/CvcOvwr/CvcOvwr/CvcOvwr/CvcOvwr/CvcOvwr/CvcOvwr/CvcOvwr/CvcOvwr/CvcOvwr/CvcOvwr/CvcOvwr/CvcOvwr/CvcOvwr/CvQ==","type":"Ansi","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"QCFAJUArQDFAP0BDQEVAXUBhQGdAbUA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"QC5mcHRhYmxl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"QDFEMUgxTDFQMVQxWDEgMiQyKDIsMjAyNDI4MkQySDJMMlAyVDJYMlwyYDJkMmgybDJwMnQyeDJ8Mg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"WyVbK1s9W0lbS1tnW3lb","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"W3RodW5rXTo=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"XClcL1wzXDlcR1xLXE1cUVxvXHVcd1x9XA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"XFw/XCVVU0VSUFJPRklMRSVcLm1pdG1wcm94eVxtaXRtcHJveHktY2EucGVt","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XCVVU0VSUFJPRklMRSVcRG9jdW1lbnRzXE91dGxvb2sgRmlsZXNcT3V0bG9vazEucHN0","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XCVVU0VSUFJPRklMRSVcbnR1c2VyLmRhdC5MT0cy","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XCVVU0VSUFJPRklMRSVcTlRVU0VSLkRBVHs0N2E2YTE3YS1hNTE0LTExZTctYTk0ZS1lYzBkOWEwNWM4NjB9LlRNLmJsZg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XCVVU0VSUFJPRklMRSVcTlRVU0VSLkRBVHs0N2E2YTE3YS1hNTE0LTExZTctYTk0ZS1lYzBkOWEwNWM4NjB9LlRNQ29udGFpbmVyMDAwMDAwMDAwMDAwMDAwMDAwMDEucmVndHJhbnMtbXM=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XCVVU0VSUFJPRklMRSVcTlRVU0VSLkRBVHs0N2E2YTE3YS1hNTE0LTExZTctYTk0ZS1lYzBkOWEwNWM4NjB9LlRNQ29udGFpbmVyMDAwMDAwMDAwMDAwMDAwMDAwMDIucmVndHJhbnMtbXM=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XCVVU0VSUFJPRklMRSVcbnR1c2VyLnBvbA==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XCVVU0VSUFJPRklMRSVcU2VhcmNoZXNcTWljcm9zb2Z0IE9mZmljZSBPdXRsb29rLnNlYXJjaGNvbm5lY3Rvci1tcw==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XCRXSU5ET1dTLn5CVFwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XCRXSU5ET1dTLn5CVFxEVURvd25sb2FkXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XCRXSU5ET1dTLn5CVFxEVURvd25sb2FkXFNldHVwXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XCRXSU5ET1dTLn5CVFxEVURvd25sb2FkXFNldHVwXHJlcGxhY2VtZW50bWFuaWZlc3RzXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XCRXSU5ET1dTLn5CVFxTb3VyY2VzXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XCRXSU5ET1dTLn5CVFxTb3VyY2VzXFBhbnRoZXJcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XCRXSU5ET1dTLn5CVFxTb3VyY2VzXFBhbnRoZXJcaW1nXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XCRXSU5ET1dTLn5CVFxTb3VyY2VzXFBhbnRoZXJcUmVzb3VyY2VzXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XCRXSU5ET1dTLn5CVFxTb3VyY2VzXHJlcGxhY2VtZW50bWFuaWZlc3RzXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XENvbmZpZy5Nc2lcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XERvY3VtZW50cyBhbmQgU2V0dGluZ3NcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAwLmNoa1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tLi4tYWN0aXZlc3luY3Byb3ZpZGVyXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX25vbmVfYTRlYjk5YTY1ZmYxMWM4M1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tLi4tc3luY3V0aWwucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2VuLXVzXzFkZDJkMTQzZDI3MzJhMGJcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tLi5hcGhvc3RyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2NzLWN6XzE2MmViMzNhMWU3ZTNjNmJcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tLi5hcGhvc3RyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2RhLWRrX2IzNjg5MzYxMTRjNDM4NmFcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tLi5hcGhvc3RyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2RlLWRlX2IwOTQyODlkMTY5YThkMDRcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tLi5hcGhvc3RyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2VsLWdyXzU5MmE1NjMwMDVhZmY1OTJcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tLi5hcGhvc3RyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2VuLXVzXzU5ODRmZTk2MDU3ODk4YzlcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tLi5hcGhvc3RyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2VzLWVzXzU5NTA1YjdhMDU5ZjhhNmVcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tLi5hcGhvc3RyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2ZpLWZpX2Y4NmI2MDI2ZmFiOTdjOThcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tLi5hcGhvc3RyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2ZyLWZyX2ZjMDdkMTc4Zjg3MWEwZDBcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tLi5hcGhvc3RyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2h1LWh1XzQzNzg1MWMwZGNkMTZmZWNcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tLi5hcGhvc3RyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2l0LWl0X2U2MmZjN2JmY2ZhMzg2NGVcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tLi5hcGhvc3RyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2phLWpwXzg4NTU0NmNjYzJiZTk4MjlcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tLi5hcGhvc3RyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2tvLWtyXzJiYmYyMzgxYjUyZjVmM2ZcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tLi5hcGhvc3RyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX25iLW5vXzE0NTFhNGI2OGQ1NDhhZmJcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tLi5hcGhvc3RyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX25sLW5sXzEyOTBlZmY0OGU4MDk0ZDBcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tLi5hcGhvc3RyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3BsLXBsXzU4Y2Q0YTc2NzNhMzAyODRcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tLi5hcGhvc3RyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3B0LWJyXzViMjEzNTFhNzIyYzk2NjhcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tLi5hcGhvc3RyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3B0LXB0XzVjMDMwNDg2NzE5YzA2NDRcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tLi5hcGhvc3RyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3J1LXJ1X2EyYTYxNjRhNTY3ZDk0NzBcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tLi5hcGhvc3RyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3N2LXNlXzNlYTEwMGJmNGRhNjllY2JcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tLi5hcGhvc3RyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3RyLXRyX2U3YWU0YjA2M2M2MmEwYmNcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tLi5hcGhvc3RyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3poLWNuX2I5MGI2OTAzZWM5YTcyZGJcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tLi5hcGhvc3RyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3poLXR3X2JkMDdhNjU5ZWEwYjRmNGJcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tLi5jY291bnRzcnQucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2VuLXVzX2RjMGIxNzE5YTdlMWJjMjRcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tLi5jcHJvdmlkZXIucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2VuLXVzX2FlNGQ2NDRmMmVkNjM0MjVcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tLi5jcHJvdmlkZXIucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2VuLXVzX2JmOTVjOWM0OTc0ZWZhZDBcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tLi5jeW1hbmFnZXJicm9rZXJob3N0XzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX25vbmVfNjQ0ZjViZGZkOTY0N2RiYVwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tLi5lcm5ldG1haWwucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2VuLXVzX2NmM2M1YTY2NTQ2NTFkMzJcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tLi5ldG1haWxjc3AucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2VuLXVzXzk2NjExNzAxMDQ5YzYxNzRcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tLi5pbmVzaGFyZWQucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2VuLXVzX2M5NmQ0N2EyNTcwYTRkMWJcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tLi5saWN5bWFuYWdlcmJyb2tlcnBzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX25vbmVfNWU5MzI4YTQ5MzhlMjdiOVwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tLi5vbnRyb2xsZXIucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2VuLXVzX2ZlMWUyZjJiNzE0YjM2YjNcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tLi5vcmtoZWxwZXIucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2VuLXVzXzFiMDE4YjM1ZjVkZGFkMmVcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tLi5yb2tlcmhvc3QucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2VuLXVzXzU3NzMyYzM2MmZkNmU1ZDVcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tLi50YWNjZXNzb3IucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2VuLXVzX2VhYWI2ZTNiYzU4MzEzNGNcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tLi52ZXN5bmNjc3AucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2VuLXVzXzg1YWI0N2RjMGExMTcxOGRcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLWFjY291bnRhY2Nlc3Nvcl8zMWJmMzg1NmFkMzY0ZTM1XzEwLjAuMTcxMzQuMV9ub25lX2FjZTBlZWQwZmM1NjQ5NmZcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLWFjY291bnRzcnRfMzFiZjM4NTZhZDM2NGUzNV8xMC4wLjE3MTM0LjFfbm9uZV8xNTFhMWIxNDZkYTQ5YWZkXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLWFjdGl2ZXN5bmNjc3BfMzFiZjM4NTZhZDM2NGUzNV8xMC4wLjE3MTM0LjFfbm9uZV9mMzNiMGRkZGRhYjYyNTY2XCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLWFwaG9zdGNsaWVudF8zMWJmMzg1NmFkMzY0ZTM1XzEwLjAuMTcxMzQuMV9ub25lXzA4NWM5YWQ3YWY5ODRiY2ZcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLWFwaG9zdHJlc18zMWJmMzg1NmFkMzY0ZTM1XzEwLjAuMTcxMzQuMV9ub25lX2I4ZTAzNmI4ZjE4NDkwZWNcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLWFwaG9zdHNlcnZpY2VfMzFiZjM4NTZhZDM2NGUzNV8xMC4wLjE3MTM0LjFfbm9uZV8zYWJlOGZjNWI3MTJlODBiXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLWRhdnN5bmNwcm92aWRlcl8zMWJmMzg1NmFkMzY0ZTM1XzEwLjAuMTcxMzQuMV9ub25lX2JiYmNmNWIyYjIyYWFjNWVcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLWVuZ2luZXNoYXJlZF8zMWJmMzg1NmFkMzY0ZTM1XzEwLjAuMTcxMzQuMV9ub25lX2RiOGMxYzhhOGQ0NDk4OGVcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLWlucHJvY2xvZ2dlcl8zMWJmMzg1NmFkMzY0ZTM1XzEwLjAuMTcxMzQuMV9ub25lXzQ3YTQ5M2JjMTEwYmZjMzhcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLWludGVybmV0bWFpbF8zMWJmMzg1NmFkMzY0ZTM1XzEwLjAuMTcxMzQuMV9ub25lXzJkMDVhY2VmMDQ2ZjE1OWJcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLWludGVybmV0bWFpbGNzcF8zMWJmMzg1NmFkMzY0ZTM1XzEwLjAuMTcxMzQuMV9ub25lX2UwYWUzNTVhYTcwODVhNDVcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLW1jY3NwYWxfMzFiZjM4NTZhZDM2NGUzNV8xMC4wLjE3MTM0LjFfbm9uZV9mMGUwMTlkZjQ1ZGFiNDc4XCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLW5ldHdvcmtoZWxwZXJfMzFiZjM4NTZhZDM2NGUzNV8xMC4wLjE3MTM0LjFfbm9uZV9hMGZhMjEwYzUyMGI3NTNiXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNjb250cm9sbGVyXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX25vbmVfMDM0ZWU1N2Q4MTc3NWI1Mlwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNwcm94eV8zMWJmMzg1NmFkMzY0ZTM1XzEwLjAuMTcxMzQuMV9ub25lX2Q2MDdkY2Y1ZGM5MjdiYWFcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2FmLXphXzc1NTk0ZTY4NWU2MzVhM2VcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2FtLWV0XzdkN2M4NWM2NTkyZjU5YTVcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2FyLXNhXzc0ZDgyZWQwNWVjM2Y2MjNcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2FzLWluXzdhOTIyMDBhNWIxNjRjYTVcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2F6LS4uLWF6XzQzMDAwMzY1NGE4YWM3OQ==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2JlLWJ5XzIzMjkzMTZkNGExMjYxMTZcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2JnLWJnXzFiMTgxMDU5NGY0NDQ3N2FcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2JuLWJkXzE5NzdjYjViNTA1N2ZkN2NcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2JuLWluXzFkZTY3M2FmNGQ3ZWRlMjlcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2JzLS4uLWJhXzlkYzc5ZTVkNjQwM2RhOA==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2NhLS4uY2lhXzE0ZTIxZWJhNmRkMDFmNw==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2NhLWVzX2MzYzk0NWJhM2UzOTQwNDRcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2Noci4uLXVzX2Q3MzNjZGM1ZDY0ZGQ5Zg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2NzLWN6X2M2MjE4NmY0M2NjYzIzYTVcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2N5LWdiX2JiM2I5ZmZjNDNkNGM1MjdcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2RhLWRrXzYzNWI2NzFiMzMxMjFmYTRcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2RlLWRlXzYwODZmYzU3MzRlODc0M2VcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2VsLWdyXzA5MWQyOWVhMjNmZGRjY2NcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2VuLWdiXzAxZWYxNzMyMjg5ZGNjM2VcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2VuLXVzXzA5NzdkMjUwMjNjNjgwMDNcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2VzLWVzXzA5NDMyZjM0MjNlZDcxYThcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2VzLW14XzBiN2ExY2RhMjI4MTU1NTNcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2V0LWVlXzAzMDJmYWM0MjdmMzRlMzdcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2V1LWVzXzA5MmQ4ZjVjMjNmZGE5OGFcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2ZhLWlyX2FjYjIyZjg3MTYzNWY5ZWNcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2ZpLWZpX2E4NWUzM2UxMTkwNzYzZDJcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2ZpbC1waF80Yzk5MzJlZDVlMjRlZjg5XA==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2ZyLWNhX2E0NzBlZjdkMWI5N2VlMzBcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2ZyLWZyX2FiZmFhNTMzMTZiZjg4MGFcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2dhLWllXzRhMGM5NjNhMGM3YmRjNGFcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2dkLWdiXzQ4OTdiZTdjMGQ2ZWVmNDZcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2dsLWVzXzRmY2I2NmJhMDhkNmU4ODNcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2d1LWluXzRkMzIxODY4MGE4ZDMzZGRcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2hhLS4uLW5nX2VmYTFhOTI3ZDg0MjQwYg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2hlLWlsX2YwMWE0Y2Q0ZmQyZTg4ZjhcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2hpLWluX2YwZDIxYjgwZmNiZDAxY2FcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2hyLWhyX2YyMzZmZmI0ZmJlMWY1YmVcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2h1LWh1X2YzNmIyNTdhZmIxZjU3MjZcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2h5LWFtX2VmYjQ0YmQyZmQ4NmVmNGJcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2lkLWlkXzhmYjcyNzU5ZjFmZjY2MDhcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2lnLW5nXzkwZWFkYjM3ZjEzZDQ3OTVcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2lzLWlzXzk1YmJlNDM3ZWUzMjRkMTBcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2l0LWl0Xzk2MjI5Yjc5ZWRmMTZkODhcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2phLWpwXzM4NDgxYTg2ZTEwYzdmNjNcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2thLWdlX2Q2ODVkM2VkZDZjMDFkZWNcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2trLWt6X2RmNjk3MDViZDExNGZhZWRcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2ttLWtoX2Q3NTg0ZjQ3ZDY0NmUxNTFcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2tuLWluX2Q5ZjZkN2ZmZDQ5OGU1MmFcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2tvLWtyX2RiYjFmNzNiZDM3ZDQ2NzlcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2tvay1pbl84OTU0ZjJiZWQwY2EzMjFlXA==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2t1LS4uLWlxX2M0NmE5Mjk4ZWU0ZDkzNg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2t5LWtnX2Q2NjUwOTA5ZDZmMTJjMTZcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2xiLWx1XzgwYjE0OTAyYzRjYTFmYWJcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2xvLWxhXzc3NDYyYTZlY2FlNzMwNWNcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2x0LWx0XzdmN2QyMzNjYzVhNTEyMTZcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2x2LWx2XzgwNGE5MWMwYzUyMzUzMDZcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX21pLW56XzI1YmI1M2VkYjYyNzRhNjBcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX21rLW1rXzFlZmVkZjJiYmE3ZTI0YjhcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX21sLWluXzIwNDhmZmU5YjlhYWU3YmFcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX21uLW1uXzIwMzMwNGYxYjliYjg2MjBcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX21yLWluXzIwMDgyMDYxYjlkYjhmNjBcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX21zLW15XzI0ZGRjNDRmYjZjMTQzYTJcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX210LW10XzIyOWI1MDdkYjgzNjQ4ZjBcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX25iLW5vX2M0NDQ3ODcwYWJhMjcyMzVcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX25lLW5wX2M0OTU4ZmRhYWI3MWNhOGZcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX25sLW5sX2MyODNjM2FlYWNjZTdjMGFcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX25uLW5vX2MzYzJiOTYwYWMwM2MxODFcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX25zby16YV8zMDc1OWNkYzFhZjc1MjFiXA==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX29yLWluXzY2NDRhODczOWVmZGM5ZDJcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3BhLS4uLXBrX2E3NWQzODJiMTdmOWZiYg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3BhLWluXzBhMWFiYjI4OTEwNTBjMGFcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3BsLXBsXzA4YzAxZTMwOTFmMGU5YmVcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3Bycy1hZl8zZGZmMGUwN2U5NmYyYzIwXA==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3B0LWJyXzBiMTQwOGQ0OTA3YTdkYTJcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3B0LXB0XzBiZjVkODQwOGZlOWVkN2VcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3F1Yy4uLWd0XzJhNTdjNjc4M2NlOWMwMg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3F1ei1wZV83MDE2OGU5MTMxN2FjMzlmXA==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3JvLXJvXzUwMzA5ZTc4NzY1MGI4ZGFcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3J1LXJ1XzUyOThlYTA0NzRjYjdiYWFcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3J3LXJ3XzUzNjY1ODg4NzQ0OWJjOWFcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3NkLS4uLXBrX2U4NGU3YjFiM2ZjZDI5Mg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3NpLWxrX2YxY2EyZTAxNjlkNDgyOGJcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3NrLXNrX2YxYjNlZWIxNjllNTZkZDRcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3NsLXNpX2YwYzYxMDY5NmE3ZjgwYjdcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3NxLWFsX2YxZTYzMDY3NjljYjRjYWZcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3NyLS4uLWJhXzRkZDljZmI3N2U2OWVlZg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3NyLS4uLXJzXzU0MmZhM2ZmN2E2YzJlNQ==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3NyLS4uLXJzXzk2ZjY3OGFkZGY5MTI3ZQ==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3N2LXNlX2VlOTNkNDc5NmJmNDg2MDVcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3N3LWtlX2VlODliYWNkNmJmYmQ0ZWVcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3RhLWluXzk2OTNjYjRjNWI0OTgwZWVcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3RlLWluXzk2Njg4YjljNWI2OWYwYjJcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3RnLS4uLXRqX2E1ZTIxZjFjOWFjMTM3MQ==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3RoLXRoXzkzOWRmNjJjNWQzOTQzNDZcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3RpLWV0Xzk4ZTZkMjIwNTlkNDE1MWNcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3RrLXRtXzk1YjUyYTRlNWJlNGFkYmNcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3RuLXphXzkwNDFkYmIyNWY2OTY1MDFcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3RyLXRyXzk3YTExZWMwNWFiMDg3ZjZcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3R0LXJ1Xzk4ZTA0MjAyNTllNTlhMmJcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3VnLWNuXzM5NzFiODdkNGUwYWFjMDdcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3VrLXVhXzMzODEwMTY3NTFlMWFlNDJcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3VyLXBrXzM3YTUwYmE3NGY0MDFlZmFcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3V6LS4uLXV6XzdiM2MwN2QxNmY4NmY2YQ==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3ZpLXZuX2RjNzhhYmQ2NDBhZGU4MTVcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3dvLXNuXzdmNTY1NGFmMzM2ZjYwMTFcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3hoLXphXzFjZmJjYjVlMjk3ZDMyM2ZcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3lvLW5nX2MyNzg5YzY3MWE4ZmZhYWRcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3poLWNuXzY4ZmUzY2JlMGFlODVhMTVcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3poLXR3XzZjZmE3YTE0MDg1OTM2ODVcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3p1LXphXzYyYWJjNDc0MGYwOGQ3ZWVcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXNfMzFiZjM4NTZhZDM2NGUzNV8xMC4wLjE3MTM0LjFfbm9uZV82MWE5YjBlNjAwYjEyNjAyXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tLi4tYWN0aXZlc3luY3Byb3ZpZGVyXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX25vbmVfYWY0MDQzZjg5NDUxZGU3ZVwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tLi4tc3luY3V0aWwucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2VuLXVzXzI4Mjc3Yjk2MDZkM2VjMDZcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tLi5hcGhvc3RyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2NzLWN6XzIwODM1ZDhjNTJkZWZlNjZcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tLi5hcGhvc3RyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2RhLWRrX2JkYmQzZGIzNDkyNGZhNjVcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tLi5hcGhvc3RyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2RlLWRlX2JhZThkMmVmNGFmYjRlZmZcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tLi5hcGhvc3RyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2VsLWdyXzYzN2YwMDgyM2ExMGI3OGRcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tLi5hcGhvc3RyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2VuLXVzXzYzZDlhOGU4MzlkOTVhYzRcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tLi5hcGhvc3RyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2VzLWVzXzYzYTUwNWNjM2EwMDRjNjlcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tLi5hcGhvc3RyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2ZpLWZpXzAyYzAwYTc5MmYxYTNlOTNcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tLi5hcGhvc3RyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2ZyLWZyXzA2NWM3YmNiMmNkMjYyY2JcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tLi5hcGhvc3RyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2h1LWh1XzRkY2NmYzEzMTEzMjMxZTdcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tLi5hcGhvc3RyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2l0LWl0X2YwODQ3MjEyMDQwNDQ4NDlcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tLi5hcGhvc3RyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2phLWpwXzkyYTlmMTFlZjcxZjVhMjRcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tLi5hcGhvc3RyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2tvLWtyXzM2MTNjZGQzZTk5MDIxM2FcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tLi5hcGhvc3RyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX25iLW5vXzFlYTY0ZjA4YzFiNTRjZjZcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tLi5hcGhvc3RyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX25sLW5sXzFjZTU5YTQ2YzJlMTU2Y2JcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tLi5hcGhvc3RyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3BsLXBsXzYzMjFmNGM4YTgwM2M0N2ZcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tLi5hcGhvc3RyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3B0LWJyXzY1NzVkZjZjYTY4ZDU4NjNcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tLi5hcGhvc3RyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3B0LXB0XzY2NTdhZWQ4YTVmY2M4M2ZcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tLi5hcGhvc3RyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3J1LXJ1X2FjZmFjMDljOGFkZTU2NmJcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tLi5hcGhvc3RyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3N2LXNlXzQ4ZjVhYjExODIwNzYwYzZcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tLi5hcGhvc3RyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3RyLXRyX2YyMDJmNTU4NzBjMzYyYjdcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tLi5hcGhvc3RyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3poLWNuX2MzNjAxMzU2MjBmYjM0ZDZcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tLi5hcGhvc3RyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3poLXR3X2M3NWM1MGFjMWU2YzExNDZcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tLi5jY291bnRzcnQucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2VuLXVzX2U2NWZjMTZiZGM0MjdlMWZcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tLi5jcHJvdmlkZXIucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2VuLXVzX2I4YTIwZWExNjMzNmY2MjBcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tLi5jcHJvdmlkZXIucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2VuLXVzX2M5ZWE3NDE2Y2JhZmJjY2JcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tLi5pbmVzaGFyZWQucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2VuLXVzX2QzYzFmMWY0OGI2YjBmMTZcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tLi5vbnRyb2xsZXIucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2VuLXVzXzA4NzJkOTdkYTVhYmY4YWVcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tLi5vcmtoZWxwZXIucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2VuLXVzXzI1NTYzNTg4MmEzZTZmMjlcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tLi50YWNjZXNzb3IucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2VuLXVzX2Y1MDAxODhkZjllM2Q1NDdcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLWFjY291bnRhY2Nlc3Nvcl8zMWJmMzg1NmFkMzY0ZTM1XzEwLjAuMTcxMzQuMV9ub25lX2I3MzU5OTIzMzBiNzBiNmFcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLWFjY291bnRzcnRfMzFiZjM4NTZhZDM2NGUzNV8xMC4wLjE3MTM0LjFfbm9uZV8xZjZlYzU2NmEyMDU1Y2Y4XCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLWFwaG9zdGNsaWVudF8zMWJmMzg1NmFkMzY0ZTM1XzEwLjAuMTcxMzQuMV9ub25lXzEyYjE0NTI5ZTNmOTBkY2FcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLWRhdnN5bmNwcm92aWRlcl8zMWJmMzg1NmFkMzY0ZTM1XzEwLjAuMTcxMzQuMV9ub25lX2M2MTFhMDA0ZTY4YjZlNTlcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLWVuZ2luZXNoYXJlZF8zMWJmMzg1NmFkMzY0ZTM1XzEwLjAuMTcxMzQuMV9ub25lX2U1ZTBjNmRjYzFhNTVhODlcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLW5ldHdvcmtoZWxwZXJfMzFiZjM4NTZhZDM2NGUzNV8xMC4wLjE3MTM0LjFfbm9uZV9hYjRlY2I1ZTg2NmMzNzM2XCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNjb250cm9sbGVyXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX25vbmVfMGRhMzhmY2ZiNWQ4MWQ0ZFwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNwcm94eV8zMWJmMzg1NmFkMzY0ZTM1XzEwLjAuMTcxMzQuMV9ub25lX2UwNWM4NzQ4MTBmMzNkYTVcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2FmLXphXzdmYWRmOGJhOTJjNDFjMzlcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2FtLWV0Xzg3ZDEzMDE4OGQ5MDFiYTBcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2FyLXNhXzdmMmNkOTIyOTMyNGI4MWVcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2FzLWluXzg0ZTZjYTVjOGY3NzBlYTBcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2F6LS4uLWF6XzRkNTRhZGI3N2VlYjg5OA==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2JlLWJ5XzJkN2RkYmJmN2U3MzIzMTFcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2JnLWJnXzI1NmNiYWFiODNhNTA5NzVcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2JuLWJkXzIzY2M3NWFkODRiOGJmNzdcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2JuLWluXzI4M2IxZTAxODFkZmEwMjRcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2JzLS4uLWJhX2E4MWM0OGFmOTg2NDljNw==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2NhLS4uY2lhXzFmMzZjOTBjYTIzMGUxNg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2NhLWVzX2NlMWRmMDBjNzI5YTAyM2ZcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2Noci4uLXVzX2UxODg3ODE4MGFhZTliZg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2NzLWN6X2QwNzYzMTQ2NzEyY2U1YTBcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2N5LWdiX2M1OTA0YTRlNzgzNTg3MjJcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2RhLWRrXzZkYjAxMTZkNjc3MmUxOWZcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2RlLWRlXzZhZGJhNmE5Njk0OTM2MzlcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2VsLWdyXzEzNzFkNDNjNTg1ZTllYzdcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2VuLWdiXzBjNDNjMTg0NWNmZThlMzlcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2VuLXVzXzEzY2M3Y2EyNTgyNzQxZmVcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2VzLWVzXzEzOTdkOTg2NTg0ZTMzYTNcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2VzLW14XzE1Y2VjNzJjNTZlMjE3NGVcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2V0LWVlXzBkNTdhNTE2NWM1NDEwMzJcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2V1LWVzXzEzODIzOWFlNTg1ZTZiODVcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2ZhLWlyX2I3MDZkOWQ5NGE5NmJiZTdcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2ZpLWZpX2IyYjJkZTMzNGQ2ODI1Y2RcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2ZpbC1waF81NmVkZGQzZjkyODViMTg0XA==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2ZyLWNhX2FlYzU5OWNmNGZmOGIwMmJcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2ZyLWZyX2I2NGY0Zjg1NGIyMDRhMDVcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2dhLWllXzU0NjE0MDhjNDBkYzllNDVcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2dkLWdiXzUyZWM2OGNlNDFjZmIxNDFcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2dsLWVzXzVhMjAxMTBjM2QzN2FhN2VcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2d1LWluXzU3ODZjMmJhM2VlZGY1ZDhcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2hhLS4uLW5nX2Y5ZjY1MzdhMGNhMzAyYQ==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2hlLWlsX2ZhNmVmNzI3MzE4ZjRhZjNcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2hpLWluX2ZiMjZjNWQzMzExZGMzYzVcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2hyLWhyX2ZjOGJhYTA3MzA0MmI3YjlcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2h1LWh1X2ZkYmZjZmNkMmY4MDE5MjFcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2h5LWFtX2ZhMDhmNjI1MzFlN2IxNDZcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2lkLWlkXzlhMGJkMWFjMjY2MDI4MDNcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2lnLW5nXzliM2Y4NThhMjU5ZTA5OTBcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2lzLWlzX2EwMTA4ZThhMjI5MzBmMGJcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2l0LWl0X2EwNzc0NWNjMjI1MjJmODNcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2phLWpwXzQyOWNjNGQ5MTU2ZDQxNWVcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2thLWdlX2UwZGE3ZTQwMGIyMGRmZTdcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2trLWt6X2U5YmUxYWFlMDU3NWJjZThcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2ttLWtoX2UxYWNmOTlhMGFhN2EzNGNcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2tuLWluX2U0NGI4MjUyMDhmOWE3MjVcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2tvLWtyX2U2MDZhMThlMDdkZTA4NzRcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2tvay1pbl85M2E5OWQxMTA1MmFmNDE5XA==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2t1LS4uLWlxX2NlYmYzY2ViMjJhZTU1Ng==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2t5LWtnX2UwYjliMzVjMGI1MWVlMTFcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2xiLWx1XzhiMDVmMzU0ZjkyYWUxYTZcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2xvLWxhXzgxOWFkNGMwZmY0N2YyNTdcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2x0LWx0Xzg5ZDFjZDhlZmEwNWQ0MTFcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2x2LWx2XzhhOWYzYzEyZjk4NDE1MDFcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX21pLW56XzMwMGZmZTNmZWE4ODBjNWJcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX21rLW1rXzI5NTM4OTdkZWVkZWU2YjNcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX21sLWluXzJhOWRhYTNiZWUwYmE5YjVcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX21uLW1uXzJhODdhZjQzZWUxYzQ4MWJcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX21yLWluXzJhNWNjYWIzZWUzYzUxNWJcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX21zLW15XzJmMzI2ZWExZWIyMjA1OWRcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX210LW10XzJjZWZmYWNmZWM5NzBhZWJcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX25iLW5vX2NlOTkyMmMyZTAwMzM0MzBcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX25lLW5wX2NlZWEzYTJjZGZkMjhjOGFcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX25sLW5sX2NjZDg2ZTAwZTEyZjNlMDVcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX25uLW5vX2NlMTc2M2IyZTA2NDgzN2NcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX25zby16YV8zYWNhNDcyZTRmNTgxNDE2XA==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX29yLWluXzcwOTk1MmM1ZDM1ZThiY2RcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3BhLS4uLXBrX2IxYjFlMjdkNGM1YWJkYg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3BhLWluXzE0NmY2NTdhYzU2NWNlMDVcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3BsLXBsXzEzMTRjODgyYzY1MWFiYjlcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3Bycy1hZl80ODUzYjg1YTFkY2ZlZTFiXA==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3B0LWJyXzE1NjhiMzI2YzRkYjNmOWRcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3B0LXB0XzE2NGE4MjkyYzQ0YWFmNzlcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3F1Yy4uLWd0XzM0YWM3MGNhNzE0YTgyMQ==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3F1ei1wZV83YTZiMzhlMzY1ZGI4NTlhXA==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3JvLXJvXzVhODU0OGNhYWFiMTdhZDVcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3J1LXJ1XzVjZWQ5NDU2YTkyYzNkYTVcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3J3LXJ3XzVkYmIwMmRhYThhYTdlOTVcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3NkLS4uLXBrX2YyYTMyNTZkNzQyZGViMg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3NpLWxrX2ZjMWVkODUzOWUzNTQ0ODZcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3NrLXNrX2ZjMDg5OTAzOWU0NjJmY2ZcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3NsLXNpX2ZiMWFiYWJiOWVlMDQyYjJcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3NxLWFsX2ZjM2FkYWI5OWUyYzBlYWFcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3NyLS4uLWJhXzU4MmU3YTA5YjJjYWIwZg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3NyLS4uLXJzXzVlODQ0ZTUxYWVjY2YwNQ==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3NyLS4uLXJzX2ExNGIyMzAwMTNmMWU5ZQ==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3N2LXNlX2Y4ZTg3ZWNiYTA1NTQ4MDBcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3N3LWtlX2Y4ZGU2NTFmYTA1Yzk2ZTlcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3RhLWluX2EwZTg3NTllOGZhYTQyZTlcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3RlLWluX2EwYmQzNWVlOGZjYWIyYWRcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3RnLS4uLXRqX2IwMzZjOTZlY2YyMWY5MQ==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3RoLXRoXzlkZjJhMDdlOTE5YTA1NDFcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3RpLWV0X2EzM2I3YzcyOGUzNGQ3MTdcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3RrLXRtX2EwMDlkNGEwOTA0NTZmYjdcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3RuLXphXzlhOTY4NjA0OTNjYTI2ZmNcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3RyLXRyX2ExZjVjOTEyOGYxMTQ5ZjFcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3R0LXJ1X2EzMzRlYzU0OGU0NjVjMjZcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3VnLWNuXzQzYzY2MmNmODI2YjZlMDJcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3VrLXVhXzNkZDVhYmI5ODY0MjcwM2RcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3VyLXBrXzQxZjliNWY5ODNhMGUwZjVcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3V6LS4uLXV6Xzg1OTBiMjIzYTNlN2I4YQ==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3ZpLXZuX2U2Y2Q1NjI4NzUwZWFhMTBcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3dvLXNuXzg5YWFmZjAxNjdkMDIyMGNcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3hoLXphXzI3NTA3NWIwNWRkZGY0M2FcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3lvLW5nX2NjY2Q0NmI5NGVmMGJjYThcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3poLWNuXzczNTJlNzEwM2Y0OTFjMTBcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3poLXR3Xzc3NGYyNDY2M2NiOWY4ODBcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3p1LXphXzZkMDA2ZWM2NDM2OTk5ZTlcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXNfMzFiZjM4NTZhZDM2NGUzNV8xMC4wLjE3MTM0LjFfbm9uZV82YmZlNWIzODM1MTFlN2ZkXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9kdWFsX2Jhc2ljZGlzcGxheS5pbmZfMzFiZjM4NTZhZDM2NGUzNV8xMC4wLjE3MTM0LjFfbm9uZV8xNWEwYTI0ZWNlZmUyYzA4XCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9kdWFsX2Jhc2ljcmVuZGVyLmluZl8zMWJmMzg1NmFkMzY0ZTM1XzEwLjAuMTcxMzQuMV9ub25lX2QyYTRkNDUzZmMyY2NmMTRcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9kdWFsX2J0aGxlZW51bS5pbmZfMzFiZjM4NTZhZDM2NGUzNV8xMC4wLjE3MTM0LjFfbm9uZV85YzhmOGFiMmUyMjZiMzJlXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9kdWFsX2J0aHBhbi5pbmZfMzFiZjM4NTZhZDM2NGUzNV8xMC4wLjE3MTM0LjFfbm9uZV8wM2ZjMjNjNGI5MTZmOGMzXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9kdWFsX2J0aHByaW50LmluZl8zMWJmMzg1NmFkMzY0ZTM1XzEwLjAuMTcxMzQuMV9ub25lX2UzNWI1Zjc2MDI2MjRjMmRcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9kdWFsX2J1dHRvbmNvbnZlcnRlci5pbmZfMzFiZjM4NTZhZDM2NGUzNV8xMC4wLjE3MTM0LjFfbm9uZV83YzQ3OTg1MjEzMzQ0ZjIwXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9kdWFsX2NfYmFyY29kZXNjYW5uZXIuaW5mXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX25vbmVfNDJmYzgzZDc4NzQ5MzI2Y1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9kdWFsX2NfY2FzaGRyYXdlci5pbmZfMzFiZjM4NTZhZDM2NGUzNV8xMC4wLjE3MTM0LjFfbm9uZV84OTE5NzgzNGU5NjQ3Mjk0XCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9kdWFsX2NfbGluZWRpc3BsYXkuaW5mXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX25vbmVfYWQ0NzI3YThjMmYyNTI5NFwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9kdWFsX2NfbWFnbmV0aWNzdHJpcGVyZWFkZXIuaW5mXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX25vbmVfOGVkMjZjM2U5NjI1OTJjOFwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9kdWFsX2NfcmVjZWlwdHByaW50ZXIuaW5mXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX25vbmVfYzMyNTMyYjVmZjAwYTZiNlwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9kdWFsX2Rpc3BsYXkuaW5mXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX25vbmVfODFlNTBmZDQwZTg0ZTQ3ZVwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9kdWFsX2Z1c2lvbnYyLmluZl8zMWJmMzg1NmFkMzY0ZTM1XzEwLjAuMTcxMzQuMV9ub25lX2EyYzEzMDUxNWM1Mzk4MWFcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9kdWFsX2hpZGJ0aC5pbmZfMzFiZjM4NTZhZDM2NGUzNV8xMC4wLjE3MTM0LjFfbm9uZV8yOWUxYWViNzMxMGM0MmRkXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9kdWFsX2hpZGJ0aGxlLmluZl8zMWJmMzg1NmFkMzY0ZTM1XzEwLjAuMTcxMzQuMV9ub25lXzEwYzMzMjY0ZGMwZDMwZjJcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9kdWFsX2hpZGludGVycnVwdC5pbmZfMzFiZjM4NTZhZDM2NGUzNV8xMC4wLjE3MTM0LjFfbm9uZV8zYzBkMzBjNmRmNGI0ZWQ0XCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9kdWFsX2hpZHZoZi5pbmZfMzFiZjM4NTZhZDM2NGUzNV8xMC4wLjE3MTM0LjFfbm9uZV81ZjA1OGYwMTA4NTY5NzdmXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9kdWFsX2lkdHNlYy5pbmZfMzFiZjM4NTZhZDM2NGUzNV8xMC4wLjE3MTM0LjFfbm9uZV9kODdhN2VkOTk1NDBhYTRjXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9kdWFsX21hdXNiaG9zdC5pbmZfMzFiZjM4NTZhZDM2NGUzNV8xMC4wLjE3MTM0LjFfbm9uZV85ZjY0OGI3OWMwZjlmMWMyXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9kdWFsX21ndGR5bi5pbmZfMzFiZjM4NTZhZDM2NGUzNV8xMC4wLjE3MTM0LjFfbm9uZV9jYzE5NTk0MWIzMmU1ZGEzXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9kdWFsX21pcmFkaXNwLmluZl8zMWJmMzg1NmFkMzY0ZTM1XzEwLjAuMTcxMzQuMV9ub25lX2M3ZTUzYWQ2ZGI5ZjY3YTlcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9kdWFsX21zZ3Bpb3dpbjMyLmluZl8zMWJmMzg1NmFkMzY0ZTM1XzEwLjAuMTcxMzQuMV9ub25lXzVkODVmMThjYzk4OGI4NzZcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9kdWFsX21zbW91c2UuaW5mXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX25vbmVfYzkxMjdjZDc3NWVmODg3OVwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9kdWFsX25kaXN1aW8uaW5mXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX25vbmVfMjQ1NmMzYjFhNWMyYmI4NVwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9kdWFsX25ldG5iLmluZl8zMWJmMzg1NmFkMzY0ZTM1XzEwLjAuMTcxMzQuMV9ub25lX2ViZTYzOGMyNTg1MDY1MDdcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9kdWFsX25ldHBhY2VyLmluZl8zMWJmMzg1NmFkMzY0ZTM1XzEwLjAuMTcxMzQuMV9ub25lX2RlM2MyYWZkNmQ5NGI2YTRcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9kdWFsX25wc3ZjdHJpZy5pbmZfMzFiZjM4NTZhZDM2NGUzNV8xMC4wLjE3MTM0LjFfbm9uZV82NjQ0Y2NiZTU0M2E1MmNhXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9kdWFsX29wb3NkcnYuaW5mXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX25vbmVfYTZjZmMxNGQ4MzgzMjFiZlwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9kdWFsX3NlbnNvcnNoaWRjbGFzc2RyaXZlci5pbmZfMzFiZjM4NTZhZDM2NGUzNV8xMC4wLjE3MTM0LjFfbm9uZV85MmExY2YxOWY2MzlmOTBhXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9kdWFsX3VmeGNoaXBpZGVhLmluZl8zMWJmMzg1NmFkMzY0ZTM1XzEwLjAuMTcxMzQuMV9ub25lX2Y1YzgzNGViYzljZTc2NTRcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9kdWFsX3Vyc2NoaXBpZGVhLmluZl8zMWJmMzg1NmFkMzY0ZTM1XzEwLjAuMTcxMzQuMV9ub25lX2Y0Y2E1NjdjN2Q1NzY4N2JcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9kdWFsX3Vyc3N5bm9wc3lzLmluZl8zMWJmMzg1NmFkMzY0ZTM1XzEwLjAuMTcxMzQuMV9ub25lX2YxZWI4NzMzNDEzMDg0M2VcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9kdWFsX3VzYmNjaWRkcml2ZXIuaW5mXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX25vbmVfNDA3MGIxZTI4ZWI1MDI4ZFwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9kdWFsX3VzYnNlci5pbmZfMzFiZjM4NTZhZDM2NGUzNV8xMC4wLjE3MTM0LjFfbm9uZV84MjgxZmI2MmVjODBkZjdlXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9kdWFsX3VzYnN0b3IuaW5mXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX25vbmVfMjY0YjQ0ZDgxNWRjZGY1MFwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9kdWFsX3ZkcnZyb290LmluZl8zMWJmMzg1NmFkMzY0ZTM1XzEwLjAuMTcxMzQuMV9ub25lX2ExODUwNmQyOWE2YWJhZDhcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9kdWFsX3ZoZG1wLmluZl8zMWJmMzg1NmFkMzY0ZTM1XzEwLjAuMTcxMzQuMV9ub25lXzc0NTBkODk3NjJiZjY3YmJcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9kdWFsX3dkbWFfYnQuaW5mXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX25vbmVfN2ZlZDVlN2NlYWY2ZjMzMFwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9kdWFsX3dpbnVzYi5pbmZfMzFiZjM4NTZhZDM2NGUzNV8xMC4wLjE3MTM0LjFfbm9uZV9hYjc2MWYyMzlmMWY5YTNhXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9kdWFsX3hib3hnaXAuaW5mXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX25vbmVfNTE3YzEzNjhmMTMzZjIzOVwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9kdWFsX3h1c2IyMi5pbmZfMzFiZjM4NTZhZDM2NGUzNV8xMC4wLjE3MTM0LjFfbm9uZV8zNjZiMDZiZWFhZDg2ZDY0XCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9mZHBob3N0XzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX25vbmVfNjExOGQwNDFkNzk2YmE0N1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9mZHJlc3B1Yl8zMWJmMzg1NmFkMzY0ZTM1XzEwLjAuMTcxMzQuMV9ub25lXzY0ZjRjZDE0Mjc5Nzc1YWVcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9mZHNzZHBfMzFiZjM4NTZhZDM2NGUzNV8xMC4wLjE3MTM0LjFfbm9uZV8yMDVlN2VlZWRkNjhjNzRiXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9mZHduZXRfMzFiZjM4NTZhZDM2NGUzNV8xMC4wLjE3MTM0LjFfbm9uZV8yMGE5Mzk3Y2RkM2MyMGNkXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtYXBwbW9kZWwtZXhlYy1ldmVudHNfMzFiZjM4NTZhZDM2NGUzNV8xMC4wLjE3MTM0LjFfbm9uZV8wNzY3NzgxMzUyNTAxOGE2XCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtY29tcG9zYWJsZS1zaGFyZXBpY2tlcl8zMWJmMzg1NmFkMzY0ZTM1XzEwLjAuMTcxMzQuMV9ub25lX2Y4MGUxNTA2NDk3Y2RjN2RcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtb25lY29yZS1jLi5leHBlcmllbmNlaG9zdC11c2VyXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX25vbmVfYTI4MzA0ZjJiYjQ3MzU5M1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtb25lY29yZS1jLi5sbG1hbmFnZXJldHctZXZlbnRzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX25vbmVfNjg2OTYyZjM5NGI4YzAyMVwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtb25lY29yZS1oLi5kZi1jbGFzcy1leHRlbnNpb25zXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX25vbmVfZTg1NDVhMTZmZTg4NjM0OVwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtb25lY29yZS1pLi5hdGVkdXNlcm1vZGUta2VybmVsXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX25vbmVfY2QzY2M0ZWRmZGNlOGZlYlwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtb25lY29yZS14YW1sdGlsZXJlbmRlcl8zMWJmMzg1NmFkMzY0ZTM1XzEwLjAuMTcxMzQuMV9ub25lXzQyNjJiMThmY2Y1OGRiMjhcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtcGRjLWV2ZW50cy1jb250YWluZXJfMzFiZjM4NTZhZDM2NGUzNV8xMC4wLjE3MTM0LjFfbm9uZV9hZTM5YjA1YzE2OTQ2ZGYzXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1hLi4tc2VydmljZS5kZXBsb3ltZW50XzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX25vbmVfMzFhYTE2OWRiNjdhYzNmZVwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1hLi5jYXRpb24tY3JlZHVpYnJva2VyXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX25vbmVfYjAzYmFjMzU3NjYyZWI2Mlwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1hLi5lbmNlLW1pdGlnYXRpb25zLWM0XzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX25vbmVfZjFhNWM1NWY1Yjc0MWRiY1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1hLi5lbmNlLW1pdGlnYXRpb25zLWM1XzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX25vbmVfZjFhNmM1YTk1YjczMzcxM1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1hLi5lc29sdmVydXguYXBweHNldHVwXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX25vbmVfYTExMDMwZmQ3N2I1YmM4NFwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1hLi5taXRpZ2F0aW9ucy1hY3dpbnJ0XzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX25vbmVfMTYxZTNjZDdlOTkzNTk3MVwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1hLi5vbi1hdXRodWktY29tcG9uZW50XzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX25vbmVfYzI1N2Q3M2Q3OTAyMWZmM1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1hLi50LWJ5dGVjb2RlZ2VuZXJhdG9yXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX25vbmVfYzVhMzc3OGJmZGJmYzg2MFwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1hZXJvbGl0ZV8zMWJmMzg1NmFkMzY0ZTM1XzEwLjAuMTcxMzQuMV9ub25lX2JjMDFiZDgxZDE0NjhlOTVcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1hcHBpZF8zMWJmMzg1NmFkMzY0ZTM1XzEwLjAuMTcxMzQuMV9ub25lXzNjY2M5Y2EzMWI1MWIxZjBcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1hcHByZXBfMzFiZjM4NTZhZDM2NGUzNV8xMC4wLjE3MTM0LjFfbm9uZV9mMTc5YjcxODhmZWE5YWQ0XCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1hcHB3aXpfMzFiZjM4NTZhZDM2NGUzNV8xMC4wLjE3MTM0LjFfbm9uZV9mMTQ2YzRkNDkwMTA4YzJmXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1hcHB4LW1vZHVsZXNfMzFiZjM4NTZhZDM2NGUzNV8xMC4wLjE3MTM0LjFfbm9uZV9kZDRlNjQwYzg5YTEzNDc5XCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1hdWRpby1hY21jb3JlY29kZWNzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX25vbmVfMDY1NTY3ZTY2MmYyYzZlY1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1hdWRpby1tY2lfMzFiZjM4NTZhZDM2NGUzNV8xMC4wLjE3MTM0LjFfbm9uZV8wMjhkZTU3ZDU1NjI2NWI2XCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1hdXRvZm10XzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX25vbmVfY2I3NGM5MzUyODU4N2RjMlwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1heGluc3RhbGxzZXJ2aWNlXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX25vbmVfYmM4NWRiM2NkYTE3YjA0MVwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1iLi5jb3JlLWZvbnRzLWVuZy1ib290XzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX25vbmVfMmExM2E4MWMxNzVkMTJlY1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1iLi5jb3JlLWZvbnRzLWpwbi1ib290XzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX25vbmVfNmU5Y2I2YzM5MmRjMTNhMlwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1iLi5lbnZpcm9ubWVudC13aW5kb3dzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX25vbmVfNGViOTIzODFmNWY1MDQwM1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1iLi5pYWdub3N0aWMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2NzLWN6XzU5MTM5ODVjMGQzYzFmZTFcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1iLi5pYWdub3N0aWMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2RhLWRrX2Y2NGQ3ODgzMDM4MjFiZTBcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1iLi5pYWdub3N0aWMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2VzLWVzXzljMzU0MDliZjQ1ZDZkZTRcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1iLi5pYWdub3N0aWMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2h1LWh1Xzg2NWQzNmUyY2I4ZjUzNjJcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1iLi5pYWdub3N0aWMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2l0LWl0XzI5MTRhY2UxYmU2MTY5YzRcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1iLi5pYWdub3N0aWMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2tvLWtyXzZlYTQwOGEzYTNlZDQyYjVcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1iLi5pYWdub3N0aWMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX25sLW5sXzU1NzVkNTE2N2QzZTc4NDZcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1iLi5pYWdub3N0aWMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3B0LWJyXzllMDYxYTNjNjBlYTc5ZGVcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1iLi5pYWdub3N0aWMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3B0LXB0XzllZTdlOWE4NjA1OWU5YmFcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1iLi5pYWdub3N0aWMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3J1LXJ1X2U1OGFmYjZjNDUzYjc3ZTZcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1iLi5uYWdlci1lZmkucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2NzLWN6XzIxMDIzNWQ4NmIxY2Y3ZmJcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1iLi5uYWdlci1lZmkucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2RhLWRrX2JlM2MxNWZmNjE2MmYzZmFcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1iLi5uYWdlci1lZmkucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2RlLWRlX2JiNjdhYjNiNjMzOTQ4OTRcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1iLi5uYWdlci1lZmkucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2VsLWdyXzYzZmRkOGNlNTI0ZWIxMjJcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1iLi5uYWdlci1lZmkucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2VzLWVzXzY0MjNkZTE4NTIzZTQ1ZmVcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1iLi5uYWdlci1lZmkucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2ZyLWNhX2ZmNTE5ZTYxNDllOGMyODZcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1iLi5uYWdlci1lZmkucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2hyLWhyXzRkMTdhZTk5MmEzMmNhMTRcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1iLi5uYWdlci1lZmkucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2h1LWh1XzRlNGJkNDVmMjk3MDJiN2NcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1iLi5uYWdlci1lZmkucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2x0LWx0X2RhNWRkMjIwZjNmNWU2NmNcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1iLi5uYWdlci1lZmkucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2x2LWx2X2RiMmI0MGE0ZjM3NDI3NWNcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1iLi5uYWdlci1lZmkucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX25sLW5sXzFkNjQ3MjkyZGIxZjUwNjBcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1iLi5uYWdlci1lZmkucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3B0LWJyXzY1ZjRiN2I4YmVjYjUxZjhcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1iLi5uYWdlci1lZmkucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3JvLXJvX2FiMTE0ZDVjYTRhMThkMzBcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1iLi5uYWdlci1lZmkucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3J1LXJ1X2FkNzk5OGU4YTMxYzUwMDBcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1iLi5uYWdlci1lZmkucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3NsLXNpXzRiYTZiZjRkOThkMDU1MGRcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1iLi5uYWdlci1lZmkucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3RyLXRyX2YyODFjZGE0ODkwMTVjNGNcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1iLi5uYWdlci1lZmkucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3poLWNuX2MzZGVlYmEyMzkzOTJlNmJcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1iLi5uYWdlci13bWl2MnByb3ZpZGVyXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX25vbmVfNWE5ODQ5OGE0ZTkyZTEzY1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1iLi5uZnJhc3RydWN0dXJlY2xpZW50XzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX25vbmVfZTVkMTFiYmI2YjEyNjY1OVwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1iLi5yeS1ldmVudHMtY29udGFpbmVyXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX25vbmVfNTI3YjNiN2VlYzUyZTIxM1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1iLi52aXJvbm1lbnQtb3MtbG9hZGVyXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX25vbmVfNDBhNzQ2ODlkNWQxNDYzMlwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1iaW5kLWZpbHRlcl8zMWJmMzg1NmFkMzY0ZTM1XzEwLjAuMTcxMzQuMV9ub25lX2JjN2I4MmZmM2RkMTliMTJcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1iaXRzLWlnZHNlYXJjaGVyXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX25vbmVfOTZlY2M5NjBmODJhYjU0Mlwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1ib290cmVzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX25vbmVfMjQ5ZDRkN2FlYjFiM2E4ZVwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1ib290dmlkXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX25vbmVfMWRmYTA3ZDBlZjVlYzI4NVwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1icm9rZXJiYXNlXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX25vbmVfNjhmOTMxNDRkNGQyMGZjNFwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1idHBhbnVpXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX25vbmVfNTIxMDQyN2M2MDM1ZDU2ZFwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1jLi5hbHByb3ZpZGVycy1saWJyYXJ5XzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX25vbmVfNzE5YjhjNzJjNTQ4NDc3N1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1jLi5ibHVldG9vdGgtdGVsZW1ldHJ5XzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX25vbmVfYTQ4MTY1ZDE1NWY5MWQ2M1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1jLi5icm9rZXJlZGFwaS1kZXNrdG9wXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX25vbmVfYWRiMWNlZTRmZTZhOWJkNFwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1jLi5lbnQteHBzZ2RpY29udmVydGVyXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX25vbmVfZjg2ZDAxZTE1NDdiMmQ3M1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1jLi5pYWxvZ2hvc3QuYXBweHNldHVwXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX25vbmVfYzdiZmIxMzg5MThjMWQyZVwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1jLi5tcGx1cy1ydW50aW1lLW10eGRtXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX25vbmVfZmQ3MGE0MzgzYzk2ZjIxN1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1jLi5uYW1lc3BhY2UtZG93bmxldmVsXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX25vbmVfYmQ3YTM2MTNmYjBlNDUxZFwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1jLi5vbGF0aW9uLWZpbGUtc3lzdGVtXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX25vbmVfYmNiN2Y2YWU3MjQxOTU0Y1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1jLi5zLWFkbWluLWNvbXBzdmNsaW5rXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX25vbmVfYjgxMmRlMjE0M2EzODFiMVwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1jLi5zYWJsZXNoZWxscHJveHlzdHViXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX25vbmVfYTA1Y2NkZmU1ODhjOTZlM1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1jLi5zZXJ2aWNlcy1jZXJ0Y2EtZGxsXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX25vbmVfZTk2ZWZhYjg1MzM4NzY1N1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1jLi50ZXJtYW5hZ2VtZW50c25hcGluXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX25vbmVfMzA5NmFjODJkZjgxNjAxZlwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1jYWJpbmV0XzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX25vbmVfMWNiZmRkNzQ0YjE2MWEzMFwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1jYW5vbnVybF8zMWJmMzg1NmFkMzY0ZTM1XzEwLjAuMTcxMzQuMV9ub25lXzhhYTM3MDBiZDM2Yjc4Y2FcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1jZG9zeXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2RhLWRrXzlmYWVlYzBlM2E2NjBlOGZcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1jZG9zeXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2RlLWRlXzljZGE4MTRhM2MzYzYzMjlcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1jZG9zeXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2VsLWdyXzQ1NzBhZWRkMmI1MWNiYjdcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1jZG9zeXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2VuLXVzXzQ1Y2I1NzQzMmIxYTZlZWVcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1jZG9zeXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2ZyLWZyX2U4NGUyYTI2MWUxMzc2ZjVcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1jZG9zeXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2hlLWlsXzJjNmRkMWM4MDQ4Mjc3ZTNcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1jZG9zeXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2h1LWh1XzJmYmVhYTZlMDI3MzQ2MTFcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1jZG9zeXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2l0LWl0X2QyNzYyMDZjZjU0NTVjNzNcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1jZG9zeXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2phLWpwXzc0OWI5Zjc5ZTg2MDZlNGVcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1jZG9zeXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2tvLWtyXzE4MDU3YzJlZGFkMTM1NjRcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1jZG9zeXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX25iLW5vXzAwOTdmZDYzYjJmNjYxMjBcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1jZG9zeXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3B0LWJyXzQ3Njc4ZGM3OTdjZTZjOGRcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1jZG9zeXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3B0LXB0XzQ4NDk1ZDMzOTczZGRjNjlcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1jZG9zeXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3J1LXJ1XzhlZWM2ZWY3N2MxZjZhOTVcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1jZG9zeXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3N2LXNlXzJhZTc1OTZjNzM0ODc0ZjBcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1jZG9zeXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3RyLXRyX2QzZjRhM2IzNjIwNDc2ZTFcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1jZG9zeXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3poLWNuX2E1NTFjMWIxMTIzYzQ5MDBcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1jZXJ0dXRpbF8zMWJmMzg1NmFkMzY0ZTM1XzEwLjAuMTcxMzQuMV9ub25lXzliMDU5NDQ0OWM4NmY4YjZcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1jaGtkc2tfMzFiZjM4NTZhZDM2NGUzNV8xMC4wLjE3MTM0LjFfbm9uZV9hNzY2ZTYzN2Y1ZGFlMzdhXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1jbGFzc2ljXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX25vbmVfNzZkYTdiMTA3N2RiMGQ3Nlwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1jbGlwXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX25vbmVfOGQ1YzZlNzQ4NTJiZDU3YVwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1jb20tY29tcGx1cy1tc2NfMzFiZjM4NTZhZDM2NGUzNV8xMC4wLjE3MTM0LjFfbm9uZV8wYjFkODNkOTUzZTljMmM3XCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1jb20tY29tcGx1cy1ydW50aW1lXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX25vbmVfM2Y0YjRiNjkzZGRiZjM3NFwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1jb20tZHRjLXRyYWNpbmdfMzFiZjM4NTZhZDM2NGUzNV8xMC4wLjE3MTM0LjFfbm9uZV9mZDVmZDcxYTViZjliYTJhXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1jb21jdGwzMi12NS5yZXNvdXJjZXNfMzFiZjM4NTZhZDM2NGUzNV8xMC4wLjE3MTM0LjFfcHQtcHRfNGFjODU2MTM2YjMwZDg4Ylwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1jb21jdGwzMi12NS5yZXNvdXJjZXNfMzFiZjM4NTZhZDM2NGUzNV8xMC4wLjE3MTM0LjFfc3Ytc2VfMmQ2NjUyNGM0NzNiNzExMlwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1jb21kbGczMi5yZXNvdXJjZXNfMzFiZjM4NTZhZDM2NGUzNV8xMC4wLjE3MTM0LjFfY3MtY3pfOGQyMDZmMzZmMjFkZjI2OFwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1jb21kbGczMi5yZXNvdXJjZXNfMzFiZjM4NTZhZDM2NGUzNV8xMC4wLjE3MTM0LjFfZGEtZGtfMmE1YTRmNWRlODYzZWU2N1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1jb21kbGczMi5yZXNvdXJjZXNfMzFiZjM4NTZhZDM2NGUzNV8xMC4wLjE3MTM0LjFfZW4tZ2JfYzhlZGZmNzRkZGVmOWIwMVwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1jb21kbGczMi5yZXNvdXJjZXNfMzFiZjM4NTZhZDM2NGUzNV8xMC4wLjE3MTM0LjFfZW4tdXNfZDA3NmJhOTJkOTE4NGVjNlwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1jb21kbGczMi5yZXNvdXJjZXNfMzFiZjM4NTZhZDM2NGUzNV8xMC4wLjE3MTM0LjFfZXMtZXNfZDA0MjE3NzZkOTNmNDA2Ylwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1jb21kbGczMi5yZXNvdXJjZXNfMzFiZjM4NTZhZDM2NGUzNV8xMC4wLjE3MTM0LjFfZXMtbXhfZDI3OTA1MWNkN2QzMjQxNlwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1jb21kbGczMi5yZXNvdXJjZXNfMzFiZjM4NTZhZDM2NGUzNV8xMC4wLjE3MTM0LjFfZnItY2FfNmI2ZmQ3YmZkMGU5YmNmM1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1jb21kbGczMi5yZXNvdXJjZXNfMzFiZjM4NTZhZDM2NGUzNV8xMC4wLjE3MTM0LjFfaGUtaWxfYjcxOTM1MTdiMjgwNTdiYlwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1jb21kbGczMi5yZXNvdXJjZXNfMzFiZjM4NTZhZDM2NGUzNV8xMC4wLjE3MTM0LjFfaHItaHJfYjkzNWU3ZjdiMTMzYzQ4MVwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1jb21kbGczMi5yZXNvdXJjZXNfMzFiZjM4NTZhZDM2NGUzNV8xMC4wLjE3MTM0LjFfaHUtaHVfYmE2YTBkYmRiMDcxMjVlOVwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1jb21kbGczMi5yZXNvdXJjZXNfMzFiZjM4NTZhZDM2NGUzNV8xMC4wLjE3MTM0LjFfaXQtaXRfNWQyMTgzYmNhMzQzM2M0Ylwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1jb21kbGczMi5yZXNvdXJjZXNfMzFiZjM4NTZhZDM2NGUzNV8xMC4wLjE3MTM0LjFfamEtanBfZmY0NzAyYzk5NjVlNGUyNlwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1jb21kbGczMi5yZXNvdXJjZXNfMzFiZjM4NTZhZDM2NGUzNV8xMC4wLjE3MTM0LjFfa28ta3JfYTJiMGRmN2U4OGNmMTUzY1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1jb21kbGczMi5yZXNvdXJjZXNfMzFiZjM4NTZhZDM2NGUzNV8xMC4wLjE3MTM0LjFfbHQtbHRfNDY3YzBiN2Y3YWY2ZTBkOVwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1jb21kbGczMi5yZXNvdXJjZXNfMzFiZjM4NTZhZDM2NGUzNV8xMC4wLjE3MTM0LjFfbHYtbHZfNDc0OTdhMDM3YTc1MjFjOVwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1jb21kbGczMi5yZXNvdXJjZXNfMzFiZjM4NTZhZDM2NGUzNV8xMC4wLjE3MTM0LjFfbmItbm9fOGI0MzYwYjM2MGY0NDBmOFwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1jb21kbGczMi5yZXNvdXJjZXNfMzFiZjM4NTZhZDM2NGUzNV8xMC4wLjE3MTM0LjFfbmwtbmxfODk4MmFiZjE2MjIwNGFjZFwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1jb21kbGczMi5yZXNvdXJjZXNfMzFiZjM4NTZhZDM2NGUzNV8xMC4wLjE3MTM0LjFfcHQtYnJfZDIxMmYxMTc0NWNjNGM2NVwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1jb21kbGczMi5yZXNvdXJjZXNfMzFiZjM4NTZhZDM2NGUzNV8xMC4wLjE3MTM0LjFfcHQtcHRfZDJmNGMwODM0NTNiYmM0MVwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1jb21kbGczMi5yZXNvdXJjZXNfMzFiZjM4NTZhZDM2NGUzNV8xMC4wLjE3MTM0LjFfc2stc2tfYjhiMmQ2ZjQxZjM3M2M5N1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1jb21kbGczMi5yZXNvdXJjZXNfMzFiZjM4NTZhZDM2NGUzNV8xMC4wLjE3MTM0LjFfc3ItLi4tcnNfNWRmNTYwZjA5NGUyZjZhYlwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1jb21kbGczMi5yZXNvdXJjZXNfMzFiZjM4NTZhZDM2NGUzNV8xMC4wLjE3MTM0LjFfc3Ytc2VfYjU5MmJjYmMyMTQ2NTRjOFwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1jb21kbGczMi5yZXNvdXJjZXNfMzFiZjM4NTZhZDM2NGUzNV8xMC4wLjE3MTM0LjFfdGgtdGhfNWE5Y2RlNmYxMjhiMTIwOVwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1jb21kbGczMi5yZXNvdXJjZXNfMzFiZjM4NTZhZDM2NGUzNV8xMC4wLjE3MTM0LjFfdWstdWFfZmE3ZmU5YWEwNzMzN2QwNVwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1jb21wdXRlci1uYW1lLXVpXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX25vbmVfZjM4N2IzZTY1N2FkOTQ0Y1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1jb25zb2xlLWRyaXZlcl8zMWJmMzg1NmFkMzY0ZTM1XzEwLjAuMTcxMzQuMV9ub25lX2VkMzY1N2IyMzZmZjQxZjhcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1jb250ZW50LWZpbHRlci1taW1lXzMxYmYzODU2YWQzNjRlMzVfNy4wLjE3MTM0LjFfbm9uZV82OWIwOWRkNGE5YTdlODUzXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1jb250ZW50LWZpbHRlci1ydGZfMzFiZjM4NTZhZDM2NGUzNV83LjAuMTcxMzQuMV9ub25lX2ExNjZhOWI2ZTEzMDdlN2ZcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1jb250cm9sXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX25vbmVfN2VlYzg1OTUxM2E4M2E1N1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1jb3Jlb3MtbWlud2luXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX25vbmVfM2MwNDViMWI5NzhkYTNmOFwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1jb3Jlc3lzdGVtLXdwcl8zMWJmMzg1NmFkMzY0ZTM1XzEwLjAuMTcxMzQuMV9ub25lXzQ3YWZmYTgwMDExYmQ5NGVcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1jcmVkd2l6XzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX25vbmVfODU1YjNkMDJkNGZmODQ3Mlwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAzLmNoa1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDA0LmNoa1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDA1LmNoa1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDA2LmNoa1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDA3LmNoa1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDA4LmNoa1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDA5LmNoa1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDEwLmNoa1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDExLmNoa1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDExLmNoa1xTdGF0ZVJlcG9zaXRvcnktTWFjaGluZS5zcmQtc2htLngyYW55bG9jaw==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDExLmNoa1xTdGF0ZVJlcG9zaXRvcnktTWFjaGluZS5zcmQtd2FsLngyYW55bG9jaw==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDEyLmNoa1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGluZXRwdWJcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGluZXRwdWJcY3VzdGVyclwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGluZXRwdWJcY3VzdGVyclxlbi1VU1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGluZXRwdWJcY3VzdGVyclxlbi1VU1w1MDAtMTAwLmFzcA==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGluZXRwdWJcaGlzdG9yeVwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGluZXRwdWJcaGlzdG9yeVxDRkdISVNUT1JZXzAwMDAwMDAwMDFcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGluZXRwdWJcbG9nc1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGluZXRwdWJcdGVtcFwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGluZXRwdWJcdGVtcFxhcHBQb29sc1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGluZXRwdWJcdGVtcFxBU1AgQ29tcGlsZWQgVGVtcGxhdGVzXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGluZXRwdWJcdGVtcFxJSVMgVGVtcG9yYXJ5IENvbXByZXNzZWQgRmlsZXNcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGluZXRwdWJcd3d3cm9vdFwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGluZXRwdWJcd3d3cm9vdFxhc3BuZXRfY2xpZW50XCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGluZXRwdWJcd3d3cm9vdFxhc3BuZXRfY2xpZW50XHN5c3RlbV93ZWJcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGluZXRwdWJcd3d3cm9vdFxhc3BuZXRfY2xpZW50XHN5c3RlbV93ZWJcMl8wXzUwNzI3XCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGluZXRwdWJcd3d3cm9vdFxhc3BuZXRfY2xpZW50XHN5c3RlbV93ZWJcNF8wXzMwMzE5XCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XE1TT0NhY2hlXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XFBlcmZMb2dzXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XFBlcmZMb2dzXEFkbWluXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XFJlY292ZXJ5XCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XFN5c3RlbSBWb2x1bWUgSW5mb3JtYXRpb25cKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXC5iaW5cKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBjb2xvcnNcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBjb2xvcnNcY29sb3JzXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBjb2xvcnNcY29sb3JzXGV4YW1wbGVzXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBjb2xvcnNcY29sb3JzXGxpYlwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBjb2xvcnNcY29sb3JzXGxpYlxjdXN0b21cKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBjb2xvcnNcY29sb3JzXGxpYlxtYXBzXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBjb2xvcnNcY29sb3JzXGxpYlxzeXN0ZW1cKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBjb2xvcnNcY29sb3JzXHRoZW1lc1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBtb25nb2RiLWpzXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBtb25nb2RiLWpzXHNhc2xwcmVwXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBtb25nb2RiLWpzXHNhc2xwcmVwXGRpc3RcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcYWdlbnRcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcYWdlbnRcLnZzY29kZVwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcYWdlbnRcbm9kZV9tb2R1bGVzXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcYWdlbnRcbm9kZV9tb2R1bGVzXC5iaW5cKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcYWdlbnRcbm9kZV9tb2R1bGVzXGNoYWxrXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcYWdlbnRcbm9kZV9tb2R1bGVzXGNoYWxrXHNvdXJjZVwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcYWdlbnRcbm9kZV9tb2R1bGVzXGRheWpzXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcYWdlbnRcbm9kZV9tb2R1bGVzXGRheWpzXGVzbVwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcYWdlbnRcbm9kZV9tb2R1bGVzXGRheWpzXGVzbVxsb2NhbGVcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcYWdlbnRcbm9kZV9tb2R1bGVzXGRheWpzXGVzbVxwbHVnaW5cKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcYWdlbnRcbm9kZV9tb2R1bGVzXGRheWpzXGVzbVxwbHVnaW5cYWR2YW5jZWRGb3JtYXRcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcYWdlbnRcbm9kZV9tb2R1bGVzXGRheWpzXGVzbVxwbHVnaW5cYmFkTXV0YWJsZVwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcYWdlbnRcbm9kZV9tb2R1bGVzXGRheWpzXGVzbVxwbHVnaW5cYnVkZGhpc3RFcmFcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcYWdlbnRcbm9kZV9tb2R1bGVzXGRheWpzXGVzbVxwbHVnaW5cY2FsZW5kYXJcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcYWdlbnRcbm9kZV9tb2R1bGVzXGRheWpzXGVzbVxwbHVnaW5cY3VzdG9tUGFyc2VGb3JtYXRcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcYWdlbnRcbm9kZV9tb2R1bGVzXGRheWpzXGVzbVxwbHVnaW5cZGF5T2ZZZWFyXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcYWdlbnRcbm9kZV9tb2R1bGVzXGRheWpzXGVzbVxwbHVnaW5cZHVyYXRpb25cKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcYWdlbnRcbm9kZV9tb2R1bGVzXGRheWpzXGVzbVxwbHVnaW5caXNCZXR3ZWVuXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcYWdlbnRcbm9kZV9tb2R1bGVzXGRheWpzXGVzbVxwbHVnaW5caXNMZWFwWWVhclwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcYWdlbnRcbm9kZV9tb2R1bGVzXGRheWpzXGVzbVxwbHVnaW5caXNNb21lbnRcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcYWdlbnRcbm9kZV9tb2R1bGVzXGRheWpzXGVzbVxwbHVnaW5caXNvV2Vla1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcYWdlbnRcbm9kZV9tb2R1bGVzXGRheWpzXGVzbVxwbHVnaW5caXNvV2Vla3NJblllYXJcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcYWdlbnRcbm9kZV9tb2R1bGVzXGRheWpzXGVzbVxwbHVnaW5caXNTYW1lT3JBZnRlclwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcYWdlbnRcbm9kZV9tb2R1bGVzXGRheWpzXGVzbVxwbHVnaW5caXNTYW1lT3JCZWZvcmVcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcYWdlbnRcbm9kZV9tb2R1bGVzXGRheWpzXGVzbVxwbHVnaW5caXNUb2RheVwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcYWdlbnRcbm9kZV9tb2R1bGVzXGRheWpzXGVzbVxwbHVnaW5caXNUb21vcnJvd1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcYWdlbnRcbm9kZV9tb2R1bGVzXGRheWpzXGVzbVxwbHVnaW5caXNZZXN0ZXJkYXlcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcYWdlbnRcbm9kZV9tb2R1bGVzXGRheWpzXGVzbVxwbHVnaW5cbG9jYWxlRGF0YVwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcYWdlbnRcbm9kZV9tb2R1bGVzXGRheWpzXGVzbVxwbHVnaW5cbG9jYWxpemVkRm9ybWF0XCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcYWdlbnRcbm9kZV9tb2R1bGVzXGRheWpzXGVzbVxwbHVnaW5cbWluTWF4XCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcYWdlbnRcbm9kZV9tb2R1bGVzXGRheWpzXGVzbVxwbHVnaW5cb2JqZWN0U3VwcG9ydFwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcYWdlbnRcbm9kZV9tb2R1bGVzXGRheWpzXGVzbVxwbHVnaW5ccGx1cmFsR2V0U2V0XCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcYWdlbnRcbm9kZV9tb2R1bGVzXGRheWpzXGVzbVxwbHVnaW5ccXVhcnRlck9mWWVhclwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcYWdlbnRcbm9kZV9tb2R1bGVzXGRheWpzXGVzbVxwbHVnaW5ccmVsYXRpdmVUaW1lXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcYWdlbnRcbm9kZV9tb2R1bGVzXGRheWpzXGVzbVxwbHVnaW5cdGltZXpvbmVcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcYWdlbnRcbm9kZV9tb2R1bGVzXGRheWpzXGVzbVxwbHVnaW5cdG9BcnJheVwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcYWdlbnRcbm9kZV9tb2R1bGVzXGRheWpzXGVzbVxwbHVnaW5cdG9PYmplY3RcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcYWdlbnRcbm9kZV9tb2R1bGVzXGRheWpzXGVzbVxwbHVnaW5cdXBkYXRlTG9jYWxlXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcYWdlbnRcbm9kZV9tb2R1bGVzXGRheWpzXGVzbVxwbHVnaW5cdXRjXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcYWdlbnRcbm9kZV9tb2R1bGVzXGRheWpzXGVzbVxwbHVnaW5cd2Vla2RheVwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcYWdlbnRcbm9kZV9tb2R1bGVzXGRheWpzXGVzbVxwbHVnaW5cd2Vla09mWWVhclwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcYWdlbnRcbm9kZV9tb2R1bGVzXGRheWpzXGVzbVxwbHVnaW5cd2Vla1llYXJcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcYWdlbnRcbm9kZV9tb2R1bGVzXGRheWpzXGxvY2FsZVwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcYWdlbnRcbm9kZV9tb2R1bGVzXGRheWpzXHBsdWdpblwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcYWdlbnRcbm9kZV9tb2R1bGVzXGRlYnVnXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcYWdlbnRcbm9kZV9tb2R1bGVzXGRlYnVnXHNyY1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcYWdlbnRcbm9kZV9tb2R1bGVzXGV2ZW50ZW1pdHRlcjJcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcYWdlbnRcbm9kZV9tb2R1bGVzXGV2ZW50ZW1pdHRlcjJcbGliXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcYWdlbnRcbm9kZV9tb2R1bGVzXGxydS1jYWNoZVwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcYWdlbnRcbm9kZV9tb2R1bGVzXG1zXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcYWdlbnRcbm9kZV9tb2R1bGVzXHNlbXZlclwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcYWdlbnRcbm9kZV9tb2R1bGVzXHNlbXZlclxiaW5cKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcYWdlbnRcbm9kZV9tb2R1bGVzXHNlbXZlclxjbGFzc2VzXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcYWdlbnRcbm9kZV9tb2R1bGVzXHNlbXZlclxmdW5jdGlvbnNcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcYWdlbnRcbm9kZV9tb2R1bGVzXHNlbXZlclxpbnRlcm5hbFwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcYWdlbnRcbm9kZV9tb2R1bGVzXHNlbXZlclxyYW5nZXNcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcYWdlbnRcbm9kZV9tb2R1bGVzXHdzXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcYWdlbnRcbm9kZV9tb2R1bGVzXHdzXGxpYlwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcYWdlbnRcc3JjXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcYWdlbnRcc3JjXHB1c2hcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcYWdlbnRcc3JjXHJldmVyc2VcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcYWdlbnRcc3JjXHRyYW5zcG9ydGVyc1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcYWdlbnRcc3JjXHV0aWxzXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcYWdlbnRcc3JjXHV0aWxzXHByb2Jlc1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcaW9cKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcaW9cLnZzY29kZVwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcaW9cYnVpbGRcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcaW9cYnVpbGRcbWFpblwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcaW9cYnVpbGRcbWFpblxmZWF0dXJlc1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcaW9cYnVpbGRcbWFpblxtZXRyaWNzXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcaW9cYnVpbGRcbWFpblxwcm9maWxlcnNcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcaW9cYnVpbGRcbWFpblxzZXJ2aWNlc1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcaW9cYnVpbGRcbWFpblx0cmFuc3BvcnRzXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcaW9cYnVpbGRcbWFpblx1dGlsc1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcaW9cYnVpbGRcbWFpblx1dGlsc1xtZXRyaWNzXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcaW9cZG9jc1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcaW9cbm9kZV9tb2R1bGVzXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcaW9cbm9kZV9tb2R1bGVzXC5iaW5cKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcaW9cbm9kZV9tb2R1bGVzXGFzeW5jXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcaW9cbm9kZV9tb2R1bGVzXGFzeW5jXGRpc3RcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcaW9cbm9kZV9tb2R1bGVzXGFzeW5jXGludGVybmFsXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcaW9cbm9kZV9tb2R1bGVzXGRlYnVnXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcaW9cbm9kZV9tb2R1bGVzXGRlYnVnXHNyY1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcaW9cbm9kZV9tb2R1bGVzXGV2ZW50ZW1pdHRlcjJcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcaW9cbm9kZV9tb2R1bGVzXGV2ZW50ZW1pdHRlcjJcbGliXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcaW9cbm9kZV9tb2R1bGVzXGxydS1jYWNoZVwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcaW9cbm9kZV9tb2R1bGVzXG1zXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcaW9cbm9kZV9tb2R1bGVzXHNlbXZlclwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcaW9cbm9kZV9tb2R1bGVzXHNlbXZlclxiaW5cKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcaW9cbm9kZV9tb2R1bGVzXHNlbXZlclxjbGFzc2VzXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcaW9cbm9kZV9tb2R1bGVzXHNlbXZlclxmdW5jdGlvbnNcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcaW9cbm9kZV9tb2R1bGVzXHNlbXZlclxpbnRlcm5hbFwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcaW9cbm9kZV9tb2R1bGVzXHNlbXZlclxyYW5nZXNcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcaW9ccHJlc1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcanMtYXBpXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcanMtYXBpXGRpc3RcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcanMtYXBpXG5vZGVfbW9kdWxlc1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcanMtYXBpXG5vZGVfbW9kdWxlc1xhc3luY1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcanMtYXBpXG5vZGVfbW9kdWxlc1xhc3luY1xkaXN0XCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcanMtYXBpXG5vZGVfbW9kdWxlc1xhc3luY1xpbnRlcm5hbFwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcanMtYXBpXG5vZGVfbW9kdWxlc1xkZWJ1Z1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcanMtYXBpXG5vZGVfbW9kdWxlc1xkZWJ1Z1xzcmNcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcanMtYXBpXG5vZGVfbW9kdWxlc1xldmVudGVtaXR0ZXIyXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcanMtYXBpXG5vZGVfbW9kdWxlc1xldmVudGVtaXR0ZXIyXGxpYlwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcanMtYXBpXG5vZGVfbW9kdWxlc1xtc1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcanMtYXBpXG5vZGVfbW9kdWxlc1x3c1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcanMtYXBpXG5vZGVfbW9kdWxlc1x3c1xsaWJcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcanMtYXBpXHNyY1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcanMtYXBpXHNyY1xhdXRoX3N0cmF0ZWdpZXNcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcanMtYXBpXHNyY1x1dGlsc1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJccG0yLXZlcnNpb24tY2hlY2tcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJccG0yLXZlcnNpb24tY2hlY2tcbm9kZV9tb2R1bGVzXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJccG0yLXZlcnNpb24tY2hlY2tcbm9kZV9tb2R1bGVzXGRlYnVnXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJccG0yLXZlcnNpb24tY2hlY2tcbm9kZV9tb2R1bGVzXGRlYnVnXHNyY1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJccG0yLXZlcnNpb24tY2hlY2tcbm9kZV9tb2R1bGVzXG1zXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBzb2NrZXQuaW9cKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBzb2NrZXQuaW9cY29tcG9uZW50LWVtaXR0ZXJcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBzb2NrZXQuaW9cY29tcG9uZW50LWVtaXR0ZXJcbGliXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBzb2NrZXQuaW9cY29tcG9uZW50LWVtaXR0ZXJcbGliXGNqc1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBzb2NrZXQuaW9cY29tcG9uZW50LWVtaXR0ZXJcbGliXGVzbVwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEB0b290YWxsbmF0ZVwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEB0b290YWxsbmF0ZVxxdWlja2pzLWVtc2NyaXB0ZW5cKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEB0b290YWxsbmF0ZVxxdWlja2pzLWVtc2NyaXB0ZW5cY1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEB0b290YWxsbmF0ZVxxdWlja2pzLWVtc2NyaXB0ZW5cZGlzdFwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEB0b290YWxsbmF0ZVxxdWlja2pzLWVtc2NyaXB0ZW5cZGlzdFxnZW5lcmF0ZWRcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEB0eXBlc1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEB0eXBlc1xjb29raWVcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEB0eXBlc1xjb3JzXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEB0eXBlc1xub2RlXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEB0eXBlc1xub2RlXGFzc2VydFwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEB0eXBlc1xub2RlXGRuc1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEB0eXBlc1xub2RlXGZzXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEB0eXBlc1xub2RlXHJlYWRsaW5lXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEB0eXBlc1xub2RlXHN0cmVhbVwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEB0eXBlc1xub2RlXHRpbWVyc1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEB0eXBlc1x3ZWJpZGwtY29udmVyc2lvbnNcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEB0eXBlc1x3aGF0d2ctdXJsXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEB0eXBlc1x3aGF0d2ctdXJsXGxpYlwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGFiYnJldlwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGFjY2VwdHNcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGFnZW50LWJhc2VcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGFnZW50LWJhc2VcZGlzdFwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGFnZW50LWJhc2Vcbm9kZV9tb2R1bGVzXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGFnZW50LWJhc2Vcbm9kZV9tb2R1bGVzXGRlYnVnXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGFnZW50LWJhc2Vcbm9kZV9tb2R1bGVzXGRlYnVnXHNyY1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGFnZW50LWJhc2Vcbm9kZV9tb2R1bGVzXG1zXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGFtcC1tZXNzYWdlXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGFtcFwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGFtcFxsaWJcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGFuc2ktY29sb3JzXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGFuc2ktY29sb3JzXHR5cGVzXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGFuc2ktcmVnZXhcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGFuc2ktc3R5bGVzXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGFueW1hdGNoXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGFyZ3BhcnNlXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGFyZ3BhcnNlXGxpYlwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGFyZ3BhcnNlXGxpYlxhY3Rpb25cKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGFyZ3BhcnNlXGxpYlxhY3Rpb25cYXBwZW5kXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGFyZ3BhcnNlXGxpYlxhY3Rpb25cc3RvcmVcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGFyZ3BhcnNlXGxpYlxhcmd1bWVudFwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGFyZ3BhcnNlXGxpYlxoZWxwXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGFycmF5LWVhY2hcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGFycmF5LWZsYXR0ZW5cKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGFycmF5LXNsaWNlXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGFzdC10eXBlc1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGFzdC10eXBlc1wuZ2l0aHViXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGFzdC10eXBlc1wuZ2l0aHViXHdvcmtmbG93c1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGFzdC10eXBlc1xkZWZcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGFzdC10eXBlc1xnZW5cKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGFzdC10eXBlc1xsaWJcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGFzdC10eXBlc1xub2RlX21vZHVsZXNcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGFzdC10eXBlc1xub2RlX21vZHVsZXNcdHNsaWJcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGFzdC10eXBlc1xub2RlX21vZHVsZXNcdHNsaWJcbW9kdWxlc1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGFzeW5jXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGFzeW5jXGRpc3RcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGFzeW5jXGludGVybmFsXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGFzeW5ja2l0XCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGFzeW5ja2l0XGxpYlwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGF4aW9zXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGF4aW9zXGRpc3RcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGF4aW9zXGRpc3RcYnJvd3Nlclwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGF4aW9zXGRpc3RcZXNtXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGF4aW9zXGRpc3Rcbm9kZVwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGF4aW9zXGxpYlwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGF4aW9zXGxpYlxhZGFwdGVyc1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGF4aW9zXGxpYlxjYW5jZWxcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGF4aW9zXGxpYlxjb3JlXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGF4aW9zXGxpYlxkZWZhdWx0c1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGF4aW9zXGxpYlxlbnZcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGF4aW9zXGxpYlxlbnZcY2xhc3Nlc1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGF4aW9zXGxpYlxoZWxwZXJzXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGF4aW9zXGxpYlxwbGF0Zm9ybVwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGF4aW9zXGxpYlxwbGF0Zm9ybVxicm93c2VyXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGF4aW9zXGxpYlxwbGF0Zm9ybVxicm93c2VyXGNsYXNzZXNcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGF4aW9zXGxpYlxwbGF0Zm9ybVxjb21tb25cKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGF4aW9zXGxpYlxwbGF0Zm9ybVxub2RlXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGF4aW9zXGxpYlxwbGF0Zm9ybVxub2RlXGNsYXNzZXNcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGJhYmVsXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGJhYmVsXGxpYlwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGJhbGFuY2VkLW1hdGNoXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGJhbGFuY2VkLW1hdGNoXC5naXRodWJcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGJhc2U2NGlkXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGJhc2U2NGlkXGxpYlwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGJhc2ljLWZ0cFwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGJhc2ljLWZ0cFxkaXN0XCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGJpbmFyeS1leHRlbnNpb25zXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGJsZXNzZWRcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGJsZXNzZWRcYmluXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGJsZXNzZWRcYnJvd3Nlclwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGJsZXNzZWRcZXhhbXBsZVwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGJsZXNzZWRcZXhhbXBsZVxhbnNpLXZpZXdlclwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGJsZXNzZWRcbGliXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGJsZXNzZWRcbGliXHdpZGdldHNcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGJsZXNzZWRcdXNyXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGJsZXNzZWRcdXNyXGZvbnRzXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGJsZXNzZWRcdmVuZG9yXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGJsdWViaXJkXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGJsdWViaXJkXGpzXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGJsdWViaXJkXGpzXGJyb3dzZXJcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGJsdWViaXJkXGpzXHJlbGVhc2VcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGJvZGVjXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGJvZHktcGFyc2VyXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGJvZHktcGFyc2VyXGxpYlwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGJvZHktcGFyc2VyXGxpYlx0eXBlc1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGJyYWNlLWV4cGFuc2lvblwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGJyYWNlc1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGJyYWNlc1xsaWJcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGJyb3dzZXItc3Rkb3V0XCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGJzb25cKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGJzb25cZXRjXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGJzb25cbGliXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGJzb25cc3JjXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGJzb25cc3JjXHBhcnNlclwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGJzb25cc3JjXHBhcnNlclxvbl9kZW1hbmRcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGJzb25cc3JjXHV0aWxzXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGJzb25cdmVuZG9yXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGJzb25cdmVuZG9yXGJhc2U2NFwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGJzb25cdmVuZG9yXHRleHQtZW5jb2RpbmdcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGJzb25cdmVuZG9yXHRleHQtZW5jb2RpbmdcbGliXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGJ1ZmZlci1mcm9tXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGJ5dGVzXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGNhbGwtYmluZFwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGNhbGwtYmluZFwuZ2l0aHViXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGNhbGwtYmluZFx0ZXN0XCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGNhbWVsY2FzZVwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGNoYWxrXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGNoYWxrXHNvdXJjZVwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGNoYXJtXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGNoYXJtXGV4YW1wbGVcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGNoYXJtXGxpYlwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGNob2tpZGFyXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGNob2tpZGFyXGxpYlwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGNob2tpZGFyXHR5cGVzXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGNsaS10YWJsZWF1XCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGNsaS10YWJsZWF1XGxpYlwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGNsaS10YWJsZWF1XG5vZGVfbW9kdWxlc1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGNsaS10YWJsZWF1XG5vZGVfbW9kdWxlc1xjaGFsa1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGNsaS10YWJsZWF1XG5vZGVfbW9kdWxlc1xjaGFsa1xzb3VyY2VcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGNsaXVpXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGNsaXVpXGJ1aWxkXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGNsaXVpXGJ1aWxkXGxpYlwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGNsb3VkaW5hcnlcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGNsb3VkaW5hcnlcbGliXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGNsb3VkaW5hcnlcbGliXGFuYWx5c2lzXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGNsb3VkaW5hcnlcbGliXGFwaV9jbGllbnRcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGNsb3VkaW5hcnlcbGliXGNhY2hlXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGNsb3VkaW5hcnlcbGliXHByb3Zpc2lvbmluZ1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGNsb3VkaW5hcnlcbGliXHV0aWxzXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGNsb3VkaW5hcnlcbGliXHV0aWxzXGFuYWx5dGljc1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGNsb3VkaW5hcnlcbGliXHV0aWxzXGVuY29kaW5nXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGNsb3VkaW5hcnlcbGliXHV0aWxzXHBhcnNpbmdcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGNsb3VkaW5hcnlcbGliXHYyXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGNsb3VkaW5hcnlcdHlwZXNcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGNvbG9yLWNvbnZlcnRcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGNvbG9yLW5hbWVcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGNvbG9yc1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGNvbG9yc1xleGFtcGxlc1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGNvbG9yc1xsaWJcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGNvbG9yc1xsaWJcY3VzdG9tXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGNvbG9yc1xsaWJcbWFwc1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGNvbG9yc1xsaWJcc3lzdGVtXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGNvbG9yc1x0aGVtZXNcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGNvbWJpbmVkLXN0cmVhbVwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGNvbWJpbmVkLXN0cmVhbVxsaWJcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGNvbW1hbmRlclwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGNvbW1hbmRlclx0eXBpbmdzXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGNvbmNhdC1tYXBcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGNvbmNhdC1tYXBcZXhhbXBsZVwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGNvbmNhdC1tYXBcdGVzdFwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGNvbm5lY3RcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGNvbm5lY3Rcbm9kZV9tb2R1bGVzXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGNvbm5lY3Rcbm9kZV9tb2R1bGVzXGZpbmFsaGFuZGxlclwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGNvbm5lY3Rcbm9kZV9tb2R1bGVzXG9uLWZpbmlzaGVkXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGNvbm5lY3Rcbm9kZV9tb2R1bGVzXHN0YXR1c2VzXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGNvbnRlbnQtZGlzcG9zaXRpb25cKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGNvbnRlbnQtdHlwZVwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGNvb2tpZS1zaWduYXR1cmVcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGNvb2tpZVwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGNvcnNcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGNvcnNcbGliXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGNyb25lclwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGNyb25lclxkaXN0XCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGNyb25lclxzcmNcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGNyb25lclx0eXBlc1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGN1bHZlcnRcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGN1c3RvbS1ldmVudFwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGN1c3RvbS1ldmVudFx0ZXN0XCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGRhdGEtdXJpLXRvLWJ1ZmZlclwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGRhdGEtdXJpLXRvLWJ1ZmZlclxkaXN0XCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGRhdGUtZm9ybWF0XCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGRhdGUtZm9ybWF0XGxpYlwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGRhdGVmb3JtYXRcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGRhdGVmb3JtYXRcbGliXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGRheWpzXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGRheWpzXGVzbVwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGRheWpzXGVzbVxsb2NhbGVcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGRheWpzXGVzbVxwbHVnaW5cKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGRheWpzXGVzbVxwbHVnaW5cYWR2YW5jZWRGb3JtYXRcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGRheWpzXGVzbVxwbHVnaW5cYXJyYXlTdXBwb3J0XCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGRheWpzXGVzbVxwbHVnaW5cYmFkTXV0YWJsZVwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGRheWpzXGVzbVxwbHVnaW5cYmlnSW50U3VwcG9ydFwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGRheWpzXGVzbVxwbHVnaW5cYnVkZGhpc3RFcmFcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGRheWpzXGVzbVxwbHVnaW5cY2FsZW5kYXJcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGRheWpzXGVzbVxwbHVnaW5cY3VzdG9tUGFyc2VGb3JtYXRcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGRheWpzXGVzbVxwbHVnaW5cZGF5T2ZZZWFyXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGRheWpzXGVzbVxwbHVnaW5cZGV2SGVscGVyXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGRheWpzXGVzbVxwbHVnaW5cZHVyYXRpb25cKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGRheWpzXGVzbVxwbHVnaW5caXNCZXR3ZWVuXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGRheWpzXGVzbVxwbHVnaW5caXNMZWFwWWVhclwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGRheWpzXGVzbVxwbHVnaW5caXNNb21lbnRcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGRheWpzXGVzbVxwbHVnaW5caXNvV2Vla1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGRheWpzXGVzbVxwbHVnaW5caXNvV2Vla3NJblllYXJcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGRheWpzXGVzbVxwbHVnaW5caXNTYW1lT3JBZnRlclwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGRheWpzXGVzbVxwbHVnaW5caXNTYW1lT3JCZWZvcmVcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGRheWpzXGVzbVxwbHVnaW5caXNUb2RheVwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGRheWpzXGVzbVxwbHVnaW5caXNUb21vcnJvd1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGRheWpzXGVzbVxwbHVnaW5caXNZZXN0ZXJkYXlcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGRheWpzXGVzbVxwbHVnaW5cbG9jYWxlRGF0YVwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGRheWpzXGVzbVxwbHVnaW5cbG9jYWxpemVkRm9ybWF0XCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGRheWpzXGVzbVxwbHVnaW5cbWluTWF4XCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGRheWpzXGVzbVxwbHVnaW5cb2JqZWN0U3VwcG9ydFwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGRheWpzXGVzbVxwbHVnaW5ccGx1cmFsR2V0U2V0XCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGRheWpzXGVzbVxwbHVnaW5ccHJlUGFyc2VQb3N0Rm9ybWF0XCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGRheWpzXGVzbVxwbHVnaW5ccXVhcnRlck9mWWVhclwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGRheWpzXGVzbVxwbHVnaW5ccmVsYXRpdmVUaW1lXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGRheWpzXGVzbVxwbHVnaW5cdGltZXpvbmVcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGRheWpzXGVzbVxwbHVnaW5cdG9BcnJheVwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGRheWpzXGVzbVxwbHVnaW5cdG9PYmplY3RcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGRheWpzXGVzbVxwbHVnaW5cdXBkYXRlTG9jYWxlXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGRheWpzXGVzbVxwbHVnaW5cdXRjXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGRheWpzXGVzbVxwbHVnaW5cd2Vla2RheVwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGRheWpzXGVzbVxwbHVnaW5cd2Vla09mWWVhclwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGRheWpzXGVzbVxwbHVnaW5cd2Vla1llYXJcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGRheWpzXGxvY2FsZVwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGRheWpzXHBsdWdpblwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGRlYnVnXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGRlYnVnXHNyY1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGRlY2FtZWxpemVcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGRlZmluZS1kYXRhLXByb3BlcnR5XCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGRlZmluZS1kYXRhLXByb3BlcnR5XC5naXRodWJcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGRlZmluZS1kYXRhLXByb3BlcnR5XHRlc3RcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGRlZ2VuZXJhdG9yXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGRlZ2VuZXJhdG9yXGRpc3RcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGRlbGF5ZWQtc3RyZWFtXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGRlbGF5ZWQtc3RyZWFtXGxpYlwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGRlcGRcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGRlcGRcbGliXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGRlcGRcbGliXGJyb3dzZXJcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGRlc3Ryb3lcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGRldGVjdC1maWxlXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGRpXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGRpXGxpYlwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGRpZmZcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGRpZmZcZGlzdFwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGRpZmZcbGliXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGRpZmZcbGliXGNvbnZlcnRcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGRpZmZcbGliXGRpZmZcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGRpZmZcbGliXHBhdGNoXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGRpZmZcbGliXHV0aWxcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGRvbS1zZXJpYWxpemVcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGRvbS1zZXJpYWxpemVcdGVzdFwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGVlLWZpcnN0XCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGVtb2ppLXJlZ2V4XCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGVtb2ppLXJlZ2V4XGVzMjAxNVwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGVuY29kZXVybFwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGVuZ2luZS5pby1wYXJzZXJcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGVuZ2luZS5pby1wYXJzZXJcYnVpbGRcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGVuZ2luZS5pby1wYXJzZXJcYnVpbGRcY2pzXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGVuZ2luZS5pby1wYXJzZXJcYnVpbGRcY2pzXGNvbnRyaWJcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGVuZ2luZS5pby1wYXJzZXJcYnVpbGRcZXNtXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGVuZ2luZS5pby1wYXJzZXJcYnVpbGRcZXNtXGNvbnRyaWJcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGVuZ2luZS5pb1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGVuZ2luZS5pb1xidWlsZFwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGVuZ2luZS5pb1xidWlsZFxwYXJzZXItdjNcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGVuZ2luZS5pb1xidWlsZFx0cmFuc3BvcnRzLXV3c1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGVuZ2luZS5pb1xidWlsZFx0cmFuc3BvcnRzXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGVuZ2luZS5pb1xub2RlX21vZHVsZXNcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGVuZ2luZS5pb1xub2RlX21vZHVsZXNcY29va2llXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGVuZ2luZS5pb1xub2RlX21vZHVsZXNcZGVidWdcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGVuZ2luZS5pb1xub2RlX21vZHVsZXNcZGVidWdcc3JjXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGVuZ2luZS5pb1xub2RlX21vZHVsZXNcbXNcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGVucXVpcmVyXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGVucXVpcmVyXGxpYlwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGVucXVpcmVyXGxpYlxwcm9tcHRzXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGVucXVpcmVyXGxpYlx0eXBlc1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGVudFwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGVudFwuZ2l0aHViXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGVudFxleGFtcGxlc1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGVudFx0ZXN0XCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGVzLWRlZmluZS1wcm9wZXJ0eVwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGVzLWRlZmluZS1wcm9wZXJ0eVwuZ2l0aHViXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGVzLWRlZmluZS1wcm9wZXJ0eVx0ZXN0XCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGVzLWVycm9yc1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGVzLWVycm9yc1wuZ2l0aHViXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGVzLWVycm9yc1x0ZXN0XCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGVzY2FsYWRlXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGVzY2FsYWRlXGRpc3RcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGVzY2FsYWRlXHN5bmNcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGVzY2FwZS1odG1sXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGVzY2FwZS1zdHJpbmctcmVnZXhwXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGVzY29kZWdlblwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGVzY29kZWdlblxiaW5cKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGVzcHJpbWFcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGVzcHJpbWFcYmluXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGVzcHJpbWFcZGlzdFwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGVzdHJhdmVyc2VcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGVzdXRpbHNcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGVzdXRpbHNcbGliXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGV0YWdcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGV2ZW50ZW1pdHRlcjJcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGV2ZW50ZW1pdHRlcjJcbGliXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGV2ZW50ZW1pdHRlcjNcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGV2ZW50ZW1pdHRlcjNcdW1kXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGV4aXRcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGV4aXRcbGliXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGV4aXRcdGVzdFwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGV4aXRcdGVzdFxmaXh0dXJlc1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGV4cGFuZC10aWxkZVwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGV4cHJlc3NcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGV4cHJlc3NcbGliXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGV4cHJlc3NcbGliXG1pZGRsZXdhcmVcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGV4cHJlc3NcbGliXHJvdXRlclwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGV4dGVuZFwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGV4dHJhcmVxcDJcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XEFwcERhdGFcTG9jYWxcVGVtcFw=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"XERvc0RldmljZXNcTTo=","type":"Ansi","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFBJUEVcbHNhcnBj","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFBJUEVcc3J2c3Zj","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XTFdPV1BXUddT11VXVtdZV1nXW1deV0=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"XVEgZShmOT58VV4kUjIyMGY5YTlmLWE5YTYtNDFiMi04ZGJlLTZlZTBiMDViOGEzMg==","type":"Ansi","source":"File String Dumps","process":null,"filename":"weekdayRange.d.ts.map.x2anylock","compromised":null,"detection_total":null,"total":null},{"value":"XXl7PzM7L2dCVno4VFw8M35EODlvdnlBZixuMjIwZjlhOWYtYTlhNi00MWIyLThkYmUtNmVlMGIwNWI4YTMy","type":"Ansi","source":"File String Dumps","process":null,"filename":"isUndefined.js.x2anylock","compromised":null,"detection_total":null,"total":null},{"value":"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","type":"Ansi","source":"File String Dumps","process":null,"filename":"README.md.x2anylock","compromised":null,"detection_total":null,"total":null},{"value":"XiFeJ14rXi1eMV45XkVeSV5XXmlec151Xg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"XnlfMzE3d1dPMjIwZjlhOWYtYTlhNi00MWIyLThkYmUtNmVlMGIwNWI4YTMy","type":"Ansi","source":"File String Dumps","process":null,"filename":"pm2-runtime.x2anylock","compromised":null,"detection_total":null,"total":null},{"value":"XydfM181XztfR19XX11fY19lX3dfe18=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Xz1BPlh+bz1wL3o9MF0iXUdiS0xpTE1dPmhnYjU/S3I9cTQoR3VzUWlZVD56X3s1R1dPaFgiPycnL0dwUz15XXd6YCVhUi8xYjlGXFdtRCcnfF1CMWdnaiJLSWRHID4iVkZDWSx5fikyMjBmOWE5Zi1hOWE2LTQxYjItOGRiZS02ZWUwYjA1YjhhMzI=","type":"Ansi","source":"File String Dumps","process":null,"filename":"mn.js.x2anylock","compromised":null,"detection_total":null,"total":null},{"value":"X19jbHJjYWxs","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"X19jcnRfc3RydG94OjpmbG9hdGluZ19wb2ludF92YWx1ZTo6YXNfZG91Ymxl","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"X19jcnRfc3RydG94OjpmbG9hdGluZ19wb2ludF92YWx1ZTo6YXNfZmxvYXQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"X19mYXN0Y2FsbA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"X19wcmVzZXJ2ZV9ub25l","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"X19yZXN0cmljdA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"X19zdGRjYWxs","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"X19zd2lmdF8x","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"X19zd2lmdF8y","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"X19zd2lmdF8z","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"X190aGlzY2FsbA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"X191bmFsaWduZWQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"X192ZWN0b3JjYWxs","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"X2lzX2RvdWJsZQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"X25leHRhZnRlcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"YCNgL2A3YFNgX2BlYGtgc2B5YA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"YGFkanVzdG9yew==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"YGFub255bW91cyBuYW1lc3BhY2Un","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"YGNvcHkgY29uc3RydWN0b3IgY2xvc3VyZSc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"YGRlZmF1bHQgY29uc3RydWN0b3IgY2xvc3VyZSc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"YGR5bmFtaWMgYXRleGl0IGRlc3RydWN0b3IgZm9yICc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"YGR5bmFtaWMgaW5pdGlhbGl6ZXIgZm9yICc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"YGVoIHZlY3RvciBjb25zdHJ1Y3RvciBpdGVyYXRvcic=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"YGVoIHZlY3RvciBjb3B5IGNvbnN0cnVjdG9yIGl0ZXJhdG9yJw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"YGVoIHZlY3RvciBkZXN0cnVjdG9yIGl0ZXJhdG9yJw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"YGVoIHZlY3RvciB2YmFzZSBjb25zdHJ1Y3RvciBpdGVyYXRvcic=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"YGVoIHZlY3RvciB2YmFzZSBjb3B5IGNvbnN0cnVjdG9yIGl0ZXJhdG9yJw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"YGdlbmVyaWMtY2xhc3MtcGFyYW1ldGVyLQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"YGdlbmVyaWMtbWV0aG9kLXBhcmFtZXRlci0=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"YGdlbmVyaWMtdHlwZS0=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"YGxvY2FsIHN0YXRpYyBkZXN0cnVjdG9yIGhlbHBlcic=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"YGxvY2FsIHN0YXRpYyBndWFyZCc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"YGxvY2FsIHN0YXRpYyB0aHJlYWQgZ3VhcmQn","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"YGxvY2FsIHZmdGFibGUgY29uc3RydWN0b3IgY2xvc3VyZSc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"YGxvY2FsIHZmdGFibGUn","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"YG1hbmFnZWQgdmVjdG9yIGNvbnN0cnVjdG9yIGl0ZXJhdG9yJw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"YG1hbmFnZWQgdmVjdG9yIGNvcHkgY29uc3RydWN0b3IgaXRlcmF0b3In","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"YG1hbmFnZWQgdmVjdG9yIGRlc3RydWN0b3IgaXRlcmF0b3In","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"YG5vbi10eXBlLXRlbXBsYXRlLXBhcmFtZXRlcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"YG9tbmkgY2FsbHNpZyc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"YHBsYWNlbWVudCBkZWxldGUgY2xvc3VyZSc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"YHBsYWNlbWVudCBkZWxldGVbXSBjbG9zdXJlJw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"YHNjYWxhciBkZWxldGluZyBkZXN0cnVjdG9yJw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"YHN0cmluZyc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"YHRlbXBsYXRlIHN0YXRpYyBkYXRhIG1lbWJlciBjb25zdHJ1Y3RvciBoZWxwZXIn","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"YHRlbXBsYXRlIHN0YXRpYyBkYXRhIG1lbWJlciBkZXN0cnVjdG9yIGhlbHBlcic=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"YHRlbXBsYXRlLXBhcmFtZXRlcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"YHRlbXBsYXRlLXBhcmFtZXRlci0=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"YHRlbXBsYXRlLXR5cGUtcGFyYW1ldGVyLQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"YHR5cGVvZic=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"YHVkdCByZXR1cm5pbmcn","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"YHVua25vd24gZWNzdSc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"YHZiYXNlIGRlc3RydWN0b3In","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"YHZidGFibGUn","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"YHZlY3RvciBjb25zdHJ1Y3RvciBpdGVyYXRvcic=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"YHZlY3RvciBjb3B5IGNvbnN0cnVjdG9yIGl0ZXJhdG9yJw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"YHZlY3RvciBkZWxldGluZyBkZXN0cnVjdG9yJw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"YHZlY3RvciBkZXN0cnVjdG9yIGl0ZXJhdG9yJw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"YHZlY3RvciB2YmFzZSBjb25zdHJ1Y3RvciBpdGVyYXRvcic=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"YHZlY3RvciB2YmFzZSBjb3B5IGNvbnN0cnVjdG9yIGl0ZXJhdG9yJw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"YHZmdGFibGUn","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"YHZpcnR1YWwgZGlzcGxhY2VtZW50IG1hcCc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"YHZ0b3JkaXNwZXh7","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"YHZ0b3JkaXNwew==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"QSFBM0E1QTtBP0FZQWVBa0F3QXtB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"$4e","type":"Ansi","source":"File String Dumps","process":null,"filename":"aphostres.dll.mui.x2anylock","compromised":null,"detection_total":null,"total":null},{"value":"YS1hOWFLYVVhV2FbYW9heWE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"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","type":"Ansi","source":"File String Dumps","process":null,"filename":"layout.js.x2anylock","compromised":null,"detection_total":null,"total":null},{"value":"YUFiQmNDZERlRmdHaEhJam1NbnByUlN0VHVVVndXeFh5WXpa","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"QWFwaS1tcy13aW4tY29yZS1maWJlcnMtbDEtMS0x","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"YWJjZGVmZ2hpamtsbW5vcHFyc3R1dnd4eXo=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"QUJDREVGR0hJSktMTU5PUFFSU1RVVldYWVo=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"QWNxdWlyZVNSV0xvY2tFeGNsdXNpdmU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"QWNyb25pc0FnZW50","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"QWNyU2NoMlN2Yw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"QWN0aXZhdGVBdFN0b3JhZ2U=","type":"Ansi","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"YWRkcmVzcyBmYW1pbHkgbm90IHN1cHBvcnRlZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"YWRkcmVzcyBpbiB1c2U=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"YWRkcmVzcyBub3QgYXZhaWxhYmxl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"QURWQVBJMzIuZGxs","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"QUVTTkk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"QWdncmVzc2l2ZU1UQVRlc3Rpbmc=","type":"Ansi","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"YWdudHN2Yy5leGU=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"QWxnb3JpdGhtUGFyYW1ldGVyc0Jhc2U6IHBhcmFtZXRlciAi","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"QWxsIFVzZXJz","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"QWxsb2NhdG9yQmFzZTogcmVxdWVzdGVkIHNpemUgd291bGQgY2F1c2UgaW50ZWdlciBvdmVyZmxvdw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"QWxsb3dEZXZlbG9wbWVudFdpdGhvdXREZXZMaWNlbnNl","type":"Ansi","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"YWxyZWFkeSBjb25uZWN0ZWQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"QWx0ZXJuYXRlQ29kZVBhZ2U=","type":"Ansi","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"YW1lcmljYW4gZW5nbGlzaA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"YW1lcmljYW4tZW5nbGlzaA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"QW5vbnltb3VzQXBwQ29udGFpbmVySW1wZXJzb25hdGlvbkxldmVsQ2hlY2s=","type":"Ansi","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"QU9ac1wheUEq","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"YXBpLW1zLXdpbi1hcHBtb2RlbC1ydW50aW1lLWwxLTEtMg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"YXBpLW1zLXdpbi1jb3JlLWRhdGV0aW1lLWwxLTEtMQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"YXBpLW1zLXdpbi1jb3JlLWZpYmVycy1sMS0xLTE=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"YXBpLW1zLXdpbi1jb3JlLWZpYmVycy1sMS0xLTI=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"YXBpLW1zLXdpbi1jb3JlLWZpbGUtbDEtMi0y","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"YXBpLW1zLXdpbi1jb3JlLWZpbGUtbDEtMi00","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"YXBpLW1zLXdpbi1jb3JlLWZpbGUtbDItMS00","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"YXBpLW1zLXdpbi1jb3JlLWxvY2FsaXphdGlvbi1sMS0yLTE=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"YXBpLW1zLXdpbi1jb3JlLWxvY2FsaXphdGlvbi1vYnNvbGV0ZS1sMS0yLTA=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"YXBpLW1zLXdpbi1jb3JlLXByb2Nlc3N0aHJlYWRzLWwxLTEtMg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"YXBpLW1zLXdpbi1jb3JlLXN0cmluZy1sMS0xLTA=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"YXBpLW1zLXdpbi1jb3JlLXN5bmNoLWwxLTItMA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"YXBpLW1zLXdpbi1jb3JlLXN5bmNoLWwxLTItMC5kbGw=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"YXBpLW1zLXdpbi1jb3JlLXN5c2luZm8tbDEtMi0x","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"YXBpLW1zLXdpbi1jb3JlLXdpbnJ0LWwxLTEtMA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"YXBpLW1zLXdpbi1jb3JlLXhzdGF0ZS1sMi0xLTA=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"YXBpLW1zLXdpbi1ydGNvcmUtbnR1c2VyLXdpbmRvdy1sMS0xLTA=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"YXBpLW1zLXdpbi1zZWN1cml0eS1zeXN0ZW1mdW5jdGlvbnMtbDEtMS0w","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"QXBwSURGbGFncw==","type":"Ansi","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"QXBwUG9saWN5R2V0UHJvY2Vzc1Rlcm1pbmF0aW9uTWV0aG9k","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"QXBwUG9saWN5R2V0VGhyZWFkSW5pdGlhbGl6YXRpb25UeXBl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"QXJlRmlsZUFwaXNBTlNJ","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"YXJndW1lbnQgbGlzdCB0b28gbG9uZw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"YXJndW1lbnQgb3V0IG9mIGRvbWFpbg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"QXJyYXlTaW5rOiBtaXNzaW5nIE91dHB1dEJ1ZmZlciBhcmd1bWVudA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"QXR0cmlidXRlcw==","type":"Ansi","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"YXVzdHJhbGlhbg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"QXV0aGVudGljYXRpb25MZXZlbA==","type":"Ansi","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"YXV0b3J1bi5pbmY=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"QXgjP3VOfSo=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"YXotQVotQ3lybA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"YXotYXotY3lybA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"YXotQVotTGF0bg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"YXotYXotbGF0bg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"YiFiJ2I7YkFiS2JRYlNiX2JlYg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"QiNCKUIvQkNCU0JVQltCYUJzQn1C","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"QjtQO2I7cDt2Ow==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"QmFja3VwRXhlY0FnZW50QWNjZWxlcmF0b3I=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"QmFja3VwRXhlY0FnZW50QnJvd3Nlcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"QmFja3VwRXhlY0RpdmVjaU1lZGlhU2VydmljZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"QmFja3VwRXhlY0pvYkVuZ2luZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"QmFja3VwRXhlY01hbmFnZW1lbnRTZXJ2aWNl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"QmFja3VwRXhlY1JQQ1NlcnZpY2U=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"QmFja3VwRXhlY1ZTU1Byb3ZpZGVy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"YmFkIGFkZHJlc3M=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"YmFkIGFsbG9jYXRpb24=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"YmFkIGFycmF5IG5ldyBsZW5ndGg=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"YmFkIGNvbnZlcnNpb24=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"YmFkIGV4Y2VwdGlvbg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"YmFkIGZpbGUgZGVzY3JpcHRvcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"YmFkIGxvY2FsZSBuYW1l","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"YmFkIG1lc3NhZ2U=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"QmFzZSBDbGFzcyBBcnJheSc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"QmFzZSBDbGFzcyBEZXNjcmlwdG9yIGF0ICg=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"YmNyeXB0LmRsbA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"QkNyeXB0Q2xvc2VBbGdvcml0aG1Qcm92aWRlcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"QkNyeXB0R2VuUmFuZG9t","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"QkNyeXB0T3BlbkFsZ29yaXRobVByb3ZpZGVy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"QkVSIGRlY29kZSBlcnJvcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Qml0QnVja2V0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Ym9vdGZvbnQuYmlu","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Ym9vdG1nZncuZWZp","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Ym9vdG1nci5lZmk=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Ym9vdHNlY3QuYmFr","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"YnJva2VuIHBpcGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"YnMtQkEtTGF0bg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"YnMtYmEtbGF0bg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"QnVmZmVyZWRUcmFuc2Zvcm1hdGlvbjogdGhpcyBvYmplY3QgZG9lc24ndCBhbGxvdyBpbnB1dA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"QnVmZmVyZWRUcmFuc2Zvcm1hdGlvbjogdGhpcyBvYmplY3QgaXMgbm90IGF0dGFjaGFibGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Ynl0ZSBkaWdlc3QgdG8=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"QyRdJF5yXXYjZj1ffXdJQHBkOipwJmpNTE9ndio7YTc2XylQI2F6Syh2dHhwX3g6TVYwRiJaV2hLM1ddMjIwZjlhOWYtYTlhNi00MWIyLThkYmUtNmVlMGIwNWI4YTMy","type":"Ansi","source":"File String Dumps","process":null,"filename":"stats.js.map.x2anylock","compromised":null,"detection_total":null,"total":null},{"value":"QyVDJ0MzQzdDOUNPQ1dDaUM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Qyduc0lAYzJGVjAobEEhaWRhezVyZkheIzFyJmcpdjRGcHAzWXsqUk19MkdvaDNUI2YrIHYqPykrZHY8X0c+SlJKZixgfjNMTmpQWFJhO01FYSxZKW5JMT4iWj4xT1ZNVmB1LH12IHg/eURBcXRIY3Z6Qm5tX3lkJGheY2ZdPDlFfnkuTlUrdyl+TmcgSXxaI0R9VXJcY21MZXwyVEMsT0lAIFhdXWZoRmwgZidNJnJHJGBERWRCXCJLVWhwOVYvZm1OQHJNJTFPPngqQDszT19bcUM7TzBiSn16PzcyMjBmOWE5Zi1hOWE2LTQxYjItOGRiZS02ZWUwYjA1YjhhMzI=","type":"Ansi","source":"File String Dumps","process":null,"filename":"es-us.js.x2anylock","compromised":null,"detection_total":null,"total":null},{"value":"Qypxdj5qZidLIUtnRHpHM1thLiBePi9PeionT1AsW24nMUNRe2p9RnlFSlB5S0MncDIyMGY5YTlmLWE5YTYtNDFiMi04ZGJlLTZlZTBiMDViOGEzMg==","type":"Ansi","source":"File String Dumps","process":null,"filename":"rcd-openbsd.tpl.x2anylock","compromised":null,"detection_total":null,"total":null},{"value":"Yy9jQWNDY09jX2NnY21jcWN3Y31j","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"JVBST0dSQU1GSUxFUyVcTWljcm9zb2Z0IFZpc3VhbCBTdHVkaW9cMjAyMlxDb21tdW5pdHlcVkNcdmNwa2dcYnVpbGR0cmVlc1xjcnlwdG9wcFxzcmNcVE9QUF84XzlfMC1hMWE5YmU0OTdlLmNsZWFuXGNoYWNoYV9hdnguY3Bw","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"JVBST0dSQU1GSUxFUyVcTWljcm9zb2Z0IFZpc3VhbCBTdHVkaW9cMjAyMlxDb21tdW5pdHlcVkNcdmNwa2dcYnVpbGR0cmVlc1xjcnlwdG9wcFxzcmNcVE9QUF84XzlfMC1hMWE5YmU0OTdlLmNsZWFuXGNoYWNoYV9zaW1kLmNwcA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"JVBST0dSQU1GSUxFUyVcTWljcm9zb2Z0IFZpc3VhbCBTdHVkaW9cMjAyMlxDb21tdW5pdHlcVkNcdmNwa2dcYnVpbGR0cmVlc1xjcnlwdG9wcFxzcmNcVE9QUF84XzlfMC1hMWE5YmU0OTdlLmNsZWFuXGRvbm5hXzMyLmNwcA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"JVBST0dSQU1GSUxFUyVcTWljcm9zb2Z0IFZpc3VhbCBTdHVkaW9cMjAyMlxDb21tdW5pdHlcVkNcdmNwa2dcYnVpbGR0cmVlc1xjcnlwdG9wcFxzcmNcVE9QUF84XzlfMC1hMWE5YmU0OTdlLmNsZWFuXGRvbm5hX3NzZS5jcHA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"JVBST0dSQU1GSUxFUyVcTWljcm9zb2Z0IFZpc3VhbCBTdHVkaW9cMjAyMlxDb21tdW5pdHlcVkNcdmNwa2dcYnVpbGR0cmVlc1xjcnlwdG9wcFxzcmNcVE9QUF84XzlfMC1hMWE5YmU0OTdlLmNsZWFuXHJpam5kYWVsX3NpbWQuY3Bw","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"JVBST0dSQU1GSUxFUyVcTWljcm9zb2Z0IFZpc3VhbCBTdHVkaW9cMjAyMlxDb21tdW5pdHlcVkNcdmNwa2dcYnVpbGR0cmVlc1xjcnlwdG9wcFxzcmNcVE9QUF84XzlfMC1hMWE5YmU0OTdlLmNsZWFuXHNoYV9zaW1kLmNwcA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"QzpcVXNlcnNc","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"JVdJTkRJUiVcYm9vdHN0YXQuZGF0","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"JVdJTkRJUiVcU3lzdGVtMzJccGVyZmMwMDkuZGF0","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"JVdJTkRJUiVcU3lzdGVtMzJccGVyZmgwMDkuZGF0","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"JVdJTkRJUiVcU3lzdGVtMzJcUGVyZlN0cmluZ0JhY2t1cC5pbmk=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"JVdJTkRJUiVcVGVtcFw=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"JVdJTkRJUiVcV2luZG93c1VwZGF0ZS5sb2c=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Q0FBUkNVcGRhdGVTdmM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Q0FTQUQyRFdlYlN2Yw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Q2F0ZWdvcnk=","type":"Ansi","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q0I0Y0pRbEFj","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Q0QgQnVybmluZw==","type":"Ansi","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q2hhQ2hh","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Y2hhcjE2X3Q=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Y2hhcjMyX3Q=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Y2hpbmVzZS1ob25na29uZw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Y2hpbmVzZS1zaW1wbGlmaWVk","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Y2hpbmVzZS1zaW5nYXBvcmU=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Y2hpbmVzZS10cmFkaXRpb25hbA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Q2xhc3MgSGllcmFyY2h5IERlc2NyaXB0b3In","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Y2xpOjphcnJheTw=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Y2xpOjpwaW5fcHRyPA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Q2xvbmUoKSBpcyBub3QgaW1wbGVtZW50ZWQgeWV0Lg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Q2xvc2VIYW5kbGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Q2xvc2VTZXJ2aWNlSGFuZGxl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Q2xvc2VUaHJlYWRwb29sVGltZXI=","type":"Ansi","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q2xvc2VUaHJlYWRwb29sV2FpdA==","type":"Ansi","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q2xvc2VUaHJlYWRwb29sV29yaw==","type":"Ansi","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29DcmVhdGVJbnN0YW5jZQ==","type":"Ansi","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29DcmVhdGVJbnN0YW5jZUV4","type":"Ansi","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29HZXRDbGFzc09iamVjdA==","type":"Ansi","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29Jbml0aWFsaXpl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Y29pbnRlcmZhY2U=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Q29tK0VuYWJsZWQ=","type":"Ansi","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29tbW9uIFN0YXJ0IE1lbnU=","type":"Ansi","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29tcGFyZUZpbGVUaW1l","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Q29tcGFyZVN0cmluZ0V4","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Q29tcGFyZVN0cmluZ1c=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Q29tcGxldGUgT2JqZWN0IExvY2F0b3In","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Y29uZmlnLmpzb24=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Y29ubmVjdGlvbiBhYm9ydGVk","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Y29ubmVjdGlvbiBhbHJlYWR5IGluIHByb2dyZXNz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Y29ubmVjdGlvbiByZWZ1c2Vk","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Y29ubmVjdGlvbiByZXNldA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Q29udHJvbFNlcnZpY2U=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Q29yRXhpdFByb2Nlc3M=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Q29VbmluaXRpYWxpemU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlRXZlbnRFeFc=","type":"Ansi","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlRmlsZVc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlU2VtYXBob3JlRXhX","type":"Ansi","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlU2VtYXBob3JlVw==","type":"Ansi","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlU3ltYm9saWNMaW5rVw==","type":"Ansi","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlVGhyZWFk","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlVGhyZWFkcG9vbFRpbWVy","type":"Ansi","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlVGhyZWFkcG9vbFdhaXQ=","type":"Ansi","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlVGhyZWFkcG9vbFdvcms=","type":"Ansi","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlVG9vbGhlbHAzMlNuYXBzaG90","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlVnNzQmFja3VwQ29tcG9uZW50c0ludGVybmFs","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Y3Jvc3MgZGV2aWNlIGxpbms=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Q3J5cHRvZ3JhcGhpYyBhbGdvcml0aG1zIGFyZSBkaXNhYmxlZCBhZnRlciBhIHBvd2VyLXVwIHNlbGYgdGVzdCBmYWlsZWQu","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Q3J5cHRvZ3JhcGhpYyBhbGdvcml0aG1zIGFyZSBkaXNhYmxlZCBiZWZvcmUgdGhlIHBvd2VyLXVwIHNlbGYgdGVzdHMgYXJlIHBlcmZvcm1lZC4=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Q3J5cHRvTWF0ZXJpYWw6IHRoaXMgb2JqZWN0IGNvbnRhaW5zIGludmFsaWQgdmFsdWVz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Q3J5cHRvTWF0ZXJpYWw6IHRoaXMgb2JqZWN0IGRvZXMgbm90IHN1cHBvcnQgcHJlY29tcHV0YXRpb24=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"ZCFkJ2QrZDlkQ2RJZE9kXWRnZHVk","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"RCNEKUQ7RD9ERURLRFFEU0RZRGVEb0Q=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"ZC5QOSJVMmt4XitkNjpzYmUpVkM0PnpndDozd3pGU0pVezR1KSp0Om8hKk4pfF85VFROJCV1QFhieT1kS0VpLG0vLlg9aGJXZlV2Q15bQztLUURJKEpVdD44YyRucipuOCNJfj9fQXd3a2MzSjhfI0ByaTRAViJEWk1La2gqfDNJdU5NVy4jMmQ1WXRJO1x1VkUhZDk4aFYzaVUyOD4zWEFLLCloKkUnTmN8IjEvSWxjZHpvd35RQVc7QGJgaChpN3pCTHdyTTkyMjBmOWE5Zi1hOWE2LTQxYjItOGRiZS02ZWUwYjA1YjhhMzI=","type":"Ansi","source":"File String Dumps","process":null,"filename":"package.json.x2anylock","compromised":null,"detection_total":null,"total":null},{"value":"ZGJlbmc1MC5leGU=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"ZGJzbm1wLmV4ZQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"ZGRkZCwgTU1NTSBkZCwgeXl5eQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"ZGVjbHR5cGUoYXV0byk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"RGVjb2RlUG9pbnRlcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"ZGVjcnlwdGlvbmRlc2NyaXB0aW9uLnBkZg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"RGVmYXVsdEFjY2Vzc1Blcm1pc3Npb24=","type":"Ansi","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGVmaW5pdGlvbkZsYWdz","type":"Ansi","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGVmV2F0Y2g=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"RGVsZXRlQ3JpdGljYWxTZWN0aW9u","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"ZGVxdWU8VD4gdG9vIGxvbmc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"RGVyaXZlUHVibGljS2V5","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"RGVzY3JpcHRpb24=","type":"Ansi","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"ZGVza3RvcC5pbmk=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"ZGVzdGluYXRpb24gYWRkcmVzcyByZXF1aXJlZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"ZGV2aWNlIG9yIHJlc291cmNlIGJ1c3k=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"ZGlyZWN0b3J5IG5vdCBlbXB0eQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"RGlzYWJsZU1ldGFGaWxlcw==","type":"Ansi","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RGxsU3Vycm9nYXRl","type":"Ansi","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"ZHV0Y2gtYmVsZ2lhbg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"RHcoOTFnNiZEUX09b0JKclFbenJuXyolXFd+Ond2IXl0OzFuS1xJcywxN19lKWlEY2A0OSZ9L2BfSk0jOTlZaTcvIFh5SkNgWikyMjBmOWE5Zi1hOWE2LTQxYjItOGRiZS02ZWUwYjA1YjhhMzI=","type":"Ansi","source":"File String Dumps","process":null,"filename":"zh-hk.js.x2anylock","compromised":null,"detection_total":null,"total":null},{"value":"ZFpLPCksRjg=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"ZSFlL2U5ZT9lS2VNZVNlV2VfZXFlfWU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"RStFMUVBRUlFU0VVRWFFd0V9RQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"ZS9lWUNMTFZtL3BfMEIoPFJbNVpZWHZSNVxHcXwuQTNdIjM9YCJFcVZBIzthJ0VUeT9uLDYtflUvUGdOfDFVcy5qIUlyWFNxIktxfjVbPzdeOUJTKXxPRScva2R7QmVYKk9RLC4lLmRUai9AO2AuL1Fpb0xvLHY7YHNlX05NUTxIMSRtWys2VHp2T1MwOTUpMjIwZjlhOWYtYTlhNi00MWIyLThkYmUtNmVlMGIwNWI4YTMy","type":"Ansi","source":"File String Dumps","process":null,"filename":"series.js.x2anylock","compromised":null,"detection_total":null,"total":null},{"value":"RW5hYmxlUGVyUHJvY2Vzc1N5c3RlbURQSQ==","type":"Ansi","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RW5jb2RlUG9pbnRlcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"ZW5jcnlwdC5leGU=","type":"Ansi","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"ZW5jc3ZjLmV4ZQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"ZW5nbGlzaC1hbWVyaWNhbg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"ZW5nbGlzaC1hdXM=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"ZW5nbGlzaC1iZWxpemU=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"ZW5nbGlzaC1jYW4=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"ZW5nbGlzaC1jYXJpYmJlYW4=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"ZW5nbGlzaC1pcmU=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"ZW5nbGlzaC1qYW1haWNh","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"ZW5nbGlzaC1ueg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"ZW5nbGlzaC1zb3V0aCBhZnJpY2E=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"ZW5nbGlzaC10cmluaWRhZCB5IHRvYmFnbw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"ZW5nbGlzaC11aw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"ZW5nbGlzaC11cw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"ZW5nbGlzaC11c2E=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"RW50ZXJDcml0aWNhbFNlY3Rpb24=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"RW51bURlcGVuZGVudFNlcnZpY2VzQQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"RW51bVN5c3RlbUxvY2FsZXNFeA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"RW51bVN5c3RlbUxvY2FsZXNX","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"RXZlcnlvbmVJbmNsdWRlc0Fub255bW91cw==","type":"Ansi","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"ZXhjZWVkcyB0aGUgbWF4aW11bSBvZg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"ZXhjZWwuZXhl","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"ZXhlY3V0YWJsZSBmb3JtYXQgZXJyb3I=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"RXhpdFByb2Nlc3M=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"RXhpdFRocmVhZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"ZXh0LW1zLXdpbi1udHVzZXItZGlhbG9nYm94LWwxLTEtMA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"ZXh0LW1zLXdpbi1udHVzZXItd2luZG93c3RhdGlvbi1sMS0xLTA=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"ZXh0ZXJuICJDIg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"ZVosTUwneTJwKHEkd30jVzk0NVhMSGxDSjIyMGY5YTlmLWE5YTYtNDFiMi04ZGJlLTZlZTBiMDViOGEzMg==","type":"Ansi","source":"File String Dumps","process":null,"filename":"adler32.js.x2anylock","compromised":null,"detection_total":null,"total":null},{"value":"RiVGJ0YzRjlGPUZDRkVGXUZ5RntG","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"RiVGMjIwZjlhOWYtYTlhNi00MWIyLThkYmUtNmVlMGIwNWI4YTMy","type":"Ansi","source":"File String Dumps","process":null,"filename":"allPass.js.x2anylock","compromised":null,"detection_total":null,"total":null},{"value":"ZilmMWY7ZkFmR2ZNZltmYWZzZn1m","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"ZjlteW1vL01fUm41cjdbTD08N0B4YjIyMGY5YTlmLWE5YTYtNDFiMi04ZGJlLTZlZTBiMDViOGEzMg==","type":"Ansi","source":"File String Dumps","process":null,"filename":"cleanPositionalOperators.js.x2anylock","compromised":null,"detection_total":null,"total":null},{"value":"ZkQ8ODIyMGY5YTlmLWE5YTYtNDFiMi04ZGJlLTZlZTBiMDViOGEzMg==","type":"Ansi","source":"File String Dumps","process":null,"filename":"package.json.x2anylock","compromised":null,"detection_total":null,"total":null},{"value":"ZmlsZSBleGlzdHM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"ZmlsZSB0b28gbGFyZ2U=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"ZmlsZW5hbWUgdG9vIGxvbmc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"RmluZENsb3Nl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"RmluZEZpcnN0RmlsZUV4Vw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"RmluZEZpcnN0RmlsZVc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"RmluZEZpcnN0Vm9sdW1lVw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"RmluZE5leHRGaWxlVw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"RmluZE5leHRWb2x1bWVX","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"RmluZFZvbHVtZUNsb3Nl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Rmlwc0FsZ29yaXRobVBvbGljeQ==","type":"Ansi","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"ZmlyZWZveC5leGU=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"RmxzQWxsb2M=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"RmxzRnJlZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"RmxzR2V0VmFsdWU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"RmxzR2V0VmFsdWUy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"RmxzU2V0VmFsdWU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Rmx1c2hGaWxlQnVmZmVycw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Rmx1c2hQcm9jZXNzV3JpdGVCdWZmZXJz","type":"Ansi","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Rm9sZGVyVHlwZUlE","type":"Ansi","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RnJlZUVudmlyb25tZW50U3RyaW5nc1c=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"RnJlZUxpYnJhcnk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"RnJlZUxpYnJhcnlBbmRFeGl0VGhyZWFk","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"RnJlZUxpYnJhcnlXaGVuQ2FsbGJhY2tSZXR1cm5z","type":"Ansi","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"ZnJlbmNoLWJlbGdpYW4=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"ZnJlbmNoLWNhbmFkaWFu","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"ZnJlbmNoLWx1eGVtYm91cmc=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"ZnJlbmNoLXN3aXNz","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"ZnVuY3Rpb24gbm90IHN1cHBvcnRlZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"RyNHKUcvRzVHOUdLR01HUUddR29HcUd9Rw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"ZydnMWc3Zz9nRWdRZ1tnb2d5Zw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"ZzZ3TDBibiNXPUpBIWkvRH48RzIyMGY5YTlmLWE5YTYtNDFiMi04ZGJlLTZlZTBiMDViOGEzMg==","type":"Ansi","source":"File String Dumps","process":null,"filename":"oobe-button-template.html.x2anylock","compromised":null,"detection_total":null,"total":null},{"value":"R2BNPVNIMlROdilkIDdUa1JMeWA8cjZgMjIwZjlhOWYtYTlhNi00MWIyLThkYmUtNmVlMGIwNWI4YTMy","type":"Ansi","source":"File String Dumps","process":null,"filename":"bower.json.x2anylock","compromised":null,"detection_total":null,"total":null},{"value":"R2VuZXJhdGFibGVDcnlwdG9NYXRlcmlhbDogdGhpcyBvYmplY3QgZG9lcyBub3Qgc3VwcG9ydCBrZXkvcGFyYW1ldGVyIGdlbmVyYXRpb24=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"R2VuZXJhdGlvbg==","type":"Ansi","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Z2VuZXJpYy10eXBlLQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Z2VybWFuLWF1c3RyaWFu","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Z2VybWFuLWxpY2h0ZW5zdGVpbg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Z2VybWFuLWx1eGVtYm91cmc=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Z2VybWFuLXN3aXNz","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"R2V0QUNQ","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"R2V0Q29tbWFuZExpbmVB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"R2V0Q29tbWFuZExpbmVX","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"R2V0Q29tcHV0ZXJOYW1lVw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"R2V0Q29uc29sZU1vZGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"R2V0Q29uc29sZU91dHB1dENQ","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"R2V0Q29uc29sZVdpbmRvdw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"R2V0Q1BJbmZv","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"R2V0Q3VycmVudFBhY2thZ2VJZA==","type":"Ansi","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"R2V0Q3VycmVudFByb2Nlc3M=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"R2V0Q3VycmVudFByb2Nlc3NJZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"R2V0Q3VycmVudFByb2Nlc3Nvck51bWJlcg==","type":"Ansi","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"R2V0Q3VycmVudFRocmVhZElk","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RGF0ZUZvcm1hdEV4","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RGF0ZUZvcm1hdFc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RHJpdmVUeXBlVw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RW52aXJvbm1lbnRTdHJpbmdzVw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RXhpdENvZGVUaHJlYWQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RmlsZUluZm9ybWF0aW9uQnlIYW5kbGVFeA==","type":"Ansi","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"R2V0RmlsZVNpemVFeA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RmlsZVR5cGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"R2V0TGFzdEVycm9y","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"R2V0TG9jYWxlSW5mb0V4","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"R2V0TG9jYWxlSW5mb1c=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"R2V0TW9kdWxlRmlsZU5hbWVX","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"R2V0TW9kdWxlSGFuZGxlQQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"R2V0TW9kdWxlSGFuZGxlRXhX","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"R2V0TW9kdWxlSGFuZGxlVw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"R2V0TmF0aXZlU3lzdGVtSW5mbw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"R2V0T0VNQ1A=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"R2V0UHJvY0FkZHJlc3M=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"R2V0UHJvY2Vzc0hlYXA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"R2V0U3RhcnR1cEluZm9X","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"R2V0U3RkSGFuZGxl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"R2V0U3RyaW5nVHlwZVc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"R2V0U3lzdGVtVGltZUFzRmlsZVRpbWU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"R2V0U3lzdGVtVGltZVByZWNpc2VBc0ZpbGVUaW1l","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"R2V0VGVtcFBhdGgyVw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"R2V0VGlja0NvdW50","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"R2V0VGlja0NvdW50NjQ=","type":"Ansi","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"R2V0VGltZUZvcm1hdEV4","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"R2V0VGltZUZvcm1hdFc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"R2V0VGltZVpvbmVJbmZvcm1hdGlvbg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"R2V0VXNlckRlZmF1bHRMQ0lE","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"R2V0VXNlckRlZmF1bHRMb2NhbGVOYW1l","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"R2V0Vm9sdW1lUGF0aE5hbWVzRm9yVm9sdW1lTmFtZVc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Z3JlYXQgYnJpdGFpbg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"R3JvdXBPSUQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Z1JTMkJ5RGI0NFZpXncyT1AnTWNrJSV5aVZMWTxOeHtULmtUMFJiTDVxY207OU8zNjoqIzZzPE4hKzs+cU8wVCFeUSQiNyg2ZHhwRTJMVEldVE4oSWpAISBBWHxvalRzVUA5SyYlYGhePzIyQVBddnVPX3YxIkRVM3FId015RmsheidfY3VGOUZkampXQXlwMj9WLSlhUXs+WWh+MWU+YSxodkgxTThMR21YaTZKQ3lZIXpwVC5dLWxcV1thPWZKeTRWMlRjND5dJ1w+T08gIU17K0dxKT12VGtPb2RSOTpiQCgme1VPaXA3XEhsYEo4TGUgOGgzSSlSVnpEPWcvVkZmcEhebF1AeUxPMlIgWGdbLHpKdSxbUVNcQzxSbGplKlxqVXsyITkoYzlzNWwtZUg5QkQkcVdDSkl8MjIwZjlhOWYtYTlhNi00MWIyLThkYmUtNmVlMGIwNWI4YTMy","type":"Ansi","source":"File String Dumps","process":null,"filename":"process.js.x2anylock","compromised":null,"detection_total":null,"total":null},{"value":"R1NoQkd9ZUtKLVxQRSwvYG12UVslX1EiOGhOQCxEZSJtblQ3SUJENzU2RDgmQEBkcUBzay0kMzIyMGY5YTlmLWE5YTYtNDFiMi04ZGJlLTZlZTBiMDViOGEzMg==","type":"Ansi","source":"File String Dumps","process":null,"filename":"LICENSE.x2anylock","compromised":null,"detection_total":null,"total":null},{"value":"Z1RtSicnOEVAIDYrZm8mUG19Vks3RUo/UW1GUVlJUWJ2Jn5jP20jK2dZazJmKCcuUHwqJnw6YHFzTGRmcX0rKmM7SydASXI9TldXdl9abyhKIDNve2hNMjIwZjlhOWYtYTlhNi00MWIyLThkYmUtNmVlMGIwNWI4YTMy","type":"Ansi","source":"File String Dumps","process":null,"filename":"tl-ph.js.x2anylock","compromised":null,"detection_total":null,"total":null},{"value":"Z1pGeVNUYSg=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"SCZpQzlrUVRIfWNzVCdoOU97N2Ave0FjQ1VWa3ZOeWEmNENFRkwzYyFCcD5FcWMpJWtzZlZdQV1GQUprVyd1JjYiPTlTTzA1S1JRUndHWyQ9ZlJASm9jekFRK1dNbid+IVEkcTlsImxqYC4hMSclTW00XXQ5d0p4ajZ1ZjZbOm8vWEBPKH1TcEBiMyA3WzZ7P3B3Zjx0LENYMVA3MkkhVVtnIntJSmEmW35NXmdUcXV1PkouTz1mbV8sZXpgcCx3ey8uQ3wyMjBmOWE5Zi1hOWE2LTQxYjItOGRiZS02ZWUwYjA1YjhhMzI=","type":"Ansi","source":"File String Dumps","process":null,"filename":"sr.js.x2anylock","compromised":null,"detection_total":null,"total":null},{"value":"aC1oOWg7aD9oRWhLaE1oV2hZaF1oY2hpaGtocWg=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"SDFIPUhHSFVIWUhbSGtIbUh5SA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"SEE9aVlsL1AlLihJJl0tQmwpUFxgUi9dNkwvcVQ7KWdpRSQ0ICJEPD82UllPIi1hJ0ZNRSV1aUkuZjgpTmEufX05Mm1SXCooNWdlb14sQCJ+WHc/WWlefWI3dWJpVS5Men5rdUojIEgpL148RGA5LER+T147Iig0IGEwQSomaGVSPClSQyJoTC8iTj00XXtWb30xd1slblNyXCkxUjorJU9Ha21VLHA0b3MpIU9iID8kTiM1ciY/N1hHeWd3VDtHOiR8OHpHIU9TWG1SWTIhZHRRT0shc24pTkhaLCoxZVsnIzhjW14iYnMrXT5wRkFna0ciMzh1QCslViUtJkZGc0hvKSQqWSYnbl1ZJWdKQ31wdmkgTUgqU2g4cFU4IUJYPzo2RjIyMGY5YTlmLWE5YTYtNDFiMi04ZGJlLTZlZTBiMDViOGEzMg==","type":"Ansi","source":"File String Dumps","process":null,"filename":"ws-incoming.js.x2anylock","compromised":null,"detection_total":null,"total":null},{"value":"SGFzaFRyYW5zZm9ybWF0aW9uOiBjYW4ndCB0cnVuY2F0ZSBh","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"SGVhcEFsbG9j","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"SGVhcEZyZWU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"SGVhcFF1ZXJ5SW5mb3JtYXRpb24=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"SGVhcFJlQWxsb2M=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"SGVhcFNpemU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"aG9uZy1rb25n","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"aG9zdCB1bnJlYWNoYWJsZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"SG93IHRvIGRlY3J5cHQgbXkgZGF0YS50eHQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"aSlpL2lDaUdpSWlPaWVpa2lxaQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"SStJN0k9SUVJVUljSWlJbUlzSQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"STJvKDIyMGY5YTlmLWE5YTYtNDFiMi04ZGJlLTZlZTBiMDViOGEzMg==","type":"Ansi","source":"File String Dumps","process":null,"filename":"str.js.x2anylock","compromised":null,"detection_total":null,"total":null},{"value":"aWNvbmNhY2hlLmRi","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"SWNvblJlZmVyZW5jZQ==","type":"Ansi","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"aWRlbnRpZmllciByZW1vdmVk","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"SUdZPSY/UyQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"aWxsZWdhbCBieXRlIHNlcXVlbmNl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"SW1wb3J0YW50ISEhLnBkZg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW5hcHByb3ByaWF0ZSBpbyBjb250cm9sIG9wZXJhdGlvbg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW5mb3BhdGguZXhl","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"SW5pdEZvbGRlckhhbmRsZXI=","type":"Ansi","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SW5pdGlhbGl6ZUNvbmRpdGlvblZhcmlhYmxl","type":"Ansi","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SW5pdGlhbGl6ZUNyaXRpY2FsU2VjdGlvbkFuZFNwaW5Db3VudA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"SW5pdGlhbGl6ZUNyaXRpY2FsU2VjdGlvbkV4","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"SW5pdGlhbGl6ZVNMaXN0SGVhZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"SW5pdGlhbGl6ZVNSV0xvY2s=","type":"Ansi","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SW5pdE9uY2VFeGVjdXRlT25jZQ==","type":"Ansi","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SW5wcm9jU2VydmVyMzI=","type":"Ansi","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SW5zdGFsbExhbmd1YWdlRmFsbGJhY2s=","type":"Ansi","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SW50ZWdlcjogaW5wdXQgbGVuZ3RoIGlzIHRvbyBzbWFsbA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"SW50ZXJsb2NrZWRQdXNoRW50cnlTTGlzdA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"SW50ZXJuZXQgRXhwbG9yZXI=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW50ZXJydXB0ZWQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"SW50dWl0LlF1aWNrQm9va3MuRkNT","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW52YWxpZCBhcmd1bWVudA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW52YWxpZCBzZWVr","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW52YWxpZCBzdHJpbmcgcG9zaXRpb24=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW9zX2Jhc2U6OmJhZGJpdCBzZXQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW9zX2Jhc2U6OmVvZmJpdCBzZXQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW9zX2Jhc2U6OmZhaWxiaXQgc2V0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW9zdHJlYW0=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW9zdHJlYW0gc3RyZWFtIGVycm9y","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"aXJpc2gtZW5nbGlzaA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"aVJ4Y1RXMmlnIU5xQkptcCZpNm5FWVQrOXJrY3AsXjVZbld4Ukg+aF8kUihhJ0RSQHU3ZkMjaTpGbjVxaVJzPTdaIDgwV2B1LzZ2e3g9YjFyUjRYblUmdGt9bCVXSClXSXkiJnRAZ11eJnwlNypIS2lYWSooWTpGT057Mk51Q2sqYTVQK3d2NnlfdHpMKTdPd1tjJlcnZTN6Rk1NfWpYcEVMcldiZmFlLVgkQVFufTQ4JCMxaVZ7fEchNDFpUF1uZClLRTc8LzonIT07biE9Ym5MfjIyMGY5YTlmLWE5YTYtNDFiMi04ZGJlLTZlZTBiMDViOGEzMg==","type":"Ansi","source":"File String Dumps","process":null,"filename":"ast.js.x2anylock","compromised":null,"detection_total":null,"total":null},{"value":"aXMgYSBkaXJlY3Rvcnk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"aXMgbGVzcyB0aGFuIHRoZSBtaW5pbXVtIG9m","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"aXMgbm90IGEgdmFsaWQga2V5IGxlbmd0aA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"aXMgbm90IGEgdmFsaWQgbnVtYmVyIG9mIHJvdW5kcw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"SXNEZWJ1Z2dlclByZXNlbnQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"SXNQcm9jZXNzb3JGZWF0dXJlUHJlc2VudA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"aXNxbHBsdXNzdmMuZXhl","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"SXNWYWxpZENvZGVQYWdl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"SXNWYWxpZExvY2FsZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"SXNWYWxpZExvY2FsZU5hbWU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"SXNXb3c2NFByb2Nlc3M=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"aXRhbGlhbi1zd2lzcw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"$4f","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"SXRlcmF0ZWRIYXNoQmFzZTogaW5wdXQgZGF0YSBleGNlZWRzIG1heGltdW0gYWxsb3dlZCBieSBoYXNoIGZ1bmN0aW9u","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"SXgiQGBBaEI/cUB0J31rPGhgfj1VQXgubEZgUSlSXzMlaVhrUVg2QElUJUxBQU5MV0dMeUlucTtrYWY2TUxjSHVIdid6NzhCOUc8LDdDdEpfJ1B6dj1vWGJdYVEnMEoqOyI2LnJNbF83KXctejIyMGY5YTlmLWE5YTYtNDFiMi04ZGJlLTZlZTBiMDViOGEzMg==","type":"Ansi","source":"File String Dumps","process":null,"filename":"tr.json.x2anylock","compromised":null,"detection_total":null,"total":null},{"value":"aXolMGclWXtBdzApa1tyPScxM1x9Q254TURcVWFVTCprX1QnWG93fCJyK3BIbSMucCFLT1NEQCUkNmgyXG50PGo4KkQyMjBmOWE5Zi1hOWE2LTQxYjItOGRiZS02ZWUwYjA1YjhhMzI=","type":"Ansi","source":"File String Dumps","process":null,"filename":"Readme.md.x2anylock","compromised":null,"detection_total":null,"total":null},{"value":"SiNKOUpBSkVKV0pdSmtKfUo=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"aitqN2o9aktqZ2ppanVqe2o=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"SkFrenE3TGNnbm1AQzIyMGY5YTlmLWE5YTYtNDFiMi04ZGJlLTZlZTBiMDViOGEzMg==","type":"Ansi","source":"File String Dumps","process":null,"filename":"_Set.js.x2anylock","compromised":null,"detection_total":null,"total":null},{"value":"amMyX3E8aEBOcTleJSQrNWk1TS54a1gwNmNaNHYvKGsiN0Fna0pgZk8/eTleWHFXOCYrPG5OXCwtLiI8QzYycFNcI2E3anokd3RlX0UiZD92XGRaYHhPRy04P35TaWJTQSxhOCJ9PmJPemQhYF5fPHcvJG1xcVooe0lsPzIyMGY5YTlmLWE5YTYtNDFiMi04ZGJlLTZlZTBiMDViOGEzMg==","type":"Ansi","source":"File String Dumps","process":null,"filename":"bn.js.x2anylock","compromised":null,"detection_total":null,"total":null},{"value":"ampPLmp5c2svRklSMjIwZjlhOWYtYTlhNi00MWIyLThkYmUtNmVlMGIwNWI4YTMy","type":"Ansi","source":"File String Dumps","process":null,"filename":"_asciiWords.js.x2anylock","compromised":null,"detection_total":null,"total":null},{"value":"ak1qIy00YFJpKUxSOTlWc1AjfS8jZ1xFPC1TWVJLOldbZ35OQHgzPjoxQWtNOmF1XzxFIzsyMjBmOWE5Zi1hOWE2LTQxYjItOGRiZS02ZWUwYjA1YjhhMzI=","type":"Ansi","source":"File String Dumps","process":null,"filename":"package.json.x2anylock","compromised":null,"detection_total":null,"total":null},{"value":"ayNrJ2stazlrQWtXa1lrX2t1aw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"SyVLMUs7S0NLSUtZS2VLbUt3Sw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"SzF6XDhlTFopW3RPIFB6YXtGL1RKdlJMVGBldzg4fEsnZXxINGF0UChvfGgjITxbVFx5SFVdOm1vOSR4YCZRUFg6IEdoMDpXMWJkWiA8Q1Zsdm5PbVE4WGpjfHEnVXJ3TSJpQEU6SlMmQCUhazkjSC5KfnB8YHdXbE4kTkpKLXs6cTtbK0t5YkFUQE42J3lXekNrYSZ0U05jSVQ1KkZQZyAkZFR6N29DTSZ4MDx4OFQ+XikoPUwiJHMhIjt5QE5yOGR5REZyVSdEbGlZI0d9WUB1WnEwYWRlYSFKWiBafF9OZkdyYjFeWExLI2VIMSRraTtGfkMzST9Rd0VldyhqeFtKQUsmX01BV1tpemY3biFJXlFYXmBmbDV8akkjJ0ZQcn0oIUY+QXFMUkM5aFRKV1BEaG46NT11OSIuVDI2PVZ0YFk+OFV9KXBlM3c2aWBJbSJLeTIyMGY5YTlmLWE5YTYtNDFiMi04ZGJlLTZlZTBiMDViOGEzMg==","type":"Ansi","source":"File String Dumps","process":null,"filename":"index.js.x2anylock","compromised":null,"detection_total":null,"total":null},{"value":"azdoVk4sJkEvcWpDXncpNVtmLH4wLkJwXFVINGN9IG9IPSw2Ojg1YWUxIEU6OiY2SCo7KGsqV3M9Tip5didQeF5CM2xnaSJBPFoyY1lZa0FbbGgwYlRSUyVSNTB+VVxFOi5PQUp5I3ZqJTspUiFoN0ZTaV47STlMZTdUPzw4fSpZdCJEKVRJXlwrVF0sYGY+cjRYSSUwZ3U3M0M9bkh4Wmk5eHxOZT1RJFdrVi8gfGNiSTtoai1cYWYnSUhiNklHZmJNOUt+SDQhcyl9Vkh1Z3MpbklkInFVMHUxUi8mRXsqSFE2dyosaFFKOExxQyJ2Ii9USCAsdGNecyolbSZlL3osSFVbPjwudjFndCorSWB6bC9iQjEhM1FrN0xTdyJ1PlxSezZmW30zMjIwZjlhOWYtYTlhNi00MWIyLThkYmUtNmVlMGIwNWI4YTMy","type":"Ansi","source":"File String Dumps","process":null,"filename":"eventemitter2.d.ts.x2anylock","compromised":null,"detection_total":null,"total":null},{"value":"a2VybmVsMzIuZGxs","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"S0VSTkVMMzIuZGxs","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"a2VybmVsYmFzZQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"TCFMLUwzTEtMVUxXTGFMZ0xzTHlM","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"TCRIX15dWzM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"bClsK2wxbDVsVWxZbFtsX2xlbGdsc2x3bH1s","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"TGFuZ3VhZ2VMaXN0","type":"Ansi","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TGF1bmNoUGVybWlzc2lvbg==","type":"Ansi","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TENfQ09MTEFURQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"TENfTU9ORVRBUlk=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"TENfTlVNRVJJQw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"TENJRFRvTG9jYWxlTmFtZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"TENNYXBTdHJpbmdFeA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"TENNYXBTdHJpbmdX","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"bERFTXY7LSFBXUs1Qnt9TDxBdTo4XT59QWhvWCoqJDJCNXFSdSE7XV8hUVo0LHJUV3d3L0BIXjxcLSFsQWB4Tms1SFhfVCkiYXlEWGtZX209MSNpU0NeakNhajE0YDJrWGNWeDBcOFRjZUNraSJ7Uk8zVmBKJypyXVZlWz84SC4mWkEpY1JZJUFVbV88SisheEJBOTlrQ0AkY3NJZiohakxPbkx1JjZkIyYyQytJOC5zLV5AUidhblgnJlQ4K1EwKGNxc3RlSWwuR31tNmpVMGZKNjxKb2tALDZCO2MvW189am09a3dOaEcmNTIyMGY5YTlmLWE5YTYtNDFiMi04ZGJlLTZlZTBiMDViOGEzMg==","type":"Ansi","source":"File String Dumps","process":null,"filename":"node.js.x2anylock","compromised":null,"detection_total":null,"total":null},{"value":"TGVhdmVDcml0aWNhbFNlY3Rpb24=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"TGVnYWN5QXV0aGVudGljYXRpb25MZXZlbA==","type":"Ansi","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TGVnYWN5SW1wZXJzb25hdGlvbkxldmVs","type":"Ansi","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TE89YS1SOEJ2WU9zNThKaHZyT3hRXV8+Jyx3fDhQLUlOQEJKbHJLcl5LcGV1NE9aSjg/NDEoVSopXEU4SVF2SDBONWdxXkA0XVNMQjVRYGM9VmQyMjBmOWE5Zi1hOWE2LTQxYjItOGRiZS02ZWUwYjA1YjhhMzI=","type":"Ansi","source":"File String Dumps","process":null,"filename":"license.x2anylock","compromised":null,"detection_total":null,"total":null},{"value":"TG9hZEFwcEluaXRfRExMcw==","type":"Ansi","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TG9hZExpYnJhcnlB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"TG9hZExpYnJhcnlFeFc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"TG9hZFVzZXJTZXR0aW5ncw==","type":"Ansi","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TG9jYWwgQXBwRGF0YQ==","type":"Ansi","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TG9jYWxlTmFtZVRvTENJRA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"TG9jYWxpemVkTmFtZQ==","type":"Ansi","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TG9jYWxpemVkU3RyaW5n","type":"Ansi","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TG9jYWxSZWRpcmVjdE9ubHk=","type":"Ansi","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TG9jYWxTZXJ2aWNl","type":"Ansi","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TG9uZ1BhdGhzRW5hYmxlZA==","type":"Ansi","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"bHNhcG9saWN5bG9va3Vw","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"bHN0cmNtcGlX","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"bHN0cmNtcFc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"bHN0cmxlbkE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"bHN0cmxlblc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"THd+djFYXE4mS0Z4ZShCLkomJVQ2SyRgTyt1NmB0SzFoMDN6TidhZnx9LXBIPHYvMDY8UzYueilkbHdFbjB7Z2QoNzJeSXg/YHtBNVFnP2ZuJiBzLVplVywpKCosbn04dXlxVixbX1B0NSRPL21IRDR2UFZcOGVAVk57X1IifVxQTzNUIilPZFZpSjFpaHVYcFdtKzRqfXdhLV1wMjIwZjlhOWYtYTlhNi00MWIyLThkYmUtNmVlMGIwNWI4YTMy","type":"Ansi","source":"File String Dumps","process":null,"filename":"fclone.js.x2anylock","compromised":null,"detection_total":null,"total":null},{"value":"bSVtJ20rbTFtOW0/bU9tXW1hbXNte20=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"TSdNKU0vTTNNQU1RTVlNZU1rTQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"TSxqIl5RUlJSUlI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"TWFjaGluZVByZWZlcnJlZFVJTGFuZ3VhZ2Vz","type":"Ansi","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWF4Q2FwYWNpdHk=","type":"Ansi","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWF4aW11bUFsbG93ZWRBbGxvY2F0aW9uU2l6ZQ==","type":"Ansi","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWF4U3hTSGFzaENvdW50","type":"Ansi","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TURNRW5hYmxlZA==","type":"Ansi","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"bWVzc2FnZSBzaXpl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"TUdPVEZsYWdz","type":"Ansi","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TWljcm9zb2Z0IFByaW1pdGl2ZSBQcm92aWRlcg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"TWlKQ3YySiEhQHFcfTIyMGY5YTlmLWE5YTYtNDFiMi04ZGJlLTZlZTBiMDViOGEzMg==","type":"Ansi","source":"File String Dumps","process":null,"filename":"lte.js.x2anylock","compromised":null,"detection_total":null,"total":null},{"value":"bWlua2VybmVsXGNydHNcdWNydFxpbmNcY29yZWNydF9pbnRlcm5hbF9zdHJ0b3guaA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"TW92ZUZpbGVFeFc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"TW92ZUZpbGVX","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"TW96aWxsYSBGaXJlZm94","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"bXNhY2Nlc3MuZXhl","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"bXNjb3JlZS5kbGw=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"bXNwdWIuZXhl","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"TXVsdGlCeXRlVG9XaWRlQ2hhcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"TXkgUGljdHVyZXM=","type":"Ansi","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TXkgVmlkZW8=","type":"Ansi","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"bXlkZXNrdG9wcW9zLmV4ZQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"bXlkZXNrdG9wc2VydmljZS5leGU=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"biluM247bkVudW53bntu","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"TitONU43Tj1OT05TTl9OZ055Tg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"TmFtZVZhbHVlUGFpcnM6IHR5cGUgbWlzbWF0Y2ggZm9yICc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"TkFOKFNOQU4p","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"bmFuKHNuYW4p","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"bmNhY25fbnA6W1xcUElQRVxcbHNhcnBjXQ==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"bmNhY25fbnA6W1xcUElQRVxcc3J2c3ZjLFNlY3VyaXR5PUltcGVyc29uYXRpb24gRHluYW1pYyBGYWxzZV0=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"bmNhbHJwYzpbZXZlbnRsb2dd","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"bmNhbHJwYzpbbHNhcG9saWN5bG9va3VwXQ==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"bmNhbHJwYzpbbnRzdmNzXQ==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TkVUQVBJMzIuZGxs","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"TmV0QXBpQnVmZmVyRnJlZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"TmV0U2hhcmVFbnVt","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"bmV0d29yayBkb3du","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"bmV0d29yayByZXNldA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"bmV0d29yayB1bnJlYWNoYWJsZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"bmV3LXplYWxhbmQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"bm8gYnVmZmVyIHNwYWNl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"bm8gY2hpbGQgcHJvY2Vzcw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"bm8gbG9jayBhdmFpbGFibGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"bm8gbWVzc2FnZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"bm8gbWVzc2FnZSBhdmFpbGFibGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"bm8gcHJvdG9jb2wgb3B0aW9u","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"bm8gc3BhY2Ugb24gZGV2aWNl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"bm8gc3RyZWFtIHJlc291cmNlcw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"bm8gc3VjaCBkZXZpY2U=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"bm8gc3VjaCBkZXZpY2Ugb3IgYWRkcmVzcw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"bm8gc3VjaCBmaWxlIG9yIGRpcmVjdG9yeQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"bm8gc3VjaCBwcm9jZXNz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Tm9Qcm9wZXJ0aWVzTXlDb21wdXRlcg==","type":"Ansi","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Tm9Qcm9wZXJ0aWVzUmVjeWNsZUJpbg==","type":"Ansi","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"bm9yd2VnaWFu","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"bm9yd2VnaWFuLWJva21hbA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"bm9yd2VnaWFuLW55bm9yc2s=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"bm90IGEgZGlyZWN0b3J5","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"bm90IGEgc29ja2V0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"bm90IGEgc3RyZWFt","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"bm90IGNvbm5lY3RlZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"bm90IGVub3VnaCBtZW1vcnk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"bm90IHN1cHBvcnRlZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"bm90ZXBhZC5leGU=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"bnRkbGwuZGxs","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"$50","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"bnRsZHI=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"bnR1c2VyLmRhdA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"bnR1c2VyLmRhdC5sb2c=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"bnR1c2VyLmluaQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"TnVrZU9uRGVsZXRl","type":"Ansi","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"$51","type":"Ansi","source":"File String Dumps","process":null,"filename":"SFPATWT.INF.x2anylock","compromised":null,"detection_total":null,"total":null},{"value":"TyVPLU8/T0lPY09nT21PdU97Tw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"by9vPW9Nb1NvYW9lb3lvfW8=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Tz00X31nTDo=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"b2NhdXRvdXBkcy5leGU=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"b2NvbW0uZXhl","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"b2Nzc2QuZXhl","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"b2xlMzIuZGxs","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"T0xFRDMwOTI1Q0VDQUZEQjNBM0UxRTZENDU2OUIzMg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"b25lbm90ZS5leGU=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"T3BlblByb2Nlc3M=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"T3BlblNDTWFuYWdlckE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"T3BlblNlcnZpY2VB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"T3BlcmEgU29mdHdhcmU=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3BlcmF0aW9uIGNhbmNlbGVk","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3BlcmF0aW9uIGZhaWxlZCB3aXRoIGVycm9y","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3BlcmF0aW9uIGluIHByb2dyZXNz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3BlcmF0aW9uIG5vdCBwZXJtaXR0ZWQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3BlcmF0aW9uIG5vdCBzdXBwb3J0ZWQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3BlcmF0aW9uIHdvdWxkIGJsb2Nr","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3BlcmF0b3IgIiI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3BlcmF0b3IgY29fYXdhaXQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3BlcmF0b3I8PT4=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3JhY2xlLmV4ZQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3V0bG9vay5leGU=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"T3V0cHV0QnVmZmVy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"b3duZXIgZGVhZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"T31CQndeQVZ1NSFeRlE7QzBLQ1Y5dmg7eyxFNlFpLzpHdVd0RTRzQ2swQW1EIndScicqMytteGAqPHBZc2NPUlFtOTloblczcWh8UCQqZi0oJCInL01uaWNGLSgvTSdaY1VDMSJ6eGcvSSxCe0k5WV1IZj1RMndcUSlJRnVyVSFBJ2dgTUdvdzIyMGY5YTlmLWE5YTYtNDFiMi04ZGJlLTZlZTBiMDViOGEzMg==","type":"Ansi","source":"File String Dumps","process":null,"filename":"timeRange.js.map.x2anylock","compromised":null,"detection_total":null,"total":null},{"value":"cCdwM3A5cE9wUXBXcGNwdXB5cA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"UClQNVA/UEVQR1BTUHFQd1A=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"UGFnZUFsbG9jYXRvclN5c3RlbUhlYXBJc1ByaXZhdGU=","type":"Ansi","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UGFnZUFsbG9jYXRvclVzZVN5c3RlbUhlYXA=","type":"Ansi","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UGFyZW50Rm9sZGVy","type":"Ansi","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UGFyc2luZ05hbWU=","type":"Ansi","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UERWRlNTZXJ2aWNl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"cGVybWlzc2lvbiBkZW5pZWQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"cG9ydHVndWVzZS1icmF6aWxpYW4=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"cG93ZXJwbnQuZXhl","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"cHIgY2hpbmE=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"cHItY2hpbmE=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"UHJlQ3JlYXRl","type":"Ansi","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJlZmVycmVkU2VydmVyQml0bmVzcw==","type":"Ansi","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJlZmVycmVkVUlMYW5ndWFnZXM=","type":"Ansi","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"cHJpdmF0ZTo=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"UHJpdmF0ZUV4cG9uZW50","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"UHJvY2VzczMyRmlyc3RX","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"UHJvY2VzczMyTmV4dFc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"UHJvY2Vzc01pdGlnYXRpb25Qb2xpY3k=","type":"Ansi","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJvZmlsZUltYWdlUGF0aA==","type":"Ansi","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UHJvZ3JhbSBGaWxlcw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"UHJvZ3JhbSBGaWxlcyAoeDg2KQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"UHJvZ3JhbURhdGE=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"cHJvdGVjdGVkOg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"cHJvdG9jb2wgZXJyb3I=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"cHJvdG9jb2wgbm90IHN1cHBvcnRlZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"UHVibGljRWxlbWVudA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"UHVibGlzaEV4cGFuZGVkUGF0aA==","type":"Ansi","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"cHVlcnRvLXJpY28=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"cSFxM3FRcVlxXXFfcWNxaXE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"USNRJVE1UUdRSVFxUXlR","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"cTArO3coLnslUWhTXSA7Syp+VWp+WEZuP31CI0F0cFloZVJqeS5BKVBKaik3OmYgcj0iIXV5aENYICBMO1Z9Tj1nakckODZ6ViwmUiRiJHpOcmtxPkJXbCYuUC1GcyloYFkmQ0wiNExNTlFTdjdrbUJKPi9LPWctaSNgZXhrTko8K3ZaOTBESH05Y3l6e1IhVDBwTy91R2d8P1UrSjEwMWMpZzY4dXcyaj4vT1wyMjBmOWE5Zi1hOWE2LTQxYjItOGRiZS02ZWUwYjA1YjhhMzI=","type":"Ansi","source":"File String Dumps","process":null,"filename":"amd64_microsoft-windows-mccs-syncres.resources_31bf3856ad364e35_10.0.17134.1_gd-gb_4897be7c0d6eef46.manifest.x2anylock","compromised":null,"detection_total":null,"total":null},{"value":"cVtrbjZQUHBbL09oT2knallmKENpWzMyMjBmOWE5Zi1hOWE2LTQxYjItOGRiZS02ZWUwYjA1YjhhMzI=","type":"Ansi","source":"File String Dumps","process":null,"filename":"chop.js.x2anylock","compromised":null,"detection_total":null,"total":null},{"value":"UUJDRk1vbml0b3JTZXJ2aWNl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"UUJGQ1NlcnZpY2U=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"UUJJRFBTZXJ2aWNl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"cUdUIG85didYZVlhQyAgfTh8V05hJDErS1xgfXM1NjszWkgpL31XWF42SixuaWdxbnVFQko9dGt+PzIyMGY5YTlmLWE5YTYtNDFiMi04ZGJlLTZlZTBiMDViOGEzMg==","type":"Ansi","source":"File String Dumps","process":null,"filename":"_baseMatchesProperty.js.x2anylock","compromised":null,"detection_total":null,"total":null},{"value":"UXVlcnlQZXJmb3JtYW5jZUNvdW50ZXI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"UXVlcnlQZXJmb3JtYW5jZUZyZXF1ZW5jeQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"UXVlcnlTZXJ2aWNlU3RhdHVzRXg=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"ciVyL3I7ckNyVXJncnFyd3I=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"UidSQ1JFUktSYVJtUnNS","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"UmFpc2VEZWZhdWx0QXV0aG5MZXZlbA==","type":"Ansi","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UmFpc2VFeGNlcHRpb24=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"UmFuZG9tTnVtYmVyR2VuZXJhdG9yOiBJbmNvcnBvcmF0ZUVudHJvcHkgbm90IGltcGxlbWVudGVk","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"cmVhZCBvbmx5IGZpbGUgc3lzdGVt","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"UmVhZEZpbGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"UmVnRmlsZXMwMDAw","type":"Ansi","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UmVnRmlsZXMwMDAx","type":"Ansi","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UmVnRmlsZXNIYXNo","type":"Ansi","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UmVnUHJvY3MwMDAw","type":"Ansi","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UmVnU3ZjczAwMDA=","type":"Ansi","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UmVsYXRpdmVQYXRo","type":"Ansi","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UmVsZWFzZVNSV0xvY2tFeGNsdXNpdmU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"UmVtb3RlU2VydmVyTmFtZQ==","type":"Ansi","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"cmVwbGFjZXRoaXNwYXNzd29yZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"cmVwbGFjZXRoaXN3aGl0ZWhvc3Q=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"cmVzb3VyY2UgZGVhZGxvY2sgd291bGQgb2NjdXI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"cmVzb3VyY2UgdW5hdmFpbGFibGUgdHJ5IGFnYWlu","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"UmVzb3VyY2VQb2xpY2llcw==","type":"Ansi","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"cmVzdHJpY3Qo","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"cmVzdWx0IG91dCBvZiByYW5nZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Um1FbmRTZXNzaW9u","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Um1HZXRMaXN0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Um1SZWdpc3RlclJlc291cmNlcw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Um1TdGFydFNlc3Npb24=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"ck1aIjROKndZVSlbeGQ7e3RvR1xyOj45Q3AicEMsJ1tsIzwqRlomWyR4d1p9OmQ5eisoNVVacjBpakEna18xTGVWVDBCSyNYXXNQWUclSl1tJ0xJbyE9dFFEUVRAOktULVZfI2hpMDMvRy9+TktDe2JhIEdwPHt+QDlGYT98JzFXSzIkc0NfaEFNPT8vM0ZbQ2J6N18yMjBmOWE5Zi1hOWE2LTQxYjItOGRiZS02ZWUwYjA1YjhhMzI=","type":"Ansi","source":"File String Dumps","process":null,"filename":"ga.js.x2anylock","compromised":null,"detection_total":null,"total":null},{"value":"cm87R0t5LGY7VyF1IT5+ZVBST0xzeih8UlJYMlNPeFA6MjIwZjlhOWYtYTlhNi00MWIyLThkYmUtNmVlMGIwNWI4YTMy","type":"Ansi","source":"File String Dumps","process":null,"filename":"amd64_microsoft-windows-comdlg32.resources_31bf3856ad364e35_10.0.17134.1_fr-fr_72f98d75cc1156cd.manifest.x2anylock","compromised":null,"detection_total":null,"total":null},{"value":"Um9Jbml0aWFsaXpl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Uk9URmxhZ3M=","type":"Ansi","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Um91bmRVcFRvTXVsdGlwbGVPZjogaW50ZWdlciBvdmVyZmxvdw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Um9VbmluaXRpYWxpemU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"UnBjQ2FjaGVUaW1lb3V0","type":"Ansi","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UnN0cnRNZ3IuRExM","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"UnRsR2V0VmVyc2lvbg==","type":"Ansi","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"UnRsVW53aW5k","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"$52","type":"Ansi","source":"File String Dumps","process":null,"filename":"cdosys.dll.mui.x2anylock","compromised":null,"detection_total":null,"total":null},{"value":"UyNTQVNFU0dTS1NdU2NT","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"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","type":"Ansi","source":"File String Dumps","process":null,"filename":"web-outgoing.js.x2anylock","compromised":null,"detection_total":null,"total":null},{"value":"U2FmZURsbFNlYXJjaE1vZGU=","type":"Ansi","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2VjcmV0S2V5","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"U2VjdXJpdHk=","type":"Ansi","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2VjdXJpdHk9SW1wZXJzb25hdGlvbiBEeW5hbWljIEZhbHNl","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2VwdGVtYmVy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"U2VydmljZXNBY3RpdmU=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2Vzc2lvbkhhc2g=","type":"Ansi","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2V0RW5kT2ZGaWxl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"U2V0RW52aXJvbm1lbnRWYXJpYWJsZVc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"U2V0RmlsZUF0dHJpYnV0ZXNX","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"U2V0RmlsZUluZm9ybWF0aW9uQnlIYW5kbGU=","type":"Ansi","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2V0RmlsZVBvaW50ZXJFeA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"U2V0TGFzdEVycm9y","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"U2V0UHJvY2Vzc1NodXRkb3duUGFyYW1ldGVycw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"U2V0U3RkSGFuZGxl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"U2V0VGhyZWFkcG9vbFRpbWVy","type":"Ansi","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2V0VGhyZWFkcG9vbFdhaXQ=","type":"Ansi","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2V0VW5oYW5kbGVkRXhjZXB0aW9uRmlsdGVy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"U2V0Vm9sdW1lTW91bnRQb2ludFc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"U0hFTEwzMi5kbGw=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"U0hFbXB0eVJlY3ljbGVCaW5X","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"U2hvd0RlYnVnSW5mbw==","type":"Ansi","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2hvd1dpbmRvdw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"U2xlZXA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"U2xlZXBDb25kaXRpb25WYXJpYWJsZUNT","type":"Ansi","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U2xlZXBDb25kaXRpb25WYXJpYWJsZVNSVw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"c29waG9z","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"c291dGggYWZyaWNh","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"c291dGgga29yZWE=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"c291dGgtYWZyaWNh","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"c291dGgta29yZWE=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"c3BhbmlzaC1hcmdlbnRpbmE=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"c3BhbmlzaC1ib2xpdmlh","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"c3BhbmlzaC1jaGlsZQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"c3BhbmlzaC1jb2xvbWJpYQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"c3BhbmlzaC1jb3N0YSByaWNh","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"c3BhbmlzaC1kb21pbmljYW4gcmVwdWJsaWM=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"c3BhbmlzaC1lY3VhZG9y","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"c3BhbmlzaC1lbCBzYWx2YWRvcg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"c3BhbmlzaC1ndWF0ZW1hbGE=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"c3BhbmlzaC1ob25kdXJhcw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"c3BhbmlzaC1tZXhpY2Fu","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"c3BhbmlzaC1tb2Rlcm4=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"c3BhbmlzaC1uaWNhcmFndWE=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"c3BhbmlzaC1wYW5hbWE=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"c3BhbmlzaC1wYXJhZ3VheQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"c3BhbmlzaC1wZXJ1","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"c3BhbmlzaC1wdWVydG8gcmljbw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"c3BhbmlzaC11cnVndWF5","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"c3BhbmlzaC12ZW5lenVlbGE=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"c1BubnQoPSRNIWBNQV1EYyYzb3EoeHwhRVBXeUIqOic5Vk8mKyQnM11sQS4/IDIyMGY5YTlmLWE5YTYtNDFiMi04ZGJlLTZlZTBiMDViOGEzMg==","type":"Ansi","source":"File String Dumps","process":null,"filename":"404-13.htm.x2anylock","compromised":null,"detection_total":null,"total":null},{"value":"c3FiY29yZXNlcnZpY2UuZXhl","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"c3ItQkEtQ3lybA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"c3ItYmEtY3lybA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"c3ItQkEtTGF0bg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"c3ItYmEtbGF0bg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"c3ItU1AtQ3lybA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"c3Itc3AtY3lybA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"c3ItU1AtTGF0bg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"c3Itc3AtbGF0bg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"U1JQVHJ1c3RMZXZlbA==","type":"Ansi","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"c3MhcytzPXNXc1tzYXM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"c3RhdGUgbm90IHJlY292ZXJhYmxl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"c3RjX3Jhd19hZ2VudA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"c3RkOjpudWxscHRyX3Q=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"c3RlYW0uZXhl","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"c3RyZWFtIHRpbWVvdXQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"U3RyZWFtUmVzb3VyY2U=","type":"Ansi","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"U3RyZWFtUmVzb3VyY2VUeXBl","type":"Ansi","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"c3RyaW5nIHRvbyBsb25n","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"U3VibWl0VGhyZWFkcG9vbFdvcms=","type":"Ansi","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"c3dlZGlzaC1maW5sYW5k","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"c3luY3RpbWUuZXhl","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"U3lzdGVtVGltZVRvRmlsZVRpbWU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"c3p9NjJDdGlcNDBwK3RxV2lXVDFXfmxJPGUpNmheI2htbDFJekBQdFVGdzlmfjskPT50cEJjUjc6dHkxZ1lvJUp4J31PdmlSRm5haDZvci1mJCw5MllMLz9we2Fccj1qUzIyMGY5YTlmLWE5YTYtNDFiMi04ZGJlLTZlZTBiMDViOGEzMg==","type":"Ansi","source":"File String Dumps","process":null,"filename":"pt_BR.json.x2anylock","compromised":null,"detection_total":null,"total":null},{"value":"U3xmKF1zKSYpeElhWX17fDYtSXFoMSBAW0J3OjdpPFtcLCcqMWNfZToxZmlkLW4sJ3NMIUo6MHpUI1RwYGk1LS1vamQ7O2ZwJFNaXWRbSitJTlpcLzduI1k9ck9BZXxcWj48cCNVOjZ8JF9acGw0OnpsOilKczpoZTt5anMyXENwUDM+YWF0RFtGYkBEI3MnQWV7aS9SPmREUkVuRVtCWkBBPVdQUyR0YlpKMTBVVHs3YntJMjIwZjlhOWYtYTlhNi00MWIyLThkYmUtNmVlMGIwNWI4YTMy","type":"Ansi","source":"File String Dumps","process":null,"filename":"bg.js.x2anylock","compromised":null,"detection_total":null,"total":null},{"value":"dC10OXQ/dEF0XXRrdHt0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"VDVUN1Q7VEFUSVRTVFVUX1RhVGtUbVRxVA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"dGJpcmRjb25maWcuZXhl","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"dEM5N3U/ajQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"dGVtcGxhdGUtcGFyYW1ldGVyLQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"VGVybWluYXRlUHJvY2Vzcw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"dGV4dCBmaWxlIGJ1c3k=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"dGg8QHRbPFp0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"dGhlYmF0LmV4ZQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"VGhyZWFkaW5nTW9kZWw=","type":"Ansi","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"dGh1bWJzLmRi","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"dGh1bmRlcmJpcmQuZXhl","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"VGh1cnNkYXk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"dEk5N3VFakQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"dGltZWQgb3V0","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"VGltZXI6IFF1ZXJ5UGVyZm9ybWFuY2VDb3VudGVyIGZhaWxlZCB3aXRoIGVycm9y","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"VGltZXI6IFF1ZXJ5UGVyZm9ybWFuY2VGcmVxdWVuY3kgZmFpbGVkIHdpdGggZXJyb3I=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"VGxzQWxsb2M=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"VGxzRnJlZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"VGxzR2V0VmFsdWU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"VGxzU2V0VmFsdWU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"dG9vIG1hbnkgZmlsZXMgb3Blbg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"dG9vIG1hbnkgZmlsZXMgb3BlbiBpbiBzeXN0ZW0=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"dG9vIG1hbnkgbGlua3M=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"dG9vIG1hbnkgc3ltYm9saWMgbGluayBsZXZlbHM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"VG9yIEJyb3dzZXI=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"VHJhbnNwYXJlbnRFbmFibGVk","type":"Ansi","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"dHJpbmlkYWQgJiB0b2JhZ28=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"VHJ5QWNxdWlyZVNSV0xvY2tFeGNsdXNpdmU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"VHlwZSBEZXNjcmlwdG9yJw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"dSV1O3U9dU11X3VrdXd1","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"VSdVK1U5VT1VT1VRVVtVY1VnVW9VeVU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"VTNAanQkVjowfTV3Z3taJHV1fWBbUktjMjIwZjlhOWYtYTlhNi00MWIyLThkYmUtNmVlMGIwNWI4YTMy","type":"Ansi","source":"File String Dumps","process":null,"filename":"template.js.x2anylock","compromised":null,"detection_total":null,"total":null},{"value":"dTU5M30xOEc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"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","type":"Ansi","source":"File String Dumps","process":null,"filename":"pack-codec.js.x2anylock","compromised":null,"detection_total":null,"total":null},{"value":"dUw5M31IOEc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"VW5oYW5kbGVkRXhjZXB0aW9uRmlsdGVy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"dW5pdGVkLWtpbmdkb20=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"dW5pdGVkLXN0YXRlcw==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"dW5rbm93biBlcnJvcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"VW5rbm93biBleGNlcHRpb24=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"VVNFUjMyLmRsbA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"dXotVVotQ3lybA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"dXotdXotY3lybA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"dXotVVotTGF0bg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"dXotdXotbGF0bg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"diF2LXYzdj12P3ZVdmN2aXZvdnN2","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"ViNWL1YzVjlWP1ZLVk1WXVZfVmtWcVZ1Vg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"dmFsdWUgdG9vIGxhcmdl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"VmFsdWVOYW1lcw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"dmVjdG9yIHRvbyBsb25n","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"VmVlYW1EZXBsb3ltZW50U2VydmljZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"VmVlYW1ORlNTdmM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"VmVlYW1UcmFuc3BvcnRTdmM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"VmlydHVhbFByb3RlY3Q=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"dmlzaW8uZXhl","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Vms0d3dLMUw6RmJlOTIyMGY5YTlmLWE5YTYtNDFiMi04ZGJlLTZlZTBiMDViOGEzMg==","type":"Ansi","source":"File String Dumps","process":null,"filename":"flattenDeep.js.x2anylock","compromised":null,"detection_total":null,"total":null},{"value":"VlNTQVBJLkRMTA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"dyF3LXc1d0F3S3dZd113X3dxdw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"VyNXR1dNV19XYVdtV3dXfVc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"VyUwUXY0QVY=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"V2FpdEZvclNpbmdsZU9iamVjdA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"V2FpdEZvclNpbmdsZU9iamVjdEV4","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"V2FpdEZvclRocmVhZHBvb2xUaW1lckNhbGxiYWNrcw==","type":"Ansi","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V2FpdFRvS2lsbFNlcnZpY2VUaW1lb3V0","type":"Ansi","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"V2FrZUFsbENvbmRpdGlvblZhcmlhYmxl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"V2FrZUNvbmRpdGlvblZhcmlhYmxl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"$53","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"$54","type":"Ansi","source":"File String Dumps","process":null,"filename":"How to decrypt my data.txt","compromised":null,"detection_total":null,"total":null},{"value":"V2VkbmVzZGF5","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"V2lkZUNoYXJUb011bHRpQnl0ZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"V2luZG93cy5vbGQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"d2lud29yZC5leGU=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"d29yZHBhZC5leGU=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"V293NjREaXNhYmxlV293NjRGc1JlZGlyZWN0aW9u","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"V293NjRSZXZlcnRXb3c2NEZzUmVkaXJlY3Rpb24=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"V3JpdGVDb25zb2xlVw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"V3JpdGVGaWxl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"d3JvbmcgcHJvdG9jb2wgdHlwZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"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","type":"Ansi","source":"File String Dumps","process":null,"filename":"README.md.x2anylock","compromised":null,"detection_total":null,"total":null},{"value":"WCMiRUc7bi9bamc2VyB4fVd3eSQ6fUJtR1NSQW4sX2MkIzhsUkhjcEI6djxLWV9nXk52WiRbbS48aDBnYyN6XFdINTJ4VV5hIXRJJms9fH0vdSA6MD98YCpnanJJKltOfDJpNl9xcChGfTYnfF5FZSlWVn5McF0kWisqUzIyMGY5YTlmLWE5YTYtNDFiMi04ZGJlLTZlZTBiMDViOGEzMg==","type":"Ansi","source":"File String Dumps","process":null,"filename":"compare.js.x2anylock","compromised":null,"detection_total":null,"total":null},{"value":"eCV4K3g1eD14U3hZeGF4bXh3eHl4","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"WCdYK1gtWFVYW1hdWG1Yb1hzWHtY","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"eDxKaCJJJkpJVUlrfVtAYUZMMUEwS09cMn5XVz0zMVFocz54dSUofjxfMikqO314OyV1K0NFKzpobDU8YjtSYF51Y1w/aFx1QTxGZyB9dEhUSlx7UjA9ZUJ6JHVNME9+QiYuV24yRVJkXX5ifkxYOCwufnBRWFEqICF7SFAxXSl9SCk5VSAsYnd3IGk1e0F8Vn1FUW5nNih4MVE6Vn1oa0loJVF+V0JjQCBFZkdBVHRjXE92NkErcH1ybHpYR2lUNUJVQTwpM1dpSyhraiVbYD5OLURPWDJcOSRjUn1CZldISmxGYHh1dEUgXj9yeylOK2I9MjwyMjBmOWE5Zi1hOWE2LTQxYjItOGRiZS02ZWUwYjA1YjhhMzI=","type":"Ansi","source":"File String Dumps","process":null,"filename":"CHANGELOG.md.x2anylock","compromised":null,"detection_total":null,"total":null},{"value":"eGZzc3ZjY29uLmV4ZQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"WHp4bj5PTHdCMi4rOTQuQzpRQ2I8NHkiMH1oZWggaGFpW0wqMjIwZjlhOWYtYTlhNi00MWIyLThkYmUtNmVlMGIwNWI4YTMy","type":"Ansi","source":"File String Dumps","process":null,"filename":"package.json.x2anylock","compromised":null,"detection_total":null,"total":null},{"value":"eHtiPkwoXDZtPk57N1U2JEMkInQzKl9zay0sak1ZTnI7diV+bnddVXYtdFIuazBFbTxzRF5sLS9IMXJoQXQ8ZEtlfHpEfXRxVytpa2tXZG5HSUowZil5digzJFwmcXhzQ0k8bDdmXlA1cS4nUEcxOjV3Rz9FeDFsVlp1QU1NXldfRHZSW3FCRGozdldvMl1McnoxaTY/RyZLZztQSDlIOSp5NlVFUWZPPSBrXCBMOytQVz5TW21ZZTAyMjBmOWE5Zi1hOWE2LTQxYjItOGRiZS02ZWUwYjA1YjhhMzI=","type":"Ansi","source":"File String Dumps","process":null,"filename":"client.d.ts.x2anylock","compromised":null,"detection_total":null,"total":null},{"value":"WSFZRVlLWU1ZV1ldWXVZe1k=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"eSV5K3k5eT95S3lXeV15Z3lpeXN5","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"eSxlNSNrJzNxfX1pWy55RGAzJiohdEB3eU1nImhPNz1AM3tPNFFNRzxmXl8/fFxvaV5sMjIwZjlhOWYtYTlhNi00MWIyLThkYmUtNmVlMGIwNWI4YTMy","type":"Ansi","source":"File String Dumps","process":null,"filename":"utils.d.ts.x2anylock","compromised":null,"detection_total":null,"total":null},{"value":"WTlDWHU+V2pAaA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"WW9vQmFja3Vw","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"eiN6J3otekt6V3pZel96ZXppen16","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"WilaL1o7Wk1aW1pnWnda","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"emh1ZG9uZ2Zhbmd5dQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"WnJWJTxNW24gXTNFeDpQTGNhcUp7I2JRKC44RjVCYE5ZIUw3bGVpV1tPTmk5QTQyZTMzJGFsU1NuN2UsXzh5dWJGQSZmITB8PVZeSyxtT0RdOkZvWT1RSGZ9YCBfODIyMGY5YTlmLWE5YTYtNDFiMi04ZGJlLTZlZTBiMDViOGEzMg==","type":"Ansi","source":"File String Dumps","process":null,"filename":"pa-in.js.x2anylock","compromised":null,"detection_total":null,"total":null},{"value":"WnYhTEEwPjBnSCp+SWQvX24sXU91ZiAwNiNxMlI1cVJxPGMjLVBqKyQrQz1UajRLbEBQSWdDJE5bZzlrIHczc2RGJCJuaWQwakw4Qy9cS0hFO2BAamJwMCFpMWJVbDh+cztqdU5gSVYhMk0qPGw5QEEjfFh1eisvRGBhYkdqRSQnMXdrcH5IIH5WXyh+OjdqWFs+SlVUVjo2VDZcMjIwZjlhOWYtYTlhNi00MWIyLThkYmUtNmVlMGIwNWI4YTMy","type":"Ansi","source":"File String Dumps","process":null,"filename":"tzm-latn.js.x2anylock","compromised":null,"detection_total":null,"total":null},{"value":"engtbzUgWVhCN1hhRWdHUkc0a2YgfTwnPkVyIi5aSCpoeSMrPl8nWmx0UXlCeUwqJDIqaiZvUCIxXWg1IDIyMGY5YTlmLWE5YTYtNDFiMi04ZGJlLTZlZTBiMDViOGEzMg==","type":"Ansi","source":"File String Dumps","process":null,"filename":"package.json.x2anylock","compromised":null,"detection_total":null,"total":null},{"value":"WlkgJyU2VWB7dTJgYjYrTyZSfVdPSGEqKCAiLH5HOUttfD8xOGhiKW4/enJke3lGVUNtLFNLY1Fqd0VMaHBHTXIhLC1QIT41J1k8bTIyMGY5YTlmLWE5YTYtNDFiMi04ZGJlLTZlZTBiMDViOGEzMg==","type":"Ansi","source":"File String Dumps","process":null,"filename":"pm2-init-amazon.sh.x2anylock","compromised":null,"detection_total":null,"total":null},{"value":"enlcTXJ7QERZPndzO19ZXT8wblpLXDd+dWYqJTBdIVhmNHB1QSoiOEtsLW9kTl5CSTgyaExJLXNITFIkNXd4JFlrK1Y5TmpsNX0uV0p7SW9GaClsKyEiS1VWQS9td184dS8+XXFWV01ROllGLl1XcFI5JSdBYjFPVChReFtGVDRdfDAvZyNxMUZuTHpmQSAmZDNQNTB0dDNEc215b09kWD1mdEEmSDAwPi9tOFZ6TlczQCRNP1dnPXluIlMpJXJKS1pKSS95YnghfDhxKTcpXVReQitfITsjIlNEODJ+ImUtJS83fFkucSw3OXtlflRaMlJVWnhCM3lgJkcuW2VrclZrYTNPO3wmVH54fTxmVC9ocm1yQUAoNWgsXl9QOjp7d2A+LXtjXn17YSE4Ym8hUl9pYU1qW292PXJpVTZhWzNVMjI4QipvYjsyIS95b3Q/SGcjPXZbIytHfEktZ1c0T2xhIFhkJSQoVzlKRU1hR21ybHJXJiVreVFMZzQ/MiR5M1ouXiRQaWtYTXpMWC9pWWBrZ3srZCp4JDo2aDk4ZE0xRH0qfFY+K3dHJXAwImkoVylbeV93S2dFQjJcUno/NzJ1K00vTk0kcks+bmNYal97eUsvIVAmcitXazh+X21nRC5CazZHY113b3FjUFAwcyNFVn4hNngyMjBmOWE5Zi1hOWE2LTQxYjItOGRiZS02ZWUwYjA1YjhhMzI=","type":"Ansi","source":"File String Dumps","process":null,"filename":"join.js.x2anylock","compromised":null,"detection_total":null,"total":null},{"value":"eyNtYXs9JjM+ZGtWU1htcWE7O1J9ZlJ+JnNRQzZfY00jJmxOe2QnYDlfbUJFaTwqNHU5JnRRPW5fXDc5aWF7WTFhaTN6TFtTRyRMVVlyJkEwJzUrInxvakkxL3VYaygkcUgpUipYWElOZ3c1Pi1kZCxQVFZVa11jb2NhQjNXUytrZnRod24ud0UiIV1EQE47UX13VmtdSkEtWTslb042W2kkfH1tQXEjJ0pZLj9xSmM4aU1eVV1ERWRJalQvM1VIYGZNJS9cNVUyMjBmOWE5Zi1hOWE2LTQxYjItOGRiZS02ZWUwYjA1YjhhMzI=","type":"Ansi","source":"File String Dumps","process":null,"filename":"uk.js.x2anylock","compromised":null,"detection_total":null,"total":null},{"value":"eyt7NXs3ezt7T3tVe197cXt3ew==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"ezFCM0VBNURDLUI1ODctNDc4Ni1CNEVGLUJEMURDMzMyQUVBRX0=","type":"Ansi","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"ezIxMTJBQjBBLUM4NkEtNEZGRS1BMzY4LTBERTk2RTQ3MDEyRX0=","type":"Ansi","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"ezI0RDg5RTI0LTJGMTktNDUzNC05RERFLTZBNjY3MUZCQjhGRX0=","type":"Ansi","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"ezMxQzBERDI1LTk0MzktNEYxMi1CRjQxLTdGRjRFREEzODcyMn0=","type":"Ansi","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"ezMzOTcxOUI1LThDNDctNDg5NC05NEMyLUQ4Rjc3QURENDRBNn0=","type":"Ansi","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"ezQ5MUU5MjJGLTU2NDMtNEFGNC1BN0VCLTRFN0ExMzhEODE3NH0=","type":"Ansi","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"ezUyQTRGMDIxLTdCNzUtNDhBOS05RjZCLTRCODdBMjEwQkM4Rn0=","type":"Ansi","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"ezc2N0U2ODExLTQ5Q0ItNDI3My04N0MyLTIwRjM1NUUxMDg1Qn0=","type":"Ansi","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"ezdCRTE2NjEwLTFGN0YtNDRBQy1CRkYwLTgzRTE1RjJGRkNBMX0=","type":"Ansi","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"ezdEMUQzQTA0LURFQkItNDExNS05NUNGLTJGMjlEQTI5MjBEQX0=","type":"Ansi","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"e0E1MkJCQTQ2LUU5RTEtNDM1Ri1CM0Q5LTI4REFBNjQ4QzBGNn0=","type":"Ansi","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"e0UyNUI1ODEyLUJFODgtNEJEOS05NEIwLTI5MjMzNDc3QjZDM30=","type":"Ansi","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"e3BPRjMyfHkpXSVPTj5LdyY5IGBeeV5vIF8iNzIyMGY5YTlmLWE5YTYtNDFiMi04ZGJlLTZlZTBiMDViOGEzMg==","type":"Ansi","source":"File String Dumps","process":null,"filename":"strLeftBack.js.x2anylock","compromised":null,"detection_total":null,"total":null},{"value":"e3t2enpJd0dbbz9lZCBafEk7UWBVaEBOK1hzI2kqQ1J1Zj5Ab0IgeVE0bW5HPkZrcT5VRDhdbDEvJCBTL1cxOWZfWEMqI1RfSmptS2Y1PCtCP2hHKH59UXZFPDgnbFNuOnciLnVvTm5PLXNXRXpSU29nJFUlTEpwUjpZKGxPM2BURXouUkRvY2M6ZixKWVBjdVtMWCsgSjYvMjIwZjlhOWYtYTlhNi00MWIyLThkYmUtNmVlMGIwNWI4YTMy","type":"Ansi","source":"File String Dumps","process":null,"filename":"wow64_microsoft-windows-m..aphostres.resources_31bf3856ad364e35_10.0.17134.1_fi-fi_02c00a792f1a3e93.manifest.x2anylock","compromised":null,"detection_total":null,"total":null},{"value":"fClQIT9VYTA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"fDF8N3xJfGd8aXxzfA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"fSxRJCInLjQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"fTN9OX07fT99RX1NfVN9WX1jfXV9d30=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"fVEhLCRBQyt8UTxmNT1lakh9c0A1biVESDdlUCxrLWBKcVA9ejIyMGY5YTlmLWE5YTYtNDFiMi04ZGJlLTZlZTBiMDViOGEzMg==","type":"Ansi","source":"File String Dumps","process":null,"filename":"FUNDING.yml.x2anylock","compromised":null,"detection_total":null,"total":null},{"value":"fil+K34vfjV+QX5Dfkd+VX5hfmd+a35xfnN+eX59fg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"w6LCgMKZSFlCUklE","type":"Ansi","source":"Image Processing","process":null,"filename":"screen_2.png","compromised":null,"detection_total":null,"total":null}],"interesting":[{"value":"ITQlNCk0LTQxNDU0OTQ9NEE0RTRJNE00UTRVNFk0XTRhNGU0aTRtNHE0dTR5NH00","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"ITUhQSFJIU8hWSFbIV8hcyF9IQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"IX43Ti9xRSNOLCMtfSNzPmZRWCFJaGNKdCRwSyFAa2BEXWQpKFBcJUI3QDIyMGY5YTlmLWE5YTYtNDFiMi04ZGJlLTZlZTBiMDViOGEzMg==","type":"Ansi","source":"File String Dumps","process":null,"filename":"bower.json.x2anylock","compromised":null,"detection_total":null,"total":null},{"value":"I00zY0N0ZFxtOVRkRW4wJCFjPjd1Zy86QlMkfm9qQWIoRm8sTDA/Wn4yMjBmOWE5Zi1hOWE2LTQxYjItOGRiZS02ZWUwYjA1YjhhMzI=","type":"Ansi","source":"File String Dumps","process":null,"filename":"es.js.x2anylock","compromised":null,"detection_total":null,"total":null},{"value":"JEQvV2EgK1pXRUpgIlhbS2phRVxsaF5qUS0uLTZkfS48RHFCRXNCLFpRRUAkaVxAZmEhemhULm0+JDIyMGY5YTlmLWE5YTYtNDFiMi04ZGJlLTZlZTBiMDViOGEzMg==","type":"Ansi","source":"File String Dumps","process":null,"filename":"mr.js.x2anylock","compromised":null,"detection_total":null,"total":null},{"value":"JFJlY3ljbGUuQmlu","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"JTwycjBmUDRZR3MyM29kXHwyMjBmOWE5Zi1hOWE2LTQxYjItOGRiZS02ZWUwYjA1YjhhMzI=","type":"Ansi","source":"File String Dumps","process":null,"filename":"example.html.x2anylock","compromised":null,"detection_total":null,"total":null},{"value":"JVdJTkRJUiVcU3lzdGVtMzJcY29uaG9zdC5leGU=","type":"Ansi","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"KCEoMSg9KD8oSShRKFsoXShhKGcodSg=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"KCgoKCggICAgICAgICAgICAgICAgICBI","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"KSEpIyk/KUcpXSllKWkpbyl1KQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"KWEuWylzfVAsKj1sfi4yMjBmOWE5Zi1hOWE2LTQxYjItOGRiZS02ZWUwYjA1YjhhMzI=","type":"Ansi","source":"File String Dumps","process":null,"filename":"has.js.x2anylock","compromised":null,"detection_total":null,"total":null},{"value":"LTpBTTphbTpQTTpwbQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"LTstQy1JLU0tYS1lLXEt","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"LiUuLS4zLjcuOS4/LlcuWy5vLnku","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj00fGE1LzRIaiNLVDF9QEVSODpgRDRCbl9AJmZnWWg1TkMieUtQSGBJPDk4NG0jYFYxMjIwZjlhOWYtYTlhNi00MWIyLThkYmUtNmVlMGIwNWI4YTMy","type":"Ansi","source":"File String Dumps","process":null,"filename":"forEach.js.x2anylock","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVT8kQWRkaXRpdmVDaXBoZXJDb25jcmV0ZVBvbGljeUBJJDBCQUAkMDBVQWRkaXRpdmVDaXBoZXJBYnN0cmFjdFBvbGljeUBDcnlwdG9QUEBAQENyeXB0b1BQQEA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVV9DcnRfbmV3X2RlbGV0ZUBzdGRAQA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVUFkZGl0aXZlQ2lwaGVyQWJzdHJhY3RQb2xpY3lAQ3J5cHRvUFBAQA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVWN0eXBlX2Jhc2VAc3RkQEA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVUVDMk5Qb2ludEBDcnlwdG9QUEBA","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVUVDUFBvaW50QENyeXB0b1BQQEA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVUluaXRpYWxpemVJbnRlZ2VyQENyeXB0b1BQQEA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVUlucHV0UmVqZWN0ZWRAPyRJbnB1dFJlamVjdGluZ0BWQnVmZmVyZWRUcmFuc2Zvcm1hdGlvbkBDcnlwdG9QUEBAQENyeXB0b1BQQEA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVW1lc3NhZ2VzX2Jhc2VAc3RkQEA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVW1vbmV5X2Jhc2VAc3RkQEA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVU5vQ2hhbm5lbFN1cHBvcnRAQnVmZmVyZWRUcmFuc2Zvcm1hdGlvbkBDcnlwdG9QUEBA","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVVJpam5kYWVsX0luZm9AQ3J5cHRvUFBAQA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVXRpbWVfYmFzZUBzdGRAQA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kX01wdW5jdEBfV0BzdGRAQA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kX01wdW5jdEBEQHN0ZEBA","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kX01wdW5jdEBHQHN0ZEBA","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kQWJzdHJhY3RQb2xpY3lIb2xkZXJAVUFkZGl0aXZlQ2lwaGVyQWJzdHJhY3RQb2xpY3lAQ3J5cHRvUFBAQFZTeW1tZXRyaWNDaXBoZXJAMkBAQ3J5cHRvUFBAQA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kQWRkaXRpdmVDaXBoZXJUZW1wbGF0ZUBWPyRBYnN0cmFjdFBvbGljeUhvbGRlckBVQWRkaXRpdmVDaXBoZXJBYnN0cmFjdFBvbGljeUBDcnlwdG9QUEBAVlN5bW1ldHJpY0NpcGhlckAyQEBDcnlwdG9QUEBAQENyeXB0b1BQQEA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kQWxnb3JpdGhtSW1wbEBWPyRJdGVyYXRlZEhhc2hASVU/JEVudW1Ub1R5cGVAVzRCeXRlT3JkZXJAQ3J5cHRvUFBAQCQwMEBDcnlwdG9QUEBAJDBFQUBWSGFzaFRyYW5zZm9ybWF0aW9uQDJAQENyeXB0b1BQQEBWU0hBMjU2QDJAQENyeXB0b1BQQEA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kQWxnb3JpdGhtSW1wbEBWPyRTaW1wbGVLZXlpbmdJbnRlcmZhY2VJbXBsQFY/JENvbmNyZXRlUG9saWN5SG9sZGVyQFZDaGFDaGFfUG9saWN5QENyeXB0b1BQQEBWPyRBZGRpdGl2ZUNpcGhlclRlbXBsYXRlQFY/JEFic3RyYWN0UG9saWN5SG9sZGVyQFVBZGRpdGl2ZUNpcGhlckFic3RyYWN0UG9saWN5QENyeXB0b1BQQEBWU3ltbWV0cmljQ2lwaGVyQDJAQENyeXB0b1BQQEBAMkBVQWRkaXRpdmVDaXBoZXJBYnN0cmFjdFBvbGljeUAyQEBDcnlwdG9QUEBAVUNoYUNoYV9JbmZvQDJAQENyeXB0b1BQQEBVQ2hhQ2hhX0luZm9AMkBAQ3J5cHRvUFBAQA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kQWxnb3JpdGhtSW1wbEBWPyRTaW1wbGVLZXlpbmdJbnRlcmZhY2VJbXBsQFY/JFR3b0Jhc2VzQFZCbG9ja0NpcGhlckBDcnlwdG9QUEBAVVJpam5kYWVsX0luZm9AMkBAQ3J5cHRvUFBAQFYxMkBAQ3J5cHRvUFBAQFYxMkBAQ3J5cHRvUFBAQA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kQWxnb3JpdGhtUGFyYW1ldGVyc1RlbXBsYXRlQFZDb25zdEJ5dGVBcnJheVBhcmFtZXRlckBDcnlwdG9QUEBAQENyeXB0b1BQQEA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kQVNOMUNyeXB0b01hdGVyaWFsQFZQcml2YXRlS2V5QENyeXB0b1BQQEBAQ3J5cHRvUFBAQA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kQXV0b1NpZ25hbGluZ0BWPyRJbnB1dFJlamVjdGluZ0BWQnVmZmVyZWRUcmFuc2Zvcm1hdGlvbkBDcnlwdG9QUEBAQENyeXB0b1BQQEBAQ3J5cHRvUFBAQA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kYmFzaWNfc3RyaW5nQERVPyRjaGFyX3RyYWl0c0BEQHN0ZEBAVj8kYWxsb2NhdG9yQERAMkBAc3RkQEA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kQmxvY2tDaXBoZXJGaW5hbEAkMEFAVkVuY0BSaWpuZGFlbEBDcnlwdG9QUEBAQENyeXB0b1BQQEA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kQmxvY2tDaXBoZXJJbXBsQFVSaWpuZGFlbF9JbmZvQENyeXB0b1BQQEBWQmxvY2tDaXBoZXJAMkBAQ3J5cHRvUFBAQA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kQnVmZmVybGVzc0BWQnVmZmVyZWRUcmFuc2Zvcm1hdGlvbkBDcnlwdG9QUEBAQENyeXB0b1BQQEA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kQnVmZmVybGVzc0BWU2lua0BDcnlwdG9QUEBAQENyeXB0b1BQQEA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kQ2xvbmFibGVJbXBsQFY/JEJsb2NrQ2lwaGVyRmluYWxAJDBBQFZFbmNAUmlqbmRhZWxAQ3J5cHRvUFBAQEBDcnlwdG9QUEBAVkVuY0BSaWpuZGFlbEAyQEBDcnlwdG9QUEBA","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kQ2xvbmFibGVJbXBsQFZTSEEyNTZAQ3J5cHRvUFBAQFY/JEFsZ29yaXRobUltcGxAVj8kSXRlcmF0ZWRIYXNoQElVPyRFbnVtVG9UeXBlQFc0Qnl0ZU9yZGVyQENyeXB0b1BQQEAkMDBAQ3J5cHRvUFBAQCQwRUFAVkhhc2hUcmFuc2Zvcm1hdGlvbkAyQEBDcnlwdG9QUEBAVlNIQTI1NkAyQEAyQEBDcnlwdG9QUEBA","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kY29kZWN2dEBfV0RVX01ic3RhdGV0QEBAc3RkQEA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kY29kZWN2dEBERFVfTWJzdGF0ZXRAQEBzdGRAQA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kY29kZWN2dEBHRFVfTWJzdGF0ZXRAQEBzdGRAQA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kY29kZWN2dF91dGY4QF9XJDBCQVBQUFBAJDBBQEBzdGRAQA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kY29sbGF0ZUBfV0BzdGRAQA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kY29sbGF0ZUBEQHN0ZEBA","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kY29sbGF0ZUBHQHN0ZEBA","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kQ29uY3JldGVQb2xpY3lIb2xkZXJAVkNoYUNoYV9Qb2xpY3lAQ3J5cHRvUFBAQFY/JEFkZGl0aXZlQ2lwaGVyVGVtcGxhdGVAVj8kQWJzdHJhY3RQb2xpY3lIb2xkZXJAVUFkZGl0aXZlQ2lwaGVyQWJzdHJhY3RQb2xpY3lAQ3J5cHRvUFBAQFZTeW1tZXRyaWNDaXBoZXJAMkBAQ3J5cHRvUFBAQEAyQFVBZGRpdGl2ZUNpcGhlckFic3RyYWN0UG9saWN5QDJAQENyeXB0b1BQQEA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kY3R5cGVAX1dAc3RkQEA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kY3R5cGVAREBzdGRAQA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kY3R5cGVAR0BzdGRAQA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kRml4ZWRCbG9ja1NpemVAJDBCQUBAQ3J5cHRvUFBAQA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kSW5wdXRSZWplY3RpbmdAVkJ1ZmZlcmVkVHJhbnNmb3JtYXRpb25AQ3J5cHRvUFBAQEBDcnlwdG9QUEBA","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kSXRlcmF0ZWRIYXNoQElVPyRFbnVtVG9UeXBlQFc0Qnl0ZU9yZGVyQENyeXB0b1BQQEAkMDBAQ3J5cHRvUFBAQCQwRUFAVkhhc2hUcmFuc2Zvcm1hdGlvbkAyQEBDcnlwdG9QUEBA","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kSXRlcmF0ZWRIYXNoQmFzZUBJVkhhc2hUcmFuc2Zvcm1hdGlvbkBDcnlwdG9QUEBAQENyeXB0b1BQQEA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kSXRlcmF0ZWRIYXNoV2l0aFN0YXRpY1RyYW5zZm9ybUBJVT8kRW51bVRvVHlwZUBXNEJ5dGVPcmRlckBDcnlwdG9QUEBAJDAwQENyeXB0b1BQQEAkMEVBQCQwQ0FAVlNIQTI1NkAyQCQwQ0FAJDAwQENyeXB0b1BQQEA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kbWVzc2FnZXNAX1dAc3RkQEA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kbWVzc2FnZXNAREBzdGRAQA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kbWVzc2FnZXNAR0BzdGRAQA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kbW9uZXlfZ2V0QF9XVj8kaXN0cmVhbWJ1Zl9pdGVyYXRvckBfV1U/JGNoYXJfdHJhaXRzQF9XQHN0ZEBAQHN0ZEBAQHN0ZEBA","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kbW9uZXlfZ2V0QERWPyRpc3RyZWFtYnVmX2l0ZXJhdG9yQERVPyRjaGFyX3RyYWl0c0BEQHN0ZEBAQHN0ZEBAQHN0ZEBA","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kbW9uZXlfZ2V0QEdWPyRpc3RyZWFtYnVmX2l0ZXJhdG9yQEdVPyRjaGFyX3RyYWl0c0BHQHN0ZEBAQHN0ZEBAQHN0ZEBA","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kbW9uZXlfcHV0QF9XVj8kb3N0cmVhbWJ1Zl9pdGVyYXRvckBfV1U/JGNoYXJfdHJhaXRzQF9XQHN0ZEBAQHN0ZEBAQHN0ZEBA","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kbW9uZXlfcHV0QERWPyRvc3RyZWFtYnVmX2l0ZXJhdG9yQERVPyRjaGFyX3RyYWl0c0BEQHN0ZEBAQHN0ZEBAQHN0ZEBA","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kbW9uZXlfcHV0QEdWPyRvc3RyZWFtYnVmX2l0ZXJhdG9yQEdVPyRjaGFyX3RyYWl0c0BHQHN0ZEBAQHN0ZEBAQHN0ZEBA","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kbW9uZXlwdW5jdEBfVyQwMEBzdGRAQA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kbW9uZXlwdW5jdEBfVyQwQUBAc3RkQEA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kbW9uZXlwdW5jdEBEJDAwQHN0ZEBA","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kbW9uZXlwdW5jdEBEJDBBQEBzdGRAQA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kbW9uZXlwdW5jdEBHJDAwQHN0ZEBA","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kbW9uZXlwdW5jdEBHJDBBQEBzdGRAQA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kbnVtX2dldEBfV1Y/JGlzdHJlYW1idWZfaXRlcmF0b3JAX1dVPyRjaGFyX3RyYWl0c0BfV0BzdGRAQEBzdGRAQEBzdGRAQA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kbnVtX2dldEBEVj8kaXN0cmVhbWJ1Zl9pdGVyYXRvckBEVT8kY2hhcl90cmFpdHNAREBzdGRAQEBzdGRAQEBzdGRAQA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kbnVtX2dldEBHVj8kaXN0cmVhbWJ1Zl9pdGVyYXRvckBHVT8kY2hhcl90cmFpdHNAR0BzdGRAQEBzdGRAQEBzdGRAQA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kbnVtX3B1dEBfV1Y/JG9zdHJlYW1idWZfaXRlcmF0b3JAX1dVPyRjaGFyX3RyYWl0c0BfV0BzdGRAQEBzdGRAQEBzdGRAQA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kbnVtX3B1dEBEVj8kb3N0cmVhbWJ1Zl9pdGVyYXRvckBEVT8kY2hhcl90cmFpdHNAREBzdGRAQEBzdGRAQEBzdGRAQA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kbnVtX3B1dEBHVj8kb3N0cmVhbWJ1Zl9pdGVyYXRvckBHVT8kY2hhcl90cmFpdHNAR0BzdGRAQEBzdGRAQEBzdGRAQA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kbnVtcHVuY3RAX1dAc3RkQEA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kbnVtcHVuY3RAREBzdGRAQA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kbnVtcHVuY3RAR0BzdGRAQA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kU2ltcGxlS2V5aW5nSW50ZXJmYWNlSW1wbEBWPyRDb25jcmV0ZVBvbGljeUhvbGRlckBWQ2hhQ2hhX1BvbGljeUBDcnlwdG9QUEBAVj8kQWRkaXRpdmVDaXBoZXJUZW1wbGF0ZUBWPyRBYnN0cmFjdFBvbGljeUhvbGRlckBVQWRkaXRpdmVDaXBoZXJBYnN0cmFjdFBvbGljeUBDcnlwdG9QUEBAVlN5bW1ldHJpY0NpcGhlckAyQEBDcnlwdG9QUEBAQDJAVUFkZGl0aXZlQ2lwaGVyQWJzdHJhY3RQb2xpY3lAMkBAQ3J5cHRvUFBAQFVDaGFDaGFfSW5mb0AyQEBDcnlwdG9QUEBA","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kU2ltcGxlS2V5aW5nSW50ZXJmYWNlSW1wbEBWPyRUd29CYXNlc0BWQmxvY2tDaXBoZXJAQ3J5cHRvUFBAQFVSaWpuZGFlbF9JbmZvQDJAQENyeXB0b1BQQEBWMTJAQENyeXB0b1BQQEA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kU3ltbWV0cmljQ2lwaGVyRmluYWxAVj8kQ29uY3JldGVQb2xpY3lIb2xkZXJAVkNoYUNoYV9Qb2xpY3lAQ3J5cHRvUFBAQFY/JEFkZGl0aXZlQ2lwaGVyVGVtcGxhdGVAVj8kQWJzdHJhY3RQb2xpY3lIb2xkZXJAVUFkZGl0aXZlQ2lwaGVyQWJzdHJhY3RQb2xpY3lAQ3J5cHRvUFBAQFZTeW1tZXRyaWNDaXBoZXJAMkBAQ3J5cHRvUFBAQEAyQFVBZGRpdGl2ZUNpcGhlckFic3RyYWN0UG9saWN5QDJAQENyeXB0b1BQQEBVQ2hhQ2hhX0luZm9AMkBAQ3J5cHRvUFBAQA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kdGltZV9nZXRAX1dWPyRpc3RyZWFtYnVmX2l0ZXJhdG9yQF9XVT8kY2hhcl90cmFpdHNAX1dAc3RkQEBAc3RkQEBAc3RkQEA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kdGltZV9nZXRARFY/JGlzdHJlYW1idWZfaXRlcmF0b3JARFU/JGNoYXJfdHJhaXRzQERAc3RkQEBAc3RkQEBAc3RkQEA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kdGltZV9nZXRAR1Y/JGlzdHJlYW1idWZfaXRlcmF0b3JAR1U/JGNoYXJfdHJhaXRzQEdAc3RkQEBAc3RkQEBAc3RkQEA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kdGltZV9wdXRAX1dWPyRvc3RyZWFtYnVmX2l0ZXJhdG9yQF9XVT8kY2hhcl90cmFpdHNAX1dAc3RkQEBAc3RkQEBAc3RkQEA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kdGltZV9wdXRARFY/JG9zdHJlYW1idWZfaXRlcmF0b3JARFU/JGNoYXJfdHJhaXRzQERAc3RkQEBAc3RkQEBAc3RkQEA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kdGltZV9wdXRAR1Y/JG9zdHJlYW1idWZfaXRlcmF0b3JAR1U/JGNoYXJfdHJhaXRzQEdAc3RkQEBAc3RkQEBAc3RkQEA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kVHdvQmFzZXNAVkJsb2NrQ2lwaGVyQENyeXB0b1BQQEBVUmlqbmRhZWxfSW5mb0AyQEBDcnlwdG9QUEBA","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kVmFyaWFibGVLZXlMZW5ndGhAJDBCQUAkMEJBQCQwQ0FAJDA3JDAzJDBBQEBDcnlwdG9QUEBA","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVj8kd3N0cmluZ19jb252ZXJ0QFY/JGNvZGVjdnRfdXRmOEBfVyQwQkFQUFBQQCQwQUBAc3RkQEBfV1Y/JGFsbG9jYXRvckBfV0AyQFY/JGFsbG9jYXRvckBEQDJAQHN0ZEBA","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVl9GYWNldF9iYXNlQHN0ZEBA","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVl9HZW5lcmljX2Vycm9yX2NhdGVnb3J5QHN0ZEBA","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVl9Jb3N0cmVhbV9lcnJvcl9jYXRlZ29yeTJAc3RkQEA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVl9Mb2NpbXBAbG9jYWxlQHN0ZEBA","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVl9TeXN0ZW1fZXJyb3JAc3RkQEA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVkFsZ29yaXRobUBDcnlwdG9QUEBA","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVkFsZ29yaXRobVBhcmFtZXRlcnNAQ3J5cHRvUFBAQA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVkFsZ29yaXRobVBhcmFtZXRlcnNCYXNlQENyeXB0b1BQQEA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVkFycmF5U2lua0BDcnlwdG9QUEBA","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVkFTTjFPYmplY3RAQ3J5cHRvUFBAQA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVkFzeW1tZXRyaWNBbGdvcml0aG1AQ3J5cHRvUFBAQA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVkF1dG9TZWVkZWRSYW5kb21Qb29sQENyeXB0b1BQQEA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVmJhZF9hbGxvY0BzdGRAQA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVmJhZF9hcnJheV9uZXdfbGVuZ3RoQHN0ZEBA","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVmJhZF9jYXN0QHN0ZEBA","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVmJhZF9leGNlcHRpb25Ac3RkQEA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVkJhc2VAUmlqbmRhZWxAQ3J5cHRvUFBAQA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVkJFUkRlY29kZUVyckBDcnlwdG9QUEBA","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVkJFUkdlbmVyYWxEZWNvZGVyQENyeXB0b1BQQEA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVkJFUlNlcXVlbmNlRGVjb2RlckBDcnlwdG9QUEBA","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVkJpdEJ1Y2tldEBDcnlwdG9QUEBA","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVkJsb2NrQ2lwaGVyQENyeXB0b1BQQEA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVkJsb2NrVHJhbnNmb3JtYXRpb25AQ3J5cHRvUFBAQA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVkJ1ZmZlcmVkVHJhbnNmb3JtYXRpb25AQ3J5cHRvUFBAQA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVkJ5dGVBcnJheVBhcmFtZXRlckBDcnlwdG9QUEBA","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVkJ5dGVRdWV1ZUBDcnlwdG9QUEBA","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVkNoYUNoYV9Qb2xpY3lAQ3J5cHRvUFBAQA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVkNsb25hYmxlQENyeXB0b1BQQEA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVmNvZGVjdnRfYmFzZUBzdGRAQA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVkNvbnN0Qnl0ZUFycmF5UGFyYW1ldGVyQENyeXB0b1BQQEA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVkNyeXB0b01hdGVyaWFsQENyeXB0b1BQQEA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVkNyeXB0b1BhcmFtZXRlcnNAQ3J5cHRvUFBAQA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVkRFUkdlbmVyYWxFbmNvZGVyQENyeXB0b1BQQEA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVkRFUlNlcXVlbmNlRW5jb2RlckBDcnlwdG9QUEBA","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVkVuY0BSaWpuZGFlbEBDcnlwdG9QUEBA","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVmVycm9yX2NhdGVnb3J5QHN0ZEBA","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVkV4Y2VwdGlvbkBDcnlwdG9QUEBA","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVmV4Y2VwdGlvbkBzdGRAQA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVmZhY2V0QGxvY2FsZUBzdGRAQA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVmZhaWx1cmVAaW9zX2Jhc2VAc3RkQEA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVkdlbmVyYXRhYmxlQ3J5cHRvTWF0ZXJpYWxAQ3J5cHRvUFBAQA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVkhhc2hJbnB1dFRvb0xvbmdAQ3J5cHRvUFBAQA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVkhhc2hUcmFuc2Zvcm1hdGlvbkBDcnlwdG9QUEBA","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVkludGVnZXJAQ3J5cHRvUFBAQA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVkludmFsaWRBcmd1bWVudEBDcnlwdG9QUEBA","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVkludmFsaWREYXRhRm9ybWF0QENyeXB0b1BQQEA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVkludmFsaWRLZXlMZW5ndGhAQ3J5cHRvUFBAQA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVkludmFsaWRNYXRlcmlhbEBDcnlwdG9NYXRlcmlhbEBDcnlwdG9QUEBA","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVkludmFsaWRSb3VuZHNAQ3J5cHRvUFBAQA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVktleUFncmVlbWVudEFsZ29yaXRobUBDcnlwdG9QUEBA","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVmxlbmd0aF9lcnJvckBzdGRAQA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVmxvZ2ljX2Vycm9yQHN0ZEBA","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVk5hbWVWYWx1ZVBhaXJzQENyeXB0b1BQQEA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVk5vbmJsb2NraW5nUm5nQENyeXB0b1BQQEA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVk5vdENvcHlhYmxlQENyeXB0b1BQQEA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVk5vdEltcGxlbWVudGVkQENyeXB0b1BQQEA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVk51bGxOYW1lVmFsdWVQYWlyc0BDcnlwdG9QUEBA","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVk9JREBDcnlwdG9QUEBA","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVk9TX1JOR19FcnJAQ3J5cHRvUFBAQA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVm91dF9vZl9yYW5nZUBzdGRAQA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVlBhcmFtZXRlck5vdFVzZWRAQWxnb3JpdGhtUGFyYW1ldGVyc0Jhc2VAQ3J5cHRvUFBAQA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVlBLQ1M4UHJpdmF0ZUtleUBDcnlwdG9QUEBA","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVlByaXZhdGVLZXlAQ3J5cHRvUFBAQA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVlJhbmRvbU51bWJlckdlbmVyYXRvckBDcnlwdG9QUEBA","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVlJhbmRvbVBvb2xAQ3J5cHRvUFBAQA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVnJhbmdlX2Vycm9yQHN0ZEBA","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVnJ1bnRpbWVfZXJyb3JAc3RkQEA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVlNlbGZUZXN0RmFpbHVyZUBDcnlwdG9QUEBA","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVlNIQTI1NkBDcnlwdG9QUEBA","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVlNpbXBsZUtleUFncmVlbWVudERvbWFpbkBDcnlwdG9QUEBA","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVlNpbXBsZUtleWluZ0ludGVyZmFjZUBDcnlwdG9QUEBA","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVlNpbmtAQ3J5cHRvUFBAQA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVlN0b3JlQENyeXB0b1BQQEA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVlN0cmVhbVRyYW5zZm9ybWF0aW9uQENyeXB0b1BQQEA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVlN5bW1ldHJpY0NpcGhlckBDcnlwdG9QUEBA","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVnN5c3RlbV9lcnJvckBzdGRAQA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVlRpbWVyQENyeXB0b1BQQEA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVlRpbWVyQmFzZUBDcnlwdG9QUEBA","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVnR5cGVfaW5mb0BA","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVlZhbHVlVHlwZU1pc21hdGNoQE5hbWVWYWx1ZVBhaXJzQENyeXB0b1BQQEA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVldhaXRhYmxlQENyeXB0b1BQQEA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVldhbGtlckBCeXRlUXVldWVAQ3J5cHRvUFBAQA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Lj9BVngyNTUxOUBDcnlwdG9QUEBA","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"LmRpYWdjYWI=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"LycvKS9BL0UvSy9NL1EvVy9vL3UvfS8=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"LzlaIG02JWhVJi4vRXdaSyJOZUBYX0RQdWoyMjBmOWE5Zi1hOWE2LTQxYjItOGRiZS02ZWUwYjA1YjhhMzI=","type":"Ansi","source":"File String Dumps","process":null,"filename":"mkdirp.x2anylock","compromised":null,"detection_total":null,"total":null},{"value":"MSAyJDIoMiwyMDI0MjgyPDJAMkQyUDJUMlgyXDJgMmQyaDJsMnAyMDM0MzgzQDNwMw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"MjIwZjlhOWYtYTlhNi00MWIyLThkYmUtNmVlMGIwNWI4YTMy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"MyAzJDMoMywzMDM0MzgzPDNAM0QzSDNMM1AzVDNYM1wzYDNkM2gzbDNwMyA6JDooOiw6MDo0Ojg6PDpAOkQ6SDpMOlA6VDpYOlw6","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"NiVQUk9HUkFNRklMRVMlXE1pY3Jvc29mdCBWaXN1YWwgU3R1ZGlvXDIwMjJcQ29tbXVuaXR5XFZDXHZjcGtnXGJ1aWxkdHJlZXNcY3J5cHRvcHBcc3JjXFRPUFBfOF85XzAtYTFhOWJlNDk3ZS5jbGVhblxnZjJuX3NpbWQuY3Bw","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"NlRLYWZcJjIyMGY5YTlmLWE5YTYtNDFiMi04ZGJlLTZlZTBiMDViOGEzMg==","type":"Ansi","source":"File String Dumps","process":null,"filename":"flow.js.x2anylock","compromised":null,"detection_total":null,"total":null},{"value":"OSI6KDotOjQ6RDpSOmM6ezo=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"OSM5JTkpOS85PTlBOU05WzlrOXk5fTk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"OSY6MjpKOlI6","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"OSg6Mjo8OmE6cjp8Og==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"OSs6OTpGOnU6QTtPO1k7","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"OTg6PTpcOmE6","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"OiA6JDooOiw6MDo0Ojg6PDpAOkQ6SDpMOlA6VDpYOlw6YDpkOmg6bDpwOnQ6eDp8Og==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"OiA6JDo8Okw6UDpUOlg6XDpgOnQ6eDo=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"OiA6LDpQOnA6eDo=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"OiA6PDpXOmg6","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"OiB0aGlzIG9iamVjdCBkb2Vzbid0IHN1cHBvcnQgYSBzcGVjaWFsIGxhc3QgYmxvY2s=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"OiB0aGlzIG9iamVjdCBkb2Vzbid0IHN1cHBvcnQgbXVsdGlwbGUgY2hhbm5lbHM=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"OiB0aGlzIG9iamVjdCBkb2Vzbid0IHN1cHBvcnQgcmVzeW5jaHJvbml6YXRpb24=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"OiE6Ljo1OkQ6UzpaOmE6bTp0On46","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"OiI6NDo7OmY6czo=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"OiQ6LDo0Ojw6RDpMOlQ6XDpkOmw6dDp8Og==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"OiQ6LDo4Olg6YDpoOnQ6","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"OiQ6PDpAOlg6XDp0Og==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"OiQ6STpQOl06","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Oic6KzoxOks6UTpbOmM6ZzptOnk6","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Oig6MDpEOkw6YDpoOnA6eDp8Og==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Oig6ODo8OkA6WDpoOmw6cDp0Ong6fDo=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"OkFNOmFtOlBNOnBt","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"OkphbjpKYW51YXJ5OkZlYjpGZWJydWFyeTpNYXI6TWFyY2g6QXByOkFwcmlsOk1heTpNYXk6SnVuOkp1bmU6SnVsOkp1bHk6QXVnOkF1Z3VzdDpTZXA6U2VwdGVtYmVyOk9jdDpPY3RvYmVyOk5vdjpOb3ZlbWJlcjpEZWM6RGVjZW1iZXI=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"OlN1bjpTdW5kYXk6TW9uOk1vbmRheTpUdWU6VHVlc2RheTpXZWQ6V2VkbmVzZGF5OlRodTpUaHVyc2RheTpGcmk6RnJpZGF5OlNhdDpTYXR1cmRheQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"PD94bWwgdmVyc2lvbj0nMS4wJyBlbmNvZGluZz0nVVRGLTgnIHN0YW5kYWxvbmU9J3llcyc/Pjxhc3NlbWJseSB4bWxucz0ndXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTphc20udjEnIG1hbmlmZXN0VmVyc2lvbj0nMS4wJz4gIDx0cnVzdEluZm8geG1sbnM9InVybjpzY2hlbWFzLW1pY3Jvc29mdC1jb206YXNtLnYzIj4gICAgPHNlY3VyaXR5PiAgICAgIDxyZXF1ZXN0ZWRQcml2aWxlZ2VzPiAgICAgICAgPHJlcXVlc3RlZEV4ZWN1dGlvbkxldmVsIGxldmVsPSdhc0ludm9rZXInIHVpQWNjZXNzPSdmYWxzZScgLz4gICAgICA8L3JlcXVlc3RlZFByaXZpbGVnZXM+ICAgIDwvc2VjdXJpdHk+ICA8L3RydXN0SW5mbz48L2Fzc2VtYmx5Pg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"QCFAJUArQDFAP0BDQEVAXUBhQGdAbUA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"WyVbK1s9W0lbS1tnW3lb","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"XClcL1wzXDlcR1xLXE1cUVxvXHVcd1x9XA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"XFw/XCVVU0VSUFJPRklMRSVcLm1pdG1wcm94eVxtaXRtcHJveHktY2EucGVt","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XCVVU0VSUFJPRklMRSVcRG9jdW1lbnRzXE91dGxvb2sgRmlsZXNcT3V0bG9vazEucHN0","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XCVVU0VSUFJPRklMRSVcbnR1c2VyLmRhdC5MT0cy","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XCVVU0VSUFJPRklMRSVcTlRVU0VSLkRBVHs0N2E2YTE3YS1hNTE0LTExZTctYTk0ZS1lYzBkOWEwNWM4NjB9LlRNLmJsZg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XCVVU0VSUFJPRklMRSVcTlRVU0VSLkRBVHs0N2E2YTE3YS1hNTE0LTExZTctYTk0ZS1lYzBkOWEwNWM4NjB9LlRNQ29udGFpbmVyMDAwMDAwMDAwMDAwMDAwMDAwMDEucmVndHJhbnMtbXM=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XCVVU0VSUFJPRklMRSVcTlRVU0VSLkRBVHs0N2E2YTE3YS1hNTE0LTExZTctYTk0ZS1lYzBkOWEwNWM4NjB9LlRNQ29udGFpbmVyMDAwMDAwMDAwMDAwMDAwMDAwMDIucmVndHJhbnMtbXM=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XCVVU0VSUFJPRklMRSVcbnR1c2VyLnBvbA==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XCVVU0VSUFJPRklMRSVcU2VhcmNoZXNcTWljcm9zb2Z0IE9mZmljZSBPdXRsb29rLnNlYXJjaGNvbm5lY3Rvci1tcw==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XCRXSU5ET1dTLn5CVFwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XCRXSU5ET1dTLn5CVFxEVURvd25sb2FkXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XCRXSU5ET1dTLn5CVFxEVURvd25sb2FkXFNldHVwXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XCRXSU5ET1dTLn5CVFxEVURvd25sb2FkXFNldHVwXHJlcGxhY2VtZW50bWFuaWZlc3RzXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XCRXSU5ET1dTLn5CVFxTb3VyY2VzXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XCRXSU5ET1dTLn5CVFxTb3VyY2VzXFBhbnRoZXJcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XCRXSU5ET1dTLn5CVFxTb3VyY2VzXFBhbnRoZXJcaW1nXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XCRXSU5ET1dTLn5CVFxTb3VyY2VzXFBhbnRoZXJcUmVzb3VyY2VzXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XCRXSU5ET1dTLn5CVFxTb3VyY2VzXHJlcGxhY2VtZW50bWFuaWZlc3RzXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XENvbmZpZy5Nc2lcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XERvY3VtZW50cyBhbmQgU2V0dGluZ3NcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAwLmNoa1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tLi4tYWN0aXZlc3luY3Byb3ZpZGVyXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX25vbmVfYTRlYjk5YTY1ZmYxMWM4M1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tLi4tc3luY3V0aWwucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2VuLXVzXzFkZDJkMTQzZDI3MzJhMGJcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tLi5hcGhvc3RyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2NzLWN6XzE2MmViMzNhMWU3ZTNjNmJcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tLi5hcGhvc3RyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2RhLWRrX2IzNjg5MzYxMTRjNDM4NmFcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tLi5hcGhvc3RyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2RlLWRlX2IwOTQyODlkMTY5YThkMDRcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tLi5hcGhvc3RyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2VsLWdyXzU5MmE1NjMwMDVhZmY1OTJcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tLi5hcGhvc3RyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2VuLXVzXzU5ODRmZTk2MDU3ODk4YzlcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tLi5hcGhvc3RyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2VzLWVzXzU5NTA1YjdhMDU5ZjhhNmVcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tLi5hcGhvc3RyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2ZpLWZpX2Y4NmI2MDI2ZmFiOTdjOThcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tLi5hcGhvc3RyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2ZyLWZyX2ZjMDdkMTc4Zjg3MWEwZDBcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tLi5hcGhvc3RyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2h1LWh1XzQzNzg1MWMwZGNkMTZmZWNcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tLi5hcGhvc3RyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2l0LWl0X2U2MmZjN2JmY2ZhMzg2NGVcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tLi5hcGhvc3RyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2phLWpwXzg4NTU0NmNjYzJiZTk4MjlcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tLi5hcGhvc3RyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2tvLWtyXzJiYmYyMzgxYjUyZjVmM2ZcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tLi5hcGhvc3RyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX25iLW5vXzE0NTFhNGI2OGQ1NDhhZmJcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tLi5hcGhvc3RyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX25sLW5sXzEyOTBlZmY0OGU4MDk0ZDBcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tLi5hcGhvc3RyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3BsLXBsXzU4Y2Q0YTc2NzNhMzAyODRcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tLi5hcGhvc3RyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3B0LWJyXzViMjEzNTFhNzIyYzk2NjhcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tLi5hcGhvc3RyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3B0LXB0XzVjMDMwNDg2NzE5YzA2NDRcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tLi5hcGhvc3RyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3J1LXJ1X2EyYTYxNjRhNTY3ZDk0NzBcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tLi5hcGhvc3RyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3N2LXNlXzNlYTEwMGJmNGRhNjllY2JcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tLi5hcGhvc3RyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3RyLXRyX2U3YWU0YjA2M2M2MmEwYmNcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tLi5hcGhvc3RyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3poLWNuX2I5MGI2OTAzZWM5YTcyZGJcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tLi5hcGhvc3RyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3poLXR3X2JkMDdhNjU5ZWEwYjRmNGJcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tLi5jY291bnRzcnQucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2VuLXVzX2RjMGIxNzE5YTdlMWJjMjRcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tLi5jcHJvdmlkZXIucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2VuLXVzX2FlNGQ2NDRmMmVkNjM0MjVcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tLi5jcHJvdmlkZXIucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2VuLXVzX2JmOTVjOWM0OTc0ZWZhZDBcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tLi5jeW1hbmFnZXJicm9rZXJob3N0XzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX25vbmVfNjQ0ZjViZGZkOTY0N2RiYVwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tLi5lcm5ldG1haWwucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2VuLXVzX2NmM2M1YTY2NTQ2NTFkMzJcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tLi5ldG1haWxjc3AucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2VuLXVzXzk2NjExNzAxMDQ5YzYxNzRcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tLi5pbmVzaGFyZWQucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2VuLXVzX2M5NmQ0N2EyNTcwYTRkMWJcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tLi5saWN5bWFuYWdlcmJyb2tlcnBzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX25vbmVfNWU5MzI4YTQ5MzhlMjdiOVwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tLi5vbnRyb2xsZXIucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2VuLXVzX2ZlMWUyZjJiNzE0YjM2YjNcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tLi5vcmtoZWxwZXIucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2VuLXVzXzFiMDE4YjM1ZjVkZGFkMmVcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tLi5yb2tlcmhvc3QucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2VuLXVzXzU3NzMyYzM2MmZkNmU1ZDVcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tLi50YWNjZXNzb3IucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2VuLXVzX2VhYWI2ZTNiYzU4MzEzNGNcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tLi52ZXN5bmNjc3AucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2VuLXVzXzg1YWI0N2RjMGExMTcxOGRcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLWFjY291bnRhY2Nlc3Nvcl8zMWJmMzg1NmFkMzY0ZTM1XzEwLjAuMTcxMzQuMV9ub25lX2FjZTBlZWQwZmM1NjQ5NmZcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLWFjY291bnRzcnRfMzFiZjM4NTZhZDM2NGUzNV8xMC4wLjE3MTM0LjFfbm9uZV8xNTFhMWIxNDZkYTQ5YWZkXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLWFjdGl2ZXN5bmNjc3BfMzFiZjM4NTZhZDM2NGUzNV8xMC4wLjE3MTM0LjFfbm9uZV9mMzNiMGRkZGRhYjYyNTY2XCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLWFwaG9zdGNsaWVudF8zMWJmMzg1NmFkMzY0ZTM1XzEwLjAuMTcxMzQuMV9ub25lXzA4NWM5YWQ3YWY5ODRiY2ZcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLWFwaG9zdHJlc18zMWJmMzg1NmFkMzY0ZTM1XzEwLjAuMTcxMzQuMV9ub25lX2I4ZTAzNmI4ZjE4NDkwZWNcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLWFwaG9zdHNlcnZpY2VfMzFiZjM4NTZhZDM2NGUzNV8xMC4wLjE3MTM0LjFfbm9uZV8zYWJlOGZjNWI3MTJlODBiXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLWRhdnN5bmNwcm92aWRlcl8zMWJmMzg1NmFkMzY0ZTM1XzEwLjAuMTcxMzQuMV9ub25lX2JiYmNmNWIyYjIyYWFjNWVcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLWVuZ2luZXNoYXJlZF8zMWJmMzg1NmFkMzY0ZTM1XzEwLjAuMTcxMzQuMV9ub25lX2RiOGMxYzhhOGQ0NDk4OGVcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLWlucHJvY2xvZ2dlcl8zMWJmMzg1NmFkMzY0ZTM1XzEwLjAuMTcxMzQuMV9ub25lXzQ3YTQ5M2JjMTEwYmZjMzhcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLWludGVybmV0bWFpbF8zMWJmMzg1NmFkMzY0ZTM1XzEwLjAuMTcxMzQuMV9ub25lXzJkMDVhY2VmMDQ2ZjE1OWJcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLWludGVybmV0bWFpbGNzcF8zMWJmMzg1NmFkMzY0ZTM1XzEwLjAuMTcxMzQuMV9ub25lX2UwYWUzNTVhYTcwODVhNDVcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLW1jY3NwYWxfMzFiZjM4NTZhZDM2NGUzNV8xMC4wLjE3MTM0LjFfbm9uZV9mMGUwMTlkZjQ1ZGFiNDc4XCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLW5ldHdvcmtoZWxwZXJfMzFiZjM4NTZhZDM2NGUzNV8xMC4wLjE3MTM0LjFfbm9uZV9hMGZhMjEwYzUyMGI3NTNiXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNjb250cm9sbGVyXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX25vbmVfMDM0ZWU1N2Q4MTc3NWI1Mlwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNwcm94eV8zMWJmMzg1NmFkMzY0ZTM1XzEwLjAuMTcxMzQuMV9ub25lX2Q2MDdkY2Y1ZGM5MjdiYWFcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2FmLXphXzc1NTk0ZTY4NWU2MzVhM2VcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2FtLWV0XzdkN2M4NWM2NTkyZjU5YTVcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2FyLXNhXzc0ZDgyZWQwNWVjM2Y2MjNcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2FzLWluXzdhOTIyMDBhNWIxNjRjYTVcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2F6LS4uLWF6XzQzMDAwMzY1NGE4YWM3OQ==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2JlLWJ5XzIzMjkzMTZkNGExMjYxMTZcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2JnLWJnXzFiMTgxMDU5NGY0NDQ3N2FcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2JuLWJkXzE5NzdjYjViNTA1N2ZkN2NcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2JuLWluXzFkZTY3M2FmNGQ3ZWRlMjlcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2JzLS4uLWJhXzlkYzc5ZTVkNjQwM2RhOA==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2NhLS4uY2lhXzE0ZTIxZWJhNmRkMDFmNw==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2NhLWVzX2MzYzk0NWJhM2UzOTQwNDRcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2Noci4uLXVzX2Q3MzNjZGM1ZDY0ZGQ5Zg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2NzLWN6X2M2MjE4NmY0M2NjYzIzYTVcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2N5LWdiX2JiM2I5ZmZjNDNkNGM1MjdcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2RhLWRrXzYzNWI2NzFiMzMxMjFmYTRcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2RlLWRlXzYwODZmYzU3MzRlODc0M2VcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2VsLWdyXzA5MWQyOWVhMjNmZGRjY2NcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2VuLWdiXzAxZWYxNzMyMjg5ZGNjM2VcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2VuLXVzXzA5NzdkMjUwMjNjNjgwMDNcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2VzLWVzXzA5NDMyZjM0MjNlZDcxYThcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2VzLW14XzBiN2ExY2RhMjI4MTU1NTNcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2V0LWVlXzAzMDJmYWM0MjdmMzRlMzdcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2V1LWVzXzA5MmQ4ZjVjMjNmZGE5OGFcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2ZhLWlyX2FjYjIyZjg3MTYzNWY5ZWNcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2ZpLWZpX2E4NWUzM2UxMTkwNzYzZDJcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2ZpbC1waF80Yzk5MzJlZDVlMjRlZjg5XA==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2ZyLWNhX2E0NzBlZjdkMWI5N2VlMzBcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2ZyLWZyX2FiZmFhNTMzMTZiZjg4MGFcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2dhLWllXzRhMGM5NjNhMGM3YmRjNGFcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2dkLWdiXzQ4OTdiZTdjMGQ2ZWVmNDZcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2dsLWVzXzRmY2I2NmJhMDhkNmU4ODNcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2d1LWluXzRkMzIxODY4MGE4ZDMzZGRcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2hhLS4uLW5nX2VmYTFhOTI3ZDg0MjQwYg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2hlLWlsX2YwMWE0Y2Q0ZmQyZTg4ZjhcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2hpLWluX2YwZDIxYjgwZmNiZDAxY2FcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2hyLWhyX2YyMzZmZmI0ZmJlMWY1YmVcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2h1LWh1X2YzNmIyNTdhZmIxZjU3MjZcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2h5LWFtX2VmYjQ0YmQyZmQ4NmVmNGJcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2lkLWlkXzhmYjcyNzU5ZjFmZjY2MDhcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2lnLW5nXzkwZWFkYjM3ZjEzZDQ3OTVcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2lzLWlzXzk1YmJlNDM3ZWUzMjRkMTBcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2l0LWl0Xzk2MjI5Yjc5ZWRmMTZkODhcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2phLWpwXzM4NDgxYTg2ZTEwYzdmNjNcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2thLWdlX2Q2ODVkM2VkZDZjMDFkZWNcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2trLWt6X2RmNjk3MDViZDExNGZhZWRcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2ttLWtoX2Q3NTg0ZjQ3ZDY0NmUxNTFcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2tuLWluX2Q5ZjZkN2ZmZDQ5OGU1MmFcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2tvLWtyX2RiYjFmNzNiZDM3ZDQ2NzlcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2tvay1pbl84OTU0ZjJiZWQwY2EzMjFlXA==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2t1LS4uLWlxX2M0NmE5Mjk4ZWU0ZDkzNg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2t5LWtnX2Q2NjUwOTA5ZDZmMTJjMTZcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2xiLWx1XzgwYjE0OTAyYzRjYTFmYWJcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2xvLWxhXzc3NDYyYTZlY2FlNzMwNWNcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2x0LWx0XzdmN2QyMzNjYzVhNTEyMTZcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2x2LWx2XzgwNGE5MWMwYzUyMzUzMDZcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX21pLW56XzI1YmI1M2VkYjYyNzRhNjBcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX21rLW1rXzFlZmVkZjJiYmE3ZTI0YjhcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX21sLWluXzIwNDhmZmU5YjlhYWU3YmFcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX21uLW1uXzIwMzMwNGYxYjliYjg2MjBcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX21yLWluXzIwMDgyMDYxYjlkYjhmNjBcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX21zLW15XzI0ZGRjNDRmYjZjMTQzYTJcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX210LW10XzIyOWI1MDdkYjgzNjQ4ZjBcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX25iLW5vX2M0NDQ3ODcwYWJhMjcyMzVcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX25lLW5wX2M0OTU4ZmRhYWI3MWNhOGZcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX25sLW5sX2MyODNjM2FlYWNjZTdjMGFcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX25uLW5vX2MzYzJiOTYwYWMwM2MxODFcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX25zby16YV8zMDc1OWNkYzFhZjc1MjFiXA==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX29yLWluXzY2NDRhODczOWVmZGM5ZDJcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3BhLS4uLXBrX2E3NWQzODJiMTdmOWZiYg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3BhLWluXzBhMWFiYjI4OTEwNTBjMGFcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3BsLXBsXzA4YzAxZTMwOTFmMGU5YmVcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3Bycy1hZl8zZGZmMGUwN2U5NmYyYzIwXA==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3B0LWJyXzBiMTQwOGQ0OTA3YTdkYTJcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3B0LXB0XzBiZjVkODQwOGZlOWVkN2VcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3F1Yy4uLWd0XzJhNTdjNjc4M2NlOWMwMg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3F1ei1wZV83MDE2OGU5MTMxN2FjMzlmXA==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3JvLXJvXzUwMzA5ZTc4NzY1MGI4ZGFcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3J1LXJ1XzUyOThlYTA0NzRjYjdiYWFcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3J3LXJ3XzUzNjY1ODg4NzQ0OWJjOWFcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3NkLS4uLXBrX2U4NGU3YjFiM2ZjZDI5Mg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3NpLWxrX2YxY2EyZTAxNjlkNDgyOGJcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3NrLXNrX2YxYjNlZWIxNjllNTZkZDRcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3NsLXNpX2YwYzYxMDY5NmE3ZjgwYjdcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3NxLWFsX2YxZTYzMDY3NjljYjRjYWZcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3NyLS4uLWJhXzRkZDljZmI3N2U2OWVlZg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3NyLS4uLXJzXzU0MmZhM2ZmN2E2YzJlNQ==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3NyLS4uLXJzXzk2ZjY3OGFkZGY5MTI3ZQ==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3N2LXNlX2VlOTNkNDc5NmJmNDg2MDVcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3N3LWtlX2VlODliYWNkNmJmYmQ0ZWVcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3RhLWluXzk2OTNjYjRjNWI0OTgwZWVcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3RlLWluXzk2Njg4YjljNWI2OWYwYjJcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3RnLS4uLXRqX2E1ZTIxZjFjOWFjMTM3MQ==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3RoLXRoXzkzOWRmNjJjNWQzOTQzNDZcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3RpLWV0Xzk4ZTZkMjIwNTlkNDE1MWNcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3RrLXRtXzk1YjUyYTRlNWJlNGFkYmNcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3RuLXphXzkwNDFkYmIyNWY2OTY1MDFcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3RyLXRyXzk3YTExZWMwNWFiMDg3ZjZcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3R0LXJ1Xzk4ZTA0MjAyNTllNTlhMmJcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3VnLWNuXzM5NzFiODdkNGUwYWFjMDdcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3VrLXVhXzMzODEwMTY3NTFlMWFlNDJcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3VyLXBrXzM3YTUwYmE3NGY0MDFlZmFcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3V6LS4uLXV6XzdiM2MwN2QxNmY4NmY2YQ==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3ZpLXZuX2RjNzhhYmQ2NDBhZGU4MTVcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3dvLXNuXzdmNTY1NGFmMzM2ZjYwMTFcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3hoLXphXzFjZmJjYjVlMjk3ZDMyM2ZcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3lvLW5nX2MyNzg5YzY3MWE4ZmZhYWRcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3poLWNuXzY4ZmUzY2JlMGFlODVhMTVcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3poLXR3XzZjZmE3YTE0MDg1OTM2ODVcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3p1LXphXzYyYWJjNDc0MGYwOGQ3ZWVcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXNfMzFiZjM4NTZhZDM2NGUzNV8xMC4wLjE3MTM0LjFfbm9uZV82MWE5YjBlNjAwYjEyNjAyXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tLi4tYWN0aXZlc3luY3Byb3ZpZGVyXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX25vbmVfYWY0MDQzZjg5NDUxZGU3ZVwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tLi4tc3luY3V0aWwucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2VuLXVzXzI4Mjc3Yjk2MDZkM2VjMDZcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tLi5hcGhvc3RyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2NzLWN6XzIwODM1ZDhjNTJkZWZlNjZcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tLi5hcGhvc3RyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2RhLWRrX2JkYmQzZGIzNDkyNGZhNjVcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tLi5hcGhvc3RyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2RlLWRlX2JhZThkMmVmNGFmYjRlZmZcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tLi5hcGhvc3RyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2VsLWdyXzYzN2YwMDgyM2ExMGI3OGRcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tLi5hcGhvc3RyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2VuLXVzXzYzZDlhOGU4MzlkOTVhYzRcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tLi5hcGhvc3RyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2VzLWVzXzYzYTUwNWNjM2EwMDRjNjlcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tLi5hcGhvc3RyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2ZpLWZpXzAyYzAwYTc5MmYxYTNlOTNcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tLi5hcGhvc3RyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2ZyLWZyXzA2NWM3YmNiMmNkMjYyY2JcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tLi5hcGhvc3RyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2h1LWh1XzRkY2NmYzEzMTEzMjMxZTdcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tLi5hcGhvc3RyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2l0LWl0X2YwODQ3MjEyMDQwNDQ4NDlcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tLi5hcGhvc3RyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2phLWpwXzkyYTlmMTFlZjcxZjVhMjRcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tLi5hcGhvc3RyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2tvLWtyXzM2MTNjZGQzZTk5MDIxM2FcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tLi5hcGhvc3RyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX25iLW5vXzFlYTY0ZjA4YzFiNTRjZjZcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tLi5hcGhvc3RyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX25sLW5sXzFjZTU5YTQ2YzJlMTU2Y2JcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tLi5hcGhvc3RyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3BsLXBsXzYzMjFmNGM4YTgwM2M0N2ZcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tLi5hcGhvc3RyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3B0LWJyXzY1NzVkZjZjYTY4ZDU4NjNcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tLi5hcGhvc3RyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3B0LXB0XzY2NTdhZWQ4YTVmY2M4M2ZcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tLi5hcGhvc3RyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3J1LXJ1X2FjZmFjMDljOGFkZTU2NmJcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tLi5hcGhvc3RyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3N2LXNlXzQ4ZjVhYjExODIwNzYwYzZcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tLi5hcGhvc3RyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3RyLXRyX2YyMDJmNTU4NzBjMzYyYjdcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tLi5hcGhvc3RyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3poLWNuX2MzNjAxMzU2MjBmYjM0ZDZcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tLi5hcGhvc3RyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3poLXR3X2M3NWM1MGFjMWU2YzExNDZcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tLi5jY291bnRzcnQucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2VuLXVzX2U2NWZjMTZiZGM0MjdlMWZcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tLi5jcHJvdmlkZXIucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2VuLXVzX2I4YTIwZWExNjMzNmY2MjBcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tLi5jcHJvdmlkZXIucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2VuLXVzX2M5ZWE3NDE2Y2JhZmJjY2JcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tLi5pbmVzaGFyZWQucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2VuLXVzX2QzYzFmMWY0OGI2YjBmMTZcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tLi5vbnRyb2xsZXIucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2VuLXVzXzA4NzJkOTdkYTVhYmY4YWVcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tLi5vcmtoZWxwZXIucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2VuLXVzXzI1NTYzNTg4MmEzZTZmMjlcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tLi50YWNjZXNzb3IucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2VuLXVzX2Y1MDAxODhkZjllM2Q1NDdcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLWFjY291bnRhY2Nlc3Nvcl8zMWJmMzg1NmFkMzY0ZTM1XzEwLjAuMTcxMzQuMV9ub25lX2I3MzU5OTIzMzBiNzBiNmFcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLWFjY291bnRzcnRfMzFiZjM4NTZhZDM2NGUzNV8xMC4wLjE3MTM0LjFfbm9uZV8xZjZlYzU2NmEyMDU1Y2Y4XCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLWFwaG9zdGNsaWVudF8zMWJmMzg1NmFkMzY0ZTM1XzEwLjAuMTcxMzQuMV9ub25lXzEyYjE0NTI5ZTNmOTBkY2FcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLWRhdnN5bmNwcm92aWRlcl8zMWJmMzg1NmFkMzY0ZTM1XzEwLjAuMTcxMzQuMV9ub25lX2M2MTFhMDA0ZTY4YjZlNTlcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLWVuZ2luZXNoYXJlZF8zMWJmMzg1NmFkMzY0ZTM1XzEwLjAuMTcxMzQuMV9ub25lX2U1ZTBjNmRjYzFhNTVhODlcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLW5ldHdvcmtoZWxwZXJfMzFiZjM4NTZhZDM2NGUzNV8xMC4wLjE3MTM0LjFfbm9uZV9hYjRlY2I1ZTg2NmMzNzM2XCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNjb250cm9sbGVyXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX25vbmVfMGRhMzhmY2ZiNWQ4MWQ0ZFwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNwcm94eV8zMWJmMzg1NmFkMzY0ZTM1XzEwLjAuMTcxMzQuMV9ub25lX2UwNWM4NzQ4MTBmMzNkYTVcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2FmLXphXzdmYWRmOGJhOTJjNDFjMzlcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2FtLWV0Xzg3ZDEzMDE4OGQ5MDFiYTBcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2FyLXNhXzdmMmNkOTIyOTMyNGI4MWVcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2FzLWluXzg0ZTZjYTVjOGY3NzBlYTBcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2F6LS4uLWF6XzRkNTRhZGI3N2VlYjg5OA==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2JlLWJ5XzJkN2RkYmJmN2U3MzIzMTFcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2JnLWJnXzI1NmNiYWFiODNhNTA5NzVcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2JuLWJkXzIzY2M3NWFkODRiOGJmNzdcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2JuLWluXzI4M2IxZTAxODFkZmEwMjRcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2JzLS4uLWJhX2E4MWM0OGFmOTg2NDljNw==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2NhLS4uY2lhXzFmMzZjOTBjYTIzMGUxNg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2NhLWVzX2NlMWRmMDBjNzI5YTAyM2ZcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2Noci4uLXVzX2UxODg3ODE4MGFhZTliZg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2NzLWN6X2QwNzYzMTQ2NzEyY2U1YTBcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2N5LWdiX2M1OTA0YTRlNzgzNTg3MjJcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2RhLWRrXzZkYjAxMTZkNjc3MmUxOWZcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2RlLWRlXzZhZGJhNmE5Njk0OTM2MzlcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2VsLWdyXzEzNzFkNDNjNTg1ZTllYzdcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2VuLWdiXzBjNDNjMTg0NWNmZThlMzlcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2VuLXVzXzEzY2M3Y2EyNTgyNzQxZmVcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2VzLWVzXzEzOTdkOTg2NTg0ZTMzYTNcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2VzLW14XzE1Y2VjNzJjNTZlMjE3NGVcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2V0LWVlXzBkNTdhNTE2NWM1NDEwMzJcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2V1LWVzXzEzODIzOWFlNTg1ZTZiODVcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2ZhLWlyX2I3MDZkOWQ5NGE5NmJiZTdcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2ZpLWZpX2IyYjJkZTMzNGQ2ODI1Y2RcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2ZpbC1waF81NmVkZGQzZjkyODViMTg0XA==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2ZyLWNhX2FlYzU5OWNmNGZmOGIwMmJcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2ZyLWZyX2I2NGY0Zjg1NGIyMDRhMDVcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2dhLWllXzU0NjE0MDhjNDBkYzllNDVcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2dkLWdiXzUyZWM2OGNlNDFjZmIxNDFcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2dsLWVzXzVhMjAxMTBjM2QzN2FhN2VcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2d1LWluXzU3ODZjMmJhM2VlZGY1ZDhcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2hhLS4uLW5nX2Y5ZjY1MzdhMGNhMzAyYQ==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2hlLWlsX2ZhNmVmNzI3MzE4ZjRhZjNcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2hpLWluX2ZiMjZjNWQzMzExZGMzYzVcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2hyLWhyX2ZjOGJhYTA3MzA0MmI3YjlcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2h1LWh1X2ZkYmZjZmNkMmY4MDE5MjFcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2h5LWFtX2ZhMDhmNjI1MzFlN2IxNDZcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2lkLWlkXzlhMGJkMWFjMjY2MDI4MDNcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2lnLW5nXzliM2Y4NThhMjU5ZTA5OTBcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2lzLWlzX2EwMTA4ZThhMjI5MzBmMGJcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2l0LWl0X2EwNzc0NWNjMjI1MjJmODNcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2phLWpwXzQyOWNjNGQ5MTU2ZDQxNWVcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2thLWdlX2UwZGE3ZTQwMGIyMGRmZTdcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2trLWt6X2U5YmUxYWFlMDU3NWJjZThcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2ttLWtoX2UxYWNmOTlhMGFhN2EzNGNcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2tuLWluX2U0NGI4MjUyMDhmOWE3MjVcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2tvLWtyX2U2MDZhMThlMDdkZTA4NzRcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2tvay1pbl85M2E5OWQxMTA1MmFmNDE5XA==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2t1LS4uLWlxX2NlYmYzY2ViMjJhZTU1Ng==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2t5LWtnX2UwYjliMzVjMGI1MWVlMTFcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2xiLWx1XzhiMDVmMzU0ZjkyYWUxYTZcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2xvLWxhXzgxOWFkNGMwZmY0N2YyNTdcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2x0LWx0Xzg5ZDFjZDhlZmEwNWQ0MTFcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2x2LWx2XzhhOWYzYzEyZjk4NDE1MDFcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX21pLW56XzMwMGZmZTNmZWE4ODBjNWJcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX21rLW1rXzI5NTM4OTdkZWVkZWU2YjNcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX21sLWluXzJhOWRhYTNiZWUwYmE5YjVcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX21uLW1uXzJhODdhZjQzZWUxYzQ4MWJcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX21yLWluXzJhNWNjYWIzZWUzYzUxNWJcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX21zLW15XzJmMzI2ZWExZWIyMjA1OWRcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX210LW10XzJjZWZmYWNmZWM5NzBhZWJcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX25iLW5vX2NlOTkyMmMyZTAwMzM0MzBcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX25lLW5wX2NlZWEzYTJjZGZkMjhjOGFcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX25sLW5sX2NjZDg2ZTAwZTEyZjNlMDVcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX25uLW5vX2NlMTc2M2IyZTA2NDgzN2NcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX25zby16YV8zYWNhNDcyZTRmNTgxNDE2XA==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX29yLWluXzcwOTk1MmM1ZDM1ZThiY2RcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3BhLS4uLXBrX2IxYjFlMjdkNGM1YWJkYg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3BhLWluXzE0NmY2NTdhYzU2NWNlMDVcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3BsLXBsXzEzMTRjODgyYzY1MWFiYjlcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3Bycy1hZl80ODUzYjg1YTFkY2ZlZTFiXA==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3B0LWJyXzE1NjhiMzI2YzRkYjNmOWRcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3B0LXB0XzE2NGE4MjkyYzQ0YWFmNzlcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3F1Yy4uLWd0XzM0YWM3MGNhNzE0YTgyMQ==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3F1ei1wZV83YTZiMzhlMzY1ZGI4NTlhXA==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3JvLXJvXzVhODU0OGNhYWFiMTdhZDVcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3J1LXJ1XzVjZWQ5NDU2YTkyYzNkYTVcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3J3LXJ3XzVkYmIwMmRhYThhYTdlOTVcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3NkLS4uLXBrX2YyYTMyNTZkNzQyZGViMg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3NpLWxrX2ZjMWVkODUzOWUzNTQ0ODZcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3NrLXNrX2ZjMDg5OTAzOWU0NjJmY2ZcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3NsLXNpX2ZiMWFiYWJiOWVlMDQyYjJcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3NxLWFsX2ZjM2FkYWI5OWUyYzBlYWFcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3NyLS4uLWJhXzU4MmU3YTA5YjJjYWIwZg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3NyLS4uLXJzXzVlODQ0ZTUxYWVjY2YwNQ==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3NyLS4uLXJzX2ExNGIyMzAwMTNmMWU5ZQ==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3N2LXNlX2Y4ZTg3ZWNiYTA1NTQ4MDBcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3N3LWtlX2Y4ZGU2NTFmYTA1Yzk2ZTlcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3RhLWluX2EwZTg3NTllOGZhYTQyZTlcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3RlLWluX2EwYmQzNWVlOGZjYWIyYWRcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3RnLS4uLXRqX2IwMzZjOTZlY2YyMWY5MQ==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3RoLXRoXzlkZjJhMDdlOTE5YTA1NDFcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3RpLWV0X2EzM2I3YzcyOGUzNGQ3MTdcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3RrLXRtX2EwMDlkNGEwOTA0NTZmYjdcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3RuLXphXzlhOTY4NjA0OTNjYTI2ZmNcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3RyLXRyX2ExZjVjOTEyOGYxMTQ5ZjFcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3R0LXJ1X2EzMzRlYzU0OGU0NjVjMjZcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3VnLWNuXzQzYzY2MmNmODI2YjZlMDJcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3VrLXVhXzNkZDVhYmI5ODY0MjcwM2RcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3VyLXBrXzQxZjliNWY5ODNhMGUwZjVcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3V6LS4uLXV6Xzg1OTBiMjIzYTNlN2I4YQ==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3ZpLXZuX2U2Y2Q1NjI4NzUwZWFhMTBcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3dvLXNuXzg5YWFmZjAxNjdkMDIyMGNcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3hoLXphXzI3NTA3NWIwNWRkZGY0M2FcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3lvLW5nX2NjY2Q0NmI5NGVmMGJjYThcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3poLWNuXzczNTJlNzEwM2Y0OTFjMTBcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3poLXR3Xzc3NGYyNDY2M2NiOWY4ODBcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3p1LXphXzZkMDA2ZWM2NDM2OTk5ZTlcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAxLmNoa1x3b3c2NF9taWNyb3NvZnQtd2luZG93cy1tY2NzLXN5bmNyZXNfMzFiZjM4NTZhZDM2NGUzNV8xMC4wLjE3MTM0LjFfbm9uZV82YmZlNWIzODM1MTFlN2ZkXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9kdWFsX2Jhc2ljZGlzcGxheS5pbmZfMzFiZjM4NTZhZDM2NGUzNV8xMC4wLjE3MTM0LjFfbm9uZV8xNWEwYTI0ZWNlZmUyYzA4XCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9kdWFsX2Jhc2ljcmVuZGVyLmluZl8zMWJmMzg1NmFkMzY0ZTM1XzEwLjAuMTcxMzQuMV9ub25lX2QyYTRkNDUzZmMyY2NmMTRcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9kdWFsX2J0aGxlZW51bS5pbmZfMzFiZjM4NTZhZDM2NGUzNV8xMC4wLjE3MTM0LjFfbm9uZV85YzhmOGFiMmUyMjZiMzJlXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9kdWFsX2J0aHBhbi5pbmZfMzFiZjM4NTZhZDM2NGUzNV8xMC4wLjE3MTM0LjFfbm9uZV8wM2ZjMjNjNGI5MTZmOGMzXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9kdWFsX2J0aHByaW50LmluZl8zMWJmMzg1NmFkMzY0ZTM1XzEwLjAuMTcxMzQuMV9ub25lX2UzNWI1Zjc2MDI2MjRjMmRcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9kdWFsX2J1dHRvbmNvbnZlcnRlci5pbmZfMzFiZjM4NTZhZDM2NGUzNV8xMC4wLjE3MTM0LjFfbm9uZV83YzQ3OTg1MjEzMzQ0ZjIwXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9kdWFsX2NfYmFyY29kZXNjYW5uZXIuaW5mXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX25vbmVfNDJmYzgzZDc4NzQ5MzI2Y1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9kdWFsX2NfY2FzaGRyYXdlci5pbmZfMzFiZjM4NTZhZDM2NGUzNV8xMC4wLjE3MTM0LjFfbm9uZV84OTE5NzgzNGU5NjQ3Mjk0XCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9kdWFsX2NfbGluZWRpc3BsYXkuaW5mXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX25vbmVfYWQ0NzI3YThjMmYyNTI5NFwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9kdWFsX2NfbWFnbmV0aWNzdHJpcGVyZWFkZXIuaW5mXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX25vbmVfOGVkMjZjM2U5NjI1OTJjOFwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9kdWFsX2NfcmVjZWlwdHByaW50ZXIuaW5mXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX25vbmVfYzMyNTMyYjVmZjAwYTZiNlwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9kdWFsX2Rpc3BsYXkuaW5mXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX25vbmVfODFlNTBmZDQwZTg0ZTQ3ZVwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9kdWFsX2Z1c2lvbnYyLmluZl8zMWJmMzg1NmFkMzY0ZTM1XzEwLjAuMTcxMzQuMV9ub25lX2EyYzEzMDUxNWM1Mzk4MWFcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9kdWFsX2hpZGJ0aC5pbmZfMzFiZjM4NTZhZDM2NGUzNV8xMC4wLjE3MTM0LjFfbm9uZV8yOWUxYWViNzMxMGM0MmRkXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9kdWFsX2hpZGJ0aGxlLmluZl8zMWJmMzg1NmFkMzY0ZTM1XzEwLjAuMTcxMzQuMV9ub25lXzEwYzMzMjY0ZGMwZDMwZjJcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9kdWFsX2hpZGludGVycnVwdC5pbmZfMzFiZjM4NTZhZDM2NGUzNV8xMC4wLjE3MTM0LjFfbm9uZV8zYzBkMzBjNmRmNGI0ZWQ0XCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9kdWFsX2hpZHZoZi5pbmZfMzFiZjM4NTZhZDM2NGUzNV8xMC4wLjE3MTM0LjFfbm9uZV81ZjA1OGYwMTA4NTY5NzdmXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9kdWFsX2lkdHNlYy5pbmZfMzFiZjM4NTZhZDM2NGUzNV8xMC4wLjE3MTM0LjFfbm9uZV9kODdhN2VkOTk1NDBhYTRjXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9kdWFsX21hdXNiaG9zdC5pbmZfMzFiZjM4NTZhZDM2NGUzNV8xMC4wLjE3MTM0LjFfbm9uZV85ZjY0OGI3OWMwZjlmMWMyXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9kdWFsX21ndGR5bi5pbmZfMzFiZjM4NTZhZDM2NGUzNV8xMC4wLjE3MTM0LjFfbm9uZV9jYzE5NTk0MWIzMmU1ZGEzXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9kdWFsX21pcmFkaXNwLmluZl8zMWJmMzg1NmFkMzY0ZTM1XzEwLjAuMTcxMzQuMV9ub25lX2M3ZTUzYWQ2ZGI5ZjY3YTlcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9kdWFsX21zZ3Bpb3dpbjMyLmluZl8zMWJmMzg1NmFkMzY0ZTM1XzEwLjAuMTcxMzQuMV9ub25lXzVkODVmMThjYzk4OGI4NzZcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9kdWFsX21zbW91c2UuaW5mXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX25vbmVfYzkxMjdjZDc3NWVmODg3OVwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9kdWFsX25kaXN1aW8uaW5mXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX25vbmVfMjQ1NmMzYjFhNWMyYmI4NVwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9kdWFsX25ldG5iLmluZl8zMWJmMzg1NmFkMzY0ZTM1XzEwLjAuMTcxMzQuMV9ub25lX2ViZTYzOGMyNTg1MDY1MDdcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9kdWFsX25ldHBhY2VyLmluZl8zMWJmMzg1NmFkMzY0ZTM1XzEwLjAuMTcxMzQuMV9ub25lX2RlM2MyYWZkNmQ5NGI2YTRcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9kdWFsX25wc3ZjdHJpZy5pbmZfMzFiZjM4NTZhZDM2NGUzNV8xMC4wLjE3MTM0LjFfbm9uZV82NjQ0Y2NiZTU0M2E1MmNhXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9kdWFsX29wb3NkcnYuaW5mXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX25vbmVfYTZjZmMxNGQ4MzgzMjFiZlwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9kdWFsX3NlbnNvcnNoaWRjbGFzc2RyaXZlci5pbmZfMzFiZjM4NTZhZDM2NGUzNV8xMC4wLjE3MTM0LjFfbm9uZV85MmExY2YxOWY2MzlmOTBhXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9kdWFsX3VmeGNoaXBpZGVhLmluZl8zMWJmMzg1NmFkMzY0ZTM1XzEwLjAuMTcxMzQuMV9ub25lX2Y1YzgzNGViYzljZTc2NTRcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9kdWFsX3Vyc2NoaXBpZGVhLmluZl8zMWJmMzg1NmFkMzY0ZTM1XzEwLjAuMTcxMzQuMV9ub25lX2Y0Y2E1NjdjN2Q1NzY4N2JcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9kdWFsX3Vyc3N5bm9wc3lzLmluZl8zMWJmMzg1NmFkMzY0ZTM1XzEwLjAuMTcxMzQuMV9ub25lX2YxZWI4NzMzNDEzMDg0M2VcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9kdWFsX3VzYmNjaWRkcml2ZXIuaW5mXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX25vbmVfNDA3MGIxZTI4ZWI1MDI4ZFwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9kdWFsX3VzYnNlci5pbmZfMzFiZjM4NTZhZDM2NGUzNV8xMC4wLjE3MTM0LjFfbm9uZV84MjgxZmI2MmVjODBkZjdlXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9kdWFsX3VzYnN0b3IuaW5mXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX25vbmVfMjY0YjQ0ZDgxNWRjZGY1MFwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9kdWFsX3ZkcnZyb290LmluZl8zMWJmMzg1NmFkMzY0ZTM1XzEwLjAuMTcxMzQuMV9ub25lX2ExODUwNmQyOWE2YWJhZDhcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9kdWFsX3ZoZG1wLmluZl8zMWJmMzg1NmFkMzY0ZTM1XzEwLjAuMTcxMzQuMV9ub25lXzc0NTBkODk3NjJiZjY3YmJcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9kdWFsX3dkbWFfYnQuaW5mXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX25vbmVfN2ZlZDVlN2NlYWY2ZjMzMFwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9kdWFsX3dpbnVzYi5pbmZfMzFiZjM4NTZhZDM2NGUzNV8xMC4wLjE3MTM0LjFfbm9uZV9hYjc2MWYyMzlmMWY5YTNhXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9kdWFsX3hib3hnaXAuaW5mXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX25vbmVfNTE3YzEzNjhmMTMzZjIzOVwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9kdWFsX3h1c2IyMi5pbmZfMzFiZjM4NTZhZDM2NGUzNV8xMC4wLjE3MTM0LjFfbm9uZV8zNjZiMDZiZWFhZDg2ZDY0XCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9mZHBob3N0XzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX25vbmVfNjExOGQwNDFkNzk2YmE0N1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9mZHJlc3B1Yl8zMWJmMzg1NmFkMzY0ZTM1XzEwLjAuMTcxMzQuMV9ub25lXzY0ZjRjZDE0Mjc5Nzc1YWVcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9mZHNzZHBfMzFiZjM4NTZhZDM2NGUzNV8xMC4wLjE3MTM0LjFfbm9uZV8yMDVlN2VlZWRkNjhjNzRiXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9mZHduZXRfMzFiZjM4NTZhZDM2NGUzNV8xMC4wLjE3MTM0LjFfbm9uZV8yMGE5Mzk3Y2RkM2MyMGNkXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtYXBwbW9kZWwtZXhlYy1ldmVudHNfMzFiZjM4NTZhZDM2NGUzNV8xMC4wLjE3MTM0LjFfbm9uZV8wNzY3NzgxMzUyNTAxOGE2XCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtY29tcG9zYWJsZS1zaGFyZXBpY2tlcl8zMWJmMzg1NmFkMzY0ZTM1XzEwLjAuMTcxMzQuMV9ub25lX2Y4MGUxNTA2NDk3Y2RjN2RcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtb25lY29yZS1jLi5leHBlcmllbmNlaG9zdC11c2VyXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX25vbmVfYTI4MzA0ZjJiYjQ3MzU5M1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtb25lY29yZS1jLi5sbG1hbmFnZXJldHctZXZlbnRzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX25vbmVfNjg2OTYyZjM5NGI4YzAyMVwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtb25lY29yZS1oLi5kZi1jbGFzcy1leHRlbnNpb25zXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX25vbmVfZTg1NDVhMTZmZTg4NjM0OVwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtb25lY29yZS1pLi5hdGVkdXNlcm1vZGUta2VybmVsXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX25vbmVfY2QzY2M0ZWRmZGNlOGZlYlwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtb25lY29yZS14YW1sdGlsZXJlbmRlcl8zMWJmMzg1NmFkMzY0ZTM1XzEwLjAuMTcxMzQuMV9ub25lXzQyNjJiMThmY2Y1OGRiMjhcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtcGRjLWV2ZW50cy1jb250YWluZXJfMzFiZjM4NTZhZDM2NGUzNV8xMC4wLjE3MTM0LjFfbm9uZV9hZTM5YjA1YzE2OTQ2ZGYzXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1hLi4tc2VydmljZS5kZXBsb3ltZW50XzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX25vbmVfMzFhYTE2OWRiNjdhYzNmZVwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1hLi5jYXRpb24tY3JlZHVpYnJva2VyXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX25vbmVfYjAzYmFjMzU3NjYyZWI2Mlwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1hLi5lbmNlLW1pdGlnYXRpb25zLWM0XzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX25vbmVfZjFhNWM1NWY1Yjc0MWRiY1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1hLi5lbmNlLW1pdGlnYXRpb25zLWM1XzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX25vbmVfZjFhNmM1YTk1YjczMzcxM1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1hLi5lc29sdmVydXguYXBweHNldHVwXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX25vbmVfYTExMDMwZmQ3N2I1YmM4NFwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1hLi5taXRpZ2F0aW9ucy1hY3dpbnJ0XzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX25vbmVfMTYxZTNjZDdlOTkzNTk3MVwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1hLi5vbi1hdXRodWktY29tcG9uZW50XzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX25vbmVfYzI1N2Q3M2Q3OTAyMWZmM1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1hLi50LWJ5dGVjb2RlZ2VuZXJhdG9yXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX25vbmVfYzVhMzc3OGJmZGJmYzg2MFwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1hZXJvbGl0ZV8zMWJmMzg1NmFkMzY0ZTM1XzEwLjAuMTcxMzQuMV9ub25lX2JjMDFiZDgxZDE0NjhlOTVcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1hcHBpZF8zMWJmMzg1NmFkMzY0ZTM1XzEwLjAuMTcxMzQuMV9ub25lXzNjY2M5Y2EzMWI1MWIxZjBcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1hcHByZXBfMzFiZjM4NTZhZDM2NGUzNV8xMC4wLjE3MTM0LjFfbm9uZV9mMTc5YjcxODhmZWE5YWQ0XCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1hcHB3aXpfMzFiZjM4NTZhZDM2NGUzNV8xMC4wLjE3MTM0LjFfbm9uZV9mMTQ2YzRkNDkwMTA4YzJmXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1hcHB4LW1vZHVsZXNfMzFiZjM4NTZhZDM2NGUzNV8xMC4wLjE3MTM0LjFfbm9uZV9kZDRlNjQwYzg5YTEzNDc5XCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1hdWRpby1hY21jb3JlY29kZWNzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX25vbmVfMDY1NTY3ZTY2MmYyYzZlY1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1hdWRpby1tY2lfMzFiZjM4NTZhZDM2NGUzNV8xMC4wLjE3MTM0LjFfbm9uZV8wMjhkZTU3ZDU1NjI2NWI2XCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1hdXRvZm10XzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX25vbmVfY2I3NGM5MzUyODU4N2RjMlwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1heGluc3RhbGxzZXJ2aWNlXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX25vbmVfYmM4NWRiM2NkYTE3YjA0MVwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1iLi5jb3JlLWZvbnRzLWVuZy1ib290XzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX25vbmVfMmExM2E4MWMxNzVkMTJlY1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1iLi5jb3JlLWZvbnRzLWpwbi1ib290XzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX25vbmVfNmU5Y2I2YzM5MmRjMTNhMlwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1iLi5lbnZpcm9ubWVudC13aW5kb3dzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX25vbmVfNGViOTIzODFmNWY1MDQwM1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1iLi5pYWdub3N0aWMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2NzLWN6XzU5MTM5ODVjMGQzYzFmZTFcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1iLi5pYWdub3N0aWMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2RhLWRrX2Y2NGQ3ODgzMDM4MjFiZTBcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1iLi5pYWdub3N0aWMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2VzLWVzXzljMzU0MDliZjQ1ZDZkZTRcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1iLi5pYWdub3N0aWMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2h1LWh1Xzg2NWQzNmUyY2I4ZjUzNjJcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1iLi5pYWdub3N0aWMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2l0LWl0XzI5MTRhY2UxYmU2MTY5YzRcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1iLi5pYWdub3N0aWMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2tvLWtyXzZlYTQwOGEzYTNlZDQyYjVcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1iLi5pYWdub3N0aWMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX25sLW5sXzU1NzVkNTE2N2QzZTc4NDZcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1iLi5pYWdub3N0aWMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3B0LWJyXzllMDYxYTNjNjBlYTc5ZGVcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1iLi5pYWdub3N0aWMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3B0LXB0XzllZTdlOWE4NjA1OWU5YmFcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1iLi5pYWdub3N0aWMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3J1LXJ1X2U1OGFmYjZjNDUzYjc3ZTZcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1iLi5uYWdlci1lZmkucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2NzLWN6XzIxMDIzNWQ4NmIxY2Y3ZmJcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1iLi5uYWdlci1lZmkucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2RhLWRrX2JlM2MxNWZmNjE2MmYzZmFcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1iLi5uYWdlci1lZmkucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2RlLWRlX2JiNjdhYjNiNjMzOTQ4OTRcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1iLi5uYWdlci1lZmkucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2VsLWdyXzYzZmRkOGNlNTI0ZWIxMjJcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1iLi5uYWdlci1lZmkucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2VzLWVzXzY0MjNkZTE4NTIzZTQ1ZmVcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1iLi5uYWdlci1lZmkucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2ZyLWNhX2ZmNTE5ZTYxNDllOGMyODZcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1iLi5uYWdlci1lZmkucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2hyLWhyXzRkMTdhZTk5MmEzMmNhMTRcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1iLi5uYWdlci1lZmkucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2h1LWh1XzRlNGJkNDVmMjk3MDJiN2NcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1iLi5uYWdlci1lZmkucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2x0LWx0X2RhNWRkMjIwZjNmNWU2NmNcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1iLi5uYWdlci1lZmkucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2x2LWx2X2RiMmI0MGE0ZjM3NDI3NWNcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1iLi5uYWdlci1lZmkucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX25sLW5sXzFkNjQ3MjkyZGIxZjUwNjBcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1iLi5uYWdlci1lZmkucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3B0LWJyXzY1ZjRiN2I4YmVjYjUxZjhcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1iLi5uYWdlci1lZmkucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3JvLXJvX2FiMTE0ZDVjYTRhMThkMzBcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1iLi5uYWdlci1lZmkucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3J1LXJ1X2FkNzk5OGU4YTMxYzUwMDBcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1iLi5uYWdlci1lZmkucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3NsLXNpXzRiYTZiZjRkOThkMDU1MGRcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1iLi5uYWdlci1lZmkucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3RyLXRyX2YyODFjZGE0ODkwMTVjNGNcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1iLi5uYWdlci1lZmkucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3poLWNuX2MzZGVlYmEyMzkzOTJlNmJcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1iLi5uYWdlci13bWl2MnByb3ZpZGVyXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX25vbmVfNWE5ODQ5OGE0ZTkyZTEzY1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1iLi5uZnJhc3RydWN0dXJlY2xpZW50XzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX25vbmVfZTVkMTFiYmI2YjEyNjY1OVwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1iLi5yeS1ldmVudHMtY29udGFpbmVyXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX25vbmVfNTI3YjNiN2VlYzUyZTIxM1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1iLi52aXJvbm1lbnQtb3MtbG9hZGVyXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX25vbmVfNDBhNzQ2ODlkNWQxNDYzMlwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1iaW5kLWZpbHRlcl8zMWJmMzg1NmFkMzY0ZTM1XzEwLjAuMTcxMzQuMV9ub25lX2JjN2I4MmZmM2RkMTliMTJcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1iaXRzLWlnZHNlYXJjaGVyXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX25vbmVfOTZlY2M5NjBmODJhYjU0Mlwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1ib290cmVzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX25vbmVfMjQ5ZDRkN2FlYjFiM2E4ZVwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1ib290dmlkXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX25vbmVfMWRmYTA3ZDBlZjVlYzI4NVwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1icm9rZXJiYXNlXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX25vbmVfNjhmOTMxNDRkNGQyMGZjNFwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1idHBhbnVpXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX25vbmVfNTIxMDQyN2M2MDM1ZDU2ZFwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1jLi5hbHByb3ZpZGVycy1saWJyYXJ5XzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX25vbmVfNzE5YjhjNzJjNTQ4NDc3N1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1jLi5ibHVldG9vdGgtdGVsZW1ldHJ5XzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX25vbmVfYTQ4MTY1ZDE1NWY5MWQ2M1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1jLi5icm9rZXJlZGFwaS1kZXNrdG9wXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX25vbmVfYWRiMWNlZTRmZTZhOWJkNFwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1jLi5lbnQteHBzZ2RpY29udmVydGVyXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX25vbmVfZjg2ZDAxZTE1NDdiMmQ3M1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1jLi5pYWxvZ2hvc3QuYXBweHNldHVwXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX25vbmVfYzdiZmIxMzg5MThjMWQyZVwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1jLi5tcGx1cy1ydW50aW1lLW10eGRtXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX25vbmVfZmQ3MGE0MzgzYzk2ZjIxN1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1jLi5uYW1lc3BhY2UtZG93bmxldmVsXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX25vbmVfYmQ3YTM2MTNmYjBlNDUxZFwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1jLi5vbGF0aW9uLWZpbGUtc3lzdGVtXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX25vbmVfYmNiN2Y2YWU3MjQxOTU0Y1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1jLi5zLWFkbWluLWNvbXBzdmNsaW5rXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX25vbmVfYjgxMmRlMjE0M2EzODFiMVwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1jLi5zYWJsZXNoZWxscHJveHlzdHViXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX25vbmVfYTA1Y2NkZmU1ODhjOTZlM1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1jLi5zZXJ2aWNlcy1jZXJ0Y2EtZGxsXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX25vbmVfZTk2ZWZhYjg1MzM4NzY1N1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1jLi50ZXJtYW5hZ2VtZW50c25hcGluXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX25vbmVfMzA5NmFjODJkZjgxNjAxZlwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1jYWJpbmV0XzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX25vbmVfMWNiZmRkNzQ0YjE2MWEzMFwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1jYW5vbnVybF8zMWJmMzg1NmFkMzY0ZTM1XzEwLjAuMTcxMzQuMV9ub25lXzhhYTM3MDBiZDM2Yjc4Y2FcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1jZG9zeXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2RhLWRrXzlmYWVlYzBlM2E2NjBlOGZcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1jZG9zeXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2RlLWRlXzljZGE4MTRhM2MzYzYzMjlcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1jZG9zeXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2VsLWdyXzQ1NzBhZWRkMmI1MWNiYjdcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1jZG9zeXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2VuLXVzXzQ1Y2I1NzQzMmIxYTZlZWVcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1jZG9zeXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2ZyLWZyX2U4NGUyYTI2MWUxMzc2ZjVcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1jZG9zeXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2hlLWlsXzJjNmRkMWM4MDQ4Mjc3ZTNcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1jZG9zeXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2h1LWh1XzJmYmVhYTZlMDI3MzQ2MTFcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1jZG9zeXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2l0LWl0X2QyNzYyMDZjZjU0NTVjNzNcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1jZG9zeXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2phLWpwXzc0OWI5Zjc5ZTg2MDZlNGVcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1jZG9zeXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX2tvLWtyXzE4MDU3YzJlZGFkMTM1NjRcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1jZG9zeXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX25iLW5vXzAwOTdmZDYzYjJmNjYxMjBcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1jZG9zeXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3B0LWJyXzQ3Njc4ZGM3OTdjZTZjOGRcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1jZG9zeXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3B0LXB0XzQ4NDk1ZDMzOTczZGRjNjlcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1jZG9zeXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3J1LXJ1XzhlZWM2ZWY3N2MxZjZhOTVcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1jZG9zeXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3N2LXNlXzJhZTc1OTZjNzM0ODc0ZjBcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1jZG9zeXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3RyLXRyX2QzZjRhM2IzNjIwNDc2ZTFcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1jZG9zeXMucmVzb3VyY2VzXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX3poLWNuX2E1NTFjMWIxMTIzYzQ5MDBcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1jZXJ0dXRpbF8zMWJmMzg1NmFkMzY0ZTM1XzEwLjAuMTcxMzQuMV9ub25lXzliMDU5NDQ0OWM4NmY4YjZcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1jaGtkc2tfMzFiZjM4NTZhZDM2NGUzNV8xMC4wLjE3MTM0LjFfbm9uZV9hNzY2ZTYzN2Y1ZGFlMzdhXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1jbGFzc2ljXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX25vbmVfNzZkYTdiMTA3N2RiMGQ3Nlwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1jbGlwXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX25vbmVfOGQ1YzZlNzQ4NTJiZDU3YVwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1jb20tY29tcGx1cy1tc2NfMzFiZjM4NTZhZDM2NGUzNV8xMC4wLjE3MTM0LjFfbm9uZV8wYjFkODNkOTUzZTljMmM3XCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1jb20tY29tcGx1cy1ydW50aW1lXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX25vbmVfM2Y0YjRiNjkzZGRiZjM3NFwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1jb20tZHRjLXRyYWNpbmdfMzFiZjM4NTZhZDM2NGUzNV8xMC4wLjE3MTM0LjFfbm9uZV9mZDVmZDcxYTViZjliYTJhXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1jb21jdGwzMi12NS5yZXNvdXJjZXNfMzFiZjM4NTZhZDM2NGUzNV8xMC4wLjE3MTM0LjFfcHQtcHRfNGFjODU2MTM2YjMwZDg4Ylwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1jb21jdGwzMi12NS5yZXNvdXJjZXNfMzFiZjM4NTZhZDM2NGUzNV8xMC4wLjE3MTM0LjFfc3Ytc2VfMmQ2NjUyNGM0NzNiNzExMlwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1jb21kbGczMi5yZXNvdXJjZXNfMzFiZjM4NTZhZDM2NGUzNV8xMC4wLjE3MTM0LjFfY3MtY3pfOGQyMDZmMzZmMjFkZjI2OFwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1jb21kbGczMi5yZXNvdXJjZXNfMzFiZjM4NTZhZDM2NGUzNV8xMC4wLjE3MTM0LjFfZGEtZGtfMmE1YTRmNWRlODYzZWU2N1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1jb21kbGczMi5yZXNvdXJjZXNfMzFiZjM4NTZhZDM2NGUzNV8xMC4wLjE3MTM0LjFfZW4tZ2JfYzhlZGZmNzRkZGVmOWIwMVwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1jb21kbGczMi5yZXNvdXJjZXNfMzFiZjM4NTZhZDM2NGUzNV8xMC4wLjE3MTM0LjFfZW4tdXNfZDA3NmJhOTJkOTE4NGVjNlwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1jb21kbGczMi5yZXNvdXJjZXNfMzFiZjM4NTZhZDM2NGUzNV8xMC4wLjE3MTM0LjFfZXMtZXNfZDA0MjE3NzZkOTNmNDA2Ylwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1jb21kbGczMi5yZXNvdXJjZXNfMzFiZjM4NTZhZDM2NGUzNV8xMC4wLjE3MTM0LjFfZXMtbXhfZDI3OTA1MWNkN2QzMjQxNlwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1jb21kbGczMi5yZXNvdXJjZXNfMzFiZjM4NTZhZDM2NGUzNV8xMC4wLjE3MTM0LjFfZnItY2FfNmI2ZmQ3YmZkMGU5YmNmM1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1jb21kbGczMi5yZXNvdXJjZXNfMzFiZjM4NTZhZDM2NGUzNV8xMC4wLjE3MTM0LjFfaGUtaWxfYjcxOTM1MTdiMjgwNTdiYlwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1jb21kbGczMi5yZXNvdXJjZXNfMzFiZjM4NTZhZDM2NGUzNV8xMC4wLjE3MTM0LjFfaHItaHJfYjkzNWU3ZjdiMTMzYzQ4MVwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1jb21kbGczMi5yZXNvdXJjZXNfMzFiZjM4NTZhZDM2NGUzNV8xMC4wLjE3MTM0LjFfaHUtaHVfYmE2YTBkYmRiMDcxMjVlOVwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1jb21kbGczMi5yZXNvdXJjZXNfMzFiZjM4NTZhZDM2NGUzNV8xMC4wLjE3MTM0LjFfaXQtaXRfNWQyMTgzYmNhMzQzM2M0Ylwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1jb21kbGczMi5yZXNvdXJjZXNfMzFiZjM4NTZhZDM2NGUzNV8xMC4wLjE3MTM0LjFfamEtanBfZmY0NzAyYzk5NjVlNGUyNlwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1jb21kbGczMi5yZXNvdXJjZXNfMzFiZjM4NTZhZDM2NGUzNV8xMC4wLjE3MTM0LjFfa28ta3JfYTJiMGRmN2U4OGNmMTUzY1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1jb21kbGczMi5yZXNvdXJjZXNfMzFiZjM4NTZhZDM2NGUzNV8xMC4wLjE3MTM0LjFfbHQtbHRfNDY3YzBiN2Y3YWY2ZTBkOVwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1jb21kbGczMi5yZXNvdXJjZXNfMzFiZjM4NTZhZDM2NGUzNV8xMC4wLjE3MTM0LjFfbHYtbHZfNDc0OTdhMDM3YTc1MjFjOVwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1jb21kbGczMi5yZXNvdXJjZXNfMzFiZjM4NTZhZDM2NGUzNV8xMC4wLjE3MTM0LjFfbmItbm9fOGI0MzYwYjM2MGY0NDBmOFwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1jb21kbGczMi5yZXNvdXJjZXNfMzFiZjM4NTZhZDM2NGUzNV8xMC4wLjE3MTM0LjFfbmwtbmxfODk4MmFiZjE2MjIwNGFjZFwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1jb21kbGczMi5yZXNvdXJjZXNfMzFiZjM4NTZhZDM2NGUzNV8xMC4wLjE3MTM0LjFfcHQtYnJfZDIxMmYxMTc0NWNjNGM2NVwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1jb21kbGczMi5yZXNvdXJjZXNfMzFiZjM4NTZhZDM2NGUzNV8xMC4wLjE3MTM0LjFfcHQtcHRfZDJmNGMwODM0NTNiYmM0MVwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1jb21kbGczMi5yZXNvdXJjZXNfMzFiZjM4NTZhZDM2NGUzNV8xMC4wLjE3MTM0LjFfc2stc2tfYjhiMmQ2ZjQxZjM3M2M5N1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1jb21kbGczMi5yZXNvdXJjZXNfMzFiZjM4NTZhZDM2NGUzNV8xMC4wLjE3MTM0LjFfc3ItLi4tcnNfNWRmNTYwZjA5NGUyZjZhYlwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1jb21kbGczMi5yZXNvdXJjZXNfMzFiZjM4NTZhZDM2NGUzNV8xMC4wLjE3MTM0LjFfc3Ytc2VfYjU5MmJjYmMyMTQ2NTRjOFwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1jb21kbGczMi5yZXNvdXJjZXNfMzFiZjM4NTZhZDM2NGUzNV8xMC4wLjE3MTM0LjFfdGgtdGhfNWE5Y2RlNmYxMjhiMTIwOVwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1jb21kbGczMi5yZXNvdXJjZXNfMzFiZjM4NTZhZDM2NGUzNV8xMC4wLjE3MTM0LjFfdWstdWFfZmE3ZmU5YWEwNzMzN2QwNVwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1jb21wdXRlci1uYW1lLXVpXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX25vbmVfZjM4N2IzZTY1N2FkOTQ0Y1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1jb25zb2xlLWRyaXZlcl8zMWJmMzg1NmFkMzY0ZTM1XzEwLjAuMTcxMzQuMV9ub25lX2VkMzY1N2IyMzZmZjQxZjhcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1jb250ZW50LWZpbHRlci1taW1lXzMxYmYzODU2YWQzNjRlMzVfNy4wLjE3MTM0LjFfbm9uZV82OWIwOWRkNGE5YTdlODUzXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1jb250ZW50LWZpbHRlci1ydGZfMzFiZjM4NTZhZDM2NGUzNV83LjAuMTcxMzQuMV9ub25lX2ExNjZhOWI2ZTEzMDdlN2ZcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1jb250cm9sXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX25vbmVfN2VlYzg1OTUxM2E4M2E1N1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1jb3Jlb3MtbWlud2luXzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX25vbmVfM2MwNDViMWI5NzhkYTNmOFwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1jb3Jlc3lzdGVtLXdwcl8zMWJmMzg1NmFkMzY0ZTM1XzEwLjAuMTcxMzQuMV9ub25lXzQ3YWZmYTgwMDExYmQ5NGVcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAyLmNoa1xhbWQ2NF9taWNyb3NvZnQtd2luZG93cy1jcmVkd2l6XzMxYmYzODU2YWQzNjRlMzVfMTAuMC4xNzEzNC4xX25vbmVfODU1YjNkMDJkNGZmODQ3Mlwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDAzLmNoa1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDA0LmNoa1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDA1LmNoa1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDA2LmNoa1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDA3LmNoa1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDA4LmNoa1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDA5LmNoa1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDEwLmNoa1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDExLmNoa1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDExLmNoa1xTdGF0ZVJlcG9zaXRvcnktTWFjaGluZS5zcmQtc2htLngyYW55bG9jaw==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDExLmNoa1xTdGF0ZVJlcG9zaXRvcnktTWFjaGluZS5zcmQtd2FsLngyYW55bG9jaw==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGZvdW5kLjAwMFxkaXIwMDEyLmNoa1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGluZXRwdWJcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGluZXRwdWJcY3VzdGVyclwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGluZXRwdWJcY3VzdGVyclxlbi1VU1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGluZXRwdWJcY3VzdGVyclxlbi1VU1w1MDAtMTAwLmFzcA==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGluZXRwdWJcaGlzdG9yeVwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGluZXRwdWJcaGlzdG9yeVxDRkdISVNUT1JZXzAwMDAwMDAwMDFcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGluZXRwdWJcbG9nc1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGluZXRwdWJcdGVtcFwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGluZXRwdWJcdGVtcFxhcHBQb29sc1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGluZXRwdWJcdGVtcFxBU1AgQ29tcGlsZWQgVGVtcGxhdGVzXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGluZXRwdWJcdGVtcFxJSVMgVGVtcG9yYXJ5IENvbXByZXNzZWQgRmlsZXNcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGluZXRwdWJcd3d3cm9vdFwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGluZXRwdWJcd3d3cm9vdFxhc3BuZXRfY2xpZW50XCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGluZXRwdWJcd3d3cm9vdFxhc3BuZXRfY2xpZW50XHN5c3RlbV93ZWJcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGluZXRwdWJcd3d3cm9vdFxhc3BuZXRfY2xpZW50XHN5c3RlbV93ZWJcMl8wXzUwNzI3XCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XGluZXRwdWJcd3d3cm9vdFxhc3BuZXRfY2xpZW50XHN5c3RlbV93ZWJcNF8wXzMwMzE5XCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XE1TT0NhY2hlXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XFBlcmZMb2dzXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XFBlcmZMb2dzXEFkbWluXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XFJlY292ZXJ5XCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XFN5c3RlbSBWb2x1bWUgSW5mb3JtYXRpb25cKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXC5iaW5cKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBjb2xvcnNcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBjb2xvcnNcY29sb3JzXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBjb2xvcnNcY29sb3JzXGV4YW1wbGVzXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBjb2xvcnNcY29sb3JzXGxpYlwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBjb2xvcnNcY29sb3JzXGxpYlxjdXN0b21cKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBjb2xvcnNcY29sb3JzXGxpYlxtYXBzXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBjb2xvcnNcY29sb3JzXGxpYlxzeXN0ZW1cKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBjb2xvcnNcY29sb3JzXHRoZW1lc1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBtb25nb2RiLWpzXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBtb25nb2RiLWpzXHNhc2xwcmVwXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBtb25nb2RiLWpzXHNhc2xwcmVwXGRpc3RcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcYWdlbnRcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcYWdlbnRcLnZzY29kZVwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcYWdlbnRcbm9kZV9tb2R1bGVzXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcYWdlbnRcbm9kZV9tb2R1bGVzXC5iaW5cKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcYWdlbnRcbm9kZV9tb2R1bGVzXGNoYWxrXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcYWdlbnRcbm9kZV9tb2R1bGVzXGNoYWxrXHNvdXJjZVwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcYWdlbnRcbm9kZV9tb2R1bGVzXGRheWpzXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcYWdlbnRcbm9kZV9tb2R1bGVzXGRheWpzXGVzbVwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcYWdlbnRcbm9kZV9tb2R1bGVzXGRheWpzXGVzbVxsb2NhbGVcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcYWdlbnRcbm9kZV9tb2R1bGVzXGRheWpzXGVzbVxwbHVnaW5cKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcYWdlbnRcbm9kZV9tb2R1bGVzXGRheWpzXGVzbVxwbHVnaW5cYWR2YW5jZWRGb3JtYXRcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcYWdlbnRcbm9kZV9tb2R1bGVzXGRheWpzXGVzbVxwbHVnaW5cYmFkTXV0YWJsZVwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcYWdlbnRcbm9kZV9tb2R1bGVzXGRheWpzXGVzbVxwbHVnaW5cYnVkZGhpc3RFcmFcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcYWdlbnRcbm9kZV9tb2R1bGVzXGRheWpzXGVzbVxwbHVnaW5cY2FsZW5kYXJcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcYWdlbnRcbm9kZV9tb2R1bGVzXGRheWpzXGVzbVxwbHVnaW5cY3VzdG9tUGFyc2VGb3JtYXRcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcYWdlbnRcbm9kZV9tb2R1bGVzXGRheWpzXGVzbVxwbHVnaW5cZGF5T2ZZZWFyXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcYWdlbnRcbm9kZV9tb2R1bGVzXGRheWpzXGVzbVxwbHVnaW5cZHVyYXRpb25cKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcYWdlbnRcbm9kZV9tb2R1bGVzXGRheWpzXGVzbVxwbHVnaW5caXNCZXR3ZWVuXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcYWdlbnRcbm9kZV9tb2R1bGVzXGRheWpzXGVzbVxwbHVnaW5caXNMZWFwWWVhclwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcYWdlbnRcbm9kZV9tb2R1bGVzXGRheWpzXGVzbVxwbHVnaW5caXNNb21lbnRcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcYWdlbnRcbm9kZV9tb2R1bGVzXGRheWpzXGVzbVxwbHVnaW5caXNvV2Vla1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcYWdlbnRcbm9kZV9tb2R1bGVzXGRheWpzXGVzbVxwbHVnaW5caXNvV2Vla3NJblllYXJcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcYWdlbnRcbm9kZV9tb2R1bGVzXGRheWpzXGVzbVxwbHVnaW5caXNTYW1lT3JBZnRlclwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcYWdlbnRcbm9kZV9tb2R1bGVzXGRheWpzXGVzbVxwbHVnaW5caXNTYW1lT3JCZWZvcmVcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcYWdlbnRcbm9kZV9tb2R1bGVzXGRheWpzXGVzbVxwbHVnaW5caXNUb2RheVwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcYWdlbnRcbm9kZV9tb2R1bGVzXGRheWpzXGVzbVxwbHVnaW5caXNUb21vcnJvd1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcYWdlbnRcbm9kZV9tb2R1bGVzXGRheWpzXGVzbVxwbHVnaW5caXNZZXN0ZXJkYXlcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcYWdlbnRcbm9kZV9tb2R1bGVzXGRheWpzXGVzbVxwbHVnaW5cbG9jYWxlRGF0YVwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcYWdlbnRcbm9kZV9tb2R1bGVzXGRheWpzXGVzbVxwbHVnaW5cbG9jYWxpemVkRm9ybWF0XCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcYWdlbnRcbm9kZV9tb2R1bGVzXGRheWpzXGVzbVxwbHVnaW5cbWluTWF4XCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcYWdlbnRcbm9kZV9tb2R1bGVzXGRheWpzXGVzbVxwbHVnaW5cb2JqZWN0U3VwcG9ydFwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcYWdlbnRcbm9kZV9tb2R1bGVzXGRheWpzXGVzbVxwbHVnaW5ccGx1cmFsR2V0U2V0XCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcYWdlbnRcbm9kZV9tb2R1bGVzXGRheWpzXGVzbVxwbHVnaW5ccXVhcnRlck9mWWVhclwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcYWdlbnRcbm9kZV9tb2R1bGVzXGRheWpzXGVzbVxwbHVnaW5ccmVsYXRpdmVUaW1lXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcYWdlbnRcbm9kZV9tb2R1bGVzXGRheWpzXGVzbVxwbHVnaW5cdGltZXpvbmVcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcYWdlbnRcbm9kZV9tb2R1bGVzXGRheWpzXGVzbVxwbHVnaW5cdG9BcnJheVwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcYWdlbnRcbm9kZV9tb2R1bGVzXGRheWpzXGVzbVxwbHVnaW5cdG9PYmplY3RcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcYWdlbnRcbm9kZV9tb2R1bGVzXGRheWpzXGVzbVxwbHVnaW5cdXBkYXRlTG9jYWxlXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcYWdlbnRcbm9kZV9tb2R1bGVzXGRheWpzXGVzbVxwbHVnaW5cdXRjXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcYWdlbnRcbm9kZV9tb2R1bGVzXGRheWpzXGVzbVxwbHVnaW5cd2Vla2RheVwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcYWdlbnRcbm9kZV9tb2R1bGVzXGRheWpzXGVzbVxwbHVnaW5cd2Vla09mWWVhclwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcYWdlbnRcbm9kZV9tb2R1bGVzXGRheWpzXGVzbVxwbHVnaW5cd2Vla1llYXJcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcYWdlbnRcbm9kZV9tb2R1bGVzXGRheWpzXGxvY2FsZVwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcYWdlbnRcbm9kZV9tb2R1bGVzXGRheWpzXHBsdWdpblwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcYWdlbnRcbm9kZV9tb2R1bGVzXGRlYnVnXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcYWdlbnRcbm9kZV9tb2R1bGVzXGRlYnVnXHNyY1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcYWdlbnRcbm9kZV9tb2R1bGVzXGV2ZW50ZW1pdHRlcjJcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcYWdlbnRcbm9kZV9tb2R1bGVzXGV2ZW50ZW1pdHRlcjJcbGliXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcYWdlbnRcbm9kZV9tb2R1bGVzXGxydS1jYWNoZVwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcYWdlbnRcbm9kZV9tb2R1bGVzXG1zXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcYWdlbnRcbm9kZV9tb2R1bGVzXHNlbXZlclwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcYWdlbnRcbm9kZV9tb2R1bGVzXHNlbXZlclxiaW5cKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcYWdlbnRcbm9kZV9tb2R1bGVzXHNlbXZlclxjbGFzc2VzXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcYWdlbnRcbm9kZV9tb2R1bGVzXHNlbXZlclxmdW5jdGlvbnNcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcYWdlbnRcbm9kZV9tb2R1bGVzXHNlbXZlclxpbnRlcm5hbFwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcYWdlbnRcbm9kZV9tb2R1bGVzXHNlbXZlclxyYW5nZXNcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcYWdlbnRcbm9kZV9tb2R1bGVzXHdzXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcYWdlbnRcbm9kZV9tb2R1bGVzXHdzXGxpYlwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcYWdlbnRcc3JjXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcYWdlbnRcc3JjXHB1c2hcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcYWdlbnRcc3JjXHJldmVyc2VcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcYWdlbnRcc3JjXHRyYW5zcG9ydGVyc1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcYWdlbnRcc3JjXHV0aWxzXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcYWdlbnRcc3JjXHV0aWxzXHByb2Jlc1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcaW9cKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcaW9cLnZzY29kZVwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcaW9cYnVpbGRcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcaW9cYnVpbGRcbWFpblwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcaW9cYnVpbGRcbWFpblxmZWF0dXJlc1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcaW9cYnVpbGRcbWFpblxtZXRyaWNzXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcaW9cYnVpbGRcbWFpblxwcm9maWxlcnNcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcaW9cYnVpbGRcbWFpblxzZXJ2aWNlc1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcaW9cYnVpbGRcbWFpblx0cmFuc3BvcnRzXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcaW9cYnVpbGRcbWFpblx1dGlsc1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcaW9cYnVpbGRcbWFpblx1dGlsc1xtZXRyaWNzXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcaW9cZG9jc1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcaW9cbm9kZV9tb2R1bGVzXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcaW9cbm9kZV9tb2R1bGVzXC5iaW5cKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcaW9cbm9kZV9tb2R1bGVzXGFzeW5jXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcaW9cbm9kZV9tb2R1bGVzXGFzeW5jXGRpc3RcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcaW9cbm9kZV9tb2R1bGVzXGFzeW5jXGludGVybmFsXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcaW9cbm9kZV9tb2R1bGVzXGRlYnVnXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcaW9cbm9kZV9tb2R1bGVzXGRlYnVnXHNyY1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcaW9cbm9kZV9tb2R1bGVzXGV2ZW50ZW1pdHRlcjJcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcaW9cbm9kZV9tb2R1bGVzXGV2ZW50ZW1pdHRlcjJcbGliXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcaW9cbm9kZV9tb2R1bGVzXGxydS1jYWNoZVwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcaW9cbm9kZV9tb2R1bGVzXG1zXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcaW9cbm9kZV9tb2R1bGVzXHNlbXZlclwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcaW9cbm9kZV9tb2R1bGVzXHNlbXZlclxiaW5cKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcaW9cbm9kZV9tb2R1bGVzXHNlbXZlclxjbGFzc2VzXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcaW9cbm9kZV9tb2R1bGVzXHNlbXZlclxmdW5jdGlvbnNcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcaW9cbm9kZV9tb2R1bGVzXHNlbXZlclxpbnRlcm5hbFwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcaW9cbm9kZV9tb2R1bGVzXHNlbXZlclxyYW5nZXNcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcaW9ccHJlc1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcanMtYXBpXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcanMtYXBpXGRpc3RcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcanMtYXBpXG5vZGVfbW9kdWxlc1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcanMtYXBpXG5vZGVfbW9kdWxlc1xhc3luY1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcanMtYXBpXG5vZGVfbW9kdWxlc1xhc3luY1xkaXN0XCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcanMtYXBpXG5vZGVfbW9kdWxlc1xhc3luY1xpbnRlcm5hbFwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcanMtYXBpXG5vZGVfbW9kdWxlc1xkZWJ1Z1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcanMtYXBpXG5vZGVfbW9kdWxlc1xkZWJ1Z1xzcmNcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcanMtYXBpXG5vZGVfbW9kdWxlc1xldmVudGVtaXR0ZXIyXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcanMtYXBpXG5vZGVfbW9kdWxlc1xldmVudGVtaXR0ZXIyXGxpYlwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcanMtYXBpXG5vZGVfbW9kdWxlc1xtc1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcanMtYXBpXG5vZGVfbW9kdWxlc1x3c1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcanMtYXBpXG5vZGVfbW9kdWxlc1x3c1xsaWJcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcanMtYXBpXHNyY1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcanMtYXBpXHNyY1xhdXRoX3N0cmF0ZWdpZXNcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJcanMtYXBpXHNyY1x1dGlsc1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJccG0yLXZlcnNpb24tY2hlY2tcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJccG0yLXZlcnNpb24tY2hlY2tcbm9kZV9tb2R1bGVzXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJccG0yLXZlcnNpb24tY2hlY2tcbm9kZV9tb2R1bGVzXGRlYnVnXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJccG0yLXZlcnNpb24tY2hlY2tcbm9kZV9tb2R1bGVzXGRlYnVnXHNyY1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBwbTJccG0yLXZlcnNpb24tY2hlY2tcbm9kZV9tb2R1bGVzXG1zXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBzb2NrZXQuaW9cKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBzb2NrZXQuaW9cY29tcG9uZW50LWVtaXR0ZXJcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBzb2NrZXQuaW9cY29tcG9uZW50LWVtaXR0ZXJcbGliXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBzb2NrZXQuaW9cY29tcG9uZW50LWVtaXR0ZXJcbGliXGNqc1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEBzb2NrZXQuaW9cY29tcG9uZW50LWVtaXR0ZXJcbGliXGVzbVwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEB0b290YWxsbmF0ZVwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEB0b290YWxsbmF0ZVxxdWlja2pzLWVtc2NyaXB0ZW5cKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEB0b290YWxsbmF0ZVxxdWlja2pzLWVtc2NyaXB0ZW5cY1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEB0b290YWxsbmF0ZVxxdWlja2pzLWVtc2NyaXB0ZW5cZGlzdFwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEB0b290YWxsbmF0ZVxxdWlja2pzLWVtc2NyaXB0ZW5cZGlzdFxnZW5lcmF0ZWRcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEB0eXBlc1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEB0eXBlc1xjb29raWVcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEB0eXBlc1xjb3JzXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEB0eXBlc1xub2RlXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEB0eXBlc1xub2RlXGFzc2VydFwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEB0eXBlc1xub2RlXGRuc1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEB0eXBlc1xub2RlXGZzXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEB0eXBlc1xub2RlXHJlYWRsaW5lXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEB0eXBlc1xub2RlXHN0cmVhbVwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEB0eXBlc1xub2RlXHRpbWVyc1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEB0eXBlc1x3ZWJpZGwtY29udmVyc2lvbnNcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEB0eXBlc1x3aGF0d2ctdXJsXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXEB0eXBlc1x3aGF0d2ctdXJsXGxpYlwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGFiYnJldlwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGFjY2VwdHNcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGFnZW50LWJhc2VcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGFnZW50LWJhc2VcZGlzdFwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGFnZW50LWJhc2Vcbm9kZV9tb2R1bGVzXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGFnZW50LWJhc2Vcbm9kZV9tb2R1bGVzXGRlYnVnXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGFnZW50LWJhc2Vcbm9kZV9tb2R1bGVzXGRlYnVnXHNyY1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGFnZW50LWJhc2Vcbm9kZV9tb2R1bGVzXG1zXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGFtcC1tZXNzYWdlXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGFtcFwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGFtcFxsaWJcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGFuc2ktY29sb3JzXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGFuc2ktY29sb3JzXHR5cGVzXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGFuc2ktcmVnZXhcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGFuc2ktc3R5bGVzXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGFueW1hdGNoXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGFyZ3BhcnNlXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGFyZ3BhcnNlXGxpYlwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGFyZ3BhcnNlXGxpYlxhY3Rpb25cKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGFyZ3BhcnNlXGxpYlxhY3Rpb25cYXBwZW5kXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGFyZ3BhcnNlXGxpYlxhY3Rpb25cc3RvcmVcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGFyZ3BhcnNlXGxpYlxhcmd1bWVudFwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGFyZ3BhcnNlXGxpYlxoZWxwXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGFycmF5LWVhY2hcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGFycmF5LWZsYXR0ZW5cKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGFycmF5LXNsaWNlXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGFzdC10eXBlc1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGFzdC10eXBlc1wuZ2l0aHViXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGFzdC10eXBlc1wuZ2l0aHViXHdvcmtmbG93c1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGFzdC10eXBlc1xkZWZcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGFzdC10eXBlc1xnZW5cKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGFzdC10eXBlc1xsaWJcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGFzdC10eXBlc1xub2RlX21vZHVsZXNcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGFzdC10eXBlc1xub2RlX21vZHVsZXNcdHNsaWJcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGFzdC10eXBlc1xub2RlX21vZHVsZXNcdHNsaWJcbW9kdWxlc1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGFzeW5jXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGFzeW5jXGRpc3RcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGFzeW5jXGludGVybmFsXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGFzeW5ja2l0XCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGFzeW5ja2l0XGxpYlwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGF4aW9zXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGF4aW9zXGRpc3RcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGF4aW9zXGRpc3RcYnJvd3Nlclwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGF4aW9zXGRpc3RcZXNtXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGF4aW9zXGRpc3Rcbm9kZVwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGF4aW9zXGxpYlwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGF4aW9zXGxpYlxhZGFwdGVyc1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGF4aW9zXGxpYlxjYW5jZWxcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGF4aW9zXGxpYlxjb3JlXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGF4aW9zXGxpYlxkZWZhdWx0c1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGF4aW9zXGxpYlxlbnZcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGF4aW9zXGxpYlxlbnZcY2xhc3Nlc1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGF4aW9zXGxpYlxoZWxwZXJzXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGF4aW9zXGxpYlxwbGF0Zm9ybVwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGF4aW9zXGxpYlxwbGF0Zm9ybVxicm93c2VyXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGF4aW9zXGxpYlxwbGF0Zm9ybVxicm93c2VyXGNsYXNzZXNcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGF4aW9zXGxpYlxwbGF0Zm9ybVxjb21tb25cKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGF4aW9zXGxpYlxwbGF0Zm9ybVxub2RlXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGF4aW9zXGxpYlxwbGF0Zm9ybVxub2RlXGNsYXNzZXNcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGJhYmVsXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGJhYmVsXGxpYlwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGJhbGFuY2VkLW1hdGNoXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGJhbGFuY2VkLW1hdGNoXC5naXRodWJcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGJhc2U2NGlkXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGJhc2U2NGlkXGxpYlwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGJhc2ljLWZ0cFwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGJhc2ljLWZ0cFxkaXN0XCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGJpbmFyeS1leHRlbnNpb25zXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGJsZXNzZWRcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGJsZXNzZWRcYmluXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGJsZXNzZWRcYnJvd3Nlclwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGJsZXNzZWRcZXhhbXBsZVwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGJsZXNzZWRcZXhhbXBsZVxhbnNpLXZpZXdlclwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGJsZXNzZWRcbGliXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGJsZXNzZWRcbGliXHdpZGdldHNcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGJsZXNzZWRcdXNyXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGJsZXNzZWRcdXNyXGZvbnRzXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGJsZXNzZWRcdmVuZG9yXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGJsdWViaXJkXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGJsdWViaXJkXGpzXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGJsdWViaXJkXGpzXGJyb3dzZXJcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGJsdWViaXJkXGpzXHJlbGVhc2VcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGJvZGVjXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGJvZHktcGFyc2VyXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGJvZHktcGFyc2VyXGxpYlwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGJvZHktcGFyc2VyXGxpYlx0eXBlc1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGJyYWNlLWV4cGFuc2lvblwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGJyYWNlc1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGJyYWNlc1xsaWJcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGJyb3dzZXItc3Rkb3V0XCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGJzb25cKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGJzb25cZXRjXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGJzb25cbGliXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGJzb25cc3JjXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGJzb25cc3JjXHBhcnNlclwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGJzb25cc3JjXHBhcnNlclxvbl9kZW1hbmRcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGJzb25cc3JjXHV0aWxzXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGJzb25cdmVuZG9yXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGJzb25cdmVuZG9yXGJhc2U2NFwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGJzb25cdmVuZG9yXHRleHQtZW5jb2RpbmdcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGJzb25cdmVuZG9yXHRleHQtZW5jb2RpbmdcbGliXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGJ1ZmZlci1mcm9tXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGJ5dGVzXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGNhbGwtYmluZFwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGNhbGwtYmluZFwuZ2l0aHViXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGNhbGwtYmluZFx0ZXN0XCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGNhbWVsY2FzZVwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGNoYWxrXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGNoYWxrXHNvdXJjZVwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGNoYXJtXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGNoYXJtXGV4YW1wbGVcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGNoYXJtXGxpYlwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGNob2tpZGFyXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGNob2tpZGFyXGxpYlwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGNob2tpZGFyXHR5cGVzXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGNsaS10YWJsZWF1XCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGNsaS10YWJsZWF1XGxpYlwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGNsaS10YWJsZWF1XG5vZGVfbW9kdWxlc1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGNsaS10YWJsZWF1XG5vZGVfbW9kdWxlc1xjaGFsa1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGNsaS10YWJsZWF1XG5vZGVfbW9kdWxlc1xjaGFsa1xzb3VyY2VcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGNsaXVpXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGNsaXVpXGJ1aWxkXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGNsaXVpXGJ1aWxkXGxpYlwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGNsb3VkaW5hcnlcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGNsb3VkaW5hcnlcbGliXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGNsb3VkaW5hcnlcbGliXGFuYWx5c2lzXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGNsb3VkaW5hcnlcbGliXGFwaV9jbGllbnRcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGNsb3VkaW5hcnlcbGliXGNhY2hlXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGNsb3VkaW5hcnlcbGliXHByb3Zpc2lvbmluZ1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGNsb3VkaW5hcnlcbGliXHV0aWxzXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGNsb3VkaW5hcnlcbGliXHV0aWxzXGFuYWx5dGljc1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGNsb3VkaW5hcnlcbGliXHV0aWxzXGVuY29kaW5nXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGNsb3VkaW5hcnlcbGliXHV0aWxzXHBhcnNpbmdcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGNsb3VkaW5hcnlcbGliXHYyXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGNsb3VkaW5hcnlcdHlwZXNcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGNvbG9yLWNvbnZlcnRcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGNvbG9yLW5hbWVcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGNvbG9yc1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGNvbG9yc1xleGFtcGxlc1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGNvbG9yc1xsaWJcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGNvbG9yc1xsaWJcY3VzdG9tXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGNvbG9yc1xsaWJcbWFwc1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGNvbG9yc1xsaWJcc3lzdGVtXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGNvbG9yc1x0aGVtZXNcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGNvbWJpbmVkLXN0cmVhbVwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGNvbWJpbmVkLXN0cmVhbVxsaWJcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGNvbW1hbmRlclwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGNvbW1hbmRlclx0eXBpbmdzXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGNvbmNhdC1tYXBcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGNvbmNhdC1tYXBcZXhhbXBsZVwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGNvbmNhdC1tYXBcdGVzdFwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGNvbm5lY3RcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGNvbm5lY3Rcbm9kZV9tb2R1bGVzXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGNvbm5lY3Rcbm9kZV9tb2R1bGVzXGZpbmFsaGFuZGxlclwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGNvbm5lY3Rcbm9kZV9tb2R1bGVzXG9uLWZpbmlzaGVkXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGNvbm5lY3Rcbm9kZV9tb2R1bGVzXHN0YXR1c2VzXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGNvbnRlbnQtZGlzcG9zaXRpb25cKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGNvbnRlbnQtdHlwZVwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGNvb2tpZS1zaWduYXR1cmVcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGNvb2tpZVwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGNvcnNcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGNvcnNcbGliXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGNyb25lclwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGNyb25lclxkaXN0XCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGNyb25lclxzcmNcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGNyb25lclx0eXBlc1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGN1bHZlcnRcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGN1c3RvbS1ldmVudFwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGN1c3RvbS1ldmVudFx0ZXN0XCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGRhdGEtdXJpLXRvLWJ1ZmZlclwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGRhdGEtdXJpLXRvLWJ1ZmZlclxkaXN0XCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGRhdGUtZm9ybWF0XCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGRhdGUtZm9ybWF0XGxpYlwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGRhdGVmb3JtYXRcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGRhdGVmb3JtYXRcbGliXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGRheWpzXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGRheWpzXGVzbVwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGRheWpzXGVzbVxsb2NhbGVcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGRheWpzXGVzbVxwbHVnaW5cKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGRheWpzXGVzbVxwbHVnaW5cYWR2YW5jZWRGb3JtYXRcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGRheWpzXGVzbVxwbHVnaW5cYXJyYXlTdXBwb3J0XCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGRheWpzXGVzbVxwbHVnaW5cYmFkTXV0YWJsZVwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGRheWpzXGVzbVxwbHVnaW5cYmlnSW50U3VwcG9ydFwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGRheWpzXGVzbVxwbHVnaW5cYnVkZGhpc3RFcmFcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGRheWpzXGVzbVxwbHVnaW5cY2FsZW5kYXJcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGRheWpzXGVzbVxwbHVnaW5cY3VzdG9tUGFyc2VGb3JtYXRcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGRheWpzXGVzbVxwbHVnaW5cZGF5T2ZZZWFyXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGRheWpzXGVzbVxwbHVnaW5cZGV2SGVscGVyXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGRheWpzXGVzbVxwbHVnaW5cZHVyYXRpb25cKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGRheWpzXGVzbVxwbHVnaW5caXNCZXR3ZWVuXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGRheWpzXGVzbVxwbHVnaW5caXNMZWFwWWVhclwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGRheWpzXGVzbVxwbHVnaW5caXNNb21lbnRcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGRheWpzXGVzbVxwbHVnaW5caXNvV2Vla1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGRheWpzXGVzbVxwbHVnaW5caXNvV2Vla3NJblllYXJcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGRheWpzXGVzbVxwbHVnaW5caXNTYW1lT3JBZnRlclwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGRheWpzXGVzbVxwbHVnaW5caXNTYW1lT3JCZWZvcmVcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGRheWpzXGVzbVxwbHVnaW5caXNUb2RheVwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGRheWpzXGVzbVxwbHVnaW5caXNUb21vcnJvd1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGRheWpzXGVzbVxwbHVnaW5caXNZZXN0ZXJkYXlcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGRheWpzXGVzbVxwbHVnaW5cbG9jYWxlRGF0YVwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGRheWpzXGVzbVxwbHVnaW5cbG9jYWxpemVkRm9ybWF0XCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGRheWpzXGVzbVxwbHVnaW5cbWluTWF4XCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGRheWpzXGVzbVxwbHVnaW5cb2JqZWN0U3VwcG9ydFwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGRheWpzXGVzbVxwbHVnaW5ccGx1cmFsR2V0U2V0XCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGRheWpzXGVzbVxwbHVnaW5ccHJlUGFyc2VQb3N0Rm9ybWF0XCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGRheWpzXGVzbVxwbHVnaW5ccXVhcnRlck9mWWVhclwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGRheWpzXGVzbVxwbHVnaW5ccmVsYXRpdmVUaW1lXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGRheWpzXGVzbVxwbHVnaW5cdGltZXpvbmVcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGRheWpzXGVzbVxwbHVnaW5cdG9BcnJheVwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGRheWpzXGVzbVxwbHVnaW5cdG9PYmplY3RcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGRheWpzXGVzbVxwbHVnaW5cdXBkYXRlTG9jYWxlXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGRheWpzXGVzbVxwbHVnaW5cdXRjXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGRheWpzXGVzbVxwbHVnaW5cd2Vla2RheVwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGRheWpzXGVzbVxwbHVnaW5cd2Vla09mWWVhclwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGRheWpzXGVzbVxwbHVnaW5cd2Vla1llYXJcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGRheWpzXGxvY2FsZVwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGRheWpzXHBsdWdpblwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGRlYnVnXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGRlYnVnXHNyY1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGRlY2FtZWxpemVcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGRlZmluZS1kYXRhLXByb3BlcnR5XCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGRlZmluZS1kYXRhLXByb3BlcnR5XC5naXRodWJcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGRlZmluZS1kYXRhLXByb3BlcnR5XHRlc3RcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGRlZ2VuZXJhdG9yXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGRlZ2VuZXJhdG9yXGRpc3RcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGRlbGF5ZWQtc3RyZWFtXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGRlbGF5ZWQtc3RyZWFtXGxpYlwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGRlcGRcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGRlcGRcbGliXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGRlcGRcbGliXGJyb3dzZXJcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGRlc3Ryb3lcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGRldGVjdC1maWxlXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGRpXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGRpXGxpYlwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGRpZmZcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGRpZmZcZGlzdFwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGRpZmZcbGliXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGRpZmZcbGliXGNvbnZlcnRcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGRpZmZcbGliXGRpZmZcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGRpZmZcbGliXHBhdGNoXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGRpZmZcbGliXHV0aWxcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGRvbS1zZXJpYWxpemVcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGRvbS1zZXJpYWxpemVcdGVzdFwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGVlLWZpcnN0XCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGVtb2ppLXJlZ2V4XCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGVtb2ppLXJlZ2V4XGVzMjAxNVwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGVuY29kZXVybFwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGVuZ2luZS5pby1wYXJzZXJcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGVuZ2luZS5pby1wYXJzZXJcYnVpbGRcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGVuZ2luZS5pby1wYXJzZXJcYnVpbGRcY2pzXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGVuZ2luZS5pby1wYXJzZXJcYnVpbGRcY2pzXGNvbnRyaWJcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGVuZ2luZS5pby1wYXJzZXJcYnVpbGRcZXNtXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGVuZ2luZS5pby1wYXJzZXJcYnVpbGRcZXNtXGNvbnRyaWJcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGVuZ2luZS5pb1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGVuZ2luZS5pb1xidWlsZFwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGVuZ2luZS5pb1xidWlsZFxwYXJzZXItdjNcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGVuZ2luZS5pb1xidWlsZFx0cmFuc3BvcnRzLXV3c1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGVuZ2luZS5pb1xidWlsZFx0cmFuc3BvcnRzXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGVuZ2luZS5pb1xub2RlX21vZHVsZXNcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGVuZ2luZS5pb1xub2RlX21vZHVsZXNcY29va2llXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGVuZ2luZS5pb1xub2RlX21vZHVsZXNcZGVidWdcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGVuZ2luZS5pb1xub2RlX21vZHVsZXNcZGVidWdcc3JjXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGVuZ2luZS5pb1xub2RlX21vZHVsZXNcbXNcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGVucXVpcmVyXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGVucXVpcmVyXGxpYlwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGVucXVpcmVyXGxpYlxwcm9tcHRzXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGVucXVpcmVyXGxpYlx0eXBlc1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGVudFwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGVudFwuZ2l0aHViXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGVudFxleGFtcGxlc1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGVudFx0ZXN0XCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGVzLWRlZmluZS1wcm9wZXJ0eVwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGVzLWRlZmluZS1wcm9wZXJ0eVwuZ2l0aHViXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGVzLWRlZmluZS1wcm9wZXJ0eVx0ZXN0XCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGVzLWVycm9yc1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGVzLWVycm9yc1wuZ2l0aHViXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGVzLWVycm9yc1x0ZXN0XCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGVzY2FsYWRlXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGVzY2FsYWRlXGRpc3RcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGVzY2FsYWRlXHN5bmNcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGVzY2FwZS1odG1sXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGVzY2FwZS1zdHJpbmctcmVnZXhwXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGVzY29kZWdlblwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGVzY29kZWdlblxiaW5cKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGVzcHJpbWFcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGVzcHJpbWFcYmluXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGVzcHJpbWFcZGlzdFwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGVzdHJhdmVyc2VcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGVzdXRpbHNcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGVzdXRpbHNcbGliXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGV0YWdcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGV2ZW50ZW1pdHRlcjJcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGV2ZW50ZW1pdHRlcjJcbGliXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGV2ZW50ZW1pdHRlcjNcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGV2ZW50ZW1pdHRlcjNcdW1kXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGV4aXRcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGV4aXRcbGliXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGV4aXRcdGVzdFwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGV4aXRcdGVzdFxmaXh0dXJlc1wq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGV4cGFuZC10aWxkZVwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGV4cHJlc3NcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGV4cHJlc3NcbGliXCo=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGV4cHJlc3NcbGliXG1pZGRsZXdhcmVcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGV4cHJlc3NcbGliXHJvdXRlclwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGV4dGVuZFwq","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFw/XEM6XHRlbXBkaXJcbm9kZV9tb2R1bGVzXGV4dHJhcmVxcDJcKg==","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XEFwcERhdGFcTG9jYWxcVGVtcFw=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"XERvc0RldmljZXNcTTo=","type":"Ansi","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFBJUEVcbHNhcnBj","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XFBJUEVcc3J2c3Zj","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"XTFdPV1BXUddT11VXVtdZV1nXW1deV0=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"XVEgZShmOT58VV4kUjIyMGY5YTlmLWE5YTYtNDFiMi04ZGJlLTZlZTBiMDViOGEzMg==","type":"Ansi","source":"File String Dumps","process":null,"filename":"weekdayRange.d.ts.map.x2anylock","compromised":null,"detection_total":null,"total":null},{"value":"XXl7PzM7L2dCVno4VFw8M35EODlvdnlBZixuMjIwZjlhOWYtYTlhNi00MWIyLThkYmUtNmVlMGIwNWI4YTMy","type":"Ansi","source":"File String Dumps","process":null,"filename":"isUndefined.js.x2anylock","compromised":null,"detection_total":null,"total":null},{"value":"XnlfMzE3d1dPMjIwZjlhOWYtYTlhNi00MWIyLThkYmUtNmVlMGIwNWI4YTMy","type":"Ansi","source":"File String Dumps","process":null,"filename":"pm2-runtime.x2anylock","compromised":null,"detection_total":null,"total":null},{"value":"X19jcnRfc3RydG94OjpmbG9hdGluZ19wb2ludF92YWx1ZTo6YXNfZG91Ymxl","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"X19jcnRfc3RydG94OjpmbG9hdGluZ19wb2ludF92YWx1ZTo6YXNfZmxvYXQ=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"YGxvY2FsIHN0YXRpYyBkZXN0cnVjdG9yIGhlbHBlcic=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"YGxvY2FsIHN0YXRpYyBndWFyZCc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"YGxvY2FsIHN0YXRpYyB0aHJlYWQgZ3VhcmQn","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"YGxvY2FsIHZmdGFibGUgY29uc3RydWN0b3IgY2xvc3VyZSc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"YGxvY2FsIHZmdGFibGUn","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"QWFwaS1tcy13aW4tY29yZS1maWJlcnMtbDEtMS0x","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"QWNxdWlyZVNSV0xvY2tFeGNsdXNpdmU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"YWRkcmVzcyBmYW1pbHkgbm90IHN1cHBvcnRlZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"YWRkcmVzcyBpbiB1c2U=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"YWRkcmVzcyBub3QgYXZhaWxhYmxl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"QUVTTkk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"YWdudHN2Yy5leGU=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"YXBpLW1zLXdpbi1hcHBtb2RlbC1ydW50aW1lLWwxLTEtMg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"YXBpLW1zLXdpbi1jb3JlLWRhdGV0aW1lLWwxLTEtMQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"YXBpLW1zLXdpbi1jb3JlLWZpYmVycy1sMS0xLTE=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"YXBpLW1zLXdpbi1jb3JlLWZpYmVycy1sMS0xLTI=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"YXBpLW1zLXdpbi1jb3JlLWZpbGUtbDEtMi0y","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"YXBpLW1zLXdpbi1jb3JlLWZpbGUtbDEtMi00","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"YXBpLW1zLXdpbi1jb3JlLWZpbGUtbDItMS00","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"YXBpLW1zLXdpbi1jb3JlLWxvY2FsaXphdGlvbi1sMS0yLTE=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"YXBpLW1zLXdpbi1jb3JlLWxvY2FsaXphdGlvbi1vYnNvbGV0ZS1sMS0yLTA=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"YXBpLW1zLXdpbi1jb3JlLXByb2Nlc3N0aHJlYWRzLWwxLTEtMg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"YXBpLW1zLXdpbi1jb3JlLXN0cmluZy1sMS0xLTA=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"YXBpLW1zLXdpbi1jb3JlLXN5bmNoLWwxLTItMA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"YXBpLW1zLXdpbi1jb3JlLXN5bmNoLWwxLTItMC5kbGw=","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"YXBpLW1zLXdpbi1jb3JlLXN5c2luZm8tbDEtMi0x","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"YXBpLW1zLXdpbi1jb3JlLXdpbnJ0LWwxLTEtMA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"YXBpLW1zLXdpbi1jb3JlLXhzdGF0ZS1sMi0xLTA=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"YXBpLW1zLXdpbi1ydGNvcmUtbnR1c2VyLXdpbmRvdy1sMS0xLTA=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"YXBpLW1zLXdpbi1zZWN1cml0eS1zeXN0ZW1mdW5jdGlvbnMtbDEtMS0w","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"QXBwUG9saWN5R2V0UHJvY2Vzc1Rlcm1pbmF0aW9uTWV0aG9k","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"QXBwUG9saWN5R2V0VGhyZWFkSW5pdGlhbGl6YXRpb25UeXBl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"QXJlRmlsZUFwaXNBTlNJ","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"YXV0b3J1bi5pbmY=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"QiNCKUIvQkNCU0JVQltCYUJzQn1C","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"QmFja3VwRXhlY0FnZW50QWNjZWxlcmF0b3I=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"QmFja3VwRXhlY0FnZW50QnJvd3Nlcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"QmFja3VwRXhlY0RpdmVjaU1lZGlhU2VydmljZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"QmFja3VwRXhlY0pvYkVuZ2luZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"QmFja3VwRXhlY01hbmFnZW1lbnRTZXJ2aWNl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"QmFja3VwRXhlY1JQQ1NlcnZpY2U=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"QmFja3VwRXhlY1ZTU1Byb3ZpZGVy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"YmFkIGFkZHJlc3M=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"YmFkIGNvbnZlcnNpb24=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"YmFkIGZpbGUgZGVzY3JpcHRvcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"YmFkIGxvY2FsZSBuYW1l","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"QmFzZSBDbGFzcyBEZXNjcmlwdG9yIGF0ICg=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"QkNyeXB0Q2xvc2VBbGdvcml0aG1Qcm92aWRlcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"QkNyeXB0R2VuUmFuZG9t","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"QkNyeXB0T3BlbkFsZ29yaXRobVByb3ZpZGVy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"QkVSIGRlY29kZSBlcnJvcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Ym9vdGZvbnQuYmlu","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"YnJva2VuIHBpcGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"QyRdJF5yXXYjZj1ffXdJQHBkOipwJmpNTE9ndio7YTc2XylQI2F6Syh2dHhwX3g6TVYwRiJaV2hLM1ddMjIwZjlhOWYtYTlhNi00MWIyLThkYmUtNmVlMGIwNWI4YTMy","type":"Ansi","source":"File String Dumps","process":null,"filename":"stats.js.map.x2anylock","compromised":null,"detection_total":null,"total":null},{"value":"Qypxdj5qZidLIUtnRHpHM1thLiBePi9PeionT1AsW24nMUNRe2p9RnlFSlB5S0MncDIyMGY5YTlmLWE5YTYtNDFiMi04ZGJlLTZlZTBiMDViOGEzMg==","type":"Ansi","source":"File String Dumps","process":null,"filename":"rcd-openbsd.tpl.x2anylock","compromised":null,"detection_total":null,"total":null},{"value":"JVBST0dSQU1GSUxFUyVcTWljcm9zb2Z0IFZpc3VhbCBTdHVkaW9cMjAyMlxDb21tdW5pdHlcVkNcdmNwa2dcYnVpbGR0cmVlc1xjcnlwdG9wcFxzcmNcVE9QUF84XzlfMC1hMWE5YmU0OTdlLmNsZWFuXGNoYWNoYV9hdnguY3Bw","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"JVBST0dSQU1GSUxFUyVcTWljcm9zb2Z0IFZpc3VhbCBTdHVkaW9cMjAyMlxDb21tdW5pdHlcVkNcdmNwa2dcYnVpbGR0cmVlc1xjcnlwdG9wcFxzcmNcVE9QUF84XzlfMC1hMWE5YmU0OTdlLmNsZWFuXGNoYWNoYV9zaW1kLmNwcA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"JVBST0dSQU1GSUxFUyVcTWljcm9zb2Z0IFZpc3VhbCBTdHVkaW9cMjAyMlxDb21tdW5pdHlcVkNcdmNwa2dcYnVpbGR0cmVlc1xjcnlwdG9wcFxzcmNcVE9QUF84XzlfMC1hMWE5YmU0OTdlLmNsZWFuXGRvbm5hXzMyLmNwcA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"JVBST0dSQU1GSUxFUyVcTWljcm9zb2Z0IFZpc3VhbCBTdHVkaW9cMjAyMlxDb21tdW5pdHlcVkNcdmNwa2dcYnVpbGR0cmVlc1xjcnlwdG9wcFxzcmNcVE9QUF84XzlfMC1hMWE5YmU0OTdlLmNsZWFuXGRvbm5hX3NzZS5jcHA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"JVBST0dSQU1GSUxFUyVcTWljcm9zb2Z0IFZpc3VhbCBTdHVkaW9cMjAyMlxDb21tdW5pdHlcVkNcdmNwa2dcYnVpbGR0cmVlc1xjcnlwdG9wcFxzcmNcVE9QUF84XzlfMC1hMWE5YmU0OTdlLmNsZWFuXHJpam5kYWVsX3NpbWQuY3Bw","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"JVBST0dSQU1GSUxFUyVcTWljcm9zb2Z0IFZpc3VhbCBTdHVkaW9cMjAyMlxDb21tdW5pdHlcVkNcdmNwa2dcYnVpbGR0cmVlc1xjcnlwdG9wcFxzcmNcVE9QUF84XzlfMC1hMWE5YmU0OTdlLmNsZWFuXHNoYV9zaW1kLmNwcA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"JVdJTkRJUiVcYm9vdHN0YXQuZGF0","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"JVdJTkRJUiVcU3lzdGVtMzJccGVyZmMwMDkuZGF0","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"JVdJTkRJUiVcU3lzdGVtMzJccGVyZmgwMDkuZGF0","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"JVdJTkRJUiVcU3lzdGVtMzJcUGVyZlN0cmluZ0JhY2t1cC5pbmk=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"JVdJTkRJUiVcVGVtcFw=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"JVdJTkRJUiVcV2luZG93c1VwZGF0ZS5sb2c=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Q2hhQ2hh","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Q2xhc3MgSGllcmFyY2h5IERlc2NyaXB0b3In","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Q2xvc2VIYW5kbGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Q2xvc2VTZXJ2aWNlSGFuZGxl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Q29DcmVhdGVJbnN0YW5jZQ==","type":"Ansi","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29DcmVhdGVJbnN0YW5jZUV4","type":"Ansi","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29HZXRDbGFzc09iamVjdA==","type":"Ansi","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29Jbml0aWFsaXpl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Q29tK0VuYWJsZWQ=","type":"Ansi","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29tbW9uIFN0YXJ0IE1lbnU=","type":"Ansi","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"Q29tcGFyZUZpbGVUaW1l","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Q29tcGFyZVN0cmluZ0V4","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Q29tcGFyZVN0cmluZ1c=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Q29tcGxldGUgT2JqZWN0IExvY2F0b3In","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Y29uZmlnLmpzb24=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Y29ubmVjdGlvbiBhYm9ydGVk","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Y29ubmVjdGlvbiBhbHJlYWR5IGluIHByb2dyZXNz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Y29ubmVjdGlvbiByZWZ1c2Vk","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Y29ubmVjdGlvbiByZXNldA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Q29udHJvbFNlcnZpY2U=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Q29yRXhpdFByb2Nlc3M=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Q29VbmluaXRpYWxpemU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlRmlsZVc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlVGhyZWFk","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlVG9vbGhlbHAzMlNuYXBzaG90","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Q3JlYXRlVnNzQmFja3VwQ29tcG9uZW50c0ludGVybmFs","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Q3J5cHRvZ3JhcGhpYyBhbGdvcml0aG1zIGFyZSBkaXNhYmxlZCBhZnRlciBhIHBvd2VyLXVwIHNlbGYgdGVzdCBmYWlsZWQu","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Q3J5cHRvTWF0ZXJpYWw6IHRoaXMgb2JqZWN0IGNvbnRhaW5zIGludmFsaWQgdmFsdWVz","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Q3J5cHRvTWF0ZXJpYWw6IHRoaXMgb2JqZWN0IGRvZXMgbm90IHN1cHBvcnQgcHJlY29tcHV0YXRpb24=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"ZGJlbmc1MC5leGU=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"ZGJzbm1wLmV4ZQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"RGVjb2RlUG9pbnRlcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"ZGVjcnlwdGlvbmRlc2NyaXB0aW9uLnBkZg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"RGVsZXRlQ3JpdGljYWxTZWN0aW9u","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"RGVyaXZlUHVibGljS2V5","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"RGVzY3JpcHRpb24=","type":"Ansi","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"ZGVzdGluYXRpb24gYWRkcmVzcyByZXF1aXJlZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"RW5hYmxlUGVyUHJvY2Vzc1N5c3RlbURQSQ==","type":"Ansi","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RW5jb2RlUG9pbnRlcg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"ZW5jcnlwdC5leGU=","type":"Ansi","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"ZW5jc3ZjLmV4ZQ==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"RW50ZXJDcml0aWNhbFNlY3Rpb24=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"RW51bURlcGVuZGVudFNlcnZpY2VzQQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"RW51bVN5c3RlbUxvY2FsZXNFeA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"RW51bVN5c3RlbUxvY2FsZXNX","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"ZXhjZWwuZXhl","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"ZXhlY3V0YWJsZSBmb3JtYXQgZXJyb3I=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"RXhpdFByb2Nlc3M=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"RXhpdFRocmVhZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"ZXh0LW1zLXdpbi1udHVzZXItZGlhbG9nYm94LWwxLTEtMA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"ZXh0LW1zLXdpbi1udHVzZXItd2luZG93c3RhdGlvbi1sMS0xLTA=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"ZVosTUwneTJwKHEkd30jVzk0NVhMSGxDSjIyMGY5YTlmLWE5YTYtNDFiMi04ZGJlLTZlZTBiMDViOGEzMg==","type":"Ansi","source":"File String Dumps","process":null,"filename":"adler32.js.x2anylock","compromised":null,"detection_total":null,"total":null},{"value":"RiVGMjIwZjlhOWYtYTlhNi00MWIyLThkYmUtNmVlMGIwNWI4YTMy","type":"Ansi","source":"File String Dumps","process":null,"filename":"allPass.js.x2anylock","compromised":null,"detection_total":null,"total":null},{"value":"ZjlteW1vL01fUm41cjdbTD08N0B4YjIyMGY5YTlmLWE5YTYtNDFiMi04ZGJlLTZlZTBiMDViOGEzMg==","type":"Ansi","source":"File String Dumps","process":null,"filename":"cleanPositionalOperators.js.x2anylock","compromised":null,"detection_total":null,"total":null},{"value":"ZkQ8ODIyMGY5YTlmLWE5YTYtNDFiMi04ZGJlLTZlZTBiMDViOGEzMg==","type":"Ansi","source":"File String Dumps","process":null,"filename":"package.json.x2anylock","compromised":null,"detection_total":null,"total":null},{"value":"RmluZENsb3Nl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"RmluZEZpcnN0RmlsZUV4Vw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"RmluZEZpcnN0RmlsZVc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"RmluZEZpcnN0Vm9sdW1lVw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"RmluZE5leHRGaWxlVw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"RmluZE5leHRWb2x1bWVX","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"RmluZFZvbHVtZUNsb3Nl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"ZmlyZWZveC5leGU=","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"RmxzQWxsb2M=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"RmxzRnJlZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"RmxzR2V0VmFsdWU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"RmxzR2V0VmFsdWUy","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"RmxzU2V0VmFsdWU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Rmx1c2hGaWxlQnVmZmVycw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"Rmx1c2hQcm9jZXNzV3JpdGVCdWZmZXJz","type":"Ansi","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"RnJlZUVudmlyb25tZW50U3RyaW5nc1c=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"RnJlZUxpYnJhcnk=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"RnJlZUxpYnJhcnlBbmRFeGl0VGhyZWFk","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"ZnVuY3Rpb24gbm90IHN1cHBvcnRlZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"RyNHKUcvRzVHOUdLR01HUUddR29HcUd9Rw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"ZzZ3TDBibiNXPUpBIWkvRH48RzIyMGY5YTlmLWE5YTYtNDFiMi04ZGJlLTZlZTBiMDViOGEzMg==","type":"Ansi","source":"File String Dumps","process":null,"filename":"oobe-button-template.html.x2anylock","compromised":null,"detection_total":null,"total":null},{"value":"R2BNPVNIMlROdilkIDdUa1JMeWA8cjZgMjIwZjlhOWYtYTlhNi00MWIyLThkYmUtNmVlMGIwNWI4YTMy","type":"Ansi","source":"File String Dumps","process":null,"filename":"bower.json.x2anylock","compromised":null,"detection_total":null,"total":null},{"value":"R2VuZXJhdGFibGVDcnlwdG9NYXRlcmlhbDogdGhpcyBvYmplY3QgZG9lcyBub3Qgc3VwcG9ydCBrZXkvcGFyYW1ldGVyIGdlbmVyYXRpb24=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"R2V0QUNQ","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"R2V0Q29tbWFuZExpbmVB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"R2V0Q29tbWFuZExpbmVX","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"R2V0Q29tcHV0ZXJOYW1lVw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"R2V0Q29uc29sZU1vZGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"R2V0Q29uc29sZU91dHB1dENQ","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"R2V0Q29uc29sZVdpbmRvdw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"R2V0Q1BJbmZv","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"R2V0Q3VycmVudFBhY2thZ2VJZA==","type":"Ansi","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"R2V0Q3VycmVudFByb2Nlc3M=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"R2V0Q3VycmVudFByb2Nlc3NJZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"R2V0Q3VycmVudFByb2Nlc3Nvck51bWJlcg==","type":"Ansi","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"R2V0Q3VycmVudFRocmVhZElk","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RGF0ZUZvcm1hdEV4","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RGF0ZUZvcm1hdFc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RHJpdmVUeXBlVw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RW52aXJvbm1lbnRTdHJpbmdzVw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RXhpdENvZGVUaHJlYWQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RmlsZUluZm9ybWF0aW9uQnlIYW5kbGVFeA==","type":"Ansi","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"R2V0RmlsZVNpemVFeA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"R2V0RmlsZVR5cGU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"R2V0TGFzdEVycm9y","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"R2V0TG9jYWxlSW5mb0V4","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"R2V0TG9jYWxlSW5mb1c=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"R2V0TW9kdWxlRmlsZU5hbWVX","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"R2V0TW9kdWxlSGFuZGxlQQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"R2V0TW9kdWxlSGFuZGxlRXhX","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"R2V0TW9kdWxlSGFuZGxlVw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"R2V0TmF0aXZlU3lzdGVtSW5mbw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"R2V0T0VNQ1A=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"R2V0UHJvY0FkZHJlc3M=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"R2V0UHJvY2Vzc0hlYXA=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"R2V0U3RhcnR1cEluZm9X","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"R2V0U3RkSGFuZGxl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"R2V0U3RyaW5nVHlwZVc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"R2V0U3lzdGVtVGltZUFzRmlsZVRpbWU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"R2V0U3lzdGVtVGltZVByZWNpc2VBc0ZpbGVUaW1l","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"R2V0VGVtcFBhdGgyVw==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"R2V0VGlja0NvdW50","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"R2V0VGlja0NvdW50NjQ=","type":"Ansi","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"R2V0VGltZUZvcm1hdEV4","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"R2V0VGltZUZvcm1hdFc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"R2V0VGltZVpvbmVJbmZvcm1hdGlvbg==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"R2V0VXNlckRlZmF1bHRMQ0lE","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"R2V0VXNlckRlZmF1bHRMb2NhbGVOYW1l","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"R2V0Vm9sdW1lUGF0aE5hbWVzRm9yVm9sdW1lTmFtZVc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"R1NoQkd9ZUtKLVxQRSwvYG12UVslX1EiOGhOQCxEZSJtblQ3SUJENzU2RDgmQEBkcUBzay0kMzIyMGY5YTlmLWE5YTYtNDFiMi04ZGJlLTZlZTBiMDViOGEzMg==","type":"Ansi","source":"File String Dumps","process":null,"filename":"LICENSE.x2anylock","compromised":null,"detection_total":null,"total":null},{"value":"SGVhcEFsbG9j","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"SGVhcEZyZWU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"SGVhcFF1ZXJ5SW5mb3JtYXRpb24=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"SGVhcFJlQWxsb2M=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"SGVhcFNpemU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"STJvKDIyMGY5YTlmLWE5YTYtNDFiMi04ZGJlLTZlZTBiMDViOGEzMg==","type":"Ansi","source":"File String Dumps","process":null,"filename":"str.js.x2anylock","compromised":null,"detection_total":null,"total":null},{"value":"SW1wb3J0YW50ISEhLnBkZg==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW5mb3BhdGguZXhl","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"SW5pdGlhbGl6ZUNyaXRpY2FsU2VjdGlvbkFuZFNwaW5Db3VudA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"SW5pdGlhbGl6ZUNyaXRpY2FsU2VjdGlvbkV4","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"SW5pdGlhbGl6ZVNMaXN0SGVhZA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"SW5pdE9uY2VFeGVjdXRlT25jZQ==","type":"Ansi","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SW5zdGFsbExhbmd1YWdlRmFsbGJhY2s=","type":"Ansi","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"SW50ZXJsb2NrZWRQdXNoRW50cnlTTGlzdA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"aW9zdHJlYW0gc3RyZWFtIGVycm9y","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"aXMgbm90IGEgdmFsaWQga2V5IGxlbmd0aA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"SXNEZWJ1Z2dlclByZXNlbnQ=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"SXNQcm9jZXNzb3JGZWF0dXJlUHJlc2VudA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"aXNxbHBsdXNzdmMuZXhl","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"SXNWYWxpZENvZGVQYWdl","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"SXNWYWxpZExvY2FsZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"SXNWYWxpZExvY2FsZU5hbWU=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"SXNXb3c2NFByb2Nlc3M=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"$55","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"SXRlcmF0ZWRIYXNoQmFzZTogaW5wdXQgZGF0YSBleGNlZWRzIG1heGltdW0gYWxsb3dlZCBieSBoYXNoIGZ1bmN0aW9u","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"SkFrenE3TGNnbm1AQzIyMGY5YTlmLWE5YTYtNDFiMi04ZGJlLTZlZTBiMDViOGEzMg==","type":"Ansi","source":"File String Dumps","process":null,"filename":"_Set.js.x2anylock","compromised":null,"detection_total":null,"total":null},{"value":"ampPLmp5c2svRklSMjIwZjlhOWYtYTlhNi00MWIyLThkYmUtNmVlMGIwNWI4YTMy","type":"Ansi","source":"File String Dumps","process":null,"filename":"_asciiWords.js.x2anylock","compromised":null,"detection_total":null,"total":null},{"value":"ak1qIy00YFJpKUxSOTlWc1AjfS8jZ1xFPC1TWVJLOldbZ35OQHgzPjoxQWtNOmF1XzxFIzsyMjBmOWE5Zi1hOWE2LTQxYjItOGRiZS02ZWUwYjA1YjhhMzI=","type":"Ansi","source":"File String Dumps","process":null,"filename":"package.json.x2anylock","compromised":null,"detection_total":null,"total":null},{"value":"TENJRFRvTG9jYWxlTmFtZQ==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"TENNYXBTdHJpbmdFeA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"TENNYXBTdHJpbmdX","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"TGVhdmVDcml0aWNhbFNlY3Rpb24=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"TG9hZExpYnJhcnlB","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"TG9hZExpYnJhcnlFeFc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"TG9jYWwgQXBwRGF0YQ==","type":"Ansi","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TG9jYWxlTmFtZVRvTENJRA==","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"TG9jYWxpemVkTmFtZQ==","type":"Ansi","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TG9jYWxpemVkU3RyaW5n","type":"Ansi","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TG9jYWxSZWRpcmVjdE9ubHk=","type":"Ansi","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"TG9jYWxTZXJ2aWNl","type":"Ansi","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"bHNhcG9saWN5bG9va3Vw","type":"Unicode","source":"Runtime Data","process":"encrypt.exe","filename":null,"compromised":null,"detection_total":null,"total":null},{"value":"bHN0cmNtcGlX","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"bHN0cmNtcFc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"bHN0cmxlbkE=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"bHN0cmxlblc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"TWlKQ3YySiEhQHFcfTIyMGY5YTlmLWE5YTYtNDFiMi04ZGJlLTZlZTBiMDViOGEzMg==","type":"Ansi","source":"File String Dumps","process":null,"filename":"lte.js.x2anylock","compromised":null,"detection_total":null,"total":null},{"value":"bWlua2VybmVsXGNydHNcdWNydFxpbmNcY29yZWNydF9pbnRlcm5hbF9zdHJ0b3guaA==","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"TW92ZUZpbGVFeFc=","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"TW92ZUZpbGVX","type":"Ansi","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"value":"TW96aWxsYSBGaXJlZm94","type":"Unicode","source":"Memory/File Scan","process":null,"filename":"encrypt.exe","compromised":null,"detection_total":null,"total":null},{"va